fix: add missing ownership checks in projects API (GHSA-rpf3-3973-4gjr)#12462

Merged

carlosrcoelho merged 9 commits into

release-1.9.0from

fix/project-flow-ownership-check

Apr 8, 2026

Commits on Apr 2, 2026

fix: enforce ownership check on flow assignment and paginated project read (GHSA-rpf3-3973-4gjr)
andifilhohub
committed

Commits on Apr 7, 2026

test: add security regression tests for GHSA-rpf3-3973-4gjr
andifilhohub
committed
test: improve security test naming and style for project ownership checks
andifilhohub
committed
merge: resolve conflict with release-1.9.0 in test_projects.py
andifilhohub
committed
[autofix.ci] apply automated fixes
autofix-ci[bot]
authored
fix: address ruff linting errors in ownership security tests
andifilhohub
committed
test: add coverage for legitimate flows_list and paginated read assignments
andifilhohub
committed
Merge branch 'release-1.9.0' into fix/project-flow-ownership-check
carlosrcoelho
authored

Commits on Apr 8, 2026

Merge branch 'release-1.9.0' into fix/project-flow-ownership-check
carlosrcoelho
authored