* feat(git-sync): let GitHub webhooks register a dedicated base url
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): validate the webhook base url and apply it on change
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* chore: pin ee ref for the git-sync webhook base url change
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): validate and reconcile the webhook base url on every write path
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): route every declarative settings writer through the same rules
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): let the reconciler own the webhook field write-back
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): make the webhook base url validators agree across UI and server
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): lock the workspace row across git_sync read-modify-writes
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* test: pin the webhook base url validator to its server counterpart
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): retry a failed webhook move on every re-apply of the setting
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): retry pending webhook moves on every declarative re-apply
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): reject non-string webhook base urls and bound the sweep
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): reject credential-bearing webhook base urls
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): keep credentials out of webhook base url validation errors
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): redact through the last authority @ when reporting a bad url
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): stop echoing unparsed webhook base urls instead of scrubbing them
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): never echo a submitted webhook base url in validation errors
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): keep the submitted scheme out of validation errors
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* refactor(git-sync): drop the webhook sweep, surface stale receivers in settings
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): refresh the stale webhook list when settings are saved
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): mark registered_url nullable and drop the duplicated field error
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* chore: pin ee ref after dropping the reconcile lock and CAS
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(git-sync): refresh the stale webhook list on category saves too
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* chore: update ee-repo-ref to aa05ca8e97fc8265cd724753a80db37f83243254
This commit updates the EE repository reference after PR #695 was merged in windmill-ee-private.
Previous ee-repo-ref: 3e6cd9226b68707233ae2434511fe5131dce808b
New ee-repo-ref: aa05ca8e97fc8265cd724753a80db37f83243254
Automated by sync-ee-ref workflow.
---------
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
