Repository navigation

fix: six small scheduled-auth, CI, OpenAPI and IaC fixes - #1127

Merged

cristim merged 12 commits into

mainfrom

fix/backend-infra-xs-batch

Oct 20, 2026

Merged

fix: six small scheduled-auth, CI, OpenAPI and IaC fixes#1127
cristim merged 12 commits into
mainfrom
fix/backend-infra-xs-batch

Commits on Oct 19, 2026
- fix(auth): require https for the scheduled-task OIDC JWKS URL
  
  cristim
  and
  claude
  committed
  123d52e
- fix(ci): allowlist deploy job results in the deploy-all failure check
  
  cristim
  and
  claude
  committed
  dec204f
- fix(api): make two openapi schemas valid for the declared 3.0.3 dialect
  
  cristim
  and
  claude
  committed
  c131314
- fix(iac): point AKS DB_PASSWORD_SECRET at the Secret's real key
  
  cristim
  and
  claude
  committed
  1f71ac6
- docs(iac): fix the lambda function_url_auth_type description
  
  cristim
  and
  claude
  committed
  9f2c499
- docs(iac): correct the Key Vault ACL comment in the azure environment
  
  cristim
  and
  claude
  committed
  8a95182
- docs(known-issues): move resolved OpenAPI dialect doc
  
  cristim
  and
  claude
  committed
  8a56938
- test(auth): cover loopback lookalikes in the JWKS URL check
  
  cristim
  and
  claude
  committed
  58a0495
- fix(ci): require success for selected deploy jobs in deploy-all
  
  cristim
  and
  claude
  committed
  d49b3da
- test(auth): reject non-loopback IP literals in the JWKS URL check
  
  cristim
  and
  claude
  committed
  67e323d
- test(iac): assert the AKS DB password secret key exists in the Secret
  
  cristim
  and
  claude
  committed
  1b1e4b9
- fix(api): accept null last_collection_partial under OpenAPI 3.0.3
  
  cristim
  and
  claude
  committed
  9c49846