v0.6.6#1311
Merged
Merged
Conversation
Bumps the npm_and_yarn group with 1 update in the /tools/psoxy-test directory: [form-data](https://github.com/form-data/form-data). Bumps the npm_and_yarn group with 1 update in the /tools/schema-tool directory: [tar](https://github.com/isaacs/node-tar). Updates `form-data` from 2.5.5 to 2.5.6 - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v2.5.5...v2.5.6) Updates `tar` from 7.5.15 to 7.5.16 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.15...v7.5.16) --- updated-dependencies: - dependency-name: form-data dependency-version: 2.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.16 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Erik Schultink <eschultink@users.noreply.github.com>
Restore non-user message textDigest and broaden user-message detection to include author.type/role alongside actor.type. Rules update #1296 removed assistant-message digesting and narrowed user detection to actor.type only, allowing PII to pass through in compliance log exports. Add regression tests for assistant messages and author.role-only authorship. Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Erik Schultink <eschultink@users.noreply.github.com>
* Pass GCP project number into bulk connector module to avoid per-instance drift. The gcp-proxy-bulk module only needed project.number for secret env vars; hoist that lookup to the parent gcp module and pass it in so each bulk connector no longer triggers its own data.google_project read during apply. Co-authored-by: Cursor <cursoragent@cursor.com> * Pass gcp_project object to GCP connector modules to avoid per-instance drift. Hoist the data.google_project lookup to the gcp module and pass project_id and number together into bulk, API, and webhook connector modules, matching provider attribute names. Co-authored-by: Cursor <cursoragent@cursor.com> * Use plan-time project_id for Cloud Function secret env vars. Secret Manager accepts the project id string, so referencing gcp_project.project_id instead of number avoids apply-time unknowns from data.google_project. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Cursor <cursoragent@cursor.com>
* Improve RULES parse logging with sha1 and YAML snippet.
Makes startup logs easier to debug by identifying which rules loaded and avoiding JUL {0} placeholders that some log sinks render literally.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Fix bulk connector plan when provision_testing_infra is false.
Replace coalesce() on nullable testing role ARNs with explicit fallbacks, and add aws-host/aws-proxy-bulk terraform tests for the disabled-testing path.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Run terraform tests for all modules that define them in CI.
Add aws, aws-host, aws-proxy-bulk, gcp-proxy-api, and gcp-webhook-collector to the module test matrix, with small fixes so aws and gcp-proxy-api tests plan cleanly.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Fix sensitive for_each in AWS secret modules and expand testing-infra tests.
Derive SSM/Secrets Manager for_each keys from non-sensitive metadata only, and cover both enabled and disabled provision_testing_infra paths in aws-host and aws-proxy-bulk tests.
Co-authored-by: Cursor <cursoragent@cursor.com>
* Fix gcp-webhook-collector module test and reduce CI matrix fail-fast noise.
Use ternary validation for provision_auth_key.rotation_days (Terraform does not short-circuit ||), set explicit rotation_days in the ip-lock test, and disable fail-fast so unrelated matrix jobs are not canceled.
Co-authored-by: Cursor <cursoragent@cursor.com>
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
* Fix release publish workflow and prune SNAPSHOT packages after release. Co-authored-by: Cursor <cursoragent@cursor.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Feed JSON to jq via here-strings in delete-gh-maven-packages Avoid echo|jq pipelines that can mangle backslashes in JSON payloads. Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
eschultink
requested review from
aperez-worklytics,
Copilot,
jlorper and
parkcoll
and removed request for
Copilot
parkcoll
approved these changes
Jun 18, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
v0.6.6 back to main
Test Plan
AWS
cd infra/examples-dev/aws ./apply ./test-all.shConfirm everything worked:
GCP
cd infra/examples-dev/gcp ./apply ./test-all.shConfirm everything worked:
Next steps, after that's merged to
main:./tools/release/publish.sh v0.6.6