Skip to content

Bump @linearb/gitstream-core to 2.1.293#552

Merged
nivSwisa1 merged 1 commit into
developfrom
bump-gitstream-core-to-2.1.293
Jul 21, 2026
Merged

Bump @linearb/gitstream-core to 2.1.293#552
nivSwisa1 merged 1 commit into
developfrom
bump-gitstream-core-to-2.1.293

Conversation

@linearbci

Copy link
Copy Markdown
Collaborator

LINBEE-26978 Phase 2 (decode side). Pairs with the gitstream-sls-pipeline stack (#2987 → #2990 → #2991 → #2992).

https://linearb.atlassian.net/browse/LINBEE-26978

  • When is a reference envelope (), fetch the stashed blob from the resolver payload endpoint () and inflate via .
  • Inert for plain/gzip payloads — GitHub, GitLab, and existing Bitbucket flows unaffected.

Deploy order (decode-first): this must ship to the rules-engine image before the pipeline flag is flipped on, so the engine can decode a reference before any trigger emits one. Safe to merge first (backward-compatible).

✨ PR Description

Purpose: Enable fetching and decompressing oversized Bitbucket webhook payloads stored server-side to support larger client_payload references.

Main changes:

  • Added parsePayloadReference utility to detect and extract fetch coordinates from stashed payload references
  • Implemented loadReferencedPayload function that fetches remote payloads before processing with axios and Bearer token authentication
  • Integrated payload loading into runCI initialization pipeline with base64/gzip decompression support

CHANGELOG

✨ New Features

  • Support for handling oversized webhook payloads stored server-side instead of inline

🔧 Improvements

  • Optimized payload handling to automatically fetch and decompress large payloads transparently during CI runs

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Description using Guidelines Learn how

@linearbci linearbci added the auto-deploy when exists in PR, will auto make release and auto deploy to prod label Jul 21, 2026
@linearbci
linearbci requested a review from nivSwisa1 July 21, 2026 12:12

@orca-security-us orca-security-us Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Orca Security Scan Summary

Status Check Issues by priority
Passed Passed Infrastructure as Code high 0   medium 0   low 0   info 0 View in Orca
Passed Passed OSS Licenses high 0   medium 0   low 0   info 0 View in Orca
Passed Passed SAST high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Secrets high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Vulnerabilities high 0   medium 2   low 0   info 0 View in Orca
☢️ The following Vulnerabilities (CVEs) have been detected
PACKAGE FILE CVE ID INSTALLED VERSION FIXED VERSION
high js-yaml ./package-lock.json CVE-2026-59869 4.2.0 3.15.0, 4.3.0 View in code
high shell-quote ./package-lock.json CVE-2026-13311 1.8.4 1.9.0 View in code

@linearb linearb Bot added the 1 min review label Jul 21, 2026
@nivSwisa1
nivSwisa1 merged commit 29a2496 into develop Jul 21, 2026
13 checks passed
@nivSwisa1
nivSwisa1 deleted the bump-gitstream-core-to-2.1.293 branch July 21, 2026 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1 min review auto-deploy when exists in PR, will auto make release and auto deploy to prod

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants