Skip to content

Merge develop into infrahub-release-1.12 - #1476

Draft
infrahub-github-bot-app[bot] wants to merge 9 commits into
infrahub-release-1.12from
develop
Draft

infrahub-github-bot-app[bot] wants to merge 9 commits into
infrahub-release-1.12from
develop

Conversation

@infrahub-github-bot-app

@infrahub-github-bot-app infrahub-github-bot-app Bot commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Merging develop into infrahub-release-1.12 after merging pull request #1457.

View guided diff Turn on auto-fix

dependabot Bot and others added 7 commits October 26, 2026 09:15
Bumps [infrahub-testcontainers](https://github.com/opsmill/infrahub) from 1.11.8 to 1.11.9.
- [Release notes](https://github.com/opsmill/infrahub/releases)
- [Changelog](https://github.com/opsmill/infrahub/blob/stable/CHANGELOG.md)
- [Commits](opsmill/infrahub@infrahub-v1.11.8...infrahub-v1.11.9)

---
updated-dependencies:
- dependency-name: infrahub-testcontainers
  dependency-version: 1.11.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…estcontainers-1.11.9

chore(deps-dev): bump infrahub-testcontainers from 1.11.8 to 1.11.9
graphql-core 3.2.12 fixes two denial-of-service CVEs: CVE-2026-75507 in
OverlappingFieldsCanBeMergedRule, which `infrahubctl graphql
generate-return-types` runs through `specified_rules`, and CVE-2026-75508
in the parser's `max_tokens` count. The old floor (>=3.1) still let SDK
users install an affected release. Raise it to >=3.2.12 and keep <3.3,
which graphene in Infrahub still blocks.

The lockfile is regenerated with uv 0.9.8, the version CI uses for
`uv lock --locked`, so only the graphql-core entry changes.

Refs INBOX-393.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Adds the role of stable, develop, infrahub-release-x.y and
infrahub-develop, which Infrahub branch pins each one, and the order in
which the bot syncs them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(agents): describe the SDK branches and how they sync [IFC-3497]
* docs(specs): add spec, plan and tasks for generic peer HFID references in object files

* test(spec): add generic peer schema fixtures for object file tests

* feat(spec): classify kind+hfid references to generic peers in object files

* feat(spec): load kind+hfid references to generic peers in object files

* feat(spec): resolve HFID-only references to generic peers in object files

* feat(spec): validate kind+hfid peer references in object files against the schema

* docs(spec): document generic peer references in object files

* fix(spec): keep named-kind schema for nested objects on generic peers and clarify reference errors

* docs(specs): add implementation report for generic peer HFID references

* fix(spec): resolve HFID-only generic peer references to node ids

- Search only node kinds, so profile and template kinds in the generic's
  used_by no longer make client.get raise a ValueError.
- Send the id of the matching node, so released servers fill computed
  attributes and do not look the node up again.
- Send a plain string as before when the generic has a default_filter.
- Name the list item in errors for cardinality-many relationships.
- Mention data: when a dict has kind and other keys but no hfid.
- Remove the unused normalize_hfid_references helper.
- Mock GraphQL with httpx_mock in the HFID-only tests.

* docs(specs): replace en and em dashes in generic peer HFID spec

* chore(review): address review nitpicks
Merge stable into develop
@infrahub-github-bot-app
infrahub-github-bot-app Bot requested a review from a team as a code owner November 3, 2026 18:17
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

Deploying infrahub-sdk-python with  Cloudflare Pages  Cloudflare Pages

Latest commit: 18e2751
Status: ✅  Deploy successful!
Preview URL: https://26a8f0ff.infrahub-sdk-python.pages.dev
Branch Preview URL: https://develop.infrahub-sdk-python.pages.dev

View logs

dependabot Bot and others added 2 commits November 5, 2026 14:36
Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.10.5 to 2026.10.19.
- [Commits](certifi/python-certifi@2025.10.05...2026.10.19)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.10.19
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Merge stable into develop
@polmichel
polmichel marked this pull request as draft November 5, 2026 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants