Skip to content

Bump @linearb/gitstream-core to 2.1.287#541

Closed
linearbci wants to merge 1 commit into
developfrom
bump-gitstream-core-to-2.1.287
Closed

Bump @linearb/gitstream-core to 2.1.287#541
linearbci wants to merge 1 commit into
developfrom
bump-gitstream-core-to-2.1.287

Conversation

@linearbci

Copy link
Copy Markdown
Collaborator

✨ PR Description

Purpose: Add support for custom environment variables in playground mode to safely expose user-provided secrets without leaking backend process.env.

Main changes:

  • Added customEnv parameter to RuntimeOptions and setCustomEnv/getCustomEnv/applyPlaygroundEnv functions in playground utilities
  • Integrated applyPlaygroundEnv call in executeOneRuleFile and executeParser to inject user env into rule execution context
  • Added test coverage verifying playground exposes only user-provided env, never backend secrets

CHANGELOG

✨ New Features

  • Playground now supports custom environment variables

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using.
💡 Tip: You can customize your AI Description using Guidelines Learn how

@linearbci linearbci added the auto-deploy when exists in PR, will auto make release and auto deploy to prod label Jun 16, 2026
@linearbci linearbci requested a review from MishaKav June 16, 2026 13:04

@orca-security-us orca-security-us Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Orca Security Scan Summary

Status Check Issues by priority
Passed Passed Infrastructure as Code high 0   medium 0   low 0   info 0 View in Orca
Passed Passed OSS Licenses high 0   medium 0   low 0   info 0 View in Orca
Passed Passed SAST high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Secrets high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Vulnerabilities high 0   medium 2   low 0   info 0 View in Orca
☢️ The following Vulnerabilities (CVEs) have been detected
PACKAGE FILE CVE ID INSTALLED VERSION FIXED VERSION
high form-data ./package-lock.json CVE-2026-12143 4.0.5 2.5.6, 3.0.5, 4.0.6 View in code
high shell-quote ./package-lock.json CVE-2026-9277 1.8.3 1.8.4 View in code

@MishaKav MishaKav closed this Jun 16, 2026
@MishaKav MishaKav deleted the bump-gitstream-core-to-2.1.287 branch June 16, 2026 13:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-deploy when exists in PR, will auto make release and auto deploy to prod

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants