Skip to content

fix(guard): case-insensitive repo lookup + no silent ownership-grab - #672

Open
yggdrasilworld wants to merge 1 commit into
MergeFi:mainfrom
yggdrasilworld:fix/repo-scope-564-565
Open

yggdrasilworld wants to merge 1 commit into
MergeFi:mainfrom
yggdrasilworld:fix/repo-scope-564-565

Conversation

@yggdrasilworld

Copy link
Copy Markdown

What

Resolves #564, #565

- MergeFi#564: the fullName lookup was case-sensitive while isAllowlisted
  lowercases — GitHub names are case-insensitive, so Owner/Repo vs
  owner/repo resolved differently. Match with ILike.
- MergeFi#565: an unclaimed tracked repo was silently assigned to the first
  maintainer to sync it ('lets the first claimant take it'). Ownership
  shouldn't be a sync side-effect — allow the sync, keep it unassigned.

Resolves MergeFi#564, MergeFi#565
@vercel

vercel Bot commented Oct 14, 2026

Copy link
Copy Markdown

@yggdrasilworld is attempting to deploy a commit to the chonilius' projects Team on Vercel.

A member of the Team first needs to authorize it.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RepoScopeGuard looks up fullName case-sensitively, so changing the owner/repo casing bypasses the maintainer lock

1 participant