fix(webhook): replace hooks when signing secret changes #113
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/webhook-secret-rotation"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Forgejo 16 accepts webhook secret edits but does not apply them. Replace the hook when its HMAC secret changes, and roll back the replacement if old-hook removal fails.
The exact head has a green pipeline/ci result. This PR targets the integration branch.