chore(release): 破坏性授权变更 changeset 提级 major + v15 升级指南 - #2950
Merged
Conversation
… guide The ADR-0095 authz kernel chain carries breaking behavior changes for multi-org deployments (Layer 0 tenant isolation, member write narrowing, cross-tenant write guard, org-admin private-object narrowing, tenant_isolation retirement). Bump the three breaking @objectstack/plugin-security changesets from minor to major; additive changesets (A3/A4/A5/C2/posture/#2936) keep their level and follow the major via dependent bumps. Add content/docs/releases/v15.mdx as the upgrade guide. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019QRUvVfpvSycAHMMF2xTxs
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
github-actions
Bot
added
documentation
os-zhuang
marked this pull request as ready for review
July 15, 2026 05:04
6 tasks
os-zhuang
pushed a commit
that referenced
this pull request
Jul 15, 2026
…major in the v16 release PR The check-changeset-no-major gate enforces the v15 flow (#2950 precedent): feature PRs land breaking changesets as minor; the release PR promotes to major and adds the vN.mdx upgrade guide. Owner confirmed option A. The changeset body now carries the promotion note. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UQjM9nQiF8DRQ3XhuWktHp
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
目的
把 ADR-0095 授权内核链这批破坏性行为变更在 changeset 层正确标记为 major，并落一份升级指南。此前各 changeset 标 minor/patch，但正文明确写 BREAKING（限多组织部署）——本 PR 让版本级别与实际破坏性一致，据此发 major。
改动
changeset 提级（
@objectstack/plugin-securityminor → major）：.changeset/adr-0095-d1-tenant-layer-0.md— Layer 0 租户隔离 + 4 处 delta（成员写收窄、跨租户读封堵、全局对象、无组织写）.changeset/authz-2937-insert-tenant-guard.md— 伪造 org_id 的 insert 被拒.changeset/authz-tenant-write-wall-fix.md— 跨租户 UPDATE 写被堵 + org_admin 越 private 对象墙收窄保持原级（additive / 同可见性加固，由 changesets 让 dependents 自动跟随 plugin-security 的 major）：A3/A4/A5/C2-α/C2-β/posture/#2936/self-deleg/explain-posture。
升级指南：
content/docs/releases/v15.mdx（+ meta.json 加入 v15）——按「破坏性（仅多组织 / 企业层级）/ 非破坏加固 / 纯增量 / 升级检查清单」分类，含迁移动作与「企业环境 e2e 冒烟仍欠」的诚实提示。说明
@objectstack/security-enterprisemajor）在 cloud 侧单独 PR 提级。关联 framework#2920 · ADR-0095。
🤖 Generated with Claude Code
https://claude.ai/code/session_019QRUvVfpvSycAHMMF2xTxs
Generated by Claude Code