Repository navigation
Allow owners to update pending extension submissions - #295
Conversation
Replace pending submissions atomically with a fresh revision identity, preserving published content and rejecting stale edits and review actions. Cover concurrency, rollback, ownership, validation, and rate admission.
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
api | da0094f | Nov 05 2026, 12:02 PM |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
All reported issues were addressed across 5 files
Reply with feedback, questions, or to request a fix.
Turn on auto-fix | Re-trigger cubic
There was a problem hiding this comment.
0 issues found across 4 files (changes from recent commits).
Requires human review: Adds a new owner-only PUT endpoint to replace pending extension revisions, with tests and README updates. This expands the public API surface and changes pending-revision ownership/attribution policy, so a human should decide whether this is the intended contract.
Turn on auto-fix | Re-trigger cubic
There was a problem hiding this comment.
0 issues found across 3 files (changes from recent commits).
Requires human review: Adds a new owner-only PUT endpoint for replacing pending extension revisions and reworks documentation. The docs issue was fixed, but this still expands the public API surface and changes pending-revision attribution and moderation semantics, which need human approval.
Turn on auto-fix | Re-trigger cubic
Owners can update a pending extension submission instead of waiting for a review decision. Add
PUT /extensions/{id}/revisions/{revisionId}, accepting the full manifest-compatible content body and returning a fresh pending revision ID.Replacement is atomic and restricted to the active owner at the current ownership epoch. The published listing and reviewed history stay unchanged. Rotating the ID rejects stale owner edits and stale moderator decisions; failed insertion or write admission restores the original pending revision. The endpoint uses the existing content validation, request bounds, and rate limits.
Companion UI: FOSSBilling/extensions#407. Deploy this endpoint before the extensions UI's pending-update feature. This PR adds no migrations or bindings.