fix: return 404 for update feeds when update server is disabled (#589) #599

Merged
jmiller merged 1 commits from fix/589-feed-disabled-check into main 2026-06-11 21:12:45 +00:00
Owner

Summary

  • Feed endpoints (/updates.xml, etc.) now return 404 when the update server is disabled
  • RepoAssignmentPublicFeed middleware checks LicensingEnabled on the effective config (repo → org cascade)
  • Previously, feeds responded with valid data even when the feature was toggled off

Changes

  • services/context/repo_public_feed.go: Replace GetRepoConfig with GetEffectiveConfig, check LicensingEnabled before allowing access

Closes #589

## Summary - Feed endpoints (`/updates.xml`, etc.) now return 404 when the update server is disabled - `RepoAssignmentPublicFeed` middleware checks `LicensingEnabled` on the effective config (repo → org cascade) - Previously, feeds responded with valid data even when the feature was toggled off ## Changes - `services/context/repo_public_feed.go`: Replace `GetRepoConfig` with `GetEffectiveConfig`, check `LicensingEnabled` before allowing access Closes #589
jmiller added 1 commit 2026-06-11 20:44:11 +00:00
fix: return 404 for update feeds when update server is disabled (#589)
Generic: Repo Health / Scripts governance (push) Blocked by required conditions
Generic: Repo Health / Repository health (push) Blocked by required conditions
Generic: Repo Health / Report Issues (push) Blocked by required conditions
Generic: Repo Health / Site Health (push) Has been skipped
Generic: Repo Health / Access control (push) Successful in 1s
Universal: PR Check / Build RC Package (pull_request) Blocked by required conditions
Universal: PR Check / Report Issues (pull_request) Blocked by required conditions
Generic: Repo Health / Scripts governance (pull_request) Blocked by required conditions
Generic: Repo Health / Repository health (pull_request) Blocked by required conditions
Generic: Repo Health / Report Issues (pull_request) Blocked by required conditions
Generic: Repo Health / Site Health (pull_request) Has been skipped
Branch Policy Check / Verify merge target (pull_request) Failing after 1s
Universal: PR Check / Branch Policy (pull_request) Failing after 1s
Generic: Repo Health / Access control (pull_request) Successful in 1s
Universal: PR Check / Validate PR (pull_request) Failing after 8s
PR RC Release / Build RC Release (pull_request) Failing after 1m3s
Universal: Secret Scanning / Gitleaks Secret Scan (pull_request) Successful in 1m6s
Universal: Build & Release / Promote to RC (pull_request) Has been skipped
RC Revert / Rename rc/ back to dev/ (pull_request) Has been skipped
Branch Cleanup / Delete merged branch (pull_request) Successful in 2s
Universal: Build & Release / Build & Release Pipeline (pull_request) Failing after 33s
7f3785e7de
The RepoAssignmentPublicFeed middleware did not check LicensingEnabled,
so feed endpoints responded with valid data even when the feature was
disabled. Now checks the effective config (repo → org cascade) and
returns 404 when neither level has LicensingEnabled=true.

Co-Authored-By: Moko Consulting <hello@mokoconsulting.tech>
jmiller merged commit 2c394870de into main 2026-06-11 21:12:45 +00:00
jmiller deleted branch fix/589-feed-disabled-check 2026-06-11 21:12:46 +00:00
Sign in to join this conversation.