-
Onebox v33.15.1
StableRelease / build-and-release (push) Failing after 31m56sreleased this
2026-10-08 20:12:01 +00:00 | 23 commits to main since this release2026-10-08 - 33.15.1
Fixes
- An App Store upgrade of a hosted app with platform OIDC enabled before 33.15.0 is no longer refused with
Disable platform OIDC before upgrading across an OIDC contract changewhen the target keeps the same OIDC contract (seen ononebox appstore upgrade cloudly1.27.0 → 1.28.0). The registration keeps the roles and environment variable names in the member order the template was written in; the verified catalog 33.15.0 reads carries the same contract in canonical (sorted) member order, and the check compared the two as JSON text. It now compares the contract itself (getPlatformOidcContractKey): independent of member order and of role order (role ids are unique; tokens carry them sorted), every member still compared, the redirect path normalized the same way on both sides. A removed, added or renamed role, a changed role label or description, a renamed or swapped environment variable, another redirect path or another client authentication method is still refused.
Downloads
- An App Store upgrade of a hosted app with platform OIDC enabled before 33.15.0 is no longer refused with