chore(deps): upgrade @objectstack 9.11.0 → 10.0.0#74
Merged
Conversation
Bump every template's @objectstack/* deps and the workspace minimumReleaseAgeExclude pins to 10.0.0. The 10.0 major lands ADR-0057 (ERP authorization core) + ADR-0058 (unified CEL→filter predicate surface). Evaluated impact on the templates: - Breaking rename sys_department → sys_business_unit (no alias): no template references the old object, and none use hierarchy-relative access-depth scopes, so no migration was required. - ADR-0058 routes criteria sharing-rule conditions through the same CEL compiler as formula/validation predicates (record bound under `record`). packages/content's topic_team_scope rule needed the one code change: `visibility == "team"` → `record.visibility == "team"` (a bare field reference is now a build error). Verified end-to-end against the composed `all` env (9 apps, 41 objects, 30 flows): typecheck + build + format:check + test green; clean boot with `seeded on empty DB` and zero server ERROR lines; console (home, content_topic list, ROI dashboard KPIs + time-series) renders with no client console errors; authorization core live — sys_business_unit resolves, sys_department 404s, and stack-declared roles (21) + sharing rules (2) seeded into sys_role / sys_sharing_rule. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
xuyushun441-sys
force-pushed
the
chore/upgrade-objectstack-10.0.0
branch
from
7ead059 to
6af23d9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Upgrade every template's
@objectstack/*deps and the workspaceminimumReleaseAgeExcludepins from^9.11.0to^10.0.0.Upgrade-note evaluation (9 → 10)
The 10.0 major bundles two ADRs:
sys_department→sys_business_unit(no compatibility alias), adds permission-grant access depth (own/own_and_reports/unit/unit_and_below/org), and seeds stack-declaredroles/sharingRulesintosys_role/sys_sharing_ruleat boot. Hierarchy-relative scopes requirerequires: ['hierarchy-security'].Impact assessment: No template references
sys_department, none use hierarchy-relative access-depth scopes, and no template uses raw RLSusing/check. So the headline rename needed no migration.The one adjustment
ADR-0058 binds the record under the
recordnamespace for sharing-rule conditions, so a bare field reference is now a build error.packages/content'stopic_team_scoperule was rewritten:(
packages/hr'stime_off_hr_admin_visibilityuses the constanttrue, so it was unaffected.)Verification
End-to-end against the composed
allenv (9 apps, 41 objects, 30 flows):pnpm -r typecheck,pnpm -r build,pnpm format:check,pnpm -r test— all green.Server is ready·seeded on empty DB· zero serverERRORlines · 33 plugins.content_topiclist (8 seed rows, grouped), ROI dashboard (KPIs 14040/708/87/21150 + bar chart + 90-day time-series) — no client console errors, no failed network requests.sys_business_unitresolves,sys_department→ 404 (rename, no alias), and stack-declared roles (21) + sharing rules (2:topic_team_scope,time_off_hr_admin_visibility) seeded intosys_role/sys_sharing_rule.🤖 Generated with Claude Code