Name the allow-list this PUT actually goes through, and rebuild on it

DocsSecurityService
Shipped
September 4, 2026 at 6:01 AM UTC
Author
Kamo
Commit
6cd0b7d

Two things, one of which is the point of the commit. The comment: patchOrganization is an ALLOW-LIST and it lives in the shared library, not here. This controller happily deserializes any field onto `patch`, so a name that method does not list is accepted with a 200 and silently never stored — no error, no log line, no failed validation. The only symptom is a settings toggle that reverts on its next load. Adding a column to Organization is therefore never enough by itself, and nothing in this file said so. The rebuild: this service needs the shared library that now lists careersSiteEnabled and careersNetworkOptIn, and that carries the system_bug.published column default. Neither reaches production without a new image, and a shared-library-only rebuild reuses the same tag — CI goes green having deployed nothing. This commit gives the build a new sha to tag with.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing