Pin the status-label body an org sends to drop a label

TestSecurityService
Shipped
September 2, 2026 at 2:54 AM UTC
Author
Kamo
Commit
24b0ef1

The two shapes that used to fail: an empty list, which is what clearing the last remaining label sends and what the handler rejected as malformed, and an entry carrying a blank label, which is the removal itself and must reach the service rather than be filtered out on the way in. A body with no labels key at all is still a 400, and an unauthenticated caller still gets 401 without the service being touched — both asserted here so the looser body parsing does not quietly loosen the guard rail with it.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing