Andras Bacsai 5a7408a919 fix(github): improve GitHub App setup and installation flow ...

- resolve the GitHub App by a stable identifier during installation
  callbacks so installing and re-installing keeps working over the
  full lifetime of the App
- verify the installation id received from the callback against the
  GitHub API before persisting it
- support re-installing an already configured GitHub App instead of
  blocking it
- require an authenticated session and rate limit the setup callback
  routes
- extend manifest setup state validity to match GitHub's manifest
  code lifetime

Adds feature coverage for the GitHub App setup and installation
callbacks.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-22 16:34:36 +02:00

..

Concerns

fix(webhook): match manual webhook repositories case-insensitively

2026-05-22 15:59:20 +02:00

Bitbucket.php

fix(webhook): match manual webhook repositories exactly

2026-05-22 15:32:44 +02:00

Gitea.php

fix(webhook): match manual webhook repositories exactly

2026-05-22 15:32:44 +02:00

Github.php

fix(github): improve GitHub App setup and installation flow

2026-05-22 16:34:36 +02:00

Gitlab.php

fix(webhook): match manual webhook repositories exactly

2026-05-22 15:32:44 +02:00

Stripe.php

feat(observability): add structured audit log channel for API and webhook events

2026-04-28 14:50:37 +02:00