[HDX-4173] Redact sensitive fields from internal webhook API responses - #2239

Merged

kodiakhq[bot] merged 12 commits into

mainfrom

dan/hdx-4173-webhook-secret-fix

May 11, 2026

Commits on May 8, 2026

fix: redact sensitive fields from internal webhook API responses [HDX-4173]
dhable
committed
288c2df
fix: resolve CI failures — use $unset for cleared map fields, fix E2E locator ambiguity
dhable
committed
b2961c9
fix: harden masked-URL detection and resolve masked fields for test webhook
dhable
committed
fdde013
fix: address deep review — exfiltration guards, type safety, test coverage
dhable
committed
9660175
fix: use separate team ObjectId in cross-team test instead of double registration
dhable
committed
a3a85ad
fix: close omitted-field exfiltration — skip merge when URL changes
dhable
committed
4989340
Merge branch 'main' into dan/hdx-4173-webhook-secret-fix
teeohhem
authored
ce13724
Merge branch 'main' into dan/hdx-4173-webhook-secret-fix
dhable
authored
f577f97
Merge branch 'main' into dan/hdx-4173-webhook-secret-fix
dhable
authored
8464643
Address deep review feedback on PR #2239
dhable
committed
c93e4b7

Commits on May 11, 2026