Skip to content

Releases: ConductorOne/baton-github

v0.2.15-test-conn

10 Apr 18:58

Choose a tag to compare

v0.2.15

09 Apr 04:08
58fc63c

Choose a tag to compare

Changelog

  • 58fc63c fix: gracefully skip enterprise features when using GitHub App auth (#141)

v0.2.14

08 Apr 17:44
c8b04dd

Choose a tag to compare

Changelog

  • c8b04dd fix: use session-based check for enterprise SAML fetch to survive warm restarts (#140)
  • b513a57 Update README.md with new flags and options (#110)

v0.2.13

07 Apr 20:36

Choose a tag to compare

What's Changed

  • Fix: Remove enterpriseLicensesAvailable gate from ResourceSyncers() — the SDK calls it before Validate(), so the gate was always false and enterprises were never passed to builders

Full Changelog: v0.2.12...v0.2.13

v0.2.12

07 Apr 16:14
fed1b4a

Choose a tag to compare

What's Changed

Enterprise SAML Fallback & Graceful Degradation

  • SAML state machine: Replace mutable *bool with per-org samlState enum (samlStateOrgEnabled, samlStateEnterprise, samlStateDisabled) for cleaner SAML detection across mixed enterprise/org configurations
  • Graceful degradation: When enterprise consumed-licenses API is inaccessible (e.g., GitHub App auth), log at Debug level and skip enterprise SAML enrichment + enterprise role sync instead of failing the entire sync
  • Batched session store: Use SetManyJSON/GetManyJSON for enterprise SAML mappings instead of per-user session calls
  • Pagination fix: Start consumed-licenses API at page 1 (not 0) to avoid duplicate data
  • Fix incorrect error wrapping: Remove blanket PermissionDenied wrapping in enterprise_role.go that masked the real error type for timeouts, rate limits, and context cancellations
  • Dead code cleanup: Remove unused orgSAMLEnabled field, hasSamlEnabled parameter, and old fallback methods

Full Changelog: v0.2.11...v0.2.12

v0.2.11

25 Mar 10:31
7918622

Choose a tag to compare

What's Changed

  • [CXP-372] Add diagnostic logging for GitHub API errors

When a sync fails with "Resource not accessible by integration", logs now identify the exact API endpoint, HTTP status, and GitHub error details. Changes include:

  • gitHubErrorMessage() helper to extract method, URL, and sub-errors from GitHub API responses
  • Enriched auth/permission error messages in wrapGitHubError()
  • Structured warn logging on graceful-skip paths (403 handling)
  • Warn logging for enterprise consumed licenses API, GraphQL SAML queries, and GitHub App installation token paths

v0.2.10

19 Mar 21:04
4eaee4b

Choose a tag to compare

What's Changed

Enterprise SAML Email Support (#129)

When SAML is configured at the GitHub Enterprise level (not per-org), users previously synced into ConductorOne with no email, breaking identity matching. The connector now falls back to the enterprise consumed-licenses API to enrich users with their SAML NameID email.

Key details:

  • Only activates when --enterprises is configured — no change for non-enterprise customers
  • Uses SDK session.Store for caching (SetManyJSON for batch writes)
  • Case-insensitive GitHub login matching
  • per_page=100 for consumed-licenses pagination (max supported)
  • Info-level logging for observability

Fixes: CXH-1180

v0.2.9

05 Mar 21:42

Choose a tag to compare

What's Changed

Full Changelog: v0.2.8...v0.2.9

v0.2.8

26 Feb 17:33
19716d9

Choose a tag to compare

What's Changed

  • [auto] add tools/rules.go by @baton-admin[bot] in #125
  • Fix linter errors. by @ggreer in #126

New Contributors

  • @baton-admin[bot] made their first contribution in #125

Full Changelog: v0.2.7...v0.2.8

v0.2.7

06 Feb 00:40
bc9c6af

Choose a tag to compare

What's Changed

Full Changelog: v0.2.6...v0.2.7