Releases: ConductorOne/baton-github
Releases · ConductorOne/baton-github
v0.2.15-test-conn
Full Changelog: v0.2.15...v0.2.15-test-conn
v0.2.15
v0.2.14
v0.2.13
What's Changed
- Fix: Remove
enterpriseLicensesAvailablegate fromResourceSyncers()— the SDK calls it beforeValidate(), so the gate was always false and enterprises were never passed to builders
Full Changelog: v0.2.12...v0.2.13
v0.2.12
What's Changed
Enterprise SAML Fallback & Graceful Degradation
- SAML state machine: Replace mutable
*boolwith per-orgsamlStateenum (samlStateOrgEnabled,samlStateEnterprise,samlStateDisabled) for cleaner SAML detection across mixed enterprise/org configurations - Graceful degradation: When enterprise consumed-licenses API is inaccessible (e.g., GitHub App auth), log at Debug level and skip enterprise SAML enrichment + enterprise role sync instead of failing the entire sync
- Batched session store: Use
SetManyJSON/GetManyJSONfor enterprise SAML mappings instead of per-user session calls - Pagination fix: Start consumed-licenses API at page 1 (not 0) to avoid duplicate data
- Fix incorrect error wrapping: Remove blanket
PermissionDeniedwrapping inenterprise_role.gothat masked the real error type for timeouts, rate limits, and context cancellations - Dead code cleanup: Remove unused
orgSAMLEnabledfield,hasSamlEnabledparameter, and old fallback methods
Full Changelog: v0.2.11...v0.2.12
v0.2.11
What's Changed
- [CXP-372] Add diagnostic logging for GitHub API errors
When a sync fails with "Resource not accessible by integration", logs now identify the exact API endpoint, HTTP status, and GitHub error details. Changes include:
gitHubErrorMessage()helper to extract method, URL, and sub-errors from GitHub API responses- Enriched auth/permission error messages in
wrapGitHubError() - Structured warn logging on graceful-skip paths (403 handling)
- Warn logging for enterprise consumed licenses API, GraphQL SAML queries, and GitHub App installation token paths
v0.2.10
What's Changed
Enterprise SAML Email Support (#129)
When SAML is configured at the GitHub Enterprise level (not per-org), users previously synced into ConductorOne with no email, breaking identity matching. The connector now falls back to the enterprise consumed-licenses API to enrich users with their SAML NameID email.
Key details:
- Only activates when
--enterprisesis configured — no change for non-enterprise customers - Uses SDK session.Store for caching (SetManyJSON for batch writes)
- Case-insensitive GitHub login matching
per_page=100for consumed-licenses pagination (max supported)- Info-level logging for observability
Fixes: CXH-1180
v0.2.9
v0.2.8
v0.2.7
What's Changed
- baton-github: reorder fields by @Bencheng21 in #124
- baton-github: override static token with reuseToken in appClient by @Bencheng21 in #123
Full Changelog: v0.2.6...v0.2.7