Skip to content

Release: v0.10.3 - #256

Merged
themightychris merged 5 commits into
mainfrom
develop
Oct 15, 2026
Merged

themightychris merged 5 commits into
mainfrom
develop

Conversation

@github-actions

@github-actions github-actions Bot commented Oct 15, 2026 •

Copy link
Copy Markdown

The scheduled spam purge runs only in production, and purging a member now also deletes their private data.

Improvements

themightychris and others added 5 commits October 15, 2026 17:22
…vate data

v0.10.2's sandbox ran the sweep against the published branch it shares
with production, and purge never deleted private data. Only the
deployment with CFP_SCHEDULED_PURGE=true sweeps; purge deletes the
person's private profile, legacy password, reset tokens, claim requests
and sessions in the same transaction; an admin endpoint clears private
data left by earlier purges, counts first.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TGqwPjt3v4eMfiHpPmCKnR
- CFP_SCHEDULED_PURGE (default "false") must be "true" for a pod to
  sweep; otherwise it logs that the sweep is disabled.
- PrivateStoreTx.deletePersonData removes profile, legacy password,
  reset tokens and claim requests; purge stages it with the public
  delete and clears session metadata after the commit.
- POST /api/admin/private-data/purge-orphans (admin, apply: false|true)
  clears private data of people with no public record, under the write
  lock, answering counts only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TGqwPjt3v4eMfiHpPmCKnR
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TGqwPjt3v4eMfiHpPmCKnR
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TGqwPjt3v4eMfiHpPmCKnR
fix(api): gate the scheduled purge to production; purge deletes private data
@github-actions

Copy link
Copy Markdown
Author

Changelog

- fix(api): gate the scheduled purge to production; purge deletes private data [#255] @themightychris

@themightychris
themightychris merged commit 8c40ea7 into main Oct 15, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant