diff --git a/descriptions-next/api.github.com/api.github.com.2022-11-28.json b/descriptions-next/api.github.com/api.github.com.2022-11-28.json index d4bb397876..6f01818dc1 100644 --- a/descriptions-next/api.github.com/api.github.com.2022-11-28.json +++ b/descriptions-next/api.github.com/api.github.com.2022-11-28.json @@ -71631,7 +71631,7 @@ }, "post": { "summary": "Create a release", - "description": "Users with push access to the repository can create a release.\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", + "description": "Users with push access to the repository can create a release.\n\n> [!NOTE]\n> If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", "tags": [ "repos" ], @@ -72186,7 +72186,7 @@ }, "patch": { "summary": "Update a release", - "description": "Users with push access to the repository can edit a release.", + "description": "Users with push access to the repository can edit a release.\n\n> [!NOTE]\n> If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".", "tags": [ "repos" ], @@ -143616,6 +143616,18 @@ "weekly", null ] + }, + "ai_findings_option": { + "description": "The AI findings configuration for the repository.", + "type": [ + "string", + "null" + ], + "enum": [ + "disabled", + "on_push", + null + ] } } }, @@ -143663,6 +143675,14 @@ "ruby" ] } + }, + "ai_findings_option": { + "description": "Whether AI findings run for Code Quality on this repository.", + "type": "string", + "enum": [ + "disabled", + "on_push" + ] } }, "anyOf": [ @@ -143685,6 +143705,11 @@ "required": [ "languages" ] + }, + { + "required": [ + "ai_findings_option" + ] } ], "additionalProperties": false @@ -329566,7 +329591,8 @@ "runner_type": "standard", "runner_label": null, "updated_at": "2023-01-01T00:00:00Z", - "schedule": "weekly" + "schedule": "weekly", + "ai_findings_option": "on_push" } }, "code-quality-setup-update": { diff --git a/descriptions-next/api.github.com/api.github.com.2022-11-28.yaml b/descriptions-next/api.github.com/api.github.com.2022-11-28.yaml index 2a15b74cd0..773aa756fe 100644 --- a/descriptions-next/api.github.com/api.github.com.2022-11-28.yaml +++ b/descriptions-next/api.github.com/api.github.com.2022-11-28.yaml @@ -52571,6 +52571,11 @@ paths: description: |- Users with push access to the repository can create a release. + > [!NOTE] + > If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". + This endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see "[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)" and "[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api)." tags: - repos @@ -52973,7 +52978,13 @@ paths: subcategory: releases patch: summary: Update a release - description: Users with push access to the repository can edit a release. + description: |- + Users with push access to the repository can edit a release. + + > [!NOTE] + > If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". tags: - repos operationId: repos/update-release @@ -104730,6 +104741,15 @@ components: enum: - weekly - + ai_findings_option: + description: The AI findings configuration for the repository. + type: + - string + - 'null' + enum: + - disabled + - on_push + - code-quality-setup-update: description: Configuration for code quality setup. type: object @@ -104765,6 +104785,12 @@ components: - javascript-typescript - python - ruby + ai_findings_option: + description: Whether AI findings run for Code Quality on this repository. + type: string + enum: + - disabled + - on_push anyOf: - required: - state @@ -104774,6 +104800,8 @@ components: - runner_label - required: - languages + - required: + - ai_findings_option additionalProperties: false code-quality-setup-update-response: description: |- @@ -244482,6 +244510,7 @@ components: runner_label: updated_at: '2023-01-01T00:00:00Z' schedule: weekly + ai_findings_option: on_push code-quality-setup-update: value: state: configured diff --git a/descriptions-next/api.github.com/api.github.com.2026-03-10.json b/descriptions-next/api.github.com/api.github.com.2026-03-10.json index 36713fcaeb..5291957099 100644 --- a/descriptions-next/api.github.com/api.github.com.2026-03-10.json +++ b/descriptions-next/api.github.com/api.github.com.2026-03-10.json @@ -71542,7 +71542,7 @@ }, "post": { "summary": "Create a release", - "description": "Users with push access to the repository can create a release.\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", + "description": "Users with push access to the repository can create a release.\n\n> [!NOTE]\n> If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", "tags": [ "repos" ], @@ -72097,7 +72097,7 @@ }, "patch": { "summary": "Update a release", - "description": "Users with push access to the repository can edit a release.", + "description": "Users with push access to the repository can edit a release.\n\n> [!NOTE]\n> If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".", "tags": [ "repos" ], @@ -142976,6 +142976,18 @@ "weekly", null ] + }, + "ai_findings_option": { + "description": "The AI findings configuration for the repository.", + "type": [ + "string", + "null" + ], + "enum": [ + "disabled", + "on_push", + null + ] } } }, @@ -143023,6 +143035,14 @@ "ruby" ] } + }, + "ai_findings_option": { + "description": "Whether AI findings run for Code Quality on this repository.", + "type": "string", + "enum": [ + "disabled", + "on_push" + ] } }, "anyOf": [ @@ -143045,6 +143065,11 @@ "required": [ "languages" ] + }, + { + "required": [ + "ai_findings_option" + ] } ], "additionalProperties": false @@ -328699,7 +328724,8 @@ "runner_type": "standard", "runner_label": null, "updated_at": "2023-01-01T00:00:00Z", - "schedule": "weekly" + "schedule": "weekly", + "ai_findings_option": "on_push" } }, "code-quality-setup-update": { diff --git a/descriptions-next/api.github.com/api.github.com.2026-03-10.yaml b/descriptions-next/api.github.com/api.github.com.2026-03-10.yaml index 30486b79a6..3269dd5681 100644 --- a/descriptions-next/api.github.com/api.github.com.2026-03-10.yaml +++ b/descriptions-next/api.github.com/api.github.com.2026-03-10.yaml @@ -52496,6 +52496,11 @@ paths: description: |- Users with push access to the repository can create a release. + > [!NOTE] + > If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". + This endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see "[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)" and "[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api)." tags: - repos @@ -52898,7 +52903,13 @@ paths: subcategory: releases patch: summary: Update a release - description: Users with push access to the repository can edit a release. + description: |- + Users with push access to the repository can edit a release. + + > [!NOTE] + > If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". tags: - repos operationId: repos/update-release @@ -104259,6 +104270,15 @@ components: enum: - weekly - + ai_findings_option: + description: The AI findings configuration for the repository. + type: + - string + - 'null' + enum: + - disabled + - on_push + - code-quality-setup-update: description: Configuration for code quality setup. type: object @@ -104294,6 +104314,12 @@ components: - javascript-typescript - python - ruby + ai_findings_option: + description: Whether AI findings run for Code Quality on this repository. + type: string + enum: + - disabled + - on_push anyOf: - required: - state @@ -104303,6 +104329,8 @@ components: - runner_label - required: - languages + - required: + - ai_findings_option additionalProperties: false code-quality-setup-update-response: description: |- @@ -243762,6 +243790,7 @@ components: runner_label: updated_at: '2023-01-01T00:00:00Z' schedule: weekly + ai_findings_option: on_push code-quality-setup-update: value: state: configured diff --git a/descriptions-next/api.github.com/api.github.com.json b/descriptions-next/api.github.com/api.github.com.json index 64bda368a8..c2f6666cc6 100644 --- a/descriptions-next/api.github.com/api.github.com.json +++ b/descriptions-next/api.github.com/api.github.com.json @@ -71938,7 +71938,7 @@ }, "post": { "summary": "Create a release", - "description": "Users with push access to the repository can create a release.\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", + "description": "Users with push access to the repository can create a release.\n\n> [!NOTE]\n> If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", "tags": [ "repos" ], @@ -72493,7 +72493,7 @@ }, "patch": { "summary": "Update a release", - "description": "Users with push access to the repository can edit a release.", + "description": "Users with push access to the repository can edit a release.\n\n> [!NOTE]\n> If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".", "tags": [ "repos" ], @@ -144627,6 +144627,18 @@ "weekly", null ] + }, + "ai_findings_option": { + "description": "The AI findings configuration for the repository.", + "type": [ + "string", + "null" + ], + "enum": [ + "disabled", + "on_push", + null + ] } } }, @@ -144674,6 +144686,14 @@ "ruby" ] } + }, + "ai_findings_option": { + "description": "Whether AI findings run for Code Quality on this repository.", + "type": "string", + "enum": [ + "disabled", + "on_push" + ] } }, "anyOf": [ @@ -144696,6 +144716,11 @@ "required": [ "languages" ] + }, + { + "required": [ + "ai_findings_option" + ] } ], "additionalProperties": false @@ -331580,7 +331605,8 @@ "runner_type": "standard", "runner_label": null, "updated_at": "2023-01-01T00:00:00Z", - "schedule": "weekly" + "schedule": "weekly", + "ai_findings_option": "on_push" } }, "code-quality-setup-update": { diff --git a/descriptions-next/api.github.com/api.github.com.yaml b/descriptions-next/api.github.com/api.github.com.yaml index dc1bdaca4a..881e88df3d 100644 --- a/descriptions-next/api.github.com/api.github.com.yaml +++ b/descriptions-next/api.github.com/api.github.com.yaml @@ -52759,6 +52759,11 @@ paths: description: |- Users with push access to the repository can create a release. + > [!NOTE] + > If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". + This endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see "[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)" and "[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api)." tags: - repos @@ -53161,7 +53166,13 @@ paths: subcategory: releases patch: summary: Update a release - description: Users with push access to the repository can edit a release. + description: |- + Users with push access to the repository can edit a release. + + > [!NOTE] + > If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". tags: - repos operationId: repos/update-release @@ -105434,6 +105445,15 @@ components: enum: - weekly - + ai_findings_option: + description: The AI findings configuration for the repository. + type: + - string + - 'null' + enum: + - disabled + - on_push + - code-quality-setup-update: description: Configuration for code quality setup. type: object @@ -105469,6 +105489,12 @@ components: - javascript-typescript - python - ruby + ai_findings_option: + description: Whether AI findings run for Code Quality on this repository. + type: string + enum: + - disabled + - on_push anyOf: - required: - state @@ -105478,6 +105504,8 @@ components: - runner_label - required: - languages + - required: + - ai_findings_option additionalProperties: false code-quality-setup-update-response: description: |- @@ -245771,6 +245799,7 @@ components: runner_label: updated_at: '2023-01-01T00:00:00Z' schedule: weekly + ai_findings_option: on_push code-quality-setup-update: value: state: configured diff --git a/descriptions-next/api.github.com/dereferenced/api.github.com.2022-11-28.deref.json b/descriptions-next/api.github.com/dereferenced/api.github.com.2022-11-28.deref.json index 0cbf4665e8..54f365a87c 100644 --- a/descriptions-next/api.github.com/dereferenced/api.github.com.2022-11-28.deref.json +++ b/descriptions-next/api.github.com/dereferenced/api.github.com.2022-11-28.deref.json @@ -357942,6 +357942,18 @@ "weekly", null ] + }, + "ai_findings_option": { + "description": "The AI findings configuration for the repository.", + "type": [ + "string", + "null" + ], + "enum": [ + "disabled", + "on_push", + null + ] } } }, @@ -357956,7 +357968,8 @@ "runner_type": "standard", "runner_label": null, "updated_at": "2023-01-01T00:00:00Z", - "schedule": "weekly" + "schedule": "weekly", + "ai_findings_option": "on_push" } } } @@ -358123,6 +358136,14 @@ "ruby" ] } + }, + "ai_findings_option": { + "description": "Whether AI findings run for Code Quality on this repository.", + "type": "string", + "enum": [ + "disabled", + "on_push" + ] } }, "anyOf": [ @@ -358145,6 +358166,11 @@ "required": [ "languages" ] + }, + { + "required": [ + "ai_findings_option" + ] } ], "additionalProperties": false @@ -661595,7 +661621,7 @@ }, "post": { "summary": "Create a release", - "description": "Users with push access to the repository can create a release.\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", + "description": "Users with push access to the repository can create a release.\n\n> [!NOTE]\n> If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", "tags": [ "repos" ], @@ -665825,7 +665851,7 @@ }, "patch": { "summary": "Update a release", - "description": "Users with push access to the repository can edit a release.", + "description": "Users with push access to the repository can edit a release.\n\n> [!NOTE]\n> If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".", "tags": [ "repos" ], diff --git a/descriptions-next/api.github.com/dereferenced/api.github.com.2022-11-28.deref.yaml b/descriptions-next/api.github.com/dereferenced/api.github.com.2022-11-28.deref.yaml index 0cb4aaffc0..e9102e4b96 100644 --- a/descriptions-next/api.github.com/dereferenced/api.github.com.2022-11-28.deref.yaml +++ b/descriptions-next/api.github.com/dereferenced/api.github.com.2022-11-28.deref.yaml @@ -72824,6 +72824,15 @@ paths: enum: - weekly - + ai_findings_option: + description: The AI findings configuration for the repository. + type: + - string + - 'null' + enum: + - disabled + - on_push + - examples: default: value: @@ -72835,6 +72844,7 @@ paths: runner_label: updated_at: '2023-01-01T00:00:00Z' schedule: weekly + ai_findings_option: on_push '403': *425 '404': *6 '503': *115 @@ -72897,6 +72907,12 @@ paths: - javascript-typescript - python - ruby + ai_findings_option: + description: Whether AI findings run for Code Quality on this repository. + type: string + enum: + - disabled + - on_push anyOf: - required: - state @@ -72906,6 +72922,8 @@ paths: - runner_label - required: - languages + - required: + - ai_findings_option additionalProperties: false examples: default: @@ -102666,6 +102684,11 @@ paths: description: |- Users with push access to the repository can create a release. + > [!NOTE] + > If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". + This endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see "[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)" and "[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api)." tags: - repos @@ -103181,7 +103204,13 @@ paths: subcategory: releases patch: summary: Update a release - description: Users with push access to the repository can edit a release. + description: |- + Users with push access to the repository can edit a release. + + > [!NOTE] + > If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". tags: - repos operationId: repos/update-release diff --git a/descriptions-next/api.github.com/dereferenced/api.github.com.2026-03-10.deref.json b/descriptions-next/api.github.com/dereferenced/api.github.com.2026-03-10.deref.json index 8097302e77..7815f13beb 100644 --- a/descriptions-next/api.github.com/dereferenced/api.github.com.2026-03-10.deref.json +++ b/descriptions-next/api.github.com/dereferenced/api.github.com.2026-03-10.deref.json @@ -350232,6 +350232,18 @@ "weekly", null ] + }, + "ai_findings_option": { + "description": "The AI findings configuration for the repository.", + "type": [ + "string", + "null" + ], + "enum": [ + "disabled", + "on_push", + null + ] } } }, @@ -350246,7 +350258,8 @@ "runner_type": "standard", "runner_label": null, "updated_at": "2023-01-01T00:00:00Z", - "schedule": "weekly" + "schedule": "weekly", + "ai_findings_option": "on_push" } } } @@ -350413,6 +350426,14 @@ "ruby" ] } + }, + "ai_findings_option": { + "description": "Whether AI findings run for Code Quality on this repository.", + "type": "string", + "enum": [ + "disabled", + "on_push" + ] } }, "anyOf": [ @@ -350435,6 +350456,11 @@ "required": [ "languages" ] + }, + { + "required": [ + "ai_findings_option" + ] } ], "additionalProperties": false @@ -647987,7 +648013,7 @@ }, "post": { "summary": "Create a release", - "description": "Users with push access to the repository can create a release.\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", + "description": "Users with push access to the repository can create a release.\n\n> [!NOTE]\n> If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", "tags": [ "repos" ], @@ -652217,7 +652243,7 @@ }, "patch": { "summary": "Update a release", - "description": "Users with push access to the repository can edit a release.", + "description": "Users with push access to the repository can edit a release.\n\n> [!NOTE]\n> If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".", "tags": [ "repos" ], diff --git a/descriptions-next/api.github.com/dereferenced/api.github.com.2026-03-10.deref.yaml b/descriptions-next/api.github.com/dereferenced/api.github.com.2026-03-10.deref.yaml index f9220c0d3f..a37330e5b0 100644 --- a/descriptions-next/api.github.com/dereferenced/api.github.com.2026-03-10.deref.yaml +++ b/descriptions-next/api.github.com/dereferenced/api.github.com.2026-03-10.deref.yaml @@ -72377,6 +72377,15 @@ paths: enum: - weekly - + ai_findings_option: + description: The AI findings configuration for the repository. + type: + - string + - 'null' + enum: + - disabled + - on_push + - examples: default: value: @@ -72388,6 +72397,7 @@ paths: runner_label: updated_at: '2023-01-01T00:00:00Z' schedule: weekly + ai_findings_option: on_push '403': *425 '404': *6 '503': *115 @@ -72450,6 +72460,12 @@ paths: - javascript-typescript - python - ruby + ai_findings_option: + description: Whether AI findings run for Code Quality on this repository. + type: string + enum: + - disabled + - on_push anyOf: - required: - state @@ -72459,6 +72475,8 @@ paths: - runner_label - required: - languages + - required: + - ai_findings_option additionalProperties: false examples: default: @@ -102113,6 +102131,11 @@ paths: description: |- Users with push access to the repository can create a release. + > [!NOTE] + > If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". + This endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see "[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)" and "[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api)." tags: - repos @@ -102628,7 +102651,13 @@ paths: subcategory: releases patch: summary: Update a release - description: Users with push access to the repository can edit a release. + description: |- + Users with push access to the repository can edit a release. + + > [!NOTE] + > If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". tags: - repos operationId: repos/update-release diff --git a/descriptions-next/api.github.com/dereferenced/api.github.com.deref.json b/descriptions-next/api.github.com/dereferenced/api.github.com.deref.json index 2886b754c3..2f5598f5e7 100644 --- a/descriptions-next/api.github.com/dereferenced/api.github.com.deref.json +++ b/descriptions-next/api.github.com/dereferenced/api.github.com.deref.json @@ -366119,6 +366119,18 @@ "weekly", null ] + }, + "ai_findings_option": { + "description": "The AI findings configuration for the repository.", + "type": [ + "string", + "null" + ], + "enum": [ + "disabled", + "on_push", + null + ] } } }, @@ -366133,7 +366145,8 @@ "runner_type": "standard", "runner_label": null, "updated_at": "2023-01-01T00:00:00Z", - "schedule": "weekly" + "schedule": "weekly", + "ai_findings_option": "on_push" } } } @@ -366300,6 +366313,14 @@ "ruby" ] } + }, + "ai_findings_option": { + "description": "Whether AI findings run for Code Quality on this repository.", + "type": "string", + "enum": [ + "disabled", + "on_push" + ] } }, "anyOf": [ @@ -366322,6 +366343,11 @@ "required": [ "languages" ] + }, + { + "required": [ + "ai_findings_option" + ] } ], "additionalProperties": false @@ -675973,7 +675999,7 @@ }, "post": { "summary": "Create a release", - "description": "Users with push access to the repository can create a release.\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", + "description": "Users with push access to the repository can create a release.\n\n> [!NOTE]\n> If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".\n\nThis endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api).\"", "tags": [ "repos" ], @@ -680203,7 +680229,7 @@ }, "patch": { "summary": "Update a release", - "description": "Users with push access to the repository can edit a release.", + "description": "Users with push access to the repository can edit a release.\n\n> [!NOTE]\n> If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".", "tags": [ "repos" ], diff --git a/descriptions-next/api.github.com/dereferenced/api.github.com.deref.yaml b/descriptions-next/api.github.com/dereferenced/api.github.com.deref.yaml index ee8396c64b..26f709e8c8 100644 --- a/descriptions-next/api.github.com/dereferenced/api.github.com.deref.yaml +++ b/descriptions-next/api.github.com/dereferenced/api.github.com.deref.yaml @@ -73463,6 +73463,15 @@ paths: enum: - weekly - + ai_findings_option: + description: The AI findings configuration for the repository. + type: + - string + - 'null' + enum: + - disabled + - on_push + - examples: default: value: @@ -73474,6 +73483,7 @@ paths: runner_label: updated_at: '2023-01-01T00:00:00Z' schedule: weekly + ai_findings_option: on_push '403': *425 '404': *6 '503': *115 @@ -73536,6 +73546,12 @@ paths: - javascript-typescript - python - ruby + ai_findings_option: + description: Whether AI findings run for Code Quality on this repository. + type: string + enum: + - disabled + - on_push anyOf: - required: - state @@ -73545,6 +73561,8 @@ paths: - runner_label - required: - languages + - required: + - ai_findings_option additionalProperties: false examples: default: @@ -103500,6 +103518,11 @@ paths: description: |- Users with push access to the repository can create a release. + > [!NOTE] + > If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". + This endpoint triggers [notifications](https://docs.github.com/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see "[Rate limits for the API](https://docs.github.com/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)" and "[Best practices for using the REST API](https://docs.github.com/rest/guides/best-practices-for-using-the-rest-api)." tags: - repos @@ -104015,7 +104038,13 @@ paths: subcategory: releases patch: summary: Update a release - description: Users with push access to the repository can edit a release. + description: |- + Users with push access to the repository can edit a release. + + > [!NOTE] + > If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". tags: - repos operationId: repos/update-release diff --git a/descriptions-next/ghec/dereferenced/ghec.2022-11-28.deref.json b/descriptions-next/ghec/dereferenced/ghec.2022-11-28.deref.json index 18191540a7..24c446fb2f 100644 --- a/descriptions-next/ghec/dereferenced/ghec.2022-11-28.deref.json +++ b/descriptions-next/ghec/dereferenced/ghec.2022-11-28.deref.json @@ -54038,6 +54038,211 @@ } } }, + "/enterprises/{enterprise}/credential-authorizations/revoke-credential-type": { + "post": { + "summary": "Revoke a single credential type for an enterprise", + "description": "Revokes a single credential type (for example, classic personal access tokens)\nacross all organizations within the enterprise. This removes the sign-in\nauthorizations for that credential type for every member of the enterprise.\n\nFor Enterprise Managed User (EMU) enterprises, you can optionally also destroy the\nactual credentials of that type owned by enterprise members by setting the\n`revoke_credentials` parameter to `true`.\n\nThis operation is performed asynchronously. A background job will be queued to process\nthe revocations.\n\n> [!WARNING]\n> If you use a personal access token to call this endpoint, that token may also be\n> revoked or destroyed as part of this operation.\n\nThe authenticated user must be an enterprise owner or have the `write_enterprise_credentials` permission to use this endpoint.\n\nOAuth app tokens and personal access tokens (classic) need the `admin:enterprise` scope to use this endpoint.", + "tags": [ + "enterprise-admin" + ], + "operationId": "enterprise-admin/revoke-credential-type-for-enterprise", + "externalDocs": { + "description": "API method documentation", + "url": "https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise" + }, + "parameters": [ + { + "name": "enterprise", + "description": "The slug version of the enterprise name.", + "in": "path", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "required": true, + "content": { + "application/json": { + "schema": { + "type": "object", + "required": [ + "credential_type" + ], + "properties": { + "credential_type": { + "type": "string", + "description": "The type of credential to revoke across the enterprise.", + "enum": [ + "classic_pat", + "fine_grained_pat", + "ssh_key", + "oauth_app_token" + ] + }, + "revoke_credentials": { + "type": "boolean", + "description": "Whether to also destroy the actual credentials of this type owned by\nenterprise members. This option is only available for Enterprise Managed\nUser (EMU) enterprises. When set to `true`, all credentials of the given\ntype owned by enterprise members will be destroyed in addition to the\ncredential authorizations. Note that `oauth_app_token` credentials cannot\nbe destroyed; for that type only the credential authorizations are revoked.", + "default": false + } + } + }, + "examples": { + "default": { + "value": { + "credential_type": "classic_pat", + "revoke_credentials": false + } + }, + "emu_with_credential_revocation": { + "summary": "EMU enterprise with credential revocation", + "value": { + "credential_type": "classic_pat", + "revoke_credentials": true + } + } + } + } + } + }, + "responses": { + "202": { + "description": "Accepted - The revocation request has been queued", + "content": { + "application/json": { + "schema": { + "type": "object", + "properties": { + "message": { + "type": "string", + "description": "A message indicating the revocation has been queued" + }, + "warning": { + "type": "string", + "description": "A warning message if the token used for this request may be revoked" + } + } + }, + "examples": { + "default": { + "value": { + "message": "Credential type revocation has been queued" + } + }, + "with_warning": { + "value": { + "message": "Credential type revocation has been queued", + "warning": "The token used for this request may also have its authorization revoked as part of this operation" + } + } + } + } + } + }, + "403": { + "description": "Forbidden", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + } + } + } + }, + "404": { + "description": "Resource not found", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + } + } + } + }, + "422": { + "description": "Validation error - The `credential_type` is missing or invalid, or `revoke_credentials` is not available for this enterprise", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + }, + "examples": { + "invalid_credential_type": { + "summary": "Missing or invalid `credential_type`", + "value": { + "message": "The `credential_type` parameter is required and must be one of: classic_pat, fine_grained_pat, ssh_key, oauth_app_token", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise" + } + }, + "non_emu_enterprise": { + "summary": "`revoke_credentials` requested on a non-EMU enterprise", + "value": { + "message": "The `revoke_credentials` option is only available for Enterprise Managed User (EMU) enterprises", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise" + } + } + } + } + } + } + }, + "x-github": { + "githubCloudOnly": true, + "enabledForGitHubApps": true, + "category": "enterprise-admin", + "subcategory": "credential-authorizations" + } + } + }, "/enterprises/{enterprise}/credential-authorizations/{username}/revoke": { "post": { "summary": "Revoke credential authorizations for a user in an enterprise", @@ -54245,6 +54450,235 @@ } } }, + "/enterprises/{enterprise}/credential-authorizations/{username}/revoke-credential-type": { + "post": { + "summary": "Revoke a single credential type for a user in an enterprise", + "description": "Revokes a single credential type (for example, classic personal access tokens)\nfor a single user within the enterprise. This removes the sign-in authorizations\nfor that credential type across all organizations in the enterprise for the user.\n\nFor Enterprise Managed User (EMU) enterprises, you can optionally also destroy the\nactual credential of that type owned by the user by setting the `revoke_credentials`\nparameter to `true`.\n\nThis operation is performed asynchronously. A background job will be queued to process\nthe revocations.\n\n> [!WARNING]\n> If you use a personal access token to call this endpoint and target yourself, that\n> token may also be revoked or destroyed as part of this operation.\n\nThe authenticated user must be an enterprise owner or have the `write_enterprise_credentials` permission to use this endpoint.\n\nOAuth app tokens and personal access tokens (classic) need the `admin:enterprise` scope to use this endpoint.", + "tags": [ + "enterprise-admin" + ], + "operationId": "enterprise-admin/revoke-credential-type-for-user", + "externalDocs": { + "description": "API method documentation", + "url": "https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise" + }, + "parameters": [ + { + "name": "enterprise", + "description": "The slug version of the enterprise name.", + "in": "path", + "required": true, + "schema": { + "type": "string" + } + }, + { + "name": "username", + "description": "The handle for the GitHub user account.", + "in": "path", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "required": true, + "content": { + "application/json": { + "schema": { + "type": "object", + "required": [ + "credential_type" + ], + "properties": { + "credential_type": { + "type": "string", + "description": "The type of credential to revoke for the user.", + "enum": [ + "classic_pat", + "fine_grained_pat", + "ssh_key", + "oauth_app_token" + ] + }, + "revoke_credentials": { + "type": "boolean", + "description": "Whether to also destroy the actual credential of this type owned by the\nuser. This option is only available for Enterprise Managed User (EMU)\nenterprises. When set to `true`, the credential of the given type owned\nby the user will be destroyed in addition to the credential authorizations.\nNote that `oauth_app_token` credentials cannot be destroyed; for that type\nonly the credential authorizations are revoked.", + "default": false + } + } + }, + "examples": { + "default": { + "value": { + "credential_type": "classic_pat", + "revoke_credentials": false + } + }, + "emu_with_credential_revocation": { + "summary": "EMU enterprise with credential revocation", + "value": { + "credential_type": "classic_pat", + "revoke_credentials": true + } + } + } + } + } + }, + "responses": { + "202": { + "description": "Accepted - The revocation request has been queued", + "content": { + "application/json": { + "schema": { + "type": "object", + "properties": { + "message": { + "type": "string", + "description": "A message indicating the revocation has been queued" + }, + "warning": { + "type": "string", + "description": "A warning message if the token used for this request may be revoked" + } + } + }, + "examples": { + "default": { + "value": { + "message": "Credential type revocation for user 'octocat' has been queued" + } + }, + "with_authorization_revoked_warning": { + "summary": "Warning when the calling token may have its authorization revoked", + "value": { + "message": "Credential type revocation for user 'octocat' has been queued", + "warning": "The token used for this request may also have its authorization revoked as part of this operation" + } + }, + "with_credential_destroyed_warning": { + "summary": "Warning when the calling token may be destroyed (EMU with `revoke_credentials`)", + "value": { + "message": "Credential type revocation for user 'octocat' has been queued", + "warning": "The token used for this request may also be destroyed as part of this operation" + } + } + } + } + } + }, + "403": { + "description": "Forbidden", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + } + } + } + }, + "404": { + "description": "Resource not found", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + } + } + } + }, + "422": { + "description": "Validation error - The `credential_type` is missing or invalid, the target user cannot be revoked, or `revoke_credentials` is not available for this enterprise", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + }, + "examples": { + "invalid_credential_type": { + "summary": "Missing or invalid `credential_type`", + "value": { + "message": "The `credential_type` parameter is required and must be one of: classic_pat, fine_grained_pat, ssh_key, oauth_app_token", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise" + } + }, + "non_emu_enterprise": { + "summary": "`revoke_credentials` requested on a non-EMU enterprise", + "value": { + "message": "The `revoke_credentials` option is only available for Enterprise Managed User (EMU) enterprises", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise" + } + }, + "first_emu_owner": { + "summary": "Target user is the first EMU owner", + "value": { + "message": "The first EMU owner cannot be targeted for credential revocation.", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise" + } + } + } + } + } + } + }, + "x-github": { + "githubCloudOnly": true, + "enabledForGitHubApps": true, + "category": "enterprise-admin", + "subcategory": "credential-authorizations" + } + } + }, "/enterprises/{enterprise}/dependabot/alerts": { "get": { "summary": "List Dependabot alerts for an enterprise", @@ -422988,6 +423422,18 @@ "weekly", null ] + }, + "ai_findings_option": { + "description": "The AI findings configuration for the repository.", + "type": [ + "string", + "null" + ], + "enum": [ + "disabled", + "on_push", + null + ] } } }, @@ -423002,7 +423448,8 @@ "runner_type": "standard", "runner_label": null, "updated_at": "2023-01-01T00:00:00Z", - "schedule": "weekly" + "schedule": "weekly", + "ai_findings_option": "on_push" } } } @@ -423169,6 +423616,14 @@ "ruby" ] } + }, + "ai_findings_option": { + "description": "Whether AI findings run for Code Quality on this repository.", + "type": "string", + "enum": [ + "disabled", + "on_push" + ] } }, "anyOf": [ @@ -423191,6 +423646,11 @@ "required": [ "languages" ] + }, + { + "required": [ + "ai_findings_option" + ] } ], "additionalProperties": false @@ -730886,7 +731346,7 @@ }, "post": { "summary": "Create a release", - "description": "Users with push access to the repository can create a release.\n\nThis endpoint triggers [notifications](https://docs.github.com/enterprise-cloud@latest/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/enterprise-cloud@latest/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/enterprise-cloud@latest/rest/guides/best-practices-for-using-the-rest-api).\"", + "description": "Users with push access to the repository can create a release.\n\n> [!NOTE]\n> If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/enterprise-cloud@latest/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".\n\nThis endpoint triggers [notifications](https://docs.github.com/enterprise-cloud@latest/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/enterprise-cloud@latest/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/enterprise-cloud@latest/rest/guides/best-practices-for-using-the-rest-api).\"", "tags": [ "repos" ], @@ -735116,7 +735576,7 @@ }, "patch": { "summary": "Update a release", - "description": "Users with push access to the repository can edit a release.", + "description": "Users with push access to the repository can edit a release.\n\n> [!NOTE]\n> If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/enterprise-cloud@latest/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".", "tags": [ "repos" ], diff --git a/descriptions-next/ghec/dereferenced/ghec.2022-11-28.deref.yaml b/descriptions-next/ghec/dereferenced/ghec.2022-11-28.deref.yaml index a050086f6e..6f8e3eb9e7 100644 --- a/descriptions-next/ghec/dereferenced/ghec.2022-11-28.deref.yaml +++ b/descriptions-next/ghec/dereferenced/ghec.2022-11-28.deref.yaml @@ -712,7 +712,7 @@ paths: required: - vector_string - score - cvss_severities: &133 + cvss_severities: &134 type: - object - 'null' @@ -759,7 +759,7 @@ paths: required: - vector_string - score - epss: &134 + epss: &135 type: - object - 'null' @@ -16463,28 +16463,28 @@ paths: items: &324 type: object properties: - number: &131 + number: &132 type: integer description: The security alert number. readOnly: true - created_at: &138 + created_at: &139 type: string description: 'The time that the alert was created in ISO 8601 format: `YYYY-MM-DDTHH:MM:SSZ`.' format: date-time readOnly: true - updated_at: &139 + updated_at: &140 type: string description: 'The time that the alert was last updated in ISO 8601 format: `YYYY-MM-DDTHH:MM:SSZ`.' format: date-time readOnly: true - url: &136 + url: &137 type: string description: The REST API URL of the alert resource. format: uri readOnly: true - html_url: &137 + html_url: &138 type: string description: The GitHub URL of the alert resource. format: uri @@ -16505,7 +16505,7 @@ paths: - dismissed - fixed - - fixed_at: &141 + fixed_at: &142 type: - string - 'null' @@ -16517,7 +16517,7 @@ paths: anyOf: - type: 'null' - *4 - dismissed_at: &140 + dismissed_at: &141 type: - string - 'null' @@ -20948,6 +20948,123 @@ paths: enabledForGitHubApps: true category: enterprise-admin subcategory: credential-authorizations + "/enterprises/{enterprise}/credential-authorizations/revoke-credential-type": + post: + summary: Revoke a single credential type for an enterprise + description: |- + Revokes a single credential type (for example, classic personal access tokens) + across all organizations within the enterprise. This removes the sign-in + authorizations for that credential type for every member of the enterprise. + + For Enterprise Managed User (EMU) enterprises, you can optionally also destroy the + actual credentials of that type owned by enterprise members by setting the + `revoke_credentials` parameter to `true`. + + This operation is performed asynchronously. A background job will be queued to process + the revocations. + + > [!WARNING] + > If you use a personal access token to call this endpoint, that token may also be + > revoked or destroyed as part of this operation. + + The authenticated user must be an enterprise owner or have the `write_enterprise_credentials` permission to use this endpoint. + + OAuth app tokens and personal access tokens (classic) need the `admin:enterprise` scope to use this endpoint. + tags: + - enterprise-admin + operationId: enterprise-admin/revoke-credential-type-for-enterprise + externalDocs: + description: API method documentation + url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise + parameters: + - *40 + requestBody: + required: true + content: + application/json: + schema: + type: object + required: + - credential_type + properties: + credential_type: + type: string + description: The type of credential to revoke across the enterprise. + enum: + - classic_pat + - fine_grained_pat + - ssh_key + - oauth_app_token + revoke_credentials: + type: boolean + description: |- + Whether to also destroy the actual credentials of this type owned by + enterprise members. This option is only available for Enterprise Managed + User (EMU) enterprises. When set to `true`, all credentials of the given + type owned by enterprise members will be destroyed in addition to the + credential authorizations. Note that `oauth_app_token` credentials cannot + be destroyed; for that type only the credential authorizations are revoked. + default: false + examples: + default: + value: + credential_type: classic_pat + revoke_credentials: false + emu_with_credential_revocation: + summary: EMU enterprise with credential revocation + value: + credential_type: classic_pat + revoke_credentials: true + responses: + '202': + description: Accepted - The revocation request has been queued + content: + application/json: + schema: + type: object + properties: + message: + type: string + description: A message indicating the revocation has been queued + warning: + type: string + description: A warning message if the token used for this request + may be revoked + examples: + default: + value: + message: Credential type revocation has been queued + with_warning: + value: + message: Credential type revocation has been queued + warning: The token used for this request may also have its authorization + revoked as part of this operation + '403': *27 + '404': *6 + '422': + description: Validation error - The `credential_type` is missing or invalid, + or `revoke_credentials` is not available for this enterprise + content: + application/json: + schema: *3 + examples: + invalid_credential_type: + summary: Missing or invalid `credential_type` + value: + message: 'The `credential_type` parameter is required and must + be one of: classic_pat, fine_grained_pat, ssh_key, oauth_app_token' + documentation_url: https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise + non_emu_enterprise: + summary: "`revoke_credentials` requested on a non-EMU enterprise" + value: + message: The `revoke_credentials` option is only available for + Enterprise Managed User (EMU) enterprises + documentation_url: https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise + x-github: + githubCloudOnly: true + enabledForGitHubApps: true + category: enterprise-admin + subcategory: credential-authorizations "/enterprises/{enterprise}/credential-authorizations/{username}/revoke": post: summary: Revoke credential authorizations for a user in an enterprise @@ -20978,7 +21095,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations#revoke-credential-authorizations-for-a-user-in-an-enterprise parameters: - *40 - - &144 + - &131 name: username description: The handle for the GitHub user account. in: path @@ -21070,6 +21187,143 @@ paths: enabledForGitHubApps: true category: enterprise-admin subcategory: credential-authorizations + "/enterprises/{enterprise}/credential-authorizations/{username}/revoke-credential-type": + post: + summary: Revoke a single credential type for a user in an enterprise + description: |- + Revokes a single credential type (for example, classic personal access tokens) + for a single user within the enterprise. This removes the sign-in authorizations + for that credential type across all organizations in the enterprise for the user. + + For Enterprise Managed User (EMU) enterprises, you can optionally also destroy the + actual credential of that type owned by the user by setting the `revoke_credentials` + parameter to `true`. + + This operation is performed asynchronously. A background job will be queued to process + the revocations. + + > [!WARNING] + > If you use a personal access token to call this endpoint and target yourself, that + > token may also be revoked or destroyed as part of this operation. + + The authenticated user must be an enterprise owner or have the `write_enterprise_credentials` permission to use this endpoint. + + OAuth app tokens and personal access tokens (classic) need the `admin:enterprise` scope to use this endpoint. + tags: + - enterprise-admin + operationId: enterprise-admin/revoke-credential-type-for-user + externalDocs: + description: API method documentation + url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise + parameters: + - *40 + - *131 + requestBody: + required: true + content: + application/json: + schema: + type: object + required: + - credential_type + properties: + credential_type: + type: string + description: The type of credential to revoke for the user. + enum: + - classic_pat + - fine_grained_pat + - ssh_key + - oauth_app_token + revoke_credentials: + type: boolean + description: |- + Whether to also destroy the actual credential of this type owned by the + user. This option is only available for Enterprise Managed User (EMU) + enterprises. When set to `true`, the credential of the given type owned + by the user will be destroyed in addition to the credential authorizations. + Note that `oauth_app_token` credentials cannot be destroyed; for that type + only the credential authorizations are revoked. + default: false + examples: + default: + value: + credential_type: classic_pat + revoke_credentials: false + emu_with_credential_revocation: + summary: EMU enterprise with credential revocation + value: + credential_type: classic_pat + revoke_credentials: true + responses: + '202': + description: Accepted - The revocation request has been queued + content: + application/json: + schema: + type: object + properties: + message: + type: string + description: A message indicating the revocation has been queued + warning: + type: string + description: A warning message if the token used for this request + may be revoked + examples: + default: + value: + message: Credential type revocation for user 'octocat' has been + queued + with_authorization_revoked_warning: + summary: Warning when the calling token may have its authorization + revoked + value: + message: Credential type revocation for user 'octocat' has been + queued + warning: The token used for this request may also have its authorization + revoked as part of this operation + with_credential_destroyed_warning: + summary: Warning when the calling token may be destroyed (EMU with + `revoke_credentials`) + value: + message: Credential type revocation for user 'octocat' has been + queued + warning: The token used for this request may also be destroyed + as part of this operation + '403': *27 + '404': *6 + '422': + description: Validation error - The `credential_type` is missing or invalid, + the target user cannot be revoked, or `revoke_credentials` is not available + for this enterprise + content: + application/json: + schema: *3 + examples: + invalid_credential_type: + summary: Missing or invalid `credential_type` + value: + message: 'The `credential_type` parameter is required and must + be one of: classic_pat, fine_grained_pat, ssh_key, oauth_app_token' + documentation_url: https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise + non_emu_enterprise: + summary: "`revoke_credentials` requested on a non-EMU enterprise" + value: + message: The `revoke_credentials` option is only available for + Enterprise Managed User (EMU) enterprises + documentation_url: https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise + first_emu_owner: + summary: Target user is the first EMU owner + value: + message: The first EMU owner cannot be targeted for credential + revocation. + documentation_url: https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise + x-github: + githubCloudOnly: true + enabledForGitHubApps: true + category: enterprise-admin + subcategory: credential-authorizations "/enterprises/{enterprise}/dependabot/alerts": get: summary: List Dependabot alerts for an enterprise @@ -21207,7 +21461,7 @@ paths: type: object description: A Dependabot alert. properties: - number: *131 + number: *132 state: type: string description: The state of the Dependabot alert. @@ -21222,7 +21476,7 @@ paths: description: Details for the vulnerable dependency. readOnly: true properties: - package: &132 + package: &133 type: object description: Details for the vulnerable package. readOnly: true @@ -21302,13 +21556,13 @@ paths: description: Vulnerable version range information for the advisory. readOnly: true - items: &135 + items: &136 type: object description: Details pertaining to one vulnerable version range for the advisory. readOnly: true properties: - package: *132 + package: *133 severity: type: string description: The severity of the vulnerability. @@ -21383,8 +21637,8 @@ paths: - score - vector_string additionalProperties: false - cvss_severities: *133 - epss: *134 + cvss_severities: *134 + epss: *135 cwes: type: array description: Details for the advisory pertaining to Common @@ -21484,12 +21738,12 @@ paths: - updated_at - withdrawn_at additionalProperties: false - security_vulnerability: *135 - url: *136 - html_url: *137 - created_at: *138 - updated_at: *139 - dismissed_at: *140 + security_vulnerability: *136 + url: *137 + html_url: *138 + created_at: *139 + updated_at: *140 + dismissed_at: *141 dismissed_by: anyOf: - type: 'null' @@ -21513,7 +21767,7 @@ paths: description: An optional comment associated with the alert's dismissal. maxLength: 280 - fixed_at: *141 + fixed_at: *142 auto_dismissed_at: &625 type: - string @@ -22601,7 +22855,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#remove-all-enterprise-roles-from-a-team parameters: - *40 - - &142 + - &143 name: team_slug description: The slug of the enterprise team name. in: path @@ -22644,8 +22898,8 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#assign-an-enterprise-role-to-a-team parameters: - *40 - - *142 - - &143 + - *143 + - &144 name: role_id description: The unique identifier of the role. in: path @@ -22687,8 +22941,8 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#remove-an-enterprise-role-from-a-team parameters: - *40 - - *142 - *143 + - *144 responses: '204': description: Response @@ -22722,7 +22976,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#remove-all-enterprise-roles-from-a-user parameters: - *40 - - *144 + - *131 responses: '204': description: Response @@ -22756,8 +23010,8 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#assign-an-enterprise-role-to-an-enterprise-user parameters: - *40 + - *131 - *144 - - *143 responses: '204': description: Response @@ -22790,8 +23044,8 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#remove-enterprise-user-role-assignment parameters: - *40 + - *131 - *144 - - *143 responses: '204': description: Response @@ -22825,7 +23079,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#get-an-enterprise-role parameters: - *40 - - *143 + - *144 responses: '200': description: Response @@ -22885,7 +23139,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#list-teams-that-are-assigned-to-an-enterprise-role parameters: - *40 - - *143 + - *144 - *17 - *19 responses: @@ -22936,7 +23190,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/enterprise-roles#list-users-that-are-assigned-to-an-enterprise-role parameters: - *40 - - *143 + - *144 - *17 - *19 responses: @@ -23611,7 +23865,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/copilot/copilot-user-management#get-copilot-seat-assignment-details-for-an-enterprise-user parameters: - *40 - - *144 + - *131 responses: '200': description: The user's GitHub Copilot seat details, including usage. @@ -26812,14 +27066,14 @@ paths: items: &458 type: object properties: - number: *131 - created_at: *138 + number: *132 + created_at: *139 updated_at: anyOf: - type: 'null' - - *139 - url: *136 - html_url: *137 + - *140 + url: *137 + html_url: *138 locations_url: type: string format: uri @@ -31412,7 +31666,7 @@ paths: parameters: - *40 - *214 - - *144 + - *131 responses: '200': description: User is a member of the enterprise team. @@ -31457,7 +31711,7 @@ paths: parameters: - *40 - *214 - - *144 + - *131 responses: '201': description: Successfully added team member @@ -31484,7 +31738,7 @@ paths: parameters: - *40 - *214 - - *144 + - *131 responses: '204': description: Response @@ -47127,7 +47381,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/blocking#check-if-a-user-is-blocked-by-an-organization parameters: - *88 - - *144 + - *131 responses: '204': description: If the user is blocked @@ -47153,7 +47407,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/blocking#block-a-user-from-an-organization parameters: - *88 - - *144 + - *131 responses: '204': description: Response @@ -47174,7 +47428,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/blocking#unblock-a-user-from-an-organization parameters: - *88 - - *144 + - *131 responses: '204': description: Response @@ -53519,7 +53773,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/custom-roles#get-a-custom-repository-role parameters: - *88 - - *143 + - *144 responses: '200': description: Response @@ -53550,7 +53804,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/custom-roles#update-a-custom-repository-role parameters: - *88 - - *143 + - *144 requestBody: required: true content: @@ -53621,7 +53875,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/custom-roles#delete-a-custom-repository-role parameters: - *88 - - *143 + - *144 responses: '204': description: Response @@ -53701,7 +53955,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/custom-roles#closing-down---get-a-custom-role parameters: - *88 - - *143 + - *144 responses: '200': description: Response @@ -53738,7 +53992,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/custom-roles#closing-down---update-a-custom-role parameters: - *88 - - *143 + - *144 requestBody: required: true content: @@ -53791,7 +54045,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/custom-roles#closing-down---delete-a-custom-role parameters: - *88 - - *143 + - *144 responses: '204': description: Response @@ -58256,7 +58510,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/members#check-organization-membership-for-a-user parameters: - *88 - - *144 + - *131 responses: '204': description: Response if requester is an organization member and user is @@ -58291,7 +58545,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/members#remove-an-organization-member parameters: - *88 - - *144 + - *131 responses: '204': description: Response @@ -58318,7 +58572,7 @@ paths: - *17 - *19 - *88 - - *144 + - *131 responses: '200': description: Response @@ -58362,7 +58616,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/codespaces/organizations#delete-a-codespace-from-the-organization parameters: - *88 - - *144 + - *131 - &397 name: codespace_name in: path @@ -58397,7 +58651,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/codespaces/organizations#stop-a-codespace-for-an-organization-user parameters: - *88 - - *144 + - *131 - *397 responses: '200': @@ -58580,7 +58834,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/copilot/copilot-user-management#get-copilot-seat-assignment-details-for-a-user parameters: - *88 - - *144 + - *131 responses: '200': description: The user's GitHub Copilot seat details, including usage. @@ -58656,7 +58910,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/members#get-organization-membership-for-a-user parameters: - *88 - - *144 + - *131 responses: '200': description: Response @@ -58804,7 +59058,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/members#set-organization-membership-for-a-user parameters: - *88 - - *144 + - *131 requestBody: required: false content: @@ -58859,7 +59113,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/members#remove-organization-membership-for-a-user parameters: - *88 - - *144 + - *131 responses: '204': description: Response @@ -60207,7 +60461,7 @@ paths: parameters: - *88 - *219 - - *143 + - *144 responses: '204': description: Response @@ -60238,7 +60492,7 @@ paths: parameters: - *88 - *219 - - *143 + - *144 responses: '204': description: Response @@ -60264,7 +60518,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/organization-roles#remove-all-organization-roles-for-a-user parameters: - *88 - - *144 + - *131 responses: '204': description: Response @@ -60290,8 +60544,8 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/organization-roles#assign-an-organization-role-to-a-user parameters: - *88 + - *131 - *144 - - *143 responses: '204': description: Response @@ -60322,8 +60576,8 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/organization-roles#remove-an-organization-role-from-a-user parameters: - *88 + - *131 - *144 - - *143 responses: '204': description: Response @@ -60352,7 +60606,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/organization-roles#get-an-organization-role parameters: - *88 - - *143 + - *144 responses: '200': description: Response @@ -60416,7 +60670,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/organization-roles#update-a-custom-organization-role parameters: - *88 - - *143 + - *144 requestBody: required: true content: @@ -60509,7 +60763,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/organization-roles#delete-a-custom-organization-role parameters: - *88 - - *143 + - *144 responses: '204': description: Response @@ -60535,7 +60789,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/organization-roles#list-teams-that-are-assigned-to-an-organization-role parameters: - *88 - - *143 + - *144 - *17 - *19 responses: @@ -60677,7 +60931,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/organization-roles#list-users-that-are-assigned-to-an-organization-role parameters: - *88 - - *143 + - *144 - *17 - *19 responses: @@ -60900,7 +61154,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/outside-collaborators#convert-an-organization-member-to-outside-collaborator parameters: - *88 - - *144 + - *131 requestBody: required: false content: @@ -60958,7 +61212,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/outside-collaborators#remove-outside-collaborator-from-an-organization parameters: - *88 - - *144 + - *131 responses: '204': description: Response @@ -66405,7 +66659,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/members#check-public-organization-membership-for-a-user parameters: - *88 - - *144 + - *131 responses: '204': description: Response if user is a public member @@ -66430,7 +66684,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/members#set-public-organization-membership-for-the-authenticated-user parameters: - *88 - - *144 + - *131 responses: '204': description: Response @@ -66452,7 +66706,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/members#remove-public-organization-membership-for-the-authenticated-user parameters: - *88 - - *144 + - *131 responses: '204': description: Response @@ -69350,7 +69604,7 @@ paths: required: - vector_string - score - cvss_severities: *133 + cvss_severities: *134 cwes: type: - array @@ -71700,7 +71954,7 @@ paths: parameters: - *88 - *219 - - *144 + - *131 responses: '200': description: Response @@ -71772,7 +72026,7 @@ paths: parameters: - *88 - *219 - - *144 + - *131 requestBody: required: false content: @@ -71836,7 +72090,7 @@ paths: parameters: - *88 - *219 - - *144 + - *131 responses: '204': description: Response @@ -87336,6 +87590,15 @@ paths: enum: - weekly - + ai_findings_option: + description: The AI findings configuration for the repository. + type: + - string + - 'null' + enum: + - disabled + - on_push + - examples: default: value: @@ -87347,6 +87610,7 @@ paths: runner_label: updated_at: '2023-01-01T00:00:00Z' schedule: weekly + ai_findings_option: on_push '403': *562 '404': *6 '503': *196 @@ -87409,6 +87673,12 @@ paths: - javascript-typescript - python - ruby + ai_findings_option: + description: Whether AI findings run for Code Quality on this repository. + type: string + enum: + - disabled + - on_push anyOf: - required: - state @@ -87418,6 +87688,8 @@ paths: - runner_label - required: - languages + - required: + - ai_findings_option additionalProperties: false examples: default: @@ -87563,19 +87835,19 @@ paths: items: type: object properties: - number: *131 - created_at: *138 - updated_at: *139 - url: *136 - html_url: *137 + number: *132 + created_at: *139 + updated_at: *140 + url: *137 + html_url: *138 instances_url: *565 state: *114 - fixed_at: *141 + fixed_at: *142 dismissed_by: anyOf: - type: 'null' - *4 - dismissed_at: *140 + dismissed_at: *141 dismissed_reason: *566 dismissed_comment: *567 rule: *568 @@ -87740,7 +88012,7 @@ paths: field in the response from the `GET /repos/{owner}/{repo}/code-scanning/alerts` operation. required: true - schema: *131 + schema: *132 responses: '200': description: Response @@ -87749,19 +88021,19 @@ paths: schema: &573 type: object properties: - number: *131 - created_at: *138 - updated_at: *139 - url: *136 - html_url: *137 + number: *132 + created_at: *139 + updated_at: *140 + url: *137 + html_url: *138 instances_url: *565 state: *114 - fixed_at: *141 + fixed_at: *142 dismissed_by: anyOf: - type: 'null' - *4 - dismissed_at: *140 + dismissed_at: *141 dismissed_reason: *566 dismissed_comment: *567 rule: @@ -91569,7 +91841,7 @@ paths: parameters: - *491 - *492 - - *144 + - *131 responses: '204': description: Response if user is a collaborator @@ -91617,7 +91889,7 @@ paths: parameters: - *491 - *492 - - *144 + - *131 requestBody: required: false content: @@ -91873,7 +92145,7 @@ paths: parameters: - *491 - *492 - - *144 + - *131 responses: '204': description: No Content when collaborator was removed from the repository. @@ -91906,7 +92178,7 @@ paths: parameters: - *491 - *492 - - *144 + - *131 responses: '200': description: if user has admin permissions @@ -96200,7 +96472,7 @@ paths: type: object description: A Dependabot alert. properties: - number: *131 + number: *132 state: type: string description: The state of the Dependabot alert. @@ -96215,7 +96487,7 @@ paths: description: Details for the vulnerable dependency. readOnly: true properties: - package: *132 + package: *133 manifest_path: type: string description: The full path to the dependency manifest file, @@ -96248,12 +96520,12 @@ paths: - inconclusive - security_advisory: *624 - security_vulnerability: *135 - url: *136 - html_url: *137 - created_at: *138 - updated_at: *139 - dismissed_at: *140 + security_vulnerability: *136 + url: *137 + html_url: *138 + created_at: *139 + updated_at: *140 + dismissed_at: *141 dismissed_by: anyOf: - type: 'null' @@ -96277,7 +96549,7 @@ paths: description: An optional comment associated with the alert's dismissal. maxLength: 280 - fixed_at: *141 + fixed_at: *142 auto_dismissed_at: *625 dismissal_request: *626 assignees: @@ -96545,7 +96817,7 @@ paths: or in `number` fields in the response from the `GET /repos/{owner}/{repo}/dependabot/alerts` operation. required: true - schema: *131 + schema: *132 responses: '200': description: Response @@ -117880,6 +118152,11 @@ paths: description: |- Users with push access to the repository can create a release. + > [!NOTE] + > If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/enterprise-cloud@latest/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". + This endpoint triggers [notifications](https://docs.github.com/enterprise-cloud@latest/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see "[Rate limits for the API](https://docs.github.com/enterprise-cloud@latest/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)" and "[Best practices for using the REST API](https://docs.github.com/enterprise-cloud@latest/rest/guides/best-practices-for-using-the-rest-api)." tags: - repos @@ -118395,7 +118672,13 @@ paths: subcategory: releases patch: summary: Update a release - description: Users with push access to the repository can edit a release. + description: |- + Users with push access to the repository can edit a release. + + > [!NOTE] + > If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead. + + OAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the "Workflows" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see "[Automatic token authentication](https://docs.github.com/enterprise-cloud@latest/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)". tags: - repos operationId: repos/update-release @@ -119519,14 +119802,14 @@ paths: items: type: object properties: - number: *131 - created_at: *138 + number: *132 + created_at: *139 updated_at: anyOf: - type: 'null' - - *139 - url: *136 - html_url: *137 + - *140 + url: *137 + html_url: *138 locations_url: type: string format: uri @@ -119810,14 +120093,14 @@ paths: schema: &779 type: object properties: - number: *131 - created_at: *138 + number: *132 + created_at: *139 updated_at: anyOf: - type: 'null' - - *139 - url: *136 - html_url: *137 + - *140 + url: *137 + html_url: *138 locations_url: type: string format: uri @@ -128283,7 +128566,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/teams/members#get-team-member-legacy parameters: - *837 - - *144 + - *131 responses: '204': description: if user is a member @@ -128320,7 +128603,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/teams/members#add-team-member-legacy parameters: - *837 - - *144 + - *131 responses: '204': description: Response @@ -128360,7 +128643,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/teams/members#remove-team-member-legacy parameters: - *837 - - *144 + - *131 responses: '204': description: Response @@ -128397,7 +128680,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/teams/members#get-team-membership-for-a-user-legacy parameters: - *837 - - *144 + - *131 responses: '200': description: Response @@ -128439,7 +128722,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/teams/members#add-or-update-team-membership-for-a-user-legacy parameters: - *837 - - *144 + - *131 requestBody: required: false content: @@ -128501,7 +128784,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/teams/members#remove-team-membership-for-a-user-legacy parameters: - *837 - - *144 + - *131 responses: '204': description: Response @@ -129496,7 +129779,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/blocking#check-if-a-user-is-blocked-by-the-authenticated-user parameters: - - *144 + - *131 responses: '204': description: If the user is blocked @@ -129524,7 +129807,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/blocking#block-a-user parameters: - - *144 + - *131 responses: '204': description: Response @@ -129548,7 +129831,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/blocking#unblock-a-user parameters: - - *144 + - *131 responses: '204': description: Response @@ -131847,7 +132130,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/followers#check-if-a-person-is-followed-by-the-authenticated-user parameters: - - *144 + - *131 responses: '204': description: if the person is followed by the authenticated user @@ -131877,7 +132160,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/followers#follow-a-user parameters: - - *144 + - *131 responses: '204': description: Response @@ -131902,7 +132185,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/followers#unfollow-a-user parameters: - - *144 + - *131 responses: '204': description: Response @@ -136241,7 +136524,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/users#get-a-user parameters: - - *144 + - *131 responses: '200': description: Response @@ -136279,7 +136562,7 @@ paths: - *17 - *109 - *110 - - *144 + - *131 requestBody: required: true content: @@ -136376,7 +136659,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/attestations#delete-attestations-in-bulk parameters: - - *144 + - *131 requestBody: required: true content: @@ -136441,7 +136724,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/attestations#delete-attestations-by-subject-digest parameters: - - *144 + - *131 - name: subject_digest description: Subject Digest in: path @@ -136472,7 +136755,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/attestations#delete-attestations-by-id parameters: - - *144 + - *131 - name: attestation_id description: Attestation ID in: path @@ -136510,7 +136793,7 @@ paths: - *17 - *109 - *110 - - *144 + - *131 - name: subject_digest description: Subject Digest in: path @@ -136596,7 +136879,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/copilot-spaces#list-copilot-spaces-for-a-user parameters: - - *144 + - *131 - name: per_page description: The number of results per page (max 100). in: query @@ -136751,7 +137034,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/copilot-spaces#create-a-copilot-space-for-a-user parameters: - - *144 + - *131 requestBody: required: true content: @@ -136934,7 +137217,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/copilot-spaces#get-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -136970,7 +137253,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/copilot-spaces#set-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137097,7 +137380,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/copilot-spaces#delete-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137131,7 +137414,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/collaborators#list-collaborators-for-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137247,7 +137530,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/collaborators#add-a-collaborator-to-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137354,7 +137637,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/collaborators#set-a-collaborator-role-for-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137467,7 +137750,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/collaborators#remove-a-collaborator-from-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137515,7 +137798,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/resources#list-resources-for-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137573,7 +137856,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/resources#create-a-resource-for-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137678,7 +137961,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/resources#get-a-resource-for-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137728,7 +138011,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/resources#set-a-resource-for-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137796,7 +138079,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/copilot-spaces/resources#delete-a-resource-from-a-copilot-space-for-a-user parameters: - - *144 + - *131 - name: space_number description: The unique identifier of the Copilot Space. in: path @@ -137832,7 +138115,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/packages/packages#get-list-of-conflicting-packages-during-docker-migration-for-user parameters: - - *144 + - *131 responses: '200': description: Response @@ -137865,7 +138148,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/activity/events#list-events-for-the-authenticated-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -137937,7 +138220,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/activity/events#list-organization-events-for-the-authenticated-user parameters: - - *144 + - *131 - *88 - *17 - *19 @@ -138025,7 +138308,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/activity/events#list-public-events-for-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -138093,7 +138376,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/followers#list-followers-of-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -138124,7 +138407,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/followers#list-the-people-a-user-follows parameters: - - *144 + - *131 - *17 - *19 responses: @@ -138155,7 +138438,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/followers#check-if-a-user-follows-another-user parameters: - - *144 + - *131 - name: target_user in: path required: true @@ -138182,7 +138465,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/gists/gists#list-gists-for-a-user parameters: - - *144 + - *131 - *230 - *17 - *19 @@ -138216,7 +138499,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/gpg-keys#list-gpg-keys-for-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -138252,7 +138535,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/users#get-contextual-information-for-a-user parameters: - - *144 + - *131 - name: subject_type description: Identifies which additional information you'd like to receive about the person's hovercard. Can be `organization`, `repository`, `issue`, @@ -138324,7 +138607,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/apps/apps#get-a-user-installation-for-the-authenticated-app parameters: - - *144 + - *131 responses: '200': description: Response @@ -138350,7 +138633,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/keys#list-public-keys-for-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -138406,7 +138689,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/orgs/orgs#list-organizations-for-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -138458,7 +138741,7 @@ paths: - nuget - container - *860 - - *144 + - *131 - *19 - *17 responses: @@ -138495,7 +138778,7 @@ paths: parameters: - *407 - *408 - - *144 + - *131 responses: '200': description: Response @@ -138526,7 +138809,7 @@ paths: parameters: - *407 - *408 - - *144 + - *131 responses: '204': description: Response @@ -138560,7 +138843,7 @@ paths: parameters: - *407 - *408 - - *144 + - *131 - name: token description: package token schema: @@ -138594,7 +138877,7 @@ paths: parameters: - *407 - *408 - - *144 + - *131 responses: '200': description: Response @@ -138663,7 +138946,7 @@ paths: - *407 - *408 - *410 - - *144 + - *131 responses: '200': description: Response @@ -138706,7 +138989,7 @@ paths: parameters: - *407 - *408 - - *144 + - *131 - *410 responses: '204': @@ -138741,7 +139024,7 @@ paths: parameters: - *407 - *408 - - *144 + - *131 - *410 responses: '204': @@ -138766,7 +139049,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/projects/projects#list-projects-for-user parameters: - - *144 + - *131 - name: q description: Limit results to projects of the specified type. in: query @@ -138808,7 +139091,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/projects/projects#get-project-for-user parameters: - *423 - - *144 + - *131 responses: '200': description: Response @@ -138839,7 +139122,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/projects/fields#list-project-fields-for-user parameters: - *423 - - *144 + - *131 - *17 - *109 - *110 @@ -138873,7 +139156,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/projects/fields#add-field-to-user-owned-project parameters: - - *144 + - *131 - *423 requestBody: required: true @@ -138986,7 +139269,7 @@ paths: parameters: - *423 - *892 - - *144 + - *131 responses: '200': description: Response @@ -139018,7 +139301,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/projects/items#list-items-for-a-user-owned-project parameters: - *423 - - *144 + - *131 - *109 - *110 - *17 @@ -139073,7 +139356,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/projects/items#add-item-to-user-owned-project parameters: - - *144 + - *131 - *423 requestBody: required: true @@ -139180,7 +139463,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/projects/items#get-an-item-for-a-user-owned-project parameters: - *423 - - *144 + - *131 - *432 - name: fields description: |- @@ -139225,7 +139508,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/projects/items#update-project-item-for-user parameters: - *423 - - *144 + - *131 - *432 requestBody: required: true @@ -139326,7 +139609,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/projects/items#delete-project-item-for-user parameters: - *423 - - *144 + - *131 - *432 responses: '204': @@ -139350,7 +139633,7 @@ paths: url: https://docs.github.com/enterprise-cloud@latest/rest/projects/items#list-items-for-a-user-project-view parameters: - *423 - - *144 + - *131 - *894 - name: fields description: |- @@ -139407,7 +139690,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/activity/events#list-events-received-by-the-authenticated-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -139482,7 +139765,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/activity/events#list-public-events-received-by-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -139555,7 +139838,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/repos/repos#list-repositories-for-a-user parameters: - - *144 + - *131 - name: type description: Limit results to repositories of the specified type. in: query @@ -139620,7 +139903,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/social-accounts#list-social-accounts-for-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -139652,7 +139935,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/users/ssh-signing-keys#list-ssh-signing-keys-for-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -139688,7 +139971,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/activity/starring#list-repositories-starred-by-a-user parameters: - - *144 + - *131 - *896 - *111 - *17 @@ -139724,7 +140007,7 @@ paths: description: API method documentation url: https://docs.github.com/enterprise-cloud@latest/rest/activity/watching#list-repositories-watched-by-a-user parameters: - - *144 + - *131 - *17 - *19 responses: @@ -261758,14 +262041,14 @@ webhooks: alert: &961 type: object properties: - number: *131 - created_at: *138 + number: *132 + created_at: *139 updated_at: anyOf: - type: 'null' - - *139 - url: *136 - html_url: *137 + - *140 + url: *137 + html_url: *138 locations_url: type: string format: uri @@ -263039,7 +263322,7 @@ webhooks: required: - vector_string - score - cvss_severities: *133 + cvss_severities: *134 cwes: type: array items: @@ -263306,7 +263589,7 @@ webhooks: required: - vector_string - score - cvss_severities: *133 + cvss_severities: *134 cwes: type: array items: diff --git a/descriptions-next/ghec/dereferenced/ghec.2026-03-10.deref.json b/descriptions-next/ghec/dereferenced/ghec.2026-03-10.deref.json index 2478ea796d..148fe9265f 100644 --- a/descriptions-next/ghec/dereferenced/ghec.2026-03-10.deref.json +++ b/descriptions-next/ghec/dereferenced/ghec.2026-03-10.deref.json @@ -53905,6 +53905,211 @@ } } }, + "/enterprises/{enterprise}/credential-authorizations/revoke-credential-type": { + "post": { + "summary": "Revoke a single credential type for an enterprise", + "description": "Revokes a single credential type (for example, classic personal access tokens)\nacross all organizations within the enterprise. This removes the sign-in\nauthorizations for that credential type for every member of the enterprise.\n\nFor Enterprise Managed User (EMU) enterprises, you can optionally also destroy the\nactual credentials of that type owned by enterprise members by setting the\n`revoke_credentials` parameter to `true`.\n\nThis operation is performed asynchronously. A background job will be queued to process\nthe revocations.\n\n> [!WARNING]\n> If you use a personal access token to call this endpoint, that token may also be\n> revoked or destroyed as part of this operation.\n\nThe authenticated user must be an enterprise owner or have the `write_enterprise_credentials` permission to use this endpoint.\n\nOAuth app tokens and personal access tokens (classic) need the `admin:enterprise` scope to use this endpoint.", + "tags": [ + "enterprise-admin" + ], + "operationId": "enterprise-admin/revoke-credential-type-for-enterprise", + "externalDocs": { + "description": "API method documentation", + "url": "https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise" + }, + "parameters": [ + { + "name": "enterprise", + "description": "The slug version of the enterprise name.", + "in": "path", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "required": true, + "content": { + "application/json": { + "schema": { + "type": "object", + "required": [ + "credential_type" + ], + "properties": { + "credential_type": { + "type": "string", + "description": "The type of credential to revoke across the enterprise.", + "enum": [ + "classic_pat", + "fine_grained_pat", + "ssh_key", + "oauth_app_token" + ] + }, + "revoke_credentials": { + "type": "boolean", + "description": "Whether to also destroy the actual credentials of this type owned by\nenterprise members. This option is only available for Enterprise Managed\nUser (EMU) enterprises. When set to `true`, all credentials of the given\ntype owned by enterprise members will be destroyed in addition to the\ncredential authorizations. Note that `oauth_app_token` credentials cannot\nbe destroyed; for that type only the credential authorizations are revoked.", + "default": false + } + } + }, + "examples": { + "default": { + "value": { + "credential_type": "classic_pat", + "revoke_credentials": false + } + }, + "emu_with_credential_revocation": { + "summary": "EMU enterprise with credential revocation", + "value": { + "credential_type": "classic_pat", + "revoke_credentials": true + } + } + } + } + } + }, + "responses": { + "202": { + "description": "Accepted - The revocation request has been queued", + "content": { + "application/json": { + "schema": { + "type": "object", + "properties": { + "message": { + "type": "string", + "description": "A message indicating the revocation has been queued" + }, + "warning": { + "type": "string", + "description": "A warning message if the token used for this request may be revoked" + } + } + }, + "examples": { + "default": { + "value": { + "message": "Credential type revocation has been queued" + } + }, + "with_warning": { + "value": { + "message": "Credential type revocation has been queued", + "warning": "The token used for this request may also have its authorization revoked as part of this operation" + } + } + } + } + } + }, + "403": { + "description": "Forbidden", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + } + } + } + }, + "404": { + "description": "Resource not found", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + } + } + } + }, + "422": { + "description": "Validation error - The `credential_type` is missing or invalid, or `revoke_credentials` is not available for this enterprise", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + }, + "examples": { + "invalid_credential_type": { + "summary": "Missing or invalid `credential_type`", + "value": { + "message": "The `credential_type` parameter is required and must be one of: classic_pat, fine_grained_pat, ssh_key, oauth_app_token", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise" + } + }, + "non_emu_enterprise": { + "summary": "`revoke_credentials` requested on a non-EMU enterprise", + "value": { + "message": "The `revoke_credentials` option is only available for Enterprise Managed User (EMU) enterprises", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-an-enterprise" + } + } + } + } + } + } + }, + "x-github": { + "githubCloudOnly": true, + "enabledForGitHubApps": true, + "category": "enterprise-admin", + "subcategory": "credential-authorizations" + } + } + }, "/enterprises/{enterprise}/credential-authorizations/{username}/revoke": { "post": { "summary": "Revoke credential authorizations for a user in an enterprise", @@ -54112,6 +54317,235 @@ } } }, + "/enterprises/{enterprise}/credential-authorizations/{username}/revoke-credential-type": { + "post": { + "summary": "Revoke a single credential type for a user in an enterprise", + "description": "Revokes a single credential type (for example, classic personal access tokens)\nfor a single user within the enterprise. This removes the sign-in authorizations\nfor that credential type across all organizations in the enterprise for the user.\n\nFor Enterprise Managed User (EMU) enterprises, you can optionally also destroy the\nactual credential of that type owned by the user by setting the `revoke_credentials`\nparameter to `true`.\n\nThis operation is performed asynchronously. A background job will be queued to process\nthe revocations.\n\n> [!WARNING]\n> If you use a personal access token to call this endpoint and target yourself, that\n> token may also be revoked or destroyed as part of this operation.\n\nThe authenticated user must be an enterprise owner or have the `write_enterprise_credentials` permission to use this endpoint.\n\nOAuth app tokens and personal access tokens (classic) need the `admin:enterprise` scope to use this endpoint.", + "tags": [ + "enterprise-admin" + ], + "operationId": "enterprise-admin/revoke-credential-type-for-user", + "externalDocs": { + "description": "API method documentation", + "url": "https://docs.github.com/enterprise-cloud@latest/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise" + }, + "parameters": [ + { + "name": "enterprise", + "description": "The slug version of the enterprise name.", + "in": "path", + "required": true, + "schema": { + "type": "string" + } + }, + { + "name": "username", + "description": "The handle for the GitHub user account.", + "in": "path", + "required": true, + "schema": { + "type": "string" + } + } + ], + "requestBody": { + "required": true, + "content": { + "application/json": { + "schema": { + "type": "object", + "required": [ + "credential_type" + ], + "properties": { + "credential_type": { + "type": "string", + "description": "The type of credential to revoke for the user.", + "enum": [ + "classic_pat", + "fine_grained_pat", + "ssh_key", + "oauth_app_token" + ] + }, + "revoke_credentials": { + "type": "boolean", + "description": "Whether to also destroy the actual credential of this type owned by the\nuser. This option is only available for Enterprise Managed User (EMU)\nenterprises. When set to `true`, the credential of the given type owned\nby the user will be destroyed in addition to the credential authorizations.\nNote that `oauth_app_token` credentials cannot be destroyed; for that type\nonly the credential authorizations are revoked.", + "default": false + } + } + }, + "examples": { + "default": { + "value": { + "credential_type": "classic_pat", + "revoke_credentials": false + } + }, + "emu_with_credential_revocation": { + "summary": "EMU enterprise with credential revocation", + "value": { + "credential_type": "classic_pat", + "revoke_credentials": true + } + } + } + } + } + }, + "responses": { + "202": { + "description": "Accepted - The revocation request has been queued", + "content": { + "application/json": { + "schema": { + "type": "object", + "properties": { + "message": { + "type": "string", + "description": "A message indicating the revocation has been queued" + }, + "warning": { + "type": "string", + "description": "A warning message if the token used for this request may be revoked" + } + } + }, + "examples": { + "default": { + "value": { + "message": "Credential type revocation for user 'octocat' has been queued" + } + }, + "with_authorization_revoked_warning": { + "summary": "Warning when the calling token may have its authorization revoked", + "value": { + "message": "Credential type revocation for user 'octocat' has been queued", + "warning": "The token used for this request may also have its authorization revoked as part of this operation" + } + }, + "with_credential_destroyed_warning": { + "summary": "Warning when the calling token may be destroyed (EMU with `revoke_credentials`)", + "value": { + "message": "Credential type revocation for user 'octocat' has been queued", + "warning": "The token used for this request may also be destroyed as part of this operation" + } + } + } + } + } + }, + "403": { + "description": "Forbidden", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + } + } + } + }, + "404": { + "description": "Resource not found", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + } + } + } + }, + "422": { + "description": "Validation error - The `credential_type` is missing or invalid, the target user cannot be revoked, or `revoke_credentials` is not available for this enterprise", + "content": { + "application/json": { + "schema": { + "title": "Basic Error", + "description": "Basic Error", + "type": "object", + "properties": { + "message": { + "type": "string" + }, + "documentation_url": { + "type": "string" + }, + "url": { + "type": "string" + }, + "status": { + "type": "string" + } + } + }, + "examples": { + "invalid_credential_type": { + "summary": "Missing or invalid `credential_type`", + "value": { + "message": "The `credential_type` parameter is required and must be one of: classic_pat, fine_grained_pat, ssh_key, oauth_app_token", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise" + } + }, + "non_emu_enterprise": { + "summary": "`revoke_credentials` requested on a non-EMU enterprise", + "value": { + "message": "The `revoke_credentials` option is only available for Enterprise Managed User (EMU) enterprises", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise" + } + }, + "first_emu_owner": { + "summary": "Target user is the first EMU owner", + "value": { + "message": "The first EMU owner cannot be targeted for credential revocation.", + "documentation_url": "https://docs.github.com/rest/enterprise-admin/credential-authorizations#revoke-a-single-credential-type-for-a-user-in-an-enterprise" + } + } + } + } + } + } + }, + "x-github": { + "githubCloudOnly": true, + "enabledForGitHubApps": true, + "category": "enterprise-admin", + "subcategory": "credential-authorizations" + } + } + }, "/enterprises/{enterprise}/dependabot/alerts": { "get": { "summary": "List Dependabot alerts for an enterprise", @@ -414979,6 +415413,18 @@ "weekly", null ] + }, + "ai_findings_option": { + "description": "The AI findings configuration for the repository.", + "type": [ + "string", + "null" + ], + "enum": [ + "disabled", + "on_push", + null + ] } } }, @@ -414993,7 +415439,8 @@ "runner_type": "standard", "runner_label": null, "updated_at": "2023-01-01T00:00:00Z", - "schedule": "weekly" + "schedule": "weekly", + "ai_findings_option": "on_push" } } } @@ -415160,6 +415607,14 @@ "ruby" ] } + }, + "ai_findings_option": { + "description": "Whether AI findings run for Code Quality on this repository.", + "type": "string", + "enum": [ + "disabled", + "on_push" + ] } }, "anyOf": [ @@ -415182,6 +415637,11 @@ "required": [ "languages" ] + }, + { + "required": [ + "ai_findings_option" + ] } ], "additionalProperties": false @@ -716979,7 +717439,7 @@ }, "post": { "summary": "Create a release", - "description": "Users with push access to the repository can create a release.\n\nThis endpoint triggers [notifications](https://docs.github.com/enterprise-cloud@latest/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/enterprise-cloud@latest/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/enterprise-cloud@latest/rest/guides/best-practices-for-using-the-rest-api).\"", + "description": "Users with push access to the repository can create a release.\n\n> [!NOTE]\n> If the commit identified by `target_commitish` (or, when `target_commitish` is omitted, the latest commit on the default branch) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more information, see \"[Automatic token authentication](https://docs.github.com/enterprise-cloud@latest/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)\".\n\nThis endpoint triggers [notifications](https://docs.github.com/enterprise-cloud@latest/github/managing-subscriptions-and-notifications-on-github/about-notifications). Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"[Rate limits for the API](https://docs.github.com/enterprise-cloud@latest/rest/using-the-rest-api/rate-limits-for-the-rest-api#about-secondary-rate-limits)\" and \"[Best practices for using the REST API](https://docs.github.com/enterprise-cloud@latest/rest/guides/best-practices-for-using-the-rest-api).\"", "tags": [ "repos" ], @@ -721209,7 +721669,7 @@ }, "patch": { "summary": "Update a release", - "description": "Users with push access to the repository can edit a release.", + "description": "Users with push access to the repository can edit a release.\n\n> [!NOTE]\n> If the resolved target commit (the new value of `target_commitish` if you are changing it, otherwise the existing target) adds or modifies any file under `.github/workflows/` relative to the repository's default branch, the authenticating token must be authorized to modify workflows. Otherwise, this endpoint returns `404 Not Found`; some authentication paths surface `403 Resource not accessible by integration` instead.\n\nOAuth app tokens and personal access tokens (classic) need the `workflow` scope when the resolved target commit modifies workflow files. Fine-grained access tokens and GitHub App installation tokens also need the \"Workflows\" repository permission (write). The `GITHUB_TOKEN` available to GitHub Actions cannot be authorized for this; for more informa{"code":"deadline_exceeded","msg":"operation timed out"}