Post-2026.1.0.52 sweep, Tier 3: diagram layout key, Linux ES resilience, SAML XXE, bug fixes - #26
Closed
nahumtimerman wants to merge 3 commits into
Closed
Conversation
…inputs, category validation Documents the three behavior-changing items that landed on 2026.1 after the 2026.1.0.52 pass (#18) and were not covered by #19-#22. Python 3 upgraded to 3.13.15 x64 (Trunk CS 189988/189997/189999, backported in CS 190003). This is the WINDOWS bundled slot only - the Docker ES image still builds Python 3.9.9, and so do the Linux VA and the from-script ES, so every page states the platform split rather than a blanket "CloudShell now uses 3.13". Python 2.7.18 is untouched. Also corrects setting-up-dev-env.md, which #23 had just updated to say the bundled version is 3.9.9 - true when it merged on Sep 6, wrong when the upgrade landed on Sep 8. Global inputs kept on save as blueprint, with the new KeepResourceGlobalInputsOnSaveAsBlueprint key (CS 189903/189905/189914). Default is true, which is a behavior change on upgrade: inputs that fronted a resource requirement used to be dropped and are now visible in the Reserve dialog and the blueprint editor. Documented as a customer-visible key on the Server (AppSettingVisibility.Customer, read by ServiceConfigSettingsLoader). Blueprint import now fails on a category missing from the target domain instead of silently dropping the association (CS 189942). The ExportBlueprint/ImportBlueprint page from #22 already stated this, so it needed no correction - only the release notes did. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
… by display name Driver command queue inspection and recovery (Trunk CS 189900, ticket 67008). New how-to page for the four sysadmin-gated methods - GetRunningCommands, GetResourceCommandExecutions, CancelResourceCommand, ClearResourceCommands - plus a What's New entry. Signatures, parameter semantics and the sysadmin requirement come from Tools/API/XmlDocumentation/TestShell API/ApiDocumentation.xml, where all four are registered Lang="all". The response shape is RunningCommandListInfo from ApiCommandResult.cs: a Commands list of RunningCommandInfo with ExecutionId, ResourceFullName, CommandName, Status, StartTime and ReservationId. The page leads with why the resource-scoped pair exists - a command belonging to a previous, possibly ended, sandbox blocking an exclusive non-concurrent resource, which a new sandbox cannot see because its view is reservation scoped - and notes that ClearResourceCommands cancels out-of-band so it does not wait behind the command it is clearing, which is what makes it usable from Setup. Sandbox owners and permitted users accepted by display name (CS 189998 + 190000, ticket 67309; release note Docs/ReleaseNotes/2026.1/ sandbox-owner-resolved-by-display-name.md). Keeps the two points that make it safe to rely on: usernames are matched first so nothing existing changes, and an ambiguous display name is rejected rather than resolved arbitrarily. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
nahumtimerman
force-pushed
the
docs/2026.1-patch-sweep-tier2
branch
from
September 9, 2026 14:40
d0a900f to
6eb770b
Compare
…silience, SAML XXE, bug fixes Closes out the catch-up for everything that landed on 2026.1 after 2026.1.0.52. PreserveDiagramLayoutOnViewStyleChange (CS 189995/189996/190004, ticket 67465 / WI 19310). Documented as a customer key on the Portal - it is declared AppSettingVisibility.Customer, unlike the ES/Server keys below - with the overlap caveat from the setting's own description. The three unconditional coordinate fixes (Arrange, drag-to-move, sticky-note resize) are noted separately, since they apply whether or not the key is set. Linux/Mono ES resilience (CS 189890/189891, ticket 67293). Described by behavior rather than by key: MinThreadPoolWorkerThreads (200), BeginExecutionMaxRetryCount (10) and BeginExecutionRetryIntervalSec (6) all default to AppSettingVisibility.Support, so they do not belong in the customer configuration keys repository. The user-visible facts are the wedged agent under driver-spawn bursts, the ~100s dispatch tolerance, and the Linux venv bin-vs-Scripts path fix. SAML ACS XXE (CS 189894, CWE-611) added to Security Updates - unauthenticated endpoint, so it is called out for SSO/SAML deployments. Bug fixes: diagram duplicate resource alias (CS 189961, release note), 'Blueprint not found' loop on domain switch (CS 189991), 500 downloading a shell or provisioning script with an extensionless stored file name (CS 189989), Properties dialog end time for a non-admin on an extended sandbox (CS 190005). Deliberately not documented: the Docker ES get-pip curl/wget change (CS 189983/189984/189986) is image build plumbing that never reached a released image, plus Dotfuscator, TCL/XmlToHtml generation, nightly-red and CI-only changesets. ExportBlueprintPackage/ImportBlueprintPackage (CS 189912/189917/189921) are also omitted: CS 189940 replaced them with the ExportBlueprint/ImportBlueprint pair already documented in #22. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
nahumtimerman
force-pushed
the
docs/2026.1-patch-sweep-tier3
branch
from
September 9, 2026 14:41
d5d3150 to
0a4830c
Compare
nahumtimerman
force-pushed
the
docs/2026.1-patch-sweep-tier2
branch
from
September 10, 2026 06:32
6eb770b to
9800713
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Final batch of the post-2026.1.0.52 catch-up. Based on
docs/2026.1-patch-sweep-tier2(#25), which is based on #24 — all three editwhats-new.md. Merge #24 → #25 → this.Preserve diagram arrangement on View Style change
CS 189995 / 189996 / 190004 (ticket 67465, WI 19310). New
PreserveDiagramLayoutOnViewStyleChangePortal key, defaultFalse. Documented in the customer keys repository because it is declaredAppSettingVisibility.Customer— including the caveat from the setting's own description that enabling it can make Large cards overlap on a diagram arranged in a smaller View Style. The three coordinate fixes that landed unconditionally (Arrange, drag-to-move, sticky-note resize) are called out separately since they apply regardless of the key.Linux Execution Server resilience
CS 189890 / 189891 (ticket 67293). Described by behavior, not by key:
MinThreadPoolWorkerThreads(200),BeginExecutionMaxRetryCount(10) andBeginExecutionRetryIntervalSec(6) all take theAppSettingdefault visibility, which isAppSettingVisibility.Support— so they don't belong in the customer configuration keys repository. What's documented is what a user can observe: the agent wedging under driver-spawn bursts, the ~100s dispatch tolerance replacing a few seconds, and the Linux venvbin-vs-Scriptspath fix.Security
CS 189894 — unauthenticated XXE (CWE-611) on the Portal SAML ACS endpoint, added to the 2026.1 Security Updates with an explicit note for SSO/SAML deployments.
Bug fixes
Four bullets: diagram duplicate resource alias (CS 189961, has a release note), Blueprint not found loop on domain switch (CS 189991), HTTP 500 downloading a shell/provisioning script with an extensionless stored file name (CS 189989), Properties dialog end time for a non-admin on a sandbox extended past its cap (CS 190005).
Deliberately not documented
ExportBlueprintPackage/ImportBlueprintPackage(CS 189912/189917/189921) — CS 189940 replaced them with theExportBlueprint/ImportBlueprintpair already documented in Document the new ExportBlueprint/ImportBlueprint APIs (2026.1) #22, so documenting them would describe an API that was superseded before release.npx docusaurus buildpasses; the 3 broken links reported are pre-existing and unrelated.🤖 Generated with Claude Code