git-echo
124b5b0e3b
Automates version bumps across all version source files: - Cargo.toml (PRIMARY - workspace.package.version) - debian/changelog (prepend new entry) - debian/control (update Version field) - scripts/build-package.sh (update VERSION variable) - frontend/package.json (update version field) - Stale references check after bump Usage: ./scripts/bump-version.sh <new_version> <old_version>
35 lines
1.7 KiB
SQL
35 lines
1.7 KiB
SQL
-- Migration: 005_audit_hardening
|
|
-- Description: Add prev_hash column to audit_log for full hash chaining,
|
|
-- add notification config defaults to system_config, add new
|
|
-- audit_action enum values, and add audit_integrity_last_verified.
|
|
|
|
-- ============================================================
|
|
-- 1. Add prev_hash column to audit_log
|
|
-- ============================================================
|
|
ALTER TABLE audit_log ADD COLUMN IF NOT EXISTS prev_hash TEXT NOT NULL DEFAULT '';
|
|
|
|
-- Reset the audit log so the hash chain starts clean.
|
|
-- Existing rows were inserted before prev_hash existed, so their
|
|
-- chain is broken. Truncating lets the worker build a valid chain.
|
|
TRUNCATE audit_log;
|
|
|
|
-- ============================================================
|
|
-- 2. Add notification config defaults to system_config
|
|
-- ============================================================
|
|
INSERT INTO system_config (key, value, updated_at)
|
|
VALUES
|
|
('notification_email_enabled', 'false', NOW()),
|
|
('notification_email_from', 'patch-manager@localhost', NOW()),
|
|
('notification_email_recipients', '[]', NOW()),
|
|
('audit_integrity_last_verified', '', NOW())
|
|
ON CONFLICT (key) DO NOTHING;
|
|
|
|
-- ============================================================
|
|
-- 3. Add new audit_action enum values
|
|
-- ============================================================
|
|
ALTER TYPE audit_action ADD VALUE IF NOT EXISTS 'audit_integrity_verified';
|
|
ALTER TYPE audit_action ADD VALUE IF NOT EXISTS 'email_notification_sent';
|
|
ALTER TYPE audit_action ADD VALUE IF NOT EXISTS 'patch_job_completed';
|
|
ALTER TYPE audit_action ADD VALUE IF NOT EXISTS 'patch_job_failed';
|
|
ALTER TYPE audit_action ADD VALUE IF NOT EXISTS 'maintenance_window_reminder';
|