From 284920ff4b0f4840b8380873788ea505ff22ad56 Mon Sep 17 00:00:00 2001 From: "Aaron K. Clark" Date: Tue, 19 May 2026 10:59:02 -0500 Subject: [PATCH] docs(changelog): note completion of the OpenAPI Idempotency-Replay sweep The 16-PR sweep tracked by #245 landed today, adding the \`Idempotency-Replay\` response-header declaration to every \`/v1/*\` single-create POST 201 in the spec. Bulk endpoints picked this up in #168; this batch extended it to single-create symmetry so SDK generators can carry the replay flag into client-facing types across the whole API surface, not just the bulk paths. Adding a single \`[Unreleased]\` entry under "Added" so the release notes capture the work without flooding the section with one bullet per PR. Co-Authored-By: Claude Opus 4.7 (1M context) --- CHANGELOG.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 61e5c0c..3e123c6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -38,6 +38,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 in the `minor-and-patch` Dependabot group. ### Added +- **OpenAPI: `Idempotency-Replay` response-header declaration on every + single-create POST 201** (#245 sweep — landed across 16 PRs from + #246 through #288). Every `/v1/*` POST that flows through the + `Idempotency-Key` middleware now advertises the `Idempotency-Replay` + header on its 201 response in the spec — SDK generators + (openapi-typescript, etc.) carry the replay flag into client-facing + types instead of having callers infer it from prose in the request + header's description. The bulk endpoints picked this up in #168; + this sweep extends it to single-create symmetry. - **Real-PG integration coverage for the cascade auth helpers** (#121, follow-up to #117). Six new test cases against `postgres:16-alpine` for the four `getCompanyIdBy*` helpers in