You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
ArtifactsArea: what it touches
Bug FixesKind: in v2.1.236,
Bug FixesSection of the release
What
The live_edit, reply and resolve Artifact actions now re-check that the approved input still names the same action before running, and refuse if a hook or permission rewrite changed it. Nothing is posted and the call can be retried so it gets checked again.
Details
Refusals carry dedicated reason codes live_edit_target_changed, reply_target_changed and resolve_target_changed.
The existing PR-review overwrite refusal codes were folded into the same shared reason-code map.
Evidence
`action no longer names what was approved — this input was approved as another Artifact action, not this reply; nothing was posted; retry so it is checked again `
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
