Skip to content

docs: remove retired approvals from the docs - #345

Merged
ToreMerkely merged 1 commit into
mainfrom
5125-approvals-removal
Jul 28, 2026
Merged

docs: remove retired approvals from the docs#345
ToreMerkely merged 1 commit into
mainfrom
5125-approvals-removal

Conversation

@ToreMerkely

Copy link
Copy Markdown
Contributor

Approvals are being retired (kosli-dev/server#5125). CLI v2.35.0 removed the approval commands and server kosli-dev/server#6309 removed the approval API, which is now in prod.

The update-cli-docs workflow already deleted the five generated client_reference pages and their nav entries in #343. This PR covers everything that automation cannot do.

Changes

  • Redirectsconfig/redirects.json gets the five deleted client_reference/kosli_*approval* URLs pointing at /client_reference/overview. The workflow deletes pages but never touches redirects, so those URLs were 404ing for bookmarks and search hits.
  • tutorials/cli_and_http_proxy.md — removed the kosli request approval example; the page still shows two proxy examples.
  • integrations/kosli_actions.md — the documented custom-webhook payload now matches MessageProvider._webhook_base_payload: dropped the approvals array, and the deployments array with it (the builder emits neither, and the deployments collection was dropped long ago — stale independently of #5125).
  • administration/managing_users/roles_in_kosli.md — removed the permission-matrix row and the four per-role bullets.
  • understand_kosli/glossary.md / controls.mdapproval was never a built-in attestation type; the built-ins are generic, junit, snyk, pull_request, jira, sonar.
  • Changelog — a v2.35.0 CLI entry with the breaking removal, plus a Platform entry for the API removal.
  • kosli get trail live example — repointed from the pinned March 2024 trail (which contains artifact_approval_reported events) to e4757683b74df7033c95aa544a7824b395c2f8bb (July 2026, 16 events, no approvals), and regenerated the page. Since the page is generated, pinning a newer trail is the only way to stop the approval events reappearing on every CLI release.
  • Dead live-docs plumbing — removed the kosli report approval modifier entry and moved the two tests that used it as their fixture onto commands that still exist.

Test plan

  • pytest tests/ — 22 passed
  • python scripts/test_update_cli_nav.py — PASS
  • mint broken-links — no new breakages (the one hit, /getting_started/service-accounts in tutorials/working_with_controls.mdx, is pre-existing and untouched here)
  • rg -in approval sweep — only concept/PR-approval prose and the has-approval policy name remain

Live-docs test fixtures were deliberately left unrefreshed: regenerating them rewrites all five files with fresh live data and the suite passes without it.

🤖 Generated with Claude Code

CLI v2.35.0 removed the approval commands and server #6309 removed the
approval API from prod, so the hand-written pages that still describe
approvals now document something users cannot do. The release automation
only regenerates client_reference/ and the CLI nav, so everything here
needed doing by hand.

Add redirects for the five deleted client_reference pages - the
update-cli-docs workflow deletes pages but never touches
config/redirects.json, so those URLs were serving 404s to anyone arriving
from a bookmark or a search result.

Drop the approvals array from the documented custom-webhook payload, and
the deployments array with it: the payload builder emits neither, and the
deployments collection was dropped long ago.

Repoint the kosli get trail live example at a July 2026 trail. The pinned
March 2024 trail contains artifact_approval_reported events, and since the
page is generated the only way to stop them reappearing on every CLI
release is to pin a trail from after cyber-dojo stopped reporting
approvals.

Correct the built-in attestation type lists in the glossary and the
controls table: approval was never an attestation type - the built-ins are
generic, junit, snyk, pull_request, jira and sonar.

Remove the now-dead kosli report approval live-docs modifier, and move the
two tests that used it as their fixture onto commands that still exist.

Docs stay slightly ahead of the server on roles: MEMBER still holds the
update_approval UI action for legacy approvals, but nothing can create an
approval any more, so the roles page should not advertise it.
@ToreMerkely
ToreMerkely requested a review from a team as a code owner July 28, 2026 11:45
@claude

claude Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Claude finished @ToreMerkely's task in 2m 17s —— View job


PR Review: Remove retired approvals from the docs

  • Read CLAUDE.md and doc-review skill
  • Review changed docs files for content quality
  • Check for relative links, missing nav entries, and convention violations
  • Review redirects configuration
  • Review changelog entry format
  • Post final review

Clean, thorough removal. The changes are consistent across roles, webhook payload, tutorials, glossary, and controls. Redirects for the five deleted CLI reference pages are correct. Changelog entries follow the <Update> format. No relative links, no missing nav entries, no style violations.

One thing slipped through the sweep:

Improvement

understand_kosli/how_kosli_works.md:22 — Still lists "approvals" as a built-in attestation type:

Kosli provides built-in attestation types for common controls (Snyk, JUnit, SonarCloud, pull requests, approvals)

This is the same issue fixed in glossary.md (→ generic) and controls.md (→ generic or custom type), but how_kosli_works.md was not touched. Should be updated for consistency — approval was never a real built-in type per the PR description.

Fix this →

File-by-file notes

File Verdict
config/redirects.json All five approval CLI pages redirect to /client_reference/overview. Correct.
changelog/index.mdx Two entries (CLI v2.35.0 + Platform). Format matches existing <Update> pattern. Links to /getting_started/attestations verified.
administration/managing_users/roles_in_kosli.md Permission matrix row removed; Admin, Member, Snapshotter, and Reader bullets updated consistently.
integrations/kosli_actions.md Webhook payload drops both approvals and deployments arrays. Matches the PR rationale (neither is emitted by the builder).
tutorials/cli_and_http_proxy.md kosli request approval example removed cleanly; two proxy examples remain.
understand_kosli/controls.md approval type → generic or custom type. Correct.
understand_kosli/glossary.md approvalgeneric in built-in types list. Correct.
client_reference/kosli_get_trail.md Regenerated with a newer trail that has no approval events. Large diff but expected for a generated page.
scripts/ and tests/ Modifier entry for kosli report approval removed; tests repointed to existing commands. Clean.

Summary

  • Critical: 0
  • Improvement: 1 (how_kosli_works.md still mentions approvals as a built-in type)
  • Suggestion: 0

Overall this is a well-scoped cleanup PR. The one missed file is a minor consistency issue.

@mintlify

mintlify Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
kosli 🟢 Ready View Preview Jul 28, 2026, 11:46 AM

@ToreMerkely
ToreMerkely merged commit 173de7d into main Jul 28, 2026
6 checks passed
@ToreMerkely
ToreMerkely deleted the 5125-approvals-removal branch July 28, 2026 12:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants