kolaente f5c68ac049 fix(bots): 404 unowned bots, require status on PUT, audit owner status changes ...

- Owners can manage bots in any status (disabled or locked); unowned,
  missing and non-bot ids all return 404 so existence never leaks.
- PUT /api/v2/user/bots/{bot} requires status, so a partial body can no
  longer re-enable a disabled bot. A bot_status validator tag limits it
  to active/disabled.
- BotUser.Status is a pointer: the v1 update route keeps the current
  status when the body omits it instead of unlocking the bot.
- Owner status changes dispatch bot.status.changed for the audit log.
- Regenerate the frontend client and adapt the bot update callers.

Refs #3999

2026-10-01 15:27:34 +02:00

..

audit_test.go

refactor(events): pass context to DispatchPending directly

2026-06-12 08:56:08 +00:00

entry.go

fix(bots): 404 unowned bots, require status on PUT, audit owner status changes

2026-10-01 15:27:34 +02:00

listener.go

refactor(events): use a concrete doer on project and team events

2026-06-12 08:56:08 +00:00

writer.go

fix(audit): handle reopen failure after a failed rotation

2026-06-12 08:56:08 +00:00