fix(concurrency): batch-2 hazards C1, H1-H7, M1-M9 (17 fixes)#2847

Merged

simonredfern merged 31 commits into

OpenBankProject:developfrom

hongwei1:feature/concurrency-hazard-fixes-batch2

Jul 2, 2026

Commits on Jun 26, 2026

test(concurrency): add reproductions for 17 follow-up concurrency hazards
hongwei1
committed
fix(concurrency): propagate bulk-payment batch-reference claim failure (C1)
hongwei1
committed
fix(concurrency): make consent status transitions atomic (H1, H2, H3, M5)
hongwei1
committed
fix(concurrency): harden mutable singletons and lazy-init vars (H5, H7, M8, H6, M9)
hongwei1
committed
fix(concurrency): make Redis rate-limit and idempotency ops atomic (H4, M6, M7)
hongwei1
committed
fix(concurrency): guard business status transitions and lock TR status update (M1, M2, M3, M4)
hongwei1
committed
docs(concurrency): document batch-2 hazards (C1, H1-H7, M1-M9) and fixes
hongwei1
committed
test(concurrency): fix M5 race test to use conditional UPDATE path
hongwei1
committed
chore: remove sequential test runner (superseded by run_tests_parallel.sh)
hongwei1
committed
refactor(context): extract processUacAnswer to reduce cognitive complexity
hongwei1
committed
fix(concurrency): return 404 not 400 for missing transaction request on status lock
hongwei1
committed
fix(consent): fail visibly when skip-SCA consent vanishes after creation
hongwei1
committed

Commits on Jul 1, 2026

fix(errors): replace bare-string Failure messages with OBP-XXX codes
hongwei1
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(concurrency): batch-2 hazards C1, H1-H7, M1-M9 (17 fixes)#2847

fix(concurrency): batch-2 hazards C1, H1-H7, M1-M9 (17 fixes)#2847
simonredfern merged 31 commits into
OpenBankProject:developfrom
hongwei1:feature/concurrency-hazard-fixes-batch2

Commits on Jun 26, 2026

test(concurrency): add reproductions for 17 follow-up concurrency hazards

fix(concurrency): propagate bulk-payment batch-reference claim failure (C1)

fix(concurrency): make consent status transitions atomic (H1, H2, H3, M5)

fix(concurrency): harden mutable singletons and lazy-init vars (H5, H7, M8, H6, M9)

fix(concurrency): make Redis rate-limit and idempotency ops atomic (H4, M6, M7)

fix(concurrency): guard business status transitions and lock TR status update (M1, M2, M3, M4)

docs(concurrency): document batch-2 hazards (C1, H1-H7, M1-M9) and fixes

test(concurrency): fix M5 race test to use conditional UPDATE path

chore: remove sequential test runner (superseded by run_tests_parallel.sh)

refactor(context): extract processUacAnswer to reduce cognitive complexity

fix(concurrency): return 404 not 400 for missing transaction request on status lock

fix(consent): fail visibly when skip-SCA consent vanishes after creation

Commits on Jul 1, 2026

fix(errors): replace bare-string Failure messages with OBP-XXX codes

Commits on Jul 2, 2026

fix(consent): apply skip-SCA guarded auto-accept to v5.0.0 and v5.1.0 createConsent

fix(account-access): win the status CAS before granting view access on approval

fix(rate-limit): self-heal expiry-less counter keys and return TTL atomically

fix(bulk-payment): release the batch_reference when parent TR creation fails

fix(doobie): bump updatedat in conditional status UPDATEs to match saveMe

fix(concurrency): warn when the transaction-request lock degrades to a no-op

refactor(concurrency): dedup challenge CAS block, align row-count checks and messages

fix(test-runner): make the parallel runner's verdict trustworthy

fix(berlin-group): wrap PIIS example bodies explicitly for json4s

merge: PIIS example-body json4s fix from worktree investigation

fix(berlin-group): wrap all v1.3 ResourceDoc example bodies in JvalueCaseClass

merge: extend PIIS example-body json4s fix to AIS/PIS/SigningBaskets

fix(test-runner): close three local-vs-CI coverage gaps

refactor(doobie): rename generic rowId parameters to their entity ids

refactor(doobie): rename consentRowId to consentPrimaryKey

refactor(dynamic-entity): rename getReadableRowIds to getReadableDynamicDataIds

chore: remove switch_to_java11.sh (unused, unreferenced)

chore: restore run_all_tests.sh as a thin forward to run_tests_parallel.sh