diff --git a/CHANGELOG.md b/CHANGELOG.md index b8eb178dfa2..8f5836d30b8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,8 @@ + +## Version 25.03.X +Fixes: +- [core] Accept numeric color in saveNote schema so graph note create/edit no longer fails validation + ## Version 25.03.44 Security fixes: - [alerts] Validate alertConfig.selectedApps against caller's permissions (cross-app metric exfiltration) diff --git a/api/parts/mgmt/users.js b/api/parts/mgmt/users.js index 75348a28703..cfe1c605cb2 100644 --- a/api/parts/mgmt/users.js +++ b/api/parts/mgmt/users.js @@ -911,8 +911,11 @@ usersApi.saveNote = async function(params) { 'type': 'String', }, 'color': { + // Frontend (countly.common.notes.js COLOR_TAGS) sends a numeric + // index 1..5. URL query callers may send "5" as a string. + // Mirror the ts handling — IntegerString accepts both. 'required': true, - 'type': 'String' + 'type': 'IntegerString' }, 'category': { 'required': false,