Dev Tools · 2h ago
Rollback endpoint ignored deployment ID, always reverted to latest
A solo developer found that a rollback API endpoint accepted a deployment ID but never used it, always reverting to the most recent successful deployment. The bug was discovered during an audit of API docs against handlers. The frontend had been passing the ID, so users believed the parameter was honored.
Meridian48 take
This is a classic example of a silent logic error that could have caused significant confusion in a multi-tenant deployment platform, highlighting the importance of thorough endpoint auditing.
Read the full reporting
The rollback endpoint took a deployment ID and did nothing with it →
DEV Community
bug-fixapi-design