Affects
Teams that configure Flowker webhook triggers or external OpenAPI integrations.
What changed
Webhook triggers can declare
accepted_headers; credential headers remain excluded from that immutable configuration. The documentation also clarifies the header-ingestion rules exposed through _webhook.headers.
External OpenAPI integrations support static config.headers and fail closed when required headers or query parameters are absent. The documented validation outcomes are FLK-0954 for missing required inputs, FLK-0955 for malformed static headers, and FLK-0957 for invalid accepted webhook headers.
This is a documentation correction of implemented contracts. It does not announce a runtime release.
Impact
Classification: Action required. A webhook or external API configuration based on the former rules can fail validation or omit required request inputs.
What you need to do
1
Review webhook
accepted_headers and downstream use of _webhook.headers.2
Confirm static headers and every required header and query parameter for external OpenAPI integrations.
3
Handle the documented validation outcomes before the next workflow deployment.