Databook
activeopen governmentAn award-winning transparency tool that combines over 50 official NYC open datasets — agencies, people, jobs, capital projects, schools, districts and procurement — into one searchable picture of how city government works.
Rescheduled the weekly organization registry refresh to 04:30 UTC to prevent a scheduling collision with the daily API container restart. Added API status checks and retry logic to make the refresh script resilient to container interruptions, and updated the post-refresh dictionary check to support retries.
Removed a leaked query-parameter auth path in the org-admin API.
Updated the CLAUDE.md documentation to record that the blog, articles, and home page feed now load from the shared Sarapis Payload CMS via PayloadService. The new documentation covers brand scoping, Lexical-to-HTML rendering, caching, legacy slug aliases, and configuration caching requirements.
The query parameter remains temporarily supported with a warning, and key comparisons were switched to a secure constant-time digest.
This prevents the plaintext credential from being exposed in container logs during data ingestion.
This security fix was successfully merged into the main branch.