From bc896e539a9524cbc495315d0462d181ff3c920a Mon Sep 17 00:00:00 2001
From: Edilson Correa <edilson.correa@shopify.com>
Date: Tue, 14 Apr 2026 16:57:24 -0300
Subject: [PATCH 1/2] Fixing the removal of all permissions for a API client

---
 app/controllers/shipit/api_clients_controller.rb | 4 +++-
 app/views/shipit/api_clients/show.html.erb       | 1 +
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/app/controllers/shipit/api_clients_controller.rb b/app/controllers/shipit/api_clients_controller.rb
index b4c0dc3e7..6e5bcca66 100644
--- a/app/controllers/shipit/api_clients_controller.rb
+++ b/app/controllers/shipit/api_clients_controller.rb
@@ -43,7 +43,9 @@ def create_params
     end
 
     def update_params
-      params.require(:api_client).permit(permissions: [])
+      permitted = params.require(:api_client).permit(permissions: [])
+      permitted[:permissions] = permitted[:permissions].reject(&:blank?)
+      permitted
     end
   end
 end
diff --git a/app/views/shipit/api_clients/show.html.erb b/app/views/shipit/api_clients/show.html.erb
index 3c515c90d..70ba186cc 100644
--- a/app/views/shipit/api_clients/show.html.erb
+++ b/app/views/shipit/api_clients/show.html.erb
@@ -17,6 +17,7 @@
   <section>
     <%= form_for @api_client, url: api_client_path(@api_client) do |f| %>
       <h3> Permissions </h3>
+      <%= hidden_field_tag 'api_client[permissions][]', '' %>
       <ul class="deploy-checklist">
         <% Shipit::ApiClient::PERMISSIONS.each do |permission| %>
           <li class="deploy-checklist__item">

From 5422bd93306eed0cbb00931cd0aa8b62660ae104 Mon Sep 17 00:00:00 2001
From: Edilson Correa <edilson.correa@shopify.com>
Date: Tue, 14 Apr 2026 17:06:11 -0300
Subject: [PATCH 2/2] 0.45.2

---
 CHANGELOG.md          | 3 +++
 Gemfile.lock          | 4 ++--
 lib/shipit/version.rb | 2 +-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 266c2ac23..c000d7124 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,8 @@
 # Unreleased
 
+# 0.45.2
+* (bugfix) Fix 404 error when removing all permissions from an API client
+
 # 0.45.1
 * Make `PRESENCE_CHECK_TIMEOUT` configurable via environment variable
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 6f5dce38b..bfa4428da 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    shipit-engine (0.45.1)
+    shipit-engine (0.45.2)
       active_model_serializers (~> 0.9.3)
       ansi_stream (~> 0.0.6)
       autoprefixer-rails (~> 6.4.1)
@@ -431,4 +431,4 @@ DEPENDENCIES
   webmock
 
 BUNDLED WITH
-   2.6.7
+  4.0.6
diff --git a/lib/shipit/version.rb b/lib/shipit/version.rb
index 5abc3422d..b67b2d43b 100644
--- a/lib/shipit/version.rb
+++ b/lib/shipit/version.rb
@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Shipit
-  VERSION = '0.45.1'
+  VERSION = '0.45.2'
 end