Group-level Variables API is not properly interpreting masked_and_hidden.

➡️ Analysis of API bug: #556872 (comment 2642812632)

tl;dr: the Group-level Variables API is always treating the existence of the request body field masked_and_hidden as true for the variable, even if its value is false.

Original report to the CLI project

Problem to Solve

I ran this command:

glab variable set SSH_USER "test" --group=my-project/my-group

But the variable is marked hidden by default. That’s strange, since we have an explicit --hidden flag—and yet it’s hidden even without it. I need it to be visible because my variable name is fewer than eight characters.

---

Proposal

I believe this behavior is unintended. By default, the variable should be visible.