Pull Request Explorer

Summary

Remove unused Cloud card endpoints

Eliminates obsolete API routes and associated assets, reducing attack surface and maintenance overhead.

Health Assessment

• • Merged in under an hour with a single approval, indicating a straightforward cleanup with minimal review friction.

Summary

Fix unrestricted Swoole client name resolution

Improves DNS resolution performance for unrestricted Swoole clients, reducing latency and preventing slow failures in distributed environments.

Health Assessment

• • Rapid review and merge with minimal code changes resolved a DNS latency issue affecting unrestricted Swoole clients.

Summary

Fix SSRF by enforcing destination policy in HTTP client

This change blocks SSRF attacks by ensuring all outbound HTTP requests are validated against a destination policy. It enhances security for OAuth, webhooks, migrations, and avatar fetching, reducing risk of internal network compromise.

Health Assessment

• • The PR addressed critical SSRF vulnerabilities with extensive refactoring and added destination policy enforcement across multiple adapters, requiring several review cycles and significant code changes, but was merged within a few days.

Summary

Store placeholder as photo on delete

When a user deletes their avatar, the system now stores a default placeholder image as the user's photo, ensuring consistent display and simplifying photo management.

Health Assessment

• • PR merged within 30 minutes with no review comments, indicating a straightforward change with minimal friction.

Summary

Close remaining medium severity security issues

This PR closes remaining medium severity security issues, tightening default signing keys, installer authentication, session invalidation, recovery token handling, and X‑Forwarded‑For trust, improving overall security posture.

Health Assessment

• • The PR addressed multiple medium severity security issues in a single, fast cycle with minimal review friction, but the large scope and critical nature of the changes warrant careful post‑merge monitoring.

Summary

Fix avatar screenshot header policy

Restricts screenshot endpoint headers to Accept and Accept-Language, eliminating header injection and SSRF risks for guest users.

Health Assessment

• • Fast review and merge with minimal rework; small scope and quick cycle time indicate a low-risk security fix.

Summary

Absorb orchestration package into monorepo

Consolidates orchestration code into the main repository, simplifying dependency management and enabling easier integration for downstream services. This change removes external dependency on a separate repository, improving build stability and reducing maintenance overhead.

Health Assessment

• • Fast cycle time and minimal review rounds indicate efficient integration of the orchestration package into the monorepo.

Summary

Build Redis connections from DSN

Adds DSN-based Redis connection helpers to simplify configuration and ensure credentials are correctly handled, improving security and developer experience.

Health Assessment

• • Rapid approval with no rework indicates high confidence in implementation.