Pull Request Explorer
| Title | Author | Size | AI | Cycle Time | Review | Merged |
|---|---|---|---|---|---|---|
| [GIT-384] Fix voting on published work items with no votes | Rahulcheryala | XS | AI | 3.0h | 0.1h | Oct 23, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-843] fix(security): bump toml and djangorestframework for 2026-10-22 advisories | pratapalakshmi | S | AI | 0.1h | - | Oct 23, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [WEB-9425] fix: cap external-API write paths to the holder's role | mguptahub | XL | AI | 175.0h | 0.1h | Oct 22, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [WEB-9423] fix: enforce guest_view_all_features on the external API | mguptahub | XL | AI | 313.5h | 0.1h | Oct 22, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1258] fix: close nightly Trivy findings and distrust emSign G3 | pratapalakshmi | XL | AI | 0.7h | - | Oct 22, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1189] chore(security): make proxy hop count configurable for rate limits | dheeru0198 | M | AI | 107.3h | - | Oct 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1160] fix(security): generate object-storage credentials per install | dheeru0198 | M | AI | 107.6h | - | Oct 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1195] fix(security): verify Redis TLS certificates by default | dheeru0198 | M | AI | 114.4h | - | Oct 21, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1142] fix(security): require same-origin for cookie-authenticated writes | dheeru0198 | M | AI | 52.7h | - | Oct 19, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1165] fix(security): reset role when rejoining a public project | dheeru0198 | M | AI | 31.4h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1146] fix(security): scope public Space asset uploads to comments | dheeru0198 | L | AI | 36.9h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1180] fix(security): bring v1 API permissions in line with the app | dheeru0198 | L | AI | 37.0h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1158] fix(security): require a non-empty matching OAuth state | dheeru0198 | M | AI | 37.2h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1149] fix(security): apply entity role rules to asset changes | dheeru0198 | L | AI | 37.3h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1166] fix(security): apply guest_view_all_features in search | dheeru0198 | L | AI | 37.5h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1163] fix(security): scope favorites to entities the caller can see | dheeru0198 | L | AI | 37.6h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1174] fix(security): scope project stats and grouping keys | dheeru0198 | L | AI | 37.8h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1208] fix(security): limit public comment writes to content fields | dheeru0198 | L | AI | 38.1h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1116] fix(security): restrict user-scoped FKs on users/me updates | dheeru0198 | M | AI | 37.7h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1200] fix(security): apply project guest scope to issue exports | dheeru0198 | M | AI | 37.8h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1194] fix(security): scope activity-task lookups to issue scope | dheeru0198 | L | AI | 38.0h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1189] fix(security): throttle auth endpoints for every caller | dheeru0198 | L | AI | 38.0h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1188] fix(security): require project membership for creator access | dheeru0198 | M | AI | 38.1h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1182] fix(security): make deploy board identity fields read-only | dheeru0198 | L | AI | 38.2h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1152] fix(security): mark session cookies Secure when WEB_URL is https | dheeru0198 | M | AI | 38.8h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1169] fix(security): bind module and cycle ids to the URL project | dheeru0198 | M | AI | 38.3h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1164] fix(security): restrict project member updates to admins | dheeru0198 | M | AI | 38.5h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1156] fix(security): sanitize export history order_by | dheeru0198 | M | AI | 38.3h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1153] fix(security): strip email style blocks in linear time | dheeru0198 | M | AI | 38.3h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1145] fix(security): bind issue history to the URL project | dheeru0198 | M | AI | 38.5h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1140] fix(security): bind URL issue_id to the URL project on creates | dheeru0198 | L | AI | 38.6h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1139] fix(security): scope user-profile stats and issues endpoints | dheeru0198 | L | AI | 38.8h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1118] fix(security): make work item system fields read-only | dheeru0198 | L | AI | 38.9h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1125] fix(security): require project membership for workspace drafts | dheeru0198 | XL | AI | 39.1h | - | Oct 18, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1128] fix(security): scope workspace analytics to member projects | dheeru0198 | M | AI | 16.2h | - | Oct 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1115] fix(security): enforce guest page visibility on page endpoints | dheeru0198 | M | AI | 16.2h | - | Oct 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1157] fix(security): bound password input scored by zxcvbn | dheeru0198 | M | AI | 16.5h | - | Oct 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1159] fix(security): pin content type on inline asset URLs | dheeru0198 | L | AI | 16.4h | - | Oct 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1138] fix(security): require workspace admin to PUT/PATCH workspace | dheeru0198 | M | AI | 16.6h | - | Oct 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1132] fix(security): cap invitation role updates at own role | dheeru0198 | M | AI | 16.7h | - | Oct 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [INFRA-1114] fix(security): keep magic-code regeneration limit | dheeru0198 | L | AI | 16.9h | - | Oct 17, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fix: use env bash in host scripts for NixOS support | asinglesprinkle | S | AI | 21.7h | 18.4h | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [WEB-9302] fix: unsnooze expired intake items at project-timezone midnight | pablohashescobar | L | AI | 281.0h | 0.0h | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fix: skip external image srcs when duplicating page assets | pablohashescobar | S | AI | 281.3h | 0.0h | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| chore(security): remove unused API token service flag | sriramveeraghanta | M | AI | 15.0h | - | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| refactor(web): use Propel tabs for layout selection | anmolsinghbhatia | M | No | 0.2h | - | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| refactor(admin): align configuration fields with Propel | anmolsinghbhatia | M | No | 25.6h | 21.6h | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| fix(web): make profile settings usable on mobile | anmolsinghbhatia | M | No | 25.6h | 21.6h | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| refactor(web): use Propel fields for profile preferences | anmolsinghbhatia | L | No | 25.6h | 21.8h | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| refactor(blocks): align property controls with Propel | anmolsinghbhatia | XL | No | 25.5h | 21.8h | Oct 16, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||