Pull Request Explorer

Summary

Health Assessment

Summary

Add v3 to v4 upgrade and Login V2 guides

Provides operators with a clear upgrade path and Login V2 adoption documentation, reducing deployment risk.

Health Assessment

• • Fast cycle time of under 10 hours, minimal review iterations, and a focused documentation update indicate a smooth process.

Summary

Update benchmark dependencies

Modernizes the benchmark toolchain, updates dependencies, and aligns the TypeScript configuration with current ecosystem standards, improving compatibility and maintainability.

Health Assessment

• • The PR had a rapid review cycle with minimal comments, but the large number of lines changed indicates a significant dependency overhaul.

Summary

Add Hungarian translations and i18n consistency

Adds Hungarian language support to Login V2 and standardizes translation keys across the application, improving user experience for Hungarian-speaking customers.

Health Assessment

• • Rapid review and merge after a single AI-assisted review, indicating high confidence in translation changes.

Summary

Update V2 end-of-support copy

Clarifies that V2 is already end-of-support, reducing confusion for users and aligning documentation with product status. Ensures customers are aware of upcoming V3 migration guidance.

Health Assessment

• • Minimal edits, fast review, no rework, low risk.

Summary

Upgrade image versions in env examples

Updates Docker Compose environment templates to align with newer pinned container image versions, ensuring quickstart examples use up-to-date images.

Health Assessment

• • Quick review and merge with minimal changes, indicating low complexity and high confidence.

Summary

Clarify human PAT limitation and link issue

This PR updates documentation to clarify that Personal Access Tokens are only available for service accounts, not human users, and provides a link to the GitHub issue tracking this limitation.

Health Assessment

• • Quick review and minimal changes indicate low complexity and low risk.

Summary

Add Zitadel to Active Identity Providers

Extends the login API to return ZITADEL-backed identity providers, improving integration visibility for administrators.

Health Assessment

• • Quick review and minimal rework indicate a straightforward change with low risk.

Summary

Prevent crash on stale session cookie

Hardens login flow by treating missing server sessions as no session, preventing server crashes and improving user experience.

Health Assessment

• • Fast review and single commit indicate a straightforward bug fix with minimal risk to production.

Summary

Fix login button disabled during password set

Prevents duplicate submissions and improves user experience by keeping the submit button disabled and showing a loading spinner during the password set flow.

Health Assessment

• • Merged within 15 hours with a single review round and minimal code changes, indicating a straightforward bug fix.

Summary

Remove GitHub discussion link from TOTP docs

Eliminates outdated GitHub discussion link from the TOTP issuer callout, improving documentation accuracy.

Health Assessment

• • Quick, single-commit docs update with minimal review.

Summary

Extend DeleteProvider to include Zitadel IdP

Adds support for deleting Zitadel IdP providers, updating models, tests, and translations, improving identity provider management.

Health Assessment

• • The PR received a rapid initial review but required several merge conflicts and rework, indicating integration complexity. Copilot was used to generate and review code, helping to reduce manual effort.

Summary

docs: update roadmap page content

Updates the roadmap documentation to reflect new messaging and clarify impact for existing customers.

Health Assessment

• • Quick review and minimal changes indicate a low-risk documentation update.

Summary

Add Zitadel IdP support to provider APIs

Adds support for Zitadel IdP provider type, enabling retrieval and listing of Zitadel IdPs via existing API endpoints, improving integration capabilities for customers. This enhances the identity provider surface, allowing customers to manage Zitadel IdPs directly.

Health Assessment

• • The PR was merged within 44 hours, but the multiple commits after review indicate significant rework and moderate complexity, raising risk for downstream integration.

Summary

Bump Go module dependencies across directories

Updates golang.org/x/crypto to a newer version, applying security fixes and ensuring compatibility for the login acceptance modules.

Health Assessment

• • Fast merge with minimal changes, automated dependency bump handled by Dependabot, no review friction.

Summary

Upgrade golang.org/x/net to v0.56.0

Updates Go dependency to address DoS vulnerability in HTML parser, improving security.

Health Assessment

• • Fast merge with minimal changes, quick review by Copilot, low risk.

Summary

Add devcontainer lockfile for reproducible dependencies

Ensures consistent dev environment by pinning devcontainer dependencies, improving reproducibility and reducing build variability.

Health Assessment

• • Long cycle time due to delayed review; minimal scope and low risk.

Summary

Update issue templates to prompt GitHub linking

Adds a callout in issue templates to encourage Cloud customers to link GitHub accounts, improving issue triage.

Health Assessment

• • Quick, single-review PR with minimal changes, indicating low complexity and high confidence.

Summary

Create knowledge gap for Firebase migration guide

Adds a migration guide to help users move from Firebase Authentication to ZITADEL, explaining password hash incompatibility and migration strategies.

Health Assessment

• • PR was merged within 14 hours with only a single review comment, indicating a straightforward documentation update with minimal risk.

Summary

Implement UpdateZitadelProvider in ManagementService

Adds support for updating ZITADEL identity provider templates, enabling org‑scoped provider updates and event handling for better identity management.

Health Assessment

• • PR was reviewed and approved quickly with minimal changes, indicating efficient collaboration and low friction.

Summary

chore: update npm dependencies

Reduces npm‑reported vulnerabilities across the monorepo by updating direct dependencies and tightening pnpm overrides, improving security and build stability.

Health Assessment

• • The PR involved extensive dependency updates and pnpm overrides, requiring several merges and rework after the initial review, but the review itself was quick. The large code churn and multiple merges suggest moderate risk and potential for build instability.

Summary

Implement instance-level UpdateZitadelProvider endpoint

Enables updating instance Zitadel IdP templates, improving admin control and flexibility for customers.

Health Assessment

• • The PR involved extensive changes across many files and required multiple review iterations, indicating significant effort and potential risk.

Summary

Preserve org domain suffix through account chooser navigation

Fixes login flow issue where organization domain suffix is lost during navigation, ensuring successful login and respecting branding settings.

Health Assessment

• • Quick review but long cycle due to merges from main; minimal rework.

Summary

Update roadmap and remove release cycle page

Removes internal release cycle documentation, updates roadmap content, and cleans sidebar navigation, improving clarity and reducing duplication.

Health Assessment

• • The PR had many AI‑assisted commits and a single review, leading to a high number of iterations but a short overall cycle time.

Summary

Add API definition to update Zitadel IdP

Adds API surface to allow updating Zitadel Identity Provider at organization and instance levels, enabling better integration management.

Health Assessment

• • Quick review and single iteration, indicating straightforward change.

Summary

Migrate Tailwind opacity utilities and fix checkbox color

This update resolves visual inconsistencies in the login UI after Tailwind v4 upgrade, ensuring buttons display correct hover effects and checkboxes are visible across themes, improving user experience.

Health Assessment

• • Quick review and minimal changes led to fast merge with low risk.

Summary

Fix OIDC login flow request ID prefix

Corrects an OIDC redirect bug by ensuring request IDs include the required prefix, preventing users from landing on the wrong page after login.

Health Assessment

• • The PR was reviewed and merged within 18 minutes, indicating a smooth process with minimal rework. The change is small and focused, reducing risk.

Summary

Fix login redirect for org-scoped sessions

Ensures users with organization-scoped auth requests are directed to the login input instead of an empty account selection page, improving user experience and reducing confusion.

Health Assessment

• • Quick review and single commit indicate low complexity; the change is focused on a specific edge case, minimizing risk.

Summary

Add IdP claim mapping troubleshooting to docs

Provides users with guidance to debug auto-user-creation failures due to missing IdP claims, improving onboarding experience.

Health Assessment

• • Single-file docs update, quick review, no rework.

Summary

Replace deprecated labels with issue types in templates

Updates GitHub issue templates and Dependabot configuration to align with the new issue type system, removing legacy labels and preventing automatic re‑addition of deprecated labels.

Health Assessment

• • The PR was reviewed and merged within 20 hours, with a single commit and no back‑and‑forth, indicating a smooth, low‑risk change.

Summary

Improve login registration error handling

Enhances user registration reliability by providing detailed error messages and better logging, improving user experience and debugging.

Health Assessment

• • PR had a long cycle time due to a delayed commit after review, but the minimal changes and single review indicate low complexity and low risk.

Summary

Restore native app login with custom protocol support

Enables native mobile and desktop apps to use custom protocol redirect URIs, restoring login flow functionality and preventing navigation failures due to CSP restrictions.

Health Assessment

• • The PR required multiple iterations after the initial review, with a slow overall cycle time of over five days, indicating significant rework and potential blockers. Despite a fast first review, the complexity of redirect validation across multiple protocols led to extended development.

Summary

Improve ListUser performance by case-insensitive login

Enhances user lookup speed by optimizing login name queries, reducing latency for user management. This change improves system responsiveness for user search operations.

Health Assessment

• • Fast review and merge with minimal back-and-forth, indicating a straightforward performance tweak.

Summary

Update docs knowledge gap

Documentation now explains redirect behavior and default redirect URI settings for login and OIDC flows, improving user understanding.

Health Assessment

• • PR was auto‑generated and merged quickly with minimal review, indicating low complexity and high confidence in the documentation update.