All pull requests

Pull requests

• chore(deps-dev): bump serialize-javascript from 7.0.5 to 7.1.4

  dependenciesjavascript
  #1833·dependabot[bot] opened Oct 24, 2026Bot·

  ·

• chore(deps-dev): bump happy-dom from 20.14.0 to 21.0.4

  dependenciesjavascript
  #1832·dependabot[bot] opened Oct 24, 2026Bot·

  ·

• chore(deps): bump zod from 4.6.5 to 4.6.7

  dependenciesjavascript
  #1831·dependabot[bot] opened Oct 24, 2026Bot·

  ·

• chore(deps-dev): bump fast-uri from 3.1.8 to 3.1.9

  dependenciesjavascript
  #1830·dependabot[bot] opened Oct 24, 2026Bot·

  ·

• chore(deps): bump ip-address from 10.7.2 to 10.7.5

  dependenciesjavascript
  #1829·dependabot[bot] opened Oct 23, 2026Bot·

  ·

• chore(deps-dev): bump vite-plugin-pwa from 1.3.0 to 2.0.0 in the dev-tooling group across 1 directory

  dependenciesjavascript
  #1828·dependabot[bot] opened Oct 22, 2026Bot·

  ·

• chore(deps): bump ip-address from 10.4.0 to 10.7.5 in /scripts in the npm_and_yarn group across 1 directory

  dependenciesjavascript
  #1825·dependabot[bot] opened Oct 20, 2026Bot·

  ·

• feat(ui): unify Diagnostics entry and shortcut ownership

  ai-generatedcodex
  #1822·bradleybond512 opened Oct 19, 2026Owner·

  ·

• feat(home): surface modeled posture and the existing best move

  ai-generatedcodex
  #1821·bradleybond512 opened Oct 19, 2026Owner·

  ·

• ci: verify map, interactions and Home readiness

  ai-generatedcodex
  #1816·bradleybond512 opened Oct 19, 2026Owner·

  ·

• docs(roadmap): October 18 delivery-pipeline intake

  ai-generatedclaude
  #1807·bradleybond512 opened Oct 18, 2026Owner·

  ·
  1

  1

• chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0

  dependenciesgithub_actions
  #1798·dependabot[bot] opened Oct 14, 2026Bot·

  ·

• chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2

  dependenciesgithub_actions
  #1797·dependabot[bot] opened Oct 14, 2026Bot·

  ·

• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2

  dependenciesgithub_actions
  #1796·dependabot[bot] opened Oct 14, 2026Bot·

  ·

• chore(deps-dev): bump eslint-plugin-sonarjs from 4.0.3 to 4.2.2

  dependenciesjavascript
  #1791·dependabot[bot] opened Oct 6, 2026Bot·

  ·

• build(deps): bump the npm_and_yarn group across 2 directories with 5 updates

  dependenciesjavascript
  #1790·dependabot[bot] opened Oct 6, 2026Bot·

  ·

• Hardening: constant-time key checks; event-store routes stay local

  ai-generatedclaude
  #1783·bradleybond512 opened Oct 4, 2026Owner·

  ·

• Q20 B: no workflow expression injection, pinned zizmor audit, pinned MCP servers (R4-LOW-002/003)

  ai-generatedclaude
  #1781·bradleybond512 opened Oct 4, 2026Owner·

  ·

• R4-SEC-007 + R4-LOW-006: key-gate and cap LLM routes, fix feed caches (Q19)

  ai-generatedclaude
  #1778·bradleybond512 opened Oct 4, 2026Owner·

  ·

• feat: Quota Governor for quota-limited providers (R4-BUG-005 step 2)

  ai-generatedclaude
  #1770·bradleybond512 opened Oct 2, 2026Owner·

  ·

• fix: CSP without unsafe-eval; trust only owned origins (R3-SEC-004, R4-SEC-008)

  ai-generatedclaude
  #1769·bradleybond512 opened Oct 2, 2026Owner·

  ·

• fix: gate main-sync installs on a pinned, paginated, newest-run check set (R4-SEC-003, R4-SEC-009)

  ai-generatedclaude
  #1765·bradleybond512 opened Sep 30, 2026Owner·

  ·

• fix: keep quota-limited feeds within their free limits across restarts (R4-BUG-005 step 1)

  ai-generatedclaude
  #1761·bradleybond512 opened Sep 30, 2026Owner·

  ·

• chore(deps): bump @luma.gl/gltf from 9.4.1 to 9.4.2

  dependenciesjavascript
  #1753·dependabot[bot] opened Sep 28, 2026Bot·

  ·

• chore(deps): bump @luma.gl/webgl from 9.4.1 to 9.4.2

  dependenciesjavascript
  #1752·dependabot[bot] opened Sep 28, 2026Bot·

  ·