Skip to content

pullrequests Search Results · language:Dune language:Python language:Java language:TypeScript language:Java language:Java

Filter by

169M results  (2 s)

169M results

tteon/seocho
fix(security): apply least privilege to read-only endpoints

Severity Medium Vulnerability Overly permissive authorization. Read-only endpoints for telemetry, rules, and semantic artifacts (e.g., semantic_runs_list, rules_profiles_get) were incorrectly guarded ...
  • tteon
  • 1
  • Opened 
    50 seconds ago
  • #288

stellar/freighter
Set anonymous Sentry user so alerts report users affected

TL;DR Sentry alerts for the Freighter extension all showed ** Users: 0 **, so we couldn t tell how many people a given error actually affected. The cause: error events were never tagged with a user, so ...
  • piyalbasu
  • Opened 
    51 seconds ago
  • #2840

yuchen-osdu/partition
build(deps): bump the spring group across 4 directories with 4 updates

Bumps the spring group with 4 updates in the /partition-core directory: org.springdoc:springdoc-openapi-starter-webmvc-ui, org.springframework.boot:spring-boot-dependencies, org.springframework.security:spring-security-bom ...
dependencies
  • dependabot[bot]
  • 2
  • Opened 
    51 seconds ago
  • #5

taigamiura/todo-project
deps: bump alpine from 3.23 to 3.24 in /bff

Bumps alpine from 3.23 to 3.24. ![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=alpine package-manager=docker previous-version=3.23 ...
dependencies
docker
  • dependabot[bot]
  • Opened 
    51 seconds ago
  • #54

aeewws/tool-schema-fixer
Bump @types/node from 25.6.0 to 25.9.3

Bumps @types/node from 25.6.0 to 25.9.3. details summary Commits /summary ul li See full diff in a href= https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node compare view /a /li /ul ...
dependencies
javascript
  • dependabot[bot]
  • Opened 
    51 seconds ago
  • #13

faisal-nabulsi/claude-code-slack-bot
Human trigger for xoxp posts + per-bot PERSONA_FILE support

Two changes discussed Michael+Faisal 2026-06-11: 1. Human trigger for user-token posts. Messages posted via xoxp carry both a human user and a bot_id. The handler now resolves the author via users.info ...
  • michael-xu25
  • Opened 
    52 seconds ago
  • #2

DuqueOM/ML-MLOps-Production-Template
ci: bump codecov/codecov-action from 4 to 7

Bumps codecov/codecov-action from 4 to 7. details summary Release notes /summary p em Sourced from a href= https://github.com/codecov/codecov-action/releases codecov/codecov-action s releases /a . /em ...
  • dependabot[bot]
  • 1
  • Opened 
    53 seconds ago
  • #40

NVIDIA-NeMo/nemo-platform
ci: scope CodeQL to security queries

Summary Switch the CodeQL query suite from security-and-quality to security-extended. security-and-quality includes CodeQL s code-quality queries (py/unused-import, py/ineffectual-statement, py/empty-except, ...
ci
  • svvarom
  • Opened 
    53 seconds ago
  • #292

idvoretskyi/kubeflow-cv-lab
build(deps): bump docker/login-action from 3 to 4

Bumps docker/login-action from 3 to 4. details summary Release notes /summary p em Sourced from a href= https://github.com/docker/login-action/releases docker/login-action s releases /a . /em /p blockquote ...
dependencies
  • dependabot[bot]
  • 1
  • Opened 
    53 seconds ago
  • #7

italofelipe/auraxis-app
fix(release): submit usa EAS credentials service (env vars não existem no runner)

Closes #527 Parte do épico #518 (Fase 5). Causa da falha do store-release da tag v1.7.0 (run 27383980689): ${ASC_*} no eas.json interpolam do ambiente do runner do GitHub, onde não existem (EAS env secrets ...
  • italofelipe
  • Opened 
    53 seconds ago
  • #528