issues Search Results · language:Dune language:TypeScript language:Python language:TypeScript language:JavaScript linked:pr
Filter by
7.9M results
Parent bounty: #743
Bug
createJobSchema currently accepts payloads where budgetMax is lower than budgetMin. That creates invalid job records
such as a USD 500-100 budget range and can break filtering, ...
Symptom
On Android devices using 3-button navigation (triangle / circle / square at the bottom), the system nav bar overlaps the
app s own bottom tab bar — the tab buttons sit under the system buttons. ...
Feature Request
Description
Add a second merge button alongside the existing Review merge button that merges the PR instantly without an
intermediate review step.
Motivation
The current workflow requires ...
Summary
The grocery list currently relies heavily on parsing free-form recipe ingredient text, which can lead to incorrect
totals, duplicate grocery items, and fragile add/remove behavior.
Problem
Some ...
enhancement
Problem
The Score model indexes userId and guestId but not roundId (src/server/db/schema.prisma). Postgres does not auto-index
FK columns. Every game-detail load (getGameById → rounds: { include: { scores: ...
Problem
createGame validates that selected players are members of the active circle by calling Clerk s
getOrganizationMembershipList({ organizationId }) with no limit and no pagination (src/server/mutations/games.ts:34-38). ...
Fix reflected XSS alert on /timeseries/meta JSON response
What
CodeQL alert #30 (py/reflective-xss, CWE-79) flags backend/routes/timeseries_meta.py:130-136 — the JSONResponse content
dict in get_meta_timeseries, ...
backend
security
sonnet
Sanitise transaction data before logging invalid share counts in compliance.py
What
CodeQL alerts #87 and #88 (py/log-injection, CWE-117) both flag backend/common/compliance.py:211:
logger.warning( ...
backend
security
sonnet
Problem
ci.yml diverges from the champi-imgui pattern in several ways:
- Uses ubuntu-latest + macos-latest OS matrix — macOS minutes are expensive and the self-hosted runner covers what we
need ...
ci-cd
Sanitise log-record extra fields in data_loader provider fallback logging
What
CodeQL alert #156 (py/log-injection, CWE-117) flags backend/common/data_loader.py:1048-1054 — the logger.warning(...)
call ...
backend
haiku
security

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.