pullrequests Search Results · language:Dune language:TypeScript language:Python language:JavaScript language:Python language:Java
Filter by
263M results
See Commits and Changes for more details.
Created by img src= https://prod.download/pull-18h-svg valign= bottom / pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please ...
⤵️ pull
개요
로그인 인증 로직(LibraryRepository.loadUser())의 SQL Injection 취약점(CWE-89)을 수정합니다.
Closes #5
변경 내용
코드 수정 (src/LibraryRepository.java)
- 문자열 결합 쿼리를 파라미터 바인딩 방식으로 변경
Before (취약)
String sql = SELECT ...
See Commits and Changes for more details.
Created by img src= https://prod.download/pull-18h-svg valign= bottom / pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please ...
⤵️ pull
Summary
- EVALUATIONSとPENDING_REEVALUATIONSを統合したlatest evaluation viewを追加
- signal_idごとに最新評価行を採用
- append-only履歴を保持したまま分析用ビューを生成
- latest_evaluations CSV/JSON/Markdown/Summaryを生成
- Dashboardに最新評価ビュー要約を追加 ...
Bumps the python-minor group with 17 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| fastapi | 0.135.1 | 0.136.3 |
| uvicorn | 0.44.0 | 0.49.0 |
| pydantic | 2.13.1 | 2.13.4 ...
dependencies
python
🤖 AI Security Remediation
🚨 Human approval required — please review before merging.
📊 Analysis
- Severity: HIGH
- Confidence: 95%
- Auto-fix allowed: False
📝 Summary
The application uses subprocess.call ...
ai-remediation
needs-human-review
severity-high
Motivation
- Bring the project to full coverage by adding the remaining Tokyo special wards that lacked machine-readable sources
so the site can show verified representative schedules.
- Provide ...
codex
Bumps actions/checkout from 3.0.2 to 6.0.3. details summary Release notes /summary p em Sourced from a href=
https://github.com/actions/checkout/releases actions/checkout s releases /a . /em /p blockquote ...
dependencies
github_actions
Port the VideoMaker backend to Go (impl/go) at parity with the TS impl: projects store, concept-driven director loop,
skills loader, code-aware chat, full /api/v1/vm API on :8003, reusing the OptimAIze-Work ...