All pull requests

Pull requests

• fix(security): harden taxonomy chart runtime defaults

  breaking-change
  #9801·BhagyaAmarasinghe opened Oct 25, 2026Contributor·1 task done·

  ·
  4

• fix(email): rate-limit every email per organization, sender and recipient [ENG-3823][ENG-6658]

  ❗️ .env changes
  #9796·xernobyl opened Oct 23, 2026Contributor·1 task·

  ·
  3

• fix(saml): restore sign-in, bound jackson's XPath selects, and match its refusals [ENG-4045][ENG-4108][ENG-6646][ENG-6648]

  #9793·xernobyl opened Oct 23, 2026Contributor·1 task·

  ·
  4

• fix: clarify Helm CRD ownership and add cluster coverage

  #9792·BhagyaAmarasinghe opened Oct 23, 2026Contributor·1 task·

  ·
  16

• fix(link-survey): require the single-use link in the public PIN and verify-email actions [ENG-4041]

  #9790·xernobyl opened Oct 23, 2026Contributor·1 task·

  ·
  3

• chore: lint and test guardrails from an agent retrospective

  #9788·itsjavi opened Oct 23, 2026Member·1 task·

  ·
  2

  

• ci: remove the PR size warning workflow [ENG-6621]

  #9787·xernobyl opened Oct 23, 2026Contributor·1 task·

  ·
  2

• feat(api): charts and dashboards in API v3, MCP and the app

  #9786·xernobyl opened Oct 23, 2026Contributor·1 task·

  ·
  17

• fix(billing): end free trials on Hobby unless the org explicitly buys a plan

  #9785·Dhruwang opened Oct 23, 2026Member·1 task·

  ·
  2

• chore(ci): bump step-security/harden-runner from 2.22.1 to 2.22.2 in the github-actions group across 1 directory

  dependenciesgithub_actions
  #9784·dependabot[bot] opened Oct 23, 2026Bot·

  ·
  2

• fix: show accurate error pages for backend failures

  #9783·Dhruwang opened Oct 23, 2026Member·1 task·

  ·
  3

• fix(container-security): one Backlog ticket per image instead of one Triage ticket per CVE [ENG-3962]

  #9781·xernobyl opened Oct 22, 2026Contributor·1 task·

  ·
  2

• fix(surveys): generate AI survey drafts in survey languages beyond dashboard locales

  #9776·Dhruwang opened Oct 22, 2026Member·1 task·

  ·
  11

• docs: document self-hosted deployment components

  #9772·BhagyaAmarasinghe opened Oct 21, 2026Contributor·1 task·

  ·
  12

• fix(mcp): bound input validation across requests and batches

  breaking-change
  #9760·mattinannt opened Oct 21, 2026Member·1 task done·

  ·
  5

  

• chore(docker): bump vllm/vllm-openai from v0.14.0 to v0.32.0 in /docker

  dependencies
  #9755·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  2

• chore(docker): bump valkey/valkey from e0eb7c4 to 418652c in /docker

  dependencies
  #9754·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  1

• chore(docker): bump authzed/zed from v1.1.1 to v1.14.0

  dependencies
  #9750·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  2

• chore(docker): bump vllm/vllm-openai from v0.14.0 to v0.32.0

  dependencies
  #9748·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  2

• chore(docker): bump valkey/valkey from e0eb7c4 to 418652c

  dependencies
  #9743·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  1

• fix: make AI timeouts configurable for self-hosted models

  ❗️ .env changes
  #9719·BhagyaAmarasinghe opened Oct 20, 2026Contributor·1 task·

  ·
  5

• ci: migrate Docker builds to Blacksmith using existing registries

  #9715·mattinannt opened Oct 20, 2026Member·1 task·

  ·
  3

• fix(ci): use isolated fixtures for Docker validation

  #9714·mattinannt opened Oct 20, 2026Member·1 task·

  ·
  2

• chore(docker): bump distroless/nodejs24-debian13 from 59c479c to 78f07ef in /docker/cube-image

  dependencies
  #9698·dependabot[bot] opened Oct 19, 2026Bot·

  ·
  2

• feat(creatives): feedback buttons and banners

  ❗️ .env changes❗️ migrations
  #9666·itsjavi opened Oct 15, 2026Member·1 task·

  ·
  23