All pull requests

Pull requests

• fix(update): verify release assets before replacing binaries

  #1589·utkutugrul opened Oct 25, 2026Contributor·

  ·
  5

• docs: add Bandit source-aware triage playbook

  #1588·utkutugrul opened Oct 25, 2026Contributor·

  ·
  1

• build(deps): bump filelock from 3.29.4 to 4.2.1

  dependenciespython:uv
  #1586·dependabot[bot] opened Oct 24, 2026Bot·

  ·
  1

• fix(sarif): link CVE-keyed rules to NVD and tag CWE rules for code scanning

  #1582·jav1er8 opened Oct 23, 2026·

  ·
  1

• fix(sarif): drop the SECURITY.md anchor from findings of DAST-only runs

  #1581·jav1er8 opened Oct 23, 2026·

  ·
  1

  1

• fix(cloud): stop --wait from polling or succeeding after --wait-timeout

  #1580·jav1er8 opened Oct 23, 2026·

  ·
  1

  1

• Add the Claude Code subscription backend (claude -p)

  #1579·seanturner83 opened Oct 23, 2026Contributor·

  ·
  11

• Reporting controls: optional PoC, relaxed fields, read-only mounts, validation logging

  #1578·seanturner83 opened Oct 23, 2026Contributor·

  ·
  5

• test(runner): give the mock settings a telemetry namespace

  #1577·seanturner83 opened Oct 23, 2026Contributor·

  ·
  1

• fix(cloud): poll source upload completion while the platform is processing

  #1571·bharathvemula opened Oct 23, 2026·

  ·
  1

  2

• build(deps): bump virtualenv from 21.5.1 to 21.14.9

  dependenciespython:uv
  #1566·dependabot[bot] opened Oct 23, 2026Bot·

  ·
  1

• build(deps): bump pillow from 12.3.0 to 13.0.0

  dependenciespython:uv
  #1567·dependabot[bot] opened Oct 23, 2026Bot·

  ·
  1

• build(deps): bump pypdf from 6.14.2 to 6.21.1

  dependenciespython:uv
  #1565·dependabot[bot] opened Oct 23, 2026Bot·

  ·
  1

• fix(cloud): select the scan ID explicitly when waiting

  #1563·samirhvbr opened Oct 22, 2026·

  ·
  1

  1

• fix(cli): preserve full default branch names in diff scope

  #1562·samirhvbr opened Oct 22, 2026·

  ·
  1

  1

• build(deps): cap litellm below 1.107 and constrain the CI smoke insta…

  #1554·bearsyankees opened Oct 21, 2026Collaborator·

  ·
  1

• feat(models): add MiniMax Flash-first text catalog

  #1552·octo-patch opened Oct 21, 2026Contributor·

  ·
  5

• Soft wrap-up nudge for sub-agents (skill frontmatter wrap_up_after_turns)

  #1549·ian-at-strix opened Oct 20, 2026Contributor·

  ·

• fix(strix/runtime/docker_client.py): Set HOME=/root when STRIX_HOST_UID is set to avoid Caido sidecar panic for system service accounts

  #1548·cf3901646 opened Oct 20, 2026·

  ·
  1

  2

• feat(core): allow parallel tool calls and stop asking for exactly one tool call per turn

  #1546·ian-at-strix opened Oct 20, 2026Contributor·

  ·
  1

• chore(deps): bump multidict from 6.7.1 to 6.9.1

  dependenciespython:uv
  #1545·dependabot[bot] opened Oct 20, 2026Bot·

  ·
  1

• fix(docker-entrypoint): support VPN sandbox networking and target hostname mappings

  #1543·mvanhorn opened Oct 20, 2026Contributor·

  ·
  1

  6

• Oh My Strix Agent

  #1542·ZanderoDev opened Oct 20, 2026·

  ·
  9

• fix(agents): exec_command points at write_stdin for a still-running command instead of saying its output is lost

  #1541·devin-ai-integration[bot] opened Oct 20, 2026Bot·

  ·
  2

• chore(deps): bump mcp from 1.28.1 to 1.30.0

  dependenciespython:uv
  #1540·dependabot[bot] opened Oct 19, 2026Bot·

  ·
  1