All pull requests

Pull requests

• feat(security)!: approve a repository's .cgr.md before it loads, ask before reading credential files, and annotate MCP tools

  breaking change
  #3471·vitali87 opened Oct 25, 2026Owner·10 of 17 tasks·

  ·
  3

  31

• build(deps): bump neo4j from 6.3.1 to 6.4.1

  dependenciespython:uv
  #3470·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps-dev): bump semgrep from 1.181.0 to 1.182.1

  dependenciespython:uv
  #3469·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump qdrant-client from 1.19.1 to 1.20.0

  dependenciespython:uv
  #3468·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps-dev): bump ruff from 0.16.10 to 0.17.2

  dependenciespython:uv
  #3467·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump regex from 2026.9.10 to 2026.9.29

  dependenciespython:uv
  #3466·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump @ruby/prism from 1.9.0 to 2.0.0 in /evals/oracles/ruby_oracle

  dependenciesjavascript
  #3465·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump syn from 3.0.6 to 3.0.9 in /evals/oracles/rs_oracle

  dependenciesrust
  #3464·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump memgraph/lab from 3.13.2 to 3.14.0 in /codebase_rag

  dependenciesdocker_compose
  #3463·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump qdrant/qdrant from v1.19.2 to v1.20.0 in /codebase_rag

  dependenciesdocker_compose
  #3462·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump python from 3.12-trixie to 3.15-trixie in /.oss-scanner

  dependenciesdocker
  #3461·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  3

• build(deps): bump golang from 1.27.2-trixie to 1.27.3-trixie in /.oss-scanner

  dependenciesdocker
  #3460·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump eclipse-temurin from 21-jdk to 25-jdk in /.oss-scanner

  dependenciesdocker
  #3459·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump github/codeql-action/init from 4.39.0 to 4.39.1

  dependenciesgithub_actions
  #3455·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.6.0 to 2.7.0

  dependenciesgithub_actions
  #3454·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump actions/setup-python from 7.0.0 to 7.1.0

  dependenciesgithub_actions
  #3453·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.2

  dependenciesgithub_actions
  #3452·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• build(deps): bump github/codeql-action/upload-sarif from 4.39.0 to 4.39.1

  dependenciesgithub_actions
  #3451·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• chore: ignore every .env.* file except .env.example

  #3450·vitali87 opened Oct 25, 2026Owner·7 of 17 tasks·

  ·
  5

• test(graph-rs): add the fuzz package manifest

  #3445·vitali87 opened Oct 24, 2026Owner·4/4·6 tasks done·

  ·
  4

• test(graph-rs): add the bulk writer and walk fuzz target

  #3444·vitali87 opened Oct 24, 2026Owner·3/4·6 tasks done·

  ·
  4

• test(graph-rs): add the graph procedures fuzz target

  #3443·vitali87 opened Oct 24, 2026Owner·2/4·6 tasks done·

  ·
  6

• test(graph-rs): add the fuzz input decoder and the Cypher and JSON fuzz targets

  #3442·vitali87 opened Oct 24, 2026Owner·1/4·6 tasks done·

  ·
  4

• fix(graph-rs): run pagerank iteration counts past u32::MAX like Python

  #3441·vitali87 opened Oct 24, 2026Owner·7 of 9 tasks·

  ·
  4

• fix(deps): read dependency groups, included requirements files, optional and target dependencies

  #3426·kenny-ish opened Oct 23, 2026·8 tasks done·

  ·
  1

  7