Default Branch

e29a0dc5df · fix: serve s3 proxy objects with nosniff and a sandbox csp (#11731) · Updated 2026-10-13 15:52:25 +00:00

Branches

5c8b249aa3 · perf: add service log documents to the index one batch at a time · Updated 2026-08-29 19:48:36 +00:00

659
1

efa2b98c47 · test: assert the app history response shape before indexing it · Updated 2026-08-29 13:22:39 +00:00

710
2

18380822ea · fix: render both sides of the comparison with the same formatter · Updated 2026-08-28 15:59:21 +00:00

672
20

16a13d510e · fix(cli): read the migration history with -z rather than core.quotePath · Updated 2026-08-28 14:43:05 +00:00

670
2

9367809454 · docs: name every port source the advertised URL falls back through · Updated 2026-08-27 07:09:52 +00:00

680
5

b32457d8ac · docs: state the tokenizer constraint once, at the site that enforces it · Updated 2026-08-27 06:37:13 +00:00

680
4

352c23dafb · docs: warn that pinning back to postgres 16 needs the mount reverted too · Updated 2026-08-26 20:20:50 +00:00

683
1

5658c33b32 · docs: warn that pinning back to postgres 16 needs the mount reverted too · Updated 2026-08-26 20:15:15 +00:00

699
7

259b878751 · fix: keep the plain graph container where no step pane can appear · Updated 2026-08-26 13:18:18 +00:00

687
7

a0ee61992c · fix: filter sqlx notices on the otel bridge too · Updated 2026-08-24 18:19:10 +00:00

707
6

dead8df080 · fix: make Pool::begin cancel-safe across the backend · Updated 2026-08-24 17:34:45 +00:00

707
1

2142fde602 · chore: point at the ee fallback for unsupported workflow features · Updated 2026-08-22 08:48:10 +00:00

719
4

8de64d4c4a · fix: leave JSON and other non-CommonJS module formats out of the //nodejs rewrite · Updated 2026-08-21 10:36:35 +00:00

736
8

6ad24b7e20 · docs: record the icon safe-area invariant and guard the viewBox shape · Updated 2026-08-21 08:24:15 +00:00

744
2

421024b506 · fix: send an endpoint's hidden body constants from the chat API executors too · Updated 2026-08-20 21:29:38 +00:00

738
3

d993c10d39 · fix: enforce caller ACL on flow step/subflow references · Updated 2026-08-19 14:12:10 +00:00

761
1

67b9e0a6ce · fix: scope the raw-script folder-existence cache to the caller too · Updated 2026-08-19 14:00:06 +00:00

761
2

2b52940a70 · fix: add authorization checks to slack/teams approval-minting endpoints · Updated 2026-08-19 13:48:58 +00:00

1323
1

bced402f33 · harden: reject dash-led git hosts and scrub env on ansible ls-remote · Updated 2026-08-19 12:19:28 +00:00

756
2

711d8cd143 · fix: use constant-time comparison for SUPERADMIN_SECRET authentication · Updated 2026-08-19 11:51:44 +00:00

761
1