All pull requests

Pull requests

• Add support for single sign-on (SSO) through OIDC IdP

  #3167·gjazali opened Oct 6, 2026·

  ·
  5

• Ask for a T&C card when a change adds a third party or new personal data

  #3166·jeremy opened Oct 6, 2026Member·

  ·
  9

• Prefix newly issued access tokens, refresh tokens and personal access tokens

  #3163·jeremy opened Oct 6, 2026Member·

  ·
  12

• Lapse OAuth grants left idle for 90 days

  #3161·jeremy opened Oct 6, 2026Member·

  ·
  39

• Revoke the grant when a rotated refresh token is replayed, with a 60s retry grace

  #3160·jeremy opened Oct 6, 2026Member·

  ·
  42

• Sweep self-registered OAuth clients left without a grant for 30 days

  #3159·jeremy opened Oct 6, 2026Member·

  ·
  42

• Answer API authentication failures with a Bearer challenge

  #3158·jeremy opened Oct 6, 2026Member·

  ·
  8

• Add board archiving

  #3156·sarrietav-dev opened Oct 5, 2026·

  ·
  1

• Fix board watch bell returning 406 and not updating

  #3155·sarrietav-dev opened Oct 5, 2026·

  ·
  1

• Bump surfguard from 292a4b0 to f3912c3

  dependenciesruby
  #3151·dependabot[bot] opened Oct 2, 2026Bot·

  ·
  1

• Bump lexxy from 0.9.32 to 0.9.33

  dependenciesruby
  #3150·dependabot[bot] opened Oct 2, 2026Bot·

  ·
  2

• Bump solid_cable from 4.0.2 to 4.1.0

  dependenciesruby
  #3149·dependabot[bot] opened Oct 2, 2026Bot·

  ·
  1

• Bump brakeman from 8.0.6 to 8.1.0 in the development-dependencies group

  dependenciesruby
  #3148·dependabot[bot] opened Oct 2, 2026Bot·

  ·
  1

• Bump aws-sdk-s3 from 1.231.0 to 1.232.1

  dependenciesruby
  #3139·dependabot[bot] opened Sep 25, 2026Bot·

  ·
  2

• Bump the github-actions group across 1 directory with 3 updates

  dependenciesgithub_actions
  #3138·dependabot[bot] opened Sep 25, 2026Bot·

  ·
  1

• Add board-scoped work planning with SolverForge

  #3137·blackopsrepl opened Sep 24, 2026·

  ·
  12

• Give the load balancer the real client IP

  #3127·lewispb opened Sep 13, 2026Member·

  ·
  1

• Cap what an account import reads out of a zip entry

  #3113·rosa opened Sep 11, 2026Member·

  ·
  16

• Keep an account's only owner from deactivating themself

  #3111·jeremy opened Sep 10, 2026Member·

  ·
  4

• Trusted Types report-only pilot (fizzy CSP telemetry)

  #3092·jeremy opened Aug 31, 2026Member·

  ·
  10

• Support confidential clients with client_secret_post

  #3082·jeremy opened Aug 28, 2026Member·4/4·

  ·
  85

• Expire OAuth access tokens and rotate refresh tokens

  #3081·jeremy opened Aug 28, 2026Member·3/4·

  ·
  41

• Accept https redirect URIs for dynamically registered clients

  #3080·jeremy opened Aug 28, 2026Member·2/4·

  ·
  59

• Flush pending auto-saves before publishing a card

  #3039·a-abdellatif98 opened Aug 16, 2026·

  ·
  1

  4

• Fix store_accessor on MariaDB by declaring the JSON attribute type

  #3038·a-abdellatif98 opened Aug 16, 2026·

  ·
  1

  7