All pull requests

Pull requests

• [1431] Auth middleware accepts expired JWT for 60s due to clockTolerance misconfiguration

  #1516·ToryMic opened Sep 30, 2026Contributor·

  ·
  1

  2

• [1430] GET /vaults query does not enforce max limit and allows limit=100000 to OOM the API

  #1515·ToryMic opened Sep 30, 2026Contributor·

  ·
  1

  2

• Fix graceful shutdown to drain requests before disconnecting Prisma

  #1514·The-Big-Danny opened Sep 30, 2026·

  ·
  1

  1

• fix: check Redis connectivity in /ready health probe

  #1513·Jayycob2211 opened Sep 29, 2026·

  ·
  1

  1

• Tracingspanforvaultdepositdoesnotpropagattrace idtooutboxeventcausingbrokentraces

  #1512·elizabethklien3-pixel opened Sep 29, 2026·

  ·
  1

  1

• fix(db): acquire postgres advisory lock during migration execution (#1440)

  #1511·Awosdot opened Sep 29, 2026Contributor·

  ·
  1

  1

• fix(documents): enforce content-type whitelist on S3 presigned URL generation (#1439)

  #1510·Awosdot opened Sep 29, 2026Contributor·

  ·
  1

  1

• fix(portfolio): filter soft-deleted vaults from user portfolio aggregation (#1438)

  #1509·Awosdot opened Sep 29, 2026Contributor·

  ·
  1

• fix(openapi): recursively walk router stack in OpenAPI spec generation (#1441)

  #1508·Awosdot opened Sep 29, 2026Contributor·

  ·
  1

  1

• feat: Fix yield accrual scheduler drift with setTimeout-based schedul…

  #1507·alamuoyeemmanuel7-create opened Sep 29, 2026·

  ·
  1

  1

• feat: Add audit log IP and user-agent capture for SOC2 traceability (…

  #1506·alamuoyeemmanuel7-create opened Sep 29, 2026·

  ·
  1

  1

• fix: scope and rotate API keys per tenant with expiry and scopes

  #1505·oycodes opened Sep 29, 2026·

  ·
  1

  1

• fix: pin vault metadata to IPFS and track pin lifecycle

  #1504·bluegate916 opened Sep 29, 2026·

  ·
  1

  1

• fix(backend): emit LF-only OpenAPI spec to avoid phantom Windows CRLF diffs

  #1503·simonpeters298 opened Sep 29, 2026·

  ·
  1

  1

• fix: cursor pagination for vault transactions endpoint

  #1502·Fang0067 opened Sep 29, 2026·

  ·
  1

  1

• fix(backend): include errors array and summary in validation error responses

  #1501·CathyZaks opened Sep 29, 2026·

  ·
  1

  1

• fix(backend): run prisma generate before typecheck and fix schema syntax

  #1500·CathyZaks opened Sep 29, 2026·

  ·
  1

  1

• fix(docker): add .dockerignore and multi-stage build to cut image siz…

  #1499·B3rnard601 opened Sep 29, 2026·

  ·
  1

  1

• fix: accept strategy weights as bps integers or floats with tolerance

  #1498·marvelousjeremiah24 opened Sep 29, 2026·

  ·
  1

  1

• fix: resolve undefined prisma.eventOutbox in outbox relayer

  #1497·taiwo722-blip opened Sep 29, 2026·

  ·
  1

  1

• fix: enable gzip compression for API responses

  #1496·Daniexie opened Sep 29, 2026·

  ·
  1

  1

• fix(outbox): fail fast when Prisma client lacks eventOutbox model (#1380)

  #1495·solaawojobi00-bit opened Sep 29, 2026Contributor·

  ·
  1

  1

• build: enforce and document @yieldvault/api-schemas build order

  #1494·CathyZaks opened Sep 29, 2026·

  ·
  1

  1

• fix(backend): repair schema snapshot tooling and regenerate health/ready snapshots (#1378)

  #1493·solaawojobi00-bit opened Sep 29, 2026Contributor·

  ·
  1

  1

• fix(#1376): restore exported buildIdempotencyFingerprint helper

  #1492·solaawojobi00-bit opened Sep 29, 2026Contributor·

  ·
  1

  2