All pull requests

Pull requests

• chore(ci): drop the unreachable Fargate caller job from deploy-all (#314)

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1228·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• ci: single-source the gosec version in .gosec-version

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1227·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• docs(ci): replace stale AZURE_CREDENTIALS setup with the OIDC secrets

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  #1226·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• chore(test): point Azure RI-exchange credential test comments at cli#932

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1225·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  2

  1

• chore(purchase): drop maskActor's dead guard and inert commitmentopts helpers

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1224·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• test(api/federation): register AssertExpectations on the federationHandler mock

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1223·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• chore(gitignore): ignore root artifacts written by Make targets

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1222·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• chore(pre-commit): set default_install_hook_types so install arms both stages

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1221·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• chore(auth): remove the unused whole-row store UpdateUser

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1220·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• test(purchase): assert multi-account fan-out parallelism structurally

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1219·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• test(ladder): cover the handler's in-flight fetch error branch

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/this-quarter
  #1218·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• chore(api): remove dead submit-dedupe code and lock the retry-successor path

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1217·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• fix(server): pin the rate-limiter cleanup start in reinitializeAfterConnect

  effort/xsimpact/internalpriority/p3severity/lowtype/bugurgency/this-quarter
  #1216·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• fix(scripts): catch a multi-line bare "*" Action in the IAM parity check

  effort/xsimpact/internalpriority/p3severity/lowtype/bugurgency/this-quarter
  #1215·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• test(iacfiles): find Terraform IAM statements without a Sid

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1214·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• sec(ci): allowlist the roles a per-secret Secret Manager grant may carry

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/bugurgency/eventually
  #1213·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• fix(ri-exchange): answer the go exchange refusals with 422 instead of 500

  effort/mimpact/fewpriority/p2severity/mediumtriagedtype/choreurgency/this-sprint
  #1212·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• fix(iac/aws): list every attached policy in the ci-cd-permissions policy_arns output

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/bugurgency/eventually
  #1211·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• sec(build): build Dockerfile.dev's migrate from source like the production image

  effort/simpact/internalpriority/p3severity/lowtriagedtype/securityurgency/eventually
  #1210·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• fix(db): remove ReplaceRecommendations and its unscoped DELETE

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/bugurgency/eventually
  #1209·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• test(api): keep the RI-exchange carve-out test offline under mutation (#175)

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1208·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• sec(ci): refuse authoritative GCP IAM policies in the secret scope guard

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/securityurgency/eventually
  #1207·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• fix(auth): refuse view-only + write-capable group combinations on user create/update

  priority/p3severity/lowtriagedtype/chore
  #1205·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• chore(config): drop the unread retention.execution_history_days default

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  #1204·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1

• fix(iac): bound every Terraform provider constraint below the next major

  effort/simpact/internalpriority/p3severity/lowtriagedtype/securityurgency/eventually
  #1203·IAmJSD opened Oct 20, 2026Collaborator·

  ·
  1

  1