All pull requests

Pull requests

• feat(auth)!: one Auth block replaces AuthBasic, AuthCognito and AuthOIDC

  #1259·harsh62 opened Nov 3, 2026Contributor·

  ·
  1

• fix(auth-common): decide the Secure cookie flag from deploy config

  #1257·sharonyajain opened Nov 2, 2026Contributor·3 tasks done·

  ·
  1

  2

• ci(e2e-amplify-interop): retry throttled sandbox teardown; sweep sandboxes one at a time

  #1255·xyos opened Nov 2, 2026Contributor·3 tasks done·

  ·
  1

• fix(bb-realtime): check the channel in WebSocket subscribe and unsubscribe messages

  #1254·belaboe opened Nov 2, 2026Contributor·

  ·
  8

• fix(bb-auth-basic): read the session cookie by exact name

  #1253·sharonyajain opened Nov 2, 2026Contributor·3 tasks done·

  ·
  1

  2

• fix(bb-data): db pull generates CRUD only for tables with row-level security enabled

  #1252·belaboe opened Nov 2, 2026Contributor·

  ·
  11

• fix(core): npm run sandbox deploys infrastructure changes made while it watches

  #1250·osama-rizk opened Nov 2, 2026Contributor·

  ·
  2

  

• docs(blocks): point re-export JSDoc at bundled docs

  #1249·sharonyajain opened Nov 2, 2026Contributor·2 of 3 tasks·

  ·
  7

• fix(bb-realtime): a server-side subscriber's handler runs once per publish on AWS

  #1247·osama-rizk opened Nov 2, 2026Contributor·

  ·
  1

  2

  

• feat(hosting): let a front door route at the app (routing: 'app')

  #1245·osama-rizk opened Nov 2, 2026Contributor·

  ·
  2

• chore: version packages

  #1244·github-actions[bot] opened Nov 2, 2026Bot·

  ·

• chore(hosting): move the Next.js adapter to OpenNext 4.1.14

  #1243·belaboe opened Nov 2, 2026Contributor·3 tasks done·

  ·
  3

• docs(bb-auth-oidc): requireAuth reports expired sessions as NotAuthenticated, not TokenExpired

  #1242·cabcookie opened Nov 2, 2026Contributor·2 of 3 tasks·

  ·
  3

• [create-blocks-app] Show auth-cognito todo action errors

  #1239·sharonyajain opened Nov 2, 2026Contributor·

  ·
  6

• chore(deps-dev): bump vite from 6.4.4 to 6.4.5

  dependenciesjavascript
  #1237·dependabot[bot] opened Nov 2, 2026Bot·

  ·
  3

• chore(deps): bump the templates group across 10 directories with 6 updates

  dependenciesjavascript
  #1236·dependabot[bot] opened Nov 2, 2026Bot·

  ·
  2

• chore(deps): bump the aws-sdk group across 1 directory with 24 updates

  dependenciesjavascript
  #1235·dependabot[bot] opened Nov 1, 2026Bot·

  ·
  2

• chore(deps-dev): bump the dev-dependencies group across 1 directory with 12 updates

  dependenciesjavascript
  #1234·dependabot[bot] opened Nov 1, 2026Bot·

  ·
  2

• chore(deps): bump astro from 7.4.1 to 7.4.4

  dependenciesjavascript
  #1232·dependabot[bot] opened Nov 1, 2026Bot·

  ·
  3

• chore(deps): bump aws-cdk-lib from 2.274.0 to 2.275.0

  dependenciesjavascript
  #1231·dependabot[bot] opened Nov 1, 2026Bot·

  ·
  3

• fix(hosting): cap typescript peer at <7 and skip typegen on unsupported versions

  #1219·xyos opened Nov 1, 2026Contributor·3 tasks done·

  ·
  2

• fix(core): dev server and sandbox robustness fixes

  #1218·xyos opened Nov 1, 2026Contributor·5/5·3 tasks done·

  ·
  8

• fix(bb-data): run the local CLI on the dev database

  #1217·xyos opened Nov 1, 2026Contributor·3 tasks done·

  ·
  2

• fix(blocks): keep vendor/ intact on vendorize --force; keep bin and @types when vendorizing

  #1216·xyos opened Oct 31, 2026Contributor·3 tasks done·

  ·
  2

• fix(core): never lose stackId or a telemetry opt-out from .blocks/config.json; warn on the unscoped secret namespace

  #1215·xyos opened Oct 31, 2026Contributor·3 tasks done·

  ·
  3