All pull requests

Pull requests

• fix(node): bound federated repository aggregation

  crate:nodekind:bugsubsystem:identity
  #466·cairn-intern opened Sep 24, 2026·

  ·
  1

  2

• fix(node): bound GraphQL query cost

  crate:nodekind:bugsubsystem:replicationsubsystem:storage
  #465·cairn-intern opened Sep 24, 2026·

  ·
  4

• fix(node)!: Gate agent-task reads behind visibility rules

  crate:glcrate:nodesubsystem:identity
  #464·cairn-intern opened Sep 24, 2026·

  ·
  9

• fix(api,sync): Delimit positional arguments in git clone mirror invocations

  crate:glcrate:nodekind:bugsubsystem:apisubsystem:replication
  #463·cairn-intern opened Sep 24, 2026·

  ·
  1

  2

• fix(node): bound Identify-derived Kademlia addresses

  crate:nodekind:bugsubsystem:peers
  #462·cairn-intern opened Sep 24, 2026·

  ·
  1

  5

• fix(gl): truncate node-supplied display strings at a char boundary (#350)

  crate:glkind:bug
  #460·beardthelion opened Sep 15, 2026Collaborator·

  ·
  1

  9

• fix(gl): pin secret-file modes at creation instead of chmod after (#354)

  crate:glcrate:nodekind:bug
  #459·beardthelion opened Sep 15, 2026Collaborator·

  ·
  1

  24

  

• fix(gl): report quickstart registration failure when the node returns no UCAN (#355)

  crate:glkind:bug
  #458·beardthelion opened Sep 15, 2026Collaborator·

  ·
  1

  3

• fix(core): compute created-skew in checked arithmetic (#358)

  crate:corekind:bugsubsystem:identity
  #457·beardthelion opened Sep 15, 2026Collaborator·

  ·
  1

  3

• fix(attest): bound did:key method-id length before base58 decode (#360)

  crate:attestkind:bugsubsystem:attestation
  #456·beardthelion opened Sep 15, 2026Collaborator·

  ·
  1

  5

• chore: update rustls 0.23.37 → 0.23.45 to resolve RUSTSEC-2026-0285

  #455·beardthelion opened Sep 15, 2026Collaborator·

  ·
  1

  2

• fix(node): fail pin_git_object when the add response carries no Hash

  crate:nodekind:bugsubsystem:storage
  #453·beardthelion opened Sep 14, 2026Collaborator·

  ·
  1

  9

• fix(node): gate bounty mutations on repo read before status checks

  crate:nodekind:bug
  #448·beardthelion opened Sep 13, 2026Collaborator·

  ·
  1

  12

• ci(release): verify release provenance for backfill publishes

  kind:ci
  #447·beardthelion opened Sep 13, 2026Collaborator·

  ·
  2

  11

• fix(node): gate replica register/unregister on repo read visibility

  crate:nodekind:bugsubsystem:replication
  #445·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  4

• fix(icaptcha): return unsolved instead of blocking or overflowing

  kind:bug
  #444·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  3

• fix(gl): refuse signed requests to a plaintext remote

  crate:glkind:bug
  #443·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  13

• fix(git-remote): stop waiting on EOF for a delete-only push

  crate:git-remotekind:bug
  #442·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  9

• test(node): cover the component walk in validated_repo_disk_path (#411)

  crate:nodekind:test
  #441·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  3

• fix(core): cap the blinded recipient scan in open_blob (#419)

  crate:corekind:bugsubsystem:encryption
  #440·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  6

• fix(node): reconcile public-read messaging with per-repo enforcement

  crate:nodekind:bug
  #439·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  6

• fix: warn or error instead of returning silent empty results

  crate:glcrate:node
  #438·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  6

• fix(node): split absent ref from unreadable object in issue reads

  crate:nodekind:bug
  #437·beardthelion opened Sep 11, 2026Collaborator·

  ·
  1

  10

• fix(gl): pass the mirror temp path to git as an OS string

  crate:glkind:bug
  #434·beardthelion opened Sep 10, 2026Collaborator·

  ·
  1

  5

• fix(node): validate ref-update SHAs are hex, not just length 40

  crate:nodekind:bug
  #433·beardthelion opened Sep 10, 2026Collaborator·

  ·
  1

  3