All pull requests

Pull requests

• feat(core): establish a first factor and enroll MFA inside pure step-up

  featuresize/xl
  #9685·wangsijie opened Sep 29, 2026Contributor·

  ·
  

• test(core): fix flaky dev-features-disabled sign-in experience tests

  size/stesting
  #9684·wangsijie opened Sep 29, 2026Contributor·

  ·
  

• feat(console): console members and invitations for self-hosted deployments

  featuresize/xl
  #9683·wangsijie opened Sep 29, 2026Contributor·

  ·
  

• feat(core): console members and invitations for self-hosted deployments

  featuresize/xl
  #9682·wangsijie opened Sep 29, 2026Contributor·

  ·
  

• refactor(core): share tenant member authorization and let tenants reach each other

  enhancementsize/l
  #9681·wangsijie opened Sep 29, 2026Contributor·

  ·

• fix(deps): update dependency nodemailer to v10 [security]

  bugfixsize/xs
  #9678·renovate[bot] opened Sep 29, 2026Bot·

  ·
  3

• chore(deps): update dependency nodemailer@<9.1.1 to v10 [security]

  choresize/xs
  #9677·renovate[bot] opened Sep 29, 2026Bot·

  ·
  14

• feat(core,experience): control theme via theme authentication parameter

  featuresize/l
  #9645·konlanx opened Sep 22, 2026Contributor·

  ·
  1

  25

  

• feat(console): warn users to remove console SSO connections before deleting their account

  featuresize/l
  #9625·charIeszhao opened Sep 18, 2026Member·

  ·
  3

  

• fix(connector-kit): reject none prompt combined with other prompts

  bugfixsize/s
  #9566·Shivam8584 opened Sep 8, 2026·

  ·
  1

  6

  

• fix(deps): update dependency @simplewebauthn/server to v13 [security]

  bugfixsize/xs
  #9557·renovate[bot] opened Sep 4, 2026Bot·

  ·
  13

• chore(deps): update dependency react-router@>=6.7.0 <6.30.6 to v7 [security]

  choresize/xs
  #9554·renovate[bot] opened Sep 4, 2026Bot·

  ·
  173

• chore(deps): update dependency esbuild to ^0.28.0

  choresize/xs
  #9550·renovate[bot] opened Sep 3, 2026Bot·

  ·
  10

• chore(deps): update dependency @xmldom/xmldom@<0.8.15 to ^0.9.0

  choresize/xs
  #9549·renovate[bot] opened Sep 3, 2026Bot·

  ·
  7

• fix(core): prune consumed refresh tokens on rotation

  bugfixsize/l
  #9545·simeng-li opened Sep 2, 2026Contributor·

  ·
  8

  

• fix(deps): update oidc-provider digest to 5570006

  bugfixsize/xs
  #9543·renovate[bot] opened Sep 2, 2026Bot·

  ·
  18

• release: version packages

  size/xl
  #9541·silverhand-bot opened Sep 2, 2026Collaborator·

  ·
  83

  

• feat(core,experience): abort failed direct sign-in back to the client with access_denied

  featuresize/l
  #9425·feitianbubu opened Aug 12, 2026·

  ·
  11

  

• fix(core): warn when a /console request does not match ADMIN_ENDPOINT

  bugfixsize/m
  #9408·mvanhorn opened Aug 10, 2026Contributor·

  ·
  15

  

• fix(core): localize organization invitation validation errors

  bugfixsize/m
  #9353·Kathircpe opened Aug 5, 2026Contributor·

  ·
  19

  

• chore(deps): bump nodemailer from 8.0.11 to 9.0.1

  choredependenciesjavascriptsize/xsstale
  #9061·dependabot[bot] opened Jun 21, 2026Bot·

  ·
  7

• chore(deps): bump http-proxy-middleware from 3.0.5 to 3.0.7

  choredependenciesjavascriptsize/xsstale
  #9057·dependabot[bot] opened Jun 20, 2026Bot·

  ·
  6

• chore(deps): bump samlify from 2.10.0 to 2.13.0 in /packages/connectors/connector-saml

  choredependenciesjavascriptsize/xs
  #8883·dependabot[bot] opened May 27, 2026Bot·

  ·
  4

• fix(deps): update dependency iconv-lite to v0.7.3

  bugfixsize/xs
  #8601·renovate[bot] opened Mar 31, 2026Bot·

  ·
  37

• chore(deps): update zaproxy/action-full-scan action to v0.13.0

  choresize/xs
  #8565·renovate[bot] opened Mar 27, 2026Bot·

  ·
  19