All pull requests

Pull requests

• ci: add a check that blocks merging marked PRs

  cidocumentation
  #1536·reitblatt opened Nov 3, 2026Contributor·4 tasks·

  ·

• fix(ci): move docker latest tag only for the highest release

  cidocumentation
  #1535·reitblatt opened Nov 3, 2026Contributor·4 tasks·

  ·

• test(hma): cover bank credential tenant isolation

  hmaserver
  #1533·taobojlen opened Nov 3, 2026Contributor·4 tasks·

  ·
  1

• ci: extend codeQL for backend HTTP requests

  cihas-release-notes
  #1532·taobojlen opened Nov 3, 2026Contributor·4 tasks·

  ·

• test(isolation): cover queue access and Scylla item histories

  has-release-notesserver
  #1531·taobojlen opened Nov 3, 2026Contributor·4 tasks·

  ·
  1

• test(graphql): cover sensitive authorization and persisted outcomes

  has-release-notes
  #1530·taobojlen opened Nov 3, 2026Contributor·2/2·4 tasks·

  ·
  3

• test(auth): cover authentication, recovery, and tenant binding

  has-release-notesserver
  #1529·taobojlen opened Nov 3, 2026Contributor·1/2·4 tasks·

  ·
  2

• fix(server): enforce security lint rules and object property access

  hmaserver
  #1528·taobojlen opened Nov 3, 2026Contributor·4 tasks·

  ·
  5

• fix(db): create ClickHouse databases through default database

  db
  #1527·taobojlen opened Nov 3, 2026Contributor·4 tasks·

  ·
  1

• ci: strip trailing separators from release notes

  cihas-release-notes
  #1526·taobojlen opened Nov 3, 2026Contributor·4 tasks·

  ·
  2

• build(scripts): add a check for lockfile versions newer than a base ref

  #1524·reitblatt opened Nov 2, 2026Contributor·4 tasks·

  ·

• ci: post new security advisories to the security discord channel

  ci
  #1523·reitblatt opened Nov 2, 2026Contributor·6 tasks·

  ·
  13

• fix(deps): bump qs, fast-uri, follow-redirects and decode-uri-component

  #1522·reitblatt opened Nov 2, 2026Contributor·4 tasks·

  ·
  1

• ci: enforce conventional PR titles

  cidocumentation
  #1521·emma-green opened Nov 2, 2026Contributor·4 tasks·

  ·

• ci: label dependabot prs that fix security advisories

  ci
  #1519·reitblatt opened Nov 2, 2026Contributor·5 tasks·

  ·
  1

• docs: add info for contributions

  documentation
  #1516·emma-green opened Nov 2, 2026Contributor·4 tasks·

  ·
  5

• build: remove writeable home directory from migration image

  db
  #1512·taobojlen opened Nov 2, 2026Contributor·4 tasks·

  ·
  2

• docs: run container maintenance commands directly with Node.js

  dbdocumentationserver
  #1511·taobojlen opened Nov 2, 2026Contributor·4 tasks·

  ·
  4

• docs(changelog): add 1.2.1 release section

  #1510·reitblatt opened Oct 31, 2026Contributor·1 of 4 tasks·

  ·

• docs(development): fix the GraphQL URL in the local development guide

  documentation
  #1502·sahilx13 opened Oct 29, 2026Contributor·4 tasks·

  ·

• chore(db): remove is_demo_org column from org_settings

  clientdbserver
  #1500·emma-green opened Oct 29, 2026Contributor·1 of 4 tasks·

  ·
  9

• build(server): drop package managers from server and worker images

  #1497·reitblatt opened Oct 28, 2026Contributor·1 of 4 tasks·

  ·
  5

• ci: scan published images and attach SBOMs to releases

  cidocumentation
  #1494·reitblatt opened Oct 28, 2026Contributor·1 of 4 tasks·

  ·

• ci: add nightly OSV-Scanner and Trivy vulnerability scan

  ci
  #1493·reitblatt opened Oct 28, 2026Contributor·4 tasks·

  ·
  1

• docs(releases): add a security release runbook

  documentation
  #1492·reitblatt opened Oct 28, 2026Contributor·4 tasks·

  ·