All pull requests

Pull requests

• ci: verify packageManager matches workflow pnpm versions

  #555·CemAyyildiz opened Oct 22, 2026Contributor·

  ·
  1

• ci(high/easy): fail when generated bindings dirty the worktree

  #554·CemAyyildiz opened Oct 22, 2026Contributor·

  ·
  1

• ci: add concurrency cancellation to docs links workflow

  #551·spike-commander opened Oct 22, 2026·

  ·
  1

• feat: comprehensive fixes for issue #489 - seal round commit window, …

  #508·sulaimonifeoluwa4-blip opened Oct 22, 2026·

  ·
  1

• security(ci): guard folder-open VS Code tasks and the root lockfile

  #507·brodapeethar opened Oct 22, 2026·

  ·
  2

  1

• docs(contributing): add security-safe local setup guide (#483)

  #506·ollypee22 opened Oct 22, 2026·

  ·
  1

  1

• security(repo): add CODEOWNERS for execution-sensitive paths

  #505·Kaybee973 opened Oct 22, 2026Contributor·

  ·
  1

  1

• security(repo): add supply-chain checklist to PR template

  #504·Damilorlar opened Oct 22, 2026Contributor·

  ·
  1

• security(repo): enable secret scanning and push protection (#485)

  #503·michealross opened Oct 21, 2026·

  ·
  1

• Enable weekly Dependabot updates for npm, Cargo, and GitHub Actions

  #502·Adediwura-dev opened Oct 21, 2026Contributor·

  ·
  1

  1

• security(ci): pin third-party GitHub Actions to immutable commit SHAs

  #501·seuninfoo-svg opened Oct 21, 2026·5 tasks done·

  ·
  1

• security(ci): verify WOFF and WOFF2 magic bytes for committed font as…

  #500·seuninfoo-svg opened Oct 21, 2026·6 tasks done·

  ·
  1

• feat: reject unreviewed dependency sources in the pnpm lockfile

  #499·seuninfoo-svg opened Oct 21, 2026·

  ·
  1

  1

• security: enable Dependabot alerts and security updates (runbook + apply/verify script)

  #498·afeezorobsco-cyber opened Oct 21, 2026·6 tasks done·

  ·
  1

  1

• security(ci): disable persisted checkout credentials in read-only workflows

  #497·abojeEdwin opened Oct 21, 2026·

  ·
  1

  1

• security(high/easy): require approval for every external fork workflow run

  #496·Jubilee-001 opened Oct 21, 2026·

  ·
  1

  1

• ci: reject new install-time lifecycle scripts by default

  #495·larryjay007 opened Oct 21, 2026·

  ·
  1

  2