All pull requests

Pull requests

• chore(deps): bump @inquirer/prompts from 8.7.0 to 8.7.2 in /mcp

  dependenciesjavascript
  #117·dependabot[bot] opened Sep 20, 2026Bot·

  ·

• fix(security): authorize the operated-on row, not a caller-supplied id

  #116·notSumit25 opened Sep 17, 2026Collaborator·

  ·
  1

• fix(security): escape identifiers in the brain statistics SQL

  security
  #115·notSumit25 opened Sep 16, 2026Collaborator·

  ·
  1

• fix(security): escape HTML in agent chat before markdown substitution

  security
  #114·notSumit25 opened Sep 16, 2026Collaborator·

  ·
  1

• ci: bump actions/upload-artifact from 4 to 7

  dependenciesgithub_actions
  #96·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• ci: bump softprops/action-gh-release from 2 to 3

  dependenciesgithub_actions
  #95·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• ci: bump actions/download-artifact from 4 to 8

  dependenciesgithub_actions
  #94·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• ci: bump actions/setup-java from 5.6.0 to 6.0.0

  dependenciesgithub_actions
  #93·dependabot[bot] opened Sep 1, 2026Bot·

  ·

• fix(ssh): add opt-in SSRF guard for SSH bastion hosts

  #62·notSumit25 opened Aug 17, 2026Collaborator·

  ·
  4

• fix(security): gate saved-dashboard CRUD on connection ACL (#54)

  #58·venkateshsakamuri-lab opened Aug 15, 2026Contributor·

  ·
  1

  1

• fix(postgres): introspect the session search_path, not a hardcoded 'public'

  #40·geekypunk opened Aug 9, 2026Contributor·

  ·
  4

• rebase(desktop): kaushik-IDE onto main (SSH tunnel + CORS)

  #38·venkateshsakamuri-lab opened Aug 9, 2026Contributor·

  ·
  1

• chore(deps): bump com.github.kagkarlsson:db-scheduler-spring-boot-4-starter from 16.7.0 to 16.12.0 in /backend

  dependenciesjava
  #36·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• chore(deps): bump com.google.cloud:google-cloud-logging from 3.21.0 to 3.36.0 in /backend

  dependenciesjava
  #35·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• chore(deps): bump react-force-graph-2d from 1.29.0 to 1.29.1

  dependenciesjavascript
  #34·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• chore(deps): bump jspdf from 3.0.4 to 4.2.1

  dependenciesjavascript
  #32·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• chore(deps): bump com.slack.api:bolt-jakarta-socket-mode from 1.48.0 to 1.50.0 in /backend

  dependenciesjava
  #33·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• chore(deps): bump aws.sdk.version from 2.49.6 to 2.54.2 in /backend

  dependenciesjava
  #31·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• chore(deps): bump zustand from 5.0.11 to 5.0.14

  dependenciesjavascript
  #30·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• chore(deps): bump co.elastic.clients:elasticsearch-java from 8.17.0 to 9.5.1 in /backend

  dependenciesjava
  #29·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• chore(deps): bump node from 25-alpine to 26-alpine

  dependenciesdocker
  #28·dependabot[bot] opened Aug 9, 2026Bot·

  ·

• test(bench): ACME ERP enterprise ambiguity + workload recommendation harness

  #25·venkateshsakamuri-lab opened Aug 8, 2026Contributor·

  ·

• chore(deps): bump lucide-react from 0.562.0 to 1.28.0

  dependenciesjavascript
  #17·dependabot[bot] opened Aug 2, 2026Bot·

  ·
  1

• chore(deps): bump the dev-dependencies group across 1 directory with 11 updates

  dependenciesjavascript
  #13·dependabot[bot] opened Aug 2, 2026Bot·

  ·
  1