All pull requests

Pull requests

• build(fleet): refresh the pinned Temurin 25 runtime base digest

  #12647·JiRaska opened Oct 12, 2026Owner·6 tasks done·

  ·
  4

• chore(gitops): auto-deploy services @ 6af41b7f26017f8875cbc9f5d202ad455502e9c9

  choregitops
  #12641·openbank-gitops-bot[bot] opened Oct 12, 2026Bot·

  ·
  1

• fix(copilot-service): omit private proposal fields from logs

  gdpr-review-requiredsecurity-review-required
  #12636·JiRaska opened Oct 12, 2026Owner·2 tasks done·

  ·
  1

• chore(deps-ui)(deps): Bump the ui-minor group in /openbank-admin-ui with 23 updates

  dependencies
  #12622·dependabot[bot] opened Oct 12, 2026Bot·

  ·
  2

• chore(deps)(deps): Bump the jvm-minor group with 11 updates

  dependencies
  #12621·dependabot[bot] opened Oct 12, 2026Bot·

  ·
  3

• chore(deps-ui)(deps): Bump the next group in /openbank-admin-ui with 2 updates

  dependencies
  #12620·dependabot[bot] opened Oct 12, 2026Bot·

  ·
  2

• chore(infra): declare EKS 1.37 for sandbox and add upgrade runbook

  #12589·JiRaska opened Oct 11, 2026Owner·

  ·
  2

• fix(docs): refresh fleet documentation and discovery in CI

  #12587·JiRaska opened Oct 11, 2026Owner·2 of 7 tasks·

  ·
  1

  11

• security(admin-ui): patch inherited KaTeX rendering trust

  #12551·JiRaska opened Oct 11, 2026Owner·2 tasks done·

  ·
  3

• fix(admin-ui): reject malformed approval maker identity

  #12550·JiRaska opened Oct 11, 2026Owner·3 tasks done·

  ·
  1

• security(libs-runtime): send OPA a verified service_account flag (phase 1 of 2)

  gdpr-review-requiredmoney-pathpci-review-requiredsecurity-review-required
  #12538·JiRaska opened Oct 11, 2026Owner·7 tasks done·

  ·
  5

• security(opa): authorize machines by the verified service_account flag (phase 2 of 2, gated on #12538 rollout)

  money-pathsecurity-review-required
  #12537·JiRaska opened Oct 11, 2026Owner·8 tasks done·

  ·
  2

• ci(ci): add auditable one-time WIP exception for #12480

  #12509·JiRaska opened Oct 10, 2026Owner·

  ·
  1

• chore(treasury): deploy the pension company's treasury instance (ADR-0337)

  #12508·JiRaska opened Oct 10, 2026Owner·7 tasks done·

  ·
  4

• chore(tax-reporting): reach the pension read models over internal TLS

  #12507·JiRaska opened Oct 10, 2026Owner·7 tasks done·

  ·
  6

• feat(treasury): ingest custodian semt.002 holdings and serve the period-end portfolio (ADR-0337)

  #12506·JiRaska opened Oct 10, 2026Owner·6 tasks done·

  ·
  4

• feat(tax-reporting): source PSP 34-12 PS from the pension company's treasury

  #12504·JiRaska opened Oct 10, 2026Owner·7 tasks done·

  ·
  3

• chore(ledger): deploy the pension company's ledger instance (ADR-0337)

  #12500·JiRaska opened Oct 10, 2026Owner·4 of 6 tasks·

  ·
  3

• docs(tax-reporting): amend ADR-0337 with the PSP 34-12 PS holdings source

  #12498·JiRaska opened Oct 10, 2026Owner·7 tasks done·

  ·
  3

• feat(tax-reporting): source the pension company's own returns from its ledger (ADR-0337)

  #12496·JiRaska opened Oct 10, 2026Owner·7 tasks done·

  ·
  4

• feat(tax-reporting): corporate register feeding ČNB PSP 32-04, 50-04 and 40-01

  security-review-required
  #12495·JiRaska opened Oct 10, 2026Owner·5 of 7 tasks·

  ·
  3

• fix(tax-reporting): file PSP 20-12 as separate result lines and assemble PEF 13-04

  gdpr-review-requiredsecurity-review-required
  #12494·JiRaska opened Oct 10, 2026Owner·6 of 7 tasks·

  ·
  3

• fix(libs): preserve trustworthy test intelligence execution evidence

  #12480·JiRaska opened Oct 10, 2026Owner·6 tasks·

  ·
  3

• feat(tax-reporting): assemble the ČNB pension returns from the reporting read models

  #12468·JiRaska opened Oct 10, 2026Owner·7 tasks done·

  ·
  1

  2

• feat(pension): participant aggregates read model for the ČNB returns

  #12465·JiRaska opened Oct 10, 2026Owner·7 tasks done·

  ·
  10