All pull requests

Pull requests

• UX-066: assess dependency updates and verify Zizmor coverage

  ai-generatedcodexdependency-change-approved
  #1902·bradleybond512 opened Nov 11, 2026Owner·

  ·

• chore(deps-dev): bump react-server-dom-webpack from 19.2.8 to 19.3.1 in /marketing-site in the npm_and_yarn group across 1 directory

  dependenciesjavascript
  #1901·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• UX-076: Preserve failed iMessage setup drafts

  ai-generatedcodex
  #1900·bradleybond512 opened Nov 10, 2026Owner·

  ·

• UX-065: reconcile security delivery and unresolved holds

  ai-generatedcodex
  #1899·bradleybond512 opened Nov 10, 2026Owner·

  ·

• chore(deps): bump zizmor from 1.31.1 to 1.32.0 in /.github/tools/zizmor

  dependenciespython
  #1897·dependabot[bot] opened Nov 9, 2026Bot·

  ·

• chore(deps): bump @deck.gl/geo-layers from 9.4.0 to 9.4.1

  dependenciesjavascript
  #1896·dependabot[bot] opened Nov 9, 2026Bot·

  ·

• chore(deps): bump cesium from 1.143.0 to 1.147.0

  dependenciesjavascript
  #1895·dependabot[bot] opened Nov 9, 2026Bot·

  ·

• chore(deps-dev): bump lint-staged from 17.3.0 to 17.6.0

  dependenciesjavascript
  #1894·dependabot[bot] opened Nov 9, 2026Bot·

  ·

• chore(deps): bump tauri-plugin-clipboard-manager from 2.3.3 to 2.5.0 in /src-tauri

  dependenciesrust
  #1893·dependabot[bot] opened Nov 9, 2026Bot·

  ·

• chore(deps): bump tauri from 2.11.6 to 2.12.5 in /src-tauri

  dependenciesrust
  #1892·dependabot[bot] opened Nov 9, 2026Bot·

  ·

• chore(deps): bump swatinem/rust-cache from ad397744b0d591a723ab90405b7247fac0e6b8db to c8037a86dde8214a8310e9f54a8fc61ab362aa31

  dependenciesgithub_actions
  #1891·dependabot[bot] opened Nov 9, 2026Bot·

  ·

• UX-063: retain the working Sonnet review path

  ai-generatedcodexdocumentation
  #1890·bradleybond512 opened Nov 9, 2026Owner·

  ·

• Security: isolate filesystem MCP on pinned Node24 (draft)

  dependency-age-revieweddependency-change-approved
  #1889·bradleybond512 opened Nov 9, 2026Owner·

  ·

• UX-040: preserve unavailable cyclone source outcomes

  ai-generatedcodex
  #1888·bradleybond512 opened Nov 8, 2026Owner·

  ·

• UX-062: expose missing forecast verification

  ai-generatedcodex
  #1886·bradleybond512 opened Nov 8, 2026Owner·

  ·

• Prepare 2.25.148 and make main CI green

  dependency-change-approved
  #1838·bradleybond512 opened Oct 28, 2026Owner·

  ·
  1

• chore(deps-dev): bump eslint-plugin-sonarjs from 4.0.3 to 4.2.2

  dependenciesjavascript
  #1791·dependabot[bot] opened Oct 6, 2026Bot·

  ·
  3

• feat: Quota Governor for quota-limited providers (R4-BUG-005 step 2)

  ai-generatedclaude
  #1770·bradleybond512 opened Oct 2, 2026Owner·

  ·
  1

• fix: CSP without unsafe-eval; trust only owned origins (R3-SEC-004, R4-SEC-008)

  ai-generatedclaude
  #1769·bradleybond512 opened Oct 2, 2026Owner·

  ·

• fix: keep quota-limited feeds within their free limits across restarts (R4-BUG-005 step 1)

  ai-generatedclaude
  #1761·bradleybond512 opened Sep 30, 2026Owner·

  ·
  1

• chore(deps-dev): bump @tauri-apps/cli from 2.11.4 to 2.12.4 in the tauri-cli group across 1 directory

  dependenciesjavascript
  #1750·dependabot[bot] opened Sep 28, 2026Bot·

  ·