COMMITS
August 24, 2026
B
Address atomic issue creation review
Bryan Zwicker committed
S
fix(http): terminate unknown resource metadata routes
Sam Morrow committed
S
fix(http): preserve CORS across OAuth routes
Sam Morrow committed
August 21, 2026
B
Harden atomic issue creation
Bryan Zwicker committed
B
Fold atomic creation into issue tools
Bryan Zwicker committed
B
Require complete parent repository coordinates
Bryan Zwicker committed
B
Support cross-repository parent issues
Bryan Zwicker committed
B
Add atomic parent issue creation
Bryan Zwicker committed
August 3, 2026
M
Name the root command after the installed binary
Martin Pluskal committed
August 20, 2026
S
test(http): cover authorization server override wiring
Sam Morrow committed
S
fix(issues): flatten issue comment input schema
Sam Morrow committed
July 17, 2026
A
feat(http): add --authorization-server flag to override OAuth AS URL
Anika Reiter committed
August 18, 2026
D
build(deps): bump the npm_and_yarn group across 1 directory with 4 updates
dependabot[bot] committed
August 19, 2026
S
fix(copilot): keep rate limit denials out of the review permission hint
Sam Morrow committed
D
fix(copilot): explain review request denials instead of forwarding a bare 404
Dylan Pulver committed
S
test(sanitize): drop the optimization scaffolding
Sam Morrow committed
S
perf(sanitize): make clean text allocation-free on the hot path
Sam Morrow committed
S
fix(lockdown): drop fixed-age expiry, keep per-identity cache isolation
Sam Morrow committed
S
refactor(lockdown): trim comments to non-obvious invariants
Sam Morrow committed
S
Revert "ci(lint): skip remote config schema verification"
Sam Morrow committed
S
ci(lint): skip remote config schema verification
Sam Morrow committed
S
fix(lockdown): scope repo-access cache per identity via entry keys
Sam Morrow committed
S
fix(lockdown): bound repo-access cache expiry and isolate it per identity
Sam Morrow committed
S
Set the request-body limit to 5 MiB at both layers
Sam Morrow committed
S
Align request-body limit with the MCP SDK default
Sam Morrow committed
S
test: exercise MaxBytesError branches with unknown-length bodies
Sam Morrow committed
S
Limit HTTP request bodies before MCP middleware parsing
Sam Morrow committed
S
refactor: condense lockdown comments in pull_request_read get_commits
Sam Morrow committed
S
fix(raw): reject dot-dot segments revealed by decoding encoded separators
Sam Morrow committed
S
fix(raw): reject traversal segments when constructing raw content URLs
Sam Morrow committed