All pull requests

Pull requests

• build(deps): bump actions/download-artifact from 5.0.0 to 8.0.2

  dependenciesgithub_actions
  #1359·dependabot[bot] opened Oct 18, 2026Bot·

  ·
  1

• build(deps): bump actions/upload-artifact from 5.0.0 to 7.0.2

  dependenciesgithub_actions
  #1358·dependabot[bot] opened Oct 18, 2026Bot·

  ·
  3

• build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.3.0

  dependenciesgithub_actions
  #1357·dependabot[bot] opened Oct 18, 2026Bot·

  ·
  1

• test(ci): prepare immutable central workflow contract verification

  #1356·seonghobae opened Oct 15, 2026Contributor·

  ·
  1

• fix(governance): retire hosted Dependabot version updates

  #1353·seonghobae opened Oct 8, 2026Contributor·

  ·
  14

• fix(security): require patched urllib3 2.8.0

  #1352·seonghobae opened Oct 1, 2026Contributor·

  ·
  1

• fix(search): authenticate MCP and freeze repository evidence

  #1351·seonghobae opened Oct 1, 2026Contributor·

  ·
  2

• feat: measure one authenticated Experiential promotion charge

  enhancementpriority: highstatus: needs-review
  #1350·seonghobae opened Sep 30, 2026Contributor·

  ·
  27

• fix(security): scan data URIs linearly without a cutoff

  area: securitybugpriority: highstatus: needs-review
  #1349·seonghobae opened Sep 30, 2026Contributor·

  ·
  3

• fix(routing): fail closed to conduct pending calibrated evidence

  #1346·seonghobae opened Sep 29, 2026Contributor·

  ·
  31

• build(deps): bump cyclonedx-bom from 7.3.0 to 7.5.0

  dependenciespython
  #1344·dependabot[bot] opened Sep 28, 2026Bot·

  ·
  2

• build(deps): bump the codeql-action group across 1 directory with 2 updates

  dependenciesgithub_actions
  #1342·dependabot[bot] opened Sep 28, 2026Bot·

  ·
  2

• build(deps-dev): bump openai from 2.54.0 to 3.24.0

  dependenciespython
  #1341·dependabot[bot] opened Sep 28, 2026Bot·

  ·
  2

• fix(security): make document_diff_review data-URI regex linear (CodeQL py/polynomial-redos)

  #1340·seonghobae opened Sep 28, 2026Contributor·

  ·
  4

• feat(quality): measure paired delivered-correct difference

  #1339·seonghobae opened Sep 28, 2026Contributor·

  ·
  2

• Persist serving usage ledger for request-cost reconciliation

  #1338·seonghobae opened Sep 28, 2026Contributor·

  ·
  3

• fix(api): accept Responses text.verbosity without a format plane

  #1337·seonghobae opened Sep 28, 2026Contributor·

  ·
  2

• Link retained request outcomes to cost ledger attempts

  #1336·seonghobae opened Sep 28, 2026Contributor·

  ·
  7

• test(routing): count structured 429 recovery at provider socket

  #1335·seonghobae opened Sep 28, 2026Contributor·

  ·
  2

• test(routing): count image 429 recovery at provider HTTP boundary

  #1334·seonghobae opened Sep 28, 2026Contributor·

  ·
  4

• feat(review): authenticate signed GitHub job identities

  #1333·seonghobae opened Sep 28, 2026Contributor·

  ·
  2

• feat(release): attest native decision measurement wheel

  #1332·seonghobae opened Sep 28, 2026Contributor·

  ·
  1

• feat(review): isolate OpenCode, Noema, and Strix gateway identities

  #1331·seonghobae opened Sep 28, 2026Contributor·

  ·
  1

• Bind release SBOM to the hash-locked runtime inventory

  #1330·seonghobae opened Sep 28, 2026Contributor·

  ·
  2

• Version the gateway chat error contract for review consumers

  #1328·seonghobae opened Sep 28, 2026Contributor·

  ·
  2