Labels Milestones

Search syntax

See the documentation for further details on search, operators, and filters.

"forgejo"

Include only results that match the term in quotes

assignee:<username>

Filter by assigned user

author:<username>

Filter by the author

is:all

All

is:closed

Closed

is:open

Open

mentions:<username>

Filter by mentioned user

modified:[>|<]<date>

Filter by last modified date

review:<username>

Filter by user who reviewed

sort:<by>:[asc|desc]

Sort by: created|comments|updated|deadline

Cancel

New pull request

0 Open 110 Closed 110 All

Label

Show archived labels

All labels No label

Milestone

All milestones No milestones

Project

All projects No project

Author

All authors

Assignee

All assignees No assignee

Claude-Run David Humming2078 YousifShkara josh longjacksonle nrupard raiden vas2000-work

Sort

Relevance Newest Oldest Recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 110 Closed 110 All

Label

Clear labels

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

No assignee

Claude-Run

David

Humming2078

YousifShkara

josh

longjacksonle

nrupard

raiden

vas2000-work

fix(startup): populate applications.webhook_url for mokosh from MOKOSH_WEBHOOK_URL

#326 by YousifShkara was merged 2026-07-03 14:03:49 +02:00

main

test(e2e): stop setInputValue hanging when BUNYIP-331 auto-submit detaches the input

#325 by YousifShkara was merged 2026-07-03 12:04:58 +02:00

main

fix(webhooks): sign outbound webhooks with a dedicated secret, not JWT_SECRET

#324 by YousifShkara was merged 2026-07-03 12:54:53 +02:00

main

feat(auth): permanently reserve soft-deleted emails against re-registration

#320 by YousifShkara was merged 2026-07-03 11:51:15 +02:00

main

fix(auth): logout clears cookies unconditionally, even when access_token is stale

#319 by YousifShkara was merged 2026-07-02 09:06:03 +02:00

main

fix(web): rotate at+jwt when /users/me reports a different role than the cookie's JWT

#308 by YousifShkara was merged 2026-07-02 08:42:52 +02:00

main

fix(e2e): extend hub-soft-probe skip to push + staging dispatch so a broken hub cannot red the post-merge check

#307 by YousifShkara was closed 2026-07-01 10:15:22 +02:00

main

fix(ci): sniff-test bunyip-web/Cargo.toml for axum before publishing :latest

#306 by YousifShkara was merged 2026-07-01 09:38:35 +02:00

main

fix(auth): await welcome email inline so it lands before verify on signup

#304 by YousifShkara was merged 2026-07-01 07:13:32 +02:00

main

feat(emails): rebrand onboarding + recovery emails to bunyip-web tokens

#303 by YousifShkara was merged 2026-07-01 07:13:31 +02:00

main

fix(e2e): send Origin on /settings/profile POST so BUNYIP-259 CSRF middleware accepts it

#296 by YousifShkara was merged 2026-06-30 09:28:58 +02:00

main

fix(web): re-evaluate signup submit gate when async breach check resolves

#295 by YousifShkara was merged 2026-06-30 09:11:37 +02:00

main

feat(web): per-field show/hide password toggle on signup form

#294 by YousifShkara was merged 2026-06-30 09:22:47 +02:00

main

fix(oidc): server-side intersect consent scopes; refuse to revive revoked entitlement rows

#292 by YousifShkara was merged 2026-06-30 06:42:45 +02:00

main

fix(web): Origin / Referer CSRF defense on every state-changing POST

#291 by YousifShkara was merged 2026-06-30 07:05:12 +02:00

main

fix(oidc): enforce allowed_grant_types + token_endpoint_auth_method at /oauth2/token

#290 by YousifShkara was merged 2026-06-30 07:05:19 +02:00

main

fix(auth): login hardening cluster (pre-login op_session revoke, multi-keyed rate limit, 2FA cookie hygiene)

#289 by YousifShkara was merged 2026-06-30 06:42:35 +02:00

main

fix(oidc): thread real acr/amr through op_session creation + refresh family

#288 by YousifShkara was merged 2026-06-30 06:58:27 +02:00

main

fix(oidc): persist original auth_time on refresh family; re-intersect scope at rotation

#287 by YousifShkara was merged 2026-06-30 07:33:41 +02:00

main

fix(auth): invalidate prior pending reset tokens when a new reset is requested

#284 by YousifShkara was merged 2026-06-30 06:02:16 +02:00

main