All pull requests

Pull requests

• feat(users): DELETE /users/:id/stellar-address to unlink wallet (#652)

  #692·PINYOPATTANAWASANPORN opened Oct 15, 2026·

  ·
  1

• [Test] Expect 401 for unauthenticated requests in users e2e tests (#612)

  #691·PINYOPATTANAWASANPORN opened Oct 15, 2026·

  ·
  1

  1

• [Auth] Set access_token cookie secure flag on HTTPS staging and req.secure (#614)

  #690·PINYOPATTANAWASANPORN opened Oct 15, 2026·

  ·
  1

  1

• [Config] Validate numeric env vars at boot and fail fast (#610)

  #689·PINYOPATTANAWASANPORN opened Oct 15, 2026·

  ·
  1

  1

• fix(entities): remove the duplicate Index import + redundant index decorator

  #687·yggdrasilworld opened Oct 14, 2026·

  ·
  2

• fix(milestones): create binds sponsorId to the caller, not the DTO

  #685·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  3

• fix(reputation): recompute skips the insert when stats are unchanged

  #684·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(reputation): the reads are public, not self-view-only + recompute throttle

  #683·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• feat(milestones): POST /:id/close — close + refund the unspent balance

  #682·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• feat(reputation): nightly snapshot sweep — they were never being created

  #680·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(api): tighten the public-read routes past the default throttler

  #679·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(scheduler): cron jobs run single-runner via a Postgres advisory lock

  #678·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(users): self-check on PATCH stellar-address + controller spec

  #677·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  2

• test(config): spec for configuration.ts env-parsing

  #676·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(milestones): a milestone can pay out more than its first issue

  #675·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  2

• fix(api): GET /milestones + /maintenance-pools load the relations the UI renders

  #674·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• test(auth): specs for the jwt + github strategies

  #673·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(config): FRONTEND_URL/port defaults match where the frontend serves

  #670·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(bounties): GET /bounties/:id loads the relations clients render

  #667·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(reputation): history() returns newest-first with a total

  #662·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• test(lint): fix the unbound-method + unnecessary-assertion lint errors

  #660·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• test(config): spec the production-required-config validation

  #659·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• test: spec the ttl-cache, users.mapper, and github-webhook-payload utils

  #658·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• test(validators): spec the money, stellar-address, and date validators

  #657·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  1

• fix(bounties): sponsor is the authenticated caller + dead vars

  #656·yggdrasilworld opened Oct 14, 2026·

  ·
  1

  2