All pull requests

Pull requests

• fix: upgrade Docker and CI to Node.js 24

  #2160·Yasir761 opened Oct 24, 2026Contributor·

  ·
  1

  4

  

• docs: provider settings on the Custom SMTP page

  #2150·Ktryberceo opened Oct 22, 2026·

  ·
  1

  16

  

• fix(security): harden /functions/:slug proxy, add CORS allow-list, stop logging API keys

  #2148·tonychang04 opened Oct 21, 2026Member·

  ·
  25

• docs(config-as-code): document the storage.max_file_size_mb range

  #2133·Faisal-Fayaz opened Oct 19, 2026·

  ·
  1

  6

  

• 2026-10-18 fix mintlify docs

  #2132·insforge-docs-bot[bot] opened Oct 18, 2026Bot·1 task·

  ·
  3

  

• fix(auth): invalidate refresh tokens on rotation, logout, and password reset

  needs-claim
  #2127·shobhitsahani opened Oct 12, 2026·

  ·
  1

  37

  

• 2026-10-11 fix mintlify docs

  #2126·insforge-docs-bot[bot] opened Oct 11, 2026Bot·1 task·

  ·
  3

  

• 2026-10-11 fix mintlify docs

  #2125·insforge-docs-bot[bot] opened Oct 11, 2026Bot·1 task·

  ·
  8

  

• 2026-10-11 fix mintlify docs

  #2124·insforge-docs-bot[bot] opened Oct 11, 2026Bot·2 tasks·

  ·
  4

  

• security: refuse publicly-known default secrets, throttle admin login, bind dev ports to loopback

  needs-issue
  #2120·NannaW1 opened Oct 10, 2026·

  ·
  1

  2

  

• Default TRUST_PROXY to 0 in the bundled Docker Compose files

  #2116·Nitish-1303 opened Oct 8, 2026·

  ·
  1

  12

  

• Add rate limiting to password and admin sign-in endpoints

  #2115·Nitish-1303 opened Oct 8, 2026·

  ·
  1

  16

  

• docs(auth): warn that profile data is public, not auth-gate the lookup

  #2114·STiFLeR7 opened Oct 8, 2026·

  ·
  1

  3

  

• fix(storage): use secure randomness for generated object keys

  #2113·Sekharendu opened Oct 7, 2026·

  ·
  1

  7

  

• fix(storage): list S3 objects in byte order so CommonPrefixes are not repeated across pages

  #2100·ashish6123 opened Oct 6, 2026·

  ·
  1

  20

  

• docs(pricing): drop $1 free AI credits, explain OPENROUTER_API_KEY source

  #2087·BerlinDeskMudit opened Sep 30, 2026·

  ·
  1

  7

  

• feat(functions): add safe invocation tracing and log filters

  #2086·Devesh36 opened Sep 29, 2026·

  ·
  1

  12

  

• docs(deploy): remove broken Zeabur one-click link

  #2085·Devesh36 opened Sep 29, 2026·

  ·
  1

  2

  

• docs(auth): clarify custom-domain OAuth callbacks and cover routes

  #2084·Devesh36 opened Sep 29, 2026·

  ·
  1

  7

  

• fix(auth): use constant-time comparison for PKCE code_challenge validation

  #2082·Umeshchandra2024 opened Sep 27, 2026·

  ·
  1

  7

  

• [Bug]: Heavy Database CPU & IOPS (I/O Operations per second) Spikes via COUNT(*) in DatabaseManager.getMetadata()

  #2080·prakharsingh-74 opened Sep 27, 2026Contributor·

  ·
  1

  11

  

• docs(contributing): clarify review re-request workflow

  #2075·Indira-kumar opened Sep 19, 2026·

  ·
  1

  9

  

• fix(auth): report failed credential lookups as 503, not invalid API key

  #2071·tonychang04 opened Sep 17, 2026Member·

  ·
  9

• feat(config): make the backend Postgres pool size configurable (POSTGRES_POOL_MAX)

  #2070·tonychang04 opened Sep 17, 2026Member·

  ·
  10

• fix(storage): stop reporting DB failures on public-bucket downloads as 401

  #2069·tonychang04 opened Sep 17, 2026Member·

  ·
  25