All pull requests

Pull requests

• fix(tests): stop the developer's own xurl token store leaking into tests

  #1158·ahhhdum opened Sep 22, 2026·

  ·
  3

• fix(tests): exempt LAST30DAYS_MCP_ALLOW_BROWSER_COOKIES from the config contract

  #1157·ahhhdum opened Sep 22, 2026·

  ·
  2

• fix(grounding): parse Serper's relative dates instead of dropping the results

  #1156·sunnyseed opened Sep 22, 2026·

  ·
  1

  8

• fix(http): strip credentials on cross-origin redirect for github.py and transcribe.py too (#1062 follow-up)

  #1154·ahhhdum opened Sep 22, 2026·

  ·
  5

• fix(ci): resolve the changelog guard's base at job time

  #1153·ahhhdum opened Sep 22, 2026·

  ·
  3

• fix(env): read export KEY=value .env lines as KEY (#930)

  #1152·OSideMedia opened Sep 21, 2026·

  ·
  1

  5

• chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0

  dependenciesgithub_actions
  #1149·dependabot[bot] opened Sep 20, 2026·

  ·

• chore(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0

  dependenciesgithub_actions
  #1148·dependabot[bot] opened Sep 20, 2026·

  ·

• chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4

  dependenciesgithub_actions
  #1147·dependabot[bot] opened Sep 20, 2026·

  ·

• fix: render engine footer as fenced text block (supersedes #706)

  #1144·giuseppebisemi opened Sep 18, 2026·

  ·
  6

• fix: keep the runtime preflight intact under Claude Code argument substitution

  #1141·alexandercroft opened Sep 17, 2026·

  ·
  3

• fix(mcp): discover and verify compatible Python interpreters

  #1140·opita04 opened Sep 16, 2026·

  ·
  4

• feat: surface real reasoning-provider token usage in the agent JSON export

  #1137·CrisRondaS opened Sep 14, 2026·

  ·
  5

• fix: respect Codex desktop runtime and citation capabilities

  #1136·Astraethos opened Sep 13, 2026·

  ·
  3

• fix(x): report handle-lane failures instead of silent no-results

  #1116·iliaal opened Sep 8, 2026·

  ·
  6

• fix(security): refuse cleartext provider endpoint overrides

  #1060·Comradery64 opened Aug 27, 2026·

  ·
  4

• fix(discover): treat a bot-gated river listing as schema-drift, not no-results (#940)

  #1040·terry-li-hm opened Aug 22, 2026·

  ·
  1

  5

• fix(grounding): keep undated keyed-web results instead of dropping the whole response (#928)

  #1038·terry-li-hm opened Aug 22, 2026·

  ·
  1

  4

• fix(signals): stop rescuing an all-off-topic social batch into the ranking (rebase)

  #1033·nish3451 opened Aug 20, 2026·

  ·
  4

• feat: fail closed when selected sources are unavailable (conflict-resolved supersede of #987)

  #1031·nish3451 opened Aug 20, 2026·

  ·
  4

• feat(setup): zero-click Amazon onboarding via GitHub

  #1030·nish3451 opened Aug 20, 2026·

  ·
  3

• fix(reddit): add anti-bot resilience via host cooldown, cache, and old.reddit fallback

  #1028·nish3451 opened Aug 20, 2026·

  ·
  4

• fix: argv substitution corrupts runtime preflight; drop contradicting RECOMMENDATIONS template

  #1024·rollingaccess-droid opened Aug 19, 2026·

  ·
  3

• feat(env): add Secret Service (libsecret) credential source

  #1018·ferdousbhai opened Aug 18, 2026·

  ·
  4

• fix: read host JSON from stdin

  #1010·miketuckman opened Aug 16, 2026·

  ·
  1