Diego Rodrigues de Sa e Souza 5ff85c6db6 fix(oauth): fall back to public Code Suggestions on any GitLab Duo direct_access 403 (#12958) (#13758) ...

Merged in the 2026-09-16 sweep of the maintainer's own open PRs, at the owner's explicit instruction. No push was made to the PR branch: the merge took the head as the owning session left it (verified OPEN, non-draft and MERGEABLE against the release tip immediately before merging).

2026-09-16 06:17:42 -03:00

..

app

fix(oauth): fall back to public Code Suggestions on any GitLab Duo direct_access 403 (#12958) (#13758)

2026-09-16 06:17:42 -03:00

domain

fix(combo): stop quota-weighted routing onto out-of-credit connections (#13006)

2026-09-11 19:27:57 -03:00

hooks

fix(dashboard): surface combined-pipeline error in Compression Studio Run (#12061) (#13288)

2026-09-11 22:05:34 -03:00

i18n

fix(i18n): retranslate the verbatim-English leaves in all 65 catalogs; ratio gate now blocking (#13782)

2026-09-15 23:19:43 -03:00

lib

fix(oauth): fall back to public Code Suggestions on any GitLab Duo direct_access 403 (#12958) (#13758)

2026-09-16 06:17:42 -03:00

middleware

fix(guardrails): restore injection-guard logging on middleware-only routes (#12117)

2026-08-30 11:11:12 -03:00

mitm

fix(conversations): show a pending spinner for unresolved tool nodes instead of "(empty)" (#12727)

2026-09-10 10:42:38 -03:00

models

fix(barrel): migrate open-sse, src/shared, src/sse, src/models, src/domain off the @/lib/localDb barrel import (#11795 Phase 4) (#12053)

2026-08-30 02:31:09 -03:00

scripts

feat(db): consolidate all database settings into SystemStorageTab (closes #1935) (#1947)

2026-05-04 19:25:41 -03:00

server

fix(auth): close the JWT_SECRET bootstrap chain — real-peer loopback, obsidian always-protected, DATA_DIR vault refusal (#13791)

2026-09-15 16:58:24 -03:00

shared

fix(api): persist hideAutoCombos/hideNoThinkVariants in settings schema (#13562) (#13800)

2026-09-16 06:11:56 -03:00

sse

fix(sse): fail closed on background token-refresh for dead proxy pools (#13470) (#13793)

2026-09-16 06:12:59 -03:00

store

feat(dashboard): collapsible JSON tree viewer for request/response payloads (#11703)

2026-08-30 04:26:15 -03:00

types

fix(db): reconcile INCREMENTAL auto_vacuum drift via the vacuum scheduler (#13432) (#13786)

2026-09-16 06:13:59 -03:00

instrumentation-node.ts

feat(quota): Moonshot Open Platform balance and TPD lock for custom nodes (#12590)

2026-09-03 12:47:50 -03:00

instrumentation.ts

fix(cli): guarantee non-empty [STARTUP] Fatal log on instrumentation-hook boot throw (#10447)

2026-08-18 10:57:44 -03:00

proxy.ts

fix(security): close 4 STILL-REAL advisory findings (ACP RCE hardening, db-backups tier, uppercase authz bypass, spawn-veto drift) (#11028)

2026-08-21 13:57:42 -03:00