All pull requests

Pull requests

• fix(core): check the email allowlist before sending a sign-up sign-in code

  bugfixsize/l
  #9693·Tyagiquamar opened Oct 6, 2026Contributor·

  ·
  1

  4

  

• fix(console): correct async home component in Next.js App Router guide

  bugfixsize/xs
  #9692·timokoethe opened Oct 5, 2026·1 of 4 tasks·

  ·
  2

  

• chore(deps): update dependency brace-expansion@>=2.0.0 <2.1.4 to v5 [security]

  choresize/xs
  #9688·renovate[bot] opened Sep 30, 2026Bot·1 task·

  ·
  11

• chore(deps): update dependency brace-expansion@<1.1.18 to v5 [security]

  choresize/xs
  #9687·renovate[bot] opened Sep 30, 2026Bot·1 task·

  ·
  13

• feat(core): establish a first factor and enroll MFA inside pure step-up

  featuresize/xl
  #9685·wangsijie opened Sep 29, 2026Contributor·2 of 4 tasks·

  ·
  

• fix(deps): update dependency nodemailer to v10 [security]

  bugfixsize/xs
  #9678·renovate[bot] opened Sep 29, 2026Bot·1 task·

  ·
  6

• chore(deps): update dependency nodemailer@<9.1.1 to v10 [security]

  choresize/xs
  #9677·renovate[bot] opened Sep 29, 2026Bot·1 task·

  ·
  29

• feat(console): warn users to remove console SSO connections before deleting their account

  featuresize/l
  #9625·charIeszhao opened Sep 18, 2026Member·2 of 4 tasks·

  ·
  3

  

• fix(deps): update dependency @simplewebauthn/server to v13 [security]

  bugfixsize/xs
  #9557·renovate[bot] opened Sep 4, 2026Bot·1 task·

  ·
  14

• chore(deps): update dependency react-router@>=6.7.0 <6.30.6 to v7 [security]

  choresize/xs
  #9554·renovate[bot] opened Sep 4, 2026Bot·1 task·

  ·
  187

• chore(deps): update dependency esbuild to ^0.28.0

  choresize/xs
  #9550·renovate[bot] opened Sep 3, 2026Bot·1 task·

  ·
  12

• chore(deps): update dependency @xmldom/xmldom@<0.8.15 to ^0.9.0

  choresize/xs
  #9549·renovate[bot] opened Sep 3, 2026Bot·1 task·

  ·
  8

• fix(core): prune consumed refresh tokens on rotation

  bugfixsize/l
  #9545·simeng-li opened Sep 2, 2026Contributor·3 of 4 tasks·

  ·
  8

  

• fix(deps): update oidc-provider digest to 5570006

  bugfixsize/xs
  #9543·renovate[bot] opened Sep 2, 2026Bot·1 task·

  ·
  19

• feat(core,experience): abort failed direct sign-in back to the client with access_denied

  featuresize/l
  #9425·feitianbubu opened Aug 12, 2026·

  ·
  11

  

• fix(core): warn when a /console request does not match ADMIN_ENDPOINT

  bugfixsize/m
  #9408·mvanhorn opened Aug 10, 2026Contributor·

  ·
  18

  

• fix(core): localize organization invitation validation errors

  bugfixsize/m
  #9353·Kathircpe opened Aug 5, 2026Contributor·2 of 4 tasks·

  ·
  19

  

• chore(deps): bump nodemailer from 8.0.11 to 9.0.1

  choredependenciesjavascriptsize/xsstale
  #9061·dependabot[bot] opened Jun 21, 2026Bot·

  ·
  7

• chore(deps): bump http-proxy-middleware from 3.0.5 to 3.0.7

  choredependenciesjavascriptsize/xsstale
  #9057·dependabot[bot] opened Jun 20, 2026Bot·

  ·
  6

• chore(deps): bump samlify from 2.10.0 to 2.13.0 in /packages/connectors/connector-saml

  choredependenciesjavascriptsize/xsstale
  #8883·dependabot[bot] opened May 27, 2026Bot·

  ·
  5

• fix(deps): update dependency iconv-lite to v0.7.3

  bugfixsize/xs
  #8601·renovate[bot] opened Mar 31, 2026Bot·1 task·

  ·
  38

• chore(deps): update zaproxy/action-full-scan action to v0.13.0

  choresize/xs
  #8565·renovate[bot] opened Mar 27, 2026Bot·1 task·

  ·
  20

• chore(deps): bump koa from 2.16.3 to 3.1.2

  choredependenciesjavascriptsize/xsstale
  #8401·dependabot[bot] opened Feb 28, 2026Bot·

  ·
  3

• chore(deps-dev): bump eslint from 8.57.0 to 9.26.0

  choredependenciesjavascriptsize/mstale
  #8278·dependabot[bot] opened Jan 29, 2026Bot·

  ·
  4

• feat: add UUID support

  featuresize/xlstale
  #7962·Zyles opened Nov 11, 2025·

  ·
  40