All pull requests

Pull requests

• ci(security): add Semgrep rules for stored XSS and form_selectable_cell

  #8550·somethingwithproof opened Oct 28, 2026Member·

  ·
  1

• refactor(ui): migrate four diagnostic and package lists to Twig

  #8547·somethingwithproof opened Oct 27, 2026Member·2/3·

  ·
  1

• fix(scripts): keep mysqladmin poller credentials out of argv

  #8545·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• fix(csrf): show timeout recovery warning only once

  bug
  #8544·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

  

• fix(ui): enforce dynamic DOM rendering boundaries

  #8542·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

  1

• fix(input): validate commands before form and import saves

  #8541·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• fix(reports): enforce ownership, parent binding and POST mutations

  #8540·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

  2

• fix(boost): require RRDtool acknowledgement before queue progress

  #8539·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• fix(automation): validate imported match field identifiers

  #8538·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

  1

• fix(auth): [develop] bind Basic sessions to verified identities

  #8537·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

  1

• fix(installer): [1.2.x] recover stale tokens and disabled automation

  #8536·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• test(ldap): verify first-login claims and required DN groups

  #8535·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• fix(database): [develop] keep SQL client credentials off argv

  #8534·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

  1

• fix(data-query): [develop] guard the base script command

  #8533·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

  1

• fix(filters): [develop] encode form action output contexts

  #8532·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• fix(locales): [1.2.x] use portable gettext catalog names

  #8531·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• fix(locales): [develop] make gettext headers portable to BSD sed

  #8530·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• fix(aggregate): [develop] escape graph item definition names

  #8529·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

  1

• fix(graphs): keep item groups within the selected instance graph

  #8528·somethingwithproof opened Oct 27, 2026Member·

  ·
  1

• feat(i18n): set the document direction and audit themes for WCAG 2.2 AA

  #8525·somethingwithproof opened Oct 26, 2026Member·

  ·
  4

• feat(themes): add theme inheritance and Canvas and Daybreak palettes

  #8523·somethingwithproof opened Oct 26, 2026Member·

  ·
  1

• Split theme Actions checks and publish complete browser evidence

  #8522·somethingwithproof opened Oct 26, 2026Member·14/14·

  ·
  3

• Add RTM plugin inventory and theme compatibility tests

  #8521·somethingwithproof opened Oct 26, 2026Member·13/14·

  ·
  3

• Test active plugins across Cacti themes and fix compatibility regressions

  #8519·somethingwithproof opened Oct 26, 2026Member·12/14·

  ·
  1

  1

• style(php): wrap remaining library calls and strengthen source contracts

  #8515·somethingwithproof opened Oct 26, 2026Member·2/2·

  ·