All pull requests

Pull requests

• docs: add technical documentation for [Security] validateStellarAddress midd

  #251·rupesh-kumar-sah opened Oct 2, 2026·

  ·
  1

  1

• build(deps): bump nginx from 1.27-alpine to 1.29-alpine in /frontend

  security
  #250·dependabot[bot] opened Sep 28, 2026Bot·

  ·
  2

• build(deps): bump thiserror from 2.0.18 to 2.0.21 in /contracts

  security
  #249·dependabot[bot] opened Sep 28, 2026Bot·

  ·
  2

• build(deps): bump soroban-sdk from 22.0.11 to 28.0.0 in /contracts

  security
  #248·dependabot[bot] opened Sep 21, 2026Bot·

  ·
  2

• fix(escrow): use saturating subtraction in decrement_total to prevent…

  #247·Dickson2015 opened Sep 14, 2026·

  ·
  1

  1

• fix(contracts): keep enrollment_count and get_total_held in sync with state transitions

  #233·nanoulloa opened Aug 28, 2026·

  ·
  1

  2

• feat(queue-factory): add salt to deploy_queue to prevent front-running

  #232·jajafwangshak86-ops opened Aug 27, 2026·

  ·
  1

  1

• fix(backend): add cursor pagination to enrollment and queue list endpoints

  #231·jajafwangshak86-ops opened Aug 27, 2026·

  ·
  1

  1

• feat(ci): add CODEOWNERS and secret scanning

  #227·Jokay1997 opened Aug 25, 2026·5 tasks done·

  ·
  1

  1

• fix(frontend): remove unsafe-inline from CSP style-src

  #226·Jokay1997 opened Aug 25, 2026·3 tasks done·

  ·
  1

  1

• feat(backend): sanitize queue inputs and handle 409 duplicate slugs (#183)

  #223·stayzappy opened Aug 24, 2026Contributor·

  ·
  1

  2

• fix(frontend): harden CSP — drop style-src unsafe-inline, add connect-src and violation reporting (Closes #192)

  #219·waterWang opened Aug 23, 2026·

  ·
  1

  1

• fix: cancel in-flight DashboardPage lookups with AbortController (Fixes #203)

  #218·waterWang opened Aug 22, 2026·

  ·
  1

  1

• fix(escrow): require configuration before deposits

  #217·prissca opened Aug 21, 2026·

  ·
  1

  1

• fix: correct Stellar base32 regex from [A-Z0-9] to [A-Z2-7]

  #208·Unclebaffa opened Aug 16, 2026Contributor·

  ·
  1

  2

• chore(deps-dev): bump @types/node from 22.20.1 to 26.2.0

  security
  #172·dependabot[bot] opened Jul 29, 2026Bot·

  ·
  3

• chore(deps): bump actions/checkout from 4.3.1 to 7.0.1

  security
  #171·dependabot[bot] opened Jul 29, 2026Bot·

  ·
  2

• chore(deps): bump node from 20-alpine to 26-alpine in /frontend

  security
  #168·dependabot[bot] opened Jul 29, 2026Bot·

  ·
  2

• chore(deps): bump node from 20-alpine to 26-alpine in /backend

  security
  #167·dependabot[bot] opened Jul 29, 2026Bot·

  ·
  2

• fix(queue): reject duplicate per-identity enrollment (Closes #99)

  #166·Fabiana1504 opened Jul 29, 2026·

  ·
  1

  1

• build(deps): bump lucide-react from 0.503.0 to 1.27.0

  security
  #158·dependabot[bot] opened Jul 27, 2026Bot·

  ·
  2

• chore(deps-dev): bump eslint from 8.57.1 to 10.8.1

  security
  #157·dependabot[bot] opened Jul 27, 2026Bot·

  ·
  2

• chore(deps-dev): bump @typescript-eslint/eslint-plugin from 7.18.0 to 8.67.0

  security
  #156·dependabot[bot] opened Jul 27, 2026Bot·

  ·
  2

• chore(deps): bump @stellar/stellar-sdk from 12.3.0 to 16.1.0

  security
  #155·dependabot[bot] opened Jul 27, 2026Bot·

  ·
  3

• chore(deps): bump react and @types/react

  security
  #154·dependabot[bot] opened Jul 27, 2026Bot·

  ·
  2