All pull requests

Pull requests

• fix(core): refuse an email update to an address owned by a guest Customer

  #5680·Tyagiquamar opened Oct 27, 2026·

  ·
  1

  5

• chore(repo): Back-merge master into minor (conflicts)

  #5678·github-actions[bot] opened Oct 27, 2026Bot·

  ·
  3

• chore: Add build and threat model for Anthropic OSS Scanner

  #5677·michaelbromley opened Oct 27, 2026Member·

  ·
  10

• fix(core): validate required conditions when updating a promotion

  #5676·mwafakturk opened Oct 27, 2026·4 of 5 tasks·

  ·
  1

  4

• fix(core): index every variant passed to updateVariantsById and updateVariants

  T1: Fast track
  #5674·mwafakturk opened Oct 26, 2026·4 of 5 tasks·

  ·
  1

  9

• fix(core): ensure checkAllItemsBeforeCancel runs on ArrangingAdditionalPayment -> Cancelled transition

  T2: Elevated risk
  #5672·Tyagiquamar opened Oct 26, 2026·

  ·
  1

  4

• perf(core): drop the redundant productVariantId index of stock_level

  T3: Systemic
  #5668·AyeshaWaseemAhmad opened Oct 25, 2026Contributor·4 of 5 tasks·

  ·
  2

• fix(core): do not buffer search updates in the worker when the buffer store is in memory

  T3: Systemic
  #5667·AyeshaWaseemAhmad opened Oct 25, 2026Contributor·4 of 5 tasks·

  ·
  1

  2

• feat: upgrade to Vite 8 and Vitest 4.1

  deps: contract changeT3: Systemic
  #5666·ayoubkrmt opened Oct 25, 2026·5 tasks done·

  ·
  7

• fix(core): order blocking event handlers that declare a constraint on both sides

  T1: Fast track
  #5665·AyeshaWaseemAhmad opened Oct 24, 2026Contributor·4 of 5 tasks·

  ·
  1

  4

• fix(mcp-plugin): publish an AssetEvent for the asset upload_asset cre…

  T1: Fast track
  #5662·Ryrahul opened Oct 24, 2026Contributor·5 tasks done·

  ·
  1

  3

• fix(mcp-plugin): translate dashboard nav titles

  deps: lockfile onlyT1: Fast track
  #5660·brbousnguar opened Oct 24, 2026Contributor·4 of 5 tasks·

  ·
  1

  3

• fix(core): do not share a pending refresh between memoize callers

  T3: Systemic
  #5659·Haridass30 opened Oct 24, 2026Contributor·4 tasks done·

  ·
  1

  5

• fix(dashboard): preserve defaultSize.x/y for unobstructed widgets

  T1: Fast track
  #5658·JillK83 opened Oct 24, 2026·4 tasks done·

  ·
  1

  8

• feat(mcp-plugin): return the readable custom fields in the tool outputs

  T3: Systemic
  #5657·Ryrahul opened Oct 23, 2026Contributor·5 tasks done·

  ·
  3

• fix(mcp-plugin,mcp-sdk): set localized custom fields on the translati…

  T3: Systemic
  #5655·Ryrahul opened Oct 23, 2026Contributor·4 of 5 tasks·

  ·
  1

  2

• fix(asset-server-plugin): keep XMP metadata in previews and transformed images

  T3: Systemic
  #5651·kevmtt opened Oct 23, 2026Contributor·4 of 5 tasks·

  ·
  1

  6

• ci: retry the back-merge push when minor has moved

  T1: Fast track
  #5650·michaelbromley opened Oct 23, 2026Member·

  ·
  3

• fix(dashboard): prefill custom fields with configured defaults

  T3: Systemic
  #5642·youssefKetata opened Oct 22, 2026·5 tasks done·

  ·
  1

  7

• fix(core): detect circular dependencies between blocking event handlers of any length

  T1: Fast track
  #5632·AyeshaWaseemAhmad opened Oct 21, 2026Contributor·4 of 5 tasks·

  ·
  1

  4

• fix(core): return InvalidCredentialsError when authenticate names no strategy

  T1: Fast track
  #5622·oschweitzer opened Oct 20, 2026·4 of 5 tasks·

  ·
  1

  4

• fix(core): drop the createdAt-only index of job_record

  T3: Systemic
  #5615·AyeshaWaseemAhmad opened Oct 19, 2026Contributor·4 of 5 tasks·

  ·
  2

• fix(core): lock the order row while repricing so concurrent surcharges are not lost

  T3: Systemic
  #5611·biggamesmallworld opened Oct 19, 2026Collaborator·4 of 5 tasks·

  ·
  4

• fix(ci): read the changed paths from a here-string in detect-changes

  T1: Fast track
  #5600·biggamesmallworld opened Oct 19, 2026Collaborator·

  ·
  2

• fix(dashboard): use plural messages in the asset picker, upload toasts and move dialog

  T1: Fast track
  #5590·biggamesmallworld opened Oct 16, 2026Collaborator·4 of 5 tasks·

  ·
  7