All pull requests

Pull requests

• fix(deps): bump otel to v1.45.0 for vulncheck

  #2858·annabkr opened Oct 6, 2026Contributor·

  ·

• docs: rewrite the contributing guide as discussion-first and add an AI policy

  #2856·annabkr opened Oct 6, 2026Contributor·2/2·

  ·
  1

• docs: move the local setup guide from CONTRIBUTING.md to DEVELOPMENT.md

  #2855·annabkr opened Oct 6, 2026Contributor·1/2·

  ·

• fix(hooks): run pg-functions hooks in a transaction when the caller has none

  #2853·aerotech-vadb opened Oct 6, 2026·

  ·
  1

• fix(hooks): preserve identity unlink notification recipient

  #2851·ttulttul opened Oct 6, 2026·

  ·

• fix: report the new address when an email change is rejected as invalid

  #2848·vjymisal0 opened Oct 2, 2026·

  ·
  1

• fix(saml): don't report next key as configured when SAML is disabled

  #2846·claude[bot] opened Oct 1, 2026Bot·

  ·

• fix: verify phone change against the user holding the matching token

  #2845·sidgaikwad opened Sep 29, 2026·

  ·
  1

  1

• fix: use www.linkedin.com for LinkedIn OIDC authorization and token endpoints

  #2844·sidgaikwad opened Sep 29, 2026·

  ·
  1

• fix: accept code for PKCE token exchange

  #2843·akasakariko opened Sep 29, 2026·

  ·
  1

  1

• test: cover admin user creation ban persistence

  #2842·akasakariko opened Sep 29, 2026·

  ·
  1

• fix(admin): reject per_page=0 on paginated admin endpoints

  #2841·RaphaelFakhri opened Sep 29, 2026·

  ·

• fix(api): honor options.redirect_to and options.data in admin generate_link

  #2840·AmitKulkarni23 opened Sep 29, 2026·

  ·
  1

• fix: describe password maximum length in bytes

  #2837·KYHyeon opened Sep 27, 2026·

  ·

• fix: preserve default database connection reuse

  #2836·praxzy opened Sep 27, 2026·

  ·
  1

• fix(verify): record a login, not a signup, for confirmed phone sign-ins

  #2835·sidgaikwad opened Sep 25, 2026·

  ·

• fix: support redirect-to header to resolve Envoy proxy rejection (#2833)

  #2834·rajat12826 opened Sep 25, 2026·

  ·
  1

• feat(openapi): document passkey endpoints and regenerate admin client

  #2827·fadymak opened Sep 22, 2026Contributor·

  ·
  2

• fix: accept base64url-encoded nonce in id_token grant

  #2822·sushrut1058 opened Sep 21, 2026·

  ·
  1

  4

• chore(master): release 2.198.0

  autorelease: pending
  #2817·supabase-releaser[bot] opened Sep 17, 2026Bot·

  ·
  13

• fix(oidc): don't mutate shared config on Facebook id_token login

  #2816·suvvvv opened Sep 16, 2026·

  ·

• fix(models): guard nil web_authn_credential in WebAuthnCredentials

  #2815·suvvvv opened Sep 16, 2026·

  ·

• fix(models): guard nil authentication_method in IsAAL2Claim

  #2814·suvvvv opened Sep 16, 2026·

  ·

• fix: stop leaking raw internal errors to clients in RefreshTokenGrant

  #2813·Rakshit-gen opened Sep 15, 2026·5 tasks done·

  ·
  1

  1

• fix: recognize real Postgres unique violations in IsUniqueConstraintViolatedError

  #2811·Rakshit-gen opened Sep 15, 2026·5 tasks done·

  ·
  1

  1