All pull requests

Pull requests

• feat(i18n): admin UI internationalization foundation (en, ja)

  #1174·itkyk0926 opened Nov 9, 2026·11 of 13 tasks·

  ·
  3

• feat(ci): Flakiness upload workflow — publish test results to dashboard (Task 6)

  #1173·lane711 opened Nov 6, 2026Collaborator·

  ·
  79

• fix(admin): assign RBAC roles from the Users screen

  #1167·mmcintosh opened Nov 6, 2026Collaborator·10 of 11 tasks·

  ·
  43

• chore(deps): bump undici from 7.24.4 to 7.30.1 in /my-sonicjs-app

  dependenciesjavascript
  #1163·dependabot[bot] opened Nov 5, 2026Bot·

  ·
  2

• fix: enforce the document write policy on content API, admin content, GraphQL and MCP writes

  #1162·lane711 opened Nov 5, 2026Collaborator·

  ·
  1

  24

• fix(forms): prevent stored XSS in admin submissions view and render it in the admin layout

  #1160·lane711 opened Nov 4, 2026Collaborator·

  ·
  13

• fix(stats): implement issue #1157 hardening items

  #1158·lane711 opened Nov 4, 2026Collaborator·

  ·
  1

  35

• chore(deps-dev): bump glob from 10.5.0 to 14.0.2

  dependenciesjavascript
  #1154·dependabot[bot] opened Nov 3, 2026Bot·

  ·
  3

• fix: support custom D1 migration tracking tables (contributor #1152)

  #1153·lane711 opened Nov 2, 2026Collaborator·

  ·
  3

• fix: support custom D1 migration tracking tables

  #1152·bikevit2008 opened Nov 2, 2026·5 of 6 tasks·

  ·
  1

• fix: enforce the document write policy on content API, admin content, GraphQL and MCP writes

  #1147·mmcintosh opened Oct 29, 2026Collaborator·9 of 10 tasks·

  ·
  1

  3

• fix(email): query documents table for settings + bind fetch on Workers (#1098 #1099)

  #1145·lane711 opened Oct 27, 2026Collaborator·

  ·
  2

  40

• fix(auth): magic-link verify drops auth cookie on fresh browsers (#1101)

  #1144·lane711 opened Oct 27, 2026Collaborator·

  ·
  1

  16

• chore(deps): bump body-parser from 2.3.0 to 2.4.0

  dependenciesjavascript
  #1141·dependabot[bot] opened Oct 26, 2026Bot·

  ·
  2

• fix(users): default new user role to Public

  #1136·lane711 opened Oct 23, 2026Collaborator·4 of 9 tasks·

  ·
  1

• chore(deps): bump next from 16.3.4 to 16.4.5

  area: documentationdependenciesjavascriptpriority: P2
  #1126·dependabot[bot] opened Oct 22, 2026Bot·

  ·
  4

• ci(publish): fix OIDC auth - sed _authToken from NPM_CONFIG_USERCONFIG

  area: developer-experiencebugmaintenancepriority: P1status: conflicts
  #1090·lane711 opened Sep 8, 2026Collaborator·

  ·

• docs: Postgres portability — Kysely spike (compile-only)

  area: dataarea: documentationdocumentationpriority: P3status: draft
  #1070·lane711 opened Sep 2, 2026Collaborator·

  ·
  2

• fix: User plugin /api routes take precedence over catch all /api route

  area: apiarea: pluginsbugpriority: P2status: ci-blocked
  #1068·jimmaaay opened Aug 25, 2026·5 of 9 tasks·

  ·
  1

  3

• feat(views): no-code REST endpoints and public embeds over document collections

  area: adminarea: apiarea: pluginsenhancementpriority: P2status: conflicts
  #1060·mmcintosh opened Aug 19, 2026Collaborator·8 of 9 tasks·

  ·

• feat(search): FTS5 lexical search + security hardening for /api/search

  area: apiarea: databugenhancementpriority: P1securitystatus: conflicts
  #1058·mmcintosh opened Aug 18, 2026Collaborator·8 of 10 tasks·

  ·

• feat: add support for devcontainer

  area: developer-experienceenhancementpriority: P3status: ci-blocked
  #1055·LukeSeers opened Aug 14, 2026Contributor·7 of 9 tasks·

  ·

• refactor(global-variables): strip remaining any from adminRoutes + resolver (types-only)

  area: pluginsmaintenancepriority: P3triage: needs-validation
  #1025·mmcintosh opened Jul 22, 2026Collaborator·4 of 6 tasks·

  ·

• feat(demo-app): demo.sonicjs.com app with auto-reseed

  area: developer-experienceenhancementpriority: P2status: ci-blockedstatus: conflicts
  #986·lane711 opened Jul 1, 2026Collaborator·

  ·

• chore: release v3.0.0-beta.21

  area: documentationmaintenancepriority: P3status: conflictstriage: needs-validation
  #979·lane711 opened Jun 30, 2026Collaborator·3 tasks·

  ·