-
-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Pull requests: Leantime/leantime
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
feat(status): public /status discovery endpoint — advertise auth methods for mobile SSO
#3664
opened Jul 19, 2026 by
gloriafolaron
Contributor
Loading…
fix(oidc): lock-guarded consumeCode — close the double-mint race (Copilot follow-up to #3662)
#3663
opened Jul 18, 2026 by
gloriafolaron
Contributor
Loading…
fix(security): stop invite-email spam via unsanitized names + missing rate limits
#3661
opened Jul 17, 2026 by
marcelfolaron
Collaborator
Loading…
fix: enable VerifyCsrfToken middleware globally to prevent CSRF (CWE-352)
#3659
opened Jul 17, 2026 by
javokhir-sec
Loading…
fix: use resolveSafeRedirect() in Login POST handler to prevent Open Redirect (CWE-601)
#3658
opened Jul 17, 2026 by
javokhir-sec
Loading…
fix: add project ownership check to getMilestone() to prevent IDOR (CWE-639)
#3657
opened Jul 17, 2026 by
javokhir-sec
Loading…
fix: validate file path in Blueprints::import() to prevent SSRF/LFI (CWE-918)
#3656
opened Jul 17, 2026 by
javokhir-sec
Loading…
test(pgmpro/resources): coverage for security guards + updateBudgetItem regression
#3655
opened Jul 17, 2026 by
gloriafolaron
Contributor
Loading…
feat(users): weekly_hours + employment_type on user (Slice 1)
#3653
opened Jul 16, 2026 by
gloriafolaron
Contributor
Loading…
3 tasks done
feat(strategypro): reverse-engineer flow — Outcomes pilot (submodule bump + tests)
#3651
opened Jul 15, 2026 by
gloriafolaron
Contributor
Loading…
3 tasks
fix(tickets): record status→Done in history + report real last-updated
#3650
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
feat(tickets): getMyCommentedTicketsForRange for Progress "Supported"
#3649
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
feat(reports): stakeholder report — Phase 1 shell (deck, header, navigation)
#3648
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
6 tasks
feat(tickets): getMyClosedTicketsForRange for period close-lists
#3647
opened Jul 14, 2026 by
gloriafolaron
Contributor
Loading…
feat(reports): period-based status report screens + shared report engine
#3643
opened Jul 13, 2026 by
marcelfolaron
Collaborator
Loading…
fix(tickets): assign ticketParents on NewTicket POST validation-failure path (#3640)
#3641
opened Jul 13, 2026 by
marcelfolaron
Collaborator
Loading…
6 tasks
fix(tickets): exclude archived-project tickets from getAllOpenUserTickets
Bug
#3639
opened Jul 12, 2026 by
gloriafolaron
Contributor
Loading…
fix(projects): getProjectsByUserActivity excludes archived projects (projectStatus 'open')
Bug
#3638
opened Jul 12, 2026 by
gloriafolaron
Contributor
Loading…
ProTip!
Mix and match filters to narrow down what you’re looking for.