All pull requests

Pull requests

• docs: require image-version readiness checks and use upstream PR branches

  P3rating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1644·kevinlin-openai opened Oct 7, 2026Collaborator·

  ·
  3

• fix(compute): keep legacy split-layout tenants on their gateway namespace

  #1643·freeqaz opened Oct 7, 2026Contributor·

  ·
  1

• fix(helm): reject sign-in values JavaScript trim keeps

  #1641·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  2

• test(runtime-image): rebalance the two runtime startup lanes

  P3rating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1637·freeqaz opened Oct 7, 2026Contributor·

  ·
  2

• fix(auth): refuse IPv4 auth origins the URL parser rewrites

  #1636·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  2

• fix(helm): reject a leading zero in the API port

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1633·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  3

• fix(helm): reject a leading zero in the metrics port

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1630·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  3

• fix(helm): reject a leading zero in the Slack proxy port

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1624·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  5

• feat(auth): sign people in to occ with a device code (rfc-0019)

  merge-risk: 🚨 compatibilitymerge-risk: 🚨 security-boundaryP2rating: 🦪 silver shellfishstatus: 📣 needs proof
  #1619·freeqaz opened Oct 7, 2026Contributor·

  ·
  2

• fix(helm): refuse administrator emails the bootstrap Job refuses

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1614·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  3

• fix(console): say a disabled account cannot sign in

  P2rating: 🦞 diamond lobsterstatus: 👀 ready for maintainer look
  #1611·freeqaz opened Oct 7, 2026Contributor·

  ·
  2

• docs(specs): propose rfc-0019 deployer revision read

  P3rating: 🦞 diamond lobsterstatus: 👀 ready for maintainer look
  #1606·freeqaz opened Oct 7, 2026Contributor·

  ·
  2

• feat(iam): grant the deployer exact read of the revision a deploy admits

  merge-risk: 🚨 security-boundaryP2rating: 🦐 gold shrimpstatus: 📣 needs proof
  #1605·freeqaz opened Oct 7, 2026Contributor·

  ·
  3

• fix(helm): refuse installation names the bootstrap Job refuses

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1598·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  3

• refactor: isolate CLI runtime and log commands

  P3proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1591·stevenlee-oai opened Oct 7, 2026Contributor·

  ·
  3

• fix(helm): reject IPv4 host CIDRs Go cannot parse

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1589·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  3

• fix(first-agent): surface bounded subprocess stderr on failure

  P2rating: 🦪 silver shellfishstatus: 📣 needs proof
  #1581·goutamadwant opened Oct 7, 2026·

  ·
  1

  3

• fix(codex): restore native children in dedicated deployments

  P1rating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1574·Kimiyu-186 opened Oct 7, 2026Collaborator·

  ·
  2

• fix(helm): reject trusted-proxy CIDRs the API cannot parse

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1567·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  6

• fix(helm): reject sandbox domains that are not DNS hostnames

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1561·ericcaiwx-star opened Oct 7, 2026Contributor·

  ·
  1

  4

• Support externally managed ChatGPT auth in dedicated Codex

  merge-risk: 🚨 auth-providermerge-risk: 🚨 security-boundaryP2rating: 🦐 gold shrimpstatus: 📣 needs proof
  #1559·stevenlee-oai opened Oct 7, 2026Contributor·

  ·
  4

• fix(occdev): give the k3d node Docker's default-bridge resolver on macOS

  merge-risk: 🚨 compatibilityP2proof: sufficientrating: 🦐 gold shrimpstatus: 👀 ready for maintainer look
  #1557·ilaigold opened Oct 6, 2026Contributor·

  ·
  6

• refactor: isolate installation Preset file loading

  P3rating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1552·stevenlee-oai opened Oct 6, 2026Contributor·

  ·
  3

• fix: unblock Podman local Kubernetes setup

  P2proof: sufficientrating: 🐚 platinum hermitstatus: 👀 ready for maintainer look
  #1543·PalmPalm7 opened Oct 6, 2026·

  ·
  5

• fix(dev): make local console CA trust setup explicit

  P3rating: 🦐 gold shrimpstatus: 📣 needs proof
  #1537·PalmPalm7 opened Oct 6, 2026·

  ·
  5