All pull requests

Pull requests

• build(deps): bump next from 16.2.9 to 16.2.10 in /client-next

  dependenciesjavascript
  #48·dependabot[bot] opened Jul 8, 2026Bot·

  ·
  1

• build(deps): bump lucide-react from 1.17.0 to 1.23.0 in /client-next

  dependenciesjavascript
  #47·dependabot[bot] opened Jul 8, 2026Bot·

  ·
  1

• build(deps-dev): bump eslint-config-next from 16.2.9 to 16.2.10 in /client-next

  dependenciesjavascript
  #46·dependabot[bot] opened Jul 8, 2026Bot·

  ·
  1

• build(deps-dev): bump eslint from 9.39.4 to 10.6.0 in /client-next

  dependenciesjavascript
  #45·dependabot[bot] opened Jul 1, 2026Bot·

  ·
  1

• build(deps): bump pg from 8.21.0 to 8.22.0 in /server

  dependenciesjavascript
  #43·dependabot[bot] opened Jun 24, 2026Bot·

  ·
  1

• build(deps-dev): bump globals from 17.6.0 to 17.7.0 in /server

  dependenciesjavascript
  #41·dependabot[bot] opened Jun 24, 2026Bot·

  ·
  1

• [auto] Bind OAuth login state to browser nonce

  automated
  #39·cursor[bot] opened Jun 23, 2026Bot·

  ·
  1

• [auto] Docs: manual paper URL and DOI validation

  #38·cursor[bot] opened Jun 22, 2026Bot·

  ·
  1

• [auto] Fix protected auth redirect race

  automated
  #37·cursor[bot] opened Jun 22, 2026Bot·

  ·
  1

• [auto] Fix comment delete data loss and unlink race

  automated
  #36·cursor[bot] opened Jun 21, 2026Bot·

  ·
  1

• [auto] Prevent concurrent unlink account lockout

  automated
  #33·cursor[bot] opened Jun 19, 2026Bot·

  ·
  1

• [auto] Fix OAuth link email verification

  automated
  #31·cursor[bot] opened Jun 17, 2026Bot·

  ·
  1

• build(deps): bump sanitize-html from 2.17.4 to 2.17.5 in /server

  dependenciesjavascript
  #29·dependabot[bot] opened Jun 17, 2026Bot·

  ·
  1

• build(deps-dev): bump eslint from 9.39.4 to 10.5.0 in /server

  dependenciesjavascript
  #27·dependabot[bot] opened Jun 17, 2026Bot·

  ·
  1

• [auto] Bind OAuth account links to verified emails

  automated
  #24·cursor[bot] opened Jun 16, 2026Bot·

  ·
  1

• [auto] Prevent OAuth link email verification bypass

  automated
  #22·cursor[bot] opened Jun 14, 2026Bot·

  ·
  1

• [auto] Prevent linked account unlink race from removing all sign-in methods

  automated
  #21·cursor[bot] opened Jun 13, 2026Bot·

  ·
  1

• Fix concurrent unlink sign-in method race

  #19·cursor[bot] opened Jun 13, 2026Bot·

  ·
  3

• build(deps): bump react-dom from 19.2.4 to 19.2.7 in /client-next

  dependenciesjavascript
  #6·dependabot[bot] opened Jun 10, 2026Bot·

  ·
  1

• build(deps-dev): bump @eslint/js from 9.39.4 to 10.0.1 in /server

  dependenciesjavascript
  #2·dependabot[bot] opened Jun 10, 2026Bot·

  ·
  1