-
Notifications
You must be signed in to change notification settings - Fork 2
Pull requests: decocms/blocks
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix(cache): strip the tracking params that were still fragmenting the key
#534
opened Sep 8, 2026 by
JonasJesus42
Contributor
Loading…
feat(experiments): target-scoped PLP ranking, so any PLP is testable
#531
opened Sep 3, 2026 by
hugo-ccabral
Contributor
Loading…
fix(security): hardened CSP on /deco/render (reflected XSS execution vector)
#509
opened Aug 27, 2026 by
0xcucumbersalad
Contributor
Loading…
fix(security): encode values in inline <script>/<style> sinks to close XSS class
#507
opened Aug 26, 2026 by
0xcucumbersalad
Contributor
Loading…
ci: add monthly Dependabot for npm and github-actions
#504
opened Aug 25, 2026 by
0xcucumbersalad
Contributor
Loading…
feat(native): @decocms/native — app nativo a partir de um site TanStack
#502
opened Aug 24, 2026 by
JonasJesus42
Contributor
Loading…
feat: migrate image CDN default from decoims.com to assets.decocms.com
#495
opened Aug 21, 2026 by
JonasJesus42
Contributor
Loading…
fix(matchers): resolve four silent matcher-resolution defects
#481
opened Aug 19, 2026 by
aka-sacci-ccr
Contributor
Loading…
fix(tanstack): reject GET on /deco/invoke to close CSRF vector
#462
opened Aug 11, 2026 by
0xcucumbersalad
Contributor
Loading…
fix(cli): prevent code injection via filenames in loader/section codegen
#461
opened Aug 11, 2026 by
0xcucumbersalad
Contributor
Loading…
fix(cli): prevent SQL injection into platform Supabase via package.json name
#460
opened Aug 11, 2026 by
0xcucumbersalad
Contributor
Loading…
fix(cli): prevent shell command injection in deco-migrate clone/copy
#459
opened Aug 11, 2026 by
0xcucumbersalad
Contributor
Loading…
fix(nextjs): actionable diagnostic when the RSC preview page is not mounted
#446
opened Aug 6, 2026 by
guitavano
Contributor
Loading…
fix(security): default-deny generic MasterData CRUD on both invoke surfaces
#325
opened Jul 8, 2026 by
0xcucumbersalad
Contributor
Loading…
fix(sdk/abTesting): preserve original Host when proxying to fallback origin
#308
opened Jul 6, 2026 by
hugo-ccabral
Contributor
Loading…
feat(schema): scan app loaders from @decocms/apps
#272
opened Jun 23, 2026 by
guitavano
Contributor
Loading…
4 of 5 tasks
fix(admin): add postMessage origin validation to liveControls.ts
#208
opened Jun 1, 2026 by
0xcucumbersalad
Contributor
Loading…
1 of 3 tasks
docs(observability): save plan log + architectural refinement + future work
#204
opened May 28, 2026 by
vibe-dex
Contributor
Loading…
docs: plan KV-backed fast content deploy
#201
opened May 25, 2026 by
vibe-dex
Contributor
Loading…
1 task
feat(observability): direct-POST metrics + error channel, per-call fetch operations, audit CLI
#179
opened May 18, 2026 by
vibe-dex
Contributor
Loading…
4 of 5 tasks
release: promote 5.1.2-next.1 to stable
released on @next
#173
opened May 11, 2026 by
vibe-dex
Contributor
Loading…
4 tasks
Previous Next
ProTip!
no:milestone will show everything without a milestone.