All pull requests

Pull requests

• ci(deps): bump actions/setup-python from 6.3.0 to 7.0.0

  cidependencies
  #225·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• ci(deps): bump the actions group across 2 directories with 5 updates

  cidependencies
  #224·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump @types/node from 24.12.4 to 26.6.4

  dependencies
  #223·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• chore(deps): bump typescript-eslint from 8.71.0 to 8.71.1 in the npm group

  dependencies
  #222·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• docs: standardize issue titles and label selection

  documentation
  #221·cariandrum22 opened Oct 13, 2026Contributor·

  ·
  1

• fix(deps): complete source audits and replace CSV wrapper

  bugdependenciessecurity
  #219·cariandrum22 opened Oct 13, 2026Contributor·

  ·
  5

• feat(claims): add structured local attributes and mapping engine

  documentationenhancementsecurity
  #217·cariandrum22 opened Oct 12, 2026Contributor·

  ·

• fix(verification): isolate Dudect collection and prepare buffers

  bugciverification
  #216·cariandrum22 opened Oct 12, 2026Contributor·

  ·

• fix(server): support RS256 access token signing

  bugdocumentationsecurityspec
  #205·cariandrum22 opened Oct 5, 2026Contributor·

  ·
  1

• fix(server): bind authorization codes to DPoP keys

  bugdocumentationsecurityspec
  #168·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  4

• fix(server): preserve permanent subject ownership

  bugdocumentationsecurityspec
  #167·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  10

• fix(server): validate language metadata and localized fields

  bugdocumentationsecurityspec
  #166·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(server): enforce registered client DPoP requirements

  bugdocumentationsecurityspec
  #165·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(federation): validate public protocol key metadata

  bugdocumentationsecurityspec
  #164·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(oidc): validate provider URLs and endpoint aliases

  bugdocumentationsecurityspec
  #162·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  3

• fix(server): preserve token client authentication snapshots

  bugdocumentationsecurity
  #161·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(server): reject stale client registration updates

  bugdocumentationsecurityspec
  #160·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(federation): validate provider capability metadata

  bugdocumentationsecurityspec
  #159·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  2

• fix(server): validate owner registration update credentials

  bugdocumentationsecurityspec
  #158·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  3

• fix(oidc): validate software statement issuer and audience

  bugdocumentationsecurityspec
  #157·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(federation): validate registration declarations

  bugdocumentationsecurityspec
  #156·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(oidc): require RS256 in OP signing capabilities

  bugdocumentationsecurityspec
  #155·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• feat(server): rotate introspection signing keys by algorithm

  documentationenhancementsecurityspec
  #153·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(federation): bind metadata issuer to statement subject

  bugdocumentationsecurityspec
  #152·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1

• fix(federation): validate known metadata before and after policy

  bugdocumentationsecurityspec
  #151·cariandrum22 opened Oct 2, 2026Contributor·

  ·
  1