-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Drop the react-router audit allowlist entry: 7.x backport or v8 migration (GHSA-qwww-vcr4-c8h2)
area:adminAdmin app surfaces: lists, bulk, palette, shellAdmin app surfaces: lists, bulk, palette, shellsecuritySecurity-relevant — apply the pick-time checklist in docs/security-standards.mdSecurity-relevant — apply the pick-time checklist in docs/security-standards.mdStatus: Open.#882 In withsetu/setu;Drop the brace-expansion 1.x audit allowlist entry when a patched 1.x ships (GHSA-mh99-v99m-4gvg)
area:infraBuild, upgrades, dev toolingBuild, upgrades, dev toolingsecuritySecurity-relevant — apply the pick-time checklist in docs/security-standards.mdSecurity-relevant — apply the pick-time checklist in docs/security-standards.mdStatus: Open.#881 In withsetu/setu;mount-captcha cleanup() leaves the Turnstile widget registered (console warning on unmount)
area:blocksBlock library + standard blocksBlock library + standard blockstech-debtCleanup / pre-existing issuesCleanup / pre-existing issuesStatus: Open.#878 In withsetu/setu;Unmatched admin paths (e.g. //reset-password) land on the 'coming soon' screen
area:adminAdmin app surfaces: lists, bulk, palette, shellAdmin app surfaces: lists, bulk, palette, shelltech-debtCleanup / pre-existing issuesCleanup / pre-existing issuesStatus: Open.#874 In withsetu/setu;Media upload shows raw "Failed to fetch" on a transport failure (the #870 shape, upload side)
area:mediaMedia library + image handlingMedia library + image handlingStatus: Open.#872 In withsetu/setu;Staging-parity local environment: pnpm staging — Caddy + Mailpit + production builds on *.setu.localhost
area:deployPublish-to-live / deploy / rebuild across topologiesPublish-to-live / deploy / rebuild across topologiesarea:infraBuild, upgrades, dev toolingBuild, upgrades, dev toolingStatus: Open.#869 In withsetu/setu;Captcha UAT & e2e without a domain: Turnstile test keys in dev + a captcha e2e lane
area:identitySite identity: logo, author, socialSite identity: logo, author, socialarea:infraBuild, upgrades, dev toolingBuild, upgrades, dev toolingStatus: Open.#868 In withsetu/setu;Hero block: wire imageAlt into the contract and inspector so authors can set alt text
area:adminAdmin app surfaces: lists, bulk, palette, shellAdmin app surfaces: lists, bulk, palette, shellarea:blocksBlock library + standard blocksBlock library + standard blocksarea:editorAdmin editorAdmin editorStatus: Open.#865 In withsetu/setu;Hero a11y (empty h2, forced-decorative alt) and TaxonomyChips reads an undefined --surface var
area:blocksBlock library + standard blocksBlock library + standard blocksarea:themeFront-end render, perf, image pipelineFront-end render, perf, image pipelinetech-debtCleanup / pre-existing issuesCleanup / pre-existing issuesStatus: Open.#862 In withsetu/setu;SEO meta edge cases: og:locale territory format, and absMedia mangles protocol-relative images
area:seoSEO / head / structured dataSEO / head / structured datatech-debtCleanup / pre-existing issuesCleanup / pre-existing issuesStatus: Open.#861 In withsetu/setu;URL consistency: sitemap trailing slash disagrees with hreflang, and taxonomy chips don't URL-encode
area:seoSEO / head / structured dataSEO / head / structured dataarea:themeFront-end render, perf, image pipelineFront-end render, perf, image pipelinetech-debtCleanup / pre-existing issuesCleanup / pre-existing issuesStatus: Open.#860 In withsetu/setu;Post sitemap emits one unbounded urlset — invalid past the 50,000-URL protocol cap
area:seoSEO / head / structured dataSEO / head / structured datatech-debtCleanup / pre-existing issuesCleanup / pre-existing issuesStatus: Open.#859 In withsetu/setu;