All pull requests

Pull requests

• Harden JWT, indexed_blob, unzip, and pubspec validators against malformed inputs

  #9689·kevmoo opened Oct 9, 2026Member·

  ·
  6

• Canonicalize <version> in /documentation/ routes

  #9686·sigurdm opened Oct 9, 2026Contributor·

  ·
  1

• Stop packing doc/package.tar.gz in dartdoc post-processing

  #9685·sigurdm opened Oct 9, 2026Contributor·

  ·
  1

  1

• Purge missing score, license, and pubspec Redis caches

  #9680·sigurdm opened Oct 9, 2026Contributor·

  ·
  1

• Allow package uploaders to remove themselves when other uploaders exist

  #9678·sigurdm opened Oct 9, 2026Contributor·

  ·
  1

• Only match direct dependencies for dependency:<pkg> search predicate

  #9677·sigurdm opened Oct 9, 2026Contributor·

  ·
  2

• Add is:android-kotlin-gradle-plugin to search autocomplete and advanced filters

  #9673·sigurdm opened Oct 8, 2026Contributor·

  ·
  1

• Fix confirmation and success modal dialog races in pub_puppeteer_helpers

  #9660·sigurdm opened Oct 5, 2026Contributor·

  ·

• Only validate responses from the target origin in TestBrowserSession

  #9659·sigurdm opened Oct 5, 2026Contributor·

  ·

• Use PUB_POSTGRES_URL in PrimaryDatabase.createAndInit

  #9656·sigurdm opened Oct 5, 2026Contributor·

  ·

• Experimental: route external dependencies through package:circuit_breaker

  #9595·sigurdm opened Sep 18, 2026Contributor·

  ·

• Make automatic disabling of automated publishing visible and harden the admin form

  #9582·spydon opened Sep 15, 2026·

  ·

• Support package policy to require Sigstore provenance attestation

  #9552·mosuem opened Aug 20, 2026Member·4/5·

  ·

• Display SLSA provenance level shield badges and Security tab

  #9550·mosuem opened Aug 20, 2026Member·5/5·

  ·

• Add integration test for package attestation upload and retrieval in pub_integration

  #9549·mosuem opened Aug 20, 2026Member·3/5·

  ·

• Verify uploaded package attestations using package:sigstore

  #9546·mosuem opened Aug 19, 2026Member·2/5·

  ·
  7

• Accept and expose package attestation bundles

  #9545·mosuem opened Aug 19, 2026Member·1/5·

  ·
  4

• Add /api/packages/<package>/daily-downloads endpoint and exported-api synchronization

  #9519·sigurdm opened Aug 10, 2026Contributor·

  ·