All pull requests

Pull requests

• fix(likes): make updateLike atomic with a FOR UPDATE row lock

  #1525·Reggiebro opened Oct 15, 2026·

  ·
  1

  4

• Feat In-Kind Rewards

  #1518·RevTpark opened Oct 2, 2026Collaborator·

  ·
  8

• Remove airtable dependency from Member Perks

  #1496·RevTpark opened Sep 7, 2026Collaborator·

  ·
  5

• fix: add Redis locks to payment endpoints to prevent double-spend

  #1493·mitgajera opened Sep 3, 2026Contributor·

  ·
  4

• fix(listings): preserve explicit sort order

  #1491·iamomm-hack opened Aug 31, 2026·

  ·
  2

• fix(likes): prevent TOCTOU race condition in updateLike with prisma transaction (#1435)

  #1482·jihadMo opened Aug 21, 2026·

  ·
  1

  7

• fix(submission): sanitize listingId query parameter and handle array inputs

  #1481·jihadMo opened Aug 19, 2026·

  ·
  4

• fix(agents): safely parse date-only deadline and default to current date

  #1480·jihadMo opened Aug 19, 2026·

  ·
  4

• fix(wallet): repair the withdraw amount key filter (paste is currently blocked)

  #1479·rajanpanth opened Aug 19, 2026·

  ·
  2

• fix(lock): release the Redis lock atomically

  #1478·rajanpanth opened Aug 19, 2026·

  ·
  2

• fix(listings): don't collapse the feed to Global for non-chapter locations

  #1477·rajanpanth opened Aug 19, 2026·

  ·
  2

• fix(grants): pick the previous tranche from the non-rejected list

  #1476·rajanpanth opened Aug 19, 2026·

  ·
  4

• fix(credits): stop pinning effectiveMonth to module-load time

  #1475·rajanpanth opened Aug 19, 2026·

  ·
  2

• fix(agents): sanitize and validate slug parameter on listing details endpoint

  #1474·jihadMo opened Aug 19, 2026·

  ·
  2

• fix: validate partial project payments against remaining amount

  #1472·sachinacharyaa opened Aug 15, 2026·

  ·
  2

• fix: prevent cross-listing external payment verification

  #1471·sachinacharyaa opened Aug 15, 2026·

  ·
  7

• fix(agents): default live listings deadline cutoff to now and validate ISO-8601 params (#1456)

  #1470·jihadMo opened Aug 13, 2026·

  ·
  1

  7

• fix(comment/create): validate request body with a zod schema

  #1469·rajanpanth opened Aug 12, 2026·

  ·
  3

• fix(listing): require an authenticated session on sponsor utility endpoints

  #1468·rajanpanth opened Aug 12, 2026·

  ·
  2

• fix(referral/verify): stop exposing inviter's internal user id in response

  #1467·rajanpanth opened Aug 12, 2026·

  ·
  2

• fix(wallet/price): URL-encode mintAddress query parameter

  #1466·rajanpanth opened Aug 12, 2026·

  ·
  2

• chore(security): add HSTS, nosniff, Referrer-Policy and Permissions-Policy headers

  #1465·rajanpanth opened Aug 12, 2026·

  ·
  2

• fix: Prevent Duplicate Spam Credit Penalties

  #1463·mitgajera opened Aug 9, 2026Contributor·

  ·
  6

• Add member Sumsub source key setup

  #1454·buildwithnidhi opened Aug 6, 2026Collaborator·

  ·
  2

• fix: guard wallet fee payer usage

  #1445·mitgajera opened Jul 22, 2026Contributor·

  ·
  8