All pull requests

Pull requests

• fix(ip-restriction): match IPv4 rules against IPv4-mapped addresses

  #14125·kanywst opened Oct 29, 2026·4 of 5 tasks·

  ·

• fix(graphql): skip zero-weight nodes during introspection

  #14124·lordcheng10 opened Oct 28, 2026Contributor·4 of 5 tasks·

  ·
  1

  1

• docs: note the 100 request header limit in request-validation and opa

  #14119·shreemaan-abhishek opened Oct 28, 2026Contributor·4 of 5 tasks·

  ·

• fix(stream): support traffic-split inline upstream with tls and node resolution

  #14117·bhuvan-somisetty opened Oct 28, 2026·4 of 5 tasks·

  ·
  1

• docs(proxy-cache): clarify that the remote_user isolation fallback is unverified

  #14115·shreemaan-abhishek opened Oct 28, 2026Contributor·4 of 5 tasks·

  ·

• fix(ssl): match skip_mtls_uri_regex against the encoded-slash route uri

  #14108·shreemaan-abhishek opened Oct 27, 2026Contributor·5 tasks done·

  ·
  

• fix(request): enforce limits for cached request bodies

  #14106·PengChaoJay opened Oct 27, 2026·4 of 5 tasks·

  ·

• test(inspect): verify JIT recovery without timing comparisons

  #14102·AlinsRan opened Oct 27, 2026Contributor·

  ·

• fix(prometheus): count stream bytes of slots created after the first read

  #14101·AlinsRan opened Oct 27, 2026Contributor·5 tasks done·

  ·
  3

• docs(ai-rate-limiting): give cost_expr examples for each API format

  #14097·0xLittleDream opened Oct 26, 2026·4 of 5 tasks·

  ·

• fix(core): label local table responses as JSON

  #14091·ruanweihong-aaa opened Oct 26, 2026Contributor·4 of 5 tasks·

  ·

• fix(cli): add IPv6 listeners for internal endpoints

  #14089·hanzhenfang opened Oct 26, 2026Contributor·5 tasks done·

  ·
  1

• fix(cli): preserve YAML data references when ignoring comments

  #14085·ruanweihong-aaa opened Oct 26, 2026Contributor·3 of 5 tasks·

  ·
  1

  3

• docs: add source-verified 3.16 Admin API contract

  #14082·kayx23 opened Oct 26, 2026Member·

  ·
  1

• docs: add source-verified 3.17 Admin API contract

  #14083·kayx23 opened Oct 26, 2026Member·

  ·
  1

• docs: add Wordfully to powered-by list

  #14078·vlbaluk opened Oct 24, 2026·4 of 5 tasks·

  ·

• fix: preserve multiline SSL environment values in standalone YAML

  #14074·ruanweihong-aaa opened Oct 23, 2026Contributor·4 of 5 tasks·

  ·
  3

• fix(graphql): reject non-object JSON request bodies

  #14068·lordcheng10 opened Oct 22, 2026Contributor·4 of 5 tasks·

  ·
  1

  3

• docs: correct shared plugin examples and expected results

  #14067·ayush-singh-0601 opened Oct 22, 2026·5 tasks done·

  ·
  1

• fix(limit-count): keep delayed sync counters per rule

  #14064·lordcheng10 opened Oct 22, 2026Contributor·4 of 5 tasks·

  ·
  1

  4

  

• docs: correct real-ip and fault-injection behavior

  #14060·kayx23 opened Oct 21, 2026Member·

  ·

• feat(opa): propagate traceparent to the OPA server

  #14059·GitNimay opened Oct 21, 2026Contributor·5 tasks done·

  ·
  1

• chore(deps-dev): bump @modelcontextprotocol/sdk from 1.26.0 to 1.32.0 in /t

  dependenciesjavascript
  #14058·dependabot[bot] opened Oct 20, 2026Bot·

  ·

• fix: guard against nil matched_ssl in verify_https_client

  #14057·bhuvan-somisetty opened Oct 20, 2026·4 of 5 tasks·

  ·
  1

  6

• feat(grpc-transcode): add opt-in ProtoJSON support and improve reliability

  #14052·tigran90 opened Oct 19, 2026·5 tasks done·

  ·
  1