All pull requests

Pull requests

• chore(deps): bump the npm-security group across 3 directories with 1 update

  dependenciesjavascript
  #592·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  1

• fix(openai): port reasoning parameter guard across runtimes

  #589·Jasper (TPSJASPER) opened Oct 20, 2026·

  ·
  1

  1

• chore(deps): bump aiohttp from 3.14.3 to 3.14.4 in /runtime/python/prompty in the uv-security group across 1 directory

  dependenciespython:uv
  #588·dependabot[bot] opened Oct 20, 2026Bot·

  ·
  1

• chore(deps): bump the npm-version group across 7 directories with 45 updates

  dependenciesjavascript
  #587·dependabot[bot] opened Oct 19, 2026Bot·

  ·
  1

• chore(deps): bump the actions-version group with 5 updates

  dependenciesgithub_actions
  #586·dependabot[bot] opened Oct 19, 2026Bot·

  ·
  1

• fix: avoid ReDoS when stripping fences from tool arguments (TypeScript, C#, Java, spec §9.8)

  #585·Arfath Ahmed Syed (ArfiArfath21) opened Oct 18, 2026·

  ·

• fix(typescript): follow Jinja2 truthiness and filter coercion in the nunjucks renderer

  #584·Arfath Ahmed Syed (ArfiArfath21) opened Oct 18, 2026·

  ·
  1

• fix(python): avoid ReDoS when stripping fences from tool arguments

  #582·Sadok Barbouche (cr-sbarbouche) opened Oct 17, 2026Contributor·

  ·
  1

• fix: improve secret redaction + async filesystem I/O in VS Code extension

  #580·amd86x (athallajovian9-cyber) opened Oct 17, 2026·

  ·
  1

• chore(deps): bump the pip-v1-version group in /runtime/prompty with 6 updates

  dependenciespython
  #546·dependabot[bot] opened Sep 14, 2026Bot·

  ·
  1

• chore(deps): bump the npm-v1-version group across 6 directories with 56 updates

  dependenciesjavascript
  #532·dependabot[bot] opened Sep 9, 2026Bot·

  ·
  1