- keycloak/keycloak — OIDC client registration scope handling auth enforcement (#51311)
- opensearch-project/OpenSearch-Dashboards — use explicit query comparison instead of lodash isEqual
- keycloak/keycloak — Prevent SAML OneTimeUse assertion replay in IdP-Initiated broker flow
- tikv/tikv — raftstore: pass RaftCmdExtraOpts through local read path to enable deadline cancellation
- apache/maven — properly implement Clock.withZone() in MonotonicClock
- zitadel/zitadel — preserve user theme preference when branding theme is auto
- etcd-io/etcd — v3rpc: add client IP to auth-related log messages
- cloud-hypervisor/cloud-hypervisor — Co-authored PR:
tests: re-enable test_live_migration_tcp_timeout_cancel() + make more robust
Building at the intersection of systems, data, and the full stack.