Open Source
been exploring the CNCF world, mostly learning containers and kubernetes the hard way.
sugarlabsfix: keep neighbor beat arrays in sync when note value is too largesugarlabs/musicblocks875fix: add stale-while-revalidate to Planet cache and invalidate on reportsugarlabs/musicblocks875[Bug] Planet cache can serve moderated or replaced projects for up to 7 dayssugarlabs/musicblocks875fix: retry timeout failures in RequestManager instead of returning immediatelysugarlabs/musicblocks875[Bug] RequestManager timeout failures bypass retry logic entirelysugarlabs/musicblocks875Debounce local project rename to avoid repeated full DB writessugarlabs/musicblocks875Local project rename triggers full IndexedDB rewrite on every keystrokesugarlabs/musicblocks875Hoist findBlockInstance temperament1 lookup out of per-block loopsugarlabs/musicblocks875loadNewBlocks performs O(N^2) work due to repeated findBlockInstance callsugarlabs/musicblocks875fix(#7216): remove inline sr-only styles breaking textMsg visibilitysugarlabs/musicblocks875security(aidebugger): require explicit consent before sending project datasugarlabs/musicblocks875[Security/Privacy] AI Debugger uploads full project data before user consentsugarlabs/musicblocks875security(planet): replace window.parent access with postMessage bridgesugarlabs/musicblocks875[Security] Planet iframe has unrestricted access to parent Music Blocks app statesugarlabs/musicblocks875perf(blocks): spatial grid for O(1) nearest-dock lookup on block dropsugarlabs/musicblocks875[Performance] O(N²) block connection search causes UI freeze on large projectssugarlabs/musicblocks875fix(#7094): remove hardcoded HTTP IP from AI sample generationsugarlabs/musicblocks875fix(sampler): AI sample generation sends requests to hardcoded plain HTTP IPsugarlabs/musicblocks875feat: add Starter Templates widget for new userssugarlabs/musicblocks875[Feature] Context-aware music theory hints while building projectssugarlabs/musicblocks875[Feature] Beginner-friendly error messages with Fix-It suggestionssugarlabs/musicblocks875[Feature] Starter Templates panel for first-time userssugarlabs/musicblocks875fix: guard division by zero in Staccato and Slur blockssugarlabs/musicblocks875[Bug] Division by zero in Staccato and Slur blocks when value is 0sugarlabs/musicblocks875fix: add missing validate task and cssTask to gulpfile.mjssugarlabs/musicblocks875fix: guard division by zero in Neighbor ornament beat calculationsugarlabs/musicblocks875fix: prevent crash on malformed HTML project filessugarlabs/musicblocks875[Bug] Division by zero in Neighbor ornament produces Infinity in audio pipelinesugarlabs/musicblocks875[Bug] App crashes on malformed HTML project files due to unchecked regex matchsugarlabs/musicblocks875fix: replace for...in with Object.keys() in plugin loadingsugarlabs/musicblocks875fix: disconnect synth before toDestination to prevent duplicate audio graph connectionssugarlabs/musicblocks875[Bug] Dual gulpfile (.js and .mjs) with inconsistent build taskssugarlabs/musicblocks875[Security] Prototype pollution via unguarded for...in loops in plugin loadingsugarlabs/musicblocks875[Bug] Audio node leak: toDestination() creates duplicate graph connection after effects cleanupsugarlabs/musicblocks875fix: remove drag-and-drop listeners on sampler widget closesugarlabs/musicblocks875fix: replace document.onkeydown with addEventListener in help widgetsugarlabs/musicblocks875fix: add epoch guard before setNote in synthutilssugarlabs/musicblocks875[Bug] Missing epoch check before setNote in synthutils causes audio corruption on fast instrument switchingsugarlabs/musicblocks875[Bug] Sampler widget drag-and-drop listeners never removed on closesugarlabs/musicblocks875[Bug] Help widget overwrites document.onkeydown — breaks keyboard handling across widgetssugarlabs/musicblocks875fix: guard against division by zero in PhraseMaker audiosugarlabs/musicblocks875fix: add Secure and SameSite flags to setCookiesugarlabs/musicblocks875fix: centralise hardcoded API keys into env.jssugarlabs/musicblocks875fix: guard indexOf() before array access in rubrics and turtle-singersugarlabs/musicblocks875fix: wrap JSON.parse in try-catch in Publisher.dataToTagssugarlabs/musicblocks875[Bug] Division by zero in PhraseMaker audio playback on invalid cell attributessugarlabs/musicblocks875[Security] Cookie set without Secure/SameSite flags in Planet helpersugarlabs/musicblocks875
medicfix(#11090): remove password from rate limiter lookup keysmedic/cht-core552Rate limiter uses raw password as lookup key, enabling cross-account lockoutmedic/cht-core552perf(#11088): paginate _users queries in purging getRoles()medic/cht-core552getRoles() in purging loads entire _users database into memory without paginationmedic/cht-core552setExpectedBirthDate drops expected_date when weeks_since_lmp is 0medic/cht-core552UI extension and extension-libs endpoints missing authentication and role-based authorizationmedic/cht-core552fix(#10679): prevent geolocation timeout from blocking form submissionmedic/cht-core552fix(#11019): reload extension content when navigating between tabsmedic/cht-core552feat(#11018): rebuild service worker on UI extension changesmedic/cht-core552fix(#11017): fix legacy UI styling gaps for UI extensionsmedic/cht-core552feat(#10694): add free text search to tasks pagemedic/cht-core552fix(#11005): guard null GitHub user in release notes scriptmedic/cht-core552Release notes script crashes when commit author has null GitHub usermedic/cht-core552fix(#11003): include boundary values in age break comparisonmedic/cht-core552fix: exact 1-year and 1-month ages display as lower units due to off-by-one comparisonmedic/cht-core552fix(#11001): use route params instead of matrix params for deceased contact navigationmedic/cht-core552Deceased contact deletion navigates using matrix params instead of route paramsmedic/cht-core552fix(#10999): only normalize slashes in URL pathname, not query paramsmedic/cht-core552fix: global URL slash normalization corrupts query parameter valuesmedic/cht-core552fix(#10997): preserve query parameters in login redirectmedic/cht-core552Login redirect drops query parameters after successful authenticationmedic/cht-core552fix(#10988): use JSON.stringify for manifest generation instead of lodash templatemedic/cht-core552fix(#10987): pass container ID to togglePassword on login pagemedic/cht-core552Generated web manifest is invalid when branding title contains JSON-special charactersmedic/cht-core552Login password visibility icon does not update after togglingmedic/cht-core552fix(#10985): add missing special character escaping in nouveau query buildermedic/cht-core552Nouveau query escaping misses documented special charactersmedic/cht-core552perf(#10960): optimize O(n*m) lookups in contact report loadingmedic/cht-core552Optimize O(n²) lookups in contact-view-model-generator report loadingmedic/cht-core552fix(#10957): add missing alt attributes to dynamically created imagesmedic/cht-core552Missing alt attributes on dynamically created and template imagesmedic/cht-core552fix(#10955): replace eval() with strict comparison for boolean CSV parsingmedic/cht-core552Replace unsafe eval() with strict comparison for boolean parsing in CSV user importmedic/cht-core552fix(#10953): fix memory leak from unmanaged subscription in FastActionButtonComponentmedic/cht-core552Memory leak: unmanaged store subscription in FastActionButtonComponent constructormedic/cht-core552
Nano-Collective
dodopayments