All pull requests

Pull requests

• chore(frontend): bump @zondax/ledger-icp to 4.0.0

  #8083·yhabib opened Sep 28, 2026Contributor·

  ·
  2

• bot: Update rust version to 1.98.1

  #8079·pr-automation-bot-public[bot] opened Sep 25, 2026Bot·

  ·

• fix(sns-sale): ask to complete or cancel an open ticket before the ICP transfer

  #8076·yhabib opened Sep 22, 2026Contributor·

  ·
  4

• ci(workflows): add least-privilege permissions to nightly.yaml and tag.yaml

  #8055·yhabib opened Sep 5, 2026Contributor·

  ·
  4

• chore(ci): limit GITHUB_TOKEN to read-only in ten workflows

  #8054·yhabib opened Sep 4, 2026Contributor·

  ·
  2

• chore(ci): add least-privilege permissions to build.yml and checks.yml

  #8053·yhabib opened Sep 4, 2026Contributor·

  ·
  10

• fix(proposals): bound the JSON depth of an expanded payload text

  #8052·yhabib opened Sep 4, 2026Contributor·

  ·
  7

• fix(accounts): ask the ledger canister to verify the imported index canister pair

  #8051·yhabib opened Sep 4, 2026Contributor·

  ·
  11

• fix(frontend): stop the transactions worker from paging forever

  #8050·yhabib opened Sep 4, 2026Contributor·

  ·
  5

• fix(sns): read the swap participant count only from the certified state

  #8049·yhabib opened Sep 4, 2026Contributor·

  ·
  10

• fix(tokens): confirm portfolio token balances with certified calls

  #8048·yhabib opened Sep 4, 2026Contributor·

  ·
  13

• fix(wallet): refresh account balances with certified calls only

  #8047·yhabib opened Sep 4, 2026Contributor·

  ·
  5

• fix(aggregator): pin home page Prism assets with Subresource Integrity

  #8046·yhabib opened Sep 4, 2026Contributor·

  ·
  2

• fix(frontend): stop a payload string masquerading as undefined in raw view

  #8045·yhabib opened Sep 4, 2026Contributor·

  ·
  7

• fix(portfolio): keep the balance out of the aria labels in privacy mode

  #8044·yhabib opened Sep 4, 2026Contributor·

  ·
  12

• fix(tokens): refuse importing any SNS ledger, whatever its swap lifecycle

  #8043·yhabib opened Sep 4, 2026Contributor·

  ·
  7

• fix(tickers): select the most liquid ICP Swap pool for a token price

  #8042·yhabib opened Sep 4, 2026Contributor·

  ·
  10

• fix(backend): check the account limit only when add_account creates an account

  #8041·yhabib opened Sep 4, 2026Contributor·

  ·
  2

• fix(errors): resolve an error message as an i18n key only for app errors

  #8040·yhabib opened Sep 4, 2026Contributor·

  ·
  8

• fix(imported-tokens): validate the entered canisters anonymously

  #8039·yhabib opened Sep 4, 2026Contributor·

  ·
  11

• fix(reporting): escape +, -, tab, CR and LF prefixes in the CSV export

  #8038·yhabib opened Sep 4, 2026Contributor·

  ·
  5

• fix(auth): limit the sign-out toast message to a known allowlist

  #8037·yhabib opened Sep 4, 2026Contributor·

  ·
  13

• fix(frontend): sanitize rendered markdown and sns descriptions to block html injection

  #8036·yhabib opened Sep 4, 2026Contributor·

  ·
  12

• fix(scripts): reject non-numeric ledger canister values before arithmetic

  #8035·yhabib opened Sep 4, 2026Contributor·

  ·
  2

• fix(sns_aggregator): restrict reconfigure to controllers and clamp short intervals

  #8034·yhabib opened Sep 4, 2026Contributor·

  ·
  2