open source

pull requests and issues across repos outside my own, pulled live from github.

merged prs

23

open

6

repos

30

›apache/arrow-rs7 merged

• mergedfix(arrow-array): align FFI buffers before validation under force_validate#10798
• mergedfix(ffi): make FFI_ArrowSchema::with_metadata unsafe#10764
• mergedfix(arrow-ipc): return an error instead of panicking on IPC file with no footer schema#10744
• mergedfix(arrow-ipc): return an error instead of panicking on malformed IPC schema#10647
• mergedfix(arrow-schema): stop asserting on unstable TryFromIntError message in tests#10433
• mergedfix(ffi): make FFI struct fields private to close Drop soundness hole#10431
• closedfix(arrow-array): make ArrowArrayStreamReader::try_new unsafe#10419
• mergedfix(arrow-cast): make `b64_encode` reject invalid UTF-8 from misbehaving `Engine` impls#10324

›cometbft/cometbft3 merged

• closedfix(mempool): reduce addSender log verbosity for expected error cases#5669
• mergedfix(consensus): correct loop condition in checkDoubleSigningRisk for height=1#5668
• closedfix(p2p): prevent PEX reactor from dialing configured persistent peers#5617
• closedfix(blocksync): prevent banning peers sending small blocks frequently#5614
• mergedfix(types): correct buffer offset in ProposerPriorityHash#5613
• mergedtest: add unit tests for TotalVotingPowerSafe#5570

›solana-program/token-20222 merged

• mergedprogram: Enforce CPI Guard for WithdrawExcessLamports on token accounts#1196
• closedEnforce CPI Guard for WithdrawExcessLamports on token accounts#1195
• closedReturn InvalidInstructionData for malformed token metadata instructions#1194
• mergedprogram: Enforce `ImmutableOwner` check in `process_confidential_mint` for `NonTransferable` mints#1045

›slatedb/slatedb2 merged

• mergedperf(wal): read a whole WAL SST per request during replay (#2003)#2042
• mergedAdd cleanup_db admin fn and cli command for clone teardown#2001

›otter-sec/anchor2 merged

• mergedfix(lang): emit `'info` lifetime on CPI client accounts struct with no fields#4737
• mergedchore(cli): Use include_str!() for solana-program version (#4332)#4342

›unionlabs/union2 merged

• mergedfeat(u): add `u slot` subcommand for Solidity storage slot computation#5475
• mergedfix(galoisd): correct signature/validator count check in Poll#5471

›cosmos/cosmos-sdk1 merged

• mergedfix(x/staking): validate bond_denom exists before updating params#25739
• closedfix(x/staking): validate bond_denom exists before updating params#25736

›tikv/tikv2 open

• opengc_worker: keep default-CF value on partial GC compaction#20042
• openbackup-stream: bind published checkpoint to flushed payload on retry#20017

›zeta-chain/node2 total

• closedfix: skip forged non-protocol logs in v1 outbound parsers#4574
• closedfix(observer): skip forged outbound logs during v2 outbound receipt parsing#4572

›ethereum/go-ethereum2 total

• closedcommon: fix precision loss in CalculateETA for sub-ms durations#33513
• closedcrypto, cmd, core, eth : fix various spelling errors#33508

›solana-program/token-metadata1 merged

• mergedfix(interface): validate Borsh string lengths in unpack() to prevent SBF heap abort#87

›solana-playground/solana-playground1 merged

• mergedtest-ui: add cached token and mint account generators#446

›Sovereign-Labs/sovereign-sdk1 merged

• mergedfeat(db): add NOMT page_cache_upper_levels configuration#2421

›cosmos/gaia1 merged

• mergedbuild: enable blst portable mode to fix SIGILL on older CPUs#3954

›readysettech/readyset1 open

• openfix: preserve column collation when coercing numbers/enums to varchar/char#1707

›pola-rs/polars1 total

• closedfix(rust): Promote borrowed inner values in AnyValue::into_static for StructOwned#28874

›paradedb/paradedb1 total

• closedfix: dont panic on a transiently inconsistent mutable segment after crash recovery#5955

›qdrant/qdrant1 open

• openuse exact value count for range cardinality estimate#10089

›succinctlabs/sp11 open

• openfix(zkvm): sys_getenv returns usize::MAX so std::env::var reports NotPresent#2923

›tursodatabase/turso1 total

• closedcore/ext: NUL-terminate TextValue storage so sqlite3_value_text returns a valid C string#8124

›risc0/risc01 open

• openfix(zkp): widen poseidon2 row-commit CUDA offset to 64-bit#3781

›0xPolygon/bor1 total

• closedcore: exempt empty no-op blocks from sidechain ghost-state rejection#2293

›tempoxyz/tempo1 total

• closedfix(precompiles): guard set_code overwrites and detect TIP20 by address prefix#6569

›jito-foundation/jito-solana1 total

• closedfeat: support txv1 transactions in bundle and BAM ingest#1478

›InferiaAI/InferiaLLM1 total

• closedEnforce append-only behaviour for audit logs#245

›anza-xyz/agave1 total

• closedfix: add validator flag to bypass read-only cache for RPC accounts#11668

›sigp/lighthouse1 total

• closedfix: repair Gloas block replay crash with IncorrectStateVariant#8876

›celestiaorg/celestia-app1 total

• closedfix: update consensus params app version before upgrade block#6446

›entrius/gittensor1 total

• closedtest: testing miner#120

›jesseduffield/lazygit1 total

• closedfeat: warn user when unsupported 'delta --navigate' flag is used#5139