All pull requests

Pull requests

• fix(gin): keep the payment receipt headers when the handler flushes

  #203·Ravan002 opened Oct 19, 2026·

  ·

• fix: report unexpected verifier errors as internal-payment-error

  #198·erhnysr opened Oct 14, 2026Contributor·

  ·
  1

• fix: bound authorization values before credential parsing

  #195·brendanjryan opened Oct 7, 2026Contributor·

  ·
  2

  

• fix(client): check the request can be replayed before creating a credential

  #188·erhnysr opened Oct 6, 2026Contributor·

  ·
  1

• fix(mpp): echo challenge opaque exactly as the issuer encoded it

  #187·erhnysr opened Oct 4, 2026Contributor·

  ·
  1

  1

• fix(mpp): parse challenge auth-param names case-insensitively

  #186·haileymarshall opened Oct 3, 2026·

  ·

• fix(server): stop reading HOST/HOSTNAME for realm detection

  #185·haileymarshall opened Oct 3, 2026·

  ·

• fix(security): bound unauthenticated request body reading to prevent memory exhaustion in ChargeMiddleware

  #179·magqqgq opened Oct 1, 2026·

  ·

• chore(ci): bump Cyclops audit workflow

  #172·decofe opened Sep 25, 2026Member·

  ·
  1

  

• fix(mpp): use canonical URIs for invalid-payload and bad-request

  #169·wodesiku opened Sep 22, 2026·

  ·

• fix(server): attach Payment-Receipt only on 2xx responses

  #165·kutluhaneth46 opened Sep 18, 2026·

  ·
  1

  13

• Bump the "weekly-dependencies" group with 1 update across multiple ecosystems

  dependenciesgo
  #160·dependabot[bot] opened Sep 14, 2026Bot·

  ·
  1

• fix(tempo): canonicalize hash credentials before replay checks

  #159·kriss39 opened Sep 13, 2026Contributor·

  ·

• fix(tempo): keep chainId when parsing wire-decoded charge requests

  #158·kriss39 opened Sep 13, 2026Contributor·

  ·
  1

• fix(mpp): keep auth-params that follow a malformed description

  #155·kriss39 opened Sep 10, 2026Contributor·

  ·

• fix(mpp): reject invalid credential header names

  #147·mehmetkr-31 opened Aug 30, 2026·

  ·
  1

• feat(client): add an Authorize hook to verify challenges before auto-payment

  #128·EfeDurmaz16 opened Aug 20, 2026Contributor·

  ·
  1

• fix: release sponsored challenge key on pre-broadcast failure

  #127·Sertug17 opened Aug 20, 2026·

  ·
  1

• fix: return EncodeTransferWithMemo error instead of discarding it in transferDataHex

  #125·chalomdev opened Aug 19, 2026·

  ·

• fix: reject zero/expired ValidBefore on co-signed fee payer transactions

  #123·chalomdev opened Aug 17, 2026·

  ·

• fix: check SetString ok before using parsed amount in MatchTransferCalldata

  #122·chalomdev opened Aug 17, 2026·

  ·
  1

• fix(mpp): match auth-param names case-insensitively

  #121·memosr opened Aug 16, 2026·

  ·

• fix(mpp): reject empty required auth-params when formatting challenges

  #120·memosr opened Aug 16, 2026·

  ·

• Fix transport observability and error logging

  #119·magqqgq opened Aug 15, 2026·

  ·

• fix: reject a bare "." amount instead of parsing it as zero

  #117·Dusk1e opened Aug 13, 2026·

  ·