PR Custody

ComposioHQ/frontend

privatemain55 open

Open pull requests

#962 chore(deps): bump protobufjs from 7.5.4 to 7.6.3

@dependabot[bot]

+1065 −7016hDiff

#916 chore(deps): bump the npm_and_yarn group across 1 directory with 43 updates

@dependabot[bot]

+3216 −320320hDiff

#961 chore(deps): bump @grpc/grpc-js from 1.14.3 to 1.14.4

@dependabot[bot]

+1050 −6871dDiff

#960 chore(deps): bump better-auth from 1.5.6 to 1.6.11

@dependabot[bot]

+1153 −8401wDiff

#958 chore(deps): bump axios from 1.15.0 to 1.16.0

@dependabot[bot]

+1103 −7981wDiff

#957 chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

@dependabot[bot]

+2 −21wDiff

#955 chore(deps): bump turbo from 2.6.3 to 2.9.14

@dependabot[bot]

+1103 −8062wDiff

#874 Production Release - April 17, 2026

@haxzie

+1529 −16332wDiff

#939 chore(deps): bump @hono/node-server from 1.19.11 to 2.0.3

@dependabot[bot]

+979 −6613wDiff

#938 chore(deps): bump hono from 4.12.5 to 4.12.19

@dependabot[bot]

+979 −6613wDiff

#937 feat: apply hosted auth white-label theme

@venkat82

+360 −353wDiff

#936 fix: display whitelabel logo on OAuth redirect success page

@zen-agent

+7 −13wDiff

#934 fix(security): resolve 1 critical Socket.dev vulnerability (protobufjs)

@zen-agent

+5 −153wDiff

#933 fix(security): bump handlebars to >=4.7.9 (Socket.dev critical CVE)

@zen-agent

+7 −53wDiff

#928 chore(deps): bump langsmith from 0.4.7 to 0.7.1

@dependabot[bot]

+966 −6523wDiff

#927 chore(deps): bump sanitize-html from 2.17.0 to 2.17.4

@dependabot[bot]

+1035 −7303wDiff

#921 chore(deps): bump fast-uri from 3.1.0 to 3.1.2

@dependabot[bot]

+966 −6524wDiff

#920 chore(deps): bump path-to-regexp from 0.1.12 to 8.3.0

@dependabot[bot]

+966 −6524wDiff

#919 chore(deps): bump ip-address from 10.1.0 to 10.2.0

@dependabot[bot]

+966 −6524wDiff

#915 chore(deps): bump next to 16.2.6 to patch CVE-2026-44578 (SSRF)

@zen-agent

+63 −634wDiff

#914 chore(deps): bump @protobufjs/utf8 from 1.1.0 to 1.1.1

@dependabot[bot]

+912 −6051moDiff

#913 chore(deps): bump ai from 5.0.109 to 6.0.178

@dependabot[bot]

+1 −11moDiff

#910 chore(deps): bump next from 16.1.7 to 16.2.6

@dependabot[bot]

+947 −7311moDiff

#908 feat(link): hide secret shared_credentials fields from the link form (PLEN-2392)

@zen-agent

+18 −131moDiff

#901 fix(link): hide Composio attribution for white-labeled custom auth (T-10795)

@zen-agent

+54 −361moDiff

#895 feat(connected-accounts): support REVOKED status added in Apollo #9550

@zen-agent

+31 −31moDiff

#863 chore(deps-dev): bump vite from 5.4.21 to 6.4.2

@dependabot[bot]

+1380 −8141moDiff

#878 chore(deps): bump dompurify from 3.3.2 to 3.4.0

@dependabot[bot]

+840 −6471moDiff

#892 chore(deps): bump uuid from 11.1.0 to 14.0.0

@dependabot[bot]

+841 −6411moDiff

#861 chore(deps): bump drizzle-orm from 0.38.4 to 0.45.2

@dependabot[bot]

+844 −6511moDiff

#891 chore(deps): bump postcss from 8.5.6 to 8.5.10

@dependabot[bot]

+853 −6591moDiff

#877 chore(deps): bump @better-auth/oauth-provider from 1.5.6 to 1.6.5

@dependabot[bot]

+846 −6521moDiff

#879 feat(project-settings): clarify 2FA and secret masking copy [SEC-353]

@devin-ai-integration[bot]

+5 −21moDiff

#887 backmerge: fix(web): patch prefers_old_dashboard=false before For You / Connect nav (#886)

@sarahsimionescu

+28 −61moDiff

#885 backmerge: fix(web): map workspace-only paths to /<org>/~/ on new dashboard (#884)

@sarahsimionescu

+1 −11moDiff

#882 fix: prevent PREVIEW badge from overlapping description in triggers list

@devin-ai-integration[bot]

+2 −21moDiff

#875 fix(web): add detailed logging to Neon DB connection

@abhishekpatil4

+15 −11moDiff

#860 chore(deps): Bump the npm_and_yarn group across 2 directories with 2 updates

@dependabot[bot]

+2 −21moDiff

#828 fix: rename 'App' to 'Toolkit' in filters and fallback labels

@devin-ai-integration[bot]

+4 −42moDiff

#822 feat: add tiered daily message rate limits on tool-router playground (20/50/100 by plan)

@devin-ai-integration[bot]

+71 −52moDiff

#825 fix: redirect onboarding explore path to overview instead of playground [DASH-364]

@devin-ai-integration[bot]

+3 −222moDiff

#814 fix: redirect onboarding explore path to overview instead of playground [DASH-364]

@devin-ai-integration[bot]

+2 −222moDiff

#809 fix: remove persistent MCP configuration copy from Tool Router success modal

@devin-ai-integration[bot]

+1 −132moDiff

#808 feat: add info icons / hover explanations throughout dashboard (DASH-296)

@devin-ai-integration[bot]

+90 −92moDiff

#792 feat: add Twitter-style verification badge for Composio managed toolkits

@devin-ai-integration[bot]

+55 −82moDiff

#793 Rename 'Auth Screen' to 'White Labeling' and update related copy

@devin-ai-integration[bot]

+20 −202moDiff

#805 feat: add Google Ads and Analytics domains to CSP headers

@devin-ai-integration[bot]

+3 −32moDiff

#831 build(deps): bump requests from 2.32.4 to 2.33.0 in /packages/snippets in the uv group across 1 directory

@dependabot[bot]

+3 −32moDiff

#824 feat: add server-side rate limiting and usage caps for playground

@zen-agent

+673 −02moDiff

#815 fix(auth): fix magic link redirect being swallowed by React Query

@zen-agent

+26 −402moDiff

#802 fix: stringify object params when repopulating tool input form

@zen-agent

+15 −13moDiff

#799 fix: prevent secret values from being visible in auth config form

@zen-agent

+64 −193moDiff

#762 [FEAT] Use Tool Router in AuthConfig playground

@ghost

+112 −5273moDiff

#654 feat: improve support ticket handling and Linear integration

@abhishekpatil4

+59 −105moDiff

#482 feat: self hosting auth with fusion auth

@himanshu-dixit

+37 −97moDiff