Original PR: https://github.com/fosrl/pangolin/pull/3178 Author: @oschwartz10612 Created: 5/28/2026 Status: ✅ Merged Merged: 5/28/2026 Merged by: @oschwartz10612
Base: main ← Head: sec-updates
main
sec-updates
2946df3
37 files changed (+2728 additions, -3681 deletions)
📝 drizzle.sqlite.config.ts (+1 -1) 📝 install/go.mod (+2 -2) 📝 install/go.sum (+4 -4) 📝 next.config.ts (+1 -6) 📝 package-lock.json (+2265 -3475) 📝 package.json (+52 -50) 📝 server/index.ts (+1 -1) ➕ server/lib/requestParams.ts (+11 -0) 📝 server/middlewares/integration/verifyAccessTokenAccess.ts (+8 -1) 📝 server/middlewares/integration/verifyApiKeyApiKeyAccess.ts (+5 -2) 📝 server/middlewares/integration/verifyApiKeyDomainAccess.ts (+11 -2) 📝 server/middlewares/integration/verifyApiKeyIdpAccess.ts (+8 -3) 📝 server/middlewares/integration/verifyApiKeyOrgAccess.ts (+3 -2) 📝 server/middlewares/integration/verifyApiKeySiteResourceAccess.ts (+4 -2) 📝 server/middlewares/integration/verifyApiKeyTargetAccess.ts (+4 -2) 📝 server/middlewares/verifyAccessTokenAccess.ts (+9 -2) 📝 server/middlewares/verifyApiKeyAccess.ts (+20 -7) 📝 server/middlewares/verifyDomainAccess.ts (+4 -7) 📝 server/middlewares/verifyLimits.ts (+5 -1) 📝 server/middlewares/verifyOrgAccess.ts (+2 -1)
drizzle.sqlite.config.ts
install/go.mod
install/go.sum
next.config.ts
package-lock.json
package.json
server/index.ts
server/lib/requestParams.ts
server/middlewares/integration/verifyAccessTokenAccess.ts
server/middlewares/integration/verifyApiKeyApiKeyAccess.ts
server/middlewares/integration/verifyApiKeyDomainAccess.ts
server/middlewares/integration/verifyApiKeyIdpAccess.ts
server/middlewares/integration/verifyApiKeyOrgAccess.ts
server/middlewares/integration/verifyApiKeySiteResourceAccess.ts
server/middlewares/integration/verifyApiKeyTargetAccess.ts
server/middlewares/verifyAccessTokenAccess.ts
server/middlewares/verifyApiKeyAccess.ts
server/middlewares/verifyDomainAccess.ts
server/middlewares/verifyLimits.ts
server/middlewares/verifyOrgAccess.ts
...and 17 more files
Normalize request parameters and update dependencies for Security
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
No dependencies set.
The note is not visible to the blocked user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/3178
Author: @oschwartz10612
Created: 5/28/2026
Status: ✅ Merged
Merged: 5/28/2026
Merged by: @oschwartz10612
Base:
main← Head:sec-updates📝 Commits (1)
2946df3Merge pull request #3085 from marcschaeferger-org/security-updates📊 Changes
37 files changed (+2728 additions, -3681 deletions)
View changed files
📝
drizzle.sqlite.config.ts(+1 -1)📝
install/go.mod(+2 -2)📝
install/go.sum(+4 -4)📝
next.config.ts(+1 -6)📝
package-lock.json(+2265 -3475)📝
package.json(+52 -50)📝
server/index.ts(+1 -1)➕
server/lib/requestParams.ts(+11 -0)📝
server/middlewares/integration/verifyAccessTokenAccess.ts(+8 -1)📝
server/middlewares/integration/verifyApiKeyApiKeyAccess.ts(+5 -2)📝
server/middlewares/integration/verifyApiKeyDomainAccess.ts(+11 -2)📝
server/middlewares/integration/verifyApiKeyIdpAccess.ts(+8 -3)📝
server/middlewares/integration/verifyApiKeyOrgAccess.ts(+3 -2)📝
server/middlewares/integration/verifyApiKeySiteResourceAccess.ts(+4 -2)📝
server/middlewares/integration/verifyApiKeyTargetAccess.ts(+4 -2)📝
server/middlewares/verifyAccessTokenAccess.ts(+9 -2)📝
server/middlewares/verifyApiKeyAccess.ts(+20 -7)📝
server/middlewares/verifyDomainAccess.ts(+4 -7)📝
server/middlewares/verifyLimits.ts(+5 -1)📝
server/middlewares/verifyOrgAccess.ts(+2 -1)...and 17 more files
📄 Description
Normalize request parameters and update dependencies for Security
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.