Issues

• Daily dependency audit: production high or critical advisory

  dependenciessecurity
  sgort/ronl-business-api#389 · Filter by author github-actions opened on Oct 21, 2026

• Infra-board Ctrl+K search misses live projects waiting between phases

  bug
  sgort/ronl-business-api#382 · Filter by author sgort opened on Oct 13, 2026

• CSS: shared design tokens, stylelint and less duplication across the stylesheets

  enhancement
  sgort/ronl-business-api#374 · Filter by author sgort opened on Oct 12, 2026
  5

• winston-daily-rotate-file: move to 5.0.0, or drop it

  dependencies
  sgort/ronl-business-api#367 · Filter by author sgort opened on Oct 10, 2026

• Replace node-cache

  dependencies
  sgort/ronl-business-api#366 · Filter by author sgort opened on Oct 10, 2026

• Remove the @types/uuid stub

  dependencies
  sgort/ronl-business-api#365 · Filter by author sgort opened on Oct 10, 2026

• Move supertest from 6 to 7 (backend tests)

  dependencies
  sgort/ronl-business-api#364 · Filter by author sgort opened on Oct 10, 2026

• Move to ESLint 10

  dependencies
  sgort/ronl-business-api#363 · Filter by author sgort opened on Oct 10, 2026

• Findings from documenting v2026.10.1: the SBOM checks cannot fail, lockfile-only promotions skip the sites, and smaller

  sgort/ronl-business-api#354 · Filter by author sgort opened on Oct 9, 2026
  1

• Citizens may start only registry processes, also under their own tenant

  security
  sgort/ronl-business-api#350 · Filter by author sgort opened on Oct 9, 2026

• Untenanted processes on the shared ACC/PROD engine: HR onboarding and the rest

  enhancement
  sgort/ronl-business-api#349 · Filter by author sgort opened on Oct 9, 2026

• Citizen services: a data-driven catalogue from the deployed processes

  enhancement
  sgort/ronl-business-api#348 · Filter by author sgort opened on Oct 9, 2026

• ValidSign: a signer who is also the configured sender gets a bare 500 and leaves an orphan package

  bug
  sgort/ronl-business-api#340 · Filter by author sgort opened on Oct 8, 2026

• Browser Keycloak tokens can read a person's stored Entra token (broker endpoint)

  needs-decisionsecurity
  sgort/ronl-business-api#325 · Filter by author sgort opened on Oct 6, 2026

• BRP route: require an assurance level and check the subject

  sgort/ronl-business-api#319 · Filter by author sgort opened on Oct 5, 2026

• Triage the four open Dependabot alerts: react-router ×2, dompurify, minimatch (dev-only)

  dependenciessecurity
  sgort/ronl-business-api#311 · Filter by author sgort opened on Oct 3, 2026

• e2e: pace the suite against PROD's rate limit (100/min) instead of failing on it

  enhancement
  sgort/ronl-business-api#310 · Filter by author sgort opened on Oct 3, 2026

• Signing panel and infra-board borders use the undefined CSS token --v2-rule-1

  bug
  sgort/ronl-business-api#301 · Filter by author sgort opened on Oct 2, 2026

• public-site api.ts: two resolveApiBase() branch arms unreachable under Vitest (Node)

  needs-decision
  sgort/ronl-business-api#294 · Filter by author sgort opened on Sep 30, 2026

• public-site: importing prerender.ts runs the whole prerender

  bug
  sgort/ronl-business-api#290 · Filter by author sgort opened on Sep 30, 2026

• Prettier is pinned twice and Renovate splits the updates

  sgort/ronl-business-api#287 · Filter by author sgort opened on Sep 30, 2026

• Run the frontend e2e suite as a check on frontend changes

  needs-decision
  sgort/ronl-business-api#265 · Filter by author sgort opened on Sep 28, 2026

• Entra users with only IOU_INFRA get 403 from the Infra-board assistant

  needs-decision
  sgort/ronl-business-api#251 · Filter by author sgort opened on Sep 28, 2026

• Bring the ACC and PROD VM deployment under action control, then pin its container images

  cienhancementprod-impactsecurity
  sgort/ronl-business-api#196 · Filter by author sgort opened on Sep 23, 2026 · Deploy chain
  1

• The public site has no end-to-end test, and it is the one surface that prerenders against the live API

  cienhancement
  sgort/ronl-business-api#195 · Filter by author sgort opened on Sep 23, 2026 · Public catalog