Find meaningful ways to contribute

A bug in Garage's S3 CORS configuration causes preflight requests for presigned PUT uploads to fail. This is because Garage's `AllowedHeaders` are matched case-sensitively against the browser's lowercased `Access-Control-Request-Headers`, specifically impacting the `Content-Type` header. The proposed fix is to ensure all `AllowedHeaders` are written in lowercase to match the browser's behavior.

This issue serves as a central hub for advisory findings from Hive agents, particularly at lower ACMM levels where agents analyze code without creating direct issues or PRs. A governor agent periodically posts digest comments summarizing these advisory findings. This issue is intended to be a living document and should not be closed.

Users are reporting that the recently implemented drag-and-drop functionality for tasks in the calendar month view is not working. When attempting to drag a task, it disappears from its original date but does not appear on the new date, and the scheduled date remains unchanged. This issue is reliably reproducible.

This issue proposes making the full text of extracted documents (like PDFs and Office files) and plain Markdown files searchable. Currently, only wiki pages are searchable, and extracted documents are skipped by literal searches. The goal is to allow agents to find information within these documents by splitting them into sections, indexing these sections, and citing them by their original path and section.

The post-commit hook on Windows Git Bash incurs a 250ms delay due to redundant process spawns for `git` and `date` commands. The issue proposes optimizing these calls to a single `git rev-parse` and a single `date` to significantly reduce commit times on Windows.

This bug report identifies that C++ methods defined outside their class body (in a .cc file) are not being correctly attributed to their respective classes by the analysis tool. This leads to inaccurate class metrics, such as method count and cyclomatic complexity, particularly for larger classes split across header and source files, preventing relevant findings like 'god_class' from being triggered.

This bug report identifies that certain conditional constructs in Swift, Kotlin, C#, and Rust are not being correctly counted as conditions for cyclomatic complexity. Specifically, match-arm guards and Rust's `if let` chains are missed, while Go's `range` arguments are incorrectly counted. The fix aims to ensure these constructs are accurately reflected in complexity analysis.

The C# code analysis tool incorrectly identifies `var x = await f().ConfigureAwait(false);` as leaving `x` untyped. This is because the `.ConfigureAwait(false)` call is mistakenly interpreted as ending the statement, preventing the tool from correctly inferring the type of `x` from the awaited `Task<T>` return. Consequently, subsequent method calls on `x` are not recognized, breaking code analysis for this common C# pattern.

This bug occurs when a method name is repeated within a single chained call. The system uses the line number as a key for looking up chained calls, causing repeated method names to be incorrectly associated with the same 'hop' or step in the chain. This leads to incorrect type resolution, particularly impacting builder and fluent interfaces in languages like Java, C#, Kotlin, and Dart.

A bug exists where Kotlin's built-in `require` and `check` functions are incorrectly dropped by the parser when a class defines its own methods with the same names. This prevents the call graph from correctly identifying calls to these user-defined methods, leading to inaccurate dead-code analysis and caller lists.

This issue proposes creating an Android companion app that uses an overlay to automatically scan and update a user's card collection. Similar to existing apps like Poke Geni for Pokémon Go, it would offer a button to activate scanning when opening packs or viewing multiple cards, aiming to streamline the collection management process.

The uninstall confirmation dialog displays both the 'Uninstall' and 'Cancel' buttons in red. This issue requires correcting the color of the 'Cancel' button to gray, as only the 'Uninstall' button should be visually emphasized with red.

The `KeyctlString()` function in `x/sys/unix` panics when encountering key types that can legally have no payload. This occurs because the function attempts to slice a byte slice with an invalid index, leading to a runtime error.

Keycloak's Kubernetes identity provider incorrectly forwards the pod's service account token when fetching signing keys from public JWKS endpoints. This can cause authentication failures for public endpoints and unnecessarily exposes credentials. There is currently no configuration to disable this token forwarding for public endpoints while still allowing it for authenticated Kubernetes API discovery.

This issue proposes an improvement for PHP updates on Windows to prevent failures caused by running PHP processes. The solution involves a staged update process: downloading to a temporary location, prompting the user to close processes, and then either applying the update after confirmation or force-killing processes if necessary. The goal is to avoid unnecessary redownloads during retries.

The user is requesting a new feature for the Pomodoro timer: an optional full-screen overlay notification for break times. This aims to prevent users from accidentally working through breaks by providing a more intrusive and unavoidable alert, forcing them to acknowledge the break and disengage from their task.

This issue proposes three enhancements for a UI component library. The first is renaming a `Box` component to `View` to avoid naming conflicts. The second is adding support for handlers that can return values, specifically for validation purposes, suggesting a new type for this. The third is introducing a `StringOrElement` prop type to allow for either simple strings or custom elements as input.

This issue proposes integrating task management with contact information from various sources, including the device's phone book, an internal contact manager, or external applications like Google Contacts. The goal is to reduce manual data entry, enable direct actions like click-to-call/email from tasks, and enhance task organization by linking them to specific people.

In the agent chat, tagged entities (like tasks or plans) are currently rendering their full descriptions in both the composer and sent message bubbles, making messages difficult to read. The expected behavior is to display these as compact mentions or a maximum of two lines, while ensuring the agent still receives the full context.

This bounty issue asks users to register an AI agent on the Beacon Atlas, RustChain's agent discovery network. The process involves installing a Python package, generating an agent identity, registering the agent with a name and description, and sending a "hello" message. A bonus is offered for keeping the agent alive for 24 hours.

This issue proposes adding support for Spring Cloud Stream bindings, AWS EventBridge events, and Celery tasks to the topic registry. Currently, the system lacks specific "dialects" for these technologies, preventing it from recognizing their topic contracts. Implementing this would allow for better visualization of event edges and impact analysis.

This issue is a triage pass to identify and consolidate duplicate or overlapping open issues and pull requests in the kubestellar/console repository. It identifies two near-duplicate PR pairs and one missing PR-to-issue link, providing recommendations for which to keep and which to close. Maintainers need to make decisions on these proposed actions.

The user is reporting that the NVsmooth30 feature is not working in Cyberpunk 2077 and Control Resonant on Windows 11 with an RTX 3060. Enabling it manually through OptiScaler.ini causes game crashes or black screens, and the status consistently shows as 'Disabled'.

This issue requests the addition of type hints to core utility functions in `utils/misc.py` and `utils/fitbm_result.py`. The goal is to ensure consistency with the rest of the codebase, where type annotations are already widely used. This is identified as a good first issue.

This issue requires a thorough review of technical claims within a document, cross-referencing them with authoritative sources like NIST, MITRE ATLAS, OWASP, and primary research. The goal is to ensure accuracy, standardize citations, and clearly define the relationships between claims and various frameworks.

Users currently cannot configure board columns to display tasks matching *any* of the selected required tags; it implicitly uses an AND logic. This feature request proposes adding an option to toggle between AND and OR logic for required tags, allowing for more flexible aggregation of tasks, such as displaying all tasks with any priority level (P1 OR P2 OR P3 OR P4).

This feature request proposes adding metrics to track the usage of the impersonation feature within the OpenLane API. The goal is to count the number of impersonation requests, specifically differentiating between 'start' and 'stop' events, to provide better visibility into how this functionality is being utilized.

After upgrading the K30RF firmware and the EMS-ESP32S3 gateway, the user is experiencing a "No communication via EMS BUS connection" error (1010) on their heating system and HomeCom app. This issue occurs specifically when the EMS-ESP32S3 gateway is connected, and is resolved by disconnecting it. The system logs show numerous "Incomplete Rx" messages, indicating potential communication corruption or protocol mismatches.

This issue describes a desired feature for a 3D view where holding the Alt key and dragging the mouse (typically with the middle button) would allow for more free camera movement, enabling users to pan and tilt around 3D objects and textures. This would provide enhanced control for examining 3D assets.

The Source Search functionality in Kestra incorrectly handles quoted YAML keys, leading to unexpected behavior. It can misidentify the scope of tasks and triggers, causing replacements to occur outside the intended section or failing to find matches altogether when keys are quoted.