Pull requests

• [TT-18830 release-5.8] gromit: sync templates

  #8841·probelabs[bot] opened Oct 28, 2026Bot·

  ·
  1

• [TT-18830 release-5.15.0] gromit: sync templates

  #8840·probelabs[bot] opened Oct 28, 2026Bot·

  ·
  4

• [TT-18830 release-5.15] gromit: sync templates

  #8839·probelabs[bot] opened Oct 28, 2026Bot·

  ·
  4

• [TT-18830 release-5.13.4] gromit: sync templates

  #8838·probelabs[bot] opened Oct 28, 2026Bot·

  ·
  4

• [TT-18830 release-5.13.2] gromit: sync templates

  #8837·probelabs[bot] opened Oct 28, 2026Bot·

  ·
  4

• [TT-18830 release-5.13] gromit: sync templates

  #8836·probelabs[bot] opened Oct 28, 2026Bot·

  ·
  4

• [TT-18830 master] gromit: sync templates

  #8835·probelabs[bot] opened Oct 28, 2026Bot·

  ·
  5

• [TT-14003] Gateway /tyk/certs returns {"certs":null} after the first call without org_id, and on data plane Gateways

  #8834·MaciekMis opened Oct 27, 2026Contributor·7 tasks·

  ·
  6

• [TT-18757] Gateways report the certificates they use

  #8833·mativm02 opened Oct 26, 2026Contributor·4 of 7 tasks·

  ·
  2

• Merging to release-5.13: CVE-528: Bump github.com/andybalholm/brotli to v1.2.7 (#8828)

  needs-manual-cherry-pick
  #8831·probelabs[bot] opened Oct 26, 2026Bot·

  ·
  1

• Record analytics for every refused MCP request

  #8827·kunalgoesbyken opened Oct 25, 2026·4 of 7 tasks·

  ·
  1

  1

• [TT-18830 release-5.16] gromit: sync templates

  #8824·probelabs[bot] opened Oct 22, 2026Bot·

  ·
  5

• [TT-18135] Rate limits using the Redis rate limiter allow extra requests when Gateways’ system clocks differ

  #8823·shults opened Oct 22, 2026Contributor·3 of 7 tasks·

  ·
  7

• [TT-16298, TT-18558, TT-17631, TT-18710] Godoc corrections for Tyk OAS and Gateway config

  #8818·andyo-tyk opened Oct 20, 2026Contributor·

  ·
  2

• [TT-18665] [Security] Virtual Endpoints can load and execute scripts from arbitrary filesystem paths on the Gateway host

  #8815·shults opened Oct 20, 2026Contributor·4 of 7 tasks·

  ·
  2

• [POC][TT-17646] Add cache_timeout to the Identity Provider Registry record

  #8814·MFCaballero opened Oct 20, 2026Contributor·7 tasks·

  ·
  4

• fix: don't base64-decode plain URL jwt_source on JWKS cache hit

  #8813·ShryukGrandhi opened Oct 20, 2026·2 of 7 tasks·

  ·
  1

  1

• Restore analytics records to Redis when RPC purge fails

  #8812·ShryukGrandhi opened Oct 20, 2026·3 of 7 tasks·

  ·
  1

  1

• [TT-18034] OAS Allow-List bypass via unstripped path evaluation and parameterized paths

  #8810·shults opened Oct 19, 2026Contributor·3 of 7 tasks·

  ·
  3

• fix(request): gate X-Real-IP/X-Forwarded-For trust behind trusted_proxy_cidrs

  #8809·carfeii opened Oct 16, 2026·

  ·
  1

  1

• fix(oauth2): send requested_token_type in RFC 8693 token exchange

  #8807·RyoKusnadi opened Oct 16, 2026·

  ·
  1

  1

• [TT-18717] Move Gateway MCP coverage under api-tests -v2

  #8802·andrei-tyk opened Oct 15, 2026Contributor·4 tasks done·

  ·
  4

• [TT-18830 release-5.8.15] gromit: sync templates

  #8794·probelabs[bot] opened Oct 14, 2026Bot·

  ·
  9

• [TT-18830 release-5.3] gromit: sync templates

  #8793·probelabs[bot] opened Oct 14, 2026Bot·

  ·
  7

• [TT-18830 release-5.14.0] gromit: sync templates

  #8792·probelabs[bot] opened Oct 14, 2026Bot·

  ·
  12