Issues

• [BUG] "Email security" setting doesn't control whether STARTTLS is attempted

  bug
  Devlaner/devlane#404 · Filter by author tristansgray opened on Aug 29, 2026

• [BUG] "Send test email" button is a permanent stub

  bug
  Devlaner/devlane#403 · Filter by author tristansgray opened on Aug 29, 2026
  2

  

• [BUG] SMTP AUTH always attempted

  bug
  Devlaner/devlane#402 · Filter by author tristansgray opened on Aug 29, 2026

• [FEAT] Add the selection of a specific project in the analytics/work-item page

  enhancement
  Devlaner/devlane#397 · Filter by author LADsy8 opened on Jul 30, 2026

• Testing, CI, and tooling gaps from the round 3 audit

  Devlaner/devlane#392 · Filter by author cavidelizade opened on Jul 17, 2026
  1

• Round 3 audit: lower-severity correctness and abuse items

  Devlaner/devlane#391 · Filter by author cavidelizade opened on Jul 17, 2026

• More timezone date-shift bugs; configured timezones are never applied

  Devlaner/devlane#390 · Filter by author cavidelizade opened on Jul 17, 2026

• Analytics undercounts states matched by name instead of group

  Devlaner/devlane#389 · Filter by author cavidelizade opened on Jul 17, 2026

• Missing indexes on issue child tables

  Devlaner/devlane#388 · Filter by author cavidelizade opened on Jul 17, 2026

• Server-side validation gaps: priority, state group, string length

  Devlaner/devlane#387 · Filter by author cavidelizade opened on Jul 17, 2026

• Login lockouts are keyed on the victim email (targeted DoS)

  Devlaner/devlane#386 · Filter by author cavidelizade opened on Jul 17, 2026

• Disabling an OAuth provider does not block sign-in

  Devlaner/devlane#385 · Filter by author cavidelizade opened on Jul 17, 2026

• Estimate creation is not atomic

  Devlaner/devlane#384 · Filter by author cavidelizade opened on Jul 17, 2026

• Cycle Version field is unused, so concurrent cycle edits lost-update

  Devlaner/devlane#383 · Filter by author cavidelizade opened on Jul 17, 2026

• Project identifier has no uniqueness or format enforcement

  Devlaner/devlane#382 · Filter by author cavidelizade opened on Jul 17, 2026

• Intake Accept then Decline leaves the work item live

  Devlaner/devlane#381 · Filter by author cavidelizade opened on Jul 17, 2026

• Deleting a state/label/estimate in use leaves dangling references on issues

  Devlaner/devlane#380 · Filter by author cavidelizade opened on Jul 17, 2026

• Issue parent hierarchy has no cycle detection and AddIssueToEpic skips validation

  Devlaner/devlane#379 · Filter by author cavidelizade opened on Jul 17, 2026

• Cancelled issues inflate progress, so completion never reaches 100%

  Devlaner/devlane#378 · Filter by author cavidelizade opened on Jul 17, 2026

• Sticky note loses the last edit on unmount

  Devlaner/devlane#377 · Filter by author cavidelizade opened on Jul 17, 2026

• Soft-delete + plain UNIQUE causes re-add 500s on three more tables

  Devlaner/devlane#376 · Filter by author cavidelizade opened on Jul 17, 2026

• Notification fan-out runs synchronously in the request path

  Devlaner/devlane#375 · Filter by author cavidelizade opened on Jul 17, 2026

• Queue retry can duplicate emails and messages (no idempotency)

  Devlaner/devlane#374 · Filter by author cavidelizade opened on Jul 17, 2026

• SMTP send has no timeout, a stalled host stops all outbound email

  Devlaner/devlane#373 · Filter by author cavidelizade opened on Jul 17, 2026

• RabbitMQ publisher/consumer share one channel and never reconnect

  Devlaner/devlane#372 · Filter by author cavidelizade opened on Jul 17, 2026