All pull requests

Pull requests

• Merging to release-5.13.3: [TT-18285] Bump otlptrace exporters to v1.46.0 to fix CVE-2026-81870 (#8745)

  needs-manual-cherry-pick
  #8748·probelabs[bot] opened Oct 1, 2026Bot·

  ·
  1

• Merging to release-5.15: [TT-18285] Bump otlptrace exporters to v1.46.0 to fix CVE-2026-81870 (#8745)

  #8747·probelabs[bot] opened Oct 1, 2026Bot·

  ·
  4

• Merging to release-5.15.1: [TT-18285] Bump otlptrace exporters to v1.46.0 to fix CVE-2026-81870 (#8745)

  #8746·probelabs[bot] opened Oct 1, 2026Bot·

  ·
  4

• [TT-18486] Access conditions on named JSON body fields

  #8735·mativm02 opened Sep 28, 2026Contributor·

  ·
  7

• fix(oas): skip schema patterns the RE2 engine cannot compile

  #8731·Tyagiquamar opened Sep 27, 2026·

  ·
  1

  1

• [TT-17727] Dynamic discovery and round-robin load balancing of gRPC upstream pods

  #8716·MFCaballero opened Sep 21, 2026Contributor·

  ·
  22

• TT-18236 Gateway register information

  #8712·tbuchaillot opened Sep 17, 2026Contributor·

  ·
  9

• [TT-17576] refactor: make policy.Apply readable (stacked on #8562)

  #8708·shults opened Sep 17, 2026Contributor·

  ·
  4

• [TT-16298] unable-to-perform-get-update-delete-operations-in-api-which-is-created-with-unallowed-characters-in-id

  #8707·dawidgoracl opened Sep 16, 2026Contributor·

  ·
  5

• [TT-17103] Add Kafka manual acknowledgment and offset controls

  #8705·buger opened Sep 15, 2026Member·

  ·
  3

• fix(otel): do not set span error status on ErrResponseSucceed

  #8703·Tyagiquamar opened Sep 13, 2026·

  ·
  1

  2

• TT-18031: Propagate MCP cancellation to REST sources O#24

  deps-reviewed
  #8702·andrei-tyk opened Sep 13, 2026Contributor·

  ·
  5

• TT-18009: complete MCP OAuth broker identity and lifecycle O#15

  deps-reviewed
  #8701·andrei-tyk opened Sep 13, 2026Contributor·

  ·
  5

• TT-18023: verify REST upstream 404 tool result semantics O#21

  deps-reviewed
  #8700·andrei-tyk opened Sep 12, 2026Contributor·

  ·
  4

• TT-18016: Protect source-OAS header projection O#19

  deps-reviewed
  #8699·andrei-tyk opened Sep 12, 2026Contributor·

  ·
  4

• TT-18021: correct sampling createMessage capability mapping O#14

  deps-reviewed
  #8698·andrei-tyk opened Sep 12, 2026Contributor·

  ·
  5

• [TT-18228] Migrating a Tyk Classic API to OAS can silently drop overlapping regex-based endpoints

  #8696·shults opened Sep 11, 2026Contributor·

  ·
  8

• [CI]: Fix issue with cache

  #8688·kofoworola opened Sep 10, 2026Contributor·

  ·
  6

  

• fix: don't mark successful plugin responses as span errors

  #8685·znnnnnnn-wil opened Sep 9, 2026·

  ·
  1

  1

• [TT-10233] 401 from an auth plugin is treated as an unknown error, not an auth error

  #8683·dawidgoracl opened Sep 8, 2026Contributor·

  ·
  17

• [POC - do not merge] TT-18139: tyk release pipeline via reusable workflow

  #8682·konrad-sol opened Sep 7, 2026Contributor·

  ·
  6

• TT-18012: fail closed on malformed MCP discovery responses O#12

  deps-reviewed
  #8681·andrei-tyk opened Sep 6, 2026Contributor·

  ·
  9

• TT-18011: complete bounded modern native MCP ingress validation O#10

  deps-reviewed
  #8680·andrei-tyk opened Sep 6, 2026Contributor·

  ·
  13

• TT-18008: allocate and preserve modern MCP Gateway errors O#8

  deps-reviewed
  #8679·andrei-tyk opened Sep 6, 2026Contributor·

  ·
  10

• TT-18010: share MCP protocol context and analytics O#6

  deps-reviewed
  #8678·andrei-tyk opened Sep 6, 2026Contributor·

  ·
  12