Issues

• MCP bearer passthrough is broken: fastmcp strips the Authorization header

  area: security 🔐type: bug 🐛
  nebari-dev/apps-pack#72 · Filter by author jbouder opened on Oct 19, 2026

• Perform a UI review of apps-ui (a11y, UX states, motion, design tokens, performance)

  area: accessibility ♿️area: user experience 👩🏻‍💻audit 🔎
  nebari-dev/apps-pack#68 · Filter by author jbouder opened on Oct 19, 2026

• Support per-user access to apps (access.users)

  area: security 🔐area: user experience 👩🏻‍💻status: blocked ⛔️type: enhancement 💅🏼
  nebari-dev/apps-pack#67 · Filter by author jbouder opened on Oct 19, 2026

• Operations docs: runbook, alert rules, rollback procedure, CRD versioning policy

  area: documentation 📖audit 🔎
  nebari-dev/apps-pack#66 · Filter by author jbouder opened on Oct 19, 2026

• Code health: split the four god-files, generate client types from the CRD, untrack tsbuildinfo, add .dockerignore

  area: developer experience 👩🏻‍💻audit 🔎type: maintenance 🛠
  nebari-dev/apps-pack#65 · Filter by author jbouder opened on Oct 19, 2026

• Test depth: JWT validation tests, UI form/page tests, coverage floors, envtest, missing phase transitions

  area: testing ✅audit 🔎
  nebari-dev/apps-pack#64 · Filter by author jbouder opened on Oct 19, 2026

• Chart conventions: values.schema.json, helm-docs, _env/_validate helpers, read-only root FS, extraEnv, limits == requests

  audit 🔎type: maintenance 🛠
  nebari-dev/apps-pack#63 · Filter by author jbouder opened on Oct 19, 2026

• Security headers for the UI and app-pod nginx

  area: security 🔐audit 🔎type: enhancement 💅🏼
  nebari-dev/apps-pack#62 · Filter by author jbouder opened on Oct 19, 2026

• UI performance: route-level code splitting, a size budget, saner polling

  area: user experience 👩🏻‍💻audit 🔎
  nebari-dev/apps-pack#61 · Filter by author jbouder opened on Oct 19, 2026

• UI conventions: semantic tokens only, gated motion, registry drift in toast.tsx, app tokens outside the Nebari blocks

  area: design 🎨area: user experience 👩🏻‍💻audit 🔎
  nebari-dev/apps-pack#60 · Filter by author jbouder opened on Oct 19, 2026

• UI accessibility: label every control, associate validation errors, skip link and route focus, sort/pressed semantics

  area: accessibility ♿️area: user experience 👩🏻‍💻audit 🔎
  nebari-dev/apps-pack#59 · Filter by author jbouder opened on Oct 19, 2026

• UI resilience: error boundary, error states on list pages, 404 route, partial-failure reporting for bulk actions

  area: user experience 👩🏻‍💻audit 🔎type: bug 🐛
  nebari-dev/apps-pack#58 · Filter by author jbouder opened on Oct 19, 2026

• API model fidelity: preserve CRD-only fields on edit, cap inline sources on POST, fix restart/events/owner-label edge cases

  audit 🔎type: bug 🐛
  nebari-dev/apps-pack#57 · Filter by author jbouder opened on Oct 19, 2026

• Docs: Troubleshooting, CI/CD & Releasing and Upgrading pages; refresh PLAN.md and DESIGN.md; single operator pin

  area: documentation 📖audit 🔎
  nebari-dev/apps-pack#56 · Filter by author jbouder opened on Oct 19, 2026

• AGENTS.md / CLAUDE.md, re-sync the vendored nebari-ui skill, and map manifest runtime.resources to launch_app

  area: developer experience 👩🏻‍💻audit 🔎
  nebari-dev/apps-pack#55 · Filter by author jbouder opened on Oct 19, 2026

• Telemetry: expose operator metrics, ServiceMonitor, and the pack telemetry: contract

  audit 🔎type: enhancement 💅🏼
  nebari-dev/apps-pack#54 · Filter by author jbouder opened on Oct 19, 2026

• ArgoCD Application example and kubeconform over all examples and the rendered chart

  area: documentation 📖audit 🔎type: maintenance 🛠
  nebari-dev/apps-pack#53 · Filter by author jbouder opened on Oct 19, 2026

• Automate versioning: release-please, CHANGELOG, and a visible build version

  audit 🔎type: maintenance 🛠
  nebari-dev/apps-pack#52 · Filter by author jbouder opened on Oct 19, 2026

• Pin runtime versions once and read them everywhere; pin base images by digest

  area: dependencies 📦audit 🔎type: maintenance 🛠
  nebari-dev/apps-pack#51 · Filter by author jbouder opened on Oct 19, 2026

• Harden GitHub workflows: SHA-pin actions, least-privilege permissions, concurrency, actionlint/zizmor

  area: ci 👷🏽‍♀️audit 🔎type: maintenance 🛠
  nebari-dev/apps-pack#50 · Filter by author jbouder opened on Oct 19, 2026

• Adopt the org reusable workflows for image build/signing and chart release

  area: ci 👷🏽‍♀️audit 🔎type: maintenance 🛠
  nebari-dev/apps-pack#49 · Filter by author jbouder opened on Oct 19, 2026

• MCP safety: tool annotations, confirmation on destructive tools, session TTL, fenced untrusted output

  area: security 🔐audit 🔎type: enhancement 💅🏼
  nebari-dev/apps-pack#48 · Filter by author jbouder opened on Oct 19, 2026

• Add timeouts to every Kubernetes client call and retry PATCH/stop/start on resourceVersion conflicts

  audit 🔎type: bug 🐛
  nebari-dev/apps-pack#47 · Filter by author jbouder opened on Oct 19, 2026

• Structured JSON logging with request ids, and readiness probes that check dependencies

  audit 🔎type: enhancement 💅🏼
  nebari-dev/apps-pack#46 · Filter by author jbouder opened on Oct 19, 2026

• Add lint, format and type-check gates for every component (Biome, ruff + mypy, golangci-lint)

  area: ci 👷🏽‍♀️audit 🔎type: maintenance 🛠
  nebari-dev/apps-pack#45 · Filter by author jbouder opened on Oct 19, 2026