Repository Issue Activity (beta)

#8484 Add non-cloning ctx.GetOASDefinitionRaw accessor for read-only hot paths

#8483 Add opt-in request body passthrough to avoid buffering large uploads

#7883 GraphQL Federation: entity resolution fails for heterogeneous arrays where items have different nullable federated fields

#8560 Consolidate duplicate bug-related labels

#8558 Security disclosure: request for a private reporting channel

#8557 Security disclosure: request for a private reporting channel

#8539 Low-privilege MCP consumer bypasses Tool-Based Access Control via Content-Type case differential

#8538 Extend GraphQL Field-Based Permissions to support Input Types (⁠INPUT_OBJECT⁠)

#8191 Add `Retry-After` header and use `429` status code on quota-exceeded responses

#8489 Bug: maxLatencyWriter panics on hijacked connections with OpenTelemetry enabled

#6563 [TT-14116] Add support for AWS Secrets Manager as an external key value store

#6602 [TT-13226] Add XML error handling for application/soap+xml requests

#8192 [TT-17743] Emit RFC 9429-compliant rate limit headers

#4066 [TT-5486] panic: fatal error: concurrent map iteration and map write

#7273 [TT-17663] Analytics timestamp records request completion time, not arrival time

#6540 [TT-13404] ReverseProxy does not properly handle received GOAWAY on gRPC (or HTTP/2) connections

#8285 Bug: JSVM TykMakeHttpRequest and TykBatchRequest panic with nil pointer dereference during API reload (Race Condition)

#5131 [TT-9410] `track_404_logs` does not work when the control port is different than the listener port

#8321 OAS 3.1 import rejects default FastAPI/Pydantic output: lookahead `pattern` on Decimal fields fails RE2 compile (invalid or unsupported Perl syntax: (?!)

#8301 Bug: Critical data loss in RPC analytics purger when MDCB is unstable

#8245 [bug] Go-plugin intentional reject (4xx/5xx) emits unconditional level=error log spam — extend existing errpack pattern to fix

#1628 [TT-10473] feature: json schema return errors according to RFC 7807

#3011 TT-1954 Add option for adding error code to APIError object

#8242 goplugin: analytics RawResponse is a zero-value HTTP response for plugin-rejected requests (status >= 400)

#8231 Feature Request: Add Endpoints field to coprocess_session_state.proto