fix(security): serialize SCIM replacement with account merges - #39

Closed

seonghobae wants to merge 22 commits into

mainfrom

fix/scim-merge-serialization-v2

Commits on Jul 29, 2026

fix(healthcheck): allow-list URL scheme and clear Semgrep dynamic-urllib finding
claude
committed
2fd34a9

Commits on Jul 30, 2026

fix(scim): refuse SCIM PUT that would resurrect a tombstoned merged duplicate
claude
committed
5e9c4eb

Commits on Jul 31, 2026

fix(merge): refuse explicit-link merge when the only tie is an unverified email
claude
committed
e95e87b
Revert "fix(merge): refuse explicit-link merge when the only tie is an unverified email"
claude
committed
4e2b9d2
fix(healthcheck): constrain redirect targets to HTTP(S), drop ftp/file handlers
claude
committed
ee085a3

Commits on Aug 3, 2026