Issues

• security(deps): take the available fixes Snyk reports on the v1.16.0 tree — proxy-addr 2.0.8 and the frontend/backend image base packages

  dependenciesfrontendinfraP2-mediumrelease:v1.17.0security
  mavrovde/beaconfolio#457 · Filter by author mavrovde opened on Sep 18, 2026 · Security & hardening
  1

• security(scanners): Snyk Open Source and Snyk Container upload no SARIF — both jobs green while 5 High/Critical dependency findings and 21 image CVEs stay invisible

  ci-cdinfraP1-highrelease:v1.17.0security
  mavrovde/beaconfolio#456 · Filter by author mavrovde opened on Sep 18, 2026 · Security & hardening
  1

• check_no_pii: decide the scope for THIRD-PARTY names (employers, clients, recruiters) — the guard currently covers only the former owner's identifiers

  ci-cdP2-mediumrelease:v1.18.0security
  mavrovde/beaconfolio#454 · Filter by author mavrovde opened on Sep 18, 2026 · Security & hardening

• pre-merge-gate: the bypass PR comment is fire-and-forget and has never posted — a bypassed merge is invisible on the PR

  ai-configbugci-cdP1-highrelease:v1.17.0
  mavrovde/beaconfolio#453 · Filter by author mavrovde opened on Sep 18, 2026 · CI/CD, tooling & docs

• Two-way recruiter conversations on messengers: inbound webhooks, signature verification and threading into the #69 inbox

  backendenhancementP3-lowrelease:v1.20.0security
  mavrovde/beaconfolio#432 · Filter by author mavrovde opened on Sep 15, 2026 · Job-search CRM & recruiter flow

• security(sast): deep audit of the Bandit AND Snyk Code feeds — triage every finding, tune the rulesets

  ci-cdP3-lowrelease:v1.21.0securitytech-debt
  mavrovde/beaconfolio#363 · Filter by author mavrovde opened on Sep 13, 2026 · Security & hardening
  1

• feat(ai): pluggable AI-provider layer — OpenAI, Anthropic, xAI/Grok beside Gemini + Ollama; admin keys, per-feature routing

  backendenhancementfrontendP2-mediumrelease:v1.20.0
  mavrovde/beaconfolio#352 · Filter by author mavrovde opened on Sep 10, 2026 · AI providers integration

• feat(social): Apple account provider — Sign in with Apple, identity-link only (no syncable surface, said honestly)

  backendenhancementP3-lowrelease:v1.18.0
  mavrovde/beaconfolio#351 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): Google account provider — OIDC connect + feasibility-scoped surface sync (YouTube etc.)

  backendenhancementP3-lowrelease:v1.18.0
  mavrovde/beaconfolio#350 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• research(social): market analysis — rank networks by recruiter reach & effectiveness, re-prioritize #342–#348, find gaps

  architecturedocumentationenhancementP1-highrelease:v1.17.0
  mavrovde/beaconfolio#349 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): Monster — feasibility spike (no public individual API expected) + honest fallback card

  backendenhancementP3-lowrelease:v1.18.0
  mavrovde/beaconfolio#348 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): X/Twitter provider — OAuth2 PKCE connect + opt-in auto-share of published posts (free-tier-scoped)

  backendenhancementP3-lowrelease:v1.18.0
  mavrovde/beaconfolio#347 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): Facebook (Meta) provider — connect + feasibility-scoped sync/cross-post

  backendenhancementP3-lowrelease:v1.18.0
  mavrovde/beaconfolio#346 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): XING provider — feasibility spike + connect/sync if the current API permits it

  backendenhancementP3-lowrelease:v1.18.0
  mavrovde/beaconfolio#345 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): GitLab provider — OAuth connect + projects sync, incl. self-hosted instance URLs

  backendenhancementP3-lowrelease:v1.18.0
  mavrovde/beaconfolio#344 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): GitHub provider — reference integration: profile + repositories + contributions into a public Code section

  backendenhancementP3-lowrelease:v1.17.0
  mavrovde/beaconfolio#343 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): LinkedIn provider — OAuth connect + API-based profile/posts sync (scraper becomes fallback)

  backendenhancementP3-lowrelease:v1.17.0
  mavrovde/beaconfolio#342 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration

• feat(social): social-connect framework — admin Integrations page, OAuth flows, encrypted token store, provider abstraction

  backendenhancementfrontendP1-highrelease:v1.17.0security
  mavrovde/beaconfolio#341 · Filter by author mavrovde opened on Sep 10, 2026 · Social integration
  3

• feat(analytics): Google Analytics reports inside the admin panel — GA4 Data API, curated marketing reports, charts + CSV

  backendenhancementfrontendP2-mediumrelease:v1.21.0
  mavrovde/beaconfolio#340 · Filter by author mavrovde opened on Sep 10, 2026 · Job-search CRM & recruiter flow
  2

• Configurable initial admin username (ADMIN_USERNAME) — stop hardcoding 'admin' at seed time

  backendenhancementP3-lowrelease:v1.21.0security
  mavrovde/beaconfolio#332 · Filter by author mavrovde opened on Sep 10, 2026 · Security & hardening

• Establish the production deploy process: panel-free SSH flow on a MULTI-PROJECT Linux host — shared edge, real TLS, wiki runbook, agent-executable skill

  ci-cddocumentationinfraP1-highrelease:v1.19.0
  mavrovde/beaconfolio#310 · Filter by author mavrovde opened on Sep 7, 2026 · CI/CD, tooling & docs
  8

• Release roadmap: v1.16.0 reach → v1.17.0 social + gates → v1.18.0 providers → v1.19.0 platform core → v1.20.0 autopilot → v1.21.0 admin + deep security

  architecturedocumentationP1-high
  mavrovde/beaconfolio#265 · Filter by author mavrovde opened on Sep 6, 2026 · CI/CD, tooling & docs
  23

• Voice channel: browser voice messages → local Whisper transcription into the inbox; PSTN/call-escalation documented-deferred

  backendenhancementfrontendP2-mediumrelease:v1.19.0
  mavrovde/beaconfolio#264 · Filter by author mavrovde opened on Sep 6, 2026 · Job-search CRM & recruiter flow
  2

• Job discovery & application autopilot: multi-source position search, scored review queue, one-confirm prepared applications

  backendenhancementfrontendP2-mediumrelease:v1.20.0
  mavrovde/beaconfolio#251 · Filter by author mavrovde opened on Sep 5, 2026 · Job-search CRM & recruiter flow

• Package the Claude Code toolkit as a project plugin (mavrovde-toolkit) — deferred until the first template consumer

  ai-configenhancementP3-lowrelease:v1.20.0
  mavrovde/beaconfolio#244 · Filter by author mavrovde opened on Sep 5, 2026 · AI-assisted development & agents