Skip to content

[pull] dev from main - #372

Open
pull[bot] wants to merge 15 commits into
devfrom
main
Open

[pull] dev from main#372
pull[bot] wants to merge 15 commits into
devfrom
main

Conversation

@pull

@pull pull Bot commented Aug 28, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )


Note

High Risk
Touches production club infrastructure—payments-adjacent admin gates, event check-in concurrency, new GCS resume storage and secrets (METRICS_TOKEN, RESUME_BUCKET), and broad API/cache behavior changes that can affect tail latency and authz semantics.

Overview
This PR ships a member resume book (PDFs in Cloud Storage via RESUME_BUCKET, metadata in member_resume, upload/serve/ZIP routes outside tRPC) plus staff /admin/resumes and initiative applications with a required pitch and optional PDF resume. It also makes the public club project roster database-backed (club_project + seed script) and refreshes contributor docs, hooks, and ops config around those features.

Performance and tail latency get a large pass: CacheService.getOrSet (including caching null), narrower event check-in locking and unique-constraint races, concurrent hackathon email batches, DB pool warmup (warmPool), cheaper cache/security sweeps, and Prometheus/Grafana p99 histogram buckets, recording rules, and alerts. METRICS_TOKEN is wired in apphosting.yaml so /api/metrics can be scraped in production.

Other notable changes: admin isAdmin excludes volunteers (staff-only permissions), new admin growth analytics, audit tRPC router removed, repo githooks + expanded .gitignore, and CI pnpm setup unpinned to match packageManager (pnpm 12).

Reviewed by Cursor Bugbot for commit 9398d1c. Bugbot is set up for automated code reviews on this repo. Configure here.

@pull pull Bot locked and limited conversation to collaborators Aug 28, 2026
@pull pull Bot added the ⤵️ pull label Aug 28, 2026
@pull pull Bot assigned aamoghS Aug 28, 2026
@pull
pull Bot requested a review from aamoghS August 28, 2026 23:20
@github-actions github-actions Bot added the dependencies Pull requests that update a dependency file label Sep 6, 2026
aamoghS and others added 9 commits September 6, 2026 15:26
Stop decodeURIComponent from crashing Settings on a truncated filename, wait for the matching ZIP entry instead of the previous one, and keep volunteer accounts from counting as staff. Analytics now uses unexpired memberships and chronological bootcamp terms.
…sues-9d3d

Fix resume book, analytics, and volunteer-admin bugs
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

⤵️ pull dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant