Dandelion is a fair source project. View the code on Github

Commits on Jul 30, 2026
7b6cd3b

♻️ Refactor OpenRouter config to use unified CHAT_DEFAULTS

Replace separate INTELLIGENCE_LEVELS and MODELS constants with a single CHAT_DEFAULTS hash. Decouple reasoning config from model selection by accepting reasoning_effort parameter directly. Update default model to openai/gpt-5.6-luna with high reasoning effort.

ac50985

🔒️ Switch optionship/teamship/shift/subscription create routes from GET to POST

Prevent accidental or cross-site creation of optionships, teamships, shifts, and post subscriptions via prefetch or link scanners.

0910a2b

🔒️ Switch mapplication process route from GET to POST

Prevent accidental or cross-site accept/pause of gathering applications via prefetch or link scanners.

e7b6470

🔒️ Switch Stripe and ATProto disconnect routes from GET to POST

Prevent accidental or cross-site triggering of payment/connection disconnects and clearing the Stripe customer id via prefetch or link scanners.

bd6f49e

🔒️ Switch order restore and clear_answers routes from GET to POST

Prevent accidental or cross-site triggering of restore, restore_and_complete, and clear_answers via prefetch or link scanners.

83803e0

🔒️ Switch gathering membership mutation routes from GET to POST

Prevent accidental or cross-site triggering of leave, remove, admin toggles, and sidebar visibility changes via prefetch or link scanners.

83bf63d

🐛 Use ticket event/account in notifications when order is absent

45a7645

🐛 Treat missing variable ticket prices as zero

Float(nil) was raising TypeError on purchase when a price field was blank; skip zero quantities and coerce invalid/missing prices to 0 instead.

Commits on Jul 29, 2026
1557677

🔒️ Switch ticket/feedback/comment send routes from GET to POST

Prevent accidental or cross-site triggering of resend and send actions via prefetch or link scanners; views opt in with data-method="post".

641d879

♻️ Move Sentry, Dragonfly, and frontend deps into config/

6d03390

🔥 Replace TestJob with Kernel.delay.raise

a2e889e

♻️ Move calendar import sync into an Organisation concern

b7d4e84

♻️ Move authentication helpers into lib/auth

675c955

♻️ Consolidate error reporting into Sentry config

eff8e63

♻️ Move Stripe money helpers into lib/money

e5e19e7

🗑️ Remove unused narration helper

73744eb

♻️ Move security helpers into lib/security

5e11263

♻️ Move OpenRouter and MCP into lib/ai

67da1d6

♻️ Move Mailgun/email helpers into lib/mail

feaf973

♻️ Move Atproto client helpers into lib/atproto