Open-source contributions

Snapshot as of October 15, 2026 · 236 pull and merge requests and 86 issues in 94 repositories that are not mine, on GitHub and GitLab.

code & docs PRs and MRs merged: 130
listing PRs merged: 14
code PRs and MRs under review: 71
accepted answers in GitHub Discussions: 21

Projects with merged code, by main language: Go 14 Ruby 8 TypeScript 5 Rust 3 Shell 2 C++ 1 CSS 1 Go Template 1 HTML 1 JavaScript 1 MDX 1

Highlights

Merged GitHub: TriliumNext/Trilium #11448
Made TOTP codes single-use at login, as RFC 6238 requires, and added one time step of clock-drift tolerance, with tests.
Main language: TypeScript 162 lines added and 29 removed · 6 files 38.3k stars
Merged GitHub: NginxProxyManager/nginx-proxy-manager #5836
Tokens issued before a password change are now rejected, so resetting a password ends the sessions the old one opened; covered by a Cypress API test.
Main language: TypeScript 85 lines added and 1 removed · 4 files 34.4k stars
Merged GitHub: modelcontextprotocol/go-sdk #1274
Five merged changes to the official MCP Go SDK (#1255, #1268, #1269, #1273, #1274): four bring protocol-version negotiation, cancellation and pre-initialize handling in line with the specification, and one adds HasParams so middleware can tell whether a request carries params; each with tests.
Main language: Go 5 PRs · 663 lines added and 34 removed · 19 files 5.2k stars
Merged GitLab: gitlab-org/gitlab !255300
Revoked identities in a GPG key are no longer listed or accepted as verified emails, so a commit signed under a revoked UID stops showing as Verified; covered by specs with new GnuPG fixtures.
Main language: Ruby 797 lines added and 3 removed · 11 files 6.2k stars
Merged GitHub: henrygd/beszel #2327
Added TRUSTED_PROXY_IPS, an IP/CIDR allowlist so the trusted auth header is only honoured from the reverse proxy, and documented it.
Main language: Go 273 lines added and 0 removed · 3 files 26.2k stars
Merged GitHub: acmesh-official/acme.sh #7237
Fixed DNS manual mode reusing the previous certificate on renewal (and failing on first issuance) by polling the ACME order the current run created.
Main language: Shell 3 lines added and 0 removed · 1 file 47.8k stars
Merged GitHub: modelcontextprotocol/rust-sdk #1300
Float fields now decode through serde_json::Number, so a build that turns on serde_json's arbitrary_precision (the OpenAI Codex CLI is one) no longer drops tool results, progress notifications and sampling requests that carry a decimal; with tests. Released in rmcp 3.5.0.
Main language: Rust 371 lines added and 9 removed · 6 files 4k stars

Code and documentation

container-registry GitLab: 3 merged · 1 open

Open !2963 fix(notifications): stop the event queue busy-looping on a slow sink 134 lines added and 2 removed · 2 files under review
Merged !2962 fix(handlers): return 416 for a malformed chunk Content-Range header 57 lines added and 1 removed · 2 files merged in 6 h
Merged !2960 fix: fail at startup when TLS for the debug server cannot be set up 164 lines added and 15 removed · 3 files merged in 22 h
Merged !2958 fix: apply the configured TLS cipher suites 298 lines added and 40 removed · 5 files merged in 3 days

GitLab GitLab: 49 merged · 20 open

Open gitlab !262090 Fix a response body leak and a Clone panic in Workhorse httprs 118 lines added and 0 removed · 2 files under review
Merged gitlab !262085 Accept a request body of exactly the enforced limit in Workhorse 186 lines added and 4 removed · 3 files merged in 13 h
Open gitlab !261813 Answer refused tokens on the MCP endpoints with their challenge 342 lines added and 7 removed · 9 files under review
Open gitlab !261732 Declare the documented params on the forks and starred projects APIs 150 lines added and 0 removed · 3 files under review
Open gitlab !261675 Stop answering 500 to a deploy token before it expires 153 lines added and 6 removed · 6 files under review
Open gitlab !261673 Return granular_scopes when listing service account tokens 98 lines added and 3 removed · 6 files under review
Open gitlab !261671 Name non-deprecated permissions in fine-grained token errors 106 lines added and 4 removed · 7 files under review
Open gitlab !261569 Grant read_pipeline_job through the public access bypass 77 lines added and 0 removed · 6 files under review
Open gitlab !261547 Remove the avatar when deleting an achievement 84 lines added and 2 removed · 2 files under review
Open gitlab !261350 Show in the group API when an ancestor group requires 2FA 146 lines added and 1 removed · 9 files under review

Showing the 10 most recent. All my merge requests to gitlab-org/gitlab on GitLab

omnibus-gitlab GitLab: 1 merged · 1 open

Open !9929 Scrape gitlab-rails metrics under the relative URL root 57 lines added and 2 removed · 2 files under review
Merged !9896 Correct gitlab.rb examples that do not configure what they say 2 lines added and 5 removed · 3 files merged in 3 days

gitlab-pages GitLab: 1 merged · 1 open

Open !1358 Add Vary: Accept-Encoding to responses that negotiate compression 116 lines added and 0 removed · 6 files under review
Merged !1347 Keep acceptance test ports unique and fail fast on a failed start 51 lines added and 18 removed · 4 files merged in 5 days

cli GitLab: 3 merged · 2 open

Open !4112 fix(packages): verify the checksum of the newest file with the same name 47 lines added and 3 removed · 2 files under review
Merged !4111 fix(issue): keep --confidential and --iteration with --group 36 lines added and 0 removed · 2 files merged in 7 h
Merged !4109 fix(ci): stop tracing a skipped job 17 lines added and 0 removed · 2 files merged in 15 h
Merged !4070 feat(mr): respect --push=false with --fill 115 lines added and 5 removed · 3 files merged in 2 days
Open !4044 fix(api): refuse redirects that turn a write into a GET 250 lines added and 1 removed · 3 files under review

gitlab-shell GitLab: 1 merged · 1 open

Open !1615 Do not panic on a whitespace-only SSH_CONNECTION 34 lines added and 9 removed · 2 files under review
Merged !1606 Log the user and project on the gitlab-sshd access line 117 lines added and 30 removed · 15 files merged in 2 days

gitlab-qa GitLab: 1 merged

Merged !1474 Remove the Chaos scenario 0 lines added and 142 removed · 3 files merged in 16 h

GitLab Go client GitLab: 18 merged · 5 open

Merged !3139 fix(search): accept nil SearchOptions in every search method 213 lines added and 28 removed · 2 files merged in 16 h
Open !3085 feat: add the fields GitLab sends and accepts that ten structs miss 536 lines added and 55 removed · 14 files under review
Open !3082 fix(commits): decode the lists GitLab sends in extended_trailers 95 lines added and 18 removed · 2 files under review
Merged !3067 ci: pass the integration test token as GITLAB_TOKEN_TEST 1 line added and 0 removed · 1 file merged in 6 h
Open Details withheld 664 lines added and 0 removed · 7 files under review
Open !3065 feat(client): add option to treat nil options pointers as no options 228 lines added and 2 removed · 5 files under review
Open !3063 feat: fix the defects and gaps recorded against the GitLab API 10,714 lines added and 1,122 removed · 140 files under review
Merged !3053 feat(snippets): add the four fields the snippet entity sends to Snippet 32 lines added and 6 removed · 3 files merged in 1 day
Merged !3052 feat(packages): add ConanPackageName, CreatorID and Versions to Package 186 lines added and 0 removed · 3 files merged in 15 days
Merged !3051 feat(namespaces): add the eight fields the namespace entity sends to Namespace 60 lines added and 29 removed · 2 files merged in 5 days

Showing the 10 most recent. All my merge requests to gitlab-org/api/client-go on GitLab

openbao GitLab: 3 merged

Merged !84 Print the HTTPRoute URL in NOTES.txt without an Ingress 71 lines added and 0 removed · 2 files merged in 1 h
Merged !83 Print a working OpenBao URL in NOTES.txt without an Ingress 125 lines added and 7 removed · 2 files merged in 4 h
Merged !82 Accept a memory target in the autoscaling values 88 lines added and 2 removed · 4 files merged in 3 days

terraform-provider-gitlab GitLab: 2 merged · 2 open

Merged !3334 Remove the Datadog, Jenkins and Harbor project integrations from state on 404 211 lines added and 17 removed · 7 files merged in 2 days
Open !3333 Send gitlab_group push rules set to false, 0 or an empty string on creation 419 lines added and 27 removed · 3 files under review
Merged !3332 Read every page of merge requests in the gitlab_project_merge_requests data source 55 lines added and 5 removed · 2 files merged in 13 h
Open !3321 Read every page of system hooks in the gitlab_system_hooks data source 51 lines added and 6 removed · 2 files under review

prometheus-client-mmap GitLab: 4 merged

Merged !304 Render summaries in the text format from their value objects 80 lines added and 56 removed · 6 files merged in 4 h
Merged !303 Pass the registry to the text format in Rack::Exporter 17 lines added and 4 removed · 2 files merged in 5 h
Merged !299 Render histograms in the text format from their value objects 52 lines added and 22 removed · 3 files merged in 1 day
Merged !298 Reject le on histograms and quantile on summaries 24 lines added and 4 removed · 3 files merged in 1 day

gitlab-vscode-extension GitLab: 1 merged

Merged !3399 fix: keep pipeline stages and jobs in place when a job is retried 123 lines added and 5 removed · 5 files merged in 10 h

gitlab-triage GitLab: 1 merged · 1 open

Merged !421 Read absent RateLimit headers as unknown, not as 0 and the epoch 169 lines added and 31 removed · 8 files merged in 2 days
Open !419 Delete each resource through the project it belongs to 172 lines added and 1 removed · 3 files under review

triage-ops GitLab: 2 merged

Merged !4443 Request a technical writer when ML labelling adds Technical Writing 62 lines added and 23 removed · 3 files merged in 2 days
Merged !4439 Fix doc references to removed files and broken relative links 13 lines added and 19 removed · 5 files merged in 3 days

toolkit GitLab: 2 merged

Merged !25 Accept a Contribute header in readme-check 20 lines added and 11 removed · 2 files merged in 2 days
Merged !24 Read every page of pipeline jobs in the ensure-job checks 22 lines added and 2 removed · 2 files merged in 4 days

fargate GitLab: 2 merged

Merged !107 Create the task metadata directory when it does not exist 167 lines added and 3 removed · 6 files merged in 2 days
Merged !106 Use the default for each invalid task wait setting 134 lines added and 77 removed · 4 files merged in 4 days

scrood GitLab: 2 merged

Merged Details withheld 4 lines added and 4 removed · 4 files merged in 22 h
Merged !29 fix(pkg): reject `all:` on selector predicates in Suite.Validate 142 lines added and 0 removed · 3 files merged in 1 day

gitlab GitLab: 1 merged · 1 open

Open !5465 Scrape Praefect metrics from the Pods, not the Service 96 lines added and 6 removed · 2 files under review
Merged !5461 Correct chart defaults and keys in the parameter tables 27 lines added and 28 removed · 10 files merged in 2 days

gitlab-development-kit GitLab: 1 merged

Merged !6250 Stop an unreachable Sentry from failing GDK commands or printing errors 54 lines added and 3 removed · 2 files merged in 3 days

design.gitlab.com GitLab: 1 merged · 1 open

Open !6451 Check every SVG in gitlab-svgs for a viewBox 76 lines added and 49 removed · 49 files under review
Merged !6446 Add a footer slot to GlDashboardPanel 111 lines added and 0 removed · 6 files merged in 4 days

ruby GitLab: 1 merged

Merged !14 Keep the RSpec reports when the test suite fails 3 lines added and 1 removed · 1 file merged in 2 days

gitlab-glfm-markdown GitLab: 1 merged

Merged !146 Document the render options the gem actually reads 11 lines added and 1 removed · 1 file merged in 2 days

gitlab-agent GitLab: 1 merged

Merged !4654 Cap retry backoff before converting it to a duration 47 lines added and 4 removed · 2 files merged in 2 days

knowledge-graph GitLab: 4 merged

Merged !2746 fix(ci): stop pinned-version-check failing with no merge base 9 lines added and 2 removed · 1 file merged in 19 h
Merged !2691 fix(dsl): require rel_types in the path_finding schema 46 lines added and 6 removed · 6 files merged in 3 days
Merged !2651 docs(dsl): document outgoing as the default neighbors direction 22 lines added and 4 removed · 5 files merged in 7 days
Merged !2650 docs(dsl): state that path_finding always requires rel_types 27 lines added and 19 removed · 8 files merged in 4 days

MCP Go SDK GitHub: 6 merged · 2 open

Merged #1360 mcp: retire a listen's subscriptions only while they are its own 207 lines added and 6 removed · 2 files merged in 1 day
Merged #1274 mcp: record the negotiated protocol version on every path that records one 167 lines added and 12 removed · 6 files merged in 6 days
Merged #1273 mcp: refuse a call on a legacy session before initialize 166 lines added and 4 removed · 2 files merged in 2 days
Merged #1269 mcp: add HasParams so middleware can tell whether params are present 88 lines added and 3 removed · 5 files merged in 22 h
Merged #1268 mcp: classify the per-request protocol version by membership 140 lines added and 8 removed · 3 files merged in 22 h
Open #1267 mcp: send no response for a cancelled request on 2026-07-28 stdio sessions 411 lines added and 9 removed · 6 files under review
Open #1266 mcp: choose the interaction pattern from the negotiated protocol version 381 lines added and 10 removed · 4 files under review
Merged #1255 mcp: carry a cancelled notification's reason as the request's cancel cause 102 lines added and 7 removed · 3 files merged in 2 days

gitaly GitLab: 1 merged

Merged !9349 remote: Accept remotes with other refs ending in HEAD 119 lines added and 18 removed · 2 files merged in 1 day

OpenCloud GitHub: 1 merged · 1 open

Open opencloud #3620 fix(search): honor the gRPC client TLS mode in the index command 119 lines added and 21 removed · 6 files under review
Merged web-extensions #575 docs(maps): explain where the location data comes from 4 lines added and 0 removed · 1 file merged in 4 days

webpage GitHub: 1 merged

Merged #301 Fix the Olimex udev rules: drop the 0x prefix 4 lines added and 4 removed · 1 file merged in 5 days

MCP Rust SDK GitHub: 1 merged

Merged #1300 fix(model): decode float fields through serde_json::Number 371 lines added and 9 removed · 6 files merged in 1 day

Renovate GitHub: 1 merged

Merged #45901 docs(hostRules): replace the stale matchHost port warning 5 lines added and 4 removed · 1 file merged in 1 h

Beszel GitHub: 2 merged

Merged beszel #2327 feat(hub): add TRUSTED_PROXY_IPS allowlist for TRUSTED_AUTH_HEADER 273 lines added and 0 removed · 3 files merged in 6 days
Merged beszel-docs #82 docs: document TRUSTED_PROXY_IPS for the trusted auth header 9 lines added and 0 removed · 1 file merged in 6 days

Trilium Notes GitHub: 2 merged

Merged #11448 TOTP: accept each code only once, and one time step of clock drift 162 lines added and 29 removed · 6 files merged in 12 h
Merged #11368 Markdown: register slash commands as completion sources instead of a second autocompletion extension 265 lines added and 202 removed · 2 files merged in 11 h

Podman GitHub: 1 merged

Merged #29730 Document rootless bind-mount access through an unmapped parent 24 lines added and 0 removed · 1 file merged in 7 days

acme.sh GitHub: 1 merged

Merged #7237 Poll the order this run created, not the one the previous cert came from 3 lines added and 0 removed · 1 file merged in 4 days

Nginx Proxy Manager GitHub: 1 merged

Merged #5836 Invalidate tokens issued before a password change 85 lines added and 1 removed · 4 files merged in 2 days

OpenModScan GitHub: 1 merged

Merged #74 Wire --version and --help flags to existing display functions 51 lines added and 3 removed · 6 files merged in 2 days

Portainer MCP GitHub: 1 merged

Merged #45 feat: add local (non-edge) Docker Compose stack management tools 2,450 lines added and 2 removed · 17 files merged in 1 day

al-folio GitHub: 3 merged

Merged #1339 CV Restyled 350 lines added and 14 removed · 7 files merged in 83 days
Merged #481 Better SEO, OpenGraph, schema.org and clean generated code 899 lines added and 605 removed · 31 files merged in 30 days
Merged #436 Update deploy.yml 1 line added and 1 removed · 1 file merged in 2 days

YunoHost coturn GitHub: 1 merged

Merged #17 Minor bug cron_coturn 1 line added and 1 removed · 1 file merged in 8 h

gitlab-lsp GitLab: 1 open

Open !4437 fix(fetch): decode UTF-8 characters split across stream chunks 105 lines added and 3 removed · 4 files under review

gitlab-runner GitLab: 4 open

Open !7635 Fix corrupt parallel cache and artifact downloads when a server ignores Range 367 lines added and 3 removed · 4 files under review
Open !7630 Define each feature flag once in the job environment 148 lines added and 9 removed · 4 files under review
Open !7628 Fix Docker executor native steps connection ending on steps proxy stderr 163 lines added and 11 removed · 4 files under review
Open !7554 Accumulate repeated --docker-pull-policy and --kubernetes-pull-policy register flags 84 lines added and 3 removed · 2 files under review

gitlab-zoekt-indexer GitLab: 1 open

Open !1085 fix(cleaner): keep the shards of a repository indexed after its delete 283 lines added and 0 removed · 4 files under review

gitlab-dangerfiles GitLab: 1 open

Open !337 Remove draft markers only at the start and end of a title 59 lines added and 1 removed · 4 files under review

gitlab-grape-openapi GitLab: 1 open

Open !77 Document a failure entry's entity as its response content 330 lines added and 41 removed · 11 files under review

fleeting GitLab: 3 open

Open !150 Wait for instances to run before the integration command step 126 lines added and 5 removed · 2 files under review
Open !149 Use the default connector timeout when ConnectInfo leaves Timeout at zero 182 lines added and 1 removed · 7 files under review
Open !148 Keep the integration scale-up within the provisioner's maximum 38 lines added and 5 removed · 2 files under review

docker-machine GitLab: 1 open

Open !201 amazonec2: send no MaxPrice for an empty spot price 79 lines added and 5 removed · 4 files under review

opentofu GitLab: 1 open

Open !577 Let fetch-mr-plan read GITLAB_TOFU_MR_PLAN_TOKEN and document it for MR comments 68 lines added and 16 removed · 4 files under review

gemnasium-db GitLab: 6 open

Open Details withheld 5 lines added and 6 removed · 1 file under review
Open Details withheld 29 lines added and 30 removed · 4 files under review
Open Details withheld 4 lines added and 4 removed · 1 file under review
Open Details withheld 4 lines added and 4 removed · 1 file under review
Open Details withheld 71 lines added and 78 removed · 16 files under review
Open Details withheld 35 lines added and 52 removed · 7 files under review

semver_dialects GitLab: 1 open

Open !130 Read zero-padded version segments as decimal numbers 64 lines added and 6 removed · 9 files under review

glci GitLab: 1 open

Open !222 fix(daemon): Reconcile a failed attempt's trace before the retry 273 lines added and 5 removed · 4 files under review

dependency-scanning GitLab: 3 open

Open !639 yarn: Skip a berry lock file with a nil definition 171 lines added and 9 removed · 5 files under review
Open !638 Anchor the Python MANIFEST pattern in .gitignore to the root 1 line added and 1 removed · 1 file under review
Open !637 swift: Skip a lock file whose pins is not a list 48 lines added and 2 removed · 3 files under review

gobco GitHub: 2 open

Open #43 Type-check black box tests as go test builds them 288 lines added and 6 removed · 8 files under review
Open #41 Honor build constraints and build tags when selecting the files to instrument 247 lines added and 10 removed · 12 files under review

go GitHub: 1 open

Open #81871 go/types, types2: fix data race in isComplete on imported types 114 lines added and 0 removed · 4 files under review

Kong GitHub: 1 open

Open #15019 fix(dns): do not cache answers with a zero TTL 56 lines added and 2 removed · 3 files under review

webdav-client GitHub: 1 open

Open #418 fix: keep the whole reason phrase in stat errors 58 lines added and 2 removed · 3 files under review

Glance GitHub: 1 open

Open #1075 Fall back to the feed URL when a feed's own link is relative 74 lines added and 18 removed · 2 files under review

Electron asar GitHub: 1 open

Open #464 fix: extract archives with 2 GiB or more of data 226 lines added and 57 removed · 3 files under review

go-selfupdate GitHub: 1 open

Open #58 fix: replace unmaintained golang.org/x/crypto/openpgp with ProtonMail fork 19 lines added and 8 removed · 5 files under review

Not merged (17), counted only

Distribution and listings

Where my own projects are published: package managers, registries and curated lists.

Project	Published in
phonometry	conda-forge package manager conda-forge/staged-recipes Under review
	awesome-python-scientific-audio curated list faroit/awesome-python-scientific-audio Merged
	awesome-acoustic curated list Nitnelav/awesome-acoustic Merged
gitlab-mcp-server	Docker MCP Registry registry docker/mcp-registry Under review
	winget package manager microsoft/winget-pkgs 8 merged
	awesome-mcp-servers curated list punkpeye/awesome-mcp-servers Merged
libgen-mcp	Docker MCP Registry registry docker/mcp-registry Under review
libgen-mcp	winget package manager microsoft/winget-pkgs Under review
mikroscope	awesome-mikrotik curated list jlbyh2o/awesome-mikrotik Under review
cs-routeros-bouncer	awesome-crowdsec curated list wolffcatskyy/awesome-crowdsec Merged
cs-routeros-bouncer	CrowdSec Hub registry crowdsecurity/hub 2 merged

Accepted answers in GitHub Discussions (21)

21 accepted out of 87 discussions answered in 64 repositories. Each one links to its thread; who accepted it is never published.

Issues reported (86: 52 open, 34 closed)

MCP Go SDK 8 open · 6 closed
GitLab 9 open
gitlab-runner 6 open
container-registry 1 open · 2 closed
cli 1 open · 2 closed
gobco 2 open
potato-mesh 2 closed
meshmonitor 2 closed
gitlab-shell 1 open · 1 closed
terraform-provider-gitlab 2 closed
prometheus-client-mmap 2 closed
GitLab Go client 2 open
knowledge-graph 2 closed
bats-core 1 open
mcp-marketplace 1 open
go-selfupdate 1 open
DNN-HA 1 open
android 1 open
ios 1 open
rest-api-description 1 open
ecko 1 open
metatext 1 open
elasticsearch8_ynh 1 open
codex 1 open
asu 1 open
webdav-client 1 open
csv-to-md-table-action 1 open
Kong 1 open
htmlbeautifier 1 open
MCP Rust SDK 1 closed
acoustic-toolbox 1 closed
Portainer MCP 1 closed
CrowdSec Hub 1 closed
homeassistant-edata 1 closed
pixelfed 1 closed
pixelfed_ynh 1 closed
YunoHost coturn 1 closed
repository-mirroring-action 1 closed
al-folio 1 closed
papercite 1 closed
triage-ops 1 open
gitlab-lsp 1 open
gitlab-pages 1 open
contributors-gitlab-com 1 open
labkit 1 open
openbao 1 closed
toolkit 1 closed
gitlab-dangerfiles 1 open

Achievements on GitHub and GitLab

GitHub

Pull Shark Gold, max tier
Galaxy Brain Silver Accepted answers in GitHub Discussions (21)
Pair Extraordinaire Silver 35 of 48 (estimated)
Starstruck Base 125 of 128 (estimated)

Only these GitHub achievements are shown. Hidden by design: Quickdraw, YOLO, Arctic Code Vault Contributor and Public Sponsor.

GitLab

Level 4 Contributor awarded Oct 2026

Frequently asked questions

Which open-source projects has José Manuel Requena Plens contributed to?

Projects he does not maintain, on GitHub and GitLab, where his code or documentation was merged: among them GitLab and its official Go client, the official MCP SDKs for Go and Rust, Trilium Notes, Nginx Proxy Manager, Beszel, acme.sh, Podman and Renovate. The page lists his merged and open code and documentation pull and merge requests by project, each with its state and size, up to the ten most recent per project with a link to the rest; the ones that were not merged are counted but not listed.

Which of these contributions stand out?

Security fixes that landed upstream: single-use TOTP codes in Trilium Notes, sessions ended by a password change in Nginx Proxy Manager, revoked GPG identities no longer accepted as verified in GitLab, and a trusted-proxy allowlist in Beszel. Also protocol fixes in the official MCP SDKs for Go and Rust.

Where do these figures come from?

From GitHub and GitLab themselves: the GitHub side is collected by ghchronicle, his own open-source collector, and the GitLab side from the GitLab API. Every listed row except those marked "Details withheld" links to its pull or merge request, so the figures can be checked at the source, and private repositories never appear.