diegosouzapw
5a6787f0f9
fix(docs): document FORGOTTEN_SIBLING_MAX_CHANGED in .env.example and ENVIRONMENT.md
...
Refs #9673
2026-08-07 01:20:15 -03:00
diegosouzapw
33f0336d39
fix(pr): rename changelog.d/feats/ to features/ and fix fragment format
...
- Rename changelog.d/feats/ -> changelog.d/features/ (validator rejects 'feats')
- Fix 9415 fragment: body must start with a markdown bullet
Refs #9673
2026-08-07 01:04:57 -03:00
diegosouzapw
976c8fa054
Merge remote-tracking branch 'origin/release/v3.8.50' into babysit/pr-9673
2026-08-06 23:42:35 -03:00
Diego Rodrigues de Sa e Souza
9995bc4893
fix(security): anchor hostname comparison in Adobe Firefly login ( #778 )
...
Parse and compare hostname with dot-anchored endsWith instead of substring includes. Closes code-scanning #778 .
2026-08-06 23:12:54 -03:00
Diego Rodrigues de Sa e Souza
c9a3361e5a
fix(translator): add case-insensitive fallback for upstream tool call name lookups ( #9575 )
...
Closes #9575
2026-08-06 22:58:51 -03:00
Diego Rodrigues de Sa e Souza
c9debe92bd
fix(translator): restore original tool name casing in Gemini response translators ( #9568 )
...
Closes #9568
2026-08-06 22:55:50 -03:00
Diego Rodrigues de Sa e Souza
fad3539a69
fix(sse): replace timer-based waits with polling to fix flaky chatCore/SSE tests under CI load ( #9567 )
...
Closes #9567
2026-08-06 22:55:44 -03:00
Diego Rodrigues de Sa e Souza
919f9acd80
fix(build): lazy-resolve module-level fs paths to avoid Turbopack NFT whole-source trace ( #9560 )
...
Closes #9560
2026-08-06 22:55:38 -03:00
Diego Rodrigues de Sa e Souza
8a573c56e3
fix(proxy): NO_PROXY now bypasses context-level proxy in resolveProxyForRequest ( #9551 )
...
Closes #9551
2026-08-06 22:55:33 -03:00
Diego Rodrigues de Sa e Souza
f338363cd3
fix(model): add aq alias for amazon-q provider so parseModel resolves it instead of falling back to OpenAI ( #9550 )
...
Closes #9550
2026-08-06 22:55:27 -03:00
Diego Rodrigues de Sa e Souza
28dc5af7ba
fix(providers): strip provider prefix in getModelTargetFormat to route GPT-5.6 models to /v1/responses ( #9545 )
...
Closes #9545
2026-08-06 22:55:21 -03:00
Diego Rodrigues de Sa e Souza
616175a93e
fix(search): mark searxng-search as fallbackOnly to prevent auto-select without instance ( #9543 )
...
Closes #9543
2026-08-06 22:55:16 -03:00
Diego Rodrigues de Sa e Souza
e4e0c254ea
fix(db): add transient-error retry to corruption probe to prevent data loss under concurrent load ( #9541 )
...
Closes #9541
2026-08-06 22:55:10 -03:00
Diego Rodrigues de Sa e Souza
2e9abab944
fix(backend): map cache tokens in OpenAI-to-Claude non-streaming usage translation ( #9536 )
...
Closes #9536
2026-08-06 22:55:05 -03:00
Diego Rodrigues de Sa e Souza
4cc9cf8123
fix(test): prevent flaky modelsDevSync timer assertions by serializing test execution within the file ( #9534 )
...
Closes #9534
2026-08-06 22:54:59 -03:00
Diego Rodrigues de Sa e Souza
6c3aea6ba6
fix(ci): include combo-matrix tests in test-integration job ( #9531 )
...
Closes #9531
2026-08-06 22:54:53 -03:00
Diego Rodrigues de Sa e Souza
9edefd4572
fix(oauth): Kiro import token endpoint no longer overwrites existing connection when using shared cached OIDC clientId ( #9435 )
...
Closes #9435
2026-08-06 22:54:48 -03:00
Diego Rodrigues de Sa e Souza
8fbd331567
fix(compression): drop orphan custom_tool_call/local_shell_call/apply_patch_call on compaction restore ( #8946 )
...
Closes #8946
2026-08-06 22:54:42 -03:00
diegosouzapw
6c5329bcfe
feat(ci): add forgotten-sibling-tests quality gate ( #9530 )
...
New CI policy gate that detects when a PR changes source file Y but the test siblings of Y's consumers are not in the same diff. Prevents the 'forgotten sibling test' pattern (7 documented occurrences in PR #9529 ).
- Extracts shared import resolution library (resolveImport, sourceDepsOf) from build-test-impact-map.mjs
- Creates check-forgotten-sibling-tests.mjs gate with consumer-walk logic
- Adds forgotten-sibling-allowlist.json for false positive mitigation
- Wires into pr-test-policy CI job and adds npm script
- Documents in QUALITY_GATES.md
- 17 TDD unit tests for isSourceFile, resolveBase, testSiblingOf, isAllowlisted, findConsumers
2026-08-06 21:53:00 -03:00
小妍儿 ✨
5f471181fa
refactor(db): add combo repository boundary ( #8757 )
...
Validated in local merge-train (tomni-proxmox-113)
2026-08-06 19:11:57 -03:00
Lucas Mellos Carlos
ebdbe3a38f
feat(mcp): add omniroute_create_combo tool ( #8925 )
...
Validated in local merge-train (tomni-proxmox-113)
2026-08-06 19:11:07 -03:00
diegosouzapw
535c75b60a
fix(security): parse and compare hostname instead of substring match in Adobe Firefly login
...
Replace request.url.includes(FIREFLY_3P_HOST_SUFFIX) with parsed-hostname
comparison (anchored endsWith), closing CodeQL alert #778 .
The old substring check could be bypassed by an attacker-controlled page
visited during the browser login window — a URL like
'https://evil.com/firefly-3p.ff.adobe.io ' would pass the gate and its
Bearer token would be captured as the Adobe credential.
Practical severity is low (only during operator-initiated, time-boxed
login on a temp-profile browser), but the fix is one line and matches
the dot-anchored idiom used in docker/devin-bridge/network-guard/.
Closes code-scanning #778 .
2026-08-06 19:09:49 -03:00
Adriano de Oliveira Ferreira
7f36b192f0
fix(compression): bound session-dedup suffix-block scan to prevent OOM ( #8438 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:09:05 -03:00
Austin Liu
1e55fbd20b
[v3.8.50] fix(open-sse): filter non-numeric values in comboTargetLimits before min calculation ( #8774 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:08:59 -03:00
Andrew B.
7bb4bfc4fb
fix(combo): fail-fast concurrency gate and execute-mode overflow ( #8890 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:08:51 -03:00
Andrew B.
0e1f40ed1f
feat(oauth): add Raycast Pro provider with local auto-import ( #8895 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:08:44 -03:00
Lucas Israel
2a94cbfe14
feat(executors): add isolated Claude Code bridge over Devin ACP ( #8914 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:08:37 -03:00
rinseaid
813dbb6e03
fix(vision): prevent bridge streaming and normalize OMP effort ( #8945 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:08:31 -03:00
Aman
d69f521491
fix: reconcile active live model catalogs ( #9294 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:08:23 -03:00
Andrew B.
a598fbb090
fix(combo): least-used quota strategy and wildcard UI preservation ( #8894 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:08:02 -03:00
Jan Leon
714a315a1a
Treat context metadata as a routing hint ( #8944 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:07:56 -03:00
hppsc1215
274514405f
fix(oauth): GHE Copilot OAuth lifecycle — connect, manual refresh, proactive refresh ( #8970 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:07:49 -03:00
Alexey Gusev
91bb6aa619
feat(providers): add comprehensive support for self-hosted Firecrawl via FIRECRAWL_BASE_URL and custom base URLs ( #9052 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:07:42 -03:00
Bob.Hou
404554caeb
fix(antigravity): alias gemini-3.1-pro-high to gemini-pro-agent ( #9106 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:07:35 -03:00
Fajar Hidayat
8e27f5ec8d
fix(sse): back the CCR block store with a durable tier ( #9061 ) ( #9198 )
...
Validated in post-merge-train sweep (boards clean on release/v3.8.50 tip)
2026-08-06 11:07:28 -03:00
Diego Rodrigues de Sa e Souza
ece486dc38
fix(resilience): enforce RPM with rolling leases ( #9604 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:41:04 -03:00
Diego Rodrigues de Sa e Souza
f2e36ad0ce
fix(ci): clear base-reds on release/v3.8.50 (migration collision + 4 masked gates) ( #9600 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:40:56 -03:00
Diego Rodrigues de Sa e Souza
ba0a0751c4
fix(sse): shrink chat.ts model-lockout wiring back under the frozen file-size cap ( #9598 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:40:46 -03:00
Diego Rodrigues de Sa e Souza
b0cfc3d31c
feat(providers): add LLMGateway and LLM Kiwi registries ( #9587 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:40:38 -03:00
Diego Rodrigues de Sa e Souza
a63940199f
feat(providers): add FastRouter AnyAPI and ElectronHub registries ( #9586 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:40:30 -03:00
Diego Rodrigues de Sa e Souza
bd4407cb64
feat(sse): New-API/One-API/Sub2API aggregator balance detection ( #9415 ) ( #9539 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:40:20 -03:00
Diego Rodrigues de Sa e Souza
9dc0c6881a
feat(opencode-plugin): add visibleModels/hiddenModels allowlist/blocklist ( #9473 ) ( #9538 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:40:09 -03:00
Diego Rodrigues de Sa e Souza
ce6faa44e5
feat(models): treat quota-exhausted errors as non-hideable in Test All ( #9511 ) ( #9537 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:40:00 -03:00
Diego Rodrigues de Sa e Souza
2d617325e7
feat(catalog): add hideAutoCombos and hideNoThinkVariants settings toggles ( #9418 ) ( #9535 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:39:51 -03:00
Diego Rodrigues de Sa e Souza
607bccb6d6
feat(providers): add connection-level custom upstream headers ( #8369 ) ( #9497 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:39:41 -03:00
Diego Rodrigues de Sa e Souza
a4fbdbffac
feat(copilot): add approval gate for runOmniRouteCli commands ( #8461 ) ( #9495 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:39:27 -03:00
Diego Rodrigues de Sa e Souza
5ea43c7a9d
feat: make forwarded upstream response-header budget configurable ( #9243 ) ( #9492 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:39:15 -03:00
Diego Rodrigues de Sa e Souza
8fdb67f1d3
fix(auth): redirect active sessions from /login ( #9491 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:39:05 -03:00
Diego Rodrigues de Sa e Souza
53c8016d53
docs: add small VPS memory optimization guide ( #8237 ) ( #9471 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:38:57 -03:00
Diego Rodrigues de Sa e Souza
b553ac4d14
feat(db): add provider-scoped model aliases ( #9068 ) ( #9469 )
...
Validated in local merge-train (diegosouzapw batch)
2026-08-06 10:38:49 -03:00