Commit Graph

  • c8b24ffc30 fix(authz): gate the cli-tools status and skills execution routes to LOCAL_ONLY (#13745) release/v3.8.51 Diego Rodrigues de Sa e Souza 2026-09-15 13:25:35 -03:00
  • e7f9fec251 fix(api): enforce API-key ownership on files and batches — null-owner records and anonymous listing (#13749) Diego Rodrigues de Sa e Souza 2026-09-15 13:25:13 -03:00
  • b97338a803 fix(security): pin the public-only guard on client-supplied image URLs (#13748) Diego Rodrigues de Sa e Souza 2026-09-15 13:24:50 -03:00
  • e498c349e3 fix(security): add Groq, xAI and OpenAI-compatible key shapes to the credential catalog (#13744) Diego Rodrigues de Sa e Souza 2026-09-15 13:24:30 -03:00
  • 104a34c5f2 chore(deps): bump the adm-zip override to ^0.6.1 (#13737) Diego Rodrigues de Sa e Souza 2026-09-15 13:24:09 -03:00
  • 62cd27720a fix(db): persist WAL busy counter across restarts (#13218) Dizzle 2026-09-15 18:21:52 +02:00
  • ba2f11a678 fix(routing): fail over when Auggie's quota-exhausted text exits clean (#12949) fix/12949-auggie-quota-200-no-failover diegosouzapw 2026-09-15 13:13:01 -03:00
  • 7cabac4985 fix(quota): bound routing caches with shared boundedMap factory (#13280) Dizzle 2026-09-15 18:08:21 +02:00
  • 215ac43a70 fix(proxy): keep proxy credentials holding a literal percent (#13605) Dizzle 2026-09-15 17:59:27 +02:00
  • 274a743733 fix(api): enforce API-key ownership on files and batches — null-owner records and anonymous listing fix/sec-files-batches-ownership-2jm2-m3hp diegosouzapw 2026-09-15 12:54:56 -03:00
  • 1d17c239d1 fix(build): stop the client bundle from reaching server-only modules, and make the guard find them (#13436) Dizzle 2026-09-15 17:52:41 +02:00
  • f3c43d3fad fix(security): pin the public-only guard on client-supplied image URLs fix/sec-image-ssrf-34rg diegosouzapw 2026-09-15 12:49:51 -03:00
  • cb420db64b fix(call-logs): hide search rows without a live provider (#13641) Dizzle 2026-09-15 17:48:06 +02:00
  • e92c8597eb fix(ci): clear the release/v3.8.51 base-reds left by the 09-15 batch — stryker coverage, CLI ready_timeout key, paid-target fixture, call-log traceId, Jina custom prefix fix/release-v3.8.51-basereds-r4 diegosouzapw 2026-09-15 12:47:38 -03:00
  • 831b485e08 test(batches): rename the two seeded-batch labels that gitleaks reported as secrets (#13729) Diego Rodrigues de Sa e Souza 2026-09-15 12:28:29 -03:00
  • 5f29bcf26a fix(authz): gate the cli-tools status and skills execution routes to LOCAL_ONLY fix/sec-local-only-gates-35fw-jx89 diegosouzapw 2026-09-15 12:28:20 -03:00
  • 516927196c fix(call-logs): zod write-point guard for error_type (#13441) Dizzle 2026-09-15 17:20:19 +02:00
  • 1073fcc189 fix(security): add Groq, xAI and OpenAI-compatible key shapes to the credential catalog fix/sec-credential-catalog-r4q7 diegosouzapw 2026-09-15 12:17:51 -03:00
  • 3266d163f4 fix(call-logs): versioned error_type vocabulary with unknown fail-open (#13281) Dizzle 2026-09-15 16:26:38 +02:00
  • 5a7a3d0121 fix(combos): abort combo test probes when the client disconnects (#13279) Dizzle 2026-09-15 16:24:35 +02:00
  • 4c0e45d814 fix(models): return 503 with Retry-After when a cold catalog build exceeds its time bound (#13438) Dizzle 2026-09-15 16:21:58 +02:00
  • c0e5b0a833 fix(connection-cooldown): skip cooldown for locally rejected token-budget 429s (#13606) Dizzle 2026-09-15 16:18:10 +02:00
  • 5395618aac fix(opencode-plugin-v2): write catalog snapshot atomically via temp file and rename (#13607) Dizzle 2026-09-15 16:15:24 +02:00
  • ca9254ea65 fix(opencode): read management token from environment with startup fallback warning (#13613) Dizzle 2026-09-15 16:12:03 +02:00
  • 5cc3362ef0 fix(providers): route Muse Spark 1.3 to the Responses API on OpenCode Zen, OpenCode and OpenCode Go (#13471) Dizzle 2026-09-15 16:08:16 +02:00
  • aaf0777a98 fix(proxies): keep the stored status when a write does not send one (#13577) Dizzle 2026-09-15 16:05:01 +02:00
  • 3af620e68f fix(combos): stop dropping live keys and persisting dead ones (#13217) Dizzle 2026-09-15 15:59:34 +02:00
  • fd53ba5c01 Merge remote-tracking branch 'origin/release/v3.8.51' into feat/provider-xkiro feat/provider-xkiro diegosouzapw 2026-09-15 10:32:10 -03:00
  • 6e628b87c4 Merge remote-tracking branch 'origin/release/v3.8.51' into feat/provider-xkiro diegosouzapw 2026-09-15 10:27:42 -03:00
  • 225da11fc6 ci(radar-export): publish on release-branch catalog pushes; daily schedule (#13736) Diego Rodrigues de Sa e Souza 2026-09-15 10:20:55 -03:00
  • ee3fbaf3f6 fix(proxies): preserve inactive and dead statuses during pool validation (#13612) Dizzle 2026-09-15 15:11:44 +02:00
  • b9c17b8811 chore(deps): bump the adm-zip override to ^0.6.1 chore/deps-adm-zip-0.6.1 diegosouzapw 2026-09-15 10:08:52 -03:00
  • 1d03ba0ed2 fix(api): keep omitted fields on partial updates (#13582) Dizzle 2026-09-15 15:04:14 +02:00
  • 3cf1b85044 ci(radar-export): publish on release-branch catalog pushes and run the schedule daily chore/radar-export-daily diegosouzapw 2026-09-15 09:58:49 -03:00
  • 58f88a83e4 feat(i18n): 7 new locales — Hausa, Yoruba, Igbo, Amharic, Uzbek, Georgian, Armenian (66 locales) (#13727) Diego Rodrigues de Sa e Souza 2026-09-15 09:50:01 -03:00
  • d36251cf1c fix(ci): clear five uncovered base-reds on release/v3.8.51 — auto-combo catalog event-loop pin, unweighted quota-share, resilience key set, pack-gate stamp, synced-catalog env doc (#13678) Diego Rodrigues de Sa e Souza 2026-09-15 09:00:51 -03:00
  • 9442bdef0f fix(ci): clear the release/v3.8.51 base-reds on the PR fast path (#13635) Damian Pozimski 2026-09-15 13:51:45 +02:00
  • f782f3b1e0 chore(skills): regenerate cli-serve after --ready-timeout was added (#13722) Diego Rodrigues de Sa e Souza 2026-09-15 08:51:08 -03:00
  • 5c1e35b98f fix(api): give the #13376 model-test skip a real httpStatus (#13730) Diego Rodrigues de Sa e Souza 2026-09-15 08:50:58 -03:00
  • 20be9d865e docs(changelog): reconcile the v3.8.51 living section — round 2 (2026-09-15) docs/changelog-reconcile-v3.8.51-r2 diegosouzapw 2026-09-15 08:38:12 -03:00
  • 0e3c918465 fix(api): give the #13376 model-test skip a real httpStatus fix/release-v3.8.51-modeltestrunner-ts2741 diegosouzapw 2026-09-15 08:32:35 -03:00
  • 5e93d774a4 chore(skills): regenerate cli-serve after --ready-timeout was added chore/regen-cli-serve-skill diegosouzapw 2026-09-15 07:23:49 -03:00
  • c0f92ec98a fix(security): resolve findings from omni-code-sec battery (fix/batches-delete-completed-authz) (#13684) Diego Rodrigues de Sa e Souza 2026-09-15 01:06:16 -03:00
  • 3311ad20c6 fix(docs): document OMNIROUTE_READY_TIMEOUT_MS and allowlist the test-only DISABLE_IOREG_STRATEGY (#13692) Diego Rodrigues de Sa e Souza 2026-09-15 00:25:31 -03:00
  • 4745fca27d fix(zed-hosted): map developer role and Gemini enums for Zed proxy (#13543) Koosha Paridehpour 2026-09-14 20:11:18 -07:00
  • 2d1a281d12 fix(providers): add alwaysReasons metadata for reka-flash-3 (#13531) Koosha Paridehpour 2026-09-14 20:08:31 -07:00
  • 3b5ce24acb fix(playground): allow Compare columns to scroll independently (#13532) Koosha Paridehpour 2026-09-14 20:07:50 -07:00
  • 56ae80a6bd fix(reasoning): expand deepseek-v4 regex to match v4.1+ and add command-code provider (#13430) (#13528) Koosha Paridehpour 2026-09-14 20:06:58 -07:00
  • 1cbb77c30b fix(analytics): normalize provider aliases to canonical id in usage_history (#13545) Koosha Paridehpour 2026-09-14 20:05:21 -07:00
  • 30b5bf18fb fix(guardrails): skip credential redaction for base64 image data URLs (#13550) Koosha Paridehpour 2026-09-14 20:03:42 -07:00
  • 93a398f353 chore(deps): pin joi to ^18.2.8 via overrides (#13085) (#13302) Koosha Paridehpour 2026-09-14 20:02:50 -07:00
  • 6a55d0a170 chore(deps): bump hono from ^4.12.34 to ^4.13.7 (#13148) (#13301) Koosha Paridehpour 2026-09-14 20:02:37 -07:00
  • cd112e34d3 chore(deps): pin csv-parse to ^7.0.2 via overrides (#13117) (#13300) Koosha Paridehpour 2026-09-14 20:02:24 -07:00
  • d6e62ae394 fix(free-tiers): remove obsolete Together $25 signup credit (#12526) (#13407) Koosha Paridehpour 2026-09-14 20:01:27 -07:00
  • 0b358dbf64 fix(backend): guard memory_fts_au trigger with WHEN clause to stop FTS bloat (#13326) (#13405) Koosha Paridehpour 2026-09-14 19:58:27 -07:00
  • a0d8ad7082 fix(antigravity): derive stable session ID from credentials for prompt-cache reuse (#13305) (#13424) Koosha Paridehpour 2026-09-14 19:56:35 -07:00
  • fb3f298489 fix(security): empty whitelist allows through to prevent admin lockout (#13534) Koosha Paridehpour 2026-09-14 19:55:21 -07:00
  • 918546acf2 fix(resilience): increase requestQueue.maxWaitMs default from 15s to 30s (#13553) Koosha Paridehpour 2026-09-14 19:53:18 -07:00
  • d4a1470e40 fix(compression): run user preservePatterns before built-in patterns (#13457) (#13525) Koosha Paridehpour 2026-09-14 19:52:14 -07:00
  • 56fedf985e fix(compression): preserve polarity words and newlines in ultra heuristic (#13524) Koosha Paridehpour 2026-09-14 19:44:26 -07:00
  • c46ca1dc75 fix(compression): preserve instruction blocks from lossy engines (#13523) Koosha Paridehpour 2026-09-14 19:36:36 -07:00
  • bf6658984b fix(auth): check model lockout before returning synthetic noauth connection (#13547) Koosha Paridehpour 2026-09-14 19:28:25 -07:00
  • 97ae10179c fix(combo): use traceId for call log id to prevent UNIQUE constraint failure (#13546) Koosha Paridehpour 2026-09-14 19:27:15 -07:00
  • cce3a958b5 fix(tests): add DISABLE_IOREG_STRATEGY env var for macOS test compatibility (fixes #13467) (#13539) Koosha Paridehpour 2026-09-14 19:25:33 -07:00
  • 222fe4314e docs(providers): add Microsoft 365 Copilot (BizChat) provider guide (#12779) (#13340) Koosha Paridehpour 2026-09-14 19:24:59 -07:00
  • fc111dc196 feat(cli): make startup readiness budget configurable (#13369) (#13433) Koosha Paridehpour 2026-09-14 19:24:46 -07:00
  • 1738beb0fe fix(memory): merge memory into top-level system field instead of unshifting at messages[0] (#13425) (#13427) Koosha Paridehpour 2026-09-14 19:24:33 -07:00
  • 38ce44992e fix(providers): de-duplicate agy and antigravity model catalogs (#13410) Koosha Paridehpour 2026-09-14 19:21:56 -07:00
  • 3a186c1326 fix(dashboard): send provider in body for mini-playground web search (#13411) Koosha Paridehpour 2026-09-14 19:18:44 -07:00
  • 76c928dd35 fix(backend): eval runner opts out of output-style and memory injection (#13414) Koosha Paridehpour 2026-09-14 19:18:32 -07:00
  • fdfa921bbb fix(backend): eval runner: failed calls no longer score as passed + dotAll regex (#13413) Koosha Paridehpour 2026-09-14 19:18:20 -07:00
  • f938a08686 fix(resilience): add CJK quota-exhaustion patterns to 429 classifier (#13412) Koosha Paridehpour 2026-09-14 19:18:07 -07:00
  • 2a6d0586cd fix: skip non-chat generation models in Test all models (#13409) Koosha Paridehpour 2026-09-14 19:17:55 -07:00
  • 43b26615e1 feat(mcp): carry context_length through MCP list_models_catalog projection (#12776) (#13406) Koosha Paridehpour 2026-09-14 19:17:42 -07:00
  • 04bea60303 fix(backend): prune old backups after health-check-repair snapshots (#13308) (#13404) Koosha Paridehpour 2026-09-14 19:17:11 -07:00
  • 65f513112a fix(tests): correct stale Jina catalog prefix in custom-models test (#13403) Koosha Paridehpour 2026-09-14 19:14:47 -07:00
  • 8bad85f58e fix(logging): mask *-api-key headers in request-log pipeline (#13273) (#13401) Koosha Paridehpour 2026-09-14 19:14:35 -07:00
  • 67cb0ac96b fix: chain serial quarantine step in npm test script (fixes #13286) (#13418) Koosha Paridehpour 2026-09-14 19:13:36 -07:00
  • 5ca724d2cf fix(api): scope batch bulk-delete to the calling API key (#12969) Diego Rodrigues de Sa e Souza 2026-09-14 19:25:46 -03:00
  • ffdbeac7df docs(env): document OMNIROUTE_SYNCED_CATALOG_STALE_AFTER_MS fix/release-v3.8.51-basereds-r3 diegosouzapw 2026-09-14 19:22:24 -03:00
  • 2ef073f513 fix(ci): stamp BUILD_SHA before the release-green pack gate validates diegosouzapw 2026-09-14 19:07:00 -03:00
  • 5bcaa9b63a Merge release/v3.8.51 (with #13211) into fix/batches-delete-completed-authz fix/batches-delete-completed-authz diegosouzapw 2026-09-14 19:12:25 -03:00
  • 6b08790274 test(resilience): list credentialHealthCheck in the configuration-only key set diegosouzapw 2026-09-14 19:06:39 -03:00
  • 6647654bca fix(models): resolve auto-combo target metadata once per catalog build diegosouzapw 2026-09-14 19:05:59 -03:00
  • 66229feaaa fix(combo): rotate unweighted quota-share targets instead of pinning the first diegosouzapw 2026-09-14 19:04:40 -03:00
  • 636084aa8c Merge #13374 (file ownership + chunked sweep) into the stack diegosouzapw 2026-09-14 19:05:08 -03:00
  • 895dda383e fix(ci): clear the base-reds on release/v3.8.51 — doc counts, catalog test flake, pack provenance + pack policy (#12959) Diego Rodrigues de Sa e Souza 2026-09-14 19:04:28 -03:00
  • 831bb0f28f Merge release/v3.8.51 into fix/release-v3.8.51-basereds-docs-counts fix/release-v3.8.51-basereds-docs-counts diegosouzapw 2026-09-14 19:03:55 -03:00
  • 8786c1732f fix(ci): clear the orphan base-reds on release/v3.8.51 — the #12867 pipeline extraction, a legacy-DB boot abort and the catalog readers (#13349) Diego Rodrigues de Sa e Souza 2026-09-14 19:02:09 -03:00
  • 9ee4154829 Merge release/v3.8.51 into fix/release-v3.8.51-basereds-orphans fix/release-v3.8.51-basereds-orphans diegosouzapw 2026-09-14 19:01:16 -03:00
  • 539d2236f5 fix(sse): keep upstream error code/type in the pipeline outcome; trim to what the tip still lacks diegosouzapw 2026-09-14 19:00:54 -03:00
  • 8f3621156d docs(i18n): sync provider and migration counts in the eight new llm.txt mirrors (#13674) Diego Rodrigues de Sa e Souza 2026-09-14 19:00:38 -03:00
  • ddbee1be14 docs(i18n): sync provider and migration counts in the eight new llm.txt mirrors fix/llm-mirrors-new-locales-counts diegosouzapw 2026-09-14 19:00:15 -03:00
  • 6ad5e4ce3f Merge release/v3.8.51 into fix/release-v3.8.51-basereds-orphans diegosouzapw 2026-09-14 18:24:38 -03:00
  • 3047359386 Merge release/v3.8.51 into fix/release-v3.8.51-basereds-orphans diegosouzapw 2026-09-14 18:23:58 -03:00
  • 0d13ef4fbb feat(i18n): 8 new locales — Kannada, Malayalam, Odia, Punjabi, Nepali, Sinhala, Burmese, Khmer (59 locales) (#13660) Diego Rodrigues de Sa e Souza 2026-09-14 18:22:01 -03:00
  • 80c2057dbc deps: bump the production group across 1 directory with 23 updates dependabot/npm_and_yarn/production-b84c5faec8 dependabot[bot] 2026-09-14 18:33:49 +00:00
  • 12b3c49e53 deps: bump the development group across 1 directory with 15 updates dependabot/npm_and_yarn/development-d8d8ead4c7 dependabot[bot] 2026-09-14 18:29:32 +00:00
  • d8ea79865b deps: bump electron from 44.0.0 to 44.3.0 in /electron dependabot/npm_and_yarn/electron/electron-44.3.0 dependabot[bot] 2026-09-14 18:26:00 +00:00
  • 963d3c46ef fix(ci): clear three base-reds on release/v3.8.51 — open-sse typecheck, docs provider count, agent-skills sync (#13216) Diego Rodrigues de Sa e Souza 2026-09-14 14:13:45 -03:00