diegosouzapw f9a93f4ea4 fix(opencode-plugin): bound regex quantifiers in normaliseFreeLabel (polynomial-ReDoS) ...

CodeQL js/polynomial-redos: unbounded \s* before an anchored \s*$ allowed
O(n²) backtracking on attacker-influenced display names. Bounded to {0,8}/{1,8}
(ample for any real label spacing). Plugin builds + 254 tests green.

2026-06-09 14:42:10 -03:00

..

opencode-plugin

fix(opencode-plugin): bound regex quantifiers in normaliseFreeLabel (polynomial-ReDoS)

2026-06-09 14:42:10 -03:00

opencode-provider

Release v3.8.13 (#3327)

2026-06-06 19:13:11 -03:00