Diego Rodrigues de Sa e Souza 7a14a96b83 fix(security): crypto-backed randomNumericId in doubao-web (CodeQL js/insecure-randomness) ...

The synthetic Dola device/web id was built from Math.random; CodeQL flags it
as insecure randomness in a security context. Not a secret, but
crypto.getRandomValues costs the same and closes alert #692 at the source.
Doubao executor tests 14/14 green. Alerts #693-695 (incomplete-url-substring
in unit-test asserts) dismissed as false positives per the v3.8.35 precedent
(Hard Rule #14).

2026-07-06 02:09:46 -03:00

..

antigravity

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

base

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

chatgpt-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

claude-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

codex

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

cursor

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

deepseek-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

default

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

duckduckgo-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

grok-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

huggingchat

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

kiro

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

muse-spark-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

perplexity-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

adapta-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

antigravity.ts

fix(antigravity): strip trailing assistant prefill turn for Vertex Claude models (#6114)

2026-07-05 04:21:38 -03:00

antigravityUpstreamError.ts

fix(antigravity): alias agy gemini-3.1-pro -high/-low + stop masking upstream 4xx (#3229) (#3245)

2026-06-05 14:20:05 -03:00

auggie.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

azure-openai.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

base.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

bedrock.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

blackbox-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

chatgpt-web.ts

fix(sse): surface ChatGPT-web image silent-drop as an accurate error (#6208)

2026-07-05 02:29:37 -03:00

chatgptWebErrors.ts

Release v3.8.28 (#4053)

2026-06-17 19:26:32 -03:00

chatgptWebTools.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

chipotle.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

claude-web-with-auto-refresh.ts

feat(claude-web): implement session-based executor with auto-refresh (#2283)

2026-05-15 12:51:07 -03:00

claude-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

claudeIdentity.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

cliproxyapi.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

cloudflare-ai.ts

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

codebuddy-cn.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

codex.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

commandCode.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

copilot-m365-connection.ts

fix: bug-fix sweep — log path, AgentBridge DNS, opencode-go headers, GitLab Duo tools, M365 EDU (#6197 #6127 #6198 #5997 #6220 #6210) (#6234)

2026-07-05 17:37:21 -03:00

copilot-m365-frames.ts

fix: bug-fix sweep — log path, AgentBridge DNS, opencode-go headers, GitLab Duo tools, M365 EDU (#6197 #6127 #6198 #5997 #6220 #6210) (#6234)

2026-07-05 17:37:21 -03:00

copilot-m365-web.ts

fix: bug-fix sweep — log path, AgentBridge DNS, opencode-go headers, GitLab Duo tools, M365 EDU (#6197 #6127 #6198 #5997 #6220 #6210) (#6234)

2026-07-05 17:37:21 -03:00

copilot-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

cursor.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

deepseek-web-with-auto-refresh.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

deepseek-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

default.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

devin-cli.ts

feat(oauth): complete Windsurf / Devin CLI OAuth + API-token flows (#2168)

2026-05-11 21:49:32 -03:00

doubao-web.ts

fix(security): crypto-backed randomNumericId in doubao-web (CodeQL js/insecure-randomness)

2026-07-06 02:09:46 -03:00

duckduckgo-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

firecrawl-fetch.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

forceResponsesUpstream.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

gemini-business.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

gemini-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

github.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

gitlab.ts

fix: bug-fix sweep — log path, AgentBridge DNS, opencode-go headers, GitLab Duo tools, M365 EDU (#6197 #6127 #6198 #5997 #6220 #6210) (#6234)

2026-07-05 17:37:21 -03:00

gitlabResponses.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

glm.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

grok-cli.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

grok-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

huggingchat.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

index.ts

feat(providers): add Yuanbao (web) cookie-session provider (#6196) (#6256)

2026-07-05 07:37:17 -03:00

inner-ai.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

jina-reader-fetch.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

kie.ts

fix: address kie provider review feedback

2026-05-07 00:01:54 +07:00

kimi-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

kimi.ts

fix(sse): refine kimi thinking handling and add unit tests (#3191)

2026-06-05 11:48:03 -03:00

kiro.ts

feat(sse): surface Kiro adaptive-thinking reasoning as reasoning_content (#6213)

2026-07-05 02:30:21 -03:00

kiroThinking.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

lmarena.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

mimocode.ts

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

muse-spark-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

ninerouter.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

nlpcloud.ts

feat(providers): add GitLab Duo, NLP Cloud, and enterprise gateways

2026-04-24 07:00:21 -03:00

opencode.ts

fix: bug-fix sweep — log path, AgentBridge DNS, opencode-go headers, GitLab Duo tools, M365 EDU (#6197 #6127 #6198 #5997 #6220 #6210) (#6234)

2026-07-05 17:37:21 -03:00

perplexity-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

poe-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

pollinations.ts

Release v3.8.36 (#4854)

2026-06-25 13:17:40 -03:00

puter.ts

feat(providers): adicionar provedor Puter AI com 500+ modelos

2026-03-22 20:29:06 -03:00

qoder.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

qwen-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

t3-chat-web.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

tavily-fetch.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

theoldllm.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

trae.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

v0-vercel-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

venice-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

veoaifree-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

vertex.ts

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

vertexMedia.ts

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

windsurf.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

xai.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

yuanbao-web.ts

feat(providers): add Yuanbao (web) cookie-session provider (#6196) (#6256)

2026-07-05 07:37:17 -03:00

zenmux-free.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00