Diego Rodrigues de Sa e Souza 4a37c7f46e fix(security): close 3 advisories — search baseUrl exfil, sk- in the error sanitizer, bifrost relay header leak (#12620) ...

Validado em worktree combinada sobre o tip de release/v3.8.51: os dois boardaram sem conflito, typecheck:core limpo, check-file-size sem violação nova (as duas restantes — codex.ts e stream.ts — são drift anterior) e 51/51 nos 5 arquivos de teste que os PRs trazem.

2026-09-03 20:48:58 -03:00

..

config

fix(security): close 3 advisories — search baseUrl exfil, sk- in the error sanitizer, bifrost relay header leak (#12620)

2026-09-03 20:48:58 -03:00

executors

fix(quota): keep Antigravity Gemini usable when Claude weekly is empty (#12566)

2026-09-03 12:40:21 -03:00

handlers

fix(security): close 3 advisories — search baseUrl exfil, sk- in the error sanitizer, bifrost relay header leak (#12620)

2026-09-03 20:48:58 -03:00

lib

fix(deepseek-web): stop Turbopack dev panic in the PoW worker path resolver (#12221)

2026-09-01 00:47:04 -03:00

mcp-server

fix(ci): document eloqnt MIT exceptions and isolate A2A vitest (#12595)

2026-09-03 08:39:46 -03:00

services

fix(combo): universal-handoff fixes — bare-fallback note, same-request scoping, silent-failure logging (#12338)

2026-09-03 13:02:24 -03:00

shared

Release v3.8.46

2026-07-07 13:14:06 -03:00

transformer

fix(sse): strip corrupted request_id from upstream SSE responses (#10223) (#10666)

2026-08-20 13:21:03 -03:00

translator

fix(sse): remap non-contiguous upstream tool_calls index to a gap-free output_index (#12445)

2026-09-03 13:01:03 -03:00

utils

fix(security): close 3 advisories — search baseUrl exfil, sk- in the error sanitizer, bifrost relay header leak (#12620)

2026-09-03 20:48:58 -03:00

vendor/codex-chatgpt-web

feat(providers): refresh vendored ChatGPT Web connector to v4.0.7 (#12181)

2026-09-01 00:50:15 -03:00

index.ts

[Part 1/3]refactor(qwen): replace legacy Qwen Code and remove OAuth provider (#7866)

2026-07-20 17:53:04 -03:00

package.json

chore(release): open v3.8.51 development cycle

2026-08-24 19:59:24 -03:00

tsconfig.json

chore(sse): drop deprecated baseUrl from open-sse tsconfig for TS 7.0 (#8473)

2026-07-25 02:53:01 -03:00

types.d.ts

feat(api): add per-key prompt compression bypass (#10001)

2026-08-11 09:20:41 -03:00