Diego Rodrigues de Sa e Souza 4a37c7f46e fix(security): close 3 advisories — search baseUrl exfil, sk- in the error sanitizer, bifrost relay header leak (#12620) ...

Validado em worktree combinada sobre o tip de release/v3.8.51: os dois boardaram sem conflito, typecheck:core limpo, check-file-size sem violação nova (as duas restantes — codex.ts e stream.ts — são drift anterior) e 51/51 nos 5 arquivos de teste que os PRs trazem.

2026-09-03 20:48:58 -03:00

..

chatCore

fix(quality): detect duplicate tool_calls entries in one response (#12446)

2026-09-03 13:01:25 -03:00

imageGeneration

feat(providers): add UC (uncensored.com) — persona (un-metered) + direct (metered) (#11513)

2026-09-02 02:23:33 -03:00

imageUpscale

[v3.8.50] feat(images): add POST /v1/images/upscale (Adobe Firefly Topaz + Stability + Topaz Labs) (#8791)

2026-08-06 06:05:18 -03:00

mediaGeneration

fix(sse): add the missing minimax-music dispatch to music generation (#10650)

2026-08-20 21:37:54 -03:00

responseSanitizer

[v3.8.50] fix: passthrough non-standard cache token fields for DeepSeek / MiniMax / Bedrock across streaming, non-streaming, and Dashboard paths (#8591)

2026-08-11 07:15:08 -03:00

search

fix(security): close 3 advisories — search baseUrl exfil, sk- in the error sanitizer, bifrost relay header leak (#12620)

2026-09-03 20:48:58 -03:00

sseParser

fix(sse): preserve ZWNJ and ZWJ in sanitized responses (#12359)

2026-09-02 03:15:19 -03:00

uc

fix(uc): route UC error strings through sanitizeErrorMessage; allowlist the retired codex id (#12437)

2026-09-02 05:12:11 -03:00

videoGeneration

feat(providers): add UC (uncensored.com) — persona (un-metered) + direct (metered) (#11513)

2026-09-02 02:23:33 -03:00

audioSpeech.ts

feat(providers): add UC (uncensored.com) — persona (un-metered) + direct (metered) (#11513)

2026-09-02 02:23:33 -03:00

audioTranscription.ts

fix(api): accept .opus uploads on /v1/audio/transcriptions (#10607)

2026-08-18 10:53:01 -03:00

audioTranslation.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

autoComboCandidates.ts

feat(routing): report why the zero-cost guard excluded a candidate (#12319)

2026-09-01 11:49:56 -03:00

chatCore.ts

fix(quota): drop generic quota cache on upstream 429 (#12325)

2026-09-03 12:38:39 -03:00

cursorCliProxy.ts

feat(providers): Cursor API provider (crsr_ keys) and Cursor CLI passthrough (#10729)

2026-08-20 06:29:11 -03:00

elevenLabsVoiceMap.ts

fix: map OpenAI-compat voice names to real ElevenLabs voice_ids (#10589) (#10748)

2026-08-19 11:08:45 -03:00

embeddings.ts

feat(providers): modernize CLOVA Studio chat and embeddings (#12277)

2026-09-03 07:50:22 -03:00

embeddingStructuredInput.ts

feat(providers): modernize CLOVA Studio chat and embeddings (#12277)

2026-09-03 07:50:22 -03:00

imageGeneration.ts

fix(api): keep the images wrapper on combo routes and default Codex to b64_json (#12362)

2026-09-02 03:14:09 -03:00

imageUpscale.ts

[v3.8.50] feat(images): add POST /v1/images/upscale (Adobe Firefly Topaz + Stability + Topaz Labs) (#8791)

2026-08-06 06:05:18 -03:00

jinaFoundation.ts

feat(providers): complete Jina + Gemini Embedding 2 multimodal via OmniRoute (#10581)

2026-08-18 10:52:43 -03:00

moderations.ts

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

musicGeneration.ts

fix(sse): add the missing minimax-music dispatch to music generation (#10650)

2026-08-20 21:37:54 -03:00

ocr.ts

Integration: security tier + self-hosted operator blockers (rebased onto v3.8.51) (#10952)

2026-08-23 16:51:25 -03:00

openrouterTranscription.ts

fix(api): accept .opus uploads on /v1/audio/transcriptions (#10607)

2026-08-18 10:53:01 -03:00

rerank.ts

fix(memory): list and serve embedding/rerank models from every configured provider (#11390)

2026-09-02 00:27:29 -03:00

responseSanitizer.ts

perf(stream): compile hot-path regexes once, bound token caches, fix quadratic buffering (#12179)

2026-09-03 08:29:14 -03:00

responsesHandler.ts

fix(types): complete responses stream failure contract (#9979)

2026-08-10 00:28:47 -03:00

responseTranslator.ts

fix(sse): preserve ZWNJ and ZWJ in sanitized responses (#12359)

2026-09-02 03:15:19 -03:00

search.ts

fix(security): close 3 advisories — search baseUrl exfil, sk- in the error sanitizer, bifrost relay header leak (#12620)

2026-09-03 20:48:58 -03:00

sseParser.ts

feat(radar): flag-gated signed free-model catalog overlay (#9515)

2026-08-06 05:58:58 -03:00

usageExtractor.ts

fix(sse): keep cache-write tokens in OpenAI-shaped usage (#11814)

2026-08-30 11:09:15 -03:00

videoGeneration.ts

feat(providers): add UC (uncensored.com) — persona (un-metered) + direct (metered) (#11513)

2026-09-02 02:23:33 -03:00

webFetch.ts

feat(search): add fallback-only AnySearch provider (webSearch + webFetch) (#11690)

2026-08-26 17:54:57 -03:00