Jillur Rahman 8d59e1f660 fix(security): fail-closed CORS for cloud-agent management routes (#6543) ...

Merged — thank you, @developerjillur! Fail-closed CORS for the cookie/session-authed cloud-agent management routes (allowlist echo, credentials only for an explicitly allowlisted origin). Integrated into release/v3.8.47.

2026-07-08 01:35:46 -03:00

..

_setup

Release v3.8.46

2026-07-07 13:14:06 -03:00

benchmarks

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

e2e

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

fixtures

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

golden-set

feat(compression): expand caveman parity and MCP metadata compression

2026-05-03 09:14:20 -03:00

helpers

Fase 8 · Bloco B — suíte de correção (property + golden + SSE-correctness) (#3808)

2026-06-14 18:02:51 -03:00

integration

fix(api): stop POST /api/keys hanging on the fire-and-forget Cloud sync (#6570) (#6624)

2026-07-08 00:33:56 -03:00

live

fix(security): resolve CodeQL ReDoS + URL sanitization alerts

2026-05-17 07:43:32 -03:00

llm-security

Fase 8 · Bloco D — injection-guard em todas as rotas LLM + red-team (#3857)

2026-06-14 18:02:18 -03:00

load

Release v3.8.45 (#6202)

2026-07-06 02:25:17 -03:00

manual

Release v3.8.20 (#3547)

2026-06-10 13:49:08 -03:00

security

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

snapshots

Release v3.8.46

2026-07-07 13:14:06 -03:00

translator

chore: apply PR 1495 and update changelog

2026-04-21 21:12:29 -03:00

unit

fix(security): fail-closed CORS for cloud-agent management routes (#6543)

2026-07-08 01:35:46 -03:00

e2e-tool-calls.sh

Release v3.8.24 (#3747)

2026-06-13 17:27:40 -03:00

scratch_test.mjs

refactor: implement path utilities, add custom date formatting, improve type safety, and unify database imports

2026-04-21 21:10:48 -03:00

theoldllm-stress.test.ts

feat(provider): add The Old LLM (theoldllm) — free Playwright-backed provider (#3217)

2026-06-05 11:45:24 -03:00