Diego Rodrigues de Sa e Souza c50033f393 fix(authz): accept direct LAN/loopback-IP host as a valid mutation origin (#5340) (#5341) ...

Integrated into release/v3.8.41. Accepts direct LAN/loopback-IP host as a valid mutation origin (#5340); origin trust gated on the server-stamped peer, not the spoofable Host. 6 security-boundary tests incl. DNS-rebinding.

2026-06-29 10:31:36 -03:00

..

components

Release v3.8.40

2026-06-29 08:40:06 -03:00

constants

chore: remove unused MCP scope helper exports (#5336)

2026-06-29 10:31:27 -03:00

contracts

feat: normalize quota and combos API responses with shared contracts

2026-03-04 08:18:09 -03:00

hooks

feat(cli): add shared CLI UI components — CliToolCard/ConceptCard/ComparisonCard/BaseUrlSelect/ApiKeySelect/ManualConfigModal + useToolBatchStatuses hook (plan 14 F4)

2026-05-27 22:32:27 -03:00

http

fix(authz): accept direct LAN/loopback-IP host as a valid mutation origin (#5340) (#5341)

2026-06-29 10:31:36 -03:00

middleware

chore: remove unused correlation middleware exports (#5333)

2026-06-29 10:07:27 -03:00

network

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

providers

Release v3.8.40

2026-06-29 08:40:06 -03:00

schemas

chore: drop unused validation schema exports (#5322)

2026-06-29 10:06:37 -03:00

services

chore: remove unused runtime test helper exports (#5330)

2026-06-29 10:06:55 -03:00

types

feat(cli-tools): extend catalog with category/vendor/acpSpawnable/baseUrlSupport + new entries (plan 14 F1)

2026-05-27 19:50:38 -03:00

utils

chore: remove unused request timeout fetch wrapper (#5331)

2026-06-29 10:07:07 -03:00

validation

chore: drop unused validation schema exports (#5322)

2026-06-29 10:06:37 -03:00