Diego Rodrigues de Sa e Souza ceff7054b1 fix(security): unbiased crypto digits for the doubao synthetic device id (CodeQL js/biased-cryptographic-random) ...

randomNumericId builds a non-secret synthetic device/web id. The v3.8.45 switch
to crypto.getRandomValues closed js/insecure-randomness but 'cryptoByte % 10' is
biased (256 is not a multiple of 10), tripping js/biased-cryptographic-random.
Draw each digit by rejection sampling — discard bytes in the biased tail so the
remaining range divides evenly — giving a uniform distribution (verified) while
staying crypto-backed.

2026-07-07 07:42:12 -03:00

..

config

feat(glm): add team plan quota settings for glm-cn connections (#6351)

2026-07-06 21:35:04 -03:00

executors

fix(security): unbiased crypto digits for the doubao synthetic device id (CodeQL js/biased-cryptographic-random)

2026-07-07 07:42:12 -03:00

handlers

feat: add TinyFish Fetch support to web-fetch provider and update related documentation (#6349)

2026-07-06 21:32:15 -03:00

lib

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

mcp-server

feat: add TinyFish Fetch support to web-fetch provider and update related documentation (#6349)

2026-07-06 21:32:15 -03:00

services

feat(sse): exclude paid-only models from auto/* candidate pool when hidePaidModels is on (#6512) (#6518)

2026-07-07 01:02:35 -03:00

shared

feat(providers): add Zed hosted LLM aggregator (native-app sign-in) — NEEDS LIVE OAUTH VALIDATION (#6118)

2026-07-06 20:43:11 -03:00

transformer

Release v3.8.40

2026-06-29 08:40:06 -03:00

translator

feat(providers): Gemini tool-calling end-to-end on /v1beta (#6222) (#6394)

2026-07-06 19:31:12 -03:00

utils

fix(translator): suppress </think> marker for Antigravity client (port from 9router#1061) (#6415)

2026-07-06 19:23:27 -03:00

.npmignore

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

index.ts

feat: add ModelScope provider with circuit breaker and daily quota lock (#1430)

2026-04-19 21:13:45 -03:00

package.json

Release v3.8.45 (#6202)

2026-07-06 02:25:17 -03:00

tsconfig.json

Release v3.8.23

2026-06-12 23:49:22 -03:00

types.d.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00