Diego Rodrigues de Sa e Souza ceff7054b1 fix(security): unbiased crypto digits for the doubao synthetic device id (CodeQL js/biased-cryptographic-random) ...

randomNumericId builds a non-secret synthetic device/web id. The v3.8.45 switch
to crypto.getRandomValues closed js/insecure-randomness but 'cryptoByte % 10' is
biased (256 is not a multiple of 10), tripping js/biased-cryptographic-random.
Draw each digit by rejection sampling — discard bytes in the biased tail so the
remaining range divides evenly — giving a uniform distribution (verified) while
staying crypto-backed.

2026-07-07 07:42:12 -03:00

..

antigravity

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

base

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

chatgpt-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

claude-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

codex

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

cursor

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

deepseek-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

default

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

duckduckgo-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

grok-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

huggingchat

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

kiro

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

muse-spark-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

perplexity-web

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

adapta-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

antigravity.ts

Release v3.8.45 (#6202)

2026-07-06 02:25:17 -03:00

antigravityUpstreamError.ts

fix(antigravity): alias agy gemini-3.1-pro -high/-low + stop masking upstream 4xx (#3229) (#3245)

2026-06-05 14:20:05 -03:00

auggie.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

azure-openai.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

base.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

bedrock.ts

Release v3.8.27 (#3968)

2026-06-17 02:43:21 -03:00

blackbox-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

chatgpt-web.ts

Release v3.8.45 (#6202)

2026-07-06 02:25:17 -03:00

chatgptWebErrors.ts

Release v3.8.28 (#4053)

2026-06-17 19:26:32 -03:00

chatgptWebTools.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

chipotle.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

claude-web-with-auto-refresh.ts

feat(claude-web): implement session-based executor with auto-refresh (#2283)

2026-05-15 12:51:07 -03:00

claude-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

claudeIdentity.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

cliproxyapi.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

cloudflare-ai.ts

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

codebuddy-cn.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

codex.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

commandCode.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

copilot-m365-connection.ts

feat(providers): copilot-m365-web enterprise (work) tier support (#6334) (#6392)

2026-07-06 19:30:56 -03:00

copilot-m365-frames.ts

Release v3.8.45 (#6202)

2026-07-06 02:25:17 -03:00

copilot-m365-web.ts

fix(providers): add redacted WS debug logging to copilot-m365-web (#6210) (#6447)

2026-07-06 18:16:22 -03:00

copilot-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

cursor.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

deepseek-web-with-auto-refresh.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

deepseek-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

default.ts

fix(executors): strip client_metadata for NVIDIA requests (port from 9router#1887) (#6411)

2026-07-06 19:24:08 -03:00

devin-cli.ts

feat(oauth): complete Windsurf / Devin CLI OAuth + API-token flows (#2168)

2026-05-11 21:49:32 -03:00

doubao-web.ts

fix(security): unbiased crypto digits for the doubao synthetic device id (CodeQL js/biased-cryptographic-random)

2026-07-07 07:42:12 -03:00

duckduckgo-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

firecrawl-fetch.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

forceResponsesUpstream.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

gemini-business.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

gemini-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

github.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

gitlab.ts

fix(providers): bound GitLab Duo tool-exchange prompt to avoid 422 (#6220) (#6446)

2026-07-06 18:16:49 -03:00

gitlabResponses.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

glm.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

grok-cli.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

grok-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

huggingchat.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

index.ts

feat(providers): add Zed hosted LLM aggregator (native-app sign-in) — NEEDS LIVE OAUTH VALIDATION (#6118)

2026-07-06 20:43:11 -03:00

inner-ai.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

jina-reader-fetch.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

kie.ts

fix: address kie provider review feedback

2026-05-07 00:01:54 +07:00

kimi-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

kimi.ts

fix(sse): refine kimi thinking handling and add unit tests (#3191)

2026-06-05 11:48:03 -03:00

kiro.ts

Release v3.8.45 (#6202)

2026-07-06 02:25:17 -03:00

kiroThinking.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

lmarena.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

mimocode.ts

Release v3.8.42 (#5459)

2026-06-30 06:54:29 -03:00

muse-spark-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

ninerouter.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

nlpcloud.ts

feat(providers): add GitLab Duo, NLP Cloud, and enterprise gateways

2026-04-24 07:00:21 -03:00

opencode.ts

fix(executors): strip client_metadata on the OpenCode path (port from 9router#1442) (#6418)

2026-07-06 19:22:27 -03:00

perplexity-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

poe-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

pollinations.ts

Release v3.8.36 (#4854)

2026-06-25 13:17:40 -03:00

puter.ts

feat(providers): adicionar provedor Puter AI com 500+ modelos

2026-03-22 20:29:06 -03:00

qoder.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

qwen-web.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

t3-chat-web.ts

Release v3.8.43 (#5609)

2026-07-02 10:47:13 -03:00

tavily-fetch.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

theoldllm.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

tinyfish-fetch.ts

feat: add TinyFish Fetch support to web-fetch provider and update related documentation (#6349)

2026-07-06 21:32:15 -03:00

trae.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

v0-vercel-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

venice-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

veoaifree-web.ts

Release v3.8.40

2026-06-29 08:40:06 -03:00

vertex.ts

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

vertexMedia.ts

Release v3.8.26 (#3875)

2026-06-16 01:00:40 -03:00

windsurf.ts

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

xai.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

yuanbao-web.ts

Release v3.8.45 (#6202)

2026-07-06 02:25:17 -03:00

zed-hosted.ts

feat(providers): add Zed hosted LLM aggregator (native-app sign-in) — NEEDS LIVE OAUTH VALIDATION (#6118)

2026-07-06 20:43:11 -03:00

zenmux-free.ts

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00