Nguyen Thanh Dat cb11592441 fix(db): judge the proxy URL host by address, not by spelling (#11319) ...

Validated on a 17-PR combined board: upstream-proxy-host-spelling 8/8 within the board's 287/287, typecheck:core clean. Routes src/lib/db/upstreamProxy.ts through the shared outbound-guard helpers instead of a private dotted-quad regex copy that had drifted since #10843 — closes the IPv4-mapped IPv6, ULA, link-local and CGNAT bypasses while preserving the deliberate loopback allow (CLIProxyAPI on localhost:8317). Multicast widened from /224\. to the full 224.0.0.0/4, called out explicitly. Thank you @ntdat812!

2026-08-24 01:50:35 -03:00

..

app

fix(dashboard): route the Adapta tutorial CTA through the branded shortener (#11329)

2026-08-24 01:49:32 -03:00

domain

fix(resilience): route chat by per-connection synced model inventory (#11089) (#11186)

2026-08-23 01:26:48 -03:00

hooks

fix(dashboard): send periodic WS heartbeat pings to stop live-dashboard reconnect churn (#10452)

2026-08-18 10:50:26 -03:00

i18n

fix(i18n): restore three placeholders dropped from the pt catalogue (#11325)

2026-08-24 01:49:48 -03:00

lib

fix(db): judge the proxy URL host by address, not by spelling (#11319)

2026-08-24 01:50:35 -03:00

middleware

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

mitm

fix(agent-bridge): make the regenerate-cert endpoint actually mint a new cert (#10467) (#10715)

2026-08-20 06:28:41 -03:00

models

Release v3.8.49 (#7076)

2026-07-29 15:18:55 -03:00

scripts

feat(db): consolidate all database settings into SystemStorageTab (closes #1935) (#1947)

2026-05-04 19:25:41 -03:00

server

fix(security): close round-3 advisories (v7g9, x7vm, j7j4, jcm5) + exposure warning (wmgv) (#11261)

2026-08-23 20:32:42 -03:00

shared

fix(db): judge the proxy URL host by address, not by spelling (#11319)

2026-08-24 01:50:35 -03:00

sse

fix(github): verify access tokens during health checks (#11320)

2026-08-24 01:50:30 -03:00

store

Release v3.8.38 (#5078)

2026-06-27 09:07:12 -03:00

types

fix(config-audit): persist config audit log to SQLite with retention (#11103)

2026-08-22 14:40:09 -03:00

instrumentation-node.ts

fix(startup): log when credential health check is disabled (#11016) (#11021)

2026-08-21 14:00:27 -03:00

instrumentation.ts

fix(cli): guarantee non-empty [STARTUP] Fatal log on instrumentation-hook boot throw (#10447)

2026-08-18 10:57:44 -03:00

proxy.ts

fix(security): close 4 STILL-REAL advisory findings (ACP RCE hardening, db-backups tier, uppercase authz bypass, spawn-veto drift) (#11028)

2026-08-21 13:57:42 -03:00