teknium1 2bcb893d87 fix(feishu): set client_max_size on the webhook Application ...

Follow-up to the salvaged #54938: the bounded reader gives a proper 413 +
anomaly telemetry for oversized chunked bodies; client_max_size makes
aiohttp enforce the same 1 MiB cap on every other read path
(#58536/#58902/#59180 pattern). Test fixture's fake Application now
accepts kwargs.

2026-07-05 17:38:36 -07:00

..

browser

fix: guard int(os.getenv()) casts against malformed env vars (#40598)

2026-06-07 06:14:24 -07:00

context_engine

feat(context-engine): host contract for external context engines

2026-05-28 01:45:30 -07:00

cron_providers

fix(cron): avoid provider package shadowing core cron

2026-06-23 23:39:22 -07:00

dashboard_auth

feat(dashboard_auth): support confidential clients (client_secret) in self-hosted OIDC (#55344)

2026-06-30 13:32:51 +10:00

disk-cleanup

docs(disk-cleanup): clarify cron output-root protection is exact-match

2026-07-01 15:42:04 +05:30

google_meet

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

hermes-achievements

revert(plugins): restore user dashboard plugin backend API auto-import (#43719) (#51950)

2026-06-24 07:46:54 -07:00

image_gen

fix(image-gen): route local-input credential guard through one shared chokepoint + cover xai (#57698)

2026-07-03 18:47:53 +05:30

kanban

fix(security): sanitize kanban markdown html

2026-06-21 13:10:17 -07:00

memory

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

model-providers

feat(providers): GLM-5.2 native reasoning_effort controls (#58884)

2026-07-05 13:48:01 -07:00

observability

fix(langfuse): bound _TRACE_STATE growth from non-finalizing turns

2026-06-18 12:59:41 +05:30

platforms

fix(feishu): set client_max_size on the webhook Application

2026-07-05 17:38:36 -07:00

security-guidance

plugins: add security-guidance — pattern-matched warnings on dangerous code writes (#33131)

2026-05-27 02:07:21 -07:00

spotify

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

teams_pipeline

fix(teams-pipeline): reject dot-only recording display_name

2026-07-01 02:03:48 -07:00

video_gen

fix(xai): route video-gen local inputs through the shared read guard

2026-07-03 18:47:53 +05:30

web

fix(web): re-check Firecrawl final URLs for SSRF

2026-07-01 00:49:38 -07:00

__init__.py

feat(memory): pluggable memory provider interface with profile isolation, review fixes, and honcho CLI restoration (#4623)

2026-04-02 15:33:51 -07:00

plugin_utils.py

fix(plugins): thread-safe lazy-singleton helpers; fix honcho TOCTOU (#24759) (#42150)

2026-06-08 09:35:22 -07:00