dsad e02cef0d0d fix(memory): guard local uploads against credential reads

2026-07-05 03:14:49 -07:00

..

browser

fix: guard int(os.getenv()) casts against malformed env vars (#40598)

2026-06-07 06:14:24 -07:00

context_engine

…

cron_providers

fix(cron): avoid provider package shadowing core cron

2026-06-23 23:39:22 -07:00

dashboard_auth

feat(dashboard_auth): support confidential clients (client_secret) in self-hosted OIDC (#55344)

2026-06-30 13:32:51 +10:00

disk-cleanup

docs(disk-cleanup): clarify cron output-root protection is exact-match

2026-07-01 15:42:04 +05:30

google_meet

fix: prevent TUI gateway stdin EOF crash across all TUI-context subprocess calls

2026-06-08 22:46:57 -07:00

hermes-achievements

revert(plugins): restore user dashboard plugin backend API auto-import (#43719) (#51950)

2026-06-24 07:46:54 -07:00

image_gen

fix(image-gen): route local-input credential guard through one shared chokepoint + cover xai (#57698)

2026-07-03 18:47:53 +05:30

kanban

fix(security): sanitize kanban markdown html

2026-06-21 13:10:17 -07:00

memory

fix(memory): guard local uploads against credential reads

2026-07-05 03:14:49 -07:00

model-providers

fix(custom-provider): emit reasoning_effort at the live profile path

2026-07-04 14:19:44 +05:30

observability

fix(langfuse): bound _TRACE_STATE growth from non-finalizing turns

2026-06-18 12:59:41 +05:30

platforms

fix(telegram): dedup saturated mid-stream overflow previews to stop flood-control edit storms (#58563)

2026-07-05 00:32:35 -07:00

security-guidance

…

spotify

…

teams_pipeline

fix(teams-pipeline): reject dot-only recording display_name

2026-07-01 02:03:48 -07:00

video_gen

fix(xai): route video-gen local inputs through the shared read guard

2026-07-03 18:47:53 +05:30

web

fix(web): re-check Firecrawl final URLs for SSRF

2026-07-01 00:49:38 -07:00

__init__.py

…

plugin_utils.py

fix(plugins): thread-safe lazy-singleton helpers; fix honcho TOCTOU (#24759) (#42150)

2026-06-08 09:35:22 -07:00