Peter Steinberger
202f80792e
feat: add plugin text transforms
2026-04-11 02:17:39 +01:00
Peter Steinberger
c254ebfbef
fix(ci): align protocol and cron gates
2026-04-11 01:44:36 +01:00
Peter Steinberger
950ecd30ec
test: stabilize media and contract shards
2026-04-11 01:21:52 +01:00
Peter Steinberger
c94888dbee
fix: honor heartbeat timeoutSeconds ( #64491 )
2026-04-11 00:39:21 +01:00
Vincent Koc
9e2e4cde19
ci(test): align node lane names with boundary split
2026-04-11 00:36:06 +01:00
Peter Steinberger
6281dd7379
perf: reduce test import overhead
2026-04-10 23:09:37 +01:00
Tak Hoffman
f16a66fa43
fix: release local heavy-check locks on success
2026-04-10 17:05:26 -05:00
Peter Steinberger
8b7ba0e481
test: keep unit-fast single shard
2026-04-10 23:04:29 +01:00
Peter Steinberger
de8f3fdf92
test: split unit-fast shard
2026-04-10 23:02:22 +01:00
Peter Steinberger
44ec4d05de
feat: add pluggable agent harness registry
2026-04-10 21:22:16 +01:00
Peter Steinberger
04c8026d03
chore: enable no-unnecessary-type-arguments
2026-04-10 20:14:49 +01:00
Peter Steinberger
8640b89158
test: trim provider contract slow paths
2026-04-10 20:00:48 +01:00
Peter Steinberger
59925c1a74
chore: update dependencies and oxc tooling
2026-04-10 19:28:42 +01:00
Peter Steinberger
e7db987ce6
test: trim heavy imports and harden ci checks
2026-04-10 19:23:10 +01:00
Peter Steinberger
f6ed276f51
style: apply updated formatter output
2026-04-10 19:17:39 +01:00
Peter Steinberger
bac98d4218
test: reduce media contract import cost
2026-04-10 17:31:08 +01:00
Peter Steinberger
be9bef32df
perf: cache local tsgo checks
2026-04-10 17:06:28 +01:00
Peter Steinberger
e9fb4c7f93
perf: skip tsgo declaration transforms
2026-04-10 15:52:07 +01:00
Peter Steinberger
56fc20fb7c
test: align Vitest config path assertions
2026-04-10 15:49:37 +01:00
Peter Steinberger
3c0e5f0ea5
test: restore moved Vitest config paths
2026-04-10 15:38:14 +01:00
Peter Steinberger
77bdf2f44d
test: remove import-heavy files from unit-fast
2026-04-10 14:57:24 +01:00
Peter Steinberger
1b1853f0cc
test: restore moved Vitest config discovery
2026-04-10 14:20:39 +01:00
Peter Steinberger
2ccb5cff22
test: move Vitest configs under test
2026-04-10 13:44:51 +01:00
Peter Steinberger
64f2b20963
test: isolate sharding default env
2026-04-10 13:43:25 +01:00
Peter Steinberger
e462e531ad
test: keep runtime staging fallback assertion on symlink path
2026-04-10 09:57:27 +01:00
Peter Steinberger
ec5ef68b0c
test: fix latest fast-lane boundaries
2026-04-10 09:53:17 +01:00
Peter Steinberger
4522c1527e
test: avoid jiti facade load in group policy fallback
2026-04-10 09:47:57 +01:00
Peter Steinberger
56cf1bd40c
test: move image generation live sweep out of src
2026-04-10 09:47:57 +01:00
Peter Steinberger
1d310e2ab0
fix: restore main verification gates
2026-04-10 09:34:50 +01:00
Vincent Koc
b82fc1fdad
docs(boundary): codify shared test helper plugin seams
2026-04-10 08:27:35 +01:00
Vincent Koc
975e69b00b
test(memory-core): keep memory tool mock local to plugin
2026-04-10 08:05:56 +01:00
Vincent Koc
3cea11d3b6
test(boundary): route helper imports through bundled plugin surfaces
2026-04-10 08:05:56 +01:00
Davanum Srinivas
08ae021d1f
fix(qqbot): guard image-size probe against SSRF ( #63495 )
...
* fix(qqbot): replace raw fetch in image-size probe with SSRF-guarded fetchRemoteMedia
Replace the bare fetch() in getImageSizeFromUrl() with fetchRemoteMedia()
from the plugin SDK, closing the blind SSRF via markdown image dimension
probing (GHSA-2767-2q9v-9326).
fetchRemoteMedia options: maxBytes 65536, maxRedirects 0, generic
public-network-only SSRF policy (no hostname allowlist, blocks
private/reserved/loopback/link-local/metadata IPs after DNS resolution).
Also fixes the repo-root resolution in scripts/lib/ts-guard-utils.mjs
which caused lint:tmp:no-raw-channel-fetch to miss extension files
entirely. The guard now walks up to .git instead of hardcoding two parent
traversals, and the allowlist is refreshed with all pre-existing raw
fetch callsites that became visible.
* fix(qqbot): guard image-size probe against SSRF (#63495 ) (thanks @dims)
---------
Co-authored-by: sliverp <870080352@qq.com >
2026-04-09 16:48:04 +08:00
Vincent Koc
89acb92011
test(boundary): guard src imports from bundled plugin paths
2026-04-09 09:30:45 +01:00
Vincent Koc
62eca3770f
test(boundary): guard sdk and package imports from bundled plugin paths
2026-04-09 09:10:05 +01:00
Vincent Koc
2729c91ad5
test(boundary): route security audit helper through public plugin surfaces
2026-04-09 08:10:27 +01:00
Peter Steinberger
719f06510c
chore: bump version to 2026.4.10
2026-04-09 03:56:22 +01:00
Peter Steinberger
5b28ab83ef
test: run local full suite project shards in parallel
2026-04-09 02:26:22 +01:00
Peter Steinberger
a9f831e065
test: make shared-token reload deterministic
2026-04-09 01:38:16 +01:00
Peter Steinberger
0766f0b422
test: update modelstudio catalog contract sentinel
2026-04-09 01:20:34 +01:00
Altay
554bc0a9fd
fix(plugins): keep test helpers out of contract barrels ( #63311 )
...
Merged via squash.
Prepared head SHA: 769e90c6af9790196+altaywtf@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
Reviewed-by: @altaywtf
2026-04-08 22:59:05 +01:00
Peter Steinberger
a3d21539ef
test: stabilize full-suite execution
2026-04-08 19:40:57 +01:00
Ayaan Zaidi
17e6ef4076
fix(build): keep tsdown prune best-effort
2026-04-08 21:16:49 +05:30
Peter Steinberger
654ad0a1fb
test: keep bundled web-search owner checks on public artifacts
2026-04-08 16:46:29 +01:00
Ayaan Zaidi
f4ec59c431
fix(build): honor postinstall disable flag
2026-04-08 21:01:53 +05:30
Ayaan Zaidi
66ec8909bd
fix(build): address bundled plugin prune review
2026-04-08 21:01:53 +05:30
Ayaan Zaidi
b28fe1b92f
fix(build): prune stale bundled plugin node_modules
2026-04-08 21:01:53 +05:30
Peter Steinberger
76ccbbf12f
refactor: dedupe media runtime test mocks
2026-04-08 15:58:45 +01:00
Peter Steinberger
edf6b490a6
fix: harden bundled plugin dependency release checks
2026-04-08 15:15:44 +01:00
Peter Steinberger
e65d6ebb63
test: fix full suite CI test isolation
2026-04-08 14:29:19 +01:00
