Peter Steinberger
f665da8dbc
refactor: dedupe ui lowercase helpers
2026-04-07 20:57:04 +01:00
Peter Steinberger
abf81ff1ed
refactor: dedupe plugin lowercase helpers
2026-04-07 20:57:04 +01:00
Peter Steinberger
179ccb952c
refactor: dedupe telegram matrix lowercase helpers
2026-04-07 20:57:04 +01:00
Peter Steinberger
182d41d678
refactor: dedupe command config lowercase helpers
2026-04-07 20:57:03 +01:00
Peter Steinberger
493e1c246e
refactor: dedupe remaining lowercase helpers
2026-04-07 20:57:03 +01:00
Peter Steinberger
e51a00ffc7
refactor: dedupe gateway infra lowercase helpers
2026-04-07 20:57:03 +01:00
Gustavo Madeira Santana
ad6bfc44d5
Tests: align approval runtime helpers
2026-04-07 15:37:28 -04:00
Gustavo Madeira Santana
0995ee0134
Extensions: align approval plugin typing
2026-04-07 15:37:28 -04:00
Gustavo Madeira Santana
b78202d44e
fix(exec): harden stale/replay/live requests
2026-04-07 15:37:28 -04:00
Gustavo Madeira Santana
e418a6d0cc
docs(changelog): dedupe entry
2026-04-07 15:37:26 -04:00
Gustavo Madeira Santana
6484b41eb9
Approvals: replay pending requests on startup
2026-04-07 15:37:01 -04:00
Peter Steinberger
a00b01f5ed
fix: harden complex qa suite scenarios
2026-04-07 20:35:39 +01:00
Peter Steinberger
b5d2bd6f41
fix(qa): tighten frontier scope evals
2026-04-07 20:32:42 +01:00
Peter Steinberger
4e69a9b329
fix(qa): restore safe no-fork gateway runtime
2026-04-07 20:32:42 +01:00
Vincent Koc
cde12e63e7
perf(qa): lazy-load runner catalog for lab ui
2026-04-07 20:32:42 +01:00
Vincent Koc
f312d6c106
fix(qa): preserve gateway cli auth in no-fork rpc path
2026-04-07 20:32:42 +01:00
Vincent Koc
e7538b4499
perf(qa): drop per-rpc gateway cli forks
2026-04-07 20:32:42 +01:00
Vincent Koc
02bd9e8c10
perf(qa): trim frontier direct-agent waits
2026-04-07 20:32:42 +01:00
Vincent Koc
35eb70f1f5
test(qa): retry flaky local fetches in lab server tests
2026-04-07 20:32:42 +01:00
Vincent Koc
986536ff6b
fix(qa): keep direct self-check outputs under repo root
2026-04-07 20:32:42 +01:00
Vincent Koc
f6544a0a3b
fix(qa): anchor runner artifacts to repo root
2026-04-07 20:32:42 +01:00
Vincent Koc
daeff2fa89
fix(qa): default docker artifacts from repo root
2026-04-07 20:32:42 +01:00
Vincent Koc
76bde3d42b
fix(qa): support neutral-cwd docker commands
2026-04-07 20:32:42 +01:00
Vincent Koc
816a3eae8a
chore(qa): align qa cli provider input types
2026-04-07 20:32:42 +01:00
Vincent Koc
5aa4fd3216
fix(qa): normalize qa cli lane inputs
2026-04-07 20:32:42 +01:00
Vincent Koc
7d18b145f8
fix(qa): keep manual alternate model aligned
2026-04-07 20:32:42 +01:00
Vincent Koc
cdf18c16b4
fix(qa): default manual lanes by provider mode
2026-04-07 20:32:42 +01:00
Vincent Koc
3182588ad4
fix(qa): allow random qa-lab control-ui origins
2026-04-07 20:32:42 +01:00
Vincent Koc
82535771cd
fix(qa): pin gateway child control ui root
2026-04-07 20:32:42 +01:00
Vincent Koc
f9f38a48e6
fix(qa): align mock model-switch continuity
2026-04-07 20:32:42 +01:00
Vincent Koc
9a106f7e3c
fix(qa): support neutral-cwd suite runs
2026-04-07 20:32:42 +01:00
Vincent Koc
e8b446b985
docs(qa): expand frontier bakeoff runbook
2026-04-07 20:32:42 +01:00
Vincent Koc
f93b217834
feat(qa): add manual harness lane
2026-04-07 20:32:42 +01:00
Vincent Koc
63e6bb026c
fix(qa): isolate gateway child runtime
2026-04-07 20:32:42 +01:00
Vincent Koc
4f421fa0f1
fix(qa): harden frontier claude bakeoffs
2026-04-07 20:32:42 +01:00
Vincent Koc
18fb171179
feat(qa): add frontier harness bakeoff loop
2026-04-07 20:32:41 +01:00
Andrew Demczuk
bffb83acf8
fix(gateway): stop SSRF guard rejecting operator-configured proxy hostnames ( #62312 )
...
When allowPrivateProxy is true, the explicit proxy hostname is operator-
configured and trusted. The SSRF guard was checking the proxy hostname
against the target-scoped hostnameAllowlist (e.g. ["api.telegram.org"]),
which rejected localhost and other local proxy hostnames. This broke
Telegram media downloads (and any channel using a local proxy) after
the url-fetch security hardening in 2026.4.x.
Clear the hostnameAllowlist for the proxy hostname check while keeping
private-network IP validation in place via allowPrivateNetwork.
Fixes #61906
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-07 13:22:21 -06:00
Peter Steinberger
cfbe7ac227
fix(test): refresh schema snapshot and stabilize channel registry
2026-04-07 20:04:29 +01:00
Agustin Rivera
e5aae5e056
fix(browser): align browser.proxy profile mutation guards ( #60489 )
...
* fix(browser): block proxy profile mutations
* docs(changelog): add browser proxy guard entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-07 13:00:21 -06:00
Peter Steinberger
744d176744
test: speed up plugin cli tests
2026-04-07 19:59:46 +01:00
Peter Steinberger
4a0b8c6248
test: speed up slack setup entry tests
2026-04-07 19:59:46 +01:00
Peter Steinberger
f02ba9a3ed
test: speed up browser plugin entry tests
2026-04-07 19:59:46 +01:00
Nimrod Gutman
6380c872bc
feat(ios): improve gateway connection error ux ( #62650 )
...
* feat(ios): improve gateway connection error ux
* fix(ios): address gateway problem review feedback
* feat(ios): improve gateway connection error ux (#62650 ) (thanks @ngutman)
2026-04-07 21:53:22 +03:00
Agustin Rivera
a383878e97
Require re-pairing for node reconnect command upgrades ( #62658 )
...
* fix(node): require re-pairing for reconnect command upgrades
Co-authored-by: zsx <git@zsxsoft.com >
* fix(node): tighten reconnect pairing test polling
* docs(changelog): add node reconnect pairing entry
---------
Co-authored-by: zsx <git@zsxsoft.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-07 12:48:18 -06:00
Peter Steinberger
93ab2ac69d
test(gateway): cover isolated cron session key routing
2026-04-07 19:46:16 +01:00
Bruce MacDonald
ceb2311a1b
Changelog: restore dropped Approvals/runtime entry from conflict resolution
2026-04-07 11:45:07 -07:00
Bruce MacDonald
86f35a9bc0
chore(ollama): update suggested onboarding models ( #62626 )
...
Merged via squash.
Prepared head SHA: 48c083b88a5853428+BruceMacD@users.noreply.github.com >
Co-authored-by: BruceMacD <5853428+BruceMacD@users.noreply.github.com >
Reviewed-by: @BruceMacD
2026-04-07 11:42:29 -07:00
pgondhi987
23ab290a71
fix: expand host-exec env blocklist for Java, Rust, and Cargo toolchains [AI-assisted] ( #62291 )
...
* fix: address issue
* docs(changelog): add host env blocklist entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-07 12:40:54 -06:00
BitToby
9edf9804b1
feat: add cover image support to Discord event create ( #60883 )
...
* feat: add image param to Discord event create for cover art
* fix: pass trusted media roots to event cover image loader
* fix: solve lint error
* fix: add changelog entry for Discord event cover image support (#60883 ) (thanks @bittoby)
---------
Co-authored-by: Shadow <hi@shadowing.dev >
2026-04-07 13:40:39 -05:00
Gustavo Madeira Santana
d78512b09d
Refactor: centralize native approval lifecycle assembly ( #62135 )
...
Merged via squash.
Prepared head SHA: b7c20a73985599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-07 14:40:26 -04:00
