Hunter Miller 01715182e1 fix(tlon): address security review issues ...

- Fix SSRF in upload.ts: use urbitFetch with SSRF protection
- Fix SSRF in media.ts: use urbitFetch with SSRF protection
- Add command whitelist to tlon tool to prevent command injection
- Add getDefaultSsrFPolicy() helper for uploads/downloads

2026-03-02 15:46:34 -08:00

..

acpx

test: micro-optimize heavy gateway/browser/telegram suites

2026-03-02 22:29:04 +00:00

bluebubbles

Add runtime.stt.transcribeAudioFile for plugin STT access

2026-03-02 21:43:01 +00:00

copilot-proxy

build: bump versions to 2026.3.2

2026-03-02 04:55:53 +00:00

device-pair

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

diagnostics-otel

build: bump versions to 2026.3.2

2026-03-02 04:55:53 +00:00

diffs

test(perf): trim fixed waits in relay and startup tests

2026-03-02 17:30:33 +00:00

discord

build: bump versions to 2026.3.2

2026-03-02 04:55:53 +00:00

feishu

Feishu: reply to topic roots (#29968)

2026-03-02 17:41:36 -06:00

google-gemini-cli-auth

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

googlechat

ci: fix lint and audit regressions on main

2026-03-02 23:08:23 +00:00

imessage

fix(ci): align strict nullable typing across channels and ui

2026-03-02 09:56:14 +00:00

irc

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

line

test(perf): trim fixed waits in relay and startup tests

2026-03-02 17:30:33 +00:00

llm-task

build: bump versions to 2026.3.2

2026-03-02 04:55:53 +00:00

lobster

refactor(gateway): hard-break plugin wildcard http handlers

2026-03-02 16:24:06 +00:00

matrix

refactor: unify queueing and normalize telegram slack flows

2026-03-02 20:55:15 +00:00

mattermost

build: bump versions to 2026.3.2

2026-03-02 04:55:53 +00:00

memory-core

ci: fix lint and audit regressions on main

2026-03-02 23:08:23 +00:00

memory-lancedb

fix: add regression for memory-lancedb dimensions pass-through (#32036) (thanks @scotthuang)

2026-03-02 19:02:11 +00:00

minimax-portal-auth

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

msteams

refactor: harden msteams lifecycle and attachment flows

2026-03-02 21:19:23 +00:00

nextcloud-talk

test(perf): trim fixed waits in relay and startup tests

2026-03-02 17:30:33 +00:00

nostr

refactor(gateway): hard-break plugin wildcard http handlers

2026-03-02 16:24:06 +00:00

open-prose

build: bump versions to 2026.3.2

2026-03-02 04:55:53 +00:00

phone-control

refactor(gateway): harden plugin http route contracts

2026-03-02 16:48:00 +00:00

qwen-portal-auth

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

shared

fix(acpx): share windows wrapper resolver and add strict hardening mode

2026-03-01 23:57:06 +00:00

signal

fix(ci): align strict nullable typing across channels and ui

2026-03-02 09:56:14 +00:00

slack

fix(ci): align strict nullable typing across channels and ui

2026-03-02 09:56:14 +00:00

synology-chat

fix(synology-chat): prevent restart loop in startAccount (#23074)

2026-03-02 20:06:16 +00:00

talk-voice

Gateway/Plugins: device pairing + phone control plugins (#11755)

2026-02-08 18:07:13 +01:00

telegram

fix: add regression tests for telegram token guard (#31973) (thanks @ningding97)

2026-03-02 18:33:49 +00:00

test-utils

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

thread-ownership

test(extensions): cast fetch mocks to satisfy tsgo

2026-02-16 21:25:35 -05:00

tlon

fix(tlon): address security review issues

2026-03-02 15:46:34 -08:00

twitch

build: bump versions to 2026.3.2

2026-03-02 04:55:53 +00:00

voice-call

Tests: isolate webhook path suite and reset cron auth state

2026-03-02 18:57:46 +00:00

whatsapp

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

zalo

refactor(gateway): harden plugin http route contracts

2026-03-02 16:48:00 +00:00

zalouser

fix: align gateway and zalouser typing imports

2026-03-02 22:29:18 +00:00