pgondhi987 8aceaf5d0f fix(security): close fail-open bypass in exec script preflight [AI] (#59398) ...

* fix: address issue

* fix: finalize issue changes

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* chore: add changelog for exec preflight fail-closed hardening

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>

2026-04-02 11:00:39 -06:00

..

acpx

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

amazon-bedrock

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

anthropic

refactor(providers): centralize request capabilities (#59636)

2026-04-02 20:26:22 +09:00

anthropic-vertex

fix(providers): centralize Google endpoint classification (#59556)

2026-04-02 19:21:31 +09:00

bluebubbles

fix(compare): reuse shared secret comparison helper (#58432)

2026-04-02 13:53:19 +01:00

brave

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

browser

fix(browser): block SSRF redirect bypass via real-time route interception (#58771)

2026-04-02 09:07:57 -07:00

byteplus

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

chutes

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

cloudflare-ai-gateway

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

copilot-proxy

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

deepgram

refactor(providers): normalize transport policy wiring (#59682)

2026-04-02 22:54:34 +09:00

deepseek

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

device-pair

refactor(channels): route core through registered plugin capabilities

2026-03-30 01:03:42 +01:00

diagnostics-otel

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

diffs

Diffs: validate viewerBaseUrl in manifest schema

2026-04-02 11:55:05 -04:00

discord

fix(security): close fail-open bypass in exec script preflight [AI] (#59398)

2026-04-02 11:00:39 -06:00

duckduckgo

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

elevenlabs

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

exa

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

fal

fix(providers): route image generation through shared transport (#59729)

2026-04-03 00:32:37 +09:00

feishu

fix(compare): reuse shared secret comparison helper (#58432)

2026-04-02 13:53:19 +01:00

firecrawl

refactor(plugins): tighten web fetch provider boundary (#59646)

2026-04-02 20:53:57 +09:00

github-copilot

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

google

Separate Gemini OAuth state from PKCE verifier (#59116)

2026-04-02 09:51:11 -07:00

googlechat

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

groq

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

huggingface

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

image-generation-core

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

imessage

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

irc

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

kilocode

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

kimi-coding

fix: normalize kimi anthropic tool payloads (#59440)

2026-04-02 13:39:51 +05:30

line

perf(test): narrow line reply context import

2026-04-02 00:16:03 +09:00

litellm

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

llm-task

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

lobster

!feat(plugins): add web fetch provider boundary (#59465)

2026-04-02 20:25:19 +09:00

matrix

perf(memory): trim matrix host validation imports

2026-04-03 01:48:09 +09:00

mattermost

fix(compare): reuse shared secret comparison helper (#58432)

2026-04-02 13:53:19 +01:00

media-understanding-core

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

memory-core

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

memory-lancedb

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

microsoft

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

microsoft-foundry

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

minimax

fix(providers): route image generation through shared transport (#59729)

2026-04-03 00:32:37 +09:00

mistral

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

modelstudio

refactor(providers): centralize request capabilities (#59636)

2026-04-02 20:26:22 +09:00

moonshot

refactor(providers): normalize transport policy wiring (#59682)

2026-04-02 22:54:34 +09:00

msteams

fix(msteams): use formatUnknownError instead of String(err) for error logging (#59321)

2026-04-01 21:06:44 -05:00

nextcloud-talk

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

nostr

docs: fix Nostr inbound signature verification order in docs

2026-04-02 10:11:09 +09:00

nvidia

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

ollama

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

open-prose

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

openai

fix(providers): route image generation through shared transport (#59729)

2026-04-03 00:32:37 +09:00

opencode

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

opencode-go

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

openrouter

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

openshell

OpenShell: constrain mirror sync roots (#58515)

2026-04-02 06:21:30 -07:00

perplexity

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

phone-control

tighten phone-control scope helper extraction

2026-03-30 16:17:17 +02:00

qianfan

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

qqbot

fix(qqbot): restrict structured payload local paths (#58453)

2026-04-02 10:20:52 +01:00

searxng

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

sglang

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

shared

refactor: route plugin runtime through bundled seams

2026-03-27 16:40:27 +00:00

signal

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

slack

feat(approvals): auto-enable native chat approvals

2026-04-02 17:30:40 +01:00

speech-core

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

synology-chat

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

synthetic

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

talk-voice

style: apply formatter cleanups

2026-03-30 16:20:27 +01:00

tavily

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

telegram

feat(approvals): auto-enable native chat approvals

2026-04-02 17:30:40 +01:00

thread-ownership

feat(gateway): make chat history max chars configurable (#58900)

2026-04-01 21:08:37 +11:00

tlon

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

together

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

twitch

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

venice

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

vercel-ai-gateway

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

vllm

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

voice-call

fix(compare): reuse shared secret comparison helper (#58432)

2026-04-02 13:53:19 +01:00

volcengine

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

whatsapp

fix(matrix): restore guided setup flow (#59462)

2026-04-02 02:15:32 -04:00

xai

fix(xai): make x_search auth plugin-owned (#59691)

2026-04-02 23:54:07 +09:00

xiaomi

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

zai

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

zalo

fix(zalo): scope replay dedupe cache key to path and account [AI] (#59387)

2026-04-02 09:36:35 -07:00

zalouser

build: prepare 2026.4.1-beta.1 release

2026-04-01 15:09:19 +01:00

.npmignore

…

AGENTS.md

Docs: add boundary AGENTS guides (#56647)

2026-03-28 20:22:03 -04:00

CLAUDE.md

Docs: add boundary AGENTS guides (#56647)

2026-03-28 20:22:03 -04:00