Pavan Kumar Gondhi 2f06696579 fix(security): block MINIMAX_API_HOST workspace env injection and remove env-driven URL routing [AI-assisted] (#67300) ...

* fix: address issue

* fix: address review feedback

* fix: finalize issue changes

* fix: address PR review feedback

* address review feedback

* docs: add changelog entry for PR merge

2026-04-20 22:51:03 +05:30

..

acpx

test: share acpx runtime fixture

2026-04-20 18:01:13 +01:00

active-memory

perf(test): trim active memory and qa lab hotspots

2026-04-20 15:04:38 +01:00

alibaba

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

amazon-bedrock

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

amazon-bedrock-mantle

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

anthropic

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

anthropic-vertex

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

arcee

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

bluebubbles

fix(bluebubbles): use runtime fetch wrapper

2026-04-20 18:15:43 +01:00

brave

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

browser

refactor: share browser runtime helpers

2026-04-20 16:32:28 +01:00

byteplus

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

chutes

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

cloudflare-ai-gateway

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

codex

test: share codex provider fixtures

2026-04-20 16:59:18 +01:00

comfy

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

copilot-proxy

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

deepgram

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

deepseek

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

device-pair

test: share device pair approval fixtures

2026-04-20 18:20:43 +01:00

diagnostics-otel

build: update dependencies

2026-04-20 13:18:32 +01:00

diffs

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

discord

test(extensions): move channel contracts out of core

2026-04-20 17:59:51 +01:00

duckduckgo

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

elevenlabs

test: share elevenlabs tts request fixture

2026-04-20 18:19:25 +01:00

exa

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

fal

test: share fal video queue fixtures

2026-04-20 18:18:21 +01:00

feishu

test(extensions): stabilize ci test assertions

2026-04-20 18:09:01 +01:00

firecrawl

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

fireworks

test: share fireworks runtime model fixture

2026-04-20 18:16:27 +01:00

github-copilot

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

google

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

googlechat

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

groq

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

huggingface

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

image-generation-core

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

imessage

test(extensions): move channel contracts out of core

2026-04-20 17:59:51 +01:00

irc

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

kilocode

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

kimi-coding

test(kimi): preserve async stream arguments

2026-04-20 18:20:00 +01:00

line

test(extensions): move channel contracts out of core

2026-04-20 17:59:51 +01:00

litellm

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

llm-task

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

lmstudio

fix: allow LM Studio local auth marker

2026-04-20 16:50:01 +01:00

lobster

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

matrix

test: share matrix event fixtures

2026-04-20 16:22:01 +01:00

mattermost

feat(mattermost): keep draft previews on one visible sink per turn (#47838)

2026-04-20 17:57:12 +05:30

media-understanding-core

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

memory-core

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

memory-lancedb

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

memory-wiki

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

microsoft

test: isolate BlueBubbles shard under parallelism

2026-04-20 18:06:45 +01:00

microsoft-foundry

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

minimax

fix(security): block MINIMAX_API_HOST workspace env injection and remove env-driven URL routing [AI-assisted] (#67300)

2026-04-20 22:51:03 +05:30

mistral

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

moonshot

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

msteams

refactor: share msteams token request flow

2026-04-20 15:45:41 +01:00

nextcloud-talk

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

nostr

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

nvidia

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

ollama

test: share ollama tags fetch fixture

2026-04-20 18:13:50 +01:00

open-prose

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

openai

test: share openai image response fixture

2026-04-20 18:12:43 +01:00

opencode

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

opencode-go

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

openrouter

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

openshell

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

perplexity

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

phone-control

test(plugins): fix sync register call sites

2026-04-17 10:14:00 +05:30

qa-channel

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

qa-lab

test: share qa docker healthy deps

2026-04-20 18:07:04 +01:00

qa-matrix

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

qianfan

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

qqbot

refactor: share qqbot speech provider schema

2026-04-20 17:16:27 +01:00

qwen

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

runway

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

searxng

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

sglang

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

shared

test: trim whatsapp channel test barrels

2026-04-03 16:39:47 +01:00

signal

test(extensions): move channel contracts out of core

2026-04-20 17:59:51 +01:00

slack

test: share slack approval origin fixture

2026-04-20 17:59:57 +01:00

speech-core

test: share speech tts payload fixture

2026-04-20 17:11:33 +01:00

stepfun

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

synology-chat

test(extensions): move channel security coverage

2026-04-20 17:38:20 +01:00

synthetic

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

talk-voice

test(plugins): fix sync register call sites

2026-04-17 10:14:00 +05:30

tavily

refactor: share tavily tool helpers

2026-04-20 16:24:29 +01:00

telegram

test(extensions): stabilize ci test assertions

2026-04-20 18:09:01 +01:00

thread-ownership

test(plugins): fix sync register call sites

2026-04-17 10:14:00 +05:30

tlon

refactor: reuse runtime logger helper

2026-04-20 15:34:39 +01:00

together

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

twitch

test: share twitch finalize fixture

2026-04-20 17:47:01 +01:00

venice

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

vercel-ai-gateway

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

video-generation-core

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

vllm

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

voice-call

test: share voice call notify fixtures

2026-04-20 17:05:16 +01:00

volcengine

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

voyage

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

vydra

test: share vydra provider fixtures

2026-04-20 16:34:48 +01:00

webhooks

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

whatsapp

test(extensions): move channel contracts out of core

2026-04-20 17:59:51 +01:00

xai

build(deps): declare extension runtime dependencies

2026-04-20 16:07:14 +01:00

xiaomi

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

zai

test: share zai glm template fixture

2026-04-20 18:08:20 +01:00

zalo

chore: release 2026.4.20

2026-04-20 13:16:40 +01:00

zalouser

test(extensions): move channel contracts out of core

2026-04-20 17:59:51 +01:00

.npmignore

…

AGENTS.md

Docs: add test performance guardrails

2026-04-17 02:23:49 -04:00

CLAUDE.md

Docs: add boundary AGENTS guides (#56647)

2026-03-28 20:22:03 -04:00

music-generation-providers.live.test.ts

fix: stabilize media live provider coverage

2026-04-06 19:15:31 +01:00

tsconfig.package-boundary.base.json

refactor(cli): normalize route boundaries

2026-04-06 15:38:04 +01:00

tsconfig.package-boundary.paths.json

fix(ci): sync package boundary paths config

2026-04-09 23:59:00 +01:00

video-generation-providers.live.test.ts

fix: bound live video generation smoke

2026-04-14 14:59:01 +01:00