Pavan Kumar Gondhi a65eb1b864 fix(zalo): add SSRF guard on outbound photo URLs [AI-assisted] (#69593) ...

* fix: address issue

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address build failures

* fix: address PR review feedback

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review feedback

* fix: address build feedback

2026-04-21 19:20:26 +05:30

..

acpx

fix: stage ACP and Codex runtime deps

2026-04-21 08:47:24 +01:00

active-memory

fix: gate max thinking by model support

2026-04-21 07:02:43 +01:00

alibaba

…

amazon-bedrock

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

amazon-bedrock-mantle

…

anthropic

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

anthropic-vertex

refactor: share anthropic vertex provider helpers

2026-04-20 22:05:39 +01:00

arcee

test: share provider catalog fixtures

2026-04-21 00:32:42 +01:00

bluebubbles

fix(bluebubbles): add opt-in coalesceSameSenderDms for split-send DMs (#69258)

2026-04-21 01:43:17 -07:00

brave

…

browser

fix(browser): clarify DevToolsActivePort attach failures

2026-04-21 08:11:41 +01:00

byteplus

…

chutes

…

cloudflare-ai-gateway

test(extensions): move provider contracts to owners

2026-04-20 20:55:39 +01:00

codex

fix(codex): exclude codex-app-server synthetic apiKey from secrets audit (#69581)

2026-04-21 21:38:26 +10:00

comfy

refactor: share ssrf policy merging

2026-04-21 00:54:08 +01:00

copilot-proxy

…

deepgram

…

deepseek

test: share provider catalog fixtures

2026-04-21 00:32:42 +01:00

device-pair

perf: avoid sort-for-single selection

2026-04-20 23:20:31 +01:00

diagnostics-otel

…

diffs

refactor: share plugin config issue formatting

2026-04-20 23:34:19 +01:00

discord

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

duckduckgo

refactor: share duckduckgo web search provider base

2026-04-20 22:05:39 +01:00

elevenlabs

test: share streaming error response helper

2026-04-21 00:32:42 +01:00

exa

fix(web-search): restore SecretRef runtime compatibility for bundled providers (#68424)

2026-04-21 02:34:24 +01:00

fal

refactor: share ssrf policy merging

2026-04-21 00:54:08 +01:00

feishu

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

firecrawl

fix(web-search): restore SecretRef runtime compatibility for bundled providers (#68424)

2026-04-21 02:34:24 +01:00

fireworks

test: share provider catalog fixtures

2026-04-21 00:32:42 +01:00

github-copilot

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

google

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

googlechat

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

groq

…

huggingface

…

image-generation-core

…

imessage

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

irc

test(extensions): move remaining channel schema tests

2026-04-20 21:54:49 +01:00

kilocode

…

kimi-coding

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

line

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

litellm

…

llm-task

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

lmstudio

refactor: share ssrf base url policy

2026-04-20 23:15:58 +01:00

lobster

fix: support Lobster approvalId TaskFlow resumes (#69559)

2026-04-21 05:32:13 +01:00

matrix

refactor: share timeout abort helper with matrix

2026-04-20 23:34:19 +01:00

mattermost

test(extensions): move registry channel contracts

2026-04-20 20:55:39 +01:00

media-understanding-core

…

memory-core

fix: stabilize memory dreaming QA

2026-04-21 03:12:42 +01:00

memory-lancedb

test(extensions): fix shared test helper contracts

2026-04-20 21:56:17 +01:00

memory-wiki

refactor: share plugin config issue formatting

2026-04-20 23:34:19 +01:00

microsoft

test: share debug proxy reset helper

2026-04-21 00:24:18 +01:00

microsoft-foundry

…

minimax

test: share minimax image fixtures

2026-04-20 21:33:44 +01:00

mistral

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

moonshot

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

msteams

refactor: share oauth callback flow

2026-04-21 01:07:09 +01:00

nextcloud-talk

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

nostr

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

nvidia

…

ollama

fix: gate max thinking by model support

2026-04-21 07:02:43 +01:00

open-prose

…

openai

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

opencode

…

opencode-go

…

openrouter

test(extensions): move provider contracts to owners

2026-04-20 20:55:39 +01:00

openshell

refactor: share plugin config issue formatting

2026-04-20 23:34:19 +01:00

perplexity

fix(web-search): restore SecretRef runtime compatibility for bundled providers (#68424)

2026-04-21 02:34:24 +01:00

phone-control

…

qa-channel

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

qa-lab

fix: tolerate qa cli json startup logs

2026-04-21 07:37:48 +01:00

qa-matrix

refactor: share matrix qa event matcher

2026-04-20 21:03:13 +01:00

qianfan

test: add Kimi and Qianfan extension coverage

2026-04-21 02:41:26 +01:00

qqbot

fix(qqbot): add SSRF guard to direct-upload URL paths in uploadC2CMedia and uploadGroupMedia [AI-assisted] (#69595)

2026-04-21 10:35:17 +05:30

qwen

test(extensions): move provider contracts to owners

2026-04-20 20:55:39 +01:00

runway

…

searxng

…

sglang

test(extensions): move provider contracts to owners

2026-04-20 20:55:39 +01:00

shared

…

signal

perf(channels): narrow slow bundled channel entry imports

2026-04-20 22:34:11 +01:00

slack

refactor: share channel doctor alias normalization

2026-04-20 23:34:19 +01:00

speech-core

test: share speech tts payload fixture

2026-04-20 17:11:33 +01:00

stepfun

…

synology-chat

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

synthetic

…

talk-voice

…

tavily

fix(web-search): restore SecretRef runtime compatibility for bundled providers (#68424)

2026-04-21 02:34:24 +01:00

telegram

fix: add silent reply policy by conversation type (#68644)

2026-04-21 05:17:55 +01:00

test-support

test: share provider catalog fixtures

2026-04-21 00:32:42 +01:00

thread-ownership

…

tlon

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

together

refactor: share provider polling helper

2026-04-20 23:04:10 +01:00

twitch

test(ci): reduce channel contract import cost

2026-04-21 00:40:07 +01:00

venice

test(extensions): move provider contracts to owners

2026-04-20 20:55:39 +01:00

vercel-ai-gateway

…

video-generation-core

…

vllm

test(extensions): move provider contracts to owners

2026-04-20 20:55:39 +01:00

voice-call

test: share voice call notify fixtures

2026-04-20 17:05:16 +01:00

volcengine

…

voyage

…

vydra

test: share vydra provider fixtures

2026-04-20 16:34:48 +01:00

webhooks

…

whatsapp

test: decouple outbound tests from bundled plugins

2026-04-20 22:44:38 +01:00

xai

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

xiaomi

…

zai

fix: centralize provider thinking profiles

2026-04-21 09:13:35 +01:00

zalo

fix(zalo): add SSRF guard on outbound photo URLs [AI-assisted] (#69593)

2026-04-21 19:20:26 +05:30

zalouser

test(extensions): split outbound payload contracts

2026-04-20 19:37:20 +01:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

test(extensions): keep generation helper out of discovery

2026-04-20 22:09:16 +01:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

…

video-generation-providers.live.test.ts

test(extensions): keep generation helper out of discovery

2026-04-20 22:09:16 +01:00