ooiuuii 9769642e7f fix: reject unsafe Mattermost API path segments (#98390) ...

* Harden Mattermost API paths

* fix(mattermost): guard direct media file paths

* refactor(mattermost): streamline API path validation

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-07-17 11:36:51 +01:00

..

acpx

fix(acpx): preserve Unicode in catalog tool arguments (#109589)

2026-07-16 21:21:04 -07:00

active-memory

test: accelerate active-memory timeout cleanup coverage (#109631)

2026-07-16 21:19:11 -07:00

admin-http-rpc

…

alibaba

…

amazon-bedrock

fix: Bedrock ARN region routing, Copilot device-flow pacing, TUI input fixes (#109740)

2026-07-17 01:09:29 -07:00

amazon-bedrock-mantle

refactor(deadcode): tighten provider extension roots (#108497)

2026-07-15 16:23:47 -07:00

anthropic

perf(ci): remove the anthropic-cli jiti stall and stripe the full-plan whales (#109769)

2026-07-17 00:58:32 -07:00

anthropic-vertex

fix: reject oversized credential files in remaining readers (#109260)

2026-07-16 11:33:18 -07:00

arcee

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

azure-speech

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

baseten

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

bonjour

…

brave

…

browser

style: format tab-discovery-poll-abort test

2026-07-17 01:50:53 -07:00

byteplus

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

canvas

fix(canvas): stop stalled Git blocking A2UI builds (#109476)

2026-07-16 23:20:01 -07:00

cerebras

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

chutes

fix(chutes): cancel userinfo error response body before returning null (#109677)

2026-07-17 01:11:11 -07:00

clawrouter

fix(clawrouter): cancel non-OK usage response body before throwing (#109525)

2026-07-16 23:16:25 -07:00

clickclack

perf(test): poll ClickClack gateway faster (#109803)

2026-07-17 10:22:09 +01:00

cloudflare-ai-gateway

refactor(deadcode): tighten more provider extension roots (#108515)

2026-07-15 17:05:21 -07:00

codex

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

cohere

refactor(deadcode): tighten provider extension roots (#108497)

2026-07-15 16:23:47 -07:00

comfy

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

copilot

fix(agents): block fallback completion delegation (#92011)

2026-07-16 21:06:40 -07:00

copilot-proxy

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

crabbox

refactor(extensions): privatize small plugin internals (#107774)

2026-07-14 14:15:44 -07:00

deepgram

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

deepinfra

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

deepseek

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

device-pair

refactor: simplify recent async ownership fixes (#108164)

2026-07-15 03:32:15 -07:00

diagnostics-otel

…

diagnostics-prometheus

refactor: privatize diagnostics, Meet, and QA test seams (#107869)

2026-07-14 17:42:34 -07:00

diffs

refactor(diffs): move ephemeral artifacts to SQLite (#109328)

2026-07-16 16:47:19 -07:00

diffs-language-pack

…

discord

fix: keep healthy channel accounts running when one credential fails (#109766)

2026-07-17 01:12:18 -07:00

document-extract

…

duckduckgo

…

elevenlabs

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

exa

…

fal

refactor(deadcode): tighten extension root modeling (#108538)

2026-07-15 18:18:23 -07:00

featherless

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

feishu

fix: keep healthy channel accounts running when one credential fails (#109766)

2026-07-17 01:12:18 -07:00

file-transfer

fix(file-transfer): denyPaths does not deny listing the denied directory itself (#109233)

2026-07-16 22:22:01 -07:00

firecrawl

…

fireworks

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

github-copilot

fix: Bedrock ARN region routing, Copilot device-flow pacing, TUI input fixes (#109740)

2026-07-17 01:09:29 -07:00

gmi

…

google

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

google-meet

test(google-meet): keep CLI test on plugin boundary (#109915)

2026-07-17 11:26:49 +01:00

googlechat

fix: keep healthy channel accounts running when one credential fails (#109766)

2026-07-17 01:12:18 -07:00

gradium

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

groq

…

huggingface

fix(huggingface): release connections after failed model discovery (#109464)

2026-07-16 21:54:17 -07:00

image-generation-core

…

imessage

docs(channels): settle replay-guard vs ingress-drain layering contract (#109799)

2026-07-17 11:13:00 +01:00

inworld

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

irc

fix: keep healthy channel accounts running when one credential fails (#109766)

2026-07-17 01:12:18 -07:00

kilocode

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

kimi-coding

fix(providers): refresh zai/kimi/moonshot/xai catalogs against July 2026 vendor docs (#109666)

2026-07-16 22:41:03 -07:00

line

fix(line): prevent profile cache growth across users (#109750)

2026-07-17 10:23:51 +01:00

linux-canvas

refactor: privatize Linux Canvas and Node Host internals (#107884)

2026-07-14 18:00:16 -07:00

linux-node

fix(linux-node): keep command errors UTF-16 safe (#107717)

2026-07-15 00:16:39 -07:00

litellm

…

llama-cpp

feat(llama-cpp): gate Gemma default by RAM (#109585)

2026-07-16 22:17:57 -07:00

llm-task

…

lmstudio

fix(lmstudio): cancel model discovery response body on non-ok (#109718)

2026-07-17 01:12:23 -07:00

lobster

…

logbook

fix: prevent SQLite lock stalls and schema drift (#108663)

2026-07-16 01:45:06 -07:00

longcat

…

matrix

fix: keep healthy channel accounts running when one credential fails (#109766)

2026-07-17 01:12:18 -07:00

mattermost

fix: reject unsafe Mattermost API path segments (#98390)

2026-07-17 11:36:51 +01:00

media-understanding-core

…

memory-core

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

memory-lancedb

fix(memory-lancedb): stop forwarding embedding dimensions upstream (#69707)

2026-07-16 21:35:44 -07:00

memory-wiki

fix(memory-wiki): bound stalled Obsidian CLI calls (#109232)

2026-07-16 12:35:02 -07:00

meta

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

microsoft

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

microsoft-foundry

fix(agents): guard optional provider models when resolving transcript route (#109252)

2026-07-16 11:10:59 -07:00

migrate-claude

fix(migrate): harden importer path resolution and memory copy safety (#109314)

2026-07-16 12:56:43 -07:00

migrate-hermes

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

minimax

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

mistral

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

moonshot

fix(providers): refresh zai/kimi/moonshot/xai catalogs against July 2026 vendor docs (#109666)

2026-07-16 22:41:03 -07:00

msteams

fix(msteams): cancel non-OK consent upload response body before throwing (#109701)

2026-07-17 01:18:40 -07:00

mxc

…

nextcloud-talk

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

nostr

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

novita

…

nvidia

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

oc-path

fix(oc-path): reject oversized non-ASCII path URIs (#108576)

2026-07-16 02:11:39 -07:00

ollama

fix(ollama): one broken local model no longer bricks interactive setup (#109895)

2026-07-17 11:12:55 +01:00

onepassword

fix(onepassword): disable desktop-app integration on broker op calls (#109157)

2026-07-16 09:15:03 -07:00

open-prose

…

openai

fix(openai): close OAuth callback prompts cleanly (#89491)

2026-07-16 23:58:41 -07:00

opencode

fix(opencode): preserve Unicode in catalog tool input (#109591)

2026-07-16 21:10:18 -07:00

opencode-go

chore(plugins): gate deprecation hygiene in CI and purge internal deprecated usage (#108261)

2026-07-15 04:15:23 -07:00

openrouter

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

openshell

refactor(extensions): trim provider and channel internals (#107817)

2026-07-14 15:38:39 -07:00

parallel

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

perplexity

…

phone-control

…

pixverse

refactor(deadcode): tighten more provider extension roots (#108515)

2026-07-15 17:05:21 -07:00

policy

refactor(deadcode): enforce repository hard zero (#108641)

2026-07-15 22:40:00 -07:00

qa-channel

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

qa-lab

fix(qa): bound Windows taskkill process termination (#109453)

2026-07-16 19:11:43 -07:00

qianfan

refactor(deadcode): tighten provider extension roots (#108497)

2026-07-15 16:23:47 -07:00

qqbot

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

qwen

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

raft

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

reef

fix(reef): prevent blank guard keys from denying every message (#109667)

2026-07-17 10:19:21 +01:00

runway

…

searxng

…

senseaudio

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

sglang

…

signal

fix(signal): recover inbound messages after crashes (#109907)

2026-07-17 11:34:43 +01:00

slack

fix: keep healthy channel accounts running when one credential fails (#109766)

2026-07-17 01:12:18 -07:00

sms

fix(sms): prevent silent loss of acknowledged Twilio messages (#109866)

2026-07-17 11:11:13 +01:00

stepfun

…

synology-chat

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

synthetic

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

talk-voice

…

tavily

refactor(deadcode): tighten more provider extension roots (#108515)

2026-07-15 17:05:21 -07:00

telegram

docs(channels): settle replay-guard vs ingress-drain layering contract (#109799)

2026-07-17 11:13:00 +01:00

tencent

refactor(deadcode): tighten provider extension roots (#108497)

2026-07-15 16:23:47 -07:00

test-support

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

thread-ownership

…

tlon

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

together

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

tokenjuice

…

tts-local-cli

…

twitch

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

vault

fix(vault): reject oversized credential files (#108761)

2026-07-16 04:02:44 -07:00

venice

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

vercel-ai-gateway

…

video-generation-core

…

vllm

refactor(vllm): remove unused registration shim (#108500)

2026-07-15 16:36:30 -07:00

voice-call

fix(voice-call): honor abortSignal during Twilio audio chunk pacing (#109618)

2026-07-17 01:44:43 -07:00

volcengine

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

voyage

refactor(deadcode): tighten extension root modeling (#108538)

2026-07-15 18:18:23 -07:00

vydra

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

web-readability

…

webhooks

fix(webhooks): keep routes cold when SecretRefs are unavailable (#109715)

2026-07-16 23:56:59 -07:00

whatsapp

fix(whatsapp): add live group directory (#109886)

2026-07-17 11:12:07 +01:00

workboard

fix(workboard): record resolved runtime metadata instead of hardcoded codex engine (#108887)

2026-07-16 04:10:27 -07:00

workspaces

feat(workspaces): add full-bleed single-widget tabs (#109627)

2026-07-16 21:56:57 -07:00

xai

perf(test): poll xAI realtime state faster (#109762)

2026-07-17 00:28:13 -07:00

xiaomi

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

zai

fix(providers): refresh zai/kimi/moonshot/xai catalogs against July 2026 vendor docs (#109666)

2026-07-16 22:41:03 -07:00

zalo

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

zalouser

refactor(channels): centralize inbound orchestration and remove internal compat (#109716)

2026-07-17 00:56:46 -07:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

video-generation-providers.live.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00