Peter Steinberger
229eb72cf6
build: exclude private QA from npm package
2026-04-15 09:39:51 -07:00
Peter Steinberger
cb790c858b
build(release): bump core app versions to 2026.4.15-beta.1
2026-04-15 15:06:13 +01:00
Peter Steinberger
1bca9ba479
fix(release): mirror bundled runtime deps
2026-04-15 12:29:15 +01:00
Vincent Koc
c727388f93
fix(plugins): localize bundled runtime deps to extensions ( #67099 )
...
* fix(plugins): localize bundled runtime deps to extensions
* fix(plugins): move staged runtime deps out of root
* fix(packaging): harden prepack and runtime dep staging
* fix(packaging): preserve optional runtime dep staging
* Update CHANGELOG.md
* fix(packaging): harden runtime staging filesystem writes
* fix(docker): ship preinstall warning in bootstrap layers
* fix(packaging): exclude staged plugin node_modules from npm pack
2026-04-15 12:04:31 +01:00
Peter Steinberger
e49be93f2c
fix(release): keep legacy update QA sidecars
2026-04-15 02:08:13 +01:00
Vincent Koc
f1c2be7d32
fix(ci): slim build-artifacts dist producer
2026-04-15 00:13:01 +01:00
Gustavo Madeira Santana
95be2c1605
QA: replace qa-lab-runtime with qa-runtime
...
Introduce a tiny generic qa-runtime seam for shared live-lane helpers and
repoint qa-matrix to it. This keeps the qa-lab host split while removing
the host-owned runtime name from runner code.
Drop the old qa-lab-runtime shim/export now that nothing consumes it and
keep the plugin-sdk surface aligned with the new seam.
2026-04-14 18:53:25 -04:00
Gustavo Madeira Santana
85eac42d34
QA: remove runner install fallback catalog
...
Drop the generated qa-runner catalog and the missing/install placeholder
path for repo-private QA runners. The host should discover bundled QA
commands from manifest plus runtime surface only.
Also trim stale qa-matrix install docs and package metadata so the
source-only QA policy stays consistent.
2026-04-14 17:37:18 -04:00
Gustavo Madeira Santana
82a2db71e8
refactor(qa): split Matrix QA into optional plugin ( #66723 )
...
Merged via squash.
Prepared head SHA: 27241bd089
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-14 16:28:57 -04:00
Vincent Koc
a848ddaa7e
fix(deps): patch follow-redirects vulnerability
2026-04-14 19:00:55 +01:00
Vincent Koc
66701d5a1e
fix(plugin-sdk): share opencode catalog auth helper
2026-04-14 16:48:02 +01:00
Frank Yang
d86527d8c6
fix(whatsapp): harden Baileys media upload hotfix ( #65966 )
...
Merged via squash.
Prepared head SHA: b5db59b8fe
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com >
Reviewed-by: @frankekn
2026-04-14 21:34:23 +08:00
Peter Steinberger
62f9cf53c9
chore: prepare 2026.4.14 release
2026-04-14 13:42:03 +01:00
Vincent Koc
381a8e860a
fix(discord): return native status replies directly ( #66434 )
2026-04-14 09:55:02 +01:00
Peter Steinberger
3deea5a426
fix: mirror baileys root dependency
2026-04-13 20:49:39 -07:00
Peter Steinberger
67ffb6f6c2
fix: keep baileys plugin-local
2026-04-13 20:49:39 -07:00
Peter Steinberger
224cbd9ff6
chore(release): prepare 2026.4.14 beta
2026-04-14 03:06:46 +01:00
Vincent Koc
9376f52419
fix(ci): mirror whatsapp runtime dependency
2026-04-14 00:01:44 +01:00
Vincent Koc
8ab89989c2
fix(ci): restore plugin-local whatsapp deps
2026-04-13 23:26:25 +01:00
Vincent Koc
36a58e714c
fix(ci): mirror whatsapp runtime dependency
2026-04-13 22:37:25 +01:00
Vincent Koc
21ca387eda
fix(ci): verify bundled plugin runtime deps
2026-04-13 11:09:13 +01:00
Peter Steinberger
ee601ae993
fix(matrix): mirror staged runtime dependencies
2026-04-13 10:32:22 +01:00
Vincent Koc
98c2a38bc3
fix(matrix): mirror runtime deps for docker builds
...
(cherry picked from commit 1c843552b775a0f29c72192843e267148cd198b8)
2026-04-13 10:24:18 +01:00
Peter Steinberger
72e56097ec
chore(release): prepare 2026.4.12
2026-04-13 09:49:01 +01:00
Rugved Somwanshi
0cfb83edfa
feat: LM Studio Integration ( #53248 )
...
* Feat: LM Studio Integration
* Format
* Support usage in streaming true
Fix token count
* Add custom window check
* Drop max tokens fallback
* tweak docs
Update generated
* Avoid error if stale header does not resolve
* Fix test
* Fix test
* Fix rebase issues
Trim code
* Fix tests
Drop keyless
Fixes
* Fix linter issues in tests
* Update generated artifacts
* Do not have fatal header resoltuion for discovery
* Do the same for API key as well
* fix: honor lmstudio preload runtime auth
* fix: clear stale lmstudio header auth
* fix: lazy-load lmstudio runtime facade
* fix: preserve lmstudio shared synthetic auth
* fix: clear stale lmstudio header auth in discovery
* fix: prefer lmstudio header auth for discovery
* fix: honor lmstudio header auth in warmup paths
* fix: clear stale lmstudio profile auth
* fix: ignore lmstudio env auth on header migration
* fix: use local lmstudio setup seam
* fix: resolve lmstudio rebase fallout
---------
Co-authored-by: Frank Yang <frank.ekn@gmail.com >
2026-04-13 15:22:44 +08:00
Peter Steinberger
b42937908d
chore(release): prepare 2026.4.12-beta.1
2026-04-13 00:20:52 +01:00
Peter Steinberger
cfd5f9e4e3
test(e2e): repair OpenShell prerelease smoke
2026-04-13 00:20:51 +01:00
Peter Steinberger
910a0e40d2
chore: update dependencies
2026-04-12 19:19:06 +01:00
Peter Steinberger
a8e140e395
chore: bump version to 2026.4.12
2026-04-12 10:37:18 -07:00
Vincent Koc
5b6667ef97
fix(ci): gate static import cycles with madge
2026-04-12 12:41:18 +01:00
Vincent Koc
38b72a6ae0
fix(check): include cycle guards in default gate
2026-04-12 08:38:41 +01:00
Vincent Koc
7ba3bb3399
fix(ci): guard static import SCCs
2026-04-12 08:25:29 +01:00
Vincent Koc
74a9d99d6a
fix(test): route serial runs through scoped vitest lanes
2026-04-12 04:45:30 +01:00
Peter Steinberger
769908ec3f
chore(release): prepare 2026.4.11
2026-04-12 01:05:56 +01:00
Peter Steinberger
65267c14d4
chore(release): refresh generated baselines
2026-04-12 00:22:32 +01:00
Tak Hoffman
958c34e82c
feat(qa-lab): Add proxy capture stack and QA Lab inspector ( #64895 )
...
* Add proxy capture core and CLI
* Expand transport capture coverage
* Add QA Lab capture backend
* Refine QA Lab capture UI
* Fix proxy capture review feedback
* Fix proxy run cleanup and TTS capture
* Fix proxy capture transport follow-ups
* Fix debug proxy CONNECT target parsing
* Harden QA Lab asset path containment
2026-04-11 12:34:57 -05:00
Peter Steinberger
788c37a6c2
chore(release): prepare 2026.4.11-beta.1
2026-04-11 16:10:13 +01:00
Peter Steinberger
cd89892b1f
fix(release): keep private QA bundles out of npm pack
2026-04-11 13:13:11 +01:00
Vincent Koc
636fe1c2db
fix(qa): ship scenario pack and isolate completion cache
2026-04-11 12:53:56 +01:00
Peter Steinberger
1ab6e5dbf0
chore(release): bump version to 2026.4.11
2026-04-11 04:51:17 +01:00
Peter Steinberger
69244f837f
test: speed provider retry imports
2026-04-11 02:37:51 +01:00
Peter Steinberger
e892def77c
chore: bump basic-ftp override
2026-04-10 21:44:16 +01:00
Peter Steinberger
bfc0889776
docs: document Codex harness plugin workflow
2026-04-10 21:22:16 +01:00
Peter Steinberger
59925c1a74
chore: update dependencies and oxc tooling
2026-04-10 19:28:42 +01:00
Peter Steinberger
8127c6cc15
build(deps): update workspace dependencies
2026-04-10 19:17:39 +01:00
Michael Appel
9f97ad857a
fix(security): pin axios to 1.15.0 and add dependency denylist for plugin installs [AI-assisted] ( #63891 )
...
* fix: address issue
* fix: address review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* Plugins: fix install security CI regressions
* Plugins: make manifest traversal linear
* Plugins: bound manifest security traversal
* Plugins: block denied node_modules package dirs
* Plugins: match node_modules case-insensitively
* Plugins: block denied package symlink paths
* Tests: normalize blocked symlink assertion
* Plugins: fail closed on unreadable denied paths
* Plugins: block denied node_modules file aliases
* Plugins: inspect node_modules symlink targets
* Plugins: preserve symlink target package paths
* fix: address PR review feedback
* chore(changelog): add axios pin and dependency denylist entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 11:20:05 -06:00
Peter Steinberger
c077af987f
perf: add narrow inbound roots sdk surface
2026-04-10 17:34:41 +01:00
Peter Steinberger
2ccb5cff22
test: move Vitest configs under test
2026-04-10 13:44:51 +01:00
Peter Steinberger
0b0c062e97
fix: avoid Claude CLI subscription prompt classifier
2026-04-10 10:52:35 +01:00
Shadow
d5b25f81cf
update carbon
2026-04-10 01:53:36 -05:00