83bdba2bae
fix: resolve rebase regressions for ci landing
2026-04-07 21:02:04 +01:00
3e85f9c4ff
fix: repair test typing for check gate
2026-04-07 20:58:01 +01:00
a4bb2698dd
refactor: dedupe ui provider lowercase helpers
2026-04-07 20:58:01 +01:00
bfff74fb11
refactor: dedupe core lowercase helpers
2026-04-07 20:58:01 +01:00
dffa88f396
refactor: dedupe memory lowercase helpers
2026-04-07 20:58:01 +01:00
ba68537d9d
refactor: dedupe line qqbot slack lowercase helpers
2026-04-07 20:58:01 +01:00
5b090561fb
refactor: dedupe browser whatsapp qa lowercase helpers
2026-04-07 20:58:01 +01:00
eb9ce9482c
refactor: dedupe memory lowercase helpers
2026-04-07 20:57:04 +01:00
f665da8dbc
refactor: dedupe ui lowercase helpers
2026-04-07 20:57:04 +01:00
abf81ff1ed
refactor: dedupe plugin lowercase helpers
2026-04-07 20:57:04 +01:00
179ccb952c
refactor: dedupe telegram matrix lowercase helpers
2026-04-07 20:57:04 +01:00
182d41d678
refactor: dedupe command config lowercase helpers
2026-04-07 20:57:03 +01:00
493e1c246e
refactor: dedupe remaining lowercase helpers
2026-04-07 20:57:03 +01:00
e51a00ffc7
refactor: dedupe gateway infra lowercase helpers
2026-04-07 20:57:03 +01:00
ad6bfc44d5
Tests: align approval runtime helpers
2026-04-07 15:37:28 -04:00
0995ee0134
Extensions: align approval plugin typing
2026-04-07 15:37:28 -04:00
b78202d44e
fix(exec): harden stale/replay/live requests
2026-04-07 15:37:28 -04:00
e418a6d0cc
docs(changelog): dedupe entry
2026-04-07 15:37:26 -04:00
6484b41eb9
Approvals: replay pending requests on startup
2026-04-07 15:37:01 -04:00
a00b01f5ed
fix: harden complex qa suite scenarios
2026-04-07 20:35:39 +01:00
b5d2bd6f41
fix(qa): tighten frontier scope evals
2026-04-07 20:32:42 +01:00
4e69a9b329
fix(qa): restore safe no-fork gateway runtime
2026-04-07 20:32:42 +01:00
cde12e63e7
perf(qa): lazy-load runner catalog for lab ui
2026-04-07 20:32:42 +01:00
f312d6c106
fix(qa): preserve gateway cli auth in no-fork rpc path
2026-04-07 20:32:42 +01:00
e7538b4499
perf(qa): drop per-rpc gateway cli forks
2026-04-07 20:32:42 +01:00
02bd9e8c10
perf(qa): trim frontier direct-agent waits
2026-04-07 20:32:42 +01:00
35eb70f1f5
test(qa): retry flaky local fetches in lab server tests
2026-04-07 20:32:42 +01:00
986536ff6b
fix(qa): keep direct self-check outputs under repo root
2026-04-07 20:32:42 +01:00
f6544a0a3b
fix(qa): anchor runner artifacts to repo root
2026-04-07 20:32:42 +01:00
daeff2fa89
fix(qa): default docker artifacts from repo root
2026-04-07 20:32:42 +01:00
76bde3d42b
fix(qa): support neutral-cwd docker commands
2026-04-07 20:32:42 +01:00
816a3eae8a
chore(qa): align qa cli provider input types
2026-04-07 20:32:42 +01:00
5aa4fd3216
fix(qa): normalize qa cli lane inputs
2026-04-07 20:32:42 +01:00
7d18b145f8
fix(qa): keep manual alternate model aligned
2026-04-07 20:32:42 +01:00
cdf18c16b4
fix(qa): default manual lanes by provider mode
2026-04-07 20:32:42 +01:00
3182588ad4
fix(qa): allow random qa-lab control-ui origins
2026-04-07 20:32:42 +01:00
82535771cd
fix(qa): pin gateway child control ui root
2026-04-07 20:32:42 +01:00
f9f38a48e6
fix(qa): align mock model-switch continuity
2026-04-07 20:32:42 +01:00
9a106f7e3c
fix(qa): support neutral-cwd suite runs
2026-04-07 20:32:42 +01:00
e8b446b985
docs(qa): expand frontier bakeoff runbook
2026-04-07 20:32:42 +01:00
f93b217834
feat(qa): add manual harness lane
2026-04-07 20:32:42 +01:00
63e6bb026c
fix(qa): isolate gateway child runtime
2026-04-07 20:32:42 +01:00
4f421fa0f1
fix(qa): harden frontier claude bakeoffs
2026-04-07 20:32:42 +01:00
18fb171179
feat(qa): add frontier harness bakeoff loop
2026-04-07 20:32:41 +01:00
bffb83acf8
fix(gateway): stop SSRF guard rejecting operator-configured proxy hostnames ( #62312 )
...
When allowPrivateProxy is true, the explicit proxy hostname is operator-
configured and trusted. The SSRF guard was checking the proxy hostname
against the target-scoped hostnameAllowlist (e.g. ["api.telegram.org"]),
which rejected localhost and other local proxy hostnames. This broke
Telegram media downloads (and any channel using a local proxy) after
the url-fetch security hardening in 2026.4.x.
Clear the hostnameAllowlist for the proxy hostname check while keeping
private-network IP validation in place via allowPrivateNetwork.
Fixes #61906
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-07 13:22:21 -06:00
cfbe7ac227
fix(test): refresh schema snapshot and stabilize channel registry
2026-04-07 20:04:29 +01:00
e5aae5e056
fix(browser): align browser.proxy profile mutation guards ( #60489 )
...
* fix(browser): block proxy profile mutations
* docs(changelog): add browser proxy guard entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-07 13:00:21 -06:00
744d176744
test: speed up plugin cli tests
2026-04-07 19:59:46 +01:00
4a0b8c6248
test: speed up slack setup entry tests
2026-04-07 19:59:46 +01:00
f02ba9a3ed
test: speed up browser plugin entry tests
2026-04-07 19:59:46 +01:00
Peter Steinberger