Jacob Tomlinson 5e08ce36d5 fix(bluebubbles): throttle webhook auth guesses (#55133) ...

* fix(bluebubbles): throttle webhook auth guesses

* test(bluebubbles): isolate attachment ssrf config

* test(bluebubbles): hoist attachment mocks

* docs: refresh bluebubbles config baseline

* fix(bluebubbles): trust proxied webhook client IPs

* fix(bluebubbles): honor trusted proxy webhook IPs

* fix(bluebubbles): honor real-ip fallback for webhooks

2026-03-26 14:54:03 +00:00

..

acp

ACP: sanitize terminal tool titles (#55137)

2026-03-26 14:12:24 +00:00

agents

fix: surface provider-specific rate limit error message (#54433) (#54512)

2026-03-26 15:16:06 +03:00

auto-reply

Revert "feat: add video generation core infrastructure and extend image generation parameters (#53681)" (#54943)

2026-03-25 23:00:14 -07:00

bindings

…

bootstrap

…

browser

Block reset-profile on lower-privilege browser request surfaces (#54618)

2026-03-25 13:36:59 -06:00

canvas-host

…

channels

fix: add slack upload-file action (#54987) (thanks @kevinlin-openai)

2026-03-26 13:37:58 +05:30

cli

fix: auto-enable configured channel plugins in routed CLI commands (#54809) (thanks @neeravmakwana)

2026-03-26 10:06:16 +05:30

commands

Remove Qwen OAuth integration (qwen-portal-auth) (#52709)

2026-03-26 16:32:34 +08:00

compat

…

config

docs: add beta blocker contributor guidance (#55199)

2026-03-26 09:31:59 -05:00

context-engine

…

cron

cron: queue isolated delivery awareness

2026-03-25 15:21:14 +05:30

daemon

fix: tighten systemd duplicate gateway detection (#45328) (thanks @gregretkowski)

2026-03-26 09:20:10 +05:30

docs

…

extensions

…

gateway

fix: replace stale canonical duplicate rows

2026-03-26 08:03:24 -05:00

hooks

fix: skip session:patch hook clone without listeners

2026-03-25 16:12:39 +05:30

i18n

…

image-generation

Revert "feat: add video generation core infrastructure and extend image generation parameters (#53681)" (#54943)

2026-03-25 23:00:14 -07:00

infra

ACP: sanitize terminal tool titles (#55137)

2026-03-26 14:12:24 +00:00

interactive

…

line

…

link-understanding

…

logging

feat(cli): add json schema to cli tool (#54523)

2026-03-26 02:30:32 +03:00

markdown

…

media

fix: reject path traversal and home-dir patterns in media parse layer (#54642)

2026-03-25 13:35:16 -06:00

media-understanding

fix: support OpenAI Codex media understanding (#54829) (thanks @neeravmakwana)

2026-03-26 10:10:11 +05:30

memory

test(memory): initialize providers in lazy manager tests

2026-03-26 09:29:07 -05:00

node-host

Block reset-profile on lower-privilege browser request surfaces (#54618)

2026-03-25 13:36:59 -06:00

pairing

refactor: align pairing replies, daemon hints, and feishu mention policy

2026-03-25 04:22:53 -07:00

plugin-sdk

fix(bluebubbles): throttle webhook auth guesses (#55133)

2026-03-26 14:54:03 +00:00

plugins

Remove Qwen OAuth integration (qwen-portal-auth) (#52709)

2026-03-26 16:32:34 +08:00

process

fix: trigger compaction on LLM timeout with high context usage (#46417)

2026-03-25 12:51:36 -07:00

routing

…

scripts

…

secrets

fix(slack): trim DM reply overhead and restore Codex auto transport (#53957)

2026-03-24 15:03:40 -07:00

security

refactor(sandbox): remove tool policy facade (#54684)

2026-03-25 23:03:24 +02:00

sessions

…

shared

refactor: tighten split-runtime live-state guardrails

2026-03-24 21:58:50 -07:00

terminal

ACP: sanitize terminal tool titles (#55137)

2026-03-26 14:12:24 +00:00

test-helpers

…

test-utils

Revert "feat: add video generation core infrastructure and extend image generation parameters (#53681)" (#54943)

2026-03-25 23:00:14 -07:00

tts

chore(tts): rename VOICE_BUBBLE identifiers to OPUS and update docs

2026-03-25 10:49:21 +05:30

tui

fix(ci): restore main green

2026-03-25 16:17:42 -05:00

types

…

utils

fix: stop leaking reply tags in iMessage outbound text (#39512) (thanks @mvanhorn)

2026-03-25 23:00:16 +05:30

web-search

fix(slack): trim DM reply overhead and restore Codex auto transport (#53957)

2026-03-24 15:03:40 -07:00

wizard

refactor: dedupe test helpers and harnesses

2026-03-24 21:41:46 +00:00

bundled-web-search-registry.ts

…

channel-web.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

refactor: clarify docker setup cli phases

2026-03-24 16:46:12 -07:00

dockerfile.test.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

…

entry.ts

fixes for cli-containerized (#54223)

2026-03-25 00:51:55 -04:00

entry.version-fast-path.test.ts

fixes for cli-containerized (#54223)

2026-03-25 00:51:55 -04:00

extensionAPI.test.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…