upstream-archive/VoiceStudio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,327 Commits 24 Branches 39 Tags
1f875fa392467b269bbc64763fc96068872d6807
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
debpalash 1f875fa392 fix: report degraded operation state truthfully 2026-08-10 08:53:17 +00:00
debpalash 44190389a7 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 08:48:42 +00:00
Palash Debnath dd2c306bc4 Merge pull request #1456 from debpalash/fix/dependabot-security 
fix(security): raise dependency advisory floors
 2026-08-10 08:30:01 +00:00
debpalash 7a7dc422a6 fix: keep degraded state truthful 2026-08-10 08:22:37 +00:00
debpalash 5a043538b8 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 08:17:59 +00:00
debpalash 30cb1ea3e6 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 08:04:47 +00:00
Palash Debnath d0909dcabe Merge pull request #1453 from debpalash/fix/ghas-hf-revisions 
fix(security): pin curated Hugging Face model revisions
 2026-08-10 07:42:24 +00:00
debpalash 657dfe5ac6 fix(security): pin NLLB model revision 2026-08-10 07:27:43 +00:00
debpalash 0c5be01e39 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 07:18:12 +00:00
debpalash 5050c7da2b test(security): derive public analytics allowlist 2026-08-10 07:12:56 +00:00
debpalash 7cc173d8be fix: repair the resolved Hugging Face cache 2026-08-10 07:04:42 +00:00
debpalash 363f71feca test(security): scope gitleaks false positives 2026-08-10 07:03:31 +00:00
debpalash fe29fe0966 Merge remote-tracking branch 'origin/main' into fix/ghas-hf-revisions 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 07:01:42 +00:00
debpalash 1c289028d5 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 2026-08-10 07:01:29 +00:00
Palash Debnath f4c33f2f06 Merge pull request #1422 from debpalash/fix/1406-corrupt-weights 
fix(models): repair a weight file that arrived damaged, not just a missing one (#1406)
 2026-08-10 06:45:22 +00:00
debpalash 2fb0feae1a Merge main before landing corrupt-cache recovery 2026-08-10 06:28:57 +00:00
debpalash d1548f5f07 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 2026-08-10 06:28:10 +00:00
Palash Debnath c7a2de9ff5 Merge pull request #1443 from debpalash/fix/1274-docker-python-runtime 
fix(docker): run ROCm backend with the validated Python (#1274)
 2026-08-10 06:08:22 +00:00
debpalash 193d3b6dd3 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 05:57:35 +00:00
debpalash 1a71fbea72 Merge remote-tracking branch 'origin/main' into fix/1274-docker-python-runtime 2026-08-10 05:52:09 +00:00
Palash Debnath 6b1ae60cb5 Merge pull request #1445 from debpalash/fix/1429-youtube-cookie-file 
fix(dub): let signed-in YouTube imports use an explicit cookie export
 2026-08-10 05:06:46 +00:00
debpalash 2a81d76182 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 05:01:05 +00:00
debpalash 30d073d2dd Merge main and tighten tokenizer recovery regression 2026-08-10 04:55:58 +00:00
debpalash f8f992ed9c Merge main and address Docker review findings 2026-08-10 04:53:37 +00:00
debpalash fef07cee13 Merge remote-tracking branch 'origin/main' into fix/1429-youtube-cookie-file 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 04:52:36 +00:00
Palash Debnath 6ec3cd30fc Merge pull request #1444 from debpalash/fix/1438-uv-bootstrap 
fix(bootstrap): recover when uv installer exits after extraction
 2026-08-10 04:37:20 +00:00
debpalash ed03ab6b07 fix: clear dub credentials on reset 2026-08-10 04:32:39 +00:00
debpalash 705544df96 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 04:30:23 +00:00
debpalash cb33559138 Merge remote-tracking branch 'origin/main' into fix/1429-youtube-cookie-file 2026-08-10 04:30:13 +00:00
debpalash 368e777847 Merge remote-tracking branch 'origin/main' into fix/1406-corrupt-weights 2026-08-10 04:23:27 +00:00
debpalash e65876bdcc Merge remote-tracking branch 'origin/main' into fix/1274-docker-python-runtime 2026-08-10 04:22:37 +00:00
debpalash 73df87d54f Merge remote-tracking branch 'origin/main' into fix/ghas-hf-revisions 2026-08-10 04:21:58 +00:00
debpalash 80fc38169d fix(security): pin fallback audio tokenizer 2026-08-10 04:21:55 +00:00
debpalash 0d3bc2d772 Merge remote-tracking branch 'origin/main' into fix/1438-uv-bootstrap 2026-08-10 04:20:36 +00:00
Palash Debnath 524a8cde1e Merge pull request #1468 from debpalash/dependabot/uv/pillow-12.3.0 
chore(deps): bump pillow from 12.2.0 to 12.3.0
 2026-08-10 04:01:51 +00:00
debpalash 3b808ed20d fix: harden cookie import lifecycle 2026-08-10 04:01:44 +00:00
debpalash 1551060172 fix(models): repair nested tokenizer cache 2026-08-10 04:00:52 +00:00
debpalash 25c84da606 Merge remote-tracking branch 'origin/main' into fix/1274-docker-python-runtime 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 03:51:12 +00:00
debpalash e6b68aaf11 Merge remote-tracking branch 'origin/main' into fix/ghas-hf-revisions 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 03:50:11 +00:00
debpalash c8659eb36a test(security): validate pinned repair fixtures 2026-08-10 03:49:23 +00:00
debpalash 87ee81c3d1 Merge remote-tracking branch 'origin/main' into fix/1438-uv-bootstrap 2026-08-10 03:45:10 +00:00
debpalash ff41aa5c8c Merge remote-tracking branch 'origin/main' into fix/1406-corrupt-weights 2026-08-10 03:44:55 +00:00
debpalash 3d7ec3bdab Merge remote-tracking branch 'origin/main' into fix/1429-youtube-cookie-file 2026-08-10 03:44:49 +00:00
debpalash bebe9c6e26 Merge remote-tracking branch 'origin/main' into test/pillow-video-context 2026-08-10 03:44:42 +00:00
Palash Debnath 369e9fddf9 Merge pull request #1451 from debpalash/dependabot/uv/cryptography-50.0.0 
chore(deps): bump cryptography from 48.0.0 to 50.0.0
 2026-08-10 03:26:07 +00:00
debpalash c3d18412fe fix(dub): bind cookie trust to the local UI origin 2026-08-10 03:21:02 +00:00
debpalash 74e6d4582b fix(dub): keep cookie credentials off remote plaintext HTTP 2026-08-10 03:16:35 +00:00
debpalash bfbf78a270 Merge remote-tracking branch 'origin/main' into fix/1429-youtube-cookie-file 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 03:15:59 +00:00
debpalash a2f587bbc1 Merge remote-tracking branch 'origin/main' into fix/1406-corrupt-weights 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 03:14:27 +00:00
debpalash b5a056990d Merge remote-tracking branch 'origin/main' into fix/1438-uv-bootstrap 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 03:13:23 +00:00
debpalash 7fdc377d3d Merge remote-tracking branch 'origin/main' into codex/pr-1451 2026-08-10 03:13:17 +00:00
debpalash a756bc27fa Merge remote-tracking branch 'origin/main' into test/pillow-video-context 2026-08-10 03:13:04 +00:00
Palash Debnath c3ad072a84 Merge pull request #1427 from debpalash/fix/classify-401-substring 
fix(errors): three digits in a path are not an authentication failure
 2026-08-10 02:58:16 +00:00
debpalash e7f6f3beb5 fix(bootstrap): redact installer home paths 2026-08-10 02:52:44 +00:00
debpalash fcdbac9683 fix(bootstrap): require the pinned uv version 2026-08-10 02:49:25 +00:00
debpalash b076dcf8aa fix: force repair when cache resume exposes corruption 2026-08-10 02:47:43 +00:00
debpalash d8c77210ee Merge remote-tracking branch 'origin/main' into fix/1406-corrupt-weights 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 02:46:45 +00:00
debpalash a7f0ab0838 Merge remote-tracking branch 'origin/main' into fix/1438-uv-bootstrap 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 02:45:04 +00:00
debpalash 67ccfafbd3 Merge remote-tracking branch 'origin/main' into test/pillow-video-context 2026-08-10 02:43:17 +00:00
debpalash ac610b2aa4 Merge remote-tracking branch 'origin/main' into codex/pr-1451 2026-08-10 02:43:14 +00:00
debpalash 270666fac8 Merge remote-tracking branch 'origin/main' into fix/classify-401-substring 2026-08-10 02:43:12 +00:00
Palash Debnath ee313ad892 Merge pull request #1465 from debpalash/dependabot/uv/yt-dlp-2026.7.4 
chore(deps): bump yt-dlp from 2026.6.9 to 2026.7.4
 2026-08-10 02:24:30 +00:00
debpalash 7c4e7f0cac test(video): enforce exact Pillow floor 2026-08-10 02:18:02 +00:00
debpalash 8f449fa7ee test(video): pin Pillow dependency floor 2026-08-10 02:12:30 +00:00
debpalash c642379c3c fix(video): declare Pillow runtime floor 2026-08-10 02:11:37 +00:00
debpalash 7e55468892 Merge remote-tracking branch 'origin/main' into fix/classify-401-substring 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 02:10:37 +00:00
debpalash aaba64e000 Merge remote-tracking branch 'origin/main' into codex/pr-1451 2026-08-10 02:09:50 +00:00
debpalash da31ef9aec Merge remote-tracking branch 'origin/main' into review/pr-1465 2026-08-10 02:09:35 +00:00
debpalash e806470324 Merge remote-tracking branch 'origin/main' into test/pillow-video-context 2026-08-10 02:09:29 +00:00
Palash Debnath 3c95d9c52d Merge pull request #1450 from debpalash/dependabot/uv/nltk-3.10.0 
chore(deps): bump nltk from 3.9.4 to 3.10.0
 2026-08-10 01:55:10 +00:00
debpalash a7a5cf84be test(video): pin Pillow frame analysis 2026-08-10 01:54:35 +00:00
debpalash c4e13fc07c Merge remote-tracking branch 'origin/main' into review/pr-1465 2026-08-10 01:48:07 +00:00
debpalash 3dde7b52db Merge remote-tracking branch 'origin/main' into codex/pr-1450 2026-08-10 01:39:04 +00:00
Palash Debnath 2b79d43e56 Merge pull request #1449 from debpalash/dependabot/uv/pypdf-6.15.0 
chore(deps): bump pypdf from 6.13.2 to 6.15.0
 2026-08-10 01:24:01 +00:00
debpalash c6f7167d06 Merge remote-tracking branch 'origin/main' into codex/pr-1449 2026-08-10 01:08:02 +00:00
Palash Debnath 16cbf1db3a Merge pull request #1452 from debpalash/dependabot/uv/aiohttp-3.14.3 
chore(deps): bump aiohttp from 3.14.1 to 3.14.3
 2026-08-10 00:51:32 +00:00
debpalash b77e6b2030 Merge remote-tracking branch 'origin/main' into codex/pr-1452 2026-08-10 00:34:15 +00:00
Palash Debnath 28f40f1d59 Merge pull request #1446 from debpalash/fix/ghas-redos 
fix(security): make user-controlled validators linear-time
 2026-08-10 00:19:48 +00:00
debpalash cf59a508fe fix(security): align bounded model validation 2026-08-10 00:04:53 +00:00
debpalash c3209e3d32 Merge remote-tracking branch 'origin/main' into fix/ghas-redos 
# Conflicts:
#	CHANGELOG.md
 2026-08-10 00:03:45 +00:00
Palash Debnath 3634c3b9d6 Merge pull request #1462 from debpalash/fix/ghas-disclosure-streaming 
fix(security): stabilize streamed failure responses
 2026-08-09 23:49:59 +00:00
debpalash d35e8e881d fix(security): stabilize inner transcription failures 2026-08-09 23:35:28 +00:00
debpalash 544d345069 fix(security): keep stream failures out of logs 2026-08-09 23:18:16 +00:00
debpalash bebe462dc6 Merge remote-tracking branch 'origin/main' into fix/ghas-disclosure-streaming 
# Conflicts:
#	CHANGELOG.md
 2026-08-09 23:12:47 +00:00
Palash Debnath 7f67e1622b Merge pull request #1426 from debpalash/fix/1414-resolve-heartbeat 
fix(engines): a venv resolution that takes minutes is not a stalled generation (#1414)
 2026-08-09 22:59:26 +00:00
debpalash f122b84a7e test: always release parked heartbeat writer 2026-08-09 22:42:48 +00:00
debpalash 600a8dc936 Merge remote-tracking branch 'origin/main' into codex/pr-1426 2026-08-09 22:37:45 +00:00
Palash Debnath 9e9c9d031f Merge pull request #1461 from debpalash/test/ghas-fp-evidence 
test(security): lock reviewed GHAS invariants
 2026-08-09 22:23:35 +00:00
debpalash 3f706336f6 Merge remote-tracking branch 'origin/main' into test/ghas-fp-evidence 2026-08-09 22:08:40 +00:00
Palash Debnath ae46f187d0 fix(security): move host-path authority into the desktop shell (#1448) 
Close unauthenticated remote mutation paths and keep filesystem destinations behind one-shot Tauri capabilities. CodeRabbit and Greptile findings were fixed on-branch; all review threads are resolved. Full CI, Security, Rust, and cross-platform smoke checks are green.
 2026-08-09 21:55:43 +00:00
debpalash 96a6c7574a fix(security): stabilize streamed failure responses 2026-08-09 21:50:42 +00:00
debpalash 6e7f12f391 test(security): lock reviewed GHAS invariants 2026-08-09 21:48:54 +00:00
debpalash 86f49effcb docs: note observable backend degradation 2026-08-09 21:37:01 +00:00
debpalash ac8fef19a6 fix: make degraded backend state observable 2026-08-09 21:36:42 +00:00
debpalash c3de97ac95 test(security): validate every locked dependency 2026-08-09 21:31:41 +00:00
debpalash e0a2c84ed8 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 
# Conflicts:
#	CHANGELOG.md
 2026-08-09 21:25:00 +00:00
debpalash f6e01c142a Merge remote-tracking branch 'origin/main' into fix/ghas-redos 
# Conflicts:
#	CHANGELOG.md
 2026-08-09 21:24:31 +00:00
debpalash 4cd5d6681f docs(changelog): note dependency security floors 2026-08-09 21:24:27 +00:00
debpalash c20e1c1685 fix(security): raise dependency advisory floors 2026-08-09 21:23:59 +00:00
Palash Debnath 93143849d2 fix(security): constrain endpoint probes to trusted origins (#1447) 
Validate HTTPS probe destinations against the shipped origin allowlist and clean up the related CodeQL test findings. Reviewed by Greptile; CodeRabbit was harvested but rate-limited. CI, Security, and cross-platform smoke checks are green.
 2026-08-09 21:18:11 +00:00