 debpalash
|
360ddf2152
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:52:10 +00:00 |
|
|
Palash Debnath
|
dd2c306bc4
|
Merge pull request #1456 from debpalash/fix/dependabot-security
fix(security): raise dependency advisory floors
|
2026-08-10 08:30:01 +00:00 |
|
|
debpalash
|
b3fc23316e
|
fix(security): authorize native reveal targets
|
2026-08-10 08:17:11 +00:00 |
|
|
debpalash
|
566f822260
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:10:23 +00:00 |
|
|
debpalash
|
30cb1ea3e6
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:04:47 +00:00 |
|
|
Palash Debnath
|
d0909dcabe
|
Merge pull request #1453 from debpalash/fix/ghas-hf-revisions
fix(security): pin curated Hugging Face model revisions
|
2026-08-10 07:42:24 +00:00 |
|
|
debpalash
|
aeda504a03
|
fix(security): authorize export filesystem sinks
|
2026-08-10 07:32:50 +00:00 |
|
|
debpalash
|
657dfe5ac6
|
fix(security): pin NLLB model revision
|
2026-08-10 07:27:43 +00:00 |
|
|
debpalash
|
5050c7da2b
|
test(security): derive public analytics allowlist
|
2026-08-10 07:12:56 +00:00 |
|
|
debpalash
|
7cc173d8be
|
fix: repair the resolved Hugging Face cache
|
2026-08-10 07:04:42 +00:00 |
|
|
debpalash
|
363f71feca
|
test(security): scope gitleaks false positives
|
2026-08-10 07:03:31 +00:00 |
|
|
debpalash
|
fe29fe0966
|
Merge remote-tracking branch 'origin/main' into fix/ghas-hf-revisions
# Conflicts:
# CHANGELOG.md
|
2026-08-10 07:01:42 +00:00 |
|
|
debpalash
|
1c289028d5
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
|
2026-08-10 07:01:29 +00:00 |
|
|
debpalash
|
405888a21b
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
|
2026-08-10 07:01:22 +00:00 |
|
|
Palash Debnath
|
f4c33f2f06
|
Merge pull request #1422 from debpalash/fix/1406-corrupt-weights
fix(models): repair a weight file that arrived damaged, not just a missing one (#1406)
|
2026-08-10 06:45:22 +00:00 |
|
|
debpalash
|
2fb0feae1a
|
Merge main before landing corrupt-cache recovery
|
2026-08-10 06:28:57 +00:00 |
|
|
debpalash
|
d1548f5f07
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
|
2026-08-10 06:28:10 +00:00 |
|
|
debpalash
|
4d2595eb00
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
|
2026-08-10 06:28:06 +00:00 |
|
|
Palash Debnath
|
c7a2de9ff5
|
Merge pull request #1443 from debpalash/fix/1274-docker-python-runtime
fix(docker): run ROCm backend with the validated Python (#1274)
|
2026-08-10 06:08:22 +00:00 |
|
|
debpalash
|
193d3b6dd3
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
# CHANGELOG.md
|
2026-08-10 05:57:35 +00:00 |
|
|
debpalash
|
321823bc52
|
fix(security): bind relocated artifacts to their job
|
2026-08-10 05:52:41 +00:00 |
|
|
debpalash
|
9ee30766db
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 05:52:12 +00:00 |
|
|
debpalash
|
1a71fbea72
|
Merge remote-tracking branch 'origin/main' into fix/1274-docker-python-runtime
|
2026-08-10 05:52:09 +00:00 |
|
|
Palash Debnath
|
6b1ae60cb5
|
Merge pull request #1445 from debpalash/fix/1429-youtube-cookie-file
fix(dub): let signed-in YouTube imports use an explicit cookie export
|
2026-08-10 05:06:46 +00:00 |
|
|
debpalash
|
e8eff3c6a0
|
fix(security): bound native tool authorization
|
2026-08-10 05:01:26 +00:00 |
|
|
debpalash
|
2a81d76182
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
# CHANGELOG.md
|
2026-08-10 05:01:05 +00:00 |
|
|
debpalash
|
f70199db32
|
fix(security): make path containment explicit to analysis
|
2026-08-10 04:56:42 +00:00 |
|
|
debpalash
|
30d073d2dd
|
Merge main and tighten tokenizer recovery regression
|
2026-08-10 04:55:58 +00:00 |
|
|
debpalash
|
f8f992ed9c
|
Merge main and address Docker review findings
|
2026-08-10 04:53:37 +00:00 |
|
|
debpalash
|
cd48ba5537
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 04:52:38 +00:00 |
|
|
debpalash
|
fef07cee13
|
Merge remote-tracking branch 'origin/main' into fix/1429-youtube-cookie-file
# Conflicts:
# CHANGELOG.md
|
2026-08-10 04:52:36 +00:00 |
|
|
debpalash
|
c4f9e787df
|
fix(security): bind native paths to picker capabilities
|
2026-08-10 04:37:45 +00:00 |
|
|
Palash Debnath
|
6ec3cd30fc
|
Merge pull request #1444 from debpalash/fix/1438-uv-bootstrap
fix(bootstrap): recover when uv installer exits after extraction
|
2026-08-10 04:37:20 +00:00 |
|
|
debpalash
|
ed03ab6b07
|
fix: clear dub credentials on reset
|
2026-08-10 04:32:39 +00:00 |
|
|
debpalash
|
bbe9496bc6
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
|
2026-08-10 04:32:31 +00:00 |
|
|
debpalash
|
c2b9951f28
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
# backend/core/path_authorization.py
# frontend/src-tauri/src/commands.rs
# tests/test_network_share.py
|
2026-08-10 04:32:23 +00:00 |
|
|
debpalash
|
705544df96
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
# CHANGELOG.md
|
2026-08-10 04:30:23 +00:00 |
|
|
debpalash
|
cb33559138
|
Merge remote-tracking branch 'origin/main' into fix/1429-youtube-cookie-file
|
2026-08-10 04:30:13 +00:00 |
|
|
debpalash
|
368e777847
|
Merge remote-tracking branch 'origin/main' into fix/1406-corrupt-weights
|
2026-08-10 04:23:27 +00:00 |
|
|
debpalash
|
e65876bdcc
|
Merge remote-tracking branch 'origin/main' into fix/1274-docker-python-runtime
|
2026-08-10 04:22:37 +00:00 |
|
|
debpalash
|
73df87d54f
|
Merge remote-tracking branch 'origin/main' into fix/ghas-hf-revisions
|
2026-08-10 04:21:58 +00:00 |
|
|
debpalash
|
80fc38169d
|
fix(security): pin fallback audio tokenizer
|
2026-08-10 04:21:55 +00:00 |
|
|
debpalash
|
0d3bc2d772
|
Merge remote-tracking branch 'origin/main' into fix/1438-uv-bootstrap
|
2026-08-10 04:20:36 +00:00 |
|
|
Palash Debnath
|
524a8cde1e
|
Merge pull request #1468 from debpalash/dependabot/uv/pillow-12.3.0
chore(deps): bump pillow from 12.2.0 to 12.3.0
|
2026-08-10 04:01:51 +00:00 |
|
|
debpalash
|
3b808ed20d
|
fix: harden cookie import lifecycle
|
2026-08-10 04:01:44 +00:00 |
|
|
debpalash
|
1551060172
|
fix(models): repair nested tokenizer cache
|
2026-08-10 04:00:52 +00:00 |
|
|
debpalash
|
25c84da606
|
Merge remote-tracking branch 'origin/main' into fix/1274-docker-python-runtime
# Conflicts:
# CHANGELOG.md
|
2026-08-10 03:51:12 +00:00 |
|
|
debpalash
|
e6b68aaf11
|
Merge remote-tracking branch 'origin/main' into fix/ghas-hf-revisions
# Conflicts:
# CHANGELOG.md
|
2026-08-10 03:50:11 +00:00 |
|
|
debpalash
|
c8659eb36a
|
test(security): validate pinned repair fixtures
|
2026-08-10 03:49:23 +00:00 |
|
|
debpalash
|
87ee81c3d1
|
Merge remote-tracking branch 'origin/main' into fix/1438-uv-bootstrap
|
2026-08-10 03:45:10 +00:00 |
|