debpalash
|
b68d1c68de
|
fix: correct VoiceStudio release to 0.5.0
|
2026-08-11 04:18:51 +00:00 |
|
Palash Debnath
|
04410a458d
|
Release VoiceStudio 5.0.0 (#1487)
Complete the VoiceStudio identity, release documentation, assets, version mirrors, and safe cross-platform development startup.
|
2026-08-11 04:05:45 +00:00 |
|
Palash Debnath
|
3df44486b2
|
Fix multilingual dubbing workflow and clipped language picker (#1486)
* fix(dub): complete multilingual translation workflow
* docs: note multilingual dubbing fix
* fix(dub): serialize multilingual batch actions
* fix(dub): preserve multilingual batch context
|
2026-08-11 02:43:51 +00:00 |
|
Palash Debnath
|
95a35b8e07
|
feat(indextts): add native IndexTTS 2.5 support (#1485)
* feat(indextts): add native 2.5 sidecar support
* fix(indextts): preserve legacy language metadata
* docs(indextts): state model license terms accurately
* fix: preserve IndexTTS upgrades and duration controls
* fix: complete IndexTTS upgrade safeguards
|
2026-08-11 01:26:25 +00:00 |
|
Palash Debnath
|
581c51662b
|
fix(dub): restore cast voices from source audio (#1484)
* fix(dub): restore cast voices from source audio
* docs: record source-audio cast repair
* fix(dub): honor explicit cross-speaker cast
* fix(dub): sanitize restored cast metadata
* fix(dub): preserve legacy per-line cast refs
|
2026-08-10 23:46:37 +00:00 |
|
Palash Debnath
|
7cde2fcd06
|
fix(desktop): make recording and dubbing reliable (#1481)
* fix(ui): keep scaled desktop shell responsive
* fix(linux): support desktop microphone capture
* fix(ui): update the centered VoiceStudio brand
* fix(audio): fall back when recorder start is unsupported
* fix(desktop): use the app header as titlebar
* feat(audio): add live microphone input controls
* fix(dub): recover from missing transcription models
* fix(dub): make pipeline stages actionable
* fix(asr): recover low-memory transcription
* docs: record desktop reliability fixes
* fix(ui): use semantic error banner border
* fix(dub): harden recovery and recording fallbacks
|
2026-08-10 22:43:37 +00:00 |
|
Palash Debnath
|
e6728cf068
|
Merge pull request #1457 from debpalash/fix/ghas-log-safety
fix(security): make untrusted log values single-line
|
2026-08-10 14:15:41 +00:00 |
|
debpalash
|
3e292ba831
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
|
2026-08-10 13:57:08 +00:00 |
|
debpalash
|
6db15aa556
|
Merge pull request #1442 from paoloantinori/feat/pockettts-deferred
|
2026-08-10 13:40:27 +00:00 |
|
debpalash
|
a2745f1029
|
test: assert fixed-shape secret log record
|
2026-08-10 13:27:15 +00:00 |
|
debpalash
|
8b710a380b
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 13:24:54 +00:00 |
|
debpalash
|
c4d241a15b
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
# CHANGELOG.md
|
2026-08-10 13:20:38 +00:00 |
|
Palash Debnath
|
53fcbd3316
|
Merge pull request #1459 from debpalash/fix/ghas-empty-except-p2
fix: make degraded backend state observable
|
2026-08-10 13:04:17 +00:00 |
|
debpalash
|
6673190854
|
test(ci): scan both workflow extensions
|
2026-08-10 12:50:00 +00:00 |
|
debpalash
|
32d9a8a964
|
fix: tighten log safety regressions
|
2026-08-10 12:49:42 +00:00 |
|
debpalash
|
88906fb23f
|
fix: clear cancelled share runtime
|
2026-08-10 12:49:34 +00:00 |
|
debpalash
|
1437d37096
|
test(ci): reject mutable action references
|
2026-08-10 12:25:43 +00:00 |
|
debpalash
|
b90d6169d0
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
# CHANGELOG.md
# backend/api/routers/system.py
|
2026-08-10 12:25:33 +00:00 |
|
debpalash
|
794942faf4
|
Merge current main into GHAS empty-except fixes
|
2026-08-10 12:17:43 +00:00 |
|
debpalash
|
603402afce
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 12:17:41 +00:00 |
|
Palash Debnath
|
27a8f477b7
|
fix(security): keep private diagnostics out of API responses (#1454)
* fix(security): keep private diagnostics out of API responses
* docs: reference response-safety PR
* fix(security): preserve constant recovery guidance
* fix(security): keep recovery and logs data-independent
* fix(security): close remaining response sinks
* test(security): keep SOCKS diagnostics private
* fix: keep Tailscale exceptions local
* fix: keep Tailscale CLI output private
|
2026-08-10 12:01:12 +00:00 |
|
debpalash
|
f45e8ecc07
|
fix: keep secret-store failures fixed-shape
|
2026-08-10 11:58:06 +00:00 |
|
debpalash
|
53794d73ec
|
Merge current main into GHAS empty-except fixes
|
2026-08-10 11:44:50 +00:00 |
|
debpalash
|
a1a7d25342
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
# CHANGELOG.md
|
2026-08-10 11:44:44 +00:00 |
|
debpalash
|
fd2e39d5c0
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 11:44:36 +00:00 |
|
Palash Debnath
|
7a78573a83
|
fix(security): constrain GPT-SoVITS endpoints (#1463)
* fix(security): constrain GPT-SoVITS endpoints
* docs: note trusted GPT-SoVITS transport
* fix(security): preserve trusted endpoint authority
* test(security): patch live outbound transport
* test: load outbound security seam at runtime
|
2026-08-10 11:29:42 +00:00 |
|
debpalash
|
8c241bfbbb
|
fix: validate realtime event dispatch
|
2026-08-10 11:23:22 +00:00 |
|
debpalash
|
e086cb03f1
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
# CHANGELOG.md
|
2026-08-10 11:19:40 +00:00 |
|
debpalash
|
9ae554f0ac
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 11:19:14 +00:00 |
|
debpalash
|
40662aeb06
|
fix: close log safety review gaps
|
2026-08-10 11:19:12 +00:00 |
|
debpalash
|
74367e4bbf
|
Merge current main into GHAS empty-except fixes
|
2026-08-10 11:13:10 +00:00 |
|
Palash Debnath
|
38a00cbf30
|
fix(security): stabilize engine discovery metadata (#1460)
* fix(security): stabilize engine discovery metadata
* fix(security): preserve stable routing outcomes
* fix: preserve safe engine routing outcomes
|
2026-08-10 10:57:54 +00:00 |
|
debpalash
|
72ce9b79f2
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
# CHANGELOG.md
# backend/api/routers/batch.py
|
2026-08-10 10:54:04 +00:00 |
|
debpalash
|
7aed875fb3
|
Merge current main into GHAS empty-except fixes
|
2026-08-10 10:45:13 +00:00 |
|
debpalash
|
f21b76350b
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 10:41:24 +00:00 |
|
Palash Debnath
|
c716b05aa9
|
Merge pull request #1458 from debpalash/fix/ghas-empty-except
fix(security): fail closed on cleanup and redaction errors
|
2026-08-10 10:26:33 +00:00 |
|
debpalash
|
27fcaabf0a
|
Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
# CHANGELOG.md
|
2026-08-10 10:03:52 +00:00 |
|
debpalash
|
bdcd3923eb
|
fix: preserve fixed-shape dub security logs
|
2026-08-10 09:58:05 +00:00 |
|
debpalash
|
047e7d901e
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
# CHANGELOG.md
# backend/api/routers/dub_export.py
# backend/api/routers/marketplace.py
# backend/services/ffmpeg_utils.py
# backend/services/sonitranslate.py
|
2026-08-10 09:52:56 +00:00 |
|
Palash Debnath
|
8a58e30a8f
|
Merge pull request #1455 from debpalash/fix/ghas-path-boundary
fix(security): enforce filesystem trust boundaries
|
2026-08-10 09:36:07 +00:00 |
|
debpalash
|
4e401360ca
|
fix: centralize LAN share runtime state
|
2026-08-10 09:29:42 +00:00 |
|
debpalash
|
9f2c8ac0a4
|
fix(pockettts): close license review findings
|
2026-08-10 09:24:37 +00:00 |
|
debpalash
|
9aa82f3fd5
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
# CHANGELOG.md
|
2026-08-10 09:22:30 +00:00 |
|
debpalash
|
c1a1839911
|
Merge main and address degraded-state review findings
|
2026-08-10 09:21:54 +00:00 |
|
debpalash
|
586650e326
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 09:21:17 +00:00 |
|
debpalash
|
f991709dd9
|
Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
# CHANGELOG.md
|
2026-08-10 09:20:48 +00:00 |
|
debpalash
|
c1793dac41
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 09:20:35 +00:00 |
|
Palash Debnath
|
657d633940
|
Merge pull request #1464 from debpalash/fix/appimage-apprun-injection
fix(appimage): ship the compatibility launcher
|
2026-08-10 09:04:56 +00:00 |
|
debpalash
|
9b71eb5e46
|
fix: close remaining dub export path sinks
|
2026-08-10 08:57:27 +00:00 |
|
debpalash
|
77d6507318
|
fix(pockettts): recheck consent after synthesis queue
|
2026-08-10 08:55:24 +00:00 |
|
debpalash
|
1f875fa392
|
fix: report degraded operation state truthfully
|
2026-08-10 08:53:17 +00:00 |
|
debpalash
|
360ddf2152
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:52:10 +00:00 |
|
debpalash
|
14b00f681c
|
Merge remote-tracking branch 'origin/main' into codex/pr-1464
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:48:52 +00:00 |
|
debpalash
|
44190389a7
|
Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:48:42 +00:00 |
|
debpalash
|
a540354cb7
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 08:48:33 +00:00 |
|
Palash Debnath
|
dd2c306bc4
|
Merge pull request #1456 from debpalash/fix/dependabot-security
fix(security): raise dependency advisory floors
|
2026-08-10 08:30:01 +00:00 |
|
debpalash
|
7a7dc422a6
|
fix: keep degraded state truthful
|
2026-08-10 08:22:37 +00:00 |
|
debpalash
|
5a043538b8
|
Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:17:59 +00:00 |
|
debpalash
|
b3fc23316e
|
fix(security): authorize native reveal targets
|
2026-08-10 08:17:11 +00:00 |
|
debpalash
|
566f822260
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:10:23 +00:00 |
|
debpalash
|
252c6fd149
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 08:09:29 +00:00 |
|
debpalash
|
820817ad68
|
Merge remote-tracking branch 'origin/main' into codex/pr-1464
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:04:56 +00:00 |
|
debpalash
|
30cb1ea3e6
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
# CHANGELOG.md
|
2026-08-10 08:04:47 +00:00 |
|
Palash Debnath
|
d0909dcabe
|
Merge pull request #1453 from debpalash/fix/ghas-hf-revisions
fix(security): pin curated Hugging Face model revisions
|
2026-08-10 07:42:24 +00:00 |
|
debpalash
|
c2da73c5c2
|
fix(pockettts): enforce consent on every synthesis
|
2026-08-10 07:36:32 +00:00 |
|
debpalash
|
d664c93140
|
test: isolate destructive cleanup imports
|
2026-08-10 07:33:49 +00:00 |
|
debpalash
|
aeda504a03
|
fix(security): authorize export filesystem sinks
|
2026-08-10 07:32:50 +00:00 |
|
debpalash
|
180d13c59e
|
fix(pockettts): enforce consent at construction
|
2026-08-10 07:32:35 +00:00 |
|
debpalash
|
722a7a7e57
|
fix(security): make control filtering boundaries explicit
|
2026-08-10 07:30:08 +00:00 |
|
debpalash
|
657dfe5ac6
|
fix(security): pin NLLB model revision
|
2026-08-10 07:27:43 +00:00 |
|
debpalash
|
501450e8ec
|
Merge remote-tracking branch 'origin/main' into codex/pr1442
|
2026-08-10 07:21:53 +00:00 |
|
debpalash
|
0c5be01e39
|
Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
# CHANGELOG.md
|
2026-08-10 07:18:12 +00:00 |
|
debpalash
|
5050c7da2b
|
test(security): derive public analytics allowlist
|
2026-08-10 07:12:56 +00:00 |
|
debpalash
|
44bfc94c49
|
Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
# CHANGELOG.md
# backend/api/routers/dub_core.py
# backend/api/routers/settings.py
# backend/services/speech_rate.py
|
2026-08-10 07:12:18 +00:00 |
|
debpalash
|
2cd0fd2972
|
Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
# CHANGELOG.md
|
2026-08-10 07:07:16 +00:00 |
|
debpalash
|
7cc173d8be
|
fix: repair the resolved Hugging Face cache
|
2026-08-10 07:04:42 +00:00 |
|
debpalash
|
4259806d02
|
Merge remote-tracking branch 'origin/main' into codex/pr-1464
# Conflicts:
# CHANGELOG.md
|
2026-08-10 07:04:10 +00:00 |
|
debpalash
|
363f71feca
|
test(security): scope gitleaks false positives
|
2026-08-10 07:03:31 +00:00 |
|
debpalash
|
fe29fe0966
|
Merge remote-tracking branch 'origin/main' into fix/ghas-hf-revisions
# Conflicts:
# CHANGELOG.md
|
2026-08-10 07:01:42 +00:00 |
|
debpalash
|
1c289028d5
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
|
2026-08-10 07:01:29 +00:00 |
|
debpalash
|
405888a21b
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
|
2026-08-10 07:01:22 +00:00 |
|
Palash Debnath
|
f4c33f2f06
|
Merge pull request #1422 from debpalash/fix/1406-corrupt-weights
fix(models): repair a weight file that arrived damaged, not just a missing one (#1406)
|
2026-08-10 06:45:22 +00:00 |
|
debpalash
|
2fb0feae1a
|
Merge main before landing corrupt-cache recovery
|
2026-08-10 06:28:57 +00:00 |
|
debpalash
|
d1548f5f07
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
|
2026-08-10 06:28:10 +00:00 |
|
debpalash
|
4d2595eb00
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
|
2026-08-10 06:28:06 +00:00 |
|
Palash Debnath
|
c7a2de9ff5
|
Merge pull request #1443 from debpalash/fix/1274-docker-python-runtime
fix(docker): run ROCm backend with the validated Python (#1274)
|
2026-08-10 06:08:22 +00:00 |
|
debpalash
|
193d3b6dd3
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
# CHANGELOG.md
|
2026-08-10 05:57:35 +00:00 |
|
debpalash
|
321823bc52
|
fix(security): bind relocated artifacts to their job
|
2026-08-10 05:52:41 +00:00 |
|
debpalash
|
9ee30766db
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 05:52:12 +00:00 |
|
debpalash
|
1a71fbea72
|
Merge remote-tracking branch 'origin/main' into fix/1274-docker-python-runtime
|
2026-08-10 05:52:09 +00:00 |
|
Palash Debnath
|
6b1ae60cb5
|
Merge pull request #1445 from debpalash/fix/1429-youtube-cookie-file
fix(dub): let signed-in YouTube imports use an explicit cookie export
|
2026-08-10 05:06:46 +00:00 |
|
debpalash
|
e8eff3c6a0
|
fix(security): bound native tool authorization
|
2026-08-10 05:01:26 +00:00 |
|
debpalash
|
2a81d76182
|
Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
# CHANGELOG.md
|
2026-08-10 05:01:05 +00:00 |
|
debpalash
|
f70199db32
|
fix(security): make path containment explicit to analysis
|
2026-08-10 04:56:42 +00:00 |
|
debpalash
|
30d073d2dd
|
Merge main and tighten tokenizer recovery regression
|
2026-08-10 04:55:58 +00:00 |
|
debpalash
|
f8f992ed9c
|
Merge main and address Docker review findings
|
2026-08-10 04:53:37 +00:00 |
|
debpalash
|
cd48ba5537
|
Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
# CHANGELOG.md
|
2026-08-10 04:52:38 +00:00 |
|
debpalash
|
fef07cee13
|
Merge remote-tracking branch 'origin/main' into fix/1429-youtube-cookie-file
# Conflicts:
# CHANGELOG.md
|
2026-08-10 04:52:36 +00:00 |
|
debpalash
|
c4f9e787df
|
fix(security): bind native paths to picker capabilities
|
2026-08-10 04:37:45 +00:00 |
|
Palash Debnath
|
6ec3cd30fc
|
Merge pull request #1444 from debpalash/fix/1438-uv-bootstrap
fix(bootstrap): recover when uv installer exits after extraction
|
2026-08-10 04:37:20 +00:00 |
|