Commit Graph
100 Commits
Author SHA1 Message Date
debpalash b68d1c68de fix: correct VoiceStudio release to 0.5.0 2026-08-11 04:18:51 +00:00
Palash Debnath 04410a458d Release VoiceStudio 5.0.0 (#1487)
Complete the VoiceStudio identity, release documentation, assets, version mirrors, and safe cross-platform development startup.
2026-08-11 04:05:45 +00:00
Palash Debnath 3df44486b2 Fix multilingual dubbing workflow and clipped language picker (#1486)
* fix(dub): complete multilingual translation workflow

* docs: note multilingual dubbing fix

* fix(dub): serialize multilingual batch actions

* fix(dub): preserve multilingual batch context
2026-08-11 02:43:51 +00:00
Palash Debnath 95a35b8e07 feat(indextts): add native IndexTTS 2.5 support (#1485)
* feat(indextts): add native 2.5 sidecar support

* fix(indextts): preserve legacy language metadata

* docs(indextts): state model license terms accurately

* fix: preserve IndexTTS upgrades and duration controls

* fix: complete IndexTTS upgrade safeguards
2026-08-11 01:26:25 +00:00
Palash Debnath 581c51662b fix(dub): restore cast voices from source audio (#1484)
* fix(dub): restore cast voices from source audio

* docs: record source-audio cast repair

* fix(dub): honor explicit cross-speaker cast

* fix(dub): sanitize restored cast metadata

* fix(dub): preserve legacy per-line cast refs
2026-08-10 23:46:37 +00:00
Palash Debnath 7cde2fcd06 fix(desktop): make recording and dubbing reliable (#1481)
* fix(ui): keep scaled desktop shell responsive

* fix(linux): support desktop microphone capture

* fix(ui): update the centered VoiceStudio brand

* fix(audio): fall back when recorder start is unsupported

* fix(desktop): use the app header as titlebar

* feat(audio): add live microphone input controls

* fix(dub): recover from missing transcription models

* fix(dub): make pipeline stages actionable

* fix(asr): recover low-memory transcription

* docs: record desktop reliability fixes

* fix(ui): use semantic error banner border

* fix(dub): harden recovery and recording fallbacks
2026-08-10 22:43:37 +00:00
Palash Debnath e6728cf068 Merge pull request #1457 from debpalash/fix/ghas-log-safety
fix(security): make untrusted log values single-line
2026-08-10 14:15:41 +00:00
debpalash 3e292ba831 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety 2026-08-10 13:57:08 +00:00
debpalash 6db15aa556 Merge pull request #1442 from paoloantinori/feat/pockettts-deferred 2026-08-10 13:40:27 +00:00
debpalash a2745f1029 test: assert fixed-shape secret log record 2026-08-10 13:27:15 +00:00
debpalash 8b710a380b Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 13:24:54 +00:00
debpalash c4d241a15b Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
2026-08-10 13:20:38 +00:00
Palash Debnath 53fcbd3316 Merge pull request #1459 from debpalash/fix/ghas-empty-except-p2
fix: make degraded backend state observable
2026-08-10 13:04:17 +00:00
debpalash 6673190854 test(ci): scan both workflow extensions 2026-08-10 12:50:00 +00:00
debpalash 32d9a8a964 fix: tighten log safety regressions 2026-08-10 12:49:42 +00:00
debpalash 88906fb23f fix: clear cancelled share runtime 2026-08-10 12:49:34 +00:00
debpalash 1437d37096 test(ci): reject mutable action references 2026-08-10 12:25:43 +00:00
debpalash b90d6169d0 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
#	backend/api/routers/system.py
2026-08-10 12:25:33 +00:00
debpalash 794942faf4 Merge current main into GHAS empty-except fixes 2026-08-10 12:17:43 +00:00
debpalash 603402afce Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 12:17:41 +00:00
Palash Debnath 27a8f477b7 fix(security): keep private diagnostics out of API responses (#1454)
* fix(security): keep private diagnostics out of API responses

* docs: reference response-safety PR

* fix(security): preserve constant recovery guidance

* fix(security): keep recovery and logs data-independent

* fix(security): close remaining response sinks

* test(security): keep SOCKS diagnostics private

* fix: keep Tailscale exceptions local

* fix: keep Tailscale CLI output private
2026-08-10 12:01:12 +00:00
debpalash f45e8ecc07 fix: keep secret-store failures fixed-shape 2026-08-10 11:58:06 +00:00
debpalash 53794d73ec Merge current main into GHAS empty-except fixes 2026-08-10 11:44:50 +00:00
debpalash a1a7d25342 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
2026-08-10 11:44:44 +00:00
debpalash fd2e39d5c0 Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 11:44:36 +00:00
Palash Debnath 7a78573a83 fix(security): constrain GPT-SoVITS endpoints (#1463)
* fix(security): constrain GPT-SoVITS endpoints

* docs: note trusted GPT-SoVITS transport

* fix(security): preserve trusted endpoint authority

* test(security): patch live outbound transport

* test: load outbound security seam at runtime
2026-08-10 11:29:42 +00:00
debpalash 8c241bfbbb fix: validate realtime event dispatch 2026-08-10 11:23:22 +00:00
debpalash e086cb03f1 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
2026-08-10 11:19:40 +00:00
debpalash 9ae554f0ac Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 11:19:14 +00:00
debpalash 40662aeb06 fix: close log safety review gaps 2026-08-10 11:19:12 +00:00
debpalash 74367e4bbf Merge current main into GHAS empty-except fixes 2026-08-10 11:13:10 +00:00
Palash Debnath 38a00cbf30 fix(security): stabilize engine discovery metadata (#1460)
* fix(security): stabilize engine discovery metadata

* fix(security): preserve stable routing outcomes

* fix: preserve safe engine routing outcomes
2026-08-10 10:57:54 +00:00
debpalash 72ce9b79f2 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
#	backend/api/routers/batch.py
2026-08-10 10:54:04 +00:00
debpalash 7aed875fb3 Merge current main into GHAS empty-except fixes 2026-08-10 10:45:13 +00:00
debpalash f21b76350b Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 10:41:24 +00:00
Palash Debnath c716b05aa9 Merge pull request #1458 from debpalash/fix/ghas-empty-except
fix(security): fail closed on cleanup and redaction errors
2026-08-10 10:26:33 +00:00
debpalash 27fcaabf0a Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
#	CHANGELOG.md
2026-08-10 10:03:52 +00:00
debpalash bdcd3923eb fix: preserve fixed-shape dub security logs 2026-08-10 09:58:05 +00:00
debpalash 047e7d901e Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
#	backend/api/routers/dub_export.py
#	backend/api/routers/marketplace.py
#	backend/services/ffmpeg_utils.py
#	backend/services/sonitranslate.py
2026-08-10 09:52:56 +00:00
Palash Debnath 8a58e30a8f Merge pull request #1455 from debpalash/fix/ghas-path-boundary
fix(security): enforce filesystem trust boundaries
2026-08-10 09:36:07 +00:00
debpalash 4e401360ca fix: centralize LAN share runtime state 2026-08-10 09:29:42 +00:00
debpalash 9f2c8ac0a4 fix(pockettts): close license review findings 2026-08-10 09:24:37 +00:00
debpalash 9aa82f3fd5 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
2026-08-10 09:22:30 +00:00
debpalash c1a1839911 Merge main and address degraded-state review findings 2026-08-10 09:21:54 +00:00
debpalash 586650e326 Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
#	CHANGELOG.md
2026-08-10 09:21:17 +00:00
debpalash f991709dd9 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
#	CHANGELOG.md
2026-08-10 09:20:48 +00:00
debpalash c1793dac41 Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 09:20:35 +00:00
Palash Debnath 657d633940 Merge pull request #1464 from debpalash/fix/appimage-apprun-injection
fix(appimage): ship the compatibility launcher
2026-08-10 09:04:56 +00:00
debpalash 9b71eb5e46 fix: close remaining dub export path sinks 2026-08-10 08:57:27 +00:00
debpalash 77d6507318 fix(pockettts): recheck consent after synthesis queue 2026-08-10 08:55:24 +00:00
debpalash 1f875fa392 fix: report degraded operation state truthfully 2026-08-10 08:53:17 +00:00
debpalash 360ddf2152 Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:52:10 +00:00
debpalash 14b00f681c Merge remote-tracking branch 'origin/main' into codex/pr-1464
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:48:52 +00:00
debpalash 44190389a7 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:48:42 +00:00
debpalash a540354cb7 Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 08:48:33 +00:00
Palash Debnath dd2c306bc4 Merge pull request #1456 from debpalash/fix/dependabot-security
fix(security): raise dependency advisory floors
2026-08-10 08:30:01 +00:00
debpalash 7a7dc422a6 fix: keep degraded state truthful 2026-08-10 08:22:37 +00:00
debpalash 5a043538b8 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:17:59 +00:00
debpalash b3fc23316e fix(security): authorize native reveal targets 2026-08-10 08:17:11 +00:00
debpalash 566f822260 Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:10:23 +00:00
debpalash 252c6fd149 Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 08:09:29 +00:00
debpalash 820817ad68 Merge remote-tracking branch 'origin/main' into codex/pr-1464
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:04:56 +00:00
debpalash 30cb1ea3e6 Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:04:47 +00:00
Palash Debnath d0909dcabe Merge pull request #1453 from debpalash/fix/ghas-hf-revisions
fix(security): pin curated Hugging Face model revisions
2026-08-10 07:42:24 +00:00
debpalash c2da73c5c2 fix(pockettts): enforce consent on every synthesis 2026-08-10 07:36:32 +00:00
debpalash d664c93140 test: isolate destructive cleanup imports 2026-08-10 07:33:49 +00:00
debpalash aeda504a03 fix(security): authorize export filesystem sinks 2026-08-10 07:32:50 +00:00
debpalash 180d13c59e fix(pockettts): enforce consent at construction 2026-08-10 07:32:35 +00:00
debpalash 722a7a7e57 fix(security): make control filtering boundaries explicit 2026-08-10 07:30:08 +00:00
debpalash 657dfe5ac6 fix(security): pin NLLB model revision 2026-08-10 07:27:43 +00:00
debpalash 501450e8ec Merge remote-tracking branch 'origin/main' into codex/pr1442 2026-08-10 07:21:53 +00:00
debpalash 0c5be01e39 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
#	CHANGELOG.md
2026-08-10 07:18:12 +00:00
debpalash 5050c7da2b test(security): derive public analytics allowlist 2026-08-10 07:12:56 +00:00
debpalash 44bfc94c49 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
#	backend/api/routers/dub_core.py
#	backend/api/routers/settings.py
#	backend/services/speech_rate.py
2026-08-10 07:12:18 +00:00
debpalash 2cd0fd2972 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
#	CHANGELOG.md
2026-08-10 07:07:16 +00:00
debpalash 7cc173d8be fix: repair the resolved Hugging Face cache 2026-08-10 07:04:42 +00:00
debpalash 4259806d02 Merge remote-tracking branch 'origin/main' into codex/pr-1464
# Conflicts:
#	CHANGELOG.md
2026-08-10 07:04:10 +00:00
debpalash 363f71feca test(security): scope gitleaks false positives 2026-08-10 07:03:31 +00:00
debpalash fe29fe0966 Merge remote-tracking branch 'origin/main' into fix/ghas-hf-revisions
# Conflicts:
#	CHANGELOG.md
2026-08-10 07:01:42 +00:00
debpalash 1c289028d5 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 2026-08-10 07:01:29 +00:00
debpalash 405888a21b Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary 2026-08-10 07:01:22 +00:00
Palash Debnath f4c33f2f06 Merge pull request #1422 from debpalash/fix/1406-corrupt-weights
fix(models): repair a weight file that arrived damaged, not just a missing one (#1406)
2026-08-10 06:45:22 +00:00
debpalash 2fb0feae1a Merge main before landing corrupt-cache recovery 2026-08-10 06:28:57 +00:00
debpalash d1548f5f07 Merge remote-tracking branch 'origin/main' into fix/dependabot-security 2026-08-10 06:28:10 +00:00
debpalash 4d2595eb00 Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary 2026-08-10 06:28:06 +00:00
Palash Debnath c7a2de9ff5 Merge pull request #1443 from debpalash/fix/1274-docker-python-runtime
fix(docker): run ROCm backend with the validated Python (#1274)
2026-08-10 06:08:22 +00:00
debpalash 193d3b6dd3 Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
#	CHANGELOG.md
2026-08-10 05:57:35 +00:00
debpalash 321823bc52 fix(security): bind relocated artifacts to their job 2026-08-10 05:52:41 +00:00
debpalash 9ee30766db Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
#	CHANGELOG.md
2026-08-10 05:52:12 +00:00
debpalash 1a71fbea72 Merge remote-tracking branch 'origin/main' into fix/1274-docker-python-runtime 2026-08-10 05:52:09 +00:00
Palash Debnath 6b1ae60cb5 Merge pull request #1445 from debpalash/fix/1429-youtube-cookie-file
fix(dub): let signed-in YouTube imports use an explicit cookie export
2026-08-10 05:06:46 +00:00
debpalash e8eff3c6a0 fix(security): bound native tool authorization 2026-08-10 05:01:26 +00:00
debpalash 2a81d76182 Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
#	CHANGELOG.md
2026-08-10 05:01:05 +00:00
debpalash f70199db32 fix(security): make path containment explicit to analysis 2026-08-10 04:56:42 +00:00
debpalash 30d073d2dd Merge main and tighten tokenizer recovery regression 2026-08-10 04:55:58 +00:00
debpalash f8f992ed9c Merge main and address Docker review findings 2026-08-10 04:53:37 +00:00
debpalash cd48ba5537 Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
#	CHANGELOG.md
2026-08-10 04:52:38 +00:00
debpalash fef07cee13 Merge remote-tracking branch 'origin/main' into fix/1429-youtube-cookie-file
# Conflicts:
#	CHANGELOG.md
2026-08-10 04:52:36 +00:00
debpalash c4f9e787df fix(security): bind native paths to picker capabilities 2026-08-10 04:37:45 +00:00
Palash Debnath 6ec3cd30fc Merge pull request #1444 from debpalash/fix/1438-uv-bootstrap
fix(bootstrap): recover when uv installer exits after extraction
2026-08-10 04:37:20 +00:00