Commit Graph
1403 Commits
Author SHA1 Message Date
debpalash c4d241a15b Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
2026-08-10 13:20:38 +00:00
Palash Debnath 53fcbd3316 Merge pull request #1459 from debpalash/fix/ghas-empty-except-p2
fix: make degraded backend state observable
2026-08-10 13:04:17 +00:00
debpalash 32d9a8a964 fix: tighten log safety regressions 2026-08-10 12:49:42 +00:00
debpalash 88906fb23f fix: clear cancelled share runtime 2026-08-10 12:49:34 +00:00
debpalash b90d6169d0 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
#	backend/api/routers/system.py
2026-08-10 12:25:33 +00:00
debpalash 794942faf4 Merge current main into GHAS empty-except fixes 2026-08-10 12:17:43 +00:00
Palash Debnath 27a8f477b7 fix(security): keep private diagnostics out of API responses (#1454)
* fix(security): keep private diagnostics out of API responses

* docs: reference response-safety PR

* fix(security): preserve constant recovery guidance

* fix(security): keep recovery and logs data-independent

* fix(security): close remaining response sinks

* test(security): keep SOCKS diagnostics private

* fix: keep Tailscale exceptions local

* fix: keep Tailscale CLI output private
2026-08-10 12:01:12 +00:00
debpalash f45e8ecc07 fix: keep secret-store failures fixed-shape 2026-08-10 11:58:06 +00:00
debpalash 53794d73ec Merge current main into GHAS empty-except fixes 2026-08-10 11:44:50 +00:00
debpalash a1a7d25342 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
2026-08-10 11:44:44 +00:00
Palash Debnath 7a78573a83 fix(security): constrain GPT-SoVITS endpoints (#1463)
* fix(security): constrain GPT-SoVITS endpoints

* docs: note trusted GPT-SoVITS transport

* fix(security): preserve trusted endpoint authority

* test(security): patch live outbound transport

* test: load outbound security seam at runtime
2026-08-10 11:29:42 +00:00
debpalash 8c241bfbbb fix: validate realtime event dispatch 2026-08-10 11:23:22 +00:00
debpalash e086cb03f1 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
2026-08-10 11:19:40 +00:00
debpalash 40662aeb06 fix: close log safety review gaps 2026-08-10 11:19:12 +00:00
debpalash 74367e4bbf Merge current main into GHAS empty-except fixes 2026-08-10 11:13:10 +00:00
Palash Debnath 38a00cbf30 fix(security): stabilize engine discovery metadata (#1460)
* fix(security): stabilize engine discovery metadata

* fix(security): preserve stable routing outcomes

* fix: preserve safe engine routing outcomes
2026-08-10 10:57:54 +00:00
debpalash 72ce9b79f2 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
#	backend/api/routers/batch.py
2026-08-10 10:54:04 +00:00
debpalash 7aed875fb3 Merge current main into GHAS empty-except fixes 2026-08-10 10:45:13 +00:00
Palash Debnath c716b05aa9 Merge pull request #1458 from debpalash/fix/ghas-empty-except
fix(security): fail closed on cleanup and redaction errors
2026-08-10 10:26:33 +00:00
debpalash 27fcaabf0a Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
#	CHANGELOG.md
2026-08-10 10:03:52 +00:00
debpalash bdcd3923eb fix: preserve fixed-shape dub security logs 2026-08-10 09:58:05 +00:00
debpalash 047e7d901e Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
#	backend/api/routers/dub_export.py
#	backend/api/routers/marketplace.py
#	backend/services/ffmpeg_utils.py
#	backend/services/sonitranslate.py
2026-08-10 09:52:56 +00:00
Palash Debnath 8a58e30a8f Merge pull request #1455 from debpalash/fix/ghas-path-boundary
fix(security): enforce filesystem trust boundaries
2026-08-10 09:36:07 +00:00
debpalash 4e401360ca fix: centralize LAN share runtime state 2026-08-10 09:29:42 +00:00
debpalash 9aa82f3fd5 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
2026-08-10 09:22:30 +00:00
debpalash c1a1839911 Merge main and address degraded-state review findings 2026-08-10 09:21:54 +00:00
debpalash 586650e326 Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
#	CHANGELOG.md
2026-08-10 09:21:17 +00:00
debpalash f991709dd9 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
#	CHANGELOG.md
2026-08-10 09:20:48 +00:00
Palash Debnath 657d633940 Merge pull request #1464 from debpalash/fix/appimage-apprun-injection
fix(appimage): ship the compatibility launcher
2026-08-10 09:04:56 +00:00
debpalash 9b71eb5e46 fix: close remaining dub export path sinks 2026-08-10 08:57:27 +00:00
debpalash 1f875fa392 fix: report degraded operation state truthfully 2026-08-10 08:53:17 +00:00
debpalash 360ddf2152 Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:52:10 +00:00
debpalash 14b00f681c Merge remote-tracking branch 'origin/main' into codex/pr-1464
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:48:52 +00:00
debpalash 44190389a7 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:48:42 +00:00
Palash Debnath dd2c306bc4 Merge pull request #1456 from debpalash/fix/dependabot-security
fix(security): raise dependency advisory floors
2026-08-10 08:30:01 +00:00
debpalash 7a7dc422a6 fix: keep degraded state truthful 2026-08-10 08:22:37 +00:00
debpalash 5a043538b8 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:17:59 +00:00
debpalash b3fc23316e fix(security): authorize native reveal targets 2026-08-10 08:17:11 +00:00
debpalash 566f822260 Merge remote-tracking branch 'origin/main' into fix/ghas-path-boundary
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:10:23 +00:00
debpalash 820817ad68 Merge remote-tracking branch 'origin/main' into codex/pr-1464
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:04:56 +00:00
debpalash 30cb1ea3e6 Merge remote-tracking branch 'origin/main' into fix/dependabot-security
# Conflicts:
#	CHANGELOG.md
2026-08-10 08:04:47 +00:00
Palash Debnath d0909dcabe Merge pull request #1453 from debpalash/fix/ghas-hf-revisions
fix(security): pin curated Hugging Face model revisions
2026-08-10 07:42:24 +00:00
debpalash d664c93140 test: isolate destructive cleanup imports 2026-08-10 07:33:49 +00:00
debpalash aeda504a03 fix(security): authorize export filesystem sinks 2026-08-10 07:32:50 +00:00
debpalash 722a7a7e57 fix(security): make control filtering boundaries explicit 2026-08-10 07:30:08 +00:00
debpalash 657dfe5ac6 fix(security): pin NLLB model revision 2026-08-10 07:27:43 +00:00
debpalash 0c5be01e39 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except-p2
# Conflicts:
#	CHANGELOG.md
2026-08-10 07:18:12 +00:00
debpalash 5050c7da2b test(security): derive public analytics allowlist 2026-08-10 07:12:56 +00:00
debpalash 44bfc94c49 Merge remote-tracking branch 'origin/main' into fix/ghas-log-safety
# Conflicts:
#	CHANGELOG.md
#	backend/api/routers/dub_core.py
#	backend/api/routers/settings.py
#	backend/services/speech_rate.py
2026-08-10 07:12:18 +00:00
debpalash 2cd0fd2972 Merge remote-tracking branch 'origin/main' into fix/ghas-empty-except
# Conflicts:
#	CHANGELOG.md
2026-08-10 07:07:16 +00:00