Kristjan Kruus 1f9d390a64 fix: apply security credentials before config validation in web handlers ...

- Move SecurityCopyFrom() before validateConfig() in PUT and PATCH handlers
- Make SecurityCopyFrom() call applySecurityConfig() to populate private fields
- Add tests for config save with security-only channel tokens

Without this fix, saving config via the web UI fails with 'channels.pico.token
is required' (and similar for Telegram/Discord) when tokens are stored in
.security.yml, because the validation ran before security credentials were
copied to the config struct.

2026-03-23 14:26:51 +02:00

..

agent

fix(provider): deduplicate tool results and merge consecutive tool_result blocks for Anthropic API (#1793)

2026-03-23 17:24:46 +08:00

auth

Merge branch 'main' into version

2026-03-19 18:04:58 +08:00

bus

feat(telegram): stream LLM responses via sendMessageDraft (#1101)

2026-03-20 21:04:14 +08:00

channels

Merge branch 'main' into version

2026-03-23 15:00:18 +08:00

commands

Merge branch 'main' into feat/skill-channel-commands

2026-03-22 20:51:16 +01:00

config

fix: apply security credentials before config validation in web handlers

2026-03-23 14:26:51 +02:00

constants

refactor: replace bool map with set-style map for internal channels (#472)

2026-02-19 11:48:17 +01:00

credential

refactor: centralize environment variable key constants (#1730)

2026-03-18 18:03:24 +08:00

cron

feat(cron): refactor scheduler to event-driven model and add unit tests (#1313)

2026-03-18 00:02:51 +08:00

devices

fix: address PR #662 review comments (bus drain, context timeouts, onebot leak)

2026-02-23 21:34:37 +08:00

fileutil

refactor(pkg): move atomic file write to dedicated fileutil package

2026-02-24 23:57:13 +08:00

gateway

implement panic log for gateway and launcher

2026-03-23 15:40:30 +08:00

health

feat: add /reload to gateway api and command (#1725)

2026-03-19 13:42:36 +08:00

heartbeat

fix(heartbeat): ignore untouched default template

2026-03-15 21:58:21 +08:00

identity

fix(identity): support negative integers in isNumeric for Telegram group IDs

2026-03-21 17:09:02 +07:00

logger

fix for ci/cd

2026-03-23 18:15:16 +08:00

mcp

Feat/add tool enable or disable configuration (#1071)

2026-03-05 14:53:26 +08:00

media

Fix 1886 media cleanup policy (#1887)

2026-03-23 12:13:59 +08:00

memory

fix: skip meta json files during session migration (#1340)

2026-03-11 14:29:42 +08:00

migrate

refactor: seperate security.yml for store keys

2026-03-22 01:55:00 +08:00

providers

fix(provider): deduplicate tool results and merge consecutive tool_result blocks for Anthropic API (#1793)

2026-03-23 17:24:46 +08:00

routing

refactor Config to add Version and migratable

2026-03-12 13:52:55 +08:00

session

fix(security): harden unauthenticated tool-exec paths (#1360)

2026-03-11 19:22:20 +08:00

skills

enhance skill installer (#1252)

2026-03-13 14:04:02 +08:00

state

fix(security): harden unauthenticated tool-exec paths (#1360)

2026-03-11 19:22:20 +08:00

tools

Fix 1886 media cleanup policy (#1887)

2026-03-23 12:13:59 +08:00

utils

Merge pull request #1891 from RussellLuo/audio-transcription

2026-03-23 00:23:30 +01:00

voice

Merge branch 'main' into version

2026-03-23 10:54:08 +08:00

env.go

Merge branch 'main' into version

2026-03-19 18:04:58 +08:00