Yue_chen 2ecdb893d5 fix(tools): block 198.18.0.0/15 in SSRF guard ...

RFC 2544 benchmark addresses (198.18.0.0/15) are not globally routable
but were missing from the isPrivateOrRestrictedIP blocklist, allowing
SSRF bypasses via literal IPv4.

Fixes #3077

2026-06-09 19:01:42 +08:00

..

agent

fix(agent): handle os.Getwd error in NewContextBuilder without behavior regression

2026-06-08 16:52:00 +08:00

audio

refactor(models): unify provider metadata around backend catalog (#2896)

2026-05-20 11:50:34 +08:00

auth

fix(auth): canonicalize Google Antigravity provider and enhance credential management (#2599)

2026-04-21 16:28:29 +08:00

bus

fix(context): expose history tokens and remove leaked state files

2026-06-06 00:28:32 +08:00

channels

fix: handle Telegram location messages

2026-06-08 15:53:42 +08:00

commands

fix(context): expose history tokens and remove leaked state files

2026-06-06 00:28:32 +08:00

config

Add native Kagi web search provider

2026-06-07 16:27:50 +02:00

constants

…

credential

…

cron

feat(cron): add get and update actions to cron tool

2026-05-31 10:55:54 +08:00

devices

…

events

fix(events): keep runtime observers non-blocking

2026-04-27 13:09:03 +08:00

evolution

fix: handle os.Getwd error in evolution skills_recall and drafts

2026-06-07 21:05:16 +08:00

fileutil

…

gateway

fix: health check always returning not ready

2026-06-08 12:14:06 +02:00

health

fix(host): modernize default host selection order

2026-04-14 14:03:23 +08:00

heartbeat

…

identity

…

isolation

fix: add ok checks for sync.Map LoadAndDelete/Load type assertions

2026-06-06 21:17:07 +08:00

logger

unify all panic event to panic log file (#2250)

2026-04-01 23:26:49 +08:00

mcp

fix: use %w instead of %v for error wrapping

2026-06-08 09:10:14 +08:00

media

…

memory

fix(session): tighten main-session alias detection to exact 3-part format

2026-06-04 11:01:10 +08:00

migrate

fix: check Close() error after io.Copy to writable files

2026-06-07 12:09:01 +08:00

netbind

fix(web): address latest Copilot review points

2026-04-14 23:39:59 +08:00

pid

fix(pid): verify process identity in singleton PID check

2026-06-04 20:04:51 +08:00

providers

fix(config): use canonical Anthropic default model ID

2026-06-07 15:43:26 +08:00

routing

feat(routing): add ordered dispatch rules

2026-04-01 22:13:04 +08:00

seahorse

fix: type-switch capture, nil guard, LastInsertId error check

2026-06-06 16:32:14 +08:00

session

fix(seahorse,session): preserve created_at across history bootstrap

2026-05-26 14:05:20 +08:00

skills

feat: agent self evolution (#2847)

2026-05-11 16:13:27 +08:00

state

refactor: replace log.Printf/fmt.Printf with structured logger

2026-06-08 09:18:02 +08:00

tokenizer

feat(seahorse): implement short-term memory engine (LCM) (#2285)

2026-04-05 09:05:16 +08:00

tools

fix(tools): block 198.18.0.0/15 in SSRF guard

2026-06-09 19:01:42 +08:00

updater

fix: check Close() errors in updater extraction functions

2026-06-06 21:34:24 +08:00

utils

fix: check Close() error after downloading media file

2026-06-07 11:53:38 +08:00

env.go

…