teknium1 127d2ee87a fix(photon): bound the sidecar dep self-heal npm run with a timeout ...

Follow-up to the salvaged #57943: a wedged npm (dead registry, network
blackhole) ran unbounded inside asyncio.to_thread, holding the photon
connect path hostage. Cap npm ci / npm install at 600s; on timeout, log
and leave the stale deps in place so the readiness check reports the
real error and the next reconnect tick retries.

2026-07-05 17:38:32 -07:00

..

browser

fix: guard int(os.getenv()) casts against malformed env vars (#40598)

2026-06-07 06:14:24 -07:00

context_engine

feat(context-engine): host contract for external context engines

2026-05-28 01:45:30 -07:00

cron_providers

fix(cron): avoid provider package shadowing core cron

2026-06-23 23:39:22 -07:00

dashboard_auth

feat(dashboard_auth): support confidential clients (client_secret) in self-hosted OIDC (#55344)

2026-06-30 13:32:51 +10:00

disk-cleanup

docs(disk-cleanup): clarify cron output-root protection is exact-match

2026-07-01 15:42:04 +05:30

google_meet

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

hermes-achievements

revert(plugins): restore user dashboard plugin backend API auto-import (#43719) (#51950)

2026-06-24 07:46:54 -07:00

image_gen

fix(image-gen): route local-input credential guard through one shared chokepoint + cover xai (#57698)

2026-07-03 18:47:53 +05:30

kanban

fix(security): sanitize kanban markdown html

2026-06-21 13:10:17 -07:00

memory

fix: remove dead f-string prefixes via ruff F541 (216 sites) (#52336)

2026-07-05 13:42:46 -07:00

model-providers

feat(providers): GLM-5.2 native reasoning_effort controls (#58884)

2026-07-05 13:48:01 -07:00

observability

fix(langfuse): bound _TRACE_STATE growth from non-finalizing turns

2026-06-18 12:59:41 +05:30

platforms

fix(photon): bound the sidecar dep self-heal npm run with a timeout

2026-07-05 17:38:32 -07:00

security-guidance

plugins: add security-guidance — pattern-matched warnings on dangerous code writes (#33131)

2026-05-27 02:07:21 -07:00

spotify

chore: prune unused imports and duplicate import redefinitions

2026-05-28 22:26:25 -07:00

teams_pipeline

fix(teams-pipeline): reject dot-only recording display_name

2026-07-01 02:03:48 -07:00

video_gen

fix(xai): route video-gen local inputs through the shared read guard

2026-07-03 18:47:53 +05:30

web

fix(web): re-check Firecrawl final URLs for SSRF

2026-07-01 00:49:38 -07:00

__init__.py

feat(memory): pluggable memory provider interface with profile isolation, review fixes, and honcho CLI restoration (#4623)

2026-04-02 15:33:51 -07:00

plugin_utils.py

fix(plugins): thread-safe lazy-singleton helpers; fix honcho TOCTOU (#24759) (#42150)

2026-06-08 09:35:22 -07:00