Xvvln 2db8df8e38 fix(security): harden management panel asset updater ...

- Abort update when SHA256 digest mismatch is detected instead of
  logging a warning and proceeding (prevents MITM asset replacement)
- Cap asset download size to 10 MB via io.LimitReader (defense-in-depth
  against OOM from oversized responses)
- Add `auto-update-panel` config option (default: false) to make the
  periodic background updater opt-in; the panel is still downloaded
  on first access when missing, but no longer silently auto-updated
  every 3 hours unless explicitly enabled

2026-03-24 00:10:04 +08:00

..

access

refactor(sdk): simplify provider lifecycle and registration logic

2026-02-10 15:39:26 +08:00

api

Merge pull request #2124 from RGBadmin/feat/auth-list-priority-note

2026-03-16 12:31:11 +08:00

auth

refactor(auth): replace manual input handling with AsyncPrompt for callback URLs

2026-03-20 12:24:27 +08:00

browser

feat(logging): introduce centralized logging with custom format and Gin integration

2025-09-26 00:54:52 +08:00

buildinfo

feat(buildinfo): add build metadata and expose via HTTP headers

2025-11-13 08:38:03 +08:00

cache

test: align signature cache tests with cache behavior

2026-01-22 17:12:47 +08:00

cmd

refactor(headers): streamline User-Agent handling and introduce GeminiCLI versioning

2026-03-02 13:04:30 +08:00

config

fix(security): harden management panel asset updater

2026-03-24 00:10:04 +08:00

constant

**feat(translator): add Antigravity translation logic**

2025-11-21 23:40:59 +08:00

interfaces

**feat(antigravity): enhance handling of "thinking" content and refine Claude model response processing**

2025-12-07 13:19:12 +08:00

logging

fix(logging): expand tilde in auth-dir and log resolution errors

2026-02-03 00:02:54 +08:00

managementasset

fix(security): harden management panel asset updater

2026-03-24 00:10:04 +08:00

misc

refactor(auth): replace manual input handling with AsyncPrompt for callback URLs

2026-03-20 12:24:27 +08:00

registry

feat(model_registry): enhance model registration and refresh mechanisms

2026-03-13 10:56:39 +08:00

runtime

refactor: replace sjson.Set usage with sjson.SetBytes to optimize mutable JSON transformations

2026-03-19 17:58:54 +08:00

store

fix(store): add proper GC with Handler and interval gating

2026-02-01 11:19:43 +07:00

thinking

fix(openai-compat): improve pool fallback and preserve adaptive thinking

2026-03-07 16:54:28 +08:00

translator

refactor: replace sjson.Set usage with sjson.SetBytes to optimize mutable JSON transformations

2026-03-19 17:58:54 +08:00

tui

feat(tui): add standalone mode and API-based log polling

2026-02-19 03:18:08 +08:00

usage

refactor(logger): remove unnecessary request details limit logic

2026-01-10 14:46:59 +08:00

util

refactor: replace sjson.Set usage with sjson.SetBytes to optimize mutable JSON transformations

2026-03-19 17:58:54 +08:00

watcher

fix(api): propagate note to Gemini virtual auths and align priority parsing

2026-03-15 16:47:01 +08:00

wsrelay

refactor: consolidate channel send logic with context-safe handlers

2026-01-28 10:58:35 +08:00