github-actions[bot]
1271bb5fbd
chore(release): Update version to v1.4.435
2026-03-15 19:10:39 +00:00
Kayvan Sylvan
36c5114b19
Merge pull request #2058 from danielmiessler/dependabot/npm_and_yarn/web/npm_and_yarn-67fcbebea9
...
chore(deps-dev): bump devalue from 5.6.3 to 5.6.4 in /web in the npm_and_yarn group across 1 directory
2026-03-15 12:08:21 -07:00
dependabot[bot]
73cd571624
chore(deps-dev): bump devalue
...
Bumps the npm_and_yarn group with 1 update in the /web directory: [devalue](https://github.com/sveltejs/devalue ).
Updates `devalue` from 5.6.3 to 5.6.4
- [Release notes](https://github.com/sveltejs/devalue/releases )
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sveltejs/devalue/compare/v5.6.3...v5.6.4 )
---
updated-dependencies:
- dependency-name: devalue
dependency-version: 5.6.4
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-15 11:59:44 -07:00
github-actions[bot]
fa022f4391
chore(release): Update version to v1.4.434
2026-03-09 15:52:14 +00:00
Kayvan Sylvan
9057f97739
Merge pull request #2052 from praxstack/feat/bedrock-bearer-token-auth
...
feat(bedrock): dynamic region fetching and AWS_PROFILE conflict fix
2026-03-09 08:49:51 -07:00
Kayvan Sylvan
f0dbb73654
chore: attribution fixed for new GitHub handle and added ksylvan
2026-03-09 08:46:55 -07:00
Kayvan Sylvan
1adb1571e9
chore: incoming 2052 changelog entry
2026-03-09 08:34:10 -07:00
Prax Lannister
b211c42b44
fix: address all PR #2052 review feedback
...
- P2 fix: Add thread-safety comment to withMockEndpointsURL helper
- All @ksylvan reviewer comments addressed (see verification below)
2026-03-08 17:25:43 +05:30
Prax Lannister
19430ec69d
Merge branch 'danielmiessler:main' into feat/bedrock-bearer-token-auth
2026-03-08 17:15:16 +05:30
github-actions[bot]
960fa89f7a
chore(release): Update version to v1.4.433
2026-03-07 23:17:07 +00:00
Kayvan Sylvan
0ec773fbbe
Merge pull request #2054 from pretyflaco/fix/ollama-thinking-and-system-role
...
fix(ollama): Map thinking levels to Ollama API and convert single system-role messages
2026-03-07 15:14:49 -08:00
Kayvan Sylvan
ef379b2e9b
chore: incoming 2054 changelog entry
2026-03-07 14:52:16 -08:00
pretyflaco
1c94fabb46
fix(ollama): map thinking levels and convert single system-role messages
2026-03-08 01:14:47 +03:00
Kayvan Sylvan
673bdfd0c9
fix: Manual edit of changelog.db and fixes for ChangeLog
2026-03-07 09:03:20 -08:00
github-actions[bot]
e3f68c8738
chore(release): Update version to v1.4.432
2026-03-06 17:50:03 +00:00
Prax Lannister
2469673a2c
feat(bedrock): dynamic region fetching and AWS_PROFILE fix
...
- Fetch Bedrock regions dynamically from botocore endpoints.json (public, no auth)
Shows 40+ regions instead of hardcoded 6. Falls back to static list on error.
- Fix AWS_PROFILE env var conflict: users with AWS_PROFILE set for other tools
(terraform, aws-cli) would get 'failed to get shared config profile' errors
when using explicit ABSK or static credentials.
- Handle empty auth choice gracefully (skip instead of error)
Follow-up to #2044 .
2026-03-06 23:19:31 +05:30
Kayvan Sylvan
f063eb46c3
Merge pull request #2050 from ksylvan/kayvan/update-web-dependencies
...
Update web dependencies - fix npm override issue
2026-03-06 09:47:29 -08:00
Kayvan Sylvan
a22f9294ef
chore: incoming 2050 changelog entry
2026-03-06 09:44:12 -08:00
Kayvan Sylvan
74812c32e7
chore: update web dependencies - fix npm override issue
2026-03-06 09:41:52 -08:00
github-actions[bot]
d50bea5888
chore(release): Update version to v1.4.431
2026-03-06 17:18:26 +00:00
Kayvan Sylvan
0d5b411e38
Merge pull request #2049 from ksylvan/kayvan/security-CWE-22
...
Security Hardening: API Key Redaction, Path Traversal Prevention, and Shell Injection Elimination
2026-03-06 09:15:56 -08:00
Kayvan Sylvan
6639891bd3
chore: incoming 2049 changelog entry
2026-03-06 08:59:27 -08:00
Kayvan Sylvan
4f9d4875a6
fix: redact API keys in config responses and eliminate shell injection surfaces
...
- add `maskAPIKey` to redact all but last 4 chars of API keys (CWE-200)
- add `isRedacted` guard to prevent writing masked values back to `.env`
- mask all provider API keys in `GET /config` response payload
- sanitize note filenames with `basename` and allowlist regex (CWE-78, CWE-22)
- replace `exec`/shell commands in obsidian route with native `fs` APIs
- remove `escapeShellArg` helper now that shell execution is fully eliminated
- add path-confinement double-check ensuring resolved paths stay within target dirs
- sanitize note filenames in notes route using `basename` to block path traversal (CWE-22)
- return `safeFilename` instead of raw user input in notes POST response
2026-03-06 08:53:46 -08:00
github-actions[bot]
29e1681929
chore(release): Update version to v1.4.430
2026-03-06 15:11:13 +00:00
Kayvan Sylvan
3c879c07ce
Merge pull request #2044 from PrakharMNNIT/feat/bedrock-bearer-token-auth
...
feat: Add Bedrock bearer token (ABSK) authentication and guided setup
2026-03-06 07:08:52 -08:00
Kayvan Sylvan
24f3f82dc6
feat: internationalize Bedrock setup UI strings and add guided setup i18n keys
...
- Internationalize all Bedrock setup prompt strings via `i18n.T()`
- Add `bedrock_setup_*` i18n keys for auth, region, and model selection
- Add `bedrock_client_not_initialized` error message to all locale files
- Propagate new i18n keys across 11 locale files (de, en, es, fa, fr, it, ja, pl, pt-BR, pt-PT, zh)
- Replace hardcoded setup strings in `bedrock.go` with i18n lookups
- Reorder locale JSON keys alphabetically for consistency
2026-03-06 07:06:02 -08:00
Kayvan Sylvan
8df4520da3
Merge pull request #2047 from bvandevliet/feat/yt-summary-prompt
...
Explicitly instruct YT summary task to be aware of possible transcription errors.
2026-03-06 06:53:14 -08:00
Kayvan Sylvan
d7728ff8c5
chore: incoming 2047 changelog entry
2026-03-06 06:42:38 -08:00
Bob Vandevliet
55f2ff093f
Added one line to make YT summary task explicitly aware of possible transcript typos.
2026-03-06 07:55:57 +01:00
Kayvan Sylvan
5d784609f0
Merge remote-tracking branch 'upstream/main' into feat/bedrock-bearer-token-auth
2026-03-05 14:04:33 -08:00
github-actions[bot]
b09dba7d05
chore(release): Update version to v1.4.429
2026-03-05 20:43:00 +00:00
Kayvan Sylvan
f40c64e0ee
Merge pull request #2046 from ksylvan/kayvan/custom-patterns-load-fix-for-server
...
refactor: add `GetRaw` method to encapsulate raw pattern loading logic
2026-03-05 12:40:22 -08:00
Kayvan Sylvan
bf68dc4bdc
chore: incoming 2046 changelog entry
2026-03-05 12:36:31 -08:00
Kayvan Sylvan
1f7e1d3d20
refactor: extract raw pattern retrieval into dedicated GetRaw method`
...
- Add `GetRaw` method to `PatternsEntity` for unprocessed pattern retrieval
- Replace inline raw pattern loading logic in server handler with `GetRaw`
- Remove manual `Pattern` struct construction from `PatternsHandler.Get`
- Simplify server handler by delegating storage access to database layer
- Add test coverage for `GetRaw` with custom patterns directory
2026-03-05 12:19:06 -08:00
Kayvan Sylvan
0183d5741a
chore: incoming 2044 changelog entry
2026-03-05 09:53:32 -08:00
Prax Lannister
e59a70f8ba
feat: add Bedrock bearer token (ABSK) authentication
...
Add 3-tier authentication for AWS Bedrock:
1. Bearer token (ABSK) - simplest, same as Claude Code
2. Static AWS credentials (access key + secret key)
3. Default AWS credential chain (existing behavior)
- Remove hasAWSCredentials() gate so Bedrock always appears in setup
- Custom guided Setup() flow: auth method, region, model
- Bearer token transport with token redaction
- Nil guards for uninitialized clients
- Temperature-only fix (no top_p) for Claude on Bedrock
- API key masking during re-setup
- Fallback model list when ListFoundationModels API is inaccessible
- i18n support for 11 locales (3 new keys each)
- 25 unit tests
2026-03-05 11:30:55 +05:30
github-actions[bot]
fa2e1ee90a
chore(release): Update version to v1.4.428
2026-03-02 14:34:54 +00:00
Kayvan Sylvan
7c82cc596f
Merge pull request #2040 from Twozee-Tech/add-polish-locale
...
Add Polish (pl) locale
2026-03-02 06:31:59 -08:00
Kayvan Sylvan
122b07ae4c
chore: incoming 2040 changelog entry
2026-03-02 06:27:09 -08:00
Twozee
adffc4a9bf
Add Polish (pl) locale
...
Add Polish translation file with all 683 keys matching the other
locale files in internal/i18n/locales/.
2026-03-02 14:32:00 +01:00
github-actions[bot]
f56a541651
chore(release): Update version to v1.4.427
2026-03-01 02:07:52 +00:00
Kayvan Sylvan
b33b3fe1dc
Merge pull request #2038 from ksylvan/kayvan/git-clone-cli-fallback-for-termux
...
Add Git CLI Fallback to `FetchFilesFromRepo`
2026-02-28 18:05:37 -08:00
Kayvan Sylvan
c0b1f6175a
i18n: add git CLI error message keys across all supported locales
...
- Add `githelper_failed_create_temp_directory` i18n key to all locales
- Add `githelper_failed_git_cli_clone` error key across 10 locale files
- Add `githelper_failed_git_cli_fallback` key for CLI fallback error messaging
- Replace hardcoded error strings in `githelper.go` with `i18n.T()` calls
- Support localized git CLI error reporting in de, en, es, fa, fr, it, ja, pt, zh
2026-02-28 17:41:13 -08:00
Kayvan Sylvan
4bb1319685
chore: incoming 2038 changelog entry
2026-02-28 16:58:23 -08:00
Kayvan Sylvan
f58a494b07
feat: add git CLI fallback to FetchFilesFromRepo for improved compatibility
...
- Add git CLI fallback when go-git in-memory clone fails
- Detect git CLI availability via `exec.LookPath` before fallback
- Extract `fetchFilesViaGoGit` into dedicated helper function
- Implement `fetchFilesViaGitCLI` using shallow `--depth 1` clone
- Use temp directory for CLI clone with deferred cleanup
- Add `copyFile` helper to support CLI-based file extraction
- Respect `SingleDirectory` and `PathPrefix` opts in CLI path
- Surface combined error when both go-git and CLI fallback fail
- Remove redundant inline comments from go-git implementation
2026-02-28 16:54:13 -08:00
github-actions[bot]
d32721a3e4
chore(release): Update version to v1.4.426
2026-02-28 23:35:37 +00:00
Kayvan Sylvan
cbfdf61470
Merge pull request #2036 from ksylvan/kayvan/web-youtube-handling-fix
...
WebUI: YouTube URL Processing Refactor & Dependency Updates
2026-02-28 15:33:10 -08:00
Kayvan Sylvan
b251b77a8e
chore: incoming 2036 changelog entry
2026-02-28 15:30:42 -08:00
Kayvan Sylvan
34bd2ece1e
feat: WebUI: inline YouTube transcripts during chat flow
...
- Replace YouTube URLs with fetched transcript blocks
- Support multiple YouTube links inside one message
- Always render user message before processing response
- Show YouTube-specific loading indicator during transcript fetch
- Reset YouTube URL state after submission processing
- Upgrade SvelteKit, Svelte, Tailwind, TypeScript toolchain versions
- Bump pdfjs-dist and @napi-rs/canvas optional dependency versions
- Refresh esbuild binaries and Floating UI runtime versions
- Regenerate pnpm/npm lockfiles with updated transitive dependencies
2026-02-28 15:21:47 -08:00
github-actions[bot]
c6789bedf7
chore(release): Update version to v1.4.425
2026-02-28 17:48:43 +00:00