dependabot[bot]
314ae40820
chore(deps-dev): bump @xmldom/xmldom from 0.8.11 to 0.8.12 in /electron
...
Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom ) from 0.8.11 to 0.8.12.
- [Release notes](https://github.com/xmldom/xmldom/releases )
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md )
- [Commits](https://github.com/xmldom/xmldom/compare/0.8.11...0.8.12 )
---
updated-dependencies:
- dependency-name: "@xmldom/xmldom"
dependency-version: 0.8.12
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-01 04:51:17 +00:00
CaIon
670abee2f0
fix(EditChannelModal): enhance clipboard handling with error checks
...
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (amd64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (arm64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Create multi-arch manifests (Docker Hub) (push) Has been cancelled
Added checks to ensure clipboard functionality is available before attempting to read from it. Improved error handling during clipboard read operations to prevent unhandled exceptions.
v0.12.0-alpha.2
2026-03-31 21:42:36 +08:00
CaIon
8bb9a42f68
feat: add clipboard magic string for quick channel creation from token copy
...
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (amd64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (arm64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Create multi-arch manifests (Docker Hub) (push) Has been cancelled
When copying a token, users can now choose "Copy Connection String" which
encodes both the API key and server URL as a JSON clipboard payload
(type: newapi_channel_conn). When opening the channel creation form, the
clipboard is auto-detected and a banner offers to fill key + base_url,
eliminating repeated tab-switching when connecting to another new-api instance.
v0.12.0-alpha.1
2026-03-31 19:39:23 +08:00
CaIon
d22f889e5d
fix(xAI): set MaxTokens to nil when MaxCompletionTokens is 0 for grok-3-mini model
2026-03-31 19:16:16 +08:00
Calcium-Ion
3734059da7
Merge pull request #3462 from DaZuiZui/main
...
docs(zh-TW): fix missing content and add partner logo
2026-03-31 19:02:15 +08:00
Calcium-Ion
26ce873f8b
Merge pull request #3474 from wans10/main
...
fix(dashboard): 修复消耗分布图表悬浮时滚动条闪烁
2026-03-31 18:57:16 +08:00
CaIon
e099117c61
refactor: use POST for account binding endpoints and normalize reset responses
...
- Switch /api/oauth/email/bind and /api/oauth/wechat/bind from GET to
POST with JSON body for better REST semantics
- Normalize password reset endpoint to return consistent responses
- Apply url.QueryEscape to WeChat code parameter for robustness
2026-03-31 18:44:40 +08:00
CaIon
310d618a16
style: enhance footer layout and add custom class for styling
...
- Refactor Footer component to use a semantic <footer> element for better accessibility.
- Update CSS to include a new class for the custom footer, allowing for relative positioning.
- Adjust layout to improve responsiveness and visual alignment of footer content.
2026-03-31 18:41:44 +08:00
CaIon
20399d3c8f
fix: harden SSRF protection for unauthenticated and user-level endpoints
...
- Add ValidateURLWithFetchSetting check before fetching MJ image URLs
in RelayMidjourneyImage (unauthenticated endpoint)
- Add ValidateURLWithFetchSetting check before fetching video URLs
in VideoProxy (upstream-controlled URL)
- Enable ApplyIPFilterForDomain by default to prevent DNS rebinding
bypass of SSRF protection
- Elevate FetchModels endpoint from AdminAuth to RootAuth
- Update frontend: mark domain IP filtering as recommended, update
description and i18n translations (zh-CN/zh-TW/en/fr/ja/ru/vi)
2026-03-31 17:57:47 +08:00
CaIon
5238f279db
feat: record stream interruption reasons via StreamStatus
...
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (amd64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (arm64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Create multi-arch manifests (Docker Hub) (push) Has been cancelled
Build Electron App / build (windows-latest) (push) Has been cancelled
Build Electron App / release (push) Has been cancelled
Release (Linux, macOS, Windows) / Linux Release (push) Has been cancelled
Release (Linux, macOS, Windows) / macOS Release (push) Has been cancelled
Release (Linux, macOS, Windows) / Windows Release (push) Has been cancelled
- Add StreamStatus type (relay/common) to track stream end reason
(done/timeout/client_gone/scanner_error/eof/panic/ping_fail) and
accumulate soft errors during streaming via sync.Once + sync.Mutex.
- Add StreamResult (relay/helper) as the callback interface: adapters
call sr.Error() for soft errors, sr.Stop() for fatal, sr.Done() for
normal completion. No early-return problem — multiple errors per chunk
are naturally supported.
- Refactor StreamScannerHandler callback from func(string) bool to
func(string, *StreamResult). All 9 channel adapters updated.
- Write stream_status into log other JSON field (admin-only) with
status ok/error, end_reason, error_count, and error messages.
- Frontend: display stream status in log detail expansion for admins.
v0.11.9
2026-03-31 16:54:39 +08:00
CaIon
5402bf417d
feat: expose i18n instance to the global window object for easier access
2026-03-31 16:54:39 +08:00
Seefs
c766913baf
Merge pull request #3507 from QuantumNous/dependabot/go_modules/golang.org/x/image-0.38.0
...
chore(deps): bump golang.org/x/image from 0.23.0 to 0.38.0
2026-03-31 16:52:35 +08:00
dependabot[bot]
40dc43f44e
chore(deps): bump golang.org/x/image from 0.23.0 to 0.38.0
...
Bumps [golang.org/x/image](https://github.com/golang/image ) from 0.23.0 to 0.38.0.
- [Commits](https://github.com/golang/image/compare/v0.23.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/image
dependency-version: 0.38.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-30 16:24:46 +00:00
wans10
b2dd4acc9f
fix(dashboard): 修复消耗分布图表悬浮时滚动条闪烁
2026-03-28 12:14:22 +08:00
哇塞大嘴好帥
4e492b26f6
Update README.zh_TW.md
2026-03-27 17:34:28 +08:00
哇塞大嘴好帥
82b750398c
Update README.zh_TW.md
2026-03-27 17:15:12 +08:00
Seefs
fbf235d222
Merge pull request #3461 from feitianbubu/pr/0ec3d7a1b2cc1375b5c7fe041ae94d714eb03a69
...
feat: prevent metadata from overriding model fields
2026-03-27 15:36:01 +08:00
feitianbubu
62b9aaa520
feat: prevent metadata from overriding model fields
2026-03-27 15:31:41 +08:00
Calcium-Ion
22b6b16702
Merge pull request #3440 from seefs001/refactor/expose-skip-retry-option
...
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (amd64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (arm64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Create multi-arch manifests (Docker Hub) (push) Has been cancelled
refactor: expose skip-retry option and show it in rules list
v0.11.9-alpha.3
2026-03-25 14:11:37 +08:00
Seefs
6154b8e3cd
refactor: expose skip-retry option and show it in rules list
2026-03-25 14:06:35 +08:00
Calcium-Ion
ff66288e3a
Merge pull request #3438 from seefs001/fix/openrouter-usage
...
fix: restore pre-3400 OpenRouter billing semantics
2026-03-25 14:02:08 +08:00
Seefs
926e1781dd
fix: preserve cache usage in openai-to-claude response conversion
2026-03-25 13:49:21 +08:00
Seefs
d4a470a638
fix: restore pre-3400 OpenRouter billing semantics
2026-03-25 13:24:52 +08:00
Seefs
9f61407bf0
fix: restore pre-3400 OpenRouter billing semantics
2026-03-25 13:11:51 +08:00
CaIon
dbf900a531
fix: restore doubao coding plan deprecation and regex ignored models lost during conflict resolution
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (amd64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (arm64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Create multi-arch manifests (Docker Hub) (push) Has been cancelled
v0.11.9-alpha.2
2026-03-25 00:04:01 +08:00
CaIon
7399e4721b
feat: add slide-in animations and update translations for new UI elements
...
# Conflicts:
# web/src/components/table/channels/modals/EditChannelModal.jsx
2026-03-24 23:57:58 +08:00
CaIon
a5e20269dd
security: harden Docker and release CI workflows
...
- Pin all GitHub Actions to commit SHA to prevent supply chain attacks
- Enable SLSA provenance attestation (mode=max) and SBOM generation
- Add cosign keyless signing for Docker images via GitHub OIDC
- Capture and output image digests to GitHub Job Summary
- Pin Dockerfile base images to digest (bun:1, golang:1.26.1-alpine, debian:bookworm-slim)
- Add SHA256 checksum generation for binary releases (Linux/macOS/Windows)
- Update actions/checkout v3->v4, actions/setup-go v3->v5 in release.yml
2026-03-24 23:56:15 +08:00
Calcium-Ion
9ae9040b3c
Merge pull request #3401 from seefs001/fix/convert-openai-detail-field
...
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (amd64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (arm64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Create multi-arch manifests (Docker Hub) (push) Has been cancelled
fix: the "detail" field is empty, an empty field was sent to upstream
v0.11.9-alpha.1
2026-03-23 15:04:06 +08:00
Calcium-Ion
0191a68d4e
Merge pull request #3400 from seefs001/fix/openai-usage
...
refactor: optimize billing flow for OpenAI-to-Anthropic convert
2026-03-23 15:03:57 +08:00
Calcium-Ion
16221f8279
Merge pull request #3399 from seefs001/refactor/codex-usage
...
Refactor/codex usage
2026-03-23 15:03:47 +08:00
Calcium-Ion
763c3ff709
Merge pull request #3331 from seefs001/fix/claude-beta-query
...
fix: apply forced beta query at final upstream URL stage
2026-03-23 15:03:36 +08:00
Calcium-Ion
c667e4706a
Merge pull request #3333 from seefs001/fix/channel-affinity-disable
...
fix: honor channel affinity skip-retry when channel is disabled
2026-03-23 15:03:23 +08:00
Calcium-Ion
216b94dac0
Merge pull request #3335 from seefs001/chore/adjuct-default-settings
...
adjuct default settings
2026-03-23 15:03:01 +08:00
Calcium-Ion
49eb533aaf
Merge pull request #3381 from seefs001/feature/regex-ignored-upstream-models
...
feat: support regex-prefixed ignored upstream models
2026-03-23 15:02:44 +08:00
Calcium-Ion
7693edae53
Merge pull request #3393 from seefs001/fix/oauth-bind
...
fix: oauth bind callback handling
2026-03-23 15:02:34 +08:00
Seefs
ded4a124e2
fix: the "detail" field is empty, an empty field was sent to the upstream system.
2026-03-23 15:00:20 +08:00
Calcium-Ion
d6982c8182
Merge pull request #3379 from seefs001/refactor/rm-coding-plan
...
fix: disable doubao coding plan selection
2026-03-23 14:53:13 +08:00
Seefs
9ecad90652
refactor: optimize billing flow for OpenAI-to-Anthropic convert
2026-03-23 14:22:12 +08:00
Seefs
929b5060ea
refactor: simplify codex account modal and collapse raw json by default
2026-03-23 13:54:54 +08:00
Seefs
755ece2f01
refactor: simplify codex account modal and collapse raw json by default
2026-03-23 00:58:59 +08:00
Seefs
f40eb4e5d2
fix: oauth bind callback handling
2026-03-23 00:48:55 +08:00
Seefs
45f65c297b
feat: support regex-prefixed ignored upstream models
2026-03-22 15:43:03 +08:00
Seefs
6c074ef897
fix: disable doubao coding plan selection
2026-03-22 15:01:09 +08:00
CaIon
deff59a5be
fix: increase StreamScannerMaxBufferMB limit and add handling for gpt-5.4-nano prefix
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (amd64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Build & push (arm64) [native] (push) Has been cancelled
Publish Docker image (Multi Registries, native amd64+arm64) / Create multi-arch manifests (Docker Hub) (push) Has been cancelled
Build Electron App / build (windows-latest) (push) Has been cancelled
Build Electron App / release (push) Has been cancelled
Release (Linux, macOS, Windows) / Linux Release (push) Has been cancelled
Release (Linux, macOS, Windows) / macOS Release (push) Has been cancelled
Release (Linux, macOS, Windows) / Windows Release (push) Has been cancelled
v0.11.8
2026-03-22 13:55:10 +08:00
Seefs
3c516084f8
Merge pull request #3360 from lcq225/docs/improve-bt-installation-guide
...
docs: 完善宝塔面板部署教程并修复链接错误
2026-03-22 00:43:13 +08:00
Seefs
4d675b4d1f
Merge pull request #3357 from wenyifancc/cache_llama_cpp
...
feat: Add support for counting cache-hit tokens in llama.cpp
2026-03-22 00:39:49 +08:00
Seefs
87b426f306
Merge pull request #3369 from RedwindA/feat/logsManagement
...
feat: add server log file management to performance settings
2026-03-22 00:32:01 +08:00
RedwindA
49db5147c3
fix: align log cleanup button with other controls in the row
2026-03-21 21:48:31 +08:00
RedwindA
13122aa0fa
fix: refresh log info on partial delete failure
2026-03-21 21:11:52 +08:00
RedwindA
dcd0911612
fix: log management race condition, partial delete reporting, and UX issues
...
- Fix data race on gin.DefaultWriter during log rotation by adding LogWriterMu
- Report partial failure when some log files fail to delete instead of always returning success
- Fix misleading "logging disabled" banner shown before API responds
- Fix en.json translation for numeric validation message
2026-03-21 20:40:39 +08:00