diegosouzapw 9248ab4dfd fix(ci): route validation, CodeQL alerts, Docker workflow ...

- Add Zod schemas + validateBody() to 5 routes missing validation:
  model-combo-mappings (POST, PUT), webhooks (POST, PUT), openapi/try (POST)
- Fix 6 polynomial-redos CodeQL alerts in provider.ts and chatCore.ts
  by replacing (?:^|/) alternation patterns with segment-based matching
- Fix insecure-randomness in acp/manager.ts (crypto.randomUUID)
- Fix shell-command-injection in prepublish.mjs (JSON.stringify)
- Upgrade docker/setup-buildx-action from v3 to v4 (Node.js 20 deprecation)

CI check:route-validation:t06 PASS (176/176 routes validated)
Tests: 926/926 pass

2026-03-24 16:08:02 -03:00

..

ci.yml

fix: resolve issues #273, #276, #277 — image routing, models route, missing-key error (#282)

2026-03-10 09:48:50 -03:00

deploy-vps.yml

fix(ci): correct security test import, add validateBody to acp/agents, deploy-vps continue-on-error

2026-03-08 17:58:42 -03:00

docker-publish.yml

fix(ci): route validation, CodeQL alerts, Docker workflow

2026-03-24 16:08:02 -03:00

electron-release.yml

fix(npm): link electron-release to npm-publish via workflow_call

2026-03-24 21:52:34 +08:00

npm-publish.yml

fix(npm): link electron-release to npm-publish via workflow_call

2026-03-24 21:52:34 +08:00