COMMITS
September 8, 2026
A
fix(account-pairing): stop the saved list doubling on an id mismatch (#323)
Aleksei Sviridkin committed
M
M
fix(service): stop launchd from QoS-clamping the proxy (ProcessType Standard) (#320)
Mark Karpelès committed
M
M
chore: untrack the node_modules symlink and ignore it in any form
Mark Karpeles committed
A
F
fix(server): gate the WebSocket upgrade like every other entry point (#317)
Frozen666 committed
M
fix(account-manager): never refresh a third-party backend's token against Anthropic
Mark Karpeles committed
M
fix(backend-quota): strip the currency string and bound the balance read
Mark Karpeles committed
D
chore(ci): bump actions/setup-node from 6.5.0 to 7.0.0 (#313)
dependabot[bot] committed
D
chore(ci): bump actions/checkout from 6.1.0 to 7.0.1 (#312)
dependabot[bot] committed
M
fix(mitm): route a tunnelled WebSocket Upgrade by its Host header
Mark Karpeles committed
M
fix(alias): escape quotes in the embedded path and write the rc file atomically
Mark Karpeles committed
M
fix(service): quote systemd unit values and refuse control characters
Mark Karpeles committed
M
fix(updater): validate the registry version and never auto-update as root
Mark Karpeles committed
M
fix(env): shell-quote the CA path and refuse a non-port proxy.port
Mark Karpeles committed
M
fix(cli): save account changes onto a fresh read of the config
Mark Karpeles committed
M
fix(cli): cap the quota probe interval at seven days
Mark Karpeles committed
M
fix(server): pair a refreshed token to its config row by entry id only
Mark Karpeles committed
M
fix(oauth): check token-endpoint fields before storing them
Mark Karpeles committed
M
fix(oauth): open the login URL on Windows with an empty `start` title
Mark Karpeles committed
M
fix(oauth): loopback-only login callback, and only a state-bearing request may settle it
Mark Karpeles committed
M
fix(sx): require https for the SX_API_BASE override
Mark Karpeles committed
M
fix(upstream-proxy): reject https:// proxy URLs instead of speaking plaintext
Mark Karpeles committed
M
fix(mitm): redact an unrecognized CONNECT username in the log
Mark Karpeles committed
M
fix(mitm): bound TLS handshakes on terminated and tunnelled connections
Mark Karpeles committed
M
fix(mitm): renew a stored certificate chain before it expires
Mark Karpeles committed
M
fix(mitm): parse the CONNECT authority strictly
Mark Karpeles committed
M
fix(mitm): refuse tunnel and HTTP-relay targets on this machine
Mark Karpeles committed