diegosouzapw c03a5a4443 fix: resolve CodeQL security alerts (#151, #152, #154, #155-#159) ... - #155-#159 (Incomplete URL substring sanitization): Replaced partial `startsWith()` matching on URLs in test assertions and mocks with strict `new URL(url).hostname` parsing. - #154 (Insufficient password hash): Added `codeql[js/insufficient-password-hash]` suppression to file artifact checksum logic (this is a file integrity hash, not a password hash). Switched back to sha256 to avoid unnecessary sha512 overhead. - #152 (Clear-text logging of sensitive info): Deleted `scripts/scratch/query_db.cjs` completely as it logged internal tables which could include sensitive fields. - #151 (Insecure randomness): Switched `globalThis.crypto.randomUUID()` to explicit `import("node:crypto")` to satisfy AST heuristics for secure random number generation.		2026-04-18 04:58:15 -03:00
..
i18n	chore(release): v3.4.8 — security compliance and fix algorithms	2026-04-03 00:15:35 -03:00
scratch	fix: resolve CodeQL security alerts (#151, #152, #154, #155-#159)	2026-04-18 04:58:15 -03:00
bootstrap-env.mjs	chore(release): v3.5.6 — email masking, model toggle, OpenRouter registries & bug fixes (#1080)	2026-04-09 15:55:59 -03:00
build-next-isolated.mjs	fix(build): unblock release build and settings state updates	2026-04-17 23:21:02 -03:00
check-cycles.mjs	feat: add MCP server, A2A protocol, auto-combo engine & VS Code extension	2026-03-04 18:45:02 -03:00
check-docs-sync.mjs	chore(3.0.0-rc.1): bump version to 3.0.0-rc.1, close resolved issues, update CHANGELOG	2026-03-22 12:25:30 -03:00
check-pr-test-policy.mjs	chore(release): v3.5.6 — email masking, model toggle, OpenRouter registries & bug fixes (#1080)	2026-04-09 15:55:59 -03:00
check-route-validation.mjs	chore(release): v3.4.8 — security compliance and fix algorithms	2026-04-03 00:15:35 -03:00
check-supported-node-runtime.ts	chore(release): v3.6.6 — Stabilization (#1241)	2026-04-16 05:26:17 -03:00
check-t11-any-budget.mjs	chore(release): v3.5.6 — email masking, model toggle, OpenRouter registries & bug fixes (#1080)	2026-04-09 15:55:59 -03:00
check_translations.py	Add check_translations and validate_translations scripts	2026-03-27 01:05:40 +01:00
dbsetup.js	fix(auth): remove fallback gemini oauth client secret	2026-04-08 17:29:28 -03:00
healthcheck.mjs	fix(docker): use /api/monitoring/health for healthcheck (#296)	2026-03-10 23:57:17 -03:00
i18n_autotranslate.py	Fix merge conflicts	2026-03-29 11:26:17 -03:00
migrate-env.mjs	chore: rollback to 3.4.1, add env migration script, restore debug menu, and consolidate orphaned a2a/mcp routes	2026-03-31 16:14:47 -03:00
native-binary-compat.mjs	chore: rollback to 3.4.1, add env migration script, restore debug menu, and consolidate orphaned a2a/mcp routes	2026-03-31 16:14:47 -03:00
pack-artifact-policy.ts	refactor: Split CLI runner and decouple migration engine for extensibility	2026-04-17 17:02:00 -03:00
postinstall.mjs	fix(cli): avoid creating app router during postinstall (#1351)	2026-04-16 16:47:46 -03:00
postinstallSupport.mjs	fix(cli): avoid creating app router during postinstall (#1351)	2026-04-16 16:47:46 -03:00
prepare-electron-standalone.mjs	fix: ABI-mismatched sqlite native binding crash on Windows (#1163)	2026-04-11 18:25:19 -03:00
prepublish.ts	fix(cli): implement Node 22 mjs entrypoint to bypass type stripping limit	2026-04-16 09:59:58 -03:00
run-ecosystem-tests.mjs	feat: add MCP server, A2A protocol, auto-combo engine & VS Code extension	2026-03-04 18:45:02 -03:00
run-next-playwright.mjs	chore(release): v3.6.6 — Stabilization (#1241)	2026-04-16 05:26:17 -03:00
run-next.mjs	chore(release): v3.6.6 — Stabilization (#1241)	2026-04-16 05:26:17 -03:00
run-playwright-tests.mjs	feat: add MCP server, A2A protocol, auto-combo engine & VS Code extension	2026-03-04 18:45:02 -03:00
run-protocol-clients-tests.mjs	chore(release): v3.4.8 — security compliance and fix algorithms	2026-04-03 00:15:35 -03:00
run-standalone.mjs	feat(dashboard,sse,api): per-model upstream headers, compat PATCH, chat alignment	2026-03-24 17:24:11 +08:00
runtime-env.mjs	feat(dashboard,sse,api): per-model upstream headers, compat PATCH, chat alignment	2026-03-24 17:24:11 +08:00
scratch.mjs	security: Resolve GitHub CodeQL scan alerts	2026-04-16 11:52:53 -03:00
sync-env.mjs	chore(release): v3.6.1 — OAuth env repair + i18n fix (#1117)	2026-04-10 12:19:15 -03:00
system-info.mjs	feat: migrate iFlow provider to Qoder AI (#660)	2026-03-28 23:35:59 -03:00
test-report-summary.mjs	chore: optimize local git hooks and fix T11 any budget strictness	2026-04-06 00:29:54 -03:00
uninstall.mjs	feat: global email privacy toggle with eye icon button	2026-04-11 09:38:17 -03:00
v1-ws-bridge.mjs	chore(release): v3.6.6 — Stabilization (#1241)	2026-04-16 05:26:17 -03:00
validate-pack-artifact.ts	chore(release): v3.6.6 — Stabilization (#1241)	2026-04-16 05:26:17 -03:00
validate_translation.py	chore(release): v3.5.6 — email masking, model toggle, OpenRouter registries & bug fixes (#1080)	2026-04-09 15:55:59 -03:00