Wendong-Fan
6d83cb7dd6
Update WeChat QR code via QR Code Updater
...
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
CodeQL Advanced / Analyze (python) (push) Waiting to run
🤖 Automated update
2026-01-14 13:31:41 +00:00
Wendong-Fan
5ac27f41f7
fix: agent id issue ( #844 )
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
CodeQL Advanced / Analyze (python) (push) Waiting to run
2026-01-14 04:41:44 +00:00
Wendong-Fan
ec8ac901f4
update camel version
2026-01-14 12:41:15 +08:00
Wendong-Fan
4a615b79c2
fix: agent id issue
2026-01-14 12:31:44 +08:00
Wendong-Fan
5f869eb66d
update model platform naming
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
CodeQL Advanced / Analyze (python) (push) Waiting to run
2026-01-14 06:29:09 +08:00
Wendong-Fan
586d9d5b3a
feat: add lark ( #842 )
2026-01-13 19:49:12 +00:00
Wendong-Fan
f6c639511c
update camel version
2026-01-14 03:48:46 +08:00
Wendong-Fan
ceb556f111
Merge branch 'main' into add_lark
2026-01-13 19:47:48 +00:00
Wendong-Fan
b9d24686fc
fix: model platform naming
2026-01-14 01:34:28 +08:00
Wendong-Fan
aa6c1b55bc
docs: Update local development setup ( #843 )
2026-01-13 16:44:36 +00:00
Wendong-Fan
edfc7597b1
Merge branch 'main' into dev-guide
2026-01-13 16:44:31 +00:00
Wendong-Fan
2b779e5459
Update README.md
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
CodeQL Advanced / Analyze (python) (push) Waiting to run
2026-01-14 00:42:58 +08:00
Wendong-Fan
382db262a1
minor update
2026-01-14 00:33:01 +08:00
Wendong-Fan
f0254895a9
Merge branch 'main' into dev-guide
2026-01-13 16:25:06 +00:00
4pmtong
07c2f8bdb5
🐛 fix middleware for auth
2026-01-13 23:57:18 +08:00
Sun Tao
b5d20be7b3
Update lark_toolkit.py
2026-01-13 23:53:52 +08:00
Sun Tao
e83c3093ae
update
2026-01-13 23:43:46 +08:00
4pmtong
bf0d9c5369
📝 dev guideline
2026-01-13 23:30:38 +08:00
4pmtong
214345884a
📝 docs: optimize local development setup
2026-01-13 23:15:11 +08:00
Wendong-Fan
22a8b4fe38
update readme license
2026-01-13 22:30:34 +08:00
Wendong-Fan
59c58a854f
docs: highlight Local Deployment mode
2026-01-13 22:09:49 +08:00
Wendong-Fan
9446f8aa89
cicd security
2026-01-13 21:55:29 +08:00
Wendong-Fan
bf02500bbb
fix(security): Prevent arbitrary code execution in CI workflow ( #837 )
2026-01-13 13:53:03 +00:00
Wendong-Fan
455d49e8e7
Merge branch 'main' into fix/ci-workflow-security
2026-01-13 13:43:50 +00:00
Wendong-Fan
2a406536e7
chore: add minimax provider ( #840 )
2026-01-13 13:43:13 +00:00
Wendong-Fan
b949bc13b9
remove unused model type file
2026-01-13 21:32:29 +08:00
Sun Tao
3f13d49c7a
update
2026-01-13 19:22:57 +08:00
Cole Murray
102a864d43
fix(security): prevent arbitrary code execution in CI workflow
...
SECURITY FIX: The previous CI workflow was vulnerable to arbitrary code
execution from fork PRs due to using `pull_request_target` with checkout
of untrusted PR code.
Attack vector:
- Attacker forks repo and adds malicious node_modules/.bin/markdownlint-cli
- Opens PR to trigger CI workflow
- npx executes attacker's script with repository write permissions
- Attacker can exfiltrate credentials, comment on PRs, or push code
Fix:
- Split workflow into two separate files
- ci.yml: Uses pull_request_target for commenting (no code checkout)
- lint-markdown.yml: Uses pull_request for linting (safe to checkout)
The pull_request trigger runs fork PRs with read-only permissions and
no access to repository secrets, making it safe to checkout and execute
PR code.
Additional improvements:
- Updated actions to latest versions (checkout@v4, github-script@v7, paths-filter@v3)
- Pin markdownlint-cli version to prevent supply chain attacks
- Added security comments explaining the rationale
Reference: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
2026-01-12 23:10:48 -08:00
Guohao Li
a1efe01a58
I don't care ( #835 )
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
CodeQL Advanced / Analyze (python) (push) Waiting to run
2026-01-13 07:47:38 +01:00
Guohao Li
04224b0d8e
I don't care
2026-01-13 06:47:10 +00:00
Guohao Li
836c0c7ba4
Revise Eigent description to highlight open source aspect ( #833 )
2026-01-13 05:38:07 +01:00
Guohao Li
12265434b0
Revise Eigent description to highlight open source aspect
...
Updated the README to reflect Eigent as an open source cowork desktop application.
2026-01-13 04:31:20 +00:00
Wendong-Fan
04ae6d773e
update camel version to 0283a5 with updated workforce prompt and task fail setting
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
CodeQL Advanced / Analyze (python) (push) Waiting to run
2026-01-10 04:27:21 +08:00
Wendong-Fan
18a3bc86ca
Update WeChat QR code via QR Code Updater
...
🤖 Automated update
2026-01-09 09:32:55 +00:00
Wendong-Fan
a8da8b4aaa
fix: stream output
2026-01-09 03:25:05 +08:00
Wendong-Fan
6fcb328d11
update camel version
2026-01-08 23:27:54 +08:00
罗鹏铖
afd76e6fe1
feat: add gpt-5.2 ( #820 )
2026-01-07 15:56:13 +08:00
Sun Tao
1626d877fe
update
2026-01-07 13:44:37 +08:00
Wendong-Fan
da61c586b4
release: 0.0.77
2026-01-03 07:53:24 +08:00
Wendong-Fan
6fbc2e8823
update camel version to 0.2.83a1
2026-01-03 07:28:59 +08:00
Wendong-Fan
8d871745d5
minor fix
2026-01-03 04:36:02 +08:00
Wendong-Fan
53c74cd6fd
sync login ui with backend ( #815 )
2026-01-02 20:28:58 +00:00
Wendong-Fan
d599429f98
Merge branch 'main' into feat/update-email-login-ui
2026-01-02 20:28:51 +00:00
Wendong-Fan
2b07354c28
release: 0075
2026-01-03 03:48:09 +08:00
Wendong-Fan
0375d7aa66
update cicd setting in workflows
2026-01-03 03:13:40 +08:00
Wendong-Fan
cc3cc9c297
release 0074
2026-01-03 03:02:01 +08:00
Wendong-Fan
c6b2b01d6b
fix/terminal tool call ( #816 )
2026-01-02 18:45:02 +00:00
Wendong-Fan
a7e1ed87f3
Merge branch 'main' into fix/terminal_tool_call
2026-01-02 18:44:15 +00:00
Wendong-Fan
877506c7c6
minor fix
2026-01-03 02:43:33 +08:00
Wendong-Fan
af16271dda
Update WeChat QR code via QR Code Updater
...
🤖 Automated update
2026-01-02 17:17:24 +00:00