tanzhenxin
6081052236
Merge pull request #1592 from QwenLM/feat/extension-improvements
...
feat(extensions): add plugin selection UI for Claude marketplace
2026-01-26 10:36:36 +08:00
LaZzyMan
f640705e4d
fix typo error
2026-01-26 10:00:33 +08:00
pomelo-nwu
e615438e89
security: fix awk/sed command injection in READ_ONLY_ROOT_COMMANDS
...
- Add detection for awk system() calls and file operations
- Add detection for sed execute/write/read commands
- Prevent execution of arbitrary commands via awk 'BEGIN {system("...")}'
- Prevent file operations via awk '{print > "file"}' and sed 'w file'
- Add comprehensive test coverage for security fixes
Fixes security vulnerability where awk and sed side-effects were not
properly detected, allowing arbitrary command execution without user
confirmation.
Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
2026-01-25 09:13:19 +08:00
LaZzyMan
63e24301f8
fix copy error
2026-01-23 16:41:23 +08:00
LaZzyMan
9af9ea259d
feat: add select ui for claude marketplace
2026-01-23 16:23:30 +08:00
Mingholy
829ba9c431
Merge pull request #1516 from QwenLM/mingholy/fix/runtime-timeout
...
Qwen Code CI / Lint (push) Has been cancelled
Qwen Code CI / CodeQL (push) Has been cancelled
E2E Tests / E2E Test (Linux) - sandbox:docker (push) Has been cancelled
E2E Tests / E2E Test (Linux) - sandbox:none (push) Has been cancelled
E2E Tests / E2E Test - macOS (push) Has been cancelled
Qwen Code CI / Test (push) Has been cancelled
Qwen Code CI / Test-1 (push) Has been cancelled
Qwen Code CI / Test-2 (push) Has been cancelled
Qwen Code CI / Test-3 (push) Has been cancelled
Qwen Code CI / Test-4 (push) Has been cancelled
Qwen Code CI / Test-5 (push) Has been cancelled
Qwen Code CI / Test-6 (push) Has been cancelled
Qwen Code CI / Test-7 (push) Has been cancelled
Qwen Code CI / Test-8 (push) Has been cancelled
Qwen Code CI / Post Coverage Comment (push) Has been cancelled
feat: add runtime-aware fetch options for Anthropic and OpenAI providers
2026-01-23 14:27:50 +08:00
LaZzyMan
674bb6386e
feat(extensions): add detail command and improve extension validation
...
- Add /extensions detail command to show extension details
- Allow underscores and dots in extension names
- Fix contextFileName empty array handling to use default QWEN.md
- Fix marketplace extension clone to use correct source URL
- Add inline parameter to extensionToOutputString
- Add comprehensive tests for all changes
2026-01-22 19:37:01 +08:00
LaZzyMan
3b6849be94
fix prompts denpendence
2026-01-22 15:48:54 +08:00
LaZzyMan
c0d78a8f3c
fix github pkg dependence
2026-01-22 15:14:55 +08:00
LaZzyMan
aa80e738fb
fix dependences of core pkg
2026-01-22 14:09:08 +08:00
LaZzyMan
bc7e586028
Merge branch 'main' into feat/extension
2026-01-22 11:41:04 +08:00
tanzhenxin
21b26a400a
Merge pull request #1563 from QwenLM/fix/issue-1549-skip-enoent-import
...
Qwen Code CI / Lint (push) Waiting to run
Qwen Code CI / Test (push) Blocked by required conditions
Qwen Code CI / Test-1 (push) Blocked by required conditions
Qwen Code CI / Test-2 (push) Blocked by required conditions
Qwen Code CI / Test-3 (push) Blocked by required conditions
Qwen Code CI / Test-4 (push) Blocked by required conditions
Qwen Code CI / Test-5 (push) Blocked by required conditions
Qwen Code CI / Test-6 (push) Blocked by required conditions
Qwen Code CI / Test-7 (push) Blocked by required conditions
Qwen Code CI / Test-8 (push) Blocked by required conditions
Qwen Code CI / Post Coverage Comment (push) Blocked by required conditions
Qwen Code CI / CodeQL (push) Waiting to run
E2E Tests / E2E Test (Linux) - sandbox:docker (push) Waiting to run
E2E Tests / E2E Test (Linux) - sandbox:none (push) Waiting to run
E2E Tests / E2E Test - macOS (push) Waiting to run
fix: skip non-existent file imports instead of warning (ENOENT)
2026-01-21 20:11:00 +08:00
tanzhenxin
ae9ba8be18
Merge pull request #1513 from QwenLM/feat/cli-welcome-screen
...
feat: Redesign CLI welcome screen and settings dialog
2026-01-21 19:43:46 +08:00
tanzhenxin
1f5206cd54
Merge pull request #1526 from QwenLM/chore/no-tiktoken
...
chore: remove tiktoken dependency and use API-reported token counts
2026-01-21 19:37:42 +08:00
Mingholy
19bbd22109
Merge pull request #1556 from QwenLM/chore/bump-version-0.8.0
...
chore(release): bump version to 0.8.0
2026-01-21 18:21:37 +08:00
DennisYu07
fb3a95e874
Merge pull request #1234 from afarber/1115-fix-dep0190-deprecation
...
fix: replace spawn shell option with explicit shell args to avoid Node.js DEP0190 warning
2026-01-21 01:54:37 -08:00
LaZzyMan
1562780393
fix: skip non-existent file imports instead of warning (ENOENT)
2026-01-21 14:13:20 +08:00
LaZzyMan
1e41965a7e
fix settings in interactive mode
2026-01-21 11:29:48 +08:00
LaZzyMan
140e8c926d
Merge branch 'main' into feat/extension
2026-01-21 10:11:59 +08:00
LaZzyMan
f467054372
feat: remove excludeTools in extension
2026-01-20 17:50:18 +08:00
tanzhenxin
7d9917b2c9
chore(release): bump version to 0.8.0
2026-01-20 17:39:43 +08:00
LaZzyMan
ba14e9e531
add settings command and update extension examples
2026-01-20 16:43:04 +08:00
Mingholy
6eb16c0bcf
Merge pull request #1548 from QwenLM/mingholy/fix/qwen-oauth-model-info
...
Qwen Code CI / Lint (push) Waiting to run
Qwen Code CI / Test (push) Blocked by required conditions
Qwen Code CI / Test-1 (push) Blocked by required conditions
Qwen Code CI / Test-2 (push) Blocked by required conditions
Qwen Code CI / Test-3 (push) Blocked by required conditions
Qwen Code CI / Test-4 (push) Blocked by required conditions
Qwen Code CI / Test-5 (push) Blocked by required conditions
Qwen Code CI / Test-6 (push) Blocked by required conditions
Qwen Code CI / Test-7 (push) Blocked by required conditions
Qwen Code CI / Test-8 (push) Blocked by required conditions
Qwen Code CI / Post Coverage Comment (push) Blocked by required conditions
Qwen Code CI / CodeQL (push) Waiting to run
E2E Tests / E2E Test (Linux) - sandbox:docker (push) Waiting to run
E2E Tests / E2E Test (Linux) - sandbox:none (push) Waiting to run
E2E Tests / E2E Test - macOS (push) Waiting to run
Fix: Update Qwen OAuth model information
2026-01-20 16:16:30 +08:00
mingholy.lmh
03f12bfa3f
fix: update qwen-oauth models info
2026-01-20 15:11:11 +08:00
LaZzyMan
452bbc1939
fix test online
2026-01-20 14:50:57 +08:00
LaZzyMan
2e80f7ffbc
fix config test
2026-01-20 14:35:52 +08:00
LaZzyMan
b0c3e5d884
fix ci test
2026-01-20 11:59:14 +08:00
LaZzyMan
143beb51ed
fix code merge
2026-01-19 21:27:31 +08:00
LaZzyMan
a61a3c5680
Merge branch 'main' into feat/extension
2026-01-19 21:16:07 +08:00
tanzhenxin
046559408b
Merge branch 'main' into feat/cli-welcome-screen
2026-01-19 20:28:48 +08:00
tanzhenxin
de47c4e98b
Merge pull request #1465 from QwenLM/feat/add-user-feedback-dialog
...
Qwen Code CI / Lint (push) Waiting to run
Qwen Code CI / Test (push) Blocked by required conditions
Qwen Code CI / Test-1 (push) Blocked by required conditions
Qwen Code CI / Test-2 (push) Blocked by required conditions
Qwen Code CI / Test-3 (push) Blocked by required conditions
Qwen Code CI / Test-4 (push) Blocked by required conditions
Qwen Code CI / Test-5 (push) Blocked by required conditions
Qwen Code CI / Test-6 (push) Blocked by required conditions
Qwen Code CI / Test-7 (push) Blocked by required conditions
Qwen Code CI / Test-8 (push) Blocked by required conditions
Qwen Code CI / Post Coverage Comment (push) Blocked by required conditions
Qwen Code CI / CodeQL (push) Waiting to run
E2E Tests / E2E Test (Linux) - sandbox:docker (push) Waiting to run
E2E Tests / E2E Test (Linux) - sandbox:none (push) Waiting to run
E2E Tests / E2E Test - macOS (push) Waiting to run
feat: add user feedback dialog
2026-01-19 19:26:20 +08:00
Mingholy
8de81b6299
Merge pull request #1510 from QwenLM/mingholy/fix/merge-settings-generationConfig
...
Fix credential management and authentication flows with improved generation config preservation
2026-01-19 19:01:56 +08:00
mingholy.lmh
b13c5bf090
feat: implement getAllAvailableModels method and add corresponding unit tests
2026-01-19 17:47:41 +08:00
LaZzyMan
6e641b8def
feat: add docs
2026-01-19 14:51:49 +08:00
tanzhenxin
ec2aa6d86d
Merge pull request #1486 from BlockHand/two-qwen-md
...
feat: Improve QWEN. md file loading by filtering system files and limiting scope
2026-01-19 14:27:15 +08:00
tanzhenxin
66ad936c31
fix: use configured memory filenames for file count instead of hard-coded exclusion
2026-01-19 14:14:16 +08:00
tanzhenxin
8b5f198e3c
chore: clean up orphaned bfsFileSearch code and discoveryMaxDirs setting
2026-01-19 14:10:42 +08:00
DragonnZhang
e8356c5f9e
feat: Add lastShownTimestamp to settings schema and update feedback dialog logic
2026-01-19 13:46:07 +08:00
刘伟光
79cce84280
feat: Optimize the code and delete unnecessary parameters. Be compatible with correlation functions and configurations, as well as optimize test cases
2026-01-19 11:54:28 +08:00
mingholy.lmh
4a0e55530b
test: mock runtime fetch options in DashScope and Default OpenAI providers
2026-01-19 11:37:10 +08:00
tanzhenxin
bd314cb7b2
Merge branch 'main' into feat/cli-welcome-screen
2026-01-19 11:32:54 +08:00
LaZzyMan
706cdb2ac1
fix: merge skillManager change
2026-01-19 10:12:47 +08:00
LaZzyMan
df33029589
Merge branch 'main' into feat/extension
2026-01-19 10:11:05 +08:00
liqoingyu
531062aeaf
fix(core): parse skills frontmatter with CRLF/BOM
2026-01-18 17:11:41 +08:00
tanzhenxin
d5683886c6
fix: suppress error logging for user-cancelled requests ( #1182 )
2026-01-18 14:45:50 +08:00
tanzhenxin
c14ddab6fe
refactor(compression): use API usageMetadata for token counting instead of local tokenizer
2026-01-18 12:45:24 +08:00
tanzhenxin
35c865968f
chore: remove tiktoken dependency and replace with character-based token estimation
2026-01-17 22:39:18 +08:00
Alexander Farber
fa8b5a7762
Replace the not functional CodeQL comments
2026-01-17 14:29:43 +01:00
Alexander Farber
9adad2f369
Fix 1 test and silence CodeQL warning (not introduced by this PR)
2026-01-17 14:29:42 +01:00
Alexander Farber
a8ccd7b6fb
Replace spawn shell option with explicit shell args to avoid DEP0190 warning
2026-01-17 14:29:42 +01:00
