Mariano 71f357d949 bluebubbles: harden local media path handling against LFI (#16322) ...

* bluebubbles: harden local media path handling

* bluebubbles: remove racy post-open symlink lstat

* fix: bluebubbles mediaLocalRoots docs + typing fix (#16322) (thanks @mbelinky)

2026-02-14 17:43:44 +00:00

..

bluebubbles

bluebubbles: harden local media path handling against LFI (#16322)

2026-02-14 17:43:44 +00:00

copilot-proxy

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

device-pair

TypeScript: add extensions to tsconfig and fix type errors (#12781)

2026-02-09 10:05:38 -08:00

diagnostics-otel

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

discord

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

feishu

fix: harden Feishu media URL fetching (#16285) (thanks @mbelinky)

2026-02-14 16:42:35 +01:00

google-antigravity-auth

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

google-gemini-cli-auth

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

googlechat

fix(googlechat): reject ambiguous webhook routing

2026-02-14 17:11:55 +01:00

imessage

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

irc

perf(test): avoid plugin-sdk barrel imports

2026-02-14 12:42:19 +00:00

line

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

llm-task

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

lobster

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

matrix

perf(test): avoid plugin-sdk barrel imports

2026-02-14 12:42:19 +00:00

mattermost

perf(test): avoid plugin-sdk barrel imports

2026-02-14 12:42:19 +00:00

memory-core

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

memory-lancedb

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

minimax-portal-auth

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

msteams

fix(security): enforce bounded webhook body handling

2026-02-13 19:14:54 +01:00

nextcloud-talk

perf(test): avoid plugin-sdk barrel imports

2026-02-14 12:42:19 +00:00

nostr

fix(nostr): guard profile mutations

2026-02-14 16:51:04 +01:00

open-prose

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

phone-control

TypeScript: add extensions to tsconfig and fix type errors (#12781)

2026-02-09 10:05:38 -08:00

qwen-portal-auth

TypeScript: add extensions to tsconfig and fix type errors (#12781)

2026-02-09 10:05:38 -08:00

signal

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

slack

refactor(reply): clarify explicit reply tags in off mode (#16189)

2026-02-14 14:15:37 +01:00

talk-voice

Gateway/Plugins: device pairing + phone control plugins (#11755)

2026-02-08 18:07:13 +01:00

telegram

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

thread-ownership

feat(slack): land thread-ownership from @DarlingtonDeveloper (#15775)

2026-02-13 23:37:05 +00:00

tlon

fix(security): harden tlon Urbit requests against SSRF

2026-02-14 18:42:10 +01:00

twitch

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

voice-call

fix(voice-call): fail closed when Telnyx webhook public key missing

2026-02-14 18:17:20 +01:00

whatsapp

fix(ci): sync extension versions to root release (#15199)

2026-02-13 05:54:03 +01:00

zalo

fix(security): reject ambiguous webhook target matches

2026-02-14 17:28:28 +01:00

zalouser

perf(test): avoid plugin-sdk barrel imports

2026-02-14 12:42:19 +00:00