From 8863f1132a1fb4f6c62a3238f7de8c5aa28940d1 Mon Sep 17 00:00:00 2001 From: Waleed Date: Sat, 25 Apr 2026 19:13:29 -0700 Subject: [PATCH 1/3] feat(models): add gpt-5.5 models (#4300) * feat(models): add gpt-5.5 models * fix(models): address gpt-5.5 review feedback * fix(models): align gpt-5.5 pro controls --- apps/sim/providers/models.ts | 44 +++++++++++++++++++++++++++++++++++- 1 file changed, 43 insertions(+), 1 deletion(-) diff --git a/apps/sim/providers/models.ts b/apps/sim/providers/models.ts index c03fb5e299..05f50e9aee 100644 --- a/apps/sim/providers/models.ts +++ b/apps/sim/providers/models.ts @@ -183,6 +183,49 @@ export const PROVIDER_DEFINITIONS: Record = { contextWindow: 1047576, releaseDate: '2025-04-14', }, + // GPT-5.5 family + { + id: 'gpt-5.5-pro', + pricing: { + input: 30.0, + output: 180.0, + updatedAt: '2026-04-23', + }, + capabilities: { + nativeStructuredOutputs: true, + reasoningEffort: { + values: ['none', 'low', 'medium', 'high', 'xhigh'], + }, + verbosity: { + values: ['low', 'medium', 'high'], + }, + maxOutputTokens: 128000, + }, + contextWindow: 1050000, + releaseDate: '2026-04-23', + }, + { + id: 'gpt-5.5', + pricing: { + input: 5.0, + cachedInput: 0.5, + output: 30.0, + updatedAt: '2026-04-23', + }, + capabilities: { + nativeStructuredOutputs: true, + reasoningEffort: { + values: ['none', 'low', 'medium', 'high', 'xhigh'], + }, + verbosity: { + values: ['low', 'medium', 'high'], + }, + maxOutputTokens: 128000, + }, + contextWindow: 1050000, + releaseDate: '2026-04-23', + recommended: true, + }, // GPT-5.4 family { id: 'gpt-5.4-pro', @@ -219,7 +262,6 @@ export const PROVIDER_DEFINITIONS: Record = { }, contextWindow: 1050000, releaseDate: '2026-03-05', - recommended: true, }, { id: 'gpt-5.4-mini', From 60652e621c158b082bc64a120b2e877698a5eb81 Mon Sep 17 00:00:00 2001 From: Waleed Date: Sun, 26 Apr 2026 20:52:42 -0700 Subject: [PATCH 2/3] fix(security): credential-set invite email check + shopify authorize XSS (#4302) --- apps/sim/app/api/auth/shopify/authorize/route.ts | 6 ++++-- .../api/credential-sets/invite/[token]/route.ts | 16 ++++++++++++++++ 2 files changed, 20 insertions(+), 2 deletions(-) diff --git a/apps/sim/app/api/auth/shopify/authorize/route.ts b/apps/sim/app/api/auth/shopify/authorize/route.ts index de8ce76b6f..c32dd31352 100644 --- a/apps/sim/app/api/auth/shopify/authorize/route.ts +++ b/apps/sim/app/api/auth/shopify/authorize/route.ts @@ -32,7 +32,9 @@ export const GET = withRouteHandler(async (request: NextRequest) => { const returnUrl = request.nextUrl.searchParams.get('returnUrl') if (!shopDomain) { - const returnUrlParam = returnUrl ? encodeURIComponent(returnUrl) : '' + const safeReturnUrl = + returnUrl && isSameOrigin(returnUrl) ? encodeURIComponent(returnUrl) : '' + const returnUrlJsLiteral = JSON.stringify(safeReturnUrl) return new NextResponse( ` @@ -120,7 +122,7 @@ export const GET = withRouteHandler(async (request: NextRequest) => {