cc
45d3f735a9
Merge pull request #627 from hicccc77/dependabot/npm_and_yarn/dev/sherpa-onnx-node-1.12.35
...
chore(deps): bump sherpa-onnx-node from 1.12.34 to 1.12.35
2026-04-07 19:46:35 +08:00
cc
0734b64cc8
Merge pull request #628 from hicccc77/dependabot/npm_and_yarn/dev/sass-1.99.0
...
chore(deps-dev): bump sass from 1.98.0 to 1.99.0
2026-04-07 19:46:22 +08:00
xuncha
9181490d0f
Merge pull request #662 from chrocy/fix-export-excel-columns
...
feat: 新增 Excel 导出完整列开关
2026-04-07 19:33:14 +08:00
xuncha
01fc5cd1a0
导出在选择完整列的时候私聊不会有群昵称
2026-04-07 19:29:35 +08:00
xuncha
b12ffff310
Merge branch 'dev' into fix-export-excel-columns
2026-04-07 19:16:41 +08:00
xuncha
835359edf8
Merge branch 'main' into fix-export-excel-columns
2026-04-07 19:16:14 +08:00
xuncha
88817cf95e
Merge pull request #664 from xunchahaha/dev
...
修复导出页意外的横向滑动条 朋友圈导出新增多选
2026-04-07 19:15:04 +08:00
xuncha
88d41f6857
修复导出页意外的横向滑动条
2026-04-07 19:09:16 +08:00
xuncha
ec9c1bbbba
朋友圈导出页新增多选功能
2026-04-07 19:09:01 +08:00
chrocy
f9313392f1
feat: 优化 Excel 导出设置,解决 #529,将「导出完整列」选项合并到「发送者名称显示」中
2026-04-07 16:44:59 +08:00
xuncha
2db8af3668
Merge pull request #650 from huanghe/fix/http-api-security
...
fix(security): harden HTTP API service against multiple vulnerabilities
2026-04-07 15:39:01 +08:00
xuncha
c56ba6e0a1
Merge branch 'dev' into fix/http-api-security
2026-04-07 15:35:46 +08:00
H3CoF6
e8aaae5616
Merge pull request #656 from H3CoF6/main
...
delete wayland notice
2026-04-07 03:44:19 +08:00
H3CoF6
45deb99e3d
delete wayland notice
2026-04-07 03:37:11 +08:00
dependabot[bot]
28f6f966b9
chore(deps): bump sherpa-onnx-node from 1.12.34 to 1.12.35
...
Bumps [sherpa-onnx-node](https://github.com/csukuangfj/sherpa-onnx ) from 1.12.34 to 1.12.35.
- [Release notes](https://github.com/csukuangfj/sherpa-onnx/releases )
- [Changelog](https://github.com/csukuangfj/sherpa-onnx/blob/dart-v1.12.35/CHANGELOG.md )
- [Commits](https://github.com/csukuangfj/sherpa-onnx/compare/dart-v1.12.34...dart-v1.12.35 )
---
updated-dependencies:
- dependency-name: sherpa-onnx-node
dependency-version: 1.12.35
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 19:12:13 +00:00
dependabot[bot]
056f2c1833
chore(deps-dev): bump sass from 1.98.0 to 1.99.0
...
Bumps [sass](https://github.com/sass/dart-sass ) from 1.98.0 to 1.99.0.
- [Release notes](https://github.com/sass/dart-sass/releases )
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sass/dart-sass/compare/1.98.0...1.99.0 )
---
updated-dependencies:
- dependency-name: sass
dependency-version: 1.99.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 19:12:10 +00:00
H3CoF6
b821d370f9
Merge pull request #655 from FATFATHAO/feat/linux-notification
...
[#654 ] fix: 更改linux中的消息通知走D-bus总线
2026-04-07 03:10:50 +08:00
fatfathao
60248b28f8
fix: 更改linux中的消息通知走D-bus总线
2026-04-07 01:30:26 +08:00
cc
d128bedffa
新增资源管理并修复了朋友圈的资源缓存路径
nightly-dev
2026-04-06 23:32:59 +08:00
Ocean
f7f6252d0b
Merge branch 'main' into fix/http-api-security
2026-04-06 14:11:17 +08:00
huanghe
62395b275d
fix(security): harden HTTP API service against multiple vulnerabilities
...
1. Path traversal in /api/v1/media/ — use path.resolve() and verify
resolved path stays within media base directory
2. DoS via unlimited POST body — add 10MB size limit to parseBody()
3. Default no-auth — reject all requests when httpApiToken is not
configured instead of silently allowing everything
4. Overly permissive CORS — restrict Access-Control-Allow-Origin from
wildcard (*) to localhost/127.0.0.1 only
5. Timing attack on token comparison — use crypto.timingSafeEqual()
instead of === for token verification
6. Unsafe default bind address — revert httpApiHost default from
0.0.0.0 back to 127.0.0.1 to prevent network exposure
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-06 14:06:31 +08:00
cc
57fad47f27
Merge pull request #649 from hicccc77/dev
...
Dev
2026-04-06 13:45:04 +08:00
cc
20c5381211
更新
2026-04-06 13:23:16 +08:00
cc
4335abe31b
更新
2026-04-06 13:08:32 +08:00
cc
e5f7b54a7b
Merge pull request #648 from hicccc77/main
...
Merge pull request #647 from hicccc77/dev
2026-04-06 13:06:33 +08:00
cc
ea1ef03b98
Merge pull request #647 from hicccc77/dev
...
Dev
2026-04-06 13:06:10 +08:00
cc
8d374d4f49
Merge branch 'main' into dev
2026-04-06 13:06:02 +08:00
cc
f910e17e53
Merge pull request #644 from fortii2/fix/export-worker-config
...
#580 修复与部分引用功能相关联的无法读取解密配置的问题
2026-04-06 13:04:13 +08:00
cc
35a76aa04f
Merge pull request #643 from fortii2/issue-580-partial-quote
...
#580 引用消息支持部分引用显示和导出
2026-04-06 12:58:57 +08:00
cc
5fce21d799
Merge pull request #641 from FATFATHAO/fix-package
...
fix: node25使用pnpm拉取文件时,ajv导致拉取失败的问题
2026-04-06 12:52:38 +08:00
cc
a32696ee13
Merge branch 'dev' into fix-package
2026-04-06 12:52:18 +08:00
cc
b573baec80
Merge pull request #646 from hicccc77/dev
...
Dev
2026-04-06 12:49:47 +08:00
cc
0d4feceffc
Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev
2026-04-06 12:48:59 +08:00
cc
92abe73f0a
更新
2026-04-06 12:48:53 +08:00
cc
74a08732fe
Merge pull request #645 from hicccc77/dev
...
修复了一些问题
2026-04-06 12:16:38 +08:00
cc
7033a77d71
Merge branch 'main' into dev
2026-04-06 12:16:28 +08:00
cc
3b26e0c014
修复了一些问题
2026-04-06 12:15:50 +08:00
ethan
b8bf29277a
修复与部分引用功能相关联的无法读取解密配置的问题
2026-04-05 17:48:12 -04:00
ethan
867f85e8f2
实现 #580 引用消息支持部分引用显示
2026-04-05 17:39:22 -04:00
fatfathao
337fe21d18
fix: node25使用pnpm拉取文件时,ajv导致拉取失败的问题
2026-04-06 01:40:06 +08:00
cc
209b91bfef
Merge pull request #638 from hicccc77/dev
...
Dev
2026-04-05 19:21:28 +08:00
cc
1049f55118
Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev
2026-04-05 14:53:14 +08:00
cc
ba7785a359
修复发布日期问题
2026-04-05 14:53:11 +08:00
cc
e6c821d3ee
Merge pull request #637 from hicccc77/dev
...
交互细节修复与代码修复
2026-04-05 11:24:35 +08:00
cc
17a7741697
Merge branch 'main' into dev
2026-04-05 11:24:26 +08:00
cc
f00525d21a
交互细节修复与代码修复
2026-04-05 10:57:49 +08:00
cc
f5c79c1fab
Merge pull request #636 from hicccc77/dev
...
Dev
2026-04-04 23:27:27 +08:00
cc
4fc0a92651
更新资源文件
2026-04-04 23:25:21 +08:00
cc
585ec39f8e
Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev
2026-04-04 23:14:57 +08:00
cc
a0189fdd0a
修复 #597;实现 #556;修复 #623与 #543;修复卡片图片问题
2026-04-04 23:14:54 +08:00