dependabot[bot]
7bd569feca
chore(deps-dev): bump vite-plugin-electron from 0.28.8 to 0.29.1
...
Bumps [vite-plugin-electron](https://github.com/electron-vite/vite-plugin-electron ) from 0.28.8 to 0.29.1.
- [Release notes](https://github.com/electron-vite/vite-plugin-electron/releases )
- [Changelog](https://github.com/electron-vite/vite-plugin-electron/blob/main/CHANGELOG.md )
- [Commits](https://github.com/electron-vite/vite-plugin-electron/compare/v0.28.8...v0.29.1 )
---
updated-dependencies:
- dependency-name: vite-plugin-electron
dependency-version: 0.29.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 19:12:10 +00:00
dependabot[bot]
056f2c1833
chore(deps-dev): bump sass from 1.98.0 to 1.99.0
...
Bumps [sass](https://github.com/sass/dart-sass ) from 1.98.0 to 1.99.0.
- [Release notes](https://github.com/sass/dart-sass/releases )
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sass/dart-sass/compare/1.98.0...1.99.0 )
---
updated-dependencies:
- dependency-name: sass
dependency-version: 1.99.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 19:12:10 +00:00
H3CoF6
b821d370f9
Merge pull request #655 from FATFATHAO/feat/linux-notification
...
[#654 ] fix: 更改linux中的消息通知走D-bus总线
2026-04-07 03:10:50 +08:00
fatfathao
60248b28f8
fix: 更改linux中的消息通知走D-bus总线
2026-04-07 01:30:26 +08:00
cc
d128bedffa
新增资源管理并修复了朋友圈的资源缓存路径
2026-04-06 23:32:59 +08:00
Jason
489b545965
Add files via upload
2026-04-06 21:01:24 +08:00
Jason
36533d07f8
Add files via upload
2026-04-06 21:01:00 +08:00
Jason
625e4f8e6a
Merge pull request #13 from Jasonzhu1207/v0/jasonzhu081207-4751-f2dd3a17
...
Enable AI insights and Telegram push notifications
2026-04-06 20:39:32 +08:00
v0
c4774e1ce1
refactor: optimize insightService to skip getSessions() in whitelist mode
...
Eliminate unnecessary getSessions() calls and use lightweight queries for performance.
Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com >
2026-04-06 12:33:11 +00:00
Jason
e1682f99d2
Merge pull request #12 from Jasonzhu1207/v0/jasonzhu081207-4751-9343a5f0
...
Enable AI insights and Telegram push notifications
2026-04-06 20:12:58 +08:00
v0
a23461bfce
fix: optimize insightService for performance
...
Address DB connection issues, cache TTL, and timer handling to improve efficiency.
Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com >
2026-04-06 12:06:02 +00:00
Jason
73fc36e63a
Merge pull request #11 from Jasonzhu1207/v0/jasonzhu081207-4751-b8ccf9ee
...
Enable AI insights and Telegram push notifications
2026-04-06 19:31:12 +08:00
v0
4beddb7a62
fix: resolve main thread block and high CPU issues
...
Switch 'fs.appendFileSync' to 'fs.appendFile' and optimize 'getSessionsCached' to reduce DB access.
Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com >
2026-04-06 11:28:33 +00:00
Jason
b130165831
Merge pull request #10 from Jasonzhu1207/v0/jasonzhu081207-4751-c8eef8af
...
Enable AI insights and Telegram push notifications
2026-04-06 18:59:09 +08:00
v0
9adffc3cd7
fix: resolve multiple issues and performance enhancement
...
Fix performance issue, Telegram prefix, and two encoding bugs; update custom prompt UI.
Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com >
2026-04-06 10:55:30 +00:00
Jason
a52619c4d5
Merge pull request #9 from Jasonzhu1207/v0/jasonzhu081207-4751-0177d73e
...
Enable AI insights and Telegram push notifications
2026-04-06 18:13:03 +08:00
v0
cf40d3ad63
feat: optimize prompt caching and add Telegram push
...
Add system prompt caching, custom prompt, and Telegram push settings.
Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com >
2026-04-06 09:56:11 +00:00
Ocean
f7f6252d0b
Merge branch 'main' into fix/http-api-security
2026-04-06 14:11:17 +08:00
Jason
14a2475fb1
Add files via upload
2026-04-06 14:09:55 +08:00
Jason
76a55998c2
Add files via upload
2026-04-06 14:09:22 +08:00
Jason
1ec8d54e96
Merge branch 'hicccc77:main' into main
2026-04-06 14:07:31 +08:00
huanghe
62395b275d
fix(security): harden HTTP API service against multiple vulnerabilities
...
1. Path traversal in /api/v1/media/ — use path.resolve() and verify
resolved path stays within media base directory
2. DoS via unlimited POST body — add 10MB size limit to parseBody()
3. Default no-auth — reject all requests when httpApiToken is not
configured instead of silently allowing everything
4. Overly permissive CORS — restrict Access-Control-Allow-Origin from
wildcard (*) to localhost/127.0.0.1 only
5. Timing attack on token comparison — use crypto.timingSafeEqual()
instead of === for token verification
6. Unsafe default bind address — revert httpApiHost default from
0.0.0.0 back to 127.0.0.1 to prevent network exposure
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-04-06 14:06:31 +08:00
cc
57fad47f27
Merge pull request #649 from hicccc77/dev
...
Dev
2026-04-06 13:45:04 +08:00
cc
20c5381211
更新
2026-04-06 13:23:16 +08:00
Jason
b8cd9a8c38
Merge branch 'hicccc77:main' into main
2026-04-06 13:13:15 +08:00
cc
4335abe31b
更新
2026-04-06 13:08:32 +08:00
cc
e5f7b54a7b
Merge pull request #648 from hicccc77/main
...
Merge pull request #647 from hicccc77/dev
2026-04-06 13:06:33 +08:00
cc
ea1ef03b98
Merge pull request #647 from hicccc77/dev
...
Dev
2026-04-06 13:06:10 +08:00
cc
8d374d4f49
Merge branch 'main' into dev
2026-04-06 13:06:02 +08:00
cc
f910e17e53
Merge pull request #644 from fortii2/fix/export-worker-config
...
#580 修复与部分引用功能相关联的无法读取解密配置的问题
2026-04-06 13:04:13 +08:00
cc
35a76aa04f
Merge pull request #643 from fortii2/issue-580-partial-quote
...
#580 引用消息支持部分引用显示和导出
2026-04-06 12:58:57 +08:00
cc
5fce21d799
Merge pull request #641 from FATFATHAO/fix-package
...
fix: node25使用pnpm拉取文件时,ajv导致拉取失败的问题
2026-04-06 12:52:38 +08:00
cc
a32696ee13
Merge branch 'dev' into fix-package
2026-04-06 12:52:18 +08:00
cc
b573baec80
Merge pull request #646 from hicccc77/dev
...
Dev
2026-04-06 12:49:47 +08:00
cc
0d4feceffc
Merge branch 'dev' of https://github.com/hicccc77/WeFlow into dev
2026-04-06 12:48:59 +08:00
cc
92abe73f0a
更新
2026-04-06 12:48:53 +08:00
Jason
7fa26b0716
Merge pull request #8 from Jasonzhu1207/v0/jasonzhu081207-4751-1e322b3f
...
Enable AI insights and system-native notifications
2026-04-06 12:43:38 +08:00
Jason
dc49bf3877
Update package.json
2026-04-06 12:29:51 +08:00
v0
d825dada59
fix: correct electron-builder upload for prerelease tags
...
Remove 'releaseType: "release"' to allow automatic handling of prerelease tags.
Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com >
2026-04-06 04:28:32 +00:00
cc
74a08732fe
Merge pull request #645 from hicccc77/dev
...
修复了一些问题
2026-04-06 12:16:38 +08:00
cc
7033a77d71
Merge branch 'main' into dev
2026-04-06 12:16:28 +08:00
cc
3b26e0c014
修复了一些问题
2026-04-06 12:15:50 +08:00
Jason
81ec51be33
Update release.yml
2026-04-06 12:09:14 +08:00
Jason
fbecda9f1e
Update release.yml
2026-04-06 11:59:57 +08:00
v0
b6950d4027
fix: correct GitHub Actions release download failure
...
Add '|| true' to suppress exit code from failed downloads
Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com >
2026-04-06 03:58:10 +00:00
Jason
f31327b528
Merge pull request #7 from Jasonzhu1207/v0/jasonzhu081207-4751-e705ab05
...
Enable AI insights and system-native notifications
2026-04-06 11:39:56 +08:00
v0
c4c7df2608
fix: resolve insight tab loading and performance issues
...
Fix chat session loading logic and optimize session retrieval performance.
Co-authored-by: Jason <159670257+Jasonzhu1207@users.noreply.github.com >
2026-04-06 03:35:39 +00:00
ethan
b8bf29277a
修复与部分引用功能相关联的无法读取解密配置的问题
2026-04-05 17:48:12 -04:00
ethan
867f85e8f2
实现 #580 引用消息支持部分引用显示
2026-04-05 17:39:22 -04:00
Jason
7fb98d764a
Merge pull request #6 from Jasonzhu1207/v0/jasonzhu081207-4751-03d90813
...
Enable AI insights and system-native notifications
2026-04-06 01:49:04 +08:00