Skip to content

Sync - #1

Closed
DDSRem-Bot wants to merge 6 commits into
DDSRem-Dev:mainfrom
Wei-Shaw:main
Closed

DDSRem-Bot wants to merge 6 commits into
DDSRem-Dev:mainfrom
Wei-Shaw:main

Conversation

@DDSRem-Bot

Copy link
Copy Markdown

No description provided.

Wei-Shaw and others added 6 commits October 23, 2026 13:49
…very-20261023

fix(openai): 缓解 Codex overload 并恢复空流事件后的安全重试
…v2-3pqr-j5jr

DOMPurify <=3.4.16 is affected by two advisories published 2026-10-22:
- GHSA-cg2g-xh64-v4q7 (critical): SAFE_FOR_TEMPLATES bypass via split
  template expressions in attached shadow root content on DOM output modes
- GHSA-mrv2-3pqr-j5jr (high): IN_PLACE hook removing a parent/sibling leaves
  detached subtree event handlers armed

Bump the direct dependency and the pnpm override floor to 3.4.17 so the
mermaid-transitive copy dedupes to the same patched version. Lockfile-only
regen via pnpm 9 (matches CI); no other package changes.
新增按操作和资源范围授权的管理员 API Key
@DDSRem-Bot DDSRem-Bot closed this Oct 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants