okooooooo/gpt-load
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,315 Commits 1 Branch 0 Tags
main
Commit Graph
42 Commits
Author SHA1 Message Date
tbphp c0365fc03b chore(deps): upgrade CPA SDK to v7.3.6 (#677) 2026-09-17 19:32:00 +08:00
tbphp 5d98e41cc4 chore(deps): upgrade Bifrost Core to v1.9.0 (#676) 2026-09-17 18:38:41 +08:00
tbphp abc6483d0e fix(codex): 升级 CPA 并固定上游版本声明 (#619) 2026-09-11 00:08:04 +08:00
tbphp 2bdc105835 chore(deps): 升级官方 fasthttp 并移除临时替换 (#589) 
* chore(deps): 升级官方 fasthttp 并移除临时替换

* docs(licenses): 同步 fasthttp 升级后的第三方声明
 2026-09-07 22:18:12 +08:00
dependabot[bot] da46438b55 chore(deps): bump the go-minor-and-patch group with 3 updates (#577) 
Bumps the go-minor-and-patch group with 3 updates: [github.com/buger/jsonparser](https://github.com/buger/jsonparser), [github.com/klauspost/compress](https://github.com/klauspost/compress) and [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `github.com/buger/jsonparser` from 1.2.0 to 1.6.1
- [Release notes](https://github.com/buger/jsonparser/releases)
- [Changelog](https://github.com/buger/jsonparser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/buger/jsonparser/compare/v1.2.0...v1.6.1)

Updates `github.com/klauspost/compress` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](https://github.com/klauspost/compress/compare/v1.19.2...v1.20.0)

Updates `golang.org/x/crypto` from 0.55.0 to 0.56.0
- [Commits](https://github.com/golang/crypto/compare/v0.55.0...v0.56.0)

---
updated-dependencies:
- dependency-name: github.com/buger/jsonparser
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-09-06 22:28:28 +08:00
tbphp 1c81b69223 chore(deps): 更新 CPA 至 v7.2.151 (#569) 2026-09-05 09:04:22 +08:00
dependabot[bot]andtbphp d4b56cbb61 chore(deps): bump the cpaembedded-minor-and-patch group across 1 directory with 3 updates (#507) 
* chore(deps): bump the cpaembedded-minor-and-patch group across 1 directory with 3 updates

Bumps the cpaembedded-minor-and-patch group with 3 updates in the /third_party/cpaembedded directory: [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli), [github.com/router-for-me/CLIProxyAPI/v7](https://github.com/router-for-me/CLIProxyAPI) and [github.com/tidwall/gjson](https://github.com/tidwall/gjson).


Updates `github.com/andybalholm/brotli` from 1.0.6 to 1.2.3
- [Commits](https://github.com/andybalholm/brotli/compare/v1.0.6...v1.2.3)

Updates `github.com/router-for-me/CLIProxyAPI/v7` from 7.2.143 to 7.2.144
- [Release notes](https://github.com/router-for-me/CLIProxyAPI/releases)
- [Commits](https://github.com/router-for-me/CLIProxyAPI/compare/v7.2.143...v7.2.144)

Updates `github.com/tidwall/gjson` from 1.18.0 to 1.19.0
- [Commits](https://github.com/tidwall/gjson/compare/v1.18.0...v1.19.0)

---
updated-dependencies:
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cpaembedded-minor-and-patch
- dependency-name: github.com/router-for-me/CLIProxyAPI/v7
  dependency-version: 7.2.144
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cpaembedded-minor-and-patch
- dependency-name: github.com/tidwall/gjson
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cpaembedded-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): 同步根模块 CPA 依赖图

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: tbphp <tangb7420@gmail.com>
 2026-08-31 16:37:31 +08:00
dependabot[bot] 99249641eb chore(deps): bump the go-minor-and-patch group with 5 updates (#508) 
Bumps the go-minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.2.2` | `1.2.3` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.2` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.54.0` | `0.55.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.57.0` | `0.58.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.40.0` | `0.41.0` |


Updates `github.com/andybalholm/brotli` from 1.2.2 to 1.2.3
- [Commits](https://github.com/andybalholm/brotli/compare/v1.2.2...v1.2.3)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.2
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.2)

Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0
- [Commits](https://github.com/golang/crypto/compare/v0.54.0...v0.55.0)

Updates `golang.org/x/net` from 0.57.0 to 0.58.0
- [Commits](https://github.com/golang/net/compare/v0.57.0...v0.58.0)

Updates `golang.org/x/text` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.40.0...v0.41.0)

---
updated-dependencies:
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-31 16:08:40 +08:00
tbphp 0e6afc5b96 chore(deps): 更新 fasthttp 流式关闭修复 (#490) 2026-08-29 00:04:06 +08:00
tbphp d4bbb9193a feat: 升级 Go 与 SDK 版本 (#485) 
* feat(gateway): 升级 SDK 并封口兼容合同

* fix: 修正升级后的格式与模型过滤

* fix(ci): 更新 Go 漏洞扫描器

* fix(gateway): 拒绝非标准服务层级字段
 2026-08-27 22:48:16 +08:00
tbphp c0089b99a2 fix(deps): 升级 edwards25519 修复安全漏洞 2026-08-19 22:59:29 +08:00
tbphp ef0459c347 feat(subscription): 接入 Antigravity 订阅渠道 2026-08-17 20:25:57 +08:00
tbphp 5eb7088638 chore(deps): 更新 fasthttp 依赖 2026-08-16 21:57:02 +08:00
tbphp a36cf1be53 feat(claude): 补齐订阅渠道能力 2026-08-16 18:52:45 +08:00
tbphp 7dc074cbc2 chore(deps): 同步 fasthttp 上游竞态修复 2026-08-16 09:36:24 +08:00
tbphp bae4207233 Merge branch 'v2' into codex/codex-subscription 2026-08-14 08:41:15 +08:00
tbphp 21082ac739 feat(subscription): 接入 Codex 订阅账号 2026-08-14 08:41:02 +08:00
tbphp ac4ac73c17 chore(deps): 升级 Bifrost Core 2026-08-14 08:27:00 +08:00
tbphp dfbcb495bd fix(deps): 固定 fasthttp 流关闭竞态补丁 2026-08-11 13:23:49 +08:00
tbphp 6f6f7c3efc refactor(channel): 切换为 Bifrost 渠道执行架构 2026-08-10 08:22:15 +08:00
tbphp e789feffb4 feat(storage): 支持 SQLite、MySQL、PostgreSQL 2026-08-07 07:49:11 +08:00
tbphp a6a25a571b chore(deps): 升级依赖与构建安全基线 2026-07-29 10:59:52 +08:00
tbphp 0f2d116312 fix(security): 加固凭据边界并更新安全版本 2026-07-26 08:45:58 +08:00
tbphp 9da62f6a9a refactor: 收敛 M0/M1 实现与公开文档 2026-07-20 02:56:59 +08:00
tbphp f7abc8f327 refactor(v2): 切换 2.0 启动骨架并移除 1.x 代码树 2026-07-15 19:25:45 +08:00
tbphp 5d25028dec fix(security): 修复新增的 Dependabot 安全告警 (#428) 
升级 golang.org/x/net 至 0.55.0，修复 HTML 解析器拒绝服务漏洞（CVE-2026-25680）
升级 js-yaml 至 4.2.0，修复 merge key 处理中的二次方复杂度 DoS 漏洞（CVE-2026-53550）
 2026-07-02 12:16:44 +08:00
tbphp 275cc508e0 fix(security): 修复 Dependabot 安全告警 (pgx + 前端依赖) (#414) 
* fix(deps): 升级 pgx/v5 至 5.9.2 并同步 Go 至 1.25

修复 GHSA-9jj7-4m8r-rfcm (CVE-2026-33816, critical, 内存安全)
和 GHSA-j88v-2chj-qfwx (CVE-2026-41889, low, SQL 注入)。

pgx v5.9.x 要求 go 1.25.0，因此一并把 go.mod、CI 工作流、
Dockerfile 中的 Go 版本声明从 1.24 抬到 1.25。

* fix(web): 升级前端依赖修复 12 个 npm 安全告警

通过 npm audit fix 在 semver 范围内升级 lockfile，未改 package.json：
- rollup 4.57→4.60 修复路径穿越文件写入 (GHSA-mw96-cpmx-2vgc)
- vite 6.4.1→6.4.2 修复路径穿越与 WS 文件读取
- minimatch 3.1.2/9.0.5→3.1.5/9.0.9 修复 ReDoS
- picomatch 2.3.1/4.0.3→2.3.2/4.0.4 修复方法注入与 ReDoS
- flatted 3.3.3→3.4.2 修复原型污染
- lodash/lodash-es 4.17.23→4.18.1 修复模板注入与原型污染
- postcss 8.5.6→8.5.14 修复 XSS

npm audit 已确认 0 vulnerabilities。
 2026-05-05 09:28:46 +08:00
tbphp 260ba56de7 fix: Upgrade filippo.io/edwards25519 to v1.2.0 for CVE-2026-26958 (#389) 
* fix: Upgrade filippo.io/edwards25519 to v1.2.0 for CVE-2026-26958

* fix: Refresh frontend lockfile for security advisories
 2026-03-24 21:00:29 +08:00
tbphp c5c705f176 chore: Upgrade dependencies and align Go 1.24 documentation (#388) 
* chore: Upgrade dependencies and align Go 1.24 documentation

* chore: Align Go 1.24 across CI and Docker build
 2026-02-15 22:54:03 +08:00
tbphp 14a85a7b05 feat: Model redirect (#334) 
* feat: Model redirect

* fix: Hint error

* fix: Prefix models error

* feat: Override models API

* feat: Code style
 2025-11-09 02:08:15 +08:00
tbphp 051d0c8996 feat: i18n init 2025-09-06 22:45:04 +08:00
tbphp 9575608fa7 feat: Multi-DB Driver 2025-07-17 18:15:46 +08:00
tbphp 13d7c4dbad feat: 请求日志记录 2025-07-12 10:15:07 +08:00
tbphp 3b6468af83 feat: 引入dig服务依赖管理 2025-07-06 22:44:41 +08:00
tbphp c40ee7cb5b feat: 任务功能性能及接口优化 2025-07-05 17:19:20 +08:00
tbphp 9b252bbd3e feat: 增加内存存储 2025-07-05 15:42:20 +08:00
tbphp 01b86f7e30 feat: 密钥管理 2025-07-04 21:19:15 +08:00
tbphp 80662af9de feat: group api 2025-07-03 16:29:12 +08:00
tbphp 1e58c3d504 feat: 配置分离 2025-07-03 00:33:57 +08:00
tbphp f15177510c feat: 前端渲染 2025-07-02 15:15:42 +08:00
tbphp 731315144e feat: 前端搭建-未完成 2025-06-29 21:59:32 +08:00
tbphp 219c068dbf init 2025-06-06 21:45:01 +08:00