Commit Graph
27 Commits
Author SHA1 Message Date
tbphp dfbcb495bd fix(deps): 固定 fasthttp 流关闭竞态补丁 2026-08-11 13:23:49 +08:00
tbphp 6f6f7c3efc refactor(channel): 切换为 Bifrost 渠道执行架构 2026-08-10 08:22:15 +08:00
tbphp e789feffb4 feat(storage): 支持 SQLite、MySQL、PostgreSQL 2026-08-07 07:49:11 +08:00
tbphp a6a25a571b chore(deps): 升级依赖与构建安全基线 2026-07-29 10:59:52 +08:00
tbphp 0f2d116312 fix(security): 加固凭据边界并更新安全版本 2026-07-26 08:45:58 +08:00
tbphp 9da62f6a9a refactor: 收敛 M0/M1 实现与公开文档 2026-07-20 02:56:59 +08:00
tbphp f7abc8f327 refactor(v2): 切换 2.0 启动骨架并移除 1.x 代码树 2026-07-15 19:25:45 +08:00
tbphp 5d25028dec fix(security): 修复新增的 Dependabot 安全告警 (#428)
升级 golang.org/x/net 至 0.55.0,修复 HTML 解析器拒绝服务漏洞(CVE-2026-25680)
升级 js-yaml 至 4.2.0,修复 merge key 处理中的二次方复杂度 DoS 漏洞(CVE-2026-53550)
2026-07-02 12:16:44 +08:00
tbphp 275cc508e0 fix(security): 修复 Dependabot 安全告警 (pgx + 前端依赖) (#414)
* fix(deps): 升级 pgx/v5 至 5.9.2 并同步 Go 至 1.25

修复 GHSA-9jj7-4m8r-rfcm (CVE-2026-33816, critical, 内存安全)
和 GHSA-j88v-2chj-qfwx (CVE-2026-41889, low, SQL 注入)。

pgx v5.9.x 要求 go 1.25.0,因此一并把 go.mod、CI 工作流、
Dockerfile 中的 Go 版本声明从 1.24 抬到 1.25。

* fix(web): 升级前端依赖修复 12 个 npm 安全告警

通过 npm audit fix 在 semver 范围内升级 lockfile,未改 package.json:
- rollup 4.57→4.60 修复路径穿越文件写入 (GHSA-mw96-cpmx-2vgc)
- vite 6.4.1→6.4.2 修复路径穿越与 WS 文件读取
- minimatch 3.1.2/9.0.5→3.1.5/9.0.9 修复 ReDoS
- picomatch 2.3.1/4.0.3→2.3.2/4.0.4 修复方法注入与 ReDoS
- flatted 3.3.3→3.4.2 修复原型污染
- lodash/lodash-es 4.17.23→4.18.1 修复模板注入与原型污染
- postcss 8.5.6→8.5.14 修复 XSS

npm audit 已确认 0 vulnerabilities。
2026-05-05 09:28:46 +08:00
tbphp 260ba56de7 fix: Upgrade filippo.io/edwards25519 to v1.2.0 for CVE-2026-26958 (#389)
* fix: Upgrade filippo.io/edwards25519 to v1.2.0 for CVE-2026-26958

* fix: Refresh frontend lockfile for security advisories
2026-03-24 21:00:29 +08:00
tbphp c5c705f176 chore: Upgrade dependencies and align Go 1.24 documentation (#388)
* chore: Upgrade dependencies and align Go 1.24 documentation

* chore: Align Go 1.24 across CI and Docker build
2026-02-15 22:54:03 +08:00
tbphp 14a85a7b05 feat: Model redirect (#334)
* feat: Model redirect

* fix: Hint error

* fix: Prefix models error

* feat: Override models API

* feat: Code style
2025-11-09 02:08:15 +08:00
tbphp 051d0c8996 feat: i18n init 2025-09-06 22:45:04 +08:00
tbphp 6c639478dc feat: Security-hardening Optimization (#225)
* fix: code error

* feat: opz security

* feat: Optimize batch key encryption

* feat: Optimize batch test key

* feat: Perfect encryption key

* docs: failed-to-decrypt

* feat: Security alert

* feat: Encryption migrate command

* fix: migrate command error

* feat: Adjust data length

* feat: Adjust data length

* docs: input text

* fix: Deterministic Encryption

* feat: Optimize security algorithms

* feat: Support KeyHash

* fix: Fix migration script field order issue

* fix: Fix log export key issue

* fix: code style

* fix: migrate order offset

* fix: Resolve migration script compatibility issues

* feat: Adjust Redis cleanup policy

* fix: migrate for sqlite

* fix: migrate

* fix: rm group_key_inx

* fix: rm group_key_inx

* fix: filter null hash data

* docs: log warn

* docs: update readme
2025-09-05 15:45:16 +08:00
tbphp 9575608fa7 feat: Multi-DB Driver 2025-07-17 18:15:46 +08:00
tbphp 13d7c4dbad feat: 请求日志记录 2025-07-12 10:15:07 +08:00
tbphp 3b6468af83 feat: 引入dig服务依赖管理 2025-07-06 22:44:41 +08:00
tbphp c40ee7cb5b feat: 任务功能性能及接口优化 2025-07-05 17:19:20 +08:00
tbphp 9b252bbd3e feat: 增加内存存储 2025-07-05 15:42:20 +08:00
tbphp 01b86f7e30 feat: 密钥管理 2025-07-04 21:19:15 +08:00
tbphp e06038ddb9 fix: go mod 2025-07-03 23:22:46 +08:00
tbphp 80662af9de feat: group api 2025-07-03 16:29:12 +08:00
tbphp 1e58c3d504 feat: 配置分离 2025-07-03 00:33:57 +08:00
tbphp f15177510c feat: 前端渲染 2025-07-02 15:15:42 +08:00
tbphp 731315144e feat: 前端搭建-未完成 2025-06-29 21:59:32 +08:00
tbphp 0c5cf4266d refactor: 重构项目结构 2025-06-09 21:50:18 +08:00
tbphp 219c068dbf init 2025-06-06 21:45:01 +08:00