Josh Avant
|
0bcb95e8fa
|
Models: enforce source-managed SecretRef markers in models.json (#43759)
Merged via squash.
Prepared head SHA: 4a065ef5d8
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>
Reviewed-by: @joshavant
|
2026-03-12 02:22:52 -05:00 |
|
Josh Avant
|
36d2ae2a22
|
SecretRef: harden custom/provider secret persistence and reuse (#42554)
* Models: gate custom provider keys by usable secret semantics
* Config: project runtime writes onto source snapshot
* Models: prevent stale apiKey preservation for marker-managed providers
* Runner: strip SecretRef marker headers from resolved models
* Secrets: scan active agent models.json path in audit
* Config: guard runtime-source projection for unrelated configs
* Extensions: fix onboarding type errors in CI
* Tests: align setup helper account-enabled expectation
* Secrets audit: harden models.json file reads
* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)
|
2026-03-10 23:55:10 +00:00 |
|
Peter Steinberger
|
e3c21c913d
|
fix(ci): refresh secret baseline and UI state types
|
2026-03-07 21:17:57 +00:00 |
|
Altay
|
97f9e25525
|
fix(ci): restore strip-ansi and typecheck fixtures (#39146)
* fix: restore strip-ansi and typecheck fixtures
* test: normalize windows install path assertions
|
2026-03-07 23:13:13 +03:00 |
|
Peter Steinberger
|
17ab46aedd
|
fix(models): prevent plaintext apiKey writes to models state (#38889)
Land #38889 by @gambletan.
Co-authored-by: gambletan <ethanchang32@gmail.com>
|
2026-03-07 19:29:46 +00:00 |
|
Vincent Koc
|
e4d80ed556
|
CI: restore main detect-secrets scan (#38438)
* Tests: stabilize detect-secrets fixtures
* Tests: fix rebased detect-secrets false positives
* Docs: keep snippets valid under detect-secrets
* Tests: finalize detect-secrets false-positive fixes
* Tests: reduce detect-secrets false positives
* Tests: keep detect-secrets pragmas inline
* Tests: remediate next detect-secrets batch
* Tests: tighten detect-secrets allowlists
* Tests: stabilize detect-secrets formatter drift
|
2026-03-07 10:06:35 -08:00 |
|
Josh Avant
|
8e20dd22d8
|
Secrets: harden SecretRef-safe models.json persistence (#38955)
|
2026-03-07 11:28:39 -06:00 |
|
Peter Steinberger
|
6bea38b21f
|
fix(models): land #31202 normalize custom provider keys (@stakeswky)
Landed from contributor PR #31202 by @stakeswky.
Co-authored-by: stakeswky <stakeswky@users.noreply.github.com>
|
2026-03-02 03:11:55 +00:00 |
|