marvin8/dujiangyan
Watch
1
0
Fork
You've already forked dujiangyan
 0
Code Issues Pull requests Projects Releases 43 Wiki Activity Actions
43 releases 74 tags
  • zhongli-2026.5.16 ed7870fa35

    zhongli-2026.5.16 Stable

    marvin8 released this 2026-05-16 04:24:54 +00:00 | 279 commits to main since this release

    Signed by marvin8
    SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

    [zhongli-2026.5.16] - 2026-05-16

    Bug Fixes

    • 🐛 log resolved SQLite path at startup; fail fast on

    Documentation

    • 📝 adopt branch-based workflow in CLAUDE.md files
    • 📝 remove co-authored-by requirement; add tea pr create step
    • 📝 reformat zhongli Security-Audit to Yilan intent format
    • 📝 add zhongli Security-Audit-detail companion document
    • 📝 zhongli: mark H2 SSRF resolved in Security-Audit documents
    • 📝 zhongli: mark H3 resolved in Security-Audit documents
    • 📝 zhongli: add package scope to gitmoji commit format in CLAUDE.md

    Refactoring

    • ♻️ migrate test suite from pytest to Tryke

    Security

    • 🔒 zhongli: validate attachment URLs before fetching to prevent SSRF (H2)
    • 🔒 zhongli: enforce HTTPS for FenLiu base_url with local-network escape hatch

    Testing

    • ✅ fix ty and ruff violations in Tryke test suite
    • ✅ zhongli: add failing SSRF URL validation tests for attachment hasher
    • ✅ zhongli: add failing HTTPS enforcement tests for FenLiuClient
    Downloads