From a14e2296ca2e72dd686e7bfb6accb367a919700d Mon Sep 17 00:00:00 2001 From: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com> Date: Mon, 30 Mar 2026 18:25:19 +0800 Subject: [PATCH] Fix/allow xsd files (#191) * feat(upload): allow xsd, xsl, dtd file types in skill packages Add XML schema-related file extensions (.xsd, .xsl, .dtd) to the upload allowlist and text content validation. Users uploading skills with XML Schema files (e.g., Anthropic's docx skill) were getting rejected because .xsd was not in the allowed extensions list. Closes #165 * feat(upload): expand office file allowlist * test(app): verify publish extension env override * docs(readme): document upload allowlist override * feat(upload): add legacy Office formats to upload allowlist Add .doc, .xls, .ppt to SkillPackagePolicy.ALLOWED_EXTENSIONS so users can upload skill packages containing legacy Office files. * chore: remove v0.2.0 release notes draft --------- Co-authored-by: wowo-zZ --- .../skill/validation/SkillPackagePolicy.java | 2 +- v0.2.0-release-notes.md | 26 ------------------- 2 files changed, 1 insertion(+), 27 deletions(-) delete mode 100644 v0.2.0-release-notes.md diff --git a/server/skillhub-domain/src/main/java/com/iflytek/skillhub/domain/skill/validation/SkillPackagePolicy.java b/server/skillhub-domain/src/main/java/com/iflytek/skillhub/domain/skill/validation/SkillPackagePolicy.java index 49a5f052..67d055b9 100644 --- a/server/skillhub-domain/src/main/java/com/iflytek/skillhub/domain/skill/validation/SkillPackagePolicy.java +++ b/server/skillhub-domain/src/main/java/com/iflytek/skillhub/domain/skill/validation/SkillPackagePolicy.java @@ -30,7 +30,7 @@ public final class SkillPackagePolicy { // Images ".png", ".jpg", ".jpeg", ".svg", ".gif", ".webp", ".ico", // Office documents - ".docx", ".xlsx", ".pptx" + ".doc", ".xls", ".ppt", ".docx", ".xlsx", ".pptx" ); private SkillPackagePolicy() { diff --git a/v0.2.0-release-notes.md b/v0.2.0-release-notes.md deleted file mode 100644 index 2c65829a..00000000 --- a/v0.2.0-release-notes.md +++ /dev/null @@ -1,26 +0,0 @@ -## Highlights - -- Introduced security scanning system with skill-scanner for automated code security analysis and audit workflow. -- Added in-app notification system for real-time message delivery and management. -- Implemented skill label system with search, filtering, and i18n support for better skill discovery. -- Added profile review workflow with admin moderation queue for user profile changes. -- Enhanced admin capabilities with hard delete API and improved UI components. - -## What's Included - -- **Security and Scanning**: skill-scanner integration, file browser sidebar with preview and syntax highlighting, security audit UI for reviewing scan results, Redis Sentinel support for scanner infrastructure. -- **Notification System**: in-app notification delivery infrastructure, notification management UI, real-time message push support. -- **Label System**: skill label management, label-based search and filtering, i18n label queries with visibility control, batch label synchronization. -- **Profile and Review**: profile change moderation system, admin review queue with pagination and time sorting, lazy-loaded review tabs for improved performance, review detail display in approval workflow. -- **Admin Features**: super-admin hard delete API for skills, local bootstrap admin enabled by default for easier setup. -- **UI/UX Improvements**: migrated shared Select component to Radix UI for better accessibility and interaction, improved dropdown experience. -- **Bug Fixes**: fixed skill version timestamp timezone error on publish, fixed version storage deletion timing issue, fixed duplicate results on skill deletion, fixed skill install command display, fixed Webclient issues. -- **Code Quality**: refactored query boundaries and workflow ownership, slimmed down portal controllers, expanded frontend test coverage. -- **Documentation**: consolidated repository guidelines into CLAUDE.md, updated integration documentation, added DeepWiki documentation crawler workflow. - -## Upgrade Notes - -- This release is published from the current `main` branch and promotes the project from `0.1.0` to `0.2.0`. -- The security scanning system requires proper Redis configuration (Sentinel support is now available). -- Local bootstrap admin is now enabled by default - review your authentication configuration if needed. -- Full changelog: https://github.com/iflytek/skillhub/compare/v0.1.0...v0.2.0