scriptoriumadmin/skillhub
1
0
Fork 0
mirror of https://github.com/iflytek/skillhub.git synced 2026-08-28 11:25:00 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
996 commits 193 branches 21 tags 41 MiB
Commit graph

996 commits

This branch
This branch
All branches
Author SHA1 Message Date
dongmucat
4ff546b23d fix(security): enforce YAML fallback limits 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-07-07 11:09:53 +08:00
dongmucat
f4fec3fe22 fix(security): remediate CodeQL alerts 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-07-06 15:44:35 +08:00
dongmucat
e32f05b375
Merge pull request #568 from iflytek/fix/admin-super-admin-role-guard
Some checks failed
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details
Security / CodeQL (python) (push) Has been cancelled
Details 
fix(auth): guard SUPER_ADMIN role mutations
 2026-07-02 13:53:32 +08:00
dongmucat
3a254d7524 fix(auth): guard SUPER_ADMIN role mutations 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-07-01 16:23:45 +08:00
dongmucat
06cc523a0c
Merge pull request #557 from iflytek/fix/relative-link-nested-preview
Some checks failed
Security / Dependency Review (push) Has been cancelled
Details
Deploy Docs / build (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details
Security / CodeQL (python) (push) Has been cancelled
Details
Deploy Docs / Deploy (push) Has been cancelled
Details 
fix(frontend): support nested preview links
 2026-06-30 17:29:08 +08:00
dongmucat
f7cc6e758f
Merge pull request #565 from iflytek/fix/scanner-llm-base-url 
Fix scanner local LLM base URL handling
 2026-06-30 15:25:03 +08:00
dongmucat
f43c8fcbee
Merge pull request #567 from iflytek/fix/dependabot-open-alerts-dco 
fix(frontend): patch undici dependabot alerts
 2026-06-30 14:40:42 +08:00
dongmucat
85332a2237 chore(staging): keep dependabot fix scoped 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-30 14:04:08 +08:00
dongmucat
db8aa36f89 fix(frontend): patch undici alerts and harden staging web 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-30 10:58:05 +08:00
dongmucat
bf7c71ad2c fix(scanner): backport local LLM base URL handling for #563 
Also add Python CodeQL coverage in the security workflow so repository-level script regression checks stay green when Python source exists.

Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-29 14:34:55 +08:00
dongmucat
0134da73b5 fix(frontend): support nested preview links 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-24 16:51:42 +08:00
dongmucat
8413ee3950
Merge pull request #554 from iflytek/fix/auth-password-settings
Some checks failed
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details 
fix(auth): restore password settings access
 2026-06-24 10:50:26 +08:00
dongmucat
c25f950841
Merge pull request #555 from iflytek/feature/promotion-review-optimization 
feat(promotion): improve promotion review dashboard
 2026-06-24 10:36:46 +08:00
dongmucat
e501be9cf8 feat(promotion): improve promotion review dashboard 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-24 09:28:43 +08:00
dongmucat
636f1edac2 docs(auth): align auth me example with #541 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-23 13:54:33 +08:00
dongmucat
f61ce71daa test(web): ISSUE-61 cover security settings real requests 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-22 17:22:19 +08:00
dongmucat
9f927c12b0 fix(PR): default deny security password changes 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-22 14:22:25 +08:00
dongmucat
54006e72a4 fix(web): ISSUE-62 gate security settings by capability 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-22 14:00:53 +08:00
dongmucat
665ee0499a feat(auth): add ISSUE-60 password capability field 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-22 12:40:01 +08:00
dongmucat
dc185861d4
Merge pull request #542 from iflytek/release/cli-v0.1.8
Some checks failed
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details 
chore(cli): release 0.1.8
 2026-06-18 15:56:27 +08:00
dongmucat
78b8b34ed1 chore(cli): bump version to 0.1.8 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-18 15:54:23 +08:00
dongmucat
f8ea4e67e4
feat(cli): support anonymous public search and install 
feat(cli): support anonymous public search and install
 2026-06-18 14:29:45 +08:00
dongmucat
ea73c305b8
Merge pull request #534 from SenLinLeo/fix/install-target-enter-selection 
fix(cli): treat highlighted install target as selected
 2026-06-18 09:43:48 +08:00
dongmucat
17daf87ab6
Merge pull request #539 from iflytek/fix/notification-sse-headers
Some checks failed
Security / CodeQL (java-kotlin) (push) Waiting to run
Details
Security / Dependency Review (push) Waiting to run
Details
Security / CodeQL (javascript-typescript) (push) Waiting to run
Details
Deploy Docs / build (push) Has been cancelled
Details
Deploy Docs / Deploy (push) Has been cancelled
Details 
fix(notification): preserve SSE headers for notification stream
 2026-06-17 16:20:35 +08:00
dongmucat
48a1de9640 fix(notification): preserve SSE headers for notification stream 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 15:19:07 +08:00
dongmucat
477bf08e3b
Merge pull request #537 from iflytek/fix/codeql-python-matrix 
fix(ci): remove unsupported Python CodeQL scan
 2026-06-17 14:19:25 +08:00
dongmucat
32f34fbf4c fix(ci): remove unsupported Python CodeQL scan 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 14:04:27 +08:00
dongmucat
22a76515d3
Merge pull request #538 from iflytek/chore/deps-2026-06-security 
chore(deps): patch dependabot security alerts
 2026-06-17 14:01:39 +08:00
dongmucat
47a0ef1f7f chore(deps): patch dependabot security alerts 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 13:43:43 +08:00
dongmucat
cf22f568f7 test(cli): align auth tests with bearer hardening 
Refs: 25f57a32-5f1d-4d56-b6b7-9b6b7b868799
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 11:35:17 +08:00
dongmucat
cb4bf94711 fix(cli): filter installable search before pagination 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 11:35:16 +08:00
dongmucat
5a708a5bd6 fix(domain): reject anonymous restricted resolves cleanly 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 11:35:16 +08:00
dongmucat
f5259daa94 fix(cli): require installable latest in search 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 11:35:16 +08:00
dongmucat
32cc316b30 fix(cli): align anonymous installability rules 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 11:35:16 +08:00
dongmucat
9520cf63e0 fix(cli): add token auth to search 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 11:35:16 +08:00
dongmucat
b56973fb80 fix(auth): fail closed invalid cli bearer tokens 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 11:35:16 +08:00
dongmucat
e4e1639833
Merge pull request #536 from iflytek/fix/review-super-admin-self-promotion 
fix(review): allow super admin self promotion review
 2026-06-17 11:25:09 +08:00
dongmucat
a85298f7ae
Merge pull request #508 from iflytek/fix/security-review-hardening 
fix(security): harden review findings
 2026-06-17 11:08:38 +08:00
dongmucat
a23cbd84eb
Merge pull request #530 from iflytek/fix/issue-51-profile-review-notifications 
fix: admin notifications for profile review requests
 2026-06-17 11:08:10 +08:00
dongmucat
52251fcd0e chore(docs): remove handwritten notification OpenAPI (#524) 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-17 10:25:34 +08:00
dongmucat
e50140272b fix(security): close review hardening gaps 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-16 17:48:15 +08:00
SenLinLeo
b44c65443d fix(cli): treat highlighted install target as selected 
Signed-off-by: SenLinLeo <1664761477@qq.com>
 2026-06-16 16:30:30 +08:00
dongmucat
a73dba5f80
Merge pull request #533 from iflytek/fix/publish-notification-owner 
fix(notification): avoid publish notice for promotion reviewers
 2026-06-16 15:16:08 +08:00
dongmucat
05e1968563
Merge pull request #526 from iflytek/feature/add-agentguard-skill 
feat(bootstrap): add agentguard builtin skill
 2026-06-16 14:27:30 +08:00
dongmucat
7d0402e937 fix(security): address review blockers 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-16 14:19:39 +08:00
dongmucat
73767a9022 fix(notification): avoid publish notice for promotion reviewers 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-16 12:19:27 +08:00
dongmucat
8527409742 fix(notification): keep SSE live push streams open (#524) 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-16 11:57:49 +08:00
dongmucat
256344cbde fix(review): allow super admin self promotion review 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-16 11:29:39 +08:00
dongmucat
a865960cf3 fix(notification): ISSUE-51 add profile review notifications 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-16 10:33:02 +08:00
dongmucat
6d6577faa2 fix(bootstrap): confirm builtin publish warnings 
Signed-off-by: dongmucat <1127093059@qq.com>
 2026-06-16 10:23:02 +08:00