scriptoriumadmin/skillhub
1
0
Fork 0
mirror of https://github.com/iflytek/skillhub.git synced 2026-09-05 08:05:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7
1228 commits 212 branches 25 tags 42 MiB
Commit graph

1228 commits

This branch
This branch
All branches
Author SHA1 Message Date
XiaoSeS
fcc9dfd616 docs(release): remove public release workflow 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-29 15:47:25 +08:00
XiaoSeS
d3adc95ce0
Merge pull request #777 from iflytek/docs/release-domain-validation-gate 
docs(release): add verified publishing workflow
 2026-08-29 15:45:02 +08:00
XiaoSeS
1136e9ef5d
Merge pull request #776 from iflytek/feature/fix-subpath-redirect-scheme 
fix(web): preserve HTTPS in sub-path redirects
 2026-08-29 15:43:31 +08:00
XiaoSeS
33483ec20f docs(release): add verified publishing workflow 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-29 15:39:23 +08:00
XiaoSeS
e9e570133d fix(web): preserve HTTPS in sub-path redirects 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-29 15:29:42 +08:00
XiaoSeS
337d3d973d
Merge pull request #775 from iflytek/fix/cli-namespace-sync-server-route 
fix(cli): add namespace sync manifest endpoint
 2026-08-29 15:16:27 +08:00
XiaoSeS
60fed4d94f fix(auth): support bearer tokens behind sub-path proxies 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-29 15:05:09 +08:00
XiaoSeS
2babc0935b fix(cli): add namespace sync manifest endpoint 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-29 14:06:34 +08:00
XiaoSeS
c11a51c75f
docs(weekly): publish 2026 W35 report
Some checks failed
Deploy Docs / build (push) Has been cancelled
Details
Security / Dependency Review (push) Has been cancelled
Details
Security / CodeQL (java-kotlin) (push) Has been cancelled
Details
Security / CodeQL (javascript-typescript) (push) Has been cancelled
Details
Security / CodeQL (python) (push) Has been cancelled
Details
Deploy Docs / Deploy (push) Has been cancelled
Details 
Merge reviewed W35 weekly report mirror.
 2026-08-28 17:22:18 +08:00
XiaoSeS
56ed2dcadd docs(weekly): mirror 2026-W35 report 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-28 17:18:57 +08:00
XiaoSeS
f993ad6533
Merge pull request #712 from Vast-Stars/feat/personal-namespace-provisioning 
feat(namespace): auto-provision a personal namespace on registration
 2026-08-28 17:04:21 +08:00
XiaoSeS
37e3c63236
Merge pull request #688 from iflytek/fix/auth-email-assurance-guard-main 
fix(auth): enforce trusted OAuth identity attributes
 2026-08-28 17:04:15 +08:00
XiaoSeS
eeb63613f2 fix(namespace): enable personal provisioning by default 2026-08-28 16:42:26 +08:00
XiaoSeS
ee0f0763db refactor(namespace): keep personal provisioning configuration-only 2026-08-28 15:55:29 +08:00
XiaoSeS
7beb1be356 fix(namespace): skip system accounts during provisioning 2026-08-28 15:27:39 +08:00
XiaoSeS
04bb414b37 fix(namespace): use stable random personal namespace slugs 2026-08-28 15:19:56 +08:00
XiaoSeS
dc31bb97f4 Revert "feat(namespace): backfill personal namespaces for existing accounts" 
This reverts commit 2d50437e4f.
 2026-08-28 15:19:56 +08:00
XiaoSeS
fbf6887e9d Revert "fix(namespace): stop the backfill from querying with a null keyword" 
This reverts commit 639e081ca7.
 2026-08-28 15:19:56 +08:00
XiaoSeS
e80fb986f7 Revert "fix(web): stop the settings form from reverting the saved value" 
This reverts commit 4fe6948f87.
 2026-08-28 15:19:56 +08:00
XiaoSeS
eba2762b5b Revert "feat(namespace): let operators choose which namespaces new accounts join" 
This reverts commit a9e7f43e5a.
 2026-08-28 15:19:56 +08:00
XiaoSeS
0221c17113 Revert "feat(web): pick default namespaces from a list instead of typing slugs" 
This reverts commit 7247defd5d.
 2026-08-28 15:19:56 +08:00
XiaoSeS
c91c2ca408 fix(auth): make GitHub email assurance resilient 2026-08-28 15:08:07 +08:00
XiaoSeS
71fbc8357a
Merge pull request #724 from 15258725278/release/cli-v0.1.10 
feat(cli): add namespace workspace sync
 2026-08-28 10:22:24 +08:00
XiaoSeS
c32bced109
Merge pull request #748 from myml/fix/security-csp-policy 
fix(security): harden CSP policy and hide nginx server tokens
 2026-08-28 10:22:14 +08:00
XiaoSeS
c825d896a4
Merge pull request #762 from FenjuFu/fix/code-scanning-alerts-2026-08 
fix(security): resolve CodeQL findings
 2026-08-28 10:22:04 +08:00
XiaoSeS
2e78f79e83
Merge pull request #765 from iflytek/fix/pr735-subscription-authorization-20260827
Some checks are pending
Security / Dependency Review (push) Waiting to run
Details
Security / CodeQL (java-kotlin) (push) Waiting to run
Details
Security / CodeQL (javascript-typescript) (push) Waiting to run
Details
Security / CodeQL (python) (push) Waiting to run
Details 
fix(subscription): enforce current visibility for subscribers
 2026-08-27 17:48:08 +08:00
XiaoSeS
7476c9e0d2
fix(skill-card): resolve author display names in summaries 
Maintainer follow-up for #751; batch-loads owner display names and preserves summary constructor compatibility.
 2026-08-27 17:45:34 +08:00
XiaoSeS
1544ae4775 fix(skill-card): add owner summary compatibility overload 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-27 17:30:15 +08:00
XiaoSeS
ec9689dbc8 fix(skill-card): preserve owner fields when adding labels 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-27 17:28:09 +08:00
XiaoSeS
41a389432d fix(skill-card): keep legacy summary constructor compatible 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-27 17:26:30 +08:00
XiaoSeS
b0c4a154fd fix(skill-card): resolve author display names in summaries 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-27 17:21:15 +08:00
wurongjie
f43c047a6b feat(skill-card): show author and update time in skill card 
Add ownerId and ownerDisplayName fields to SkillSummaryResponse,
and render author and last update time at the bottom of each skill card.

在技能卡片底部新增作者和最近更新时间显示，搜索结果接口新增
ownerId 和 ownerDisplayName 字段。

Log: 技能卡片新增作者和更新时间
Influence: 搜索结果页技能卡片底部显示作者和更新时间信息，接口新增 ownerId/ownerDisplayName 字段。
Signed-off-by: wurongjie <wurongjie@uniontech.com>
 2026-08-27 17:21:15 +08:00
XiaoSeS
a3d1b4c9c5 test(subscription): remove unrelated confirm-publish assertions 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-27 16:56:01 +08:00
XiaoSeS
126f01d75e fix(subscription): retain yank visibility context 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-27 16:50:37 +08:00
XiaoSeS
1331667496 fix(subscription): reuse visibility policy and localize denial 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-27 16:45:55 +08:00
千乘妍 (Xiaoyaner)
bacfd58aa0 fix: emit confirm-publish events with permission-aware subscriber fanout 
Signed-off-by: 千乘妍 (Xiaoyaner) <258399167+xiaoyaner0201@users.noreply.github.com>
 2026-08-27 16:43:32 +08:00
FenjuFu
36967794d1 fix(security): resolve CodeQL findings 
Use a bounded safe YAML constructor, remove the polynomial placeholder regex, keep public label access GET-only with CSRF protection, validate CLI callbacks as loopback URL objects, and use cryptographic UUIDs for E2E identities.

Signed-off-by: FenjuFu <92919259+FenjuFu@users.noreply.github.com>
 2026-08-27 15:16:54 +08:00
FenjuFu
26f49e6819
docs(governance): add DPGA policy evidence 
Validated documentation, links, markdown checks, and CI.
 2026-08-27 15:07:42 +08:00
FenjuFu
7fc1df5043
feat(ratelimit): make thresholds runtime-configurable 
Validated locally and in CI, including runtime configuration documentation.
 2026-08-27 15:07:31 +08:00
XiaoSeS
7e37935da8
fix(i18n): keep Russian locale keys in sync 
Merge validated locale parity fix.
 2026-08-27 14:51:22 +08:00
qwn3213
412514b299
fix(web) 添加oidc的logo文件，配置oidc登录后图裂无logo太丑了 (#734) 
* fix(web) 添加oidc的logo文件，配置oidc登录后图裂无logo太丑了

Signed-off-by: qwn3213 <qwn3213@gmail.com>

* fix(web) rename loge.svg to logo.svg

Signed-off-by: qwn3213 <qwn3213@gmail.com>

---------

Signed-off-by: qwn3213 <qwn3213@gmail.com>
 2026-08-26 19:45:08 +08:00
FenjuFu
0587c55f8b
docs(examples): add Python client and usage examples (#702) 
Add examples/python: a dependency-light (requests-only) SkillHubClient plus
runnable examples covering search, resolve, download and publish against the
REST API, and link them from the README Documentation sections. Serves the
large Python-leaning audience and doubles as a reference SDK seed (see #701).

Signed-off-by: FenjuFu <fufenjupku@gmail.com>
 2026-08-26 19:43:13 +08:00
Michael
16306dd4f4
feat(i18n): add Russian locale for web UI and server messages (#700) 
Signed-off-by: Mikhail Neradkov <michael.neradkov@gmail.com>
 2026-08-26 19:43:07 +08:00
bbdu3
95e630c096
fix(scan): prevent scan tasks from being lost after transaction commit
Some checks are pending
Security / Dependency Review (push) Waiting to run
Details
Security / CodeQL (java-kotlin) (push) Waiting to run
Details
Security / CodeQL (javascript-typescript) (push) Waiting to run
Details
Security / CodeQL (python) (push) Waiting to run
Details 
Preserve scan delivery on lock contention through the retry path and add reclaim regression coverage.
 2026-08-26 17:46:16 +08:00
FenjuFu
3b5d4381a9
feat(publish): allow uploading a skill folder directly 
Fix E2E ZIP picker selector after adding folder upload input.
 2026-08-26 17:37:21 +08:00
XiaoSeS
4344ec6b22
Merge pull request #759 from iflytek/fix/auth-login-redirect-loop 
fix(auth): prevent login page redirect loop
 2026-08-26 15:57:30 +08:00
XiaoSeS
243e9b68f4 fix(auth): prevent login page redirect loop 
Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
 2026-08-26 15:46:20 +08:00
XiaoSeS
3522bad295
Merge pull request #623 from gale-popai/fix/oauth-return-to 
fix(auth): keep the OAuth return target through the provider callback
 2026-08-26 15:29:48 +08:00
wrj97
d7e8c51775
fix(dashboard): remove encoding from slug params (#747) 
The router handles parameter encoding automatically. Explicitly encoding
the slug results in double-encoded characters in the URL.

Signed-off-by: wurongjie <wurongjie@uniontech.com>
 2026-08-26 10:23:43 +08:00
ShinyHero666
470e79d6d2
fix(smoke): support separate actuator target (#689) 
Signed-off-by: ShinyHero666 <160204855+ShinyHero666@users.noreply.github.com>
 2026-08-26 10:23:31 +08:00