yangfucheng123 3b8141aa43

fix(community): Fail closed on delegated fetch backends to close SSRF gap (#6531) ...

* Fail closed on delegated fetch backends to close SSRF gap

* fix(community): resolve delegated-fetch credentials from one config snapshot

Address review feedback on the fail-closed SSRF guard:

- firecrawl/fastcrw client construction no longer re-reads get_app_config(),
  so the API key and endpoint come from the same revision the endpoint screen
  validated (prevents cross-revision credential misrouting).
- fix the browserless test double to accept the new two-argument
  _get_browserless_client signature.
- document the check-only (DNS rebinding) caveat on
  validate_delegated_backend_url.
- add a CHANGELOG upgrade note for the default self-hosted backend break.

* fix(doctor): consolidate delegated fetch backend checks and deployment guidance

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-10-10 18:45:58 +08:00

..

wizard

feat(wizard): add Opper as an LLM provider (#6399)

2026-10-08 06:53:45 +08:00

_detector_cli.py

chore(blocking-io): fail-loud repo-root resolution and shared detector CLI shim (#3512)

2026-06-12 17:16:01 +08:00

AGENTS.md

fix(community): Fail closed on delegated fetch backends to close SSRF gap (#6531)

2026-10-10 18:45:58 +08:00

bump_version.sh

fix(release): refresh backend/uv.lock when bumping the version (#5859)

2026-09-25 20:42:27 +08:00

check_agent_guidance.py

fix(ci): fix the Agents.md size check test error (#4978)

2026-08-24 08:52:01 +08:00

check_chart_sandbox_service.sh

fix(helm): default sandbox Services to ClusterIP (#3929) (#4190)

2026-07-16 14:30:05 +08:00

check_chart_sandbox_storage.sh

fix(helm): align provisioner state root for PVC mounts (#5625)

2026-09-23 10:31:17 +08:00

check_chart_skill_upload_size.sh

feat(skills): install local skill archives (#5039)

2026-08-31 15:22:45 +08:00

check_config_version.sh

ci: add nightly build for images + helm chart (#4050)

2026-07-11 18:29:48 +08:00

check-data-not-in-use.sh

fix(make): name what make clean deletes and refuse under a live gateway (#6351)

2026-10-06 15:32:46 +08:00

check.py

fix(check): preserve UTF-8 dependency diagnostics (#6485)

2026-10-08 17:44:10 +08:00

check.sh

feat(dx): Setup Wizard + doctor command — closes #2030 (#2034)

2026-04-10 17:43:39 +08:00

cleanup-containers.sh

feat: send custom event

2026-02-06 17:48:15 +08:00

config-upgrade.sh

fix(config): upgrade the config.yaml the Gateway loads (#5991)

2026-09-29 22:10:29 +08:00

configure.py

fix: make check/config cross-platform for Windows (#1080) (#1093)

2026-03-13 21:33:12 +08:00

deploy.sh

fix(deploy): fail fast when DEER_FLOW_HOME is not writable (dev stack root ownership) (#6488)

2026-10-08 20:20:22 +08:00

detect_blocking_io_static.py

chore(blocking-io): fail-loud repo-root resolution and shared detector CLI shim (#3512)

2026-06-12 17:16:01 +08:00

detect_thread_boundaries.py

chore(blocking-io): fail-loud repo-root resolution and shared detector CLI shim (#3512)

2026-06-12 17:16:01 +08:00

detect_uv_extras.py

fix(channels): point the Discord missing-dependency hint at the discord extra (#6054)

2026-10-01 10:51:37 +08:00

docker.sh

fix(auth): key the compose login lockout by client, not by nginx (#6519)

2026-10-09 17:22:45 +08:00

doctor.py

fix(community): Fail closed on delegated fetch backends to close SSRF gap (#6531)

2026-10-10 18:45:58 +08:00

export_claude_code_oauth.py

fix(scripts): reject invalid Claude Keychain credential containers (#6281)

2026-10-05 15:39:32 +08:00

load_memory_sample.py

feat(memory): bulk-load sample for registered users (#4066)

2026-09-24 09:08:32 +08:00

nginx-local-conf.sh

fix(scripts): bind local make dev and make start to loopback (#6587)

2026-10-10 15:47:30 +08:00

nginx.sh

fix(scripts): bind local make dev and make start to loopback (#6587)

2026-10-10 15:47:30 +08:00

pnpm.py

fix(scripts): prefer Windows .cmd shims for pnpm (#5305)

2026-09-11 18:41:24 +08:00

review_changed_public_skills.py

fix(ci):resolve the skill_review errors (#5121)

2026-08-31 23:17:39 +08:00

run-with-git-bash.cmd

fix: use Git Bash for Windows local startup (#1551)

2026-03-29 21:38:29 +08:00

sandbox_memory_profile.py

chore: add sandbox memory profiling tools (#3249)

2026-06-03 22:02:27 +08:00

scan_changed_blocking_io.py

chore(blocking-io): fail-loud repo-root resolution and shared detector CLI shim (#3512)

2026-06-12 17:16:01 +08:00

serve.sh

fix(scripts): bind local make dev and make start to loopback (#6587)

2026-10-10 15:47:30 +08:00

setup_wizard.py

feat(im): Add user-owned IM channel connections (#3487)

2026-06-12 15:24:58 +08:00

setup-sandbox.sh

fix(setup): accept successful Apple Container image pulls (#5804)

2026-09-24 15:10:25 +08:00

skill_review_waivers.py

ci: preauthorize skill review waiver hashes (#5143)

2026-09-02 16:54:23 +08:00

start-daemon.sh

fix(scripts): invoke repo shell scripts through an explicit interpreter (#5031)

2026-08-29 14:54:02 +08:00

support_bundle.py

fix(support-bundle): locate threads in configured runtime home (#6486)

2026-10-08 20:47:59 +08:00

sync_labels.py

feat(ci): PR/issue auto-labeling + declarative label sync (#3360)

2026-06-03 16:40:24 +08:00

tool-error-degradation-detection.sh

refactor(lead-agent): make build_middlewares public to drop the last cross-module private import (#3458)

2026-06-09 11:56:28 +08:00

verify_versions.sh

fix(release): reject a stale backend/uv.lock in the version gate (#6588)

2026-10-10 14:05:35 +08:00

wait-for-port.sh

Fix 'make dev' failure in Windows environment (#3236)

2026-06-09 22:37:54 +08:00