-
v0.6.2 — 8 Bug Fixes + 4 Dep Bumps
Release / Desktop / macOS ARM64 (push) Has been cancelledRelease / Desktop / Windows ARM64 (push) Has been cancelledRelease / Desktop / macOS x86_64 (push) Has been cancelledRelease / Desktop / Windows x86_64 (push) Has been cancelledRelease / Desktop / Linux x86_64 (push) Has been cancelledRelease / CLI / aarch64-apple-darwin (push) Has been cancelledRelease / CLI / x86_64-apple-darwin (push) Has been cancelledRelease / CLI / aarch64-unknown-linux-gnu (push) Has been cancelledRelease / CLI / armv7-unknown-linux-gnueabihf (push) Has been cancelledRelease / CLI / x86_64-unknown-linux-gnu (push) Has been cancelledRelease / CLI / aarch64-pc-windows-msvc (push) Has been cancelledRelease / CLI / x86_64-pc-windows-msvc (push) Has been cancelledRelease / Docker Image (push) Has been cancelled发布于
2026-04-29 17:40:27 +00:00 | 80 次提交 在此版本后已推送到 mainThis release resolves 8 community-reported issues and ships 4 dependency bumps. All changes verified with cargo clippy clean and 2517 tests passing.
Security:
- #1060 SSRF protection unified for WASM host calls. IPv6 bracket form parsed correctly. Adds Alibaba and Azure metadata IP blocks. Honours ssrf_allowed_hosts on the WASM path. CIDR allowlist support.
- #1132 exec_policy.mode = "full" now actually takes effect. Edits to ~/.openfang/config.toml propagate to existing agents on restart instead of being silently ignored by the cached DB value.
Channels:
- #1100 Telegram errors propagate. send_message, send_photo, send_document, send_voice, send_location all return Err on HTTP failure instead of warn-and-Ok. Terminal reaction errors cached per chat to avoid retry loops.
- #1095 MCP stdio servers get HOME, TMP, TEMP env vars on Linux and macOS. Fixes EACCES errors with npx-based MCP servers.
- #1058 Trader hand dashboard CSS fixed. position: relative on .trader-chart-panel confines the empty-state overlay correctly.
- #1127 BindingMatchRule.channel_id field added with serde(default). Channel-scoped routing now supported. Struct also gains deny_unknown_fields.
Code Quality:
- #1091 Five clippy warnings fixed. collapsible_match in gemini, openai drivers and 13 CLI files. sort_by replaced with sort_by_key + Reverse in session_repair.
- #1126 Provider env tests stabilised. New EnvVarGuard with shared mutex prevents the cross-test race that flaked NOVITA_API_KEY assertions.
Dependencies:
- uuid 1.23.0 to 1.23.1
- rustls 0.23.37 to 0.23.39
- libc 0.2.183 to 0.2.185
- lettre 0.11.20 to 0.11.21
Stats:
- 2517 tests passing
- Zero clippy warnings (workspace, all targets)
- Zero regressions
Full Changelog: https://github.com/RightNow-AI/openfang/compare/v0.6.1...v0.6.2
下载附件