Release Notes

v3.1.1 — 2026-08-03

• Update the Telegram server's transitive Hono dependency to 4.13.0, fixing GHSA-8j4g-w8fx-2239 (CORS middleware ReDoS).

v3.1.0 — 2026-08-03

• Added a portable CLIProxyAPI account provider with health, account inventory, and utilization support in ops-accounts.
• Standardized CLIProxyAPI discovery across CLIPROXYAPI_AUTH_DIR, CLIPROXYAPI_HOME, and XDG_CONFIG_HOME, with explicit environment configuration for optional proxy endpoints.
• Hardened release automation with required CI and CodeQL checks, bounded GitHub queries, stable-head verification, and exact-SHA squash merges without branch-protection bypass.
• Updated ip-address from 10.2.0 to 10.4.0 in the plugin and Telegram server dependency trees.
• Updated Telegram server fast-uri from 3.1.4 to 3.1.5, including the upstream security fix.
• Preserved existing release notes during first-time and interrupted GitHub wiki synchronization.
• Fixed gateway execution through symlinked or canonical paths and added a clear 503 response when the optional Grok endpoint is not configured.
• Removed ShellCheck warnings from the touched account and release commands.
• Removed deployment-specific browser login, CAPTCHA, reauthentication, and subscription automation from the public plugin.

v3.0.0 — 2026-08-03

Upgraded @hono/node-server to 2.0.12 for security and performance fixes, and aligned the Telegram server minimum runtime to Node.js 20+ (#771).