Skip to content

v0.1.1 — input hardening and vendor-neutral docs

Choose a tag to compare

View all tags
@airouter-dev airouter-dev released this 28 Jul 22:46
v0.1.1
45d030e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.1.1 hardens request-boundary validation and makes the package documentation and release pipeline fully vendor-neutral.

Security

  • Reject invalid UTF-8, non-printing Unicode characters, surrounding whitespace, and model IDs longer than 256 bytes before an opt-in chat request.
  • Reject authenticated API keys containing CR or LF before constructing or sending an HTTP request.
  • Add regression coverage for same-origin and cross-origin redirects, TLS failures, unauthenticated mode, terminal-control inputs, and byte-length boundaries.

Release assurance

  • Keep the runtime dependency-free: the CLI uses only the Go standard library.
  • Test the Go 1.22.0 minimum on Ubuntu and Go 1.26.5 on Ubuntu, macOS, and Windows.
  • Run formatting, go vet, the race detector, and pinned govulncheck; the release commit passed every required check with no known vulnerabilities reported.
  • Pin GitHub Actions to immutable commit SHAs and publish from verified main commit 45d030e1035c80fe4f4f37b3194be5479dc5b7e7.

Documentation

  • Add a complete English README alongside the Chinese documentation.
  • Document the compatibility contract, output schema, exit codes, privacy boundaries, threat model, and CI usage.
  • Remove provider rewards, referral links, campaign parameters, and uninitialized mirror claims from the package README.

Install the exact version:

go install github.com/airouter-dev/openai-compatible-api-smoke-test/cmd/oai-smoke@v0.1.1

The default operation remains a read-only GET /models check. A chat request is sent only with both --chat and an explicit --model.

Assets 2
Loading