Repository navigation
v1.5.9
Published to npm as @groeponline/opencodex@1.5.9 with dist-tag latest.
What's Changed
New Features
- perf(server): cache request-log service-tier metadata and harden secret comparisons by MisterWanted in #390
- feat(logs): record client address and user-agent on request log entries by OnlineChef (@ChefGroep) in #403
- feat(gui): unify provider SVG artwork and theme-aware icons by OnlineChef (@ChefGroep) in #404
Bug Fixes
- fix: recover stale GUI chunks and dispatch stable private deployments by MisterWanted in #370
- fix: persist Claude Desktop container library by OnlineChef (@ChefGroep) in #377
- fix(test): make full Windows CI release gate deterministic by OnlineChef (@ChefGroep) in #381
- fix(test): surface suite hangs and add informational coverage by MisterWanted in #388
- fix(runtime): make codex shim and update-job writes crash-safe by MisterWanted in #386
- fix(service): run launchctl and systemctl via argv instead of a shell by MisterWanted in #383
- fix(update): clarify restart instructions for externally managed tunnels by OnlineChef (@ChefGroep) in #376
- fix(oauth): compare CSRF state as fixed-size digests by MisterWanted in #392
- fix(server): relay oversized upstream error bodies verbatim; rebase #385 onto main by MisterWanted in #391
- fix(server): bound upstream response body reads on the request path by MisterWanted in #385
- fix(release): ignore inherited upstream tags and use published baseline by OnlineChef (@ChefGroep) in #396
- fix(release): provision GUI dependencies before release preflight by OnlineChef (@ChefGroep) in #397
- fix(providers): refresh Cloudflare Workers AI model seed + reasoning metadata by MisterWanted in #399
- fix(opencode): send admin token on /api/models catalog fetch by OnlineChef (@ChefGroep) in #402
- fix(logs): prevent User-Agent credential retention and recover peer attribution (#403) by OnlineChef (@ChefGroep) in #407
- fix(windows): diagnose live Codex shim restore lock failure by OnlineChef (@ChefGroep) in #398
Documentation
- docs(release): retire jan label, correct tokenless claim, note fallback provenance by MisterWanted in #393
Chores
- test(ci): robust Windows proxy startup probes by OnlineChef (@ChefGroep) in #382
- ci: retire legacy publish-on-tag npm workflow by MisterWanted in #384
- ci: harden workflow permissions and share the Bun version by MisterWanted in #389
- refactor(sse): route hand-rolled SSE parsing through one bounded decoder by MisterWanted in #387
- chore(research): offline autoresearch harness for the next .1 (draft, post-v1.5.3) by MisterWanted in #334
- test(ci): raise the coverage hang-kill boundary via OCX_TEST_KILL_AFTER_MS by MisterWanted in #394
- ci(release): automatically ship npm and multi-arch GHCR after main merges by OnlineChef (@ChefGroep) in #395
- chore(deps): config cleanup and in-range dependency refresh by MisterWanted in #400
- ci(gui): require rendered screenshot showcase in UI PRs by OnlineChef (@ChefGroep) in #406
Commits
- fix(windows): diagnose live Codex shim restore lock failure (#398) (8c1d1f4)
- fix(logs): prevent User-Agent credential retention and recover peer attribution (#403) (#407) (1fab1dc)
- ci(gui): require rendered screenshot showcase in UI PRs (#406) (740ebcd)
- feat(gui): unify provider SVG artwork and theme-aware icons (#404) (b8b23e6)
- feat(logs): record client address and user-agent on request log entries (#403) (2ddc90e)
- fix(opencode): send admin token on /api/models catalog fetch (#402) (617a1ad)
- Merge pull request #400 from GroepOnline/chore/config-cleanup-upgrade (a6597e4)
- test(local-dev): anchor the shared Bun pin against a longer version (10ad4bf)
- fix(providers): refresh Cloudflare Workers AI model seed + reasoning metadata (#399) (163fe0e)
- chore(deps): align Bun pins and refresh in-range dependencies (5fb82fc)
- release: v1.5.9 (613b554)
- fix(release): install GUI dependencies before release preflight (#397) (55a5288)
- fix(release): use published release baseline, not inherited upstream tags (d544736)
- ci(release): publish npm and verified multi-arch GHCR from main (f8fbba7)
- Merge pull request #391 from GroepOnline/fix/bounded-error-body-relay-20261018 (5ce167a)
- Merge pull request #394 from GroepOnline/fix/test-hang-boundary-override-20261018 (4b7893a)
- Merge pull request #393 from GroepOnline/fix/release-fallback-docs-20261018 (032461a)
- Merge pull request #392 from GroepOnline/fix/oauth-state-digest-compare-20261018 (955af9d)
- test(server): relay oversized upstream error bodies verbatim via a tee probe (f059d98)
- Merge PR #385 (bound upstream response body reads) after the SSE decoder refactor (fca2ddd)
- fix(oauth): compare CSRF state as fixed-size digests (033425a)
- test(ci): raise the coverage hang-kill boundary via OCX_TEST_KILL_AFTER_MS (4966465)
- docs(release): drop the retired jan runner label and note missing fallback provenance (102f08d)
- Merge pull request #334 from GroepOnline/feat/autoresearch-harness-20261009 (cb1be1d)
- Merge pull request #376 from GroepOnline/fix/conditional-restart-advice-20261015 (85fab1a)
- Merge pull request #390 from WantedCh/MisterWanted/server-catalog-auth-hardening (de57249)
- Merge pull request #383 from WantedCh/MisterWanted/service-argv-exec (1924398)
- Merge pull request #386 from WantedCh/MisterWanted/crash-safe-writes (3d031a7)
- Merge pull request #387 from WantedCh/MisterWanted/sse-decoder-hardening (3390345)
- Merge pull request #388 from WantedCh/MisterWanted/test-runner-hang-visibility (8b6ead0)
- Merge pull request #389 from WantedCh/MisterWanted/ci-workflow-hygiene (06a9b16)
- Merge pull request #384 from WantedCh/MisterWanted/retire-publish-on-tag (ca73156)
- docs(research): correct stale tag, target inventory and guard coverage claims (7d0acb3)
- fix(update): keep restart advice tunnel-safe in the prompt path and tests (241329b)
- fix(sse): dispatch complete JSON data lines without a blank delimiter (a9317e0)
- fix(update): base restart advice on local runtime state and test it (f666159)
- docs(release): describe every NPM_TOKEN fallback trigger (7bccb6a)
- test(server): expect the bounded envelope for an oversized pool 400 (ea1802b)
- fix(service): run the system-unit systemctl probe via argv (40f709d)
- fix(server): harden admission and CSRF secret comparisons (0bf21af)
- ci: harden workflow permissions and share the Bun version (297cead)
- perf(server): cache request-log service-tier metadata (b120288)
- fix(test): surface suite hangs and add informational coverage (d95e4b4)
- refactor(sse): route hand-rolled SSE parsing through one bounded decoder (343169f)
- fix(runtime): make codex shim and update-job writes crash-safe (1383f77)
- fix(server): bound upstream response body reads on the request path (1445b3e)
- ci: retire legacy publish-on-tag npm workflow (77044ff)
- fix(service): run launchctl and systemctl via argv instead of a shell (cb19dc4)
- refactor(research): simplify target validation and startup probing (7e41cee)
- test(ci): stabilize Windows proxy fixture readiness (#382) (f41a765)
- fix(test): stabilize cross-platform release verification (#381) (2e9ac25)
- fix: persist Claude Desktop container library (#377) (4449660)
- fix: recover stale GUI chunks and dispatch stable private deployments (#370) (db33b9e)
- fix(update): make proxy restart guidance conditional for tunnel clients (fb86354)
- chore: trigger CI to re-run CodeFactor check (2a2fadc)
- feat(research): add measurement harness, targets, and unit tests (ef27cfb)
- chore(research): scaffold autoresearch harness rules and layout (aa03ff2)
Full Changelog: v1.5.8...v1.5.9