Skip to content

v0.14.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Jul 15:05
v0.14.0
This tag was signed with the committer’s verified signature.
CybotTM Sebastian Mendel
SSH Key Fingerprint: NOxv8dcZlMFz3wrLdHILVNSnF6xskqAjN3bnn0i7K30
Verified
Learn about vigilant mode.
bc03bfb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This release adds a Skills and Tools system, hardens the backend across security and accessibility, and makes CI actually exercise the functional and end-to-end suites.

Skills

Ingest SKILL.md files from GitHub — SHA-pinned, admin-reviewed, and disabled by default — then attach them to tasks and configurations. Attached skills are composed into text-generation prompts within a token budget, with integrity verification. A backend module manages sources and the review flow. (ADR-035, ADR-036)

Tools

A function-calling tool runtime: a model can run a bounded agent loop over an admin-curated, permission-gated set of tools, with a per-run allow-list. Tools are enabled or disabled individually, there is a built-in system tool set, and an interactive tool playground lets administrators try them live in the backend. (ADR-038)

Providers

Together AI, Fireworks AI and Perplexity are now first-class OpenAI-compatible providers. Provider endpoints entered in the Setup Wizard or the record editor are canonicalized on save, so they no longer break when stored without an API version path (for example OpenAI's /v1).

Security and accessibility

A multi-lens hardening pass: the Gemini API key is sent via header instead of the URL, CSRF tokens are required on backend AJAX endpoints, those endpoints require an admin user, SSRF gaps are closed, tool execution enforces the acting user's permissions, and provider inputs are clamped. Icon-only controls gain text alternatives, status badges gain screen-reader text, and EN/DE translations cover the backend, AJAX and wizard flows.

Continuous integration

The functional and backend end-to-end suites now run on every event and gate merges — previously they were skipped entirely (#272).

Breaking change

Custom ToolInterface implementations must now declare a requiresAdmin(): bool method — return true for tools that expose system, host, or cross-user data, false for tools that self-enforce the acting user's TYPO3 permissions. Without it, the tool fails at runtime. (ADR-038)

Contributors

For the complete, itemised list of 40+ merged pull requests, see the CHANGELOG.

Installation

composer require netresearch/nr-llm

Publication status

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-llm-0.14.0.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-llm-0.14.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

Assets 12
Loading