Skip to content

Sub2API 2026.05.20

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 May 03:47
· 78 commits to main since this release
v2026.05.20
37e71d1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

AI API Gateway Platform - 将 AI 订阅配额分发和管理

  • fix(payment): orders display per-order currency symbol (USD/HKD/EUR/etc.) instead of hardcoded ¥ (#30)
  • ci: enable CodeQL code scanning for Go and JS/TS, layered on top of gosec + Semgrep (#31)
  • fix(security): DOMParser-based heading text extraction for TOC, resolves js/incomplete-multi-character-sanitization (#32)
  • fix(security): cap admin payment dashboard days query at 366 and drop dead compat_turn_state log branch (#33)
  • chore: dismiss historical OAuth/log/SSRF code-scanning alerts as false positives after triage against existing defenses (logger.With CRLF sanitization, urlvalidator allowlist, sanitizeEmailHeader, resolvePageImagePath containment checks)

📥 Installation

Docker:

# GitHub Container Registry
docker pull ghcr.io/shudonglin/sub2api:2026.05.20

One-line install (Linux):

curl -sSL https://raw.githubusercontent.com/shudonglin/sub2api/main/deploy/install.sh | sudo bash

Manual download:
Download the appropriate archive for your platform from the assets below.

📚 Documentation

Assets 8
Loading