Ettore Di Giacinto 24043fc585 fix(mcp): write alias config 0600 to satisfy gosec G306 ...

The inproc createAlias path wrote the alias YAML with 0644, which gosec
flags as a new G306 finding on the PR. The LocalAI process is the sole
reader/writer of model configs, so 0600 is correct and keeps the scan clean.

Assisted-by: Claude:claude-opus-4-8 [Claude Code]
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-06-20 12:55:31 +00:00

..

audio

feat(localvqe/audio): v1.3 release and add spectrograms to audio transform UI (#10113)

2026-05-31 23:56:46 +02:00

clusterrouting

refactor(routing): extract replica picker into pkg/clusterrouting (#10123)

2026-06-01 09:38:55 +02:00

concurrency

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

distributedhdr

feat: prefix-cache-aware routing for distributed mode (#10071)

2026-05-30 23:24:22 +02:00

downloader

fix(downloader): stall timeout, resume-safe cancel, and stale-partial reaping (#10406)

2026-06-19 21:35:21 +02:00

functions

fix(functions): validate auto-detected XML tool-call names — robust glm-4.5/Hermes guard (#9722, supersedes #9940) (#10059)

2026-05-29 12:03:33 +02:00

grpc

fix(grpc): forward word-level timestamps in AudioTranscription wrapper (#10402)

2026-06-19 14:59:50 +02:00

httpclient

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087)

2026-05-30 12:04:10 +02:00

huggingface-api

Harden gallery-agent Hugging Face fetches against transient rate limiting (#10187)

2026-06-05 23:43:06 +02:00

mcp/localaitools

fix(mcp): write alias config 0600 to satisfy gosec G306

2026-06-20 12:55:31 +00:00

model

feat(vulkan): make Vulkan backends self-contained on the GPU (#10404)

2026-06-19 17:16:33 +02:00

natsauth

feat(distributed): Add NATS JWT authentication and TLS/mTLS options (#10159)

2026-06-03 19:43:56 +02:00

oci

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087)

2026-05-30 12:04:10 +02:00

radixtree

feat: prefix-cache-aware routing for distributed mode (#10071)

2026-05-30 23:24:22 +02:00

reasoning

fix(reasoning): stop prefilled <think> from swallowing tag-less answers (#10225)

2026-06-09 09:02:04 +02:00

sanitize

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

signals

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

sound

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

store

feat(middleware): Model routing, PII filtering, Cloud model proxies (#9802)

2026-05-25 09:28:27 +02:00

system

feat(importer): expand importer flow to almost all backends (#9466)

2026-04-22 22:42:37 +02:00

utils

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087)

2026-05-30 12:04:10 +02:00

vram

fix(config): skip vocab arrays and mmap GGUF headers to speed up startup (#10213)

2026-06-07 23:33:52 +02:00

xio

feat(ui): allow to cancel ops (#7264)

2025-11-13 18:41:47 +01:00

xsync

chore: fix go.mod module (#2635)

2024-06-23 08:24:36 +00:00

xsysinfo

fix(xsysinfo): container-aware total RAM detection (cgroup/lxcfs) (#8059) (#10288)

2026-06-13 18:13:06 +02:00