LocalAI

mirror/LocalAI

0 Fork 0

mirror of https://github.com/mudler/LocalAI.git synced 2026-09-28 17:15:02 -04:00

Files

T

History

localai-org-maint-botandlocalai-org-maint-bot 490b952d06 feat(gallery): publish signed OCI fallbacks (#12182 )

* feat(gallery): publish signed OCI fallbacks

Publish both official gallery indexes with their local base configs so
an outage of the HTTP and GitHub sources can fall back to Quay.

Keep artifact signing policies separate from backend image policies,
and expose each moving gallery tag only after its digest is signed.

Assisted-by: Codex:gpt-6

* fix(gallery): confine packaged files to selected roots

Use directory-scoped file access to reject symlink escapes during gallery packaging. Create private bundle files for the publishing runner.

Assisted-by: Codex:GPT-6

---------

Co-authored-by: localai-org-maint-bot <306269227+localai-org-maint-bot@users.noreply.github.com>

2026-09-27 21:18:38 +02:00

application

fix(gallery): verification follow-ups for oci:// galleries (#12243 )

2026-09-24 21:20:21 +02:00

backend

feat(vllm-cpp): unify decision pipeline through Score RPC with vllm_decide ABI v29 (#12247 )

2026-09-25 23:27:27 +02:00

cli

feat(gallery): galleries published as OCI artifacts (#12167 )

2026-09-21 09:23:05 +02:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087 )