Ettore Di Giacinto 59e3f01739 fix(safehttp): block more cloud metadata addresses and NAT64 ...

Add the Azure wire server (168.63.129.16), Oracle (192.0.0.192) and
Alibaba (100.100.100.200) addresses to the metadata list. The Azure one
is public, so web_fetch reached it. Check the IPv4 address inside a
64:ff9b::/96 address too, so private addresses and metadata addresses
cannot be reached through NAT64 when private addresses are allowed.

Assisted-by: Claude Code:claude-sonnet-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-11-03 08:39:12 +00:00

..

addons

feat(addons): declare typed host capabilities (#13034)

2026-11-02 23:50:40 +00:00

atomicfile

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

audio

feat(localvqe/audio): v1.3 release and add spectrograms to audio transform UI (#10113)

2026-05-31 23:56:46 +02:00

clusterrouting

refactor(routing): extract replica picker into pkg/clusterrouting (#10123)

2026-06-01 09:38:55 +02:00

concurrency

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

credentials

feat(downloads): authenticate registries, galleries and downloads from a credentials file (#12028)

2026-09-13 23:11:40 +02:00

diagnostics

fix(chat): defer model fallback until after binding (#12621)

2026-10-11 00:26:40 +02:00

distributedhdr

feat: prefix-cache-aware routing for distributed mode (#10071)

2026-05-30 23:24:22 +02:00

downloader

feat(addons): list and install backends from a library (#12816)

2026-10-23 01:00:07 +02:00

egresspolicy

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

functions

feat(realtime): LFM3-Audio speech-to-speech on llama.cpp, remove liquid-audio (#12958)

2026-10-29 22:06:41 +01:00

grpc

feat(backends): timestral.cpp forecast backend and /v1/forecast API (#12885)

2026-10-24 22:47:04 +02:00

httpclient

[httpclient] validate redirect targets and pin dialed addresses for user URLs (#12853)

2026-10-23 11:54:42 +02:00

huggingface-api

fix(huggingface): list repos nested more than one directory deep (#12355)

2026-09-29 10:37:31 +02:00

mcp/localaitools

fix(addons): make owner settings authoritative (#13033)

2026-11-02 18:48:39 +01:00

mcpapps

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

mcptransport

fix(mcp): connect to legacy SSE servers (#12304)

2026-10-08 16:41:33 +02:00

model

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

modelartifacts

fix(modelartifacts): reuse committed sibling files for narrowed allow_patterns (#11484)

2026-09-27 21:10:35 +02:00

motion

chore(motion): tidy proto, imports and usecase guess; add weights licence

2026-10-13 08:27:24 +00:00

natsauth

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

oci

feat(addons): installable add-ons foundation and the Tables add-on (#12702)

2026-10-22 17:57:19 +02:00

radixtree

feat: prefix-cache-aware routing for distributed mode (#10071)

2026-05-30 23:24:22 +02:00

reasoning

fix(reasoning): ignore preclosed prompt markers

2026-09-11 22:44:39 +00:00

safefile

fix(distributed): bound ephemeral staging (#11924)

2026-09-08 18:13:40 +02:00

sanitize

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

signals

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

slotcache

feat(llama-cpp): add slot prompt-cache save and restore API (#12730)

2026-10-17 18:23:02 +02:00

sound

fix: correct stale symbol names in doc comments (#12139)

2026-09-19 23:39:44 +02:00

sqlitedb

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

store

fix(backends): refuse foreign model loads in opus and local-store (#10769)

2026-07-11 09:17:34 +02:00

system

feat(addons): run the add-on owner as its own workload (#12867)

2026-10-24 14:29:39 +02:00

tokens

feat(chat): add end-to-end context compression (#11556)

2026-08-18 11:31:03 +00:00

utils

feat(chats): server-side chats with steering, sub-agents and compaction (#12918)

2026-11-01 12:08:23 +01:00

vram

fix(vram): reject oversized GGUF metadata before allocation (#12560)

2026-10-08 09:56:59 +02:00

vrambudget

feat(vram): per-node VRAM allocation budget (LOCALAI_VRAM_BUDGET) (#10833)

2026-07-15 09:58:45 +02:00

web

fix(safehttp): block more cloud metadata addresses and NAT64

2026-11-03 08:39:12 +00:00

xio

feat(xio): make copy buffer size configurable (#11660)

2026-08-21 16:14:26 +02:00

xsync

chore: fix go.mod module (#2635)

2024-06-23 08:24:36 +00:00

xsysinfo

fix(xsysinfo): cap the default thread count by the container CPU limit

2026-10-25 08:43:05 +00:00