localai-org-maint-bot 8e87b078d2 fix(nodes): confine hash sidecar reads and writes ...

A validated model path does not validate its adjacent hash metadata.
Reject symlinked metadata on reads and replace sidecars atomically
through a directory handle, without writing to symlink targets.

Regression tests reproduce forged hashes from external sidecars.
Focused file-transfer tests pass. The targeted gosec scan reports
20 fewer findings; remaining findings are not suppressed.

Assisted-by: Codex:gpt-6

2026-10-01 03:12:40 +00:00

..

advanced

refactor: name the capability decisions instead of systemone

2026-09-30 14:14:09 +00:00

features

fix(nodes): confine hash sidecar reads and writes

2026-10-01 03:12:40 +00:00

getting-started

docs: fix 11 dead links in the documentation (#12320)

2026-09-28 08:33:15 +02:00

operations

Merge PR #12285: feat(failover): serve a model name from a chain of local and remote targets

2026-09-28 15:32:30 +00:00

reference

chore: merge master into distributed transport PR

2026-09-28 12:02:15 +00:00

_index.md

feat(website): split the site, move docs to /docs, add a landing page (#11243)

2026-07-31 09:00:56 +02:00

faq.md

docs(faq): note OPENAI_BASE_URL env var for pointing clients at LocalAI (#11310)

2026-09-11 14:44:18 +02:00

integrations.md

docs: fix 11 dead links in the documentation (#12320)

2026-09-28 08:33:15 +02:00

overview.md

feat(website): split the site, move docs to /docs, add a landing page (#11243)

2026-07-31 09:00:56 +02:00

whats-new.md

docs: point the News page at the blog instead of a stale highlights list

2026-08-03 20:29:50 +00:00