Ettore Di Giacinto 9ec1456ec6 fix(realtime): clean TTS temp path before read (gosec G304) ...

emitSpeech reads the WAV file the TTS backend wrote. The read moved here
from realtime.go, so code-scanning flagged it as a new G304 alert even
though the path is backend-controlled (a temp file), not user input.
Wrap it in filepath.Clean — a real path normalization that also clears
the alert, keeping with the repo's no-#nosec convention.

Assisted-by: Claude:claude-opus-4-8 gosec, golangci-lint
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-06-05 14:03:36 +00:00

..

application

feat(distributed): Add NATS JWT authentication and TLS/mTLS options (#10159)

2026-06-03 19:43:56 +02:00

backend

feat: forward reasoning_effort to the backend so jinja models honor it (#10184)

2026-06-05 13:45:43 +00:00

cli

feat(distributed): enforce registration token for worker file transfer (#10183)

2026-06-05 14:34:28 +02:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087)

2026-05-30 12:04:10 +02:00

config

fix(realtime): register pipeline streaming/thinking config fields

2026-06-05 14:03:36 +00:00

dependencies_manager

feat(ui): move to React for frontend (#8772)

2026-03-05 21:47:12 +01:00

explorer

feat(middleware): Model routing, PII filtering, Cloud model proxies (#9802)

2026-05-25 09:28:27 +02:00

gallery

feat(parakeet-cpp): add NVIDIA NeMo Parakeet ASR backend (parakeet.cpp) (#10084)

2026-05-30 14:46:10 +02:00

http

fix(realtime): clean TTS temp path before read (gosec G304)

2026-06-05 14:03:36 +00:00

p2p

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

schema

feat(tts): support per-request instructions and params (#10172)

2026-06-04 11:45:02 +02:00

services

feat(distributed): enforce registration token for worker file transfer (#10183)

2026-06-05 14:34:28 +02:00

startup

feat(gallery): verify backend OCI images with keyless cosign (#9823)

2026-05-18 08:02:20 +02:00

templates

fix(openresponses): populate Content and accept bare {role,content} items (#10039) (#10040)

2026-05-28 07:21:48 +00:00

trace

feat(middleware): Model routing, PII filtering, Cloud model proxies (#9802)

2026-05-25 09:28:27 +02:00