Ettore Di Giacinto c44abe40e8 fix(realtime): clean TTS temp path before read (gosec G304) ...

emitSpeech reads the WAV file the TTS backend wrote. The read moved here
from realtime.go, so code-scanning flagged it as a new G304 alert even
though the path is backend-controlled (a temp file), not user input.
Wrap it in filepath.Clean — a real path normalization that also clears
the alert, keeping with the repo's no-#nosec convention.

Assisted-by: Claude:claude-opus-4-8 gosec, golangci-lint
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-06-10 16:05:10 +01:00

..

application

fix: distributed backend reinstall/upgrade UI stuck on 'reinstalling' (#10214)

2026-06-08 10:03:02 +02:00

backend

feat: forward reasoning_effort to the backend so jinja models honor it (#10184)

2026-06-05 13:45:43 +00:00

cli

feat(realtime): make WebRTC ICE candidates configurable (#10231)

2026-06-09 22:28:03 +02:00

clients

…

config

fix(realtime): register pipeline streaming/thinking config fields

2026-06-10 16:02:30 +01:00

dependencies_manager

…

explorer

…

gallery

…

http

fix(realtime): clean TTS temp path before read (gosec G304)

2026-06-10 16:05:10 +01:00

p2p

…

schema

…

services

fix(distributed): track in-flight for non-LLM inference methods (VAD, diarize, voice, ...) (#10238)

2026-06-10 16:29:50 +02:00

startup

…

templates

…

trace

…