Ettore Di Giacinto ed6e677640 fix(gosec): tighten file modes and annotate false positives ...

Write job state, configs and imported models with mode 0600, clean
the paths that are read from disk, and mark the route tables, the
header name and the retry jitter as reviewed false positives.

Assisted-by: Claude Code:claude-sonnet-5-5 gosec
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-10-20 20:54:43 +00:00

..

addons

fix(gosec): tighten file modes and annotate false positives

2026-10-20 20:54:43 +00:00

audio

feat(localvqe/audio): v1.3 release and add spectrograms to audio transform UI (#10113)

2026-05-31 23:56:46 +02:00

clusterrouting

refactor(routing): extract replica picker into pkg/clusterrouting (#10123)

2026-06-01 09:38:55 +02:00

concurrency

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

credentials

feat(downloads): authenticate registries, galleries and downloads from a credentials file (#12028)

2026-09-13 23:11:40 +02:00

diagnostics

fix(chat): defer model fallback until after binding (#12621)

2026-10-11 00:26:40 +02:00

distributedhdr

feat: prefix-cache-aware routing for distributed mode (#10071)

2026-05-30 23:24:22 +02:00

downloader

fix(oci): stage image downloads in a configured directory, not in /tmp (#12280)

2026-10-05 01:27:45 +02:00

functions

fix(functions): honor function_arguments_key when building the tool grammar (#11677)

2026-09-28 00:52:51 +02:00

grpc

feat(sound): expand Simple prompts with chat (#12772)

2026-10-19 18:16:20 +02:00

httpclient

Revert "chore(tests): Avoid network, sleep and more during tests" (#11601)

2026-08-19 16:39:39 +02:00

huggingface-api

fix(huggingface): list repos nested more than one directory deep (#12355)

2026-09-29 10:37:31 +02:00

mcp/localaitools

fix(distributed): bound, stop and cancel model loads with leases and worker operations (#12524)

2026-10-07 16:59:56 +02:00

mcptransport

fix(mcp): connect to legacy SSE servers (#12304)

2026-10-08 16:41:33 +02:00

model

feat(tts): stream Qwen text and add assistant preset (#12770)

2026-10-19 12:30:52 +02:00

modelartifacts

fix(modelartifacts): reuse committed sibling files for narrowed allow_patterns (#11484)

2026-09-27 21:10:35 +02:00

motion

chore(motion): tidy proto, imports and usecase guess; add weights licence

2026-10-13 08:27:24 +00:00

natsauth

fix(distributed): aggregate prefix cache pressure

2026-09-11 21:48:07 +00:00

oci

feat(addons): add the add-on runtime, navigation and first-party add-ons

2026-10-20 20:54:43 +00:00

radixtree

feat: prefix-cache-aware routing for distributed mode (#10071)

2026-05-30 23:24:22 +02:00

reasoning

fix(reasoning): ignore preclosed prompt markers

2026-09-11 22:44:39 +00:00

safefile

fix(distributed): bound ephemeral staging (#11924)

2026-09-08 18:13:40 +02:00

sanitize

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

signals

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

slotcache

feat(llama-cpp): add slot prompt-cache save and restore API (#12730)

2026-10-17 18:23:02 +02:00

sound

fix: correct stale symbol names in doc comments (#12139)

2026-09-19 23:39:44 +02:00

store

fix(backends): refuse foreign model loads in opus and local-store (#10769)

2026-07-11 09:17:34 +02:00

system

fix(backends): prefer installed development builds (#12782)

2026-10-19 22:58:38 +02:00

tokens

feat(chat): add end-to-end context compression (#11556)

2026-08-18 11:31:03 +00:00

utils

feat(addons): add the add-on runtime, navigation and first-party add-ons

2026-10-20 20:54:43 +00:00

vram

fix(vram): reject oversized GGUF metadata before allocation (#12560)

2026-10-08 09:56:59 +02:00

vrambudget

feat(vram): per-node VRAM allocation budget (LOCALAI_VRAM_BUDGET) (#10833)

2026-07-15 09:58:45 +02:00

xio

feat(xio): make copy buffer size configurable (#11660)

2026-08-21 16:14:26 +02:00

xsync

chore: fix go.mod module (#2635)

2024-06-23 08:24:36 +00:00

xsysinfo

fix(xsysinfo): read process VRAM without proc children (#12482)

2026-10-05 01:37:12 +02:00