LIghtJUNction 7b22e56252 security: remove legacy SHA256/MD5 password verification and fix API key logging ...

- Remove insecure SHA256/MD5 password hash verification from cmd_conf.py
  (rejection logic for storing legacy hashes is preserved)
- Remove API key logging from gemini_source.py, openai_source.py
- Remove header logging (contains Authorization header) from volcengine_tts.py

CodeQL issues fixed:
- Broken cryptographic hash (SHA256/MD5 for passwords)
- Clear-text logging of sensitive information (API keys)

2026-03-29 15:48:38 +08:00

..

agent

feat(core): add ToolSessionManager for stateful tool execution

2026-03-29 15:40:57 +08:00

backup

docs: replace prints with logger in upload_doc_images_to_r2.py

2026-03-19 23:30:25 +08:00

computer

feat(core): add ToolSessionManager for stateful tool execution

2026-03-29 15:40:57 +08:00

config

chore: bump version to 4.25.0

2026-03-29 15:46:11 +08:00

cron

Feat/sdk integration (#6807)

2026-03-22 22:44:05 +08:00

db

style: apply ruff --unsafe-fixes for common issues

2026-03-24 16:36:46 +08:00

knowledge_base

refactor(dashboard): remove unused sha256 utility

2026-03-23 20:38:43 +08:00

message

docs: replace prints with logger in upload_doc_images_to_r2.py

2026-03-19 23:30:25 +08:00

pipeline

feat(core): add ToolSessionManager for stateful tool execution

2026-03-29 15:40:57 +08:00

platform

merge: pull latest master into dev

2026-03-28 12:14:10 +08:00

provider

security: remove legacy SHA256/MD5 password verification and fix API key logging

2026-03-29 15:48:38 +08:00

skills

merge: 合并 master 分支 (webui 改进和 attachment recovery)

2026-03-27 00:27:03 +08:00

star

feat(core): add ToolSessionManager for stateful tool execution

2026-03-29 15:40:57 +08:00

tools

chore: apply ruff format to codebase

2026-03-24 10:14:28 +08:00

utils

refactor(dashboard): remove unused sha256 utility

2026-03-23 20:38:43 +08:00

__init__.py

Revert SDK integration, fix test paths, restore original code

2026-03-23 01:56:39 +08:00

astr_agent_context.py

重构：彻底放弃md5保存密码

2026-03-21 00:09:58 +08:00

astr_agent_hooks.py

Feat/sdk integration (#6807)

2026-03-22 22:44:05 +08:00

astr_agent_run_util.py

Revert "feat: SDK integration and various improvements"

2026-03-23 01:18:03 +08:00

astr_agent_tool_exec.py

feat(core): add ToolSessionManager for stateful tool execution

2026-03-29 15:40:57 +08:00

astr_main_agent_resources.py

style: apply ruff --unsafe-fixes for common issues

2026-03-24 16:36:46 +08:00

astr_main_agent.py

feat(core): add ToolSessionManager for stateful tool execution

2026-03-29 15:40:57 +08:00

astrbot_config_mgr.py

chore: apply ruff format to codebase

2026-03-24 10:14:28 +08:00

astrbot_config_mgr.py.tmp.384899.1774276528543

feat: add integration tests infrastructure and MCP echo server fixture

2026-03-23 23:01:55 +08:00

conversation_mgr.py

Feat/sdk integration (#6807)

2026-03-22 22:44:05 +08:00

core_lifecycle.py

feat: add two-phase startup lifecycle (#6942)

2026-03-25 23:48:49 +08:00

event_bus.py

fix(core): event bus and pipeline stage updates

2026-03-22 19:08:56 +08:00

exceptions.py

…

file_token_service.py

docs: replace prints with logger in upload_doc_images_to_r2.py

2026-03-19 23:30:25 +08:00

initial_loader.py

feat: add two-phase startup lifecycle (#6942)

2026-03-25 23:48:49 +08:00

log.py

Revert "feat: SDK integration and various improvements"

2026-03-23 01:18:03 +08:00

persona_error_reply.py

feat: support persona custom error reply message with fallback (#5547)

2026-02-28 13:34:12 +09:00

persona_mgr.py

refactor(dashboard): remove unused sha256 utility

2026-03-23 20:38:43 +08:00

platform_message_history_mgr.py

Revert SDK integration, fix test paths, restore original code

2026-03-23 01:56:39 +08:00

sentinels.py

feat: support persona custom error reply message with fallback (#5547)

2026-02-28 13:34:12 +09:00

subagent_orchestrator.py

Revert "feat: SDK integration and various improvements"

2026-03-23 01:18:03 +08:00

tool_provider.py

feat: Introduce cron job management and refactor tool provisioning with dedicated providers for computer-use runtimes.

2026-03-10 21:05:09 +08:00

umop_config_router.py

docs: replace prints with logger in upload_doc_images_to_r2.py

2026-03-19 23:30:25 +08:00

updator.py

docs: replace prints with logger in upload_doc_images_to_r2.py

2026-03-19 23:30:25 +08:00

zip_updator.py

docs: replace prints with logger in upload_doc_images_to_r2.py

2026-03-19 23:30:25 +08:00