466 Commits
Author SHA1 Message Date
github-actions[bot] 9c074b3ee9 bot: update model pricing from LiteLLM [skip ci] 2026-09-14 11:02:00 +00:00
whit3rabbit 76ac148840 fix(policy): fail closed for direct route-scoped access (#50) 2026-09-13 18:54:48 -05:00
whit3rabbit 1650927fd1 chore(release): bump version to 0.16.2 2026-09-12 09:33:55 -05:00
whit3rabbit 4ff1e94153 Merge PR #49: chore(deps): bump react-router and react-router-dom in /crates/proxy/admin-ui 2026-09-12 09:28:02 -05:00
whit3rabbit ae3e0e268d fix(policy): preserve backend prefix route scoping fallback 2026-09-12 09:27:38 -05:00
dependabot[bot] f48e82450b chore(deps): bump react-router and react-router-dom
Bumps [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) to 7.18.3 and updates ancestor dependency [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom). These dependencies need to be updated together.


Updates `react-router` from 6.30.6 to 7.18.3
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router@7.18.3/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.18.3/packages/react-router)

Updates `react-router-dom` from 6.30.6 to 7.18.3
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.3/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.3/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: react-router
  dependency-version: 7.18.3
  dependency-type: indirect
- dependency-name: react-router-dom
  dependency-version: 7.18.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-12 14:18:41 +00:00
whit3rabbit d4676a056e Merge PR #37: bump js-yaml from 4.3.1 to 4.3.2 2026-09-12 09:18:16 -05:00
whit3rabbit 38a9dcb7e7 Merge PR #36: bump colord from 2.9.3 to 2.10.0 2026-09-12 09:18:05 -05:00
whit3rabbit 3ddff97511 Merge PR #34: bump @humanfs/node from 0.16.7 to 0.16.8 2026-09-12 09:17:53 -05:00
whit3rabbit 2e4ac76c34 Merge PR #33: bump decode-uri-component and query-string 2026-09-12 09:17:42 -05:00
whit3rabbit c7efb724bb Merge PR #32: bump mermaid from 11.15.0 to 11.16.1 in /crates/proxy/admin-ui 2026-09-12 09:17:28 -05:00
whit3rabbit 36294ba345 Merge PR #35: bump react-router-dom from 6.30.4 to 6.30.6 2026-09-12 09:17:15 -05:00
whit3rabbit 94a5cdba97 Merge PR #48: Account for Anthropic web search costs 2026-09-12 09:17:07 -05:00
whit3rabbit b58005fbe9 Merge PR #46: fix: stop printing admin token in startup banner 2026-09-12 09:12:58 -05:00
whit3rabbit 2d6183b3c8 Merge PR #45: fix(proxy): enforce exact route scopes 2026-09-12 09:11:11 -05:00
whit3rabbit 89cf5d6e4e Merge PR #47: fix: harden PR visual recap workflow 2026-09-12 09:09:43 -05:00
whit3rabbit 49a6c9e60b Merge PR #44: ci: verify crate ownership on publish reruns 2026-09-12 09:09:33 -05:00
whit3rabbit 3f800111a3 Merge PR #43: fix(security): avoid open relay in Makefile run targets 2026-09-12 09:09:24 -05:00
whit3rabbit eef6f7a70f Merge PR #41: fix: reject unauthenticated loopback requests 2026-09-12 09:08:41 -05:00
whit3rabbit 27566a65c0 Merge PR #39: fix(router): constrain explicit model picks 2026-09-12 09:08:26 -05:00
whit3rabbit 9cd5823545 Merge PR #42: fix: enforce virtual key policy after auto routing 2026-09-12 09:07:49 -05:00
whit3rabbit c927fe3b3c Merge PR #40: Restore realtime model pricing to prevent virtual-key budget bypass 2026-09-12 09:07:04 -05:00
whit3rabbit 5834a65e61 Merge PR #38: fix: restore Gemini live-preview pricing to prevent virtual-key billing bypass 2026-09-12 09:04:55 -05:00
whit3rabbit dfef654edb fix: harden PR visual recap workflow 2026-09-12 08:59:40 -05:00
whit3rabbit b633f3ab9e fix(proxy): enforce exact route scopes 2026-09-12 08:58:59 -05:00
whit3rabbit 4451767b13 ci: verify crate ownership on publish reruns 2026-09-12 08:58:46 -05:00
whit3rabbit 68bb5dea7c fix(security): avoid open relay in make run targets 2026-09-12 08:58:36 -05:00
whit3rabbit b6e1764321 fix: enforce virtual key policy after auto routing 2026-09-12 08:58:24 -05:00
whit3rabbit 201d7ea5cd fix: reject unauthenticated loopback requests 2026-09-12 08:58:06 -05:00
whit3rabbit 5f9381b2fe fix: restore realtime model pricing 2026-09-12 08:57:42 -05:00
whit3rabbit 74c03691a5 fix(router): constrain explicit model picks 2026-09-12 08:57:26 -05:00
whit3rabbit c198113e7c fix: restore Gemini live preview pricing 2026-09-12 08:57:09 -05:00
whit3rabbit 4c6d3beb7c chore(deps): update h2 to 0.4.19 (RUSTSEC-2026-0258) v0.16.1 2026-09-11 20:42:52 -05:00
whit3rabbit dbf69c9dd8 fix(proxy): allow clippy::result_large_err on middleware response handlers 2026-09-11 20:30:33 -05:00
dependabot[bot] dc9ac6b28a chore(deps-dev): bump js-yaml in /crates/proxy/admin-ui
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.1 to 4.3.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.3.1...4.3.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-12 01:19:41 +00:00
whit3rabbit e1baa617eb docs: add comparison with litelm 2026-09-11 20:18:18 -05:00
whit3rabbit a05d055e3f docs(release): bump version references to 0.16.1 in README and optimizer crates 2026-09-11 20:18:18 -05:00
whit3rabbit b916225ca0 chore(release): prepare CHANGELOG for 0.16.1 2026-09-11 20:18:18 -05:00
whit3rabbit 4c45d33e55 feat(translator): add Role::System, normalize_anthropic_request_json, bump 0.16.1 2026-09-11 20:18:18 -05:00
dependabot[bot] debb23999a chore(deps): bump colord from 2.9.3 to 2.10.0 in /crates/proxy/admin-ui
Bumps [colord](https://github.com/omgovich/colord) from 2.9.3 to 2.10.0.
- [Release notes](https://github.com/omgovich/colord/releases)
- [Changelog](https://github.com/omgovich/colord/blob/master/CHANGELOG.md)
- [Commits](https://github.com/omgovich/colord/commits/v2.10)

---
updated-dependencies:
- dependency-name: colord
  dependency-version: 2.10.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-11 05:59:06 +00:00
dependabot[bot] 446519ee9f chore(deps): bump react-router-dom in /crates/proxy/admin-ui
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 6.30.4 to 6.30.6.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@6.30.6/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@6.30.6/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: react-router-dom
  dependency-version: 6.30.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-08 17:29:47 +00:00
github-actions[bot] 55910949c2 bot: update model pricing from LiteLLM [skip ci] 2026-09-07 10:48:55 +00:00
dependabot[bot] 2a4f4d0a03 chore(deps-dev): bump @humanfs/node in /crates/proxy/admin-ui
Bumps [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) from 0.16.7 to 0.16.8.
- [Release notes](https://github.com/humanwhocodes/humanfs/releases)
- [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node)

---
updated-dependencies:
- dependency-name: "@humanfs/node"
  dependency-version: 0.16.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-03 16:10:59 +00:00
dependabot[bot] 2d123ce8df chore(deps): bump decode-uri-component and query-string
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) and [query-string](https://github.com/sindresorhus/query-string). These dependencies needed to be updated together.

Updates `decode-uri-component` from 0.4.1 to 0.5.0
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.4.1...v0.5.0)

Updates `query-string` from 9.4.0 to 9.5.1
- [Release notes](https://github.com/sindresorhus/query-string/releases)
- [Commits](https://github.com/sindresorhus/query-string/compare/v9.4.0...v9.5.1)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-version: 0.5.0
  dependency-type: indirect
- dependency-name: query-string
  dependency-version: 9.5.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-09-03 13:52:08 +00:00
github-actions[bot] 2efe60c33d bot: update model pricing from LiteLLM [skip ci] 2026-08-31 11:55:16 +00:00
github-actions[bot] 4628d03a0d bot: update model pricing from LiteLLM [skip ci] 2026-08-24 06:29:26 +00:00
github-actions[bot] 3f7399dcf7 bot: update model pricing from LiteLLM [skip ci] 2026-08-17 06:25:21 +00:00
github-actions[bot] 55fecc5bf6 bot: update model pricing from LiteLLM [skip ci] 2026-08-10 07:01:40 +00:00
dependabot[bot] 91a3fa1e62 chore(deps): bump mermaid in /crates/proxy/admin-ui
Bumps [mermaid](https://github.com/mermaid-js/mermaid) from 11.15.0 to 11.16.1.
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.15.0...mermaid@11.16.1)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-version: 11.16.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-08 04:58:12 +00:00
whit3rabbit 3c5c40ef53 chore(deps): fix brace-expansion, dompurify, js-yaml vulnerabilities via npm audit fix
Supersedes dependabot PR #28, #29, #30 (transitive deps, conflicting
lockfile regions after postcss merge). react-router CVEs left open:
fix requires v6->v7 major bump, tracked separately.
2026-08-03 19:46:08 -05:00