Skip to content

chore: sync upstream v2026.3.8 with fork customizations (TDD verified) - #8

Open
planfit-alan wants to merge 8655 commits into
mainfrom
feature/upstream-rebase-v2026.3.8
Open

chore: sync upstream v2026.3.8 with fork customizations (TDD verified)#8
planfit-alan wants to merge 8655 commits into
mainfrom
feature/upstream-rebase-v2026.3.8

Conversation

@planfit-alan

Copy link
Copy Markdown
Collaborator

Summary

포크 기준 v2026.2.9 → upstream v2026.3.8 동기화 (6개 릴리즈)

🔴 보안 패치 (Critical)

upstream에 포함된 보안 수정 35+건:

  • Exec 승인 우회 차단, Browser SSRF 강화
  • Gateway 인증 취약점 수정, Workspace FS 경계 우회 차단
  • Config validation fail-closed, 의존성 보안 패치 (Hono 등)

새로 적용된 포크 커스텀 (TDD)

  • Subagent progress: Slack emoji reactions, 3분 stall detection, suppressChannelRelay
  • Cron: targetSessionKey for main jobs
  • Compaction: infinite cycle fix
  • Claude SDK 통합 (claude-code-tool 등)

⚠️ BREAKING Changes

  • gateway.auth.mode 명시 필요 (token+password 동시 설정 시)
  • ACP dispatch 기본 활성화
  • tools.profile 새 설치 기본값 messaging 변경

테스트 결과

  • pnpm build: PASS
  • pnpm test: 7155 passed / 1 unrelated upstream failure

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.