Commits
Branch selector
User selector
Commit history
Commits on Jul 11, 2026
- committed
- committed
- committed
fix(deps): bump golang.org/x/net to v0.53.0 (GO-2026-4918 HTTP/2 DoS)
Show description for 941bab8committedfix(ci): scope govulncheck to allowlist only the no-fix bbolt advisory (CICD-6, T144.6)
Show description for 70f8ac5committedci: wire a bounded FuzzParse run into the test job (S139.3.1)
Show description for 78dc922committedtest(gguf): expand FuzzParse with F1/F2/F3 seeds and LoadTensors coverage (S139.3.1)
Show description for 97b7ab4committeddocs(plan): close E135 -- mark plan-gpu-training-hardening.md COMPLETE (T135.6)
Show description for 439b231committedtest(cuda): add fork-parity check for shared libkernels.so symbols
Show description for 8a6374dcommittedci(release): add SBOM generation + keyless cosign signing (SLSA, T144.7)
Show description for c9bd3b0committed- committed
fix(serve): validate max_tokens/temperature bounds (SERVE-5, T143.6)
Show description for 214f06acommittedfix(serve): remove dead SSRF validation code (SERVE-7, T143.9)
Show description for 37d1c8acommittedfix(serve): block unspecified + CGNAT addresses in SSRF guard
Show description for 5794d09committedfix(serve): cap per-request image-fetch fan-out (SERVE-3b, T143.4)
Show description for 8e8622bcommittedfix(registry): reject non-https registry URLs unless explicitly opted in (OCI-2, T139.5)
Show description for 3177eaccommittedfix(serve): log escaped request path to prevent log injection (SERVE-6, T143.8)
Show description for eae4e83committedfix(serve): bound GuardianMiddleware body read, skip SSE buffering (SERVE-4)
Show description for ed482bacommittedfix(registry): support out-of-band expected hash for HF pulls (HF-1, T143.10)
Show description for 7557dfbcommitted- committed
fix(deploy): digest-pin Dockerfile base images (CICD-4)
Show description for 1f75836committedfix(ci): scope benchmark PR-comment write token to the commenting job (CICD-3, T144.3)
Show description for a1bf81ecommitted
Commits on Jul 10, 2026
fix(cuda): prefer absolute vendor-library paths across native loaders (CUDA-2, T141.2)
Show description for 252a92dcommitted- committed
fix(serve): cap /v1/embeddings input array size (SERVE-3, T143.3)
Show description for 6ef8841committedfix(gguf): cap tensor dimension count at 8 (F3, T139.3)
Show description for 7ad5cc0committedfix(distributed): authenticate coordinator worker registration
Show description for 35db753committedfix(serve): bound RateLimiter memory via scheduled cleanup + size cap
Show description for 4d93744committedfix(cli): default worker to loopback, add --tls-* flags (T140.2)
Show description for 9b886c2committedfix(serve): eliminate KeyStore Revoked/ExpiresAt data race (CONC-M2, T142.4)
Show description for 09e0e8acommittedfix(serve): reap executeBatch ctx-wait goroutines promptly (CONC-L1)
Show description for 0e8e7b7committedfix(registry): verify blob digest on OCI pull (OCI-1, T139.4)
Show description for 026ca1fcommitted
Commits on Jul 6, 2026
- authored andcommitted
Commits on Jul 4, 2026
- committed
fix(inference): serialize SpeculativeGenerate through the graph mutex
Show description for 5e409a9committed