Repository navigation

SkillSpector 2.14.0 release - #959

Open

rng1995 wants to merge 63 commits into

yashraj/v2.13.0-basefrom

naren/release-v2.14.0-delta

Open

SkillSpector 2.14.0 release#959
rng1995 wants to merge 63 commits into
yashraj/v2.13.0-basefrom
naren/release-v2.14.0-delta

Commits on Oct 30, 2026
- perf(security): avoid Unicode folding for ASCII characters (#907)
  
  longfie
  authored and
  rng1995
  committed
  2b9991c
- feat: support Python 3.15 (#864)
  
  daeho-ro
  authored and
  rng1995
  committed
  083db7d
- Fix fail-closed on ordinary lists of verb names (#898)
  
  Varshith-Kali
  authored and
  rng1995
  committed
  1eab708
- fix(cli): render error text literally instead of as Rich markup (#899)
  
  farzamfallahi
  authored and
  rng1995
  committed
  0175678
- perf(cli): defer scan imports for version output (#876)
  
  agentsope
  authored and
  rng1995
  committed
  8cbe5ef
- fix(report): preserve each compacted occurrence's finding text (#851)
  
  bharathvemula
  authored and
  rng1995
  committed
  52cd2df
- feat(cli): configure the recursive skill count limit (#847)
  
  agentsope
  authored and
  rng1995
  committed
  6286f56
- test(batch): cover pooled model cancellation and slot recovery (#763)
  
  YMuskrat
  authored and
  rng1995
  committed
  185c693
- fix(p2): retain remaining reference-comment safety fixes from #819
  
  rng1995
  and
  chrisknvidia
  committed
  9d2890f
- fix(analyzers): carve out structurally benign P2 header comments (#622)
  
  authored and
  rng1995
  committed
  7635245
- fix(tm1): abstain on uppercase HTTP DELETE verbs in REST route tables (#903)
  
  JohnnyWilson16
  authored and
  rng1995
  committed
  5f7c4b4
- fix(llm): keep CLI prompts under MAX_INPUT_BYTES when batching large files (#855)
  
  authored and
  rng1995
  committed
  faf27a1
- fix(p2): keep reference destinations out of the benign-header exemption (#934)
  
  udsy19
  authored and
  rng1995
  committed
  1b87e1b
- fix(pe3): ignore exact Python glab setting literals (#943)
  
  deepujain
  authored and
  rng1995
  committed
  a906547
- fix(mp2): ignore repetition inside proven Markdown tables (#872)
  
  bharathvemula
  authored and
  rng1995
  committed
  f05970f
- fix(ra1): honor prohibitions on recommending a self-update (#929)
  
  bharathvemula
  authored and
  rng1995
  committed
  c8869c5
- Merge pull request #436 from deepujain/fix/435-lazy-graph
  rng1995
  committed
  bdc0823
- feat(providers): support custom OpenAI-compatible HTTP headers (#914)
  
  jh49choi
  authored and
  rng1995
  committed
  c9cd44e
- perf(providers): defer chat client imports from metadata path (#904)
  
  syedataiba12311-coder
  authored and
  rng1995
  committed
  e70b5f2
- fix(providers): keep OpenCode's internal plugins so OAuth logins work
  
  authored and
  rng1995
  committed
  6e6cc69
- docs(providers): describe the plugin scope precisely and pin the env scrub
  
  authored and
  rng1995
  committed
  8a1db5e
- feat(providers): accept OpenCode 1.18.31-1.19.4 through an explicit verified set (#713)
  
  authored and
  rng1995
  committed
  1f41ed1
- fix(report): keep missing references as non-blocking caveats (#805)
  
  efegokdemir
  authored and
  rng1995
  committed
  d3ad8b8
- fix(coverage): account for inspected linked ZIP containers (#939)
  
  chrisknvidia
  authored and
  rng1995
  committed
  0a30466
- test(cli): retain recursive output error contract from #662
  rng1995
  committed
  406c941
- fix(providers): stop forcing tool calls on models that reject them (#529)
  
  stefanoamorelli
  authored and
  rng1995
  committed
  9ebb845
- Merge pull request #598 from chinmay1819/main
  rng1995
  committed
  2e8769e
- Merge pull request #650 from Yoseph-Zuskin/feat/gpt-6-sol-luna-budgets
  rng1995
  committed
  736cccb
- Merge pull request #690 from Yoseph-Zuskin/feat/gpt-6.1-sol-budget
  rng1995
  committed
  94cc0df
- Merge pull request #708 from FenjuFu/fix/openai-compatible-auto-tool-choice
  rng1995
  committed
  8a29eb2
- feat(providers): adopt GPT-6.1 Sol and Claude Opus 5.5 defaults with compatible structured output (#806)
  
  committed
  912e3ff
- Merge pull request #824 from NVIDIA/naren/pr-806-defaults-mcp-follow-up
  rng1995
  committed
  dd97faa
- fix(release): retain maintenance model-validation contracts
  rng1995
  committed
  5a6ad47
- release: prepare incremental SkillSpector 2.14.0 candidate
  rng1995
  committed
  d54f1ce
- test: align availability mocks with timeout-aware model controls
  rng1995
  committed
  774bd45
- docs(release): tabulate included PRs and record validation scope
  rng1995
  committed
  ae6f3eb
Commits on Nov 2, 2026
- Merge integrated 2.13.3 maintenance baseline into the 2.14.0 candidate
  rng1995
  committed
  7d496ed
- feat(supply-chain): inspect locked npm dependency contents (#952)
  
  YMuskrat
  authored and
  rng1995
  committed
  c656cc3
- fix(osv): fall back to static data when no_proxy breaks httpx client setup (#967)
  
  bharathvemula
  authored and
  rng1995
  committed
  59b203c
- fix(supply-chain): strip leading BOM before parsing requirements.txt (#963)
  
  bharathvemula
  authored and
  rng1995
  committed
  4bdfa07
- fix(analyzer): report malformed dependency manifests (#773)
  
  efegokdemir
  and
  rng1995
  committed
  7d67733
- fix(deps): bump uv.lock past four packages with published advisories (#910) (#916)
  
  viwe-monai
  and
  rng1995
  committed
  2767623
- fix(scanner): tighten bounded parser ownership (#947)
  
  kshitijrajes
  authored and
  rng1995
  committed
  19ab7a6
- fix(static): stop backticks/apostrophes in comments and prose from tripping static_parse_limit (#902)
  
  Varshith-Kali
  authored and
  rng1995
  committed
  91b4fbf
- fix(analyzer): recognize JavaScript template literals (#801)
  
  efegokdemir
  authored and
  rng1995
  committed
  a45c445
- fix(static): preserve shell and browser template boundaries (#948)
  
  authored and
  rng1995
  committed
  c1945fb
- fix(ea5): stop reading option-listing help rows as model-switch commands (#969)
  
  tanishqbaweja
  authored and
  rng1995
  committed
  e55430e
- fix(markdown): preserve bounded inline and list-fence ownership (#950)
  
  kshitijrajes
  authored and
  rng1995
  committed
  572571d
- fix(analyzer): enforce deadlines for projected prompt matching (#742)
  
  committed
  9344743
- fix(analyzer): keep checking command lines inside a word that spans lines (#814)
  
  committed
  91e3b8b
- fix(analyzer): keep PowerShell host syntax from inventing shell parse limits (#848)
  
  committed
  dd4380a
- style(analyzer): format the multiline word-shadow guard
  rng1995
  committed
  3116f15
- fix(ra1): keep double negatives from exempting the action (#957)
  
  udsy19
  authored and
  rng1995
  committed
  ec6f388
- fix(yara): require a browser cookie-store path in info_stealer (#752)
  
  authored and
  rng1995
  committed
  9a76de5
- fix(cli): reject non-regular report outputs before scanning (#955)
  
  bharathvemula
  authored and
  rng1995
  committed
  b7451f0
- fix(p6): stop reporting Python returns of local names as prompt extraction (#965)
  
  tanishqbaweja
  authored and
  rng1995
  committed
  645d9bc
- fix(providers): reject SKILLSPECTOR_TEMPERATURE for all Claude models that drop sampling (#964)
  
  authored and
  rng1995
  committed
  15644ca
- perf: defer workflow warning imports until graph initialization (#972)
  
  Patrick-Erichsen
  authored and
  rng1995
  committed
  5fc8bcd
- feat(report): expose the file surface a finding landed on (#703)
  
  Harbor404
  and
  rng1995
  committed
  f583e0b
- docs(release): record merged P0 and P1 additions for 2.14.0
  rng1995
  committed
  1883ccf
Commits on Nov 3, 2026
- fix(llm): retain safe diagnostics for failed requests (#979)
  
  Patrick-Erichsen
  authored and
  rng1995
  committed
  113640b
- test(release): align nested fence projection expectations
  rng1995
  committed
  2f6a4b7
- docs(release): include latest merged P1 fix in 2.14.0
  rng1995
  committed
  ca22d27

Commits

Commits on Oct 30, 2026

Commits on Nov 2, 2026

Commits on Nov 3, 2026