vxcontrol/pentagi
1
0
Fork 0
mirror of https://github.com/vxcontrol/pentagi.git synced 2026-07-20 23:57:11 -04:00
Code Issues 45 Packages Projects Releases 9 Wiki Activity

[PR #144] [MERGED] Multiple changes for project improvements #190

New Issue
Closed
opened 2026-06-06 22:09:37 -04:00 by yindo · 0 comments
yindo commented 2026-06-06 22:09:37 -04:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/vxcontrol/pentagi/pull/144
Author: @asdek
Created: 2/23/2026
Status: ✅ Merged
Merged: 2/25/2026
Merged by: @asdek

Base: master ← Head: feature/project_improvements

📝 Commits (10+)

  • 0ab4479 fix: require state parameter in OAuth GET callback
  • 4bb9ca3 docs: fix typos across documentation and code comments
  • 2824428 fix: nil check for langfuse client before ForceFlush in main function
  • 924367a chore: update gemini testing report with new model versions and latency metrics
  • b4ef76c Merge pull request #121 from mason5052/docs/fix-typos-and-grammar
  • 4be6784 Merge pull request #120 from mason5052/fix/oauth-get-callback-state-validation
  • bf2805f Implement file size limit and path escaping
  • 75aedab Fix typo in 'Incoming' in executor.go
  • 007c602 docs: add Trendshift badge to README for repository tracking
  • e293db0 Fix: correct terminal command handling logic

📊 Changes

124 files changed (+7673 additions, -1476 deletions)

View changed files

📝 .env.example (+8 -0)
📝 .github/workflows/ci.yml (+53 -16)
📝 Dockerfile (+30 -6)
📝 EULA.md (+1 -1)
📝 README.md (+217 -10)
📝 backend/cmd/ctester/main.go (+4 -0)
📝 backend/cmd/etester/main.go (+4 -0)
📝 backend/cmd/ftester/main.go (+13 -2)
📝 backend/cmd/ftester/mocks/tools.go (+73 -0)
📝 backend/cmd/ftester/worker/args.go (+1 -0)
📝 backend/cmd/ftester/worker/executor.go (+10 -0)
📝 backend/cmd/installer/checker/checker.go (+5 -2)
📝 backend/cmd/installer/main.go (+5 -8)
📝 backend/cmd/installer/main_test.go (+3 -1)
📝 backend/cmd/installer/processor/logic_test.go (+7 -5)
📝 backend/cmd/installer/processor/update.go (+2 -1)
📝 backend/cmd/installer/wizard/controller/controller.go (+14 -0)
📝 backend/cmd/installer/wizard/locale/locale.go (+4 -0)
📝 backend/cmd/installer/wizard/models/search_engines_form.go (+27 -0)
📝 backend/cmd/pentagi/main.go (+3 -0)

...and 80 more files

📄 Description

Problem

PentAGI needed several critical improvements across security, functionality, documentation, and code quality. Users reported issues with external network access configuration, multiple security vulnerabilities were identified in the codebase, and the platform lacked advanced exploit discovery capabilities.

Solution

This aggregating PR consolidates 30+ commits across multiple merged pull requests, addressing:

  • Security hardening: Fixed OAuth validation, resource leaks, TLS configuration, and session handling vulnerabilities
  • New features: Integrated Sploitus exploit aggregator and user preferences with favorite flows
  • Documentation: Added comprehensive external network access guide and fixed numerous typos
  • Code quality: Removed debug statements, fixed bugs, and improved error handling
  • Dependencies: Updated langchaingo to stable release version

Closes #91, addresses #101

Type of Change

  • 🐛 Bug fix (non-breaking change which fixes an issue)
  • 🚀 New feature (non-breaking change which adds functionality)
  • 📚 Documentation update
  • 🔧 Configuration change
  • 🧪 Test update
  • 🛡️ Security update

Areas Affected

  • Core Services (Frontend UI/Backend API)
  • AI Agents (Researcher/Developer/Executor)
  • Security Tools Integration
  • Analytics Platform (Langfuse)
  • External Integrations (LLM/Search APIs)
  • Documentation
  • Infrastructure/DevOps

Testing and Verification

Test Configuration

PentAGI Version: Latest development (feature/project_improvements)
Docker: 24.0.x+
Host OS: Linux/macOS/Windows
LLM Provider: OpenAI, Anthropic, Google Gemini, OpenRouter
Enabled Features: Core features + Langfuse + Sploitus

Test Steps

  1. Run all backend unit tests (go test ./...) - all pass ✅
  2. Test Sploitus integration with real exploit searches
  3. Verify OAuth authentication flow with state validation
  4. Test external network access with documented configuration
  5. Verify user preferences and favorite flows functionality
  6. Test Langfuse client with proper TLS configuration
  7. Validate terminal resource handling with large files
  8. Test password change functionality with strong validation

Test Results

  • ✅ All existing unit tests pass
  • ✅ New Sploitus tests added and passing
  • ✅ OAuth security vulnerabilities fixed and verified
  • ✅ Resource leaks eliminated (browser, terminal, tar operations)
  • ✅ External network access documented and verified
  • ✅ No breaking changes to existing functionality
  • ✅ Frontend linting passes
  • ✅ Backend go fmt and go vet clean

Security Considerations

Critical Fixes (Issue #101):

  1. OAuth Validation - Fixed CSRF bypass in GET callback (missing state parameter validation)
  2. OAuth State Parser - Added explicit field existence checks for 'exp' and 'provider'
  3. OAuth Callback - Added missing return statement preventing double response writes
  4. Resource Leaks - Fixed response body leak in browser scraper, added tar writer cleanup
  5. Buffer Overflow - Added 50MB file size validation in terminal tar operations to prevent OOM
  6. TLS Configuration - Langfuse client now respects EXTERNAL_SSL_INSECURE and EXTERNAL_SSL_CA_PATH
  7. Session Handling - Improved error messages and validation

New Features:

  • Sploitus Integration - No API key required, uses public endpoint, respects proxy configuration
  • User Preferences - New privilege model for favorites management

No New Attack Vectors:

  • All changes maintain or improve security posture
  • No new credentials or secrets required
  • Backward compatible with existing deployments

Performance Impact

Improvements:

  • Sploitus: Single HTTPS POST with 30s timeout, minimal overhead
  • TLS Optimization: Langfuse now uses system cert pool as base (more efficient)
  • Resource Management: Fixed leaks reduce memory pressure over time
  • Terminal Operations: File size validation prevents unbounded allocations

No Degradation:

  • OAuth validation adds negligible overhead (existing flow)
  • User preferences use standard database queries with proper indexes
  • Debug console.log removal improves browser console performance
  • All changes maintain existing performance characteristics

Documentation Updates

  • README.md updates - External network access section, Sploitus mention, Trendshift badge
  • Configuration documentation updates - SPLOITUS_ENABLED env var, OAuth examples fixed
  • GraphQL schema updates - User preferences types, favorite flows mutations
  • Code comments - Fixed typos ("Incoming", "application", "permissions")
  • Other: Fixed EULA company names, renamed misspelled files (screenshots.go, integration docs)

Deployment Notes

New Environment Variables (Optional):

# Sploitus exploit search (defaults to true)
SPLOITUS_ENABLED=true

# For external network access (see README)
PENTAGI_LISTEN_IP=0.0.0.0
PUBLIC_URL=https://your-server-ip:8443
CORS_ORIGINS=https://your-server-ip:8443

Database Migrations:

  • 20260223_120000_add_sploitus_search_type.sql - Adds 'sploitus' to SEARCHENGINE_TYPE enum
  • 20260223_220000_user_preferences.sql - User preferences table and privileges
  • Migrations run automatically on startup

Container Recreation:

  • Required if changing network binding configuration
  • Run: docker compose down && docker compose up -d --force-recreate

Compatibility:

  • ✅ Fully backward compatible
  • ✅ No breaking API changes
  • ✅ Existing deployments work without changes
  • ✅ New features are opt-in or auto-enabled safely

Checklist

Code Quality

  • My code follows the project's coding standards
  • I have added/updated necessary documentation
  • I have added tests to cover my changes
  • All new and existing tests pass
  • I have run go fmt and go vet (for Go code)
  • I have run npm run lint (for TypeScript/JavaScript code)

Security

  • I have considered security implications
  • Changes maintain or improve the security model
  • Sensitive information has been properly handled

Compatibility

  • Changes are backward compatible
  • Breaking changes are clearly marked and documented
  • Dependencies are properly updated

Documentation

  • Documentation is clear and complete
  • Comments are added for non-obvious code
  • API changes are documented

Additional Notes

Key Changes by Category

🛡️ Security Fixes (Issue #101)

OAuth Authentication Hardening (PRs #120, #125, #127):

  • Fixed CSRF bypass vulnerability in GET callback handler
  • Added comprehensive state parameter validation
  • Improved error handling in OAuth flow
  • Contributor: @mason5052

Resource Management (PR #129):

  • Fixed HTTP response body leak in browser scraper
  • Added file size validation (50MB limit) to prevent OOM attacks
  • Fixed tar writer resource leak
  • Contributors: @mason5052, @s-b-repo

TLS Configuration (PR #132):

  • Langfuse client now respects EXTERNAL_SSL_INSECURE config
  • Proper system certificate pool usage with custom CA support
  • Removed hardcoded InsecureSkipVerify: true
  • Contributor: @mason5052

🚀 New Features

Sploitus Exploit Aggregator (PR #133):

  • Integrated Sploitus for advanced exploit discovery
  • Aggregates data from Exploit-DB, Packet Storm, GitHub Advisories, VulHub, etc.
  • No API key required, uses public JSON API
  • Returns structured results with URLs, CVSS scores, CVE references
  • Contributor: @Priyanka-2725

User Preferences & Favorite Flows:

  • New GraphQL mutations for managing favorite flows
  • Privilege-based access control
  • Database migration with proper indexes
  • Contributor: @asdek

📚 Documentation

External Network Access Guide (Issue #91, PR #135):

  • Comprehensive configuration guide for remote access
  • PENTAGI_LISTEN_IP, PUBLIC_URL, CORS_ORIGINS explained
  • Firewall configuration for multiple Linux distributions
  • Troubleshooting steps and common issues
  • Contributor: @Vaibhavee89

Typo Fixes & Improvements (PR #121):

  • Fixed product name "PegtAGI" → "PentAGI"
  • Fixed company names in EULA
  • Corrected OAuth env var names in README
  • Renamed misspelled files (screenshots.go, integration docs)
  • Contributor: @mason5052

🐛 Bug Fixes

Terminal Command Handling (PR #124):

  • Fixed command execution logic in terminal tool
  • Contributor: @Priyanka-2725

Password Handling:

  • Fixed database column mapping for UserPassword
  • Improved error handling in development mode
  • Enhanced form validation with visibility toggle
  • Contributor: @asdek

Frontend Cleanup (PR #141):

  • Removed 7 debug console.log statements
  • Contributor: @mason5052

Minor Fixes:

  • Swagger annotation missing quote (PR #140) - @mason5052
  • Docker client constant typo (PR #128) - @SkyFlyingMouse
  • Nil check for Langfuse client - @asdek
  • Typo "Incoming" in executor.go - @s-b-repo

📦 Dependencies

langchaingo Update:

  • Updated to stable release v0.1.14-update.1
  • Contributor: @asdek

🎨 Miscellaneous

  • Added Trendshift badge to README
  • Updated Gemini testing report with new model versions
  • Streamlined TLS configuration in Langfuse client

Contributors

This release includes contributions from:

  • @asdek (Dmitry Ng) - Project maintainer, user preferences, password fixes, integrations
  • @mason5052 - Security fixes, OAuth hardening, resource management, TLS config, typo fixes
  • @Priyanka-2725 (Priyanka Singh) - Sploitus integration, terminal bug fix
  • @Vaibhavee89 (Vaibhavee Singh) - External network access documentation
  • @SkyFlyingMouse - Docker constant name fix
  • @s-b-repo (S.B) - Security fixes, typo corrections

Special thanks to all contributors for making PentAGI more secure, feature-rich, and user-friendly! 🎉

Merged Pull Requests

  • #120 - OAuth GET callback state validation
  • #121 - Typo and grammar fixes
  • #124 - Terminal command handling
  • #125 - OAuth state field validation
  • #127 - OAuth callback missing return
  • #128 - Docker client constant typo
  • #129 - Resource leak fixes
  • #132 - Langfuse TLS configuration
  • #133 - Sploitus exploit aggregator
  • #135 - External network access docs
  • #140 - Swagger annotation fix
  • #141 - Remove debug console logs

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/vxcontrol/pentagi/pull/144 **Author:** [@asdek](https://github.com/asdek) **Created:** 2/23/2026 **Status:** ✅ Merged **Merged:** 2/25/2026 **Merged by:** [@asdek](https://github.com/asdek) **Base:** `master` ← **Head:** `feature/project_improvements` --- ### 📝 Commits (10+) - [`0ab4479`](https://github.com/vxcontrol/pentagi/commit/0ab4479fdb0a2c46ff0bf5e2722b67f334485c87) fix: require state parameter in OAuth GET callback - [`4bb9ca3`](https://github.com/vxcontrol/pentagi/commit/4bb9ca31f225cbe9d0ce2fa49e8cd817e0ee795d) docs: fix typos across documentation and code comments - [`2824428`](https://github.com/vxcontrol/pentagi/commit/28244280303007995c338d568967e96a6e1073a2) fix: nil check for langfuse client before ForceFlush in main function - [`924367a`](https://github.com/vxcontrol/pentagi/commit/924367a05b38014d6363bc25d98868d84ed56864) chore: update gemini testing report with new model versions and latency metrics - [`b4ef76c`](https://github.com/vxcontrol/pentagi/commit/b4ef76ce90c6942b718f2289007b93b7aef6f3e4) Merge pull request #121 from mason5052/docs/fix-typos-and-grammar - [`4be6784`](https://github.com/vxcontrol/pentagi/commit/4be6784e67edccc53f15b383594bdce86681be94) Merge pull request #120 from mason5052/fix/oauth-get-callback-state-validation - [`bf2805f`](https://github.com/vxcontrol/pentagi/commit/bf2805fb17b972dd3001e00f940c4f3768f59a6b) Implement file size limit and path escaping - [`75aedab`](https://github.com/vxcontrol/pentagi/commit/75aedabdca091c67f5704c418f06ff951dc98a00) Fix typo in 'Incoming' in executor.go - [`007c602`](https://github.com/vxcontrol/pentagi/commit/007c602e4ccc59937025484a6fc68fd173848e84) docs: add Trendshift badge to README for repository tracking - [`e293db0`](https://github.com/vxcontrol/pentagi/commit/e293db02befc7cbb99d0fdeaef782a540e483ed1) Fix: correct terminal command handling logic ### 📊 Changes **124 files changed** (+7673 additions, -1476 deletions) <details> <summary>View changed files</summary> 📝 `.env.example` (+8 -0) 📝 `.github/workflows/ci.yml` (+53 -16) 📝 `Dockerfile` (+30 -6) 📝 `EULA.md` (+1 -1) 📝 `README.md` (+217 -10) 📝 `backend/cmd/ctester/main.go` (+4 -0) 📝 `backend/cmd/etester/main.go` (+4 -0) 📝 `backend/cmd/ftester/main.go` (+13 -2) 📝 `backend/cmd/ftester/mocks/tools.go` (+73 -0) 📝 `backend/cmd/ftester/worker/args.go` (+1 -0) 📝 `backend/cmd/ftester/worker/executor.go` (+10 -0) 📝 `backend/cmd/installer/checker/checker.go` (+5 -2) 📝 `backend/cmd/installer/main.go` (+5 -8) 📝 `backend/cmd/installer/main_test.go` (+3 -1) 📝 `backend/cmd/installer/processor/logic_test.go` (+7 -5) 📝 `backend/cmd/installer/processor/update.go` (+2 -1) 📝 `backend/cmd/installer/wizard/controller/controller.go` (+14 -0) 📝 `backend/cmd/installer/wizard/locale/locale.go` (+4 -0) 📝 `backend/cmd/installer/wizard/models/search_engines_form.go` (+27 -0) 📝 `backend/cmd/pentagi/main.go` (+3 -0) _...and 80 more files_ </details> ### 📄 Description ### Problem PentAGI needed several critical improvements across security, functionality, documentation, and code quality. Users reported issues with external network access configuration, multiple security vulnerabilities were identified in the codebase, and the platform lacked advanced exploit discovery capabilities. ### Solution This aggregating PR consolidates 30+ commits across multiple merged pull requests, addressing: - **Security hardening**: Fixed OAuth validation, resource leaks, TLS configuration, and session handling vulnerabilities - **New features**: Integrated Sploitus exploit aggregator and user preferences with favorite flows - **Documentation**: Added comprehensive external network access guide and fixed numerous typos - **Code quality**: Removed debug statements, fixed bugs, and improved error handling - **Dependencies**: Updated langchaingo to stable release version Closes #91, addresses #101 ### Type of Change - [x] 🐛 Bug fix (non-breaking change which fixes an issue) - [x] 🚀 New feature (non-breaking change which adds functionality) - [x] 📚 Documentation update - [x] 🔧 Configuration change - [x] 🧪 Test update - [x] 🛡️ Security update ### Areas Affected - [x] Core Services (Frontend UI/Backend API) - [x] AI Agents (Researcher/Developer/Executor) - [x] Security Tools Integration - [x] Analytics Platform (Langfuse) - [x] External Integrations (LLM/Search APIs) - [x] Documentation - [x] Infrastructure/DevOps ### Testing and Verification #### Test Configuration ```yaml PentAGI Version: Latest development (feature/project_improvements) Docker: 24.0.x+ Host OS: Linux/macOS/Windows LLM Provider: OpenAI, Anthropic, Google Gemini, OpenRouter Enabled Features: Core features + Langfuse + Sploitus ``` #### Test Steps 1. Run all backend unit tests (`go test ./...`) - all pass ✅ 2. Test Sploitus integration with real exploit searches 3. Verify OAuth authentication flow with state validation 4. Test external network access with documented configuration 5. Verify user preferences and favorite flows functionality 6. Test Langfuse client with proper TLS configuration 7. Validate terminal resource handling with large files 8. Test password change functionality with strong validation #### Test Results - ✅ All existing unit tests pass - ✅ New Sploitus tests added and passing - ✅ OAuth security vulnerabilities fixed and verified - ✅ Resource leaks eliminated (browser, terminal, tar operations) - ✅ External network access documented and verified - ✅ No breaking changes to existing functionality - ✅ Frontend linting passes - ✅ Backend `go fmt` and `go vet` clean ### Security Considerations **Critical Fixes (Issue #101):** 1. **OAuth Validation** - Fixed CSRF bypass in GET callback (missing state parameter validation) 2. **OAuth State Parser** - Added explicit field existence checks for 'exp' and 'provider' 3. **OAuth Callback** - Added missing return statement preventing double response writes 4. **Resource Leaks** - Fixed response body leak in browser scraper, added tar writer cleanup 5. **Buffer Overflow** - Added 50MB file size validation in terminal tar operations to prevent OOM 6. **TLS Configuration** - Langfuse client now respects `EXTERNAL_SSL_INSECURE` and `EXTERNAL_SSL_CA_PATH` 7. **Session Handling** - Improved error messages and validation **New Features:** - **Sploitus Integration** - No API key required, uses public endpoint, respects proxy configuration - **User Preferences** - New privilege model for favorites management **No New Attack Vectors:** - All changes maintain or improve security posture - No new credentials or secrets required - Backward compatible with existing deployments ### Performance Impact **Improvements:** - **Sploitus**: Single HTTPS POST with 30s timeout, minimal overhead - **TLS Optimization**: Langfuse now uses system cert pool as base (more efficient) - **Resource Management**: Fixed leaks reduce memory pressure over time - **Terminal Operations**: File size validation prevents unbounded allocations **No Degradation:** - OAuth validation adds negligible overhead (existing flow) - User preferences use standard database queries with proper indexes - Debug console.log removal improves browser console performance - All changes maintain existing performance characteristics ### Documentation Updates - [x] README.md updates - External network access section, Sploitus mention, Trendshift badge - [x] Configuration documentation updates - SPLOITUS_ENABLED env var, OAuth examples fixed - [x] GraphQL schema updates - User preferences types, favorite flows mutations - [x] Code comments - Fixed typos ("Incoming", "application", "permissions") - [x] Other: Fixed EULA company names, renamed misspelled files (screenshots.go, integration docs) ### Deployment Notes **New Environment Variables (Optional):** ```bash # Sploitus exploit search (defaults to true) SPLOITUS_ENABLED=true # For external network access (see README) PENTAGI_LISTEN_IP=0.0.0.0 PUBLIC_URL=https://your-server-ip:8443 CORS_ORIGINS=https://your-server-ip:8443 ``` **Database Migrations:** - `20260223_120000_add_sploitus_search_type.sql` - Adds 'sploitus' to SEARCHENGINE_TYPE enum - `20260223_220000_user_preferences.sql` - User preferences table and privileges - Migrations run automatically on startup **Container Recreation:** - Required if changing network binding configuration - Run: `docker compose down && docker compose up -d --force-recreate` **Compatibility:** - ✅ Fully backward compatible - ✅ No breaking API changes - ✅ Existing deployments work without changes - ✅ New features are opt-in or auto-enabled safely ### Checklist #### Code Quality - [x] My code follows the project's coding standards - [x] I have added/updated necessary documentation - [x] I have added tests to cover my changes - [x] All new and existing tests pass - [x] I have run `go fmt` and `go vet` (for Go code) - [x] I have run `npm run lint` (for TypeScript/JavaScript code) #### Security - [x] I have considered security implications - [x] Changes maintain or improve the security model - [x] Sensitive information has been properly handled #### Compatibility - [x] Changes are backward compatible - [x] Breaking changes are clearly marked and documented - [x] Dependencies are properly updated #### Documentation - [x] Documentation is clear and complete - [x] Comments are added for non-obvious code - [x] API changes are documented ### Additional Notes ## Key Changes by Category ### 🛡️ Security Fixes (Issue #101) **OAuth Authentication Hardening** (PRs #120, #125, #127): - Fixed CSRF bypass vulnerability in GET callback handler - Added comprehensive state parameter validation - Improved error handling in OAuth flow - Contributor: @mason5052 **Resource Management** (PR #129): - Fixed HTTP response body leak in browser scraper - Added file size validation (50MB limit) to prevent OOM attacks - Fixed tar writer resource leak - Contributors: @mason5052, @s-b-repo **TLS Configuration** (PR #132): - Langfuse client now respects `EXTERNAL_SSL_INSECURE` config - Proper system certificate pool usage with custom CA support - Removed hardcoded `InsecureSkipVerify: true` - Contributor: @mason5052 ### 🚀 New Features **Sploitus Exploit Aggregator** (PR #133): - Integrated Sploitus for advanced exploit discovery - Aggregates data from Exploit-DB, Packet Storm, GitHub Advisories, VulHub, etc. - No API key required, uses public JSON API - Returns structured results with URLs, CVSS scores, CVE references - Contributor: @Priyanka-2725 **User Preferences & Favorite Flows**: - New GraphQL mutations for managing favorite flows - Privilege-based access control - Database migration with proper indexes - Contributor: @asdek ### 📚 Documentation **External Network Access Guide** (Issue #91, PR #135): - Comprehensive configuration guide for remote access - PENTAGI_LISTEN_IP, PUBLIC_URL, CORS_ORIGINS explained - Firewall configuration for multiple Linux distributions - Troubleshooting steps and common issues - Contributor: @Vaibhavee89 **Typo Fixes & Improvements** (PR #121): - Fixed product name "PegtAGI" → "PentAGI" - Fixed company names in EULA - Corrected OAuth env var names in README - Renamed misspelled files (screenshots.go, integration docs) - Contributor: @mason5052 ### 🐛 Bug Fixes **Terminal Command Handling** (PR #124): - Fixed command execution logic in terminal tool - Contributor: @Priyanka-2725 **Password Handling**: - Fixed database column mapping for UserPassword - Improved error handling in development mode - Enhanced form validation with visibility toggle - Contributor: @asdek **Frontend Cleanup** (PR #141): - Removed 7 debug console.log statements - Contributor: @mason5052 **Minor Fixes**: - Swagger annotation missing quote (PR #140) - @mason5052 - Docker client constant typo (PR #128) - @SkyFlyingMouse - Nil check for Langfuse client - @asdek - Typo "Incoming" in executor.go - @s-b-repo ### 📦 Dependencies **langchaingo Update**: - Updated to stable release v0.1.14-update.1 - Contributor: @asdek ### 🎨 Miscellaneous - Added Trendshift badge to README - Updated Gemini testing report with new model versions - Streamlined TLS configuration in Langfuse client ## Contributors This release includes contributions from: - **@asdek** (Dmitry Ng) - Project maintainer, user preferences, password fixes, integrations - **@mason5052** - Security fixes, OAuth hardening, resource management, TLS config, typo fixes - **@Priyanka-2725** (Priyanka Singh) - Sploitus integration, terminal bug fix - **@Vaibhavee89** (Vaibhavee Singh) - External network access documentation - **@SkyFlyingMouse** - Docker constant name fix - **@s-b-repo** (S.B) - Security fixes, typo corrections Special thanks to all contributors for making PentAGI more secure, feature-rich, and user-friendly! 🎉 ## Merged Pull Requests - #120 - OAuth GET callback state validation - #121 - Typo and grammar fixes - #124 - Terminal command handling - #125 - OAuth state field validation - #127 - OAuth callback missing return - #128 - Docker client constant typo - #129 - Resource leak fixes - #132 - Langfuse TLS configuration - #133 - Sploitus exploit aggregator - #135 - External network access docs - #140 - Swagger annotation fix - #141 - Remove debug console logs --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-06 22:09:37 -04:00
yindo closed this issue 2026-06-06 22:09:37 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
enhancement
help wanted
pull-request
Mirrored from GitHub Pull Request
 question
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: vxcontrol/pentagi#190
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?