chore(deps): update weishaw/sub2api docker tag to v0.1.169 - #8860
Open
renovate[bot] wants to merge 2 commits into
Open
chore(deps): update weishaw/sub2api docker tag to v0.1.169#8860renovate[bot] wants to merge 2 commits into
renovate[bot] wants to merge 2 commits into
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.1.168→0.1.169Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
Wei-Shaw/sub2api (weishaw/sub2api)
v0.1.169: Sub2API 0.1.169Compare Source
修复网关上游 URL 路径片段校验缺陷(GHSA-vrxq-qm4h-6hgg),v0.1.135 ~ v0.1.168 用户建议尽快升级;同时修复 release 产物缺少定价兜底资源、以及代理断流熔断可能导致「无可用账号」的问题。
安全修复
/responses子路径、Gemini 模型名等客户端可控片段在参与上游请求路径拼接前统一走闭集允许清单校验,不合规请求在入口即被拒绝(GHSA-vrxq-qm4h-6hgg,影响 v0.1.135 ~ v0.1.168,由 @KKBK-233 报告)新增功能
优化改进
Bug 修复
升级指南
无破坏性变更,直接升级即可。自行维护 docker-compose 配置的用户,建议同步 deploy/docker-compose.yml 中新增的 security_opt: no-new-privileges:true。
📥 Installation
Docker:
One-line install (Linux):
curl -sSL https://raw.githubusercontent.com/Wei-Shaw/sub2api/main/deploy/install.sh | sudo bashManual download:
Download the appropriate archive for your platform from the assets below.
📚 Documentation
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.