Skip to content

chore(deps): update weishaw/sub2api docker tag to v0.1.169 - #8860

Open
renovate[bot] wants to merge 2 commits into
devfrom
renovate/weishaw-sub2api-0.x
Open

chore(deps): update weishaw/sub2api docker tag to v0.1.169#8860
renovate[bot] wants to merge 2 commits into
devfrom
renovate/weishaw-sub2api-0.x

Conversation

@renovate

@renovate renovate Bot commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
weishaw/sub2api patch 0.1.1680.1.169

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

Wei-Shaw/sub2api (weishaw/sub2api)

v0.1.169: Sub2API 0.1.169

Compare Source

AI API Gateway Platform - 将 AI 订阅配额分发和管理

修复网关上游 URL 路径片段校验缺陷(GHSA-vrxq-qm4h-6hgg),v0.1.135 ~ v0.1.168 用户建议尽快升级;同时修复 release 产物缺少定价兜底资源、以及代理断流熔断可能导致「无可用账号」的问题。

安全修复

  • 收紧上游 URL 路径片段校验:/responses 子路径、Gemini 模型名等客户端可控片段在参与上游请求路径拼接前统一走闭集允许清单校验,不合规请求在入口即被拒绝(GHSA-vrxq-qm4h-6hgg,影响 v0.1.135 ~ v0.1.168,由 @​KKBK-233 报告)
  • 容器部署默认启用 no-new-privileges,阻止应用进程提权

新增功能

  • 安全审计:兼容 Qwen3Guard 输出中的辅助字段

优化改进

  • 更新 GPT-5.6 Luna 与 Terra 的计费费率
  • 可用渠道列表按平台展示组合模型
  • 订阅套餐卡片标题显示更完整
  • Passkey 部署说明更清晰
  • 新增 gateway.openai_proxy_stream_circuit.disabled 配置项,可整体关闭代理断流熔断
  • 清理任务的成功日志下调为 info 级别

Bug 修复

  • 修复 release 二进制与镜像缺少定价兜底资源文件的问题
  • 修复代理断流熔断可能导致「无可用账号」的问题:隔离降级为调度偏好,候选账号全部处于被隔离代理下时自动放行,3 秒内的并发断流合并为一次失败事件
  • 修复 glm-5.2 被 glm-5 子串匹配套用错误定价的问题
  • 修复 Anthropic count_tokens 请求未剥离 max_tokens 导致上游报错的问题
  • 修复 Claude Code 校验器无法识别 auto 模式分类器、以及分类结果含 category 元素时误判的问题
  • 修复订阅到期时间标签显示错误的问题
  • 修复账号临时不可调度时仍参与 Token 刷新的问题
  • 修复 SMTP 邮件格式不符合标准导致部分邮件服务商投递异常的问题

升级指南

无破坏性变更,直接升级即可。自行维护 docker-compose 配置的用户,建议同步 deploy/docker-compose.yml 中新增的 security_opt: no-new-privileges:true。


📥 Installation

Docker:

# Docker Hub
docker pull weishaw/sub2api:0.1.169

# GitHub Container Registry
docker pull ghcr.io/wei-shaw/sub2api:0.1.169

One-line install (Linux):

curl -sSL https://raw.githubusercontent.com/Wei-Shaw/sub2api/main/deploy/install.sh | sudo bash

Manual download:
Download the appropriate archive for your platform from the assets below.

📚 Documentation


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants