Changelog

• e3464f4388d963e27c702479fb6f3184cb8cea66 Merge pull request #2917 from PierreLeGuen/nearai-provider
• a75b3d15bbadc0850a666cf4beaa1894e2be7925 Merge pull request #3053 from chengzhichao-xydt/codex/store-lock-type-assert
• ec9c6cde8eb67ab94866b0354707ddd40345773a Merge pull request #3091 from chengzhichao-xydt/codex/provider-native-search-type-assert
• eb8b6ca7c8683a0d1fc5bd417135d55ed388da88 Merge pull request #3101 from sipeed/dependabot/npm_and_yarn/web/frontend/vite-8.0.16
• dc46c05aaca70e8403edce32cb076bc934c99dce Merge pull request #3105 from sipeed/dependabot/npm_and_yarn/web/frontend/eslint-10.4.1
• 910bfbe6a4d0b116622b85a453bc38474a44dd16 Merge pull request #3120 from carlosprados/feat/register-channel-settings
• 03b022c2ac31a183697b1ca9e0da5ac8bd095264 Merge pull request #3127 from chengzhichao-xydt/codex/filesystem-dirfile-close
• cc4055b6d4148638c423a995cbad3aaf35732856 Merge pull request #3129 from chengzhichao-xydt/codex/tts-close-error
• c9f5872e02af2015b4d3351bede8c0fefb90d448 Merge pull request #3130 from chengzhichao-xydt/codex/seahorse-marshal-errors
• e720be0dd787265f676fe501aec89d21b9b54aab Merge pull request #3132 from SiYue-ZO/fix/goroutine-recover
• 86221d470bbc8a93a99d8ff73c0f623a0982d033 Merge pull request #3135 from ZOOWH/fix/3110-telegram-forum-thread-id
• 6c31f9ffdd93a1a5e012dd2cf6d9ac1246ecd324 Merge pull request #3136 from ZOOWH/fix/3111-gemini-thought-signature
• a16a1e15353b5d5e5db6e83cd448e92c1a025679 Merge pull request #3137 from jp39/cron-command-remotes
• 99291182e7b1a6dcb5dbc95bfc849e46cec5c07e Merge pull request #3141 from jincheng-xydt/fix/3125-brave-search-logging
• c15aac21fe05ee103a470e1104bc891754e83392 Merge pull request #3143 from lc6464/fix/isatap-ssrf-guard
• 287853ab58236dc2845de8e8670fe7c0d88d6a1e Merge pull request #3144 from sipeed/dependabot/github_actions/actions/checkout-7
• 0d1ed99007f7b71cf47909bdb3eb52af1942cb02 Merge pull request #3146 from sipeed/dependabot/go_modules/golang.org/x/term-0.44.0
• 70afab59e6a5434f07ae021e54a8151aaa4d6448 Merge pull request #3147 from sipeed/dependabot/go_modules/github.com/Azure/azure-sdk-for-go/sdk/azidentity-1.14.0
• 62206befe1a1f1f7167f833a75c33fc0cf98bb29 Merge pull request #3148 from sipeed/dependabot/go_modules/golang.org/x/sys-0.46.0
• a3be5a6b25e1c29e6e007507f0a3c29f5dfb77dd Merge pull request #3149 from sipeed/dependabot/go_modules/github.com/anthropics/anthropic-sdk-go-1.50.2
• 43c671abdca2e9822c9353a015133c2eafeebc9f Merge pull request #3152 from phoeagon/main
• 0a47fc8eb1bca40e954cb146ae2afa9209206797 Merge pull request #3168 from Alix-007/fix/model-list-http-error-read
• dff16dbb9158f786c422bc40ef98e7d62a05d3f7 Merge pull request #3169 from Alix-007/fix/evolution-heartbeat-coldpath
• 5feeb91c6086321daec91c955e18de0f1d0df211 Merge pull request #3170 from chengzhichao-xydt/codex/base64-encoder-close-clean
• 124c529bf1a5d86b07c240408ee03db9bda33be1 Merge pull request #3172 from chengzhichao-xydt/codex/close-error-checks-clean
• 70b2364f397176feab1ee556f4d32517418e141f Merge pull request #3173 from sipeed/dependabot/go_modules/modernc.org/sqlite-1.53.0
• 7f90ce7a989e850cfcccf1433fea2fd54c8e4281 Merge pull request #3174 from sipeed/dependabot/go_modules/github.com/line/line-bot-sdk-go/v8-8.20.1
• 54f1ab75e2ff63aafe2d44660fd91e8ba08f8739 Merge pull request #3175 from sipeed/dependabot/go_modules/fyne.io/systray-1.12.2
• 1260fd8e2f9ae204b1fe06ce94b7fc55641b0a99 Merge pull request #3176 from sipeed/dependabot/go_modules/github.com/mymmrac/telego-1.10.0
• 52320f48755852e53b8b6b10b1414a32c3f0a8a8 Merge pull request #3181 from Alix-007/fix/gateway-startup-info-ok
• 377c25e7c5568a92d6b3a12979772d4601b83364 Merge pull request #3183 from chengzhichao-xydt/codex/onebot-body-close
• 979f440af73d71dc3a161ef4765083b2dafa7087 Merge pull request #3184 from chengzhichao-xydt/codex/ws-body-close
• 9bc8d1568591076e5b9cee2d888fb724ea5f007a Merge pull request #3185 from chengzhichao-xydt/codex/updater-checksum-body-close
• 06830c9b1988a2e11304e7b91c6491bfdbf2479b Merge pull request #3186 from chengzhichao-xydt/codex/membench-body-close
• 7ee4f41b7eabdb24029fec4f2390763ee262526c Merge pull request #3187 from chengzhichao-xydt/codex/http-guard-test-body-close
• d65d592a40285cde5929482ee362deae4e007e7b Merge pull request #3188 from chengzhichao-xydt/codex/health-encode-errors
• a63b44ac74b4753b5b0c1e854c890aa73938e0a2 add installation instructions to picoclaw skills search.
• 4514d54ff509f5b7c3b62a8129533495aa0967cf build(deps): bump actions/checkout from 6 to 7
• ae81ae93cfc5303355c31151b8f8198e9cd0f85d build(deps): bump fyne.io/systray from 1.12.1 to 1.12.2
• aeab7b15a49df88b196b403a9a7056508b22895f build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity
• 38a1d823c38b3991ae51d0d991ef926566107103 build(deps): bump github.com/anthropics/anthropic-sdk-go
• e4bda8c4a126181574146329a794b5d354ca5b6b build(deps): bump github.com/line/line-bot-sdk-go/v8
• 9287df415bc9da3df30bf17089a8255f31fd8ee5 build(deps): bump github.com/mymmrac/telego from 1.9.0 to 1.10.0
• 35db389025f3ba6542bdc593fbe40decf3ce5d96 build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0
• 6d0ca80f21abc239012f65d4c7ddba532dea9358 build(deps): bump golang.org/x/term from 0.43.0 to 0.44.0
• 340022152713fa64df5eae618d3fd0600bf870a1 build(deps): bump modernc.org/sqlite from 1.51.0 to 1.53.0
• c5a98a5f47bb9d4baf2474984d2db5ddf8f4aef1 build(deps-dev): bump eslint from 10.2.1 to 10.4.1 in /web/frontend
• 646c2db1e9ba063eb609225d8b2898cc79eea1f4 build(deps-dev): bump vite from 8.0.13 to 8.0.16 in /web/frontend
• d26e4eca7dff78de68eca06dbae992114719aa31 chore(openai_compat): fix golines formatting for CI linter
• e55ddf2e24c8c341b163a2141fe6eddfca6f17f6 feat(config): add RegisterChannelSettings hook for out-of-tree channels
• 7de3d1f7e3a03acbf6bdc893e3b7815820aef541 feat(provider): add NEAR AI Cloud provider
• 3056a540bffba4cc0dc2e70ac035ee94f33d9ecf feat: allow configured remote cron commands
• d6371fcb680b9eede3f94b53cbe5a5a943d3c53f fix(agent): close base64 encoder on io.Copy error path
• 1bd2e845270cf645e25900abe187c69110e104bd fix(channels): explicitly ignore resp.Body.Close() errors in websocket dial cleanup
• f5add27d39838d8b363ecd82a4d95a5aa5a7987d fix(evolution): add ok check for LoadOrStore type assertion in lockStoreFile
• 288013ca0f5e702e84d34349a301b47821187706 fix(evolution): skip cold path for heartbeat turns
• bbdf746bcba5d77d6dedcc10391aed56be4b9d4d fix(evolution): use CompareAndSwap for atomic lockStoreFile repair
• d2156a982c48190f382873410f4881f16e6ea25d fix(fileutil): explicitly ignore Close() error on directory file descriptor
• 36d72a0112bc8ebaeef1198b8cafc64c726fdbac fix(gateway): guard startup info assertions
• 5b41f18c3dea56708efc154b03fa6f98a0bf66f3 fix(gemini): set both camelCase and snake_case thought_signature in tool call request body
• 0eb721fff747bcc2e2720b0fd81fe896cca38d05 fix(health): explicitly ignore json.Encode errors in HTTP handler responses
• 14c9a1f1f8328a2a6fb1251e0ea68dbd378c5799 fix(membench): explicitly ignore resp.Body.Close() error after io.ReadAll
• f53e6e68e26d500ef0589a8f1df5253060e711fd fix(model): avoid shadowing response error
• 5e3fd4cd0fb0d5c9d8ae65593499cc6f46641e38 fix(model): handle error response read failures
• 234bd030186c2c5a551ef64e031e38782656e05d fix(onebot): block private inbound media fetches
• 500ce724360e069e6568ecaf3899fcdfa17ca1e4 fix(onebot): explicitly ignore resp.Body.Close() error after websocket dial
• 1420875921089f1e04c937329884f3683adf72ba fix(onebot): tighten inbound media download handling
• 351ecf018293f1ff752f9ccc90c3bc15ac95d45e fix(openai_compat): add ok check for native_search type assertion
• 409cc051e7eed36b020c1825b4c2ae20396762df fix(openai_compat): log warning instead of silently discarding native_search ok check
• 540f81ff9e7e6e769c09c8576f0d6b339a072459 fix(openai_compat): use structured logger for native_search warning
• 2cf030d2fd3b871d7ec17e3be34c24688aac76da fix(providers): surface friendly auth error messages (#3198)
• ed55715b6bd886e33a821b0aeb3c91d57523bdf0 fix(seahorse): handle json.Marshal errors in grep and expand tools
• 7019143c8ede3d390b77c54c54a16d97e15e37c1 fix(telegram): use compositeChatID in InboundContext.ChatID for forum topics
• 2f8c46236630ddae8c42ac2a6310a65e1593abe5 fix(tts): explicitly ignore file.Close() error in write error path
• 583d9e1e14e6b0b5b55dba0e934b78ad9d711e68 fix(updater): explicitly ignore resp2.Body.Close() error after io.ReadAll
• d4adbf94181d13b0e911ac8d65f3edb5e85db71f fix(web): block private IPv4 embeds in ISATAP literals
• 7b5fe0118784277a72cd1b460410c5f66a562867 fix(web): update sogou search regex to match new HTML structure (#3139)
• b2fbe83565a36355d3a7faa70906640e7bcc2082 fix(web_search): add diagnostic logging for Brave empty results
• b292defd95f5ae6bc344509deb683acd8d5227d6 fix: add panic recovery to core-path goroutines
• 7ee4ee3b64c0c8f199170972308c109486963467 fix: correct indentation in shell.go and updater.go for gci linter
• 62a2b0015a41bd953820b74e2295914a846b9c82 fix: explicitly ignore Close() errors in error paths and retry loops
• fcc2882ffa4bc23cefac1ce535f2e2db2616fbbf fix: resolve golines lint issue in subscription.go
• 981ab3affec0c1dab185a2039f025be81da79f4d fix: scope remote cron command access
• 08192ddf1b89421a8a4500020ce66fca2268b5fd style(test): split long t.Fatalf line to satisfy golines 120-char limit
• 9eadffda1e7d026122b5e4d800068b79c0b22847 test(config): cover RegisterChannelSettings hook
• 2cdfadaa8b709afb32d7612c8a3a4f19d4d3dfe3 test(utils): explicitly ignore resp.Body.Close() errors in tests

Released by GoReleaser.