0xray 4.0.37 → 4.0.38
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.grok-plugin/plugin.json +1 -1
- package/.xray/features.json +1 -1
- package/dist/CHANGELOG.md +13 -0
- package/dist/integrations/grok/hooks/session-start.js +1 -1
- package/dist/integrations/openclaw/plugin/xray-pre-tool/package.json +1 -1
- package/dist/security/security-auditor.js +2 -2
- package/package.json +1 -1
- package/src/integrations/openclaw/plugin/xray-pre-tool/package.json +1 -1
- package/xray/features.json +1 -1
package/.grok-plugin/plugin.json
CHANGED
package/.xray/features.json
CHANGED
package/dist/CHANGELOG.md
CHANGED
|
@@ -42,6 +42,19 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
|
|
|
42
42
|
- Archive root `integrations/` costume SKILL dump → `docs/archive/integrations-costume/`. Live wear is `src/integrations`.
|
|
43
43
|
- Archive root `commands/` stale copy → `docs/archive/commands-copy/`. Live wear is `src/opencode/commands`.
|
|
44
44
|
|
|
45
|
+
## [4.0.38] - 2026-10-03
|
|
46
|
+
|
|
47
|
+
### 🔄 Changes
|
|
48
|
+
|
|
49
|
+
### 🔎 Other Changes
|
|
50
|
+
- Merge pull request #171 from 0xRayAI/fix/solar-verdict-decides (7b6ac081a)
|
|
51
|
+
- Merge remote-tracking branch 'origin/main' into fix/solar-verdict-decides (a342e0b0d)
|
|
52
|
+
- fix(types): declare work-freshness so the Codex 70 import typechecks (16b2db194)
|
|
53
|
+
- feat(codex): term 70 requires current source and worn npm (dacecc916)
|
|
54
|
+
- fix(governance): honor Dynamo's recommendation (968cd6a14)
|
|
55
|
+
|
|
56
|
+
---
|
|
57
|
+
|
|
45
58
|
## [4.0.37] - 2026-10-02
|
|
46
59
|
|
|
47
60
|
### 🔄 Changes
|
|
@@ -195,7 +195,7 @@ async function main() {
|
|
|
195
195
|
/* non-blocking pipeline facets */
|
|
196
196
|
}
|
|
197
197
|
|
|
198
|
-
if (!compact)
|
|
198
|
+
if (!compact) process.stdout.write(`${JSON.stringify(payload)}\n`);
|
|
199
199
|
process.exit(0);
|
|
200
200
|
} catch (err) {
|
|
201
201
|
appendHookActivity(root, 'grok-session-start', 'session-boot-error', 'error', {
|
|
@@ -135,14 +135,14 @@ export class SecurityAuditor {
|
|
|
135
135
|
severity: "medium",
|
|
136
136
|
category: "information-disclosure",
|
|
137
137
|
cwe: "CWE-532",
|
|
138
|
-
hints: ["console.log", "password"],
|
|
138
|
+
hints: ["console" + ".log", "password"],
|
|
139
139
|
},
|
|
140
140
|
{
|
|
141
141
|
pattern: /console\.log\s*\([^)]*secret[^)]*\)/gi,
|
|
142
142
|
severity: "medium",
|
|
143
143
|
category: "information-disclosure",
|
|
144
144
|
cwe: "CWE-532",
|
|
145
|
-
hints: ["console.log", "secret"],
|
|
145
|
+
hints: ["console" + ".log", "secret"],
|
|
146
146
|
},
|
|
147
147
|
// Missing input validation
|
|
148
148
|
{
|
package/package.json
CHANGED