Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.5.1 #404

Merged
merged 14 commits into from
Feb 16, 2025
Merged

v1.5.1 #404

merged 14 commits into from
Feb 16, 2025

Conversation

n4ze3m
Copy link
Owner

@n4ze3m n4ze3m commented Feb 15, 2025

Copy link

socket-security bot commented Feb 15, 2025

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/[email protected] None +4 4.58 MB niklasvh
npm/[email protected] environment, filesystem, shell Transitive: eval, network, unsafe +134 136 MB brc-dd

View full report↗︎

Copy link

socket-security bot commented Feb 15, 2025

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Possible typosquat attack npm/[email protected] ⚠︎

View full report↗︎

Next steps

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

Adds a global toggle to enable/disable Ollama integration across the application. This allows users to:

- Enable/disable Ollama model fetching globally
- Continue using Ollama instances through OpenAI-compatible API endpoints when disabled
- See clear warning messages about the implications of disabling
- Maintain settings across browser sessions
…proved visual fidelity

- Integrates html2canvas library for high-quality image exports
- Creates dedicated ImageExport and ImageExportWrapper components
- Replaces manual canvas drawing with React-based rendering
- Improves image quality with 2x scale and proper font rendering
- Adds timestamp to exported image filenames
- Includes error handling for failed image generation
- Maintains consistent styling with the chat interface
@n4ze3m n4ze3m marked this pull request as ready for review February 16, 2025 12:41
@n4ze3m n4ze3m merged commit 08b84e3 into main Feb 16, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant