6 Commits

Author SHA1 Message Date
DIYgod 2f392594d5 chore(deps): refresh dependencies and verify affected app flows 2026-09-22 16:20:40 +08:00
DIYgod d8835acd02 fix(desktop): route the remaining main-process requests through Chromium and keep the CLI token out of logs
After the API bridge moved to `net.fetch`, several main-process requests still used
Node's `fetch`, which ignores the app's proxy settings: the update manifest and policy,
the main-process API client, file downloads, text-to-speech, page fetching for the
reader, and the Eagle, qBittorrent and custom integration requests. They now go through
`net.fetch` as well. The readability package takes a `fetch` implementation for that;
downloads hand it to ky. Requests that manage cookies by hand pass
`credentials: "omit"`, so Chromium does not keep them too.

A failed CLI login sync used to be logged with the whole command line, token included.
The command is now described with the token redacted, and the command's output is
scrubbed the same way.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-09-18 17:40:26 +08:00
Tony c3e1c26194 fix(desktop): set referrerpolicy on youtube embed iframes (#5039) 2026-07-12 18:07:09 +08:00
DIYgod 1158281f59 chore(deps): update frontend dependencies (#5038)
* chore(deps): update frontend dependencies

* fix(ci): format OTA verification commands
2026-07-10 22:36:12 +08:00
DIYgod b465ec1463 fix: harden external protocol handling and unblock dev:electron (#4863)
* fix(desktop): harden external protocol handling

* fix(build): avoid optional peer resolution in dev
2026-02-20 21:36:23 +08:00
Innei 123e6937ee chore: update pnpm-lock.yaml and add readability package
- Updated pnpm-lock.yaml to include new dependencies and versions, including jsdom and utf-8-validate.
- Added a new package '@follow-app/readability' with its configuration files, including package.json, tsconfig.json, and build scripts.
- Adjusted import paths in tailwind.config.ts files for both desktop and SSR applications.
- Set the development environment variable in env.ts to false for production readiness.

Signed-off-by: Innei <tukon479@gmail.com>
2025-04-28 23:10:46 +08:00