• v2.2.1-ew-1 d55a69d4a9

    Release v2.2.1-ew-1
    Some checks failed
    Docker Build / docker (push) Has been cancelled
    Docker Release / release (push) Successful in 7m48s
    Stable

    engel75 released this 2026-09-21 09:27:21 +02:00 | 5 commits to 2.2.1-ew1 since this release

    Release v2.2.1-ew-1

    Port of the EW fork to upstream transports/v2.2.1.

    Base: transports/v2.2.1 (68 upstream commits / 244 files since v2.2.0,
    security-focused patch release; core v1.9.1, framework v1.7.1).
    48 commits cherry-picked from 2.2.0-ew1, 2 conflicts (both known runbook
    patterns), ZERO adaptation commits - lightest port since 2.1.1.

    Conflicts resolved:

    • migrations.go (Spec 01 pick): upstream's
      migrate_vk_standalone_limits_to_model_configs (#7291) placed before
      EW's add_ew_key_config_columns + add_ew_allowed_requests_column
      (EW migrations remain last)
    • core/schemas/bifrost.go (Spec 04 pick): upstream's
      BifrostContextKeyBillingNonce (#7303) merged into the context-key
      block below our BifrostContextKeyAuthRouteWhitelisted

    Upstream v2.2.1 notable changes:

    • Security: EscapeResourceID (#7307, resource-ID path injection),
      Bedrock S3 SSRF validation (#7315), BillingNonce (#7303),
      ephemeral realtime token minting (#7317)
    • Fixed: non-streaming caller hang (#7308/#7313), empty reasoning
      chunks (#7318), Claude Code thread continuations (#7274), Gemini
      Flash-Lite minimal thinking (#7288), config.json VK limits under UI
      edits (#7291) + migration, Bedrock service tier gating (#7266),
      Anthropic tool schema normalization (#7265)
    • Features: VK assignees + expanded search, user attribution in
      Prometheus metrics, SupportsPromptCacheBreakpoints model cap,
      MCP observed latency, OAuth passthrough for passthrough endpoints
    • No Go version bump (1.27.0), no provider interface changes

    EW fork features carried forward (Specs 01-06, 09):

    • 01: EW provider (SGLang/OpenAI-compatible)
    • 02: Per-key API toggles (allowed_requests)
    • 03: OpenAI error envelope
    • 04: Whitelisted inference routes
    • 05: Docker / Forgejo CI
    • 06: Migration strategy (EW migrations always last)
    • 09: EW image-edit passthrough

    Verification:

    • go build + vet: clean
    • 4 test suites: all green (TestAuth, integrations, EW, configstore)
    • make build LOCAL=1: OK
    • Docker: 111 EW symbol matches (>= 50), version v2.2.1-ew1-test exact
    • Migration order: migrate_vk_standalone_limits_to_model_configs before
      the 2 EW migrations (last in sequence)
    • End-diff probe: branch diff vs 2.2.0-ew1 == exact upstream diff
      (244 files, +15722/-1475)
    Downloads