GTEdgeAI/gt-ai-os-community
3
0
Fork 0
Code Issues Packages Releases Wiki Activity

GT AI OS Community Edition v2.0.33

Browse Source 
Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
HackWeasel
2025-12-12 17:04:45 -05:00
commit b9dfb86260
746 changed files with 232071 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

117
scripts/migrations/025_fix_nvidia_model_names.sql Normal file
View File

@@ -0,0 +1,117 @@
-- Migration 025: Fix NVIDIA model names to match API format
--
-- Problem: Model names stored with incorrect format (e.g., nvidia/meta-llama-3.1-8b-instruct)
-- Solution: Update to match NVIDIA NIM API expected format (e.g., meta/llama-3.1-8b-instruct)
--
-- NVIDIA NIM API model naming:
-- - Models from Meta: meta/llama-3.1-8b-instruct (NOT nvidia/meta-llama-*)
-- - Models from NVIDIA: nvidia/llama-3.1-nemotron-70b-instruct
-- - Models from Mistral: mistralai/mistral-large-3-instruct
-- - Models from DeepSeek: deepseek-ai/deepseek-v3
-- - Models from OpenAI-compatible: openai/gpt-oss-120b (already correct in groq provider)
-- Idempotency: Only update if old format exists
DO $$
BEGIN
-- Fix Meta Llama models (remove nvidia/ prefix for meta models)
UPDATE model_configs
SET model_id = 'meta/llama-3.1-8b-instruct'
WHERE model_id = 'nvidia/meta-llama-3.1-8b-instruct' AND provider = 'nvidia';
UPDATE model_configs
SET model_id = 'meta/llama-3.1-70b-instruct'
WHERE model_id = 'nvidia/meta-llama-3.1-70b-instruct' AND provider = 'nvidia';
UPDATE model_configs
SET model_id = 'meta/llama-3.1-405b-instruct'
WHERE model_id = 'nvidia/meta-llama-3.1-405b-instruct' AND provider = 'nvidia';
UPDATE model_configs
SET model_id = 'meta/llama-3.3-70b-instruct'
WHERE model_id = 'nvidia/meta-llama-3.3-70b-instruct' AND provider = 'nvidia';
-- Fix DeepSeek models
UPDATE model_configs
SET model_id = 'deepseek-ai/deepseek-v3'
WHERE model_id = 'nvidia/deepseek-ai-deepseek-v3' AND provider = 'nvidia';
UPDATE model_configs
SET model_id = 'deepseek-ai/deepseek-r1'
WHERE model_id = 'nvidia/deepseek-ai-deepseek-r1' AND provider = 'nvidia';
-- Fix Mistral models
UPDATE model_configs
SET model_id = 'mistralai/mistral-large-3-instruct'
WHERE model_id = 'nvidia/mistralai-mistral-large-3-instruct' AND provider = 'nvidia';
-- Fix Moonshot/Kimi models
UPDATE model_configs
SET model_id = 'moonshot-ai/kimi-k2-instruct'
WHERE model_id = 'nvidia/moonshot-ai-kimi-k2-instruct' AND provider = 'nvidia';
-- Fix Qwen models
UPDATE model_configs
SET model_id = 'qwen/qwen3-235b-a22b-fp8-instruct'
WHERE model_id = 'nvidia/qwen-qwen3-235b-a22b-fp8-instruct' AND provider = 'nvidia';
-- Fix OpenAI-compatible models (for NVIDIA provider)
UPDATE model_configs
SET model_id = 'openai/gpt-oss-120b'
WHERE model_id = 'nvidia/openai-gpt-oss-120b' AND provider = 'nvidia';
UPDATE model_configs
SET model_id = 'openai/gpt-oss-20b'
WHERE model_id = 'nvidia/openai-gpt-oss-20b' AND provider = 'nvidia';
-- Also update tenant_model_configs to match (if they reference old model_ids)
UPDATE tenant_model_configs
SET model_id = 'meta/llama-3.1-8b-instruct'
WHERE model_id = 'nvidia/meta-llama-3.1-8b-instruct';
UPDATE tenant_model_configs
SET model_id = 'meta/llama-3.1-70b-instruct'
WHERE model_id = 'nvidia/meta-llama-3.1-70b-instruct';
UPDATE tenant_model_configs
SET model_id = 'meta/llama-3.1-405b-instruct'
WHERE model_id = 'nvidia/meta-llama-3.1-405b-instruct';
UPDATE tenant_model_configs
SET model_id = 'meta/llama-3.3-70b-instruct'
WHERE model_id = 'nvidia/meta-llama-3.3-70b-instruct';
UPDATE tenant_model_configs
SET model_id = 'deepseek-ai/deepseek-v3'
WHERE model_id = 'nvidia/deepseek-ai-deepseek-v3';
UPDATE tenant_model_configs
SET model_id = 'deepseek-ai/deepseek-r1'
WHERE model_id = 'nvidia/deepseek-ai-deepseek-r1';
UPDATE tenant_model_configs
SET model_id = 'mistralai/mistral-large-3-instruct'
WHERE model_id = 'nvidia/mistralai-mistral-large-3-instruct';
UPDATE tenant_model_configs
SET model_id = 'moonshot-ai/kimi-k2-instruct'
WHERE model_id = 'nvidia/moonshot-ai-kimi-k2-instruct';
UPDATE tenant_model_configs
SET model_id = 'qwen/qwen3-235b-a22b-fp8-instruct'
WHERE model_id = 'nvidia/qwen-qwen3-235b-a22b-fp8-instruct';
UPDATE tenant_model_configs
SET model_id = 'openai/gpt-oss-120b'
WHERE model_id = 'nvidia/openai-gpt-oss-120b';
UPDATE tenant_model_configs
SET model_id = 'openai/gpt-oss-20b'
WHERE model_id = 'nvidia/openai-gpt-oss-20b';
RAISE NOTICE 'Migration 025: Fixed NVIDIA model names to match API format';
END $$;
-- Log migration completion
INSERT INTO system_versions (version, component, description, applied_at)
VALUES ('025', 'model_configs', 'Fixed NVIDIA model names to match API format', NOW())
ON CONFLICT DO NOTHING;