Glucksberg dd9ba974d0 fix: sort IPv4 addresses before IPv6 in SSRF pinned DNS to fix Telegram media fetch on IPv6-broken hosts ...

On hosts where IPv6 is configured but not routed (common on cloud VMs),
Telegram media downloads fail because the pinned DNS lookup may return
IPv6 addresses first. Even though autoSelectFamily (Happy Eyeballs) is
enabled, the round-robin pinned lookup serves individual IPv6 addresses
that fail before IPv4 is attempted.

Sort resolved addresses so IPv4 comes first, ensuring both Happy Eyeballs
and single-address round-robin try the working address family first.

Fixes #23975

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-24 14:53:01 +00:00

..

acp

fix(acp): harden permission tool-name validation

2026-02-24 01:11:34 +00:00

agents

fix: enforce workspaceOnly for native prompt image autoload

2026-02-24 14:47:59 +00:00

auto-reply

test: add case-insensitive stop abort assertions

2026-02-24 14:47:48 +00:00

browser

test: fix gate regressions

2026-02-24 04:39:53 +00:00

canvas-host

…

channels

fix: harden legacy plugin schema compatibility tests (#24933) (thanks @pandego)

2026-02-24 03:50:53 +00:00

cli

fix(cli): replace stale doctor/restart command hints (#24485)

2026-02-24 14:49:59 +05:30

commands

fix(doctor): improve sandbox warning when Docker unavailable

2026-02-24 14:40:06 +00:00

compat

…

config

fix(config): coerce numeric meta.lastTouchedAt to ISO string

2026-02-24 14:39:12 +00:00

cron

fix(cron): treat embedded error payloads as run failures

2026-02-24 04:33:50 +00:00

daemon

fix: back up existing systemd unit before overwriting on update (#24350) (#24937)

2026-02-24 03:22:55 +00:00

discord

test(discord): add regression tests for reasoning tag stripping in stream

2026-02-24 04:37:30 +00:00

docs

…

gateway

fix(gateway): allow trusted-proxy control-ui auth to skip device pairing

2026-02-24 14:17:54 +00:00

hooks

fix: slug-generator uses effective model instead of agent-primary

2026-02-24 14:27:01 +00:00

imessage

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

infra

fix: sort IPv4 addresses before IPv6 in SSRF pinned DNS to fix Telegram media fetch on IPv6-broken hosts

2026-02-24 14:53:01 +00:00

line

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

link-understanding

…

logging

fix(security): harden regex compilation for filters and redaction

2026-02-23 23:54:50 +00:00

markdown

…

media

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

media-understanding

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

memory

…

node-host

fix(security): trust resolved skill-bin paths in allowlist auto-allow

2026-02-24 03:12:43 +00:00

pairing

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

plugin-sdk

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

plugins

fix(plugins): pass session context to before_compaction hook in subscribe handler

2026-02-24 04:33:50 +00:00

process

test: fix gate regressions

2026-02-24 04:39:53 +00:00

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921)

2026-02-23 21:17:37 -05:00

routing

fix: normalize input peer.kind in resolveAgentRoute (#22730)

2026-02-24 04:33:50 +00:00

scripts

…

security

feat(security): warn on likely multi-user trust-model mismatch

2026-02-24 14:03:19 +00:00

sessions

…

shared

fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982) (thanks @stakeswky)

2026-02-24 03:28:00 +00:00

signal

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

slack

test(slack): add missing allowNameMatching field to DM classification tests

2026-02-24 14:26:01 +00:00

telegram

Auto-reply: normalize stop matching and add multilingual triggers (#25103)

2026-02-24 01:07:25 -05:00

terminal

…

test-helpers

…

test-utils

…

tts

…

tui

test: fix post-merge config and tui command-handler tests

2026-02-24 04:38:21 +00:00

types

…

utils

…

web

fix(whatsapp): groupAllowFrom sender filter bypassed when groupPolicy is allowlist (#24670)

2026-02-24 04:20:30 +00:00

whatsapp

…

wizard

…

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

…

dockerfile.test.ts

…

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…