actions/ai-inference
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
277 Commits 24 Branches 25 Tags
1171309110d96ca20f164aea82a26a68cf073ba1
Commit Graph
277 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Paulo SantosandGitHub 1171309110 refactor temperature/top-p parsing for clarity 2026-02-04 12:20:53 +00:00
Paulo SantosandGitHub 71c69d42b5 document temperature and top-p inputs in readme 2026-02-04 12:12:24 +00:00
Paulo SantosandGitHub d51321a7a6 rebuild dist bundle 2026-02-04 12:12:19 +00:00
Paulo SantosandGitHub 5b62ecd0dd add temperature and top-p input parameters 2026-02-04 12:12:14 +00:00
Sean GoedeckeandGitHub a6101c89c6 Merge pull request #163 from yg1996/add-custom-headers-support 
Add custom headers support for API Management integration
v2.0.5 		2026-01-19 17:28:08 +11:00
Yonatan Golick 15ae50ae2f Add CRLF injection protection for header values 
Implement security validation to prevent HTTP header injection attacks:
- Reject header values containing \r or \n characters
- Add comprehensive test coverage for CRLF protection
- Replace multiline YAML test with proper rejection test

Security improvements:
- Validates header values to prevent header injection
- Clear warning messages when values are rejected
- Four new test cases covering LF, CR, CRLF, and multiline scenarios

This addresses a critical security concern where malicious headers
could be injected via newline characters in header values.

All 84 tests passing.
 2026-01-18 12:19:43 +02:00
Yonatan GolickGitHubCopilot
 		f77380037b Update src/helpers.ts 
Co-authored-by: Copilot <[email protected]>
 2026-01-18 11:59:12 +02:00
Yonatan GolickGitHubCopilot
 		6402ff8f9a Update README.md 
Co-authored-by: Copilot <[email protected]>
 2026-01-18 11:58:58 +02:00
Yonatan Golick c760995fbc Remove redundant feature documentation file 
Delete CUSTOM_HEADERS_FEATURE.md as the README.md already contains
comprehensive documentation for the custom headers feature. This
reduces documentation duplication and follows standard practice
of keeping feature docs in the README.
 2026-01-18 11:43:39 +02:00
Yonatan Golick ce720b3d0c Fix header validation per RFC 7230 and add null check 
Address Copilot AI feedback:
- Remove underscore support from header names (RFC 7230 compliance)
- Add explicit null check for JSON parsing
- Update validation regex to /^[A-Za-z0-9-]+$/
- Add test case for null value handling
- Update documentation to clarify header name requirements

Changes:
- Header names now only accept alphanumeric characters and hyphens
- Improved error messages for invalid headers
- Added test for null JSON input
- Updated APIM example tests

All 81 tests passing.
 2026-01-18 11:35:18 +02:00
Yonatan Golick 6d144ac474 Add custom headers support for API Management integration 
This change adds support for custom HTTP headers in AI inference requests,
enabling integration with API Management platforms (Azure APIM, AWS API
Gateway, Kong, etc.) and custom request routing/tracking.

Features:
- New 'custom-headers' input supporting both YAML and JSON formats
- Auto-detection of input format for better UX
- Header name validation (alphanumeric, hyphens, underscores)
- Automatic masking of sensitive headers in logs
- Full backward compatibility (optional parameter)

Changes:
- Added parseCustomHeaders() function in helpers.ts
- Updated InferenceRequest interface with optional customHeaders field
- Modified simpleInference() and mcpInference() to pass headers to OpenAI client
- Added 18 comprehensive test cases
- Updated documentation with examples and use cases

All 80 tests passing. Zero breaking changes.
 2026-01-18 11:24:13 +02:00
Sarah VesselsandGitHub 63993128d7 Merge pull request #51 from KyFaSt/patch-1 
Add Missing Languages to CodeQL Advanced Configuration
 2026-01-07 11:27:48 -06:00
Sarah VesselsandGitHub 3dfda414c6 Merge branch 'main' into patch-1 2026-01-07 11:21:35 -06:00
Sarah VesselsandGitHub b99f473284 Merge pull request #152 from actions/dependabot/npm_and_yarn/express-5.2.1 
chore(deps): bump express from 5.1.0 to 5.2.1
 2026-01-07 11:11:33 -06:00
Sarah VesselsandGitHub acb23a78e0 Merge branch 'main' into dependabot/npm_and_yarn/express-5.2.1 2026-01-07 11:10:57 -06:00
Sarah VesselsandGitHub de9f3a655a Merge pull request #158 from actions/dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.25.2 
chore(deps): bump @modelcontextprotocol/sdk from 1.24.0 to 1.25.2
 2026-01-07 11:09:33 -06:00
Sarah Vessels 38e68a8ffc licensed cache 2026-01-07 11:01:16 -06:00
Sarah Vessels 7012ba221f Merge branch 'main' into dependabot/npm_and_yarn/express-5.2.1 2026-01-07 11:00:24 -06:00
Sarah Vessels 185fd7e675 licensed cache 2026-01-07 10:57:30 -06:00
Sarah Vessels d89080af40 npm run bundle 2026-01-07 10:57:20 -06:00
dependabot[bot]andGitHub 6f1b0370bb chore(deps): bump @modelcontextprotocol/sdk from 1.24.0 to 1.25.2 
Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.24.0 to 1.25.2.
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/1.24.0...v1.25.2)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.25.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-01-07 16:51:03 +00:00
Sarah VesselsandGitHub 0a593b0c24 Merge pull request #149 from actions/dependabot/npm_and_yarn/body-parser-2.2.1 
chore(deps): bump body-parser from 2.2.0 to 2.2.1
 2026-01-06 14:12:53 -06:00
Sarah VesselsandGitHub 214f0b0a68 Merge branch 'main' into dependabot/npm_and_yarn/body-parser-2.2.1 2026-01-06 14:12:17 -06:00
Sarah VesselsandGitHub 812f8bb844 Merge pull request #144 from actions/dependabot/npm_and_yarn/js-yaml-4.1.1 
chore(deps): bump js-yaml from 4.1.0 to 4.1.1
 2026-01-06 14:11:41 -06:00
Sarah Vessels de36aa9302 npm run bundle 2026-01-06 14:02:26 -06:00
Sarah Vessels b99132354c Merge branch 'main' into dependabot/npm_and_yarn/js-yaml-4.1.1 2026-01-06 14:01:47 -06:00
Sarah Vessels ad4351a3a2 npm run bundle 2026-01-06 13:57:11 -06:00
Sarah VesselsandGitHub 146434d459 Merge pull request #153 from actions/dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.24.0 
chore(deps): bump @modelcontextprotocol/sdk from 1.15.1 to 1.24.0
 2026-01-06 13:56:25 -06:00
Sarah Vessels ce17fb5d9d licensed cache 2026-01-06 13:53:13 -06:00
Sarah Vessels 2ef8c2618e Merge branch 'main' into dependabot/npm_and_yarn/js-yaml-4.1.1 2026-01-06 13:52:50 -06:00
Sarah Vessels eeef9fe1ab Merge branch 'main' into dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.24.0 2026-01-06 13:51:06 -06:00
Sarah Vessels 82e525eb0f licensed cache 2026-01-06 13:47:43 -06:00
Sarah Vessels 0f8b89d701 Merge branch 'main' into dependabot/npm_and_yarn/body-parser-2.2.1 2026-01-06 13:47:02 -06:00
Sarah VesselsandGitHub 7e91a1e627 Merge pull request #132 from actions/dependabot/npm_and_yarn/rollup/rollup-linux-x64-gnu-4.52.5 
chore(deps): bump @rollup/rollup-linux-x64-gnu from 4.46.0 to 4.52.5
 2026-01-06 13:45:33 -06:00
Sarah VesselsandGitHub 82a7737224 Merge branch 'main' into dependabot/npm_and_yarn/rollup/rollup-linux-x64-gnu-4.52.5 2026-01-06 13:45:00 -06:00
Sarah VesselsandGitHub 6709541cb1 Merge pull request #135 from actions/dependabot/npm_and_yarn/vite-7.1.11 
chore(deps-dev): bump vite from 7.0.6 to 7.1.11
 2026-01-06 13:44:04 -06:00
Sarah VesselsandGitHub 059db2ba93 Merge branch 'main' into dependabot/npm_and_yarn/vite-7.1.11 2026-01-06 13:43:32 -06:00
Sarah Vessels 7228fd1adf npm run bundle 2026-01-06 13:37:09 -06:00
Sarah Vessels 04be163c40 licensed cache 2026-01-06 13:34:55 -06:00
Sarah Vessels 26b055458c Merge branch 'main' into dependabot/npm_and_yarn/modelcontextprotocol/sdk-1.24.0 2026-01-06 13:33:53 -06:00
Sarah VesselsandGitHub 42a45bceaf Merge pull request #157 from actions/dependabot/npm_and_yarn/qs-6.14.1 
chore(deps): bump qs from 6.14.0 to 6.14.1
 2026-01-06 13:30:43 -06:00
Sarah Vessels 52a34c2089 licensed cache 2026-01-06 13:23:30 -06:00
dependabot[bot]andGitHub cab0b8c09d chore(deps): bump qs from 6.14.0 to 6.14.1 
Bumps [qs](https://github.com/ljharb/qs) from 6.14.0 to 6.14.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.14.0...v6.14.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-01-06 19:11:09 +00:00
Sarah VesselsandGitHub 340ab189bd Merge pull request #146 from actions/dependabot/npm_and_yarn/glob-10.5.0 
chore(deps): bump glob from 10.4.5 to 10.5.0
 2026-01-06 13:10:01 -06:00
dependabot[bot]andGitHub e783798b50 chore(deps): bump @modelcontextprotocol/sdk from 1.15.1 to 1.24.0 
Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.15.1 to 1.24.0.
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/1.15.1...1.24.0)

---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.24.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2025-12-02 17:18:14 +00:00
dependabot[bot]andGitHub ff49162b2d chore(deps): bump express from 5.1.0 to 5.2.1 
Bumps [express](https://github.com/expressjs/express) from 5.1.0 to 5.2.1.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/v5.1.0...v5.2.1)

---
updated-dependencies:
- dependency-name: express
  dependency-version: 5.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2025-12-01 23:13:26 +00:00
dependabot[bot]andGitHub fd45b46eda chore(deps): bump body-parser from 2.2.0 to 2.2.1 
Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/body-parser/compare/v2.2.0...v2.2.1)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2025-12-01 02:58:14 +00:00
dependabot[bot]andGitHub efe413bb31 chore(deps): bump glob from 10.4.5 to 10.5.0 
Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/node-glob/compare/v10.4.5...v10.5.0)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 10.5.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2025-12-01 02:56:58 +00:00
dependabot[bot]andGitHub 82fb91a5d5 chore(deps): bump js-yaml from 4.1.0 to 4.1.1 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2025-12-01 02:46:34 +00:00
Sean GoedeckeandGitHub 334892bb20 Merge pull request #142 from maartenvandiemen/feature/pass-toolsets 
Pass GitHub MCP Tools
v2.0.4 		2025-12-01 08:48:16 +11:00