v1.4.550

Key Highlights

• Redacts private provider error details from responses unless debug mode is enabled.
• Caps non-streaming model responses at 50 MiB and avoids retaining streaming response content in server memory.
• Replaces the Ollama SDK with direct HTTP requests and removes unused Ollama dependencies.
• Adds auditing for storage and configuration changes without logging sensitive request bodies.
• Documents authentication throttling, access scope, limits, and audit events, with tests for redaction, auditing, response limits, and compatibility.

New Features

• Provider error detail redaction outside debug mode
• Response memory limits for non-streaming and streaming responses
• Audit events for storage and configuration changes
• Direct HTTP-based Ollama integration
• Expanded security and operational documentation and tests

Full Release Notes

## Changes

### PR [#2299](https://github.com/danielmiessler/Fabric/pull/2299) by [ksylvan](https://github.com/ksylvan): fix: protect provider error details and bound response memory usage

- Redacted private provider error details in responses unless debug mode is enabled, preventing sensitive information leaks.
- Capped non-streaming model responses at 50 MiB and stopped retaining streaming response content in server memory to bound resource usage.
- Replaced the Ollama SDK with direct HTTP requests and removed the unused Ollama dependencies from the Go and Nix manifests.
- Added auditing for storage and configuration changes without logging sensitive request bodies.
- Documented authentication throttling, access scope, limits, and audit events, and added tests covering redaction, auditing, response limits, and compatibility.

Related Repositories