v0.68.1

k2-fsa/OmniVoicev0.68.1Apr 13, 2026by fatedier

AI Summary

This release patches a critical security vulnerability in HTTP proxy authentication, ensuring that incorrect credentials trigger a proper 407 Proxy Authentication Required error instead of being bypassed.

Key Highlights

Fixed authentication bypass in proxy-style requests
Correct behavior for `routeByHTTPUser` with `httpUser`/`httpPassword`
Now returns 407 status code on authentication failure

Full Release Notes

## Fixes

* Fixed a configuration-dependent authentication bypass in `type = "http"` proxies when `routeByHTTPUser` is used together with `httpUser` / `httpPassword`. This affected proxy-style requests. Proxy-style authentication failures now return `407 Proxy Authentication Required`.