Tags

Tags give the ability to mark specific points in history as being important

  • v0.1.4

    b542229b · v0.1.4: update Semgrep and kin-openapi and fix the SARIF upload · 
    v0.1.4

- Updated Semgrep in the development image to 1.182.1 and refreshed its locked dependencies. certifi 2026.10.23 drops the emSign root CAs whose intermediate keys were compromised (GHSA-6q48-6c7w-9gw2).
- Dependabot no longer opens pull requests for `mcp` or the OpenTelemetry packages in `requirements-semgrep.txt`. Semgrep pins their versions itself, so bumping one of them on its own cannot install.
- Updated kin-openapi, which the code generator uses, from 0.142.0 to 0.149.0. The newer version fixes several panics on malformed specs reported in GitHub security advisories.
- The security scan merges its two gitleaks runs into one SARIF run. GitHub code scanning rejects a report with two runs from the same tool, so no scan results had been uploaded.

  • v0.1.3

    d756ae02 · v0.1.3: build the dev image on Debian · 
    v0.1.3

- The development image is based on Debian (`golang:1.26.10-trixie`) instead of Alpine. Alpine keeps only the latest build of each package, so the exact pins broke the image build whenever a package was updated. System packages now come from the snapshot.debian.org date the base image was built from, which keeps them fixed for a given base image digest. jq 1.8.2, shellcheck 0.11.0 and shfmt 3.13.1 keep their versions, and Semgrep runs in its own virtual environment.

  • v0.1.2

    071444e8 · v0.1.2: flux3 width, height, user fields and match_input · 
    v0.1.2

- Added `Flux3ImageInputs.Width` and `Flux3ImageInputs.Height` for exact output size in pixels. Set both together; they override `Resolution`.
- Added the `Flux3ImageInputsResolutionMatchInput` constant (`"match_input"`) for `Flux3ImageInputs.Resolution`. It applies to edits only and keeps the size of the first reference image. `Valid()` accepts it.
- Added an optional `User` field, an opaque end user identifier, to `Flux3ImageInputs`, `Flux3ImageKleinInputs` and `FinetuneFluxUltraInput`.
- Updated the `Flux3ImageInputs.Resolution` doc comment: `1k` is the default.
- Raised the minimum Go version in `go.mod` from 1.26.9 to 1.26.10, which fixes the `crypto/x509` vulnerability GO-2026-6809 found by govulncheck. The dev image and the skill setup notes use 1.26.10 too.
- Updated the `ca-certificates` pin in `Dockerfile.dev` to `20261020-r0`.

  • v0.1.1

    e0b1499d · docs: show how to look up the full API in the skill and README · 
    v0.1.1

- Documentation only. The agent skill explains how to look up every endpoint, parameter and model with `go doc` or on pkg.go.dev, and declares its license.
- The skill no longer lists the API credentials under OpenClaw's `requires.env`, which kept OpenClaw from loading it until they were set. It requires only `go`; the credentials are still documented as what your program reads.
- The README points to the full API reference, and the examples in the README and the skill were checked against the current code.

  • v0.1.0

    a68bfda7 · v0.1.0: go-bfl client generated from the official OpenAPI spec · 
    v0.1.0

- Added `bfl`, a REST client generated with oapi-codegen from Black Forest Labs' BFL API spec version 0.0.1 (OpenAPI 3.1.0), downloaded from https://api.bfl.ai/openapi.json. Covers all 30 operations for image and video generation, image and video tools, fine-tune management, credits and result polling.
- Added OpenAPI 3.0 conversion for nullable unions, constants and keyframe tuples, request and response tests, a submit-then-poll example, development tooling and the `go-bfl` agent skill.