dgtlmoonandClaude Opus 5.5 480dfb8b46 LLM - Upgrade litellm to >=1.106.2, add DeepSeek, Groq, Mistral, Together AI and xAI providers (#4597) ...

* Update litellm requirement from >=1.40.0 to >=1.106.2

Supersedes #4595.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* LLM - Add DeepSeek, Groq, Mistral, Together AI and xAI to the provider list

All five serve OpenAI's GET /models, so "Load available models" works for
them via model_list without importing litellm. Together's bare-list response
and its image/embedding models are handled, and Mistral's {"detail": ...}
errors are surfaced.

Also re-select Anthropic on page load for saved 'anthropic/claude-...' models,
the form the model list returns.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 21:45:16 +02:00

..

apprise

UI full refactor / upgrade (#4183)

2026-07-16 15:08:29 +02:00

custom_browser_url

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

fetchers

PDF - Keep the original PDF of the newest two versions (#4549)

2026-10-13 15:53:18 +02:00

import

…

itemprop_test_examples

…

llm

Restock: let a plugin do LLM price/stock extraction without litellm (HTML + text hook, reusable helpers) (#4545)

2026-10-19 12:32:32 +02:00

plugins

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

proxy_list

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

proxy_socks5

UI - Fixing lots of actions that should be a POST style action which led to a 404

2026-09-04 12:38:20 +02:00

restock

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

smtp

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

unit

LLM - Upgrade litellm to >=1.106.2, add DeepSeek, Groq, Mistral, Together AI and xAI providers (#4597)

2026-10-24 21:45:16 +02:00

visualselector

Fix Jinja2 false-positive when URL contains {% (#4208)

2026-10-23 15:32:32 +02:00

__init__.py

…

conftest.py

Memory usage - small improvement by tidying up module imports (#4352)

2026-09-01 17:50:50 +02:00

test2.pdf

…

test_access_control.py

UI - Fixing lots of actions that should be a POST style action which led to a 404

2026-09-04 12:38:20 +02:00

test_add_replace_remove_filter.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_add_watch_ui_browser.py

UI - Fixing lots of actions that should be a POST style action which led to a 404

2026-09-04 12:38:20 +02:00

test_api_jinja2_validation.py

API - Reject broken Jinja2 templates in url, link_to_open, body and headers (shared with the edit form) (#4587)

2026-10-23 18:15:52 +02:00

test_api_notification_urls_validation.py

…

test_api_notifications.py

…

test_api_openapi.py

System - Ensure import+API update values are verified types (#4458)

2026-09-18 13:55:50 +02:00

test_api_search.py

…

test_api_security.py

…

test_api_tags.py

fix(api): accept an existing tag UUID in the watch tag field, and deprecate it (#4361)

2026-09-02 16:46:27 +02:00

test_api.py

API - DELETE for Watch history #4397 (#4403)

2026-09-09 15:46:00 +02:00

test_auth.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_automatic_follow_ldjson_price.py

UI - Fixing lots of actions that should be a POST style action which led to a 404 (#4370)

2026-09-04 10:56:23 +02:00

test_backend.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_backup.py

UI - Fixing lots of actions that should be a POST style action which led to a 404

2026-09-04 12:38:20 +02:00

test_basic_socketio.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_block_while_text_present.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_cache_control_headers.py

Adding HTTP browser caching of UI elements (#4450)

2026-09-17 16:16:42 +02:00

test_clone.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_commit_persistence.py

UI - Fixing lots of actions that should be a POST style action which led to a 404 (#4370)

2026-09-04 10:56:23 +02:00

test_conditions.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_csrf_llm_summary.py

LLM - History/difference page - CSRF fix for LLM summary fetching between versions

2026-09-20 20:29:36 +02:00

test_css_selector.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_darkmode.py

UI - Follow the device's light/dark setting by default (#4507)

2026-10-16 11:36:52 +02:00

test_datastore_isolation.py

…

test_diff_download_patch_xss.py

GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm)

2026-08-24 16:24:22 +02:00

test_diff_header.py

UI - Keep history diff title and controls visible while scrolling (#4412)

2026-09-16 14:19:00 +02:00

test_download_patch.py

…

test_duplicate_date_header.py

fix(http): send a single Date header on werkzeug built-in server (#4372)

2026-09-17 07:16:00 +02:00

test_element_removal.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_encoding.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_errorhandling.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_extract_csv.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_extract_regex.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_favicon_url_change.py

Favicon - Clear the saved favicon when the watch URL changes (#4569) (#4586)

2026-10-23 15:33:26 +02:00

test_filter_exist_changes.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_filter_failure_notification.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_group.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_history_consistency.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_html_to_text.py

…

test_i18n.py

UI - Fixing lots of actions that should be a POST style action which led to a 404

2026-09-04 12:38:20 +02:00

test_ignore_regex_text.py

…

test_ignore_text.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ignore.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ignorehyperlinks.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ignorestatuscode.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ignorewhitespace.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_import.py

…

test_jinja2_unixtime.py

feat(jinja2): add unixtime filter to format Unix timestamps in notifications (#3641) (#4503)

2026-10-07 16:24:24 +02:00

test_jinja2.py

Notifications - |regex_replace ReDoS timeout now works in any thread (use 'regex' package timeout=) (#4585)

2026-10-23 15:31:51 +02:00

test_jsonpath_jq_selector.py

Fix IndexError on empty/whitespace-only JSON content (#4534)

2026-10-23 12:00:11 +02:00

test_language_selector_anonymous.py

UI - Language selector should be available on the login page (#4490) (#4501)

2026-10-08 10:30:05 +02:00

test_link_to_open.py

feature: Implemented optional override link (#4290)

2026-09-09 16:06:24 +02:00

test_live_preview.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_llm_all_changes_diff.py

Make LLM summary from UI non blocking (#4467)

2026-09-20 13:01:14 +02:00

test_llm_api_key_security.py

LLM - "Test connect" runs in clean subprocess for better memory management

2026-10-24 20:54:54 +02:00

test_llm_change_summary.py

Make LLM summary from UI non blocking (#4467)

2026-09-20 13:01:14 +02:00

test_llm_group_overrides.py

LLM - Per watch/group settings and UI tidyup (#4354)

2026-09-02 10:07:34 +02:00

test_llm_preview.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_llm_summary_async.py

LLM timeout improvements (frontend) (#4470)

2026-09-20 15:59:58 +02:00

test_llm_token_budget.py

…

test_lxml_concurrency.py

LIBXML Data integrity fix, libxml must be locked across threads for any XML parsing (#4325)

2026-08-24 19:21:07 +02:00

test_nonrenderable_pages.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_notification_errors.py

…

test_notification_restock_token.py

fix: safe-empty restock default so restock notification tokens work for any watch (#4249)

2026-07-13 09:26:54 +02:00

test_notification.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_obfuscations.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_pdf.py

PDF - Keep the original PDF of the newest two versions (#4549)

2026-10-13 15:53:18 +02:00

test_plugin_api.py

Improvements to plugin architecture (#4589)

2026-10-24 16:55:43 +02:00

test_preview_endpoints.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_pwa_install_qr.py

Our first basic PWA mobile integration! Look for the QR-Code in Settings (#4472)

2026-09-20 19:45:11 +02:00

test_pwa_manifest.py

Our first basic PWA mobile integration! Look for the QR-Code in Settings (#4472)

2026-09-20 19:45:11 +02:00

test_pwa_share.py

Our first basic PWA mobile integration! Look for the QR-Code in Settings (#4472)

2026-09-20 19:45:11 +02:00

test_queue_handler.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_queue_ui.py

UI full refactor / upgrade (#4183)

2026-07-16 15:08:29 +02:00

test_request.py

Fix Jinja2 false-positive when URL contains {% (#4208)

2026-10-23 15:32:32 +02:00

test_restock_itemprop.py

Tests - Fix test_itemprop_percent_threshold for WTForms 3.3 (FloatField is now type="number") (#4588)

2026-10-23 17:51:24 +02:00

test_rss_group.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_rss_reader_mode.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_rss_single_watch.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_rss_tag_token.py

UI - Fixing lots of actions that should be a POST style action which led to a 404

2026-09-04 12:38:20 +02:00

test_rss.py

RSS - RSS pubDate is wrong on any non-UTC container: local time is relabelled as UTC - #4309 (#4314)

2026-08-20 15:49:29 +02:00

test_scheduler_timezone_regressions.py

Scheduler+API Bug - if an invalid timezone was set (through edit of watch or API) it could have crashed the scheduler, Added timezone to the official API docs (#4350)

2026-09-01 17:00:03 +02:00

test_scheduler.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_search.py

UI - Search modal - keep the search scoped to the tag you were viewing (#4425)

2026-09-12 17:48:48 +02:00

test_security.py

Fix Jinja2 false-positive when URL contains {% (#4208)

2026-10-23 15:32:32 +02:00

test_settings_notifications_page.py

UI - Fixing notification settings still trying to access main settings form that caused a crash on save (#4561)

2026-10-16 11:05:23 +02:00

test_settings_tag_force_reprocess.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_share_watch.py

UI - Make the 'share watch' optional, reduces visual noise, not really used by non-power users (#4448)

2026-09-17 10:54:43 +02:00

test_source.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_tag_colour.py

GHSA-4j9m-cxq4-9c36 - Improved validation Stored CSS Injection via tag_colour Field (#4317)

2026-08-20 17:59:02 +02:00

test_tag_url_match.py

fix: watches auto-tagged by group url_match_pattern regex missing from group tab filter (#4267)

2026-07-22 08:44:22 +02:00

test_translation_overlay.py

Translations - support for translation overlays/local translations of existing strings (#4365)

2026-09-03 11:15:46 +02:00

test_trigger_regex_with_filter.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_trigger_regex.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_trigger.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ui.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_unique_lines.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_watch_edited_flag.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_watch_fields_storage.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_watch_limit.py

Feature/Watch limit - Adding test (#4360)

2026-09-02 15:43:59 +02:00

test_watchlist_unviewed_state.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_xpath_default_namespace.py

…

test_xpath_selector_unit.py

…

test_xpath_selector.py

Memory usage - small improvement by tidying up module imports (#4352)

2026-09-01 17:50:50 +02:00

test.pdf

…

util.py

Tests - Fix test_itemprop_percent_threshold for WTForms 3.3 (FloatField is now type="number") (#4588)

2026-10-23 17:51:24 +02:00