Merge remote-tracking branch 'origin/main' into fix-circular-json-exception

Author: maor-rozenfeld

THIRD_PARTY_LICENSES.txt

@@ -16333,23 +16333,22 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 The following npm packages may be included in this product:
 
- - @ai-sdk/anthropic@2.0.35
- - @ai-sdk/azure@2.0.12
+ - @ai-sdk/anthropic@2.0.45
+ - @ai-sdk/azure@2.0.70
  - @ai-sdk/cerebras@1.0.7
  - @ai-sdk/cohere@2.0.3
  - @ai-sdk/deepinfra@1.0.7
  - @ai-sdk/deepseek@1.0.7
  - @ai-sdk/gateway@1.0.11
  - @ai-sdk/gateway@1.0.5
- - @ai-sdk/google-vertex@3.0.51
- - @ai-sdk/google@2.0.20
- - @ai-sdk/google@2.0.23
+ - @ai-sdk/google-vertex@3.0.70
+ - @ai-sdk/google@2.0.38
  - @ai-sdk/groq@2.0.7
  - @ai-sdk/mistral@2.0.4
  - @ai-sdk/openai-compatible@1.0.7
- - @ai-sdk/openai@2.0.12
+ - @ai-sdk/openai@2.0.68
  - @ai-sdk/perplexity@2.0.3
- - @ai-sdk/provider-utils@3.0.12
+ - @ai-sdk/provider-utils@3.0.17
  - @ai-sdk/provider-utils@3.0.2
  - @ai-sdk/provider-utils@3.0.3
  - @ai-sdk/provider-utils@3.0.5

package-lock.json

@@ -31,17 +31,17 @@
   },
   "private": true,
   "dependencies": {
-    "@ai-sdk/anthropic": "2.0.35",
-    "@ai-sdk/azure": "2.0.12",
+    "@ai-sdk/anthropic": "2.0.45",
+    "@ai-sdk/azure": "2.0.70",
     "@ai-sdk/cerebras": "1.0.7",
     "@ai-sdk/cohere": "2.0.3",
     "@ai-sdk/deepinfra": "1.0.7",
     "@ai-sdk/deepseek": "1.0.7",
-    "@ai-sdk/google": "2.0.20",
-    "@ai-sdk/google-vertex": "^3.0.51",
+    "@ai-sdk/google": "2.0.38",
+    "@ai-sdk/google-vertex": "^3.0.70",
     "@ai-sdk/groq": "2.0.7",
     "@ai-sdk/mistral": "2.0.4",
-    "@ai-sdk/openai": "2.0.12",
+    "@ai-sdk/openai": "2.0.68",
     "@ai-sdk/perplexity": "2.0.3",
     "@ai-sdk/react": "2.0.22",
     "@ai-sdk/togetherai": "1.0.7",

package.json

@@ -4,6 +4,7 @@ import { LanguageModel } from 'ai';
 import { AiProvider } from '../providers';
 
 const googleVertexGeminiModels = [
+  'gemini-3-pro-preview',
   'gemini-2.5-pro',
   'gemini-2.5-flash',
   'gemini-2.5-flash-lite',

packages/openops/src/lib/ai/providers/google-vertex.ts

@@ -3,6 +3,7 @@ import { LanguageModel } from 'ai';
 import { AiProvider } from '../providers';
 
 const googleModels = [
+  'gemini-3-pro-preview',
   'gemini-2.0-flash-001',
   'gemini-1.5-flash',
   'gemini-1.5-flash-latest',

packages/openops/src/lib/ai/providers/google.ts

@@ -3,6 +3,7 @@ import { LanguageModel } from 'ai';
 import { AiProvider } from '../providers';
 
 const openAiModels = [
+  'gpt-5.1-2025-11-13',
   'gpt-5',
   'gpt-5-mini',
   'gpt-5-nano',

packages/openops/src/lib/ai/providers/openai.ts

@@ -1,6 +1,7 @@
 import { promises as dns } from 'dns';
 import ipRangeCheck from 'ip-range-check';
 import { isIPv4, isIPv6 } from 'net';
+import { SharedSystemProp, system } from '../system';
 
 const internalV4Cidrs = [
   '127.0.0.0/8', // Loopback addresses
@@ -55,7 +56,10 @@ async function isInternalHost(host: string): Promise<boolean> {
 }
 
 export async function validateHost(host: string | undefined): Promise<void> {
-  if (!host) return;
+  const isHostValidationEnabled = system.getBoolean(
+    SharedSystemProp.ENABLE_HOST_VALIDATION,
+  );
+  if (!isHostValidationEnabled || !host) return;
   const isPrivate = await isInternalHost(host);
   if (isPrivate) throw new Error('Host must not be an internal address');
 }

packages/server/shared/src/lib/host-validation/index.ts

@@ -148,6 +148,8 @@ export enum SharedSystemProp {
   LANGFUSE_SECRET_KEY = 'LANGFUSE_SECRET_KEY',
   LANGFUSE_PUBLIC_KEY = 'LANGFUSE_PUBLIC_KEY',
   LANGFUSE_HOST = 'LANGFUSE_HOST',
+
+  ENABLE_HOST_VALIDATION = 'ENABLE_HOST_VALIDATION',
 }
 
 export enum WorkerSystemProps {

packages/server/shared/src/lib/system/system-prop.ts

@@ -98,6 +98,7 @@ const systemPropDefaultValues: Partial<Record<SystemProp, string>> = {
   [AppSystemProp.LLM_CHAT_EXPIRE_TIME_SECONDS]: '86400', // 24 hours
   [AppSystemProp.TELEMETRY_MODE]: 'COLLECTOR',
   [AppSystemProp.TELEMETRY_COLLECTOR_URL]: 'https://telemetry.openops.com/save',
+  [SharedSystemProp.ENABLE_HOST_VALIDATION]: 'true',
 };
 
 export const system = {

packages/server/shared/src/lib/system/system.ts

@@ -1,15 +1,35 @@
 const resolve4 = jest.fn();
 const resolve6 = jest.fn();
+const getBoolean = jest.fn().mockReturnValue(true);
 
 jest.mock('dns', () => ({ promises: { resolve4, resolve6 } }));
+jest.mock('../../src/lib/system', () => ({
+  system: { getBoolean },
+  SharedSystemProp: { ENABLE_HOST_VALIDATION: 'ENABLE_HOST_VALIDATION' },
+}));
 
 import { validateHost } from '../../src/lib/host-validation';
 
 describe('Host Validation', () => {
+  beforeEach(() => {
+    getBoolean.mockReturnValue(true);
+  });
+
   afterEach(() => {
     jest.clearAllMocks();
   });
 
+  test('should skip if host validation is disabled', async () => {
+    getBoolean.mockReturnValue(false);
+    const host = '127.0.0.1';
+    await expect(validateHost(host)).resolves.toBeUndefined();
+  });
+
+  test('should skip for empty host', async () => {
+    const host = '';
+    await expect(validateHost(host)).resolves.toBeUndefined();
+  });
+
   test('should throw for private IPv4 address', async () => {
     const host = '192.168.1.1';
     await expect(validateHost(host)).rejects.toThrow(