Skip to content

AstrBot

v4.25.5 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent ai astrbot llm chatgpt discord
+9 more
docker gemini llama mcp openai python qq qqbot telegram

Affected surfaces

rce_ssrf

Summary

AI summary

Updates Bug Fixes, 修复, and 优化 across a mixed release.

Changes in this release

Performance Low

Improved Anthropic response parsing when content-filtered responses omit the `usage` field.

Improved Anthropic response parsing when content-filtered responses omit the `usage` field.

Source: llm_adapter@2026-06-07

Confidence: high

Bugfix Medium

Tightened local file path handling in the message tool to avoid unintended attachment path usage.

Tightened local file path handling in the message tool to avoid unintended attachment path usage.

Source: llm_adapter@2026-06-07

Confidence: high

Bugfix Medium

Fixed Star Context typing to restore related SDK type hints and runtime compatibility.

Fixed Star Context typing to restore related SDK type hints and runtime compatibility.

Source: llm_adapter@2026-06-07

Confidence: high

Bugfix Medium

Fixed QQ Official Webhook mode not restarting correctly.

Fixed QQ Official Webhook mode not restarting correctly.

Source: llm_adapter@2026-06-07

Confidence: high

Full changelog

What's Changed

修复

  • 收紧消息工具对本地文件路径的处理边界,减少非预期路径被用于消息附件的情况。(#8660)
  • 修复 Star Context 类型定义,恢复相关 SDK 类型提示与运行兼容性。(#8659)
  • 修复 QQ 官方 Webhook 模式无法正常重启的问题。

优化

  • 改进 Anthropic 在内容过滤响应中缺失 usage 字段时的处理,避免相关请求结果解析异常。(#8647)

What's Changed (EN)

Bug Fixes

  • Tightened local file path handling in the message tool to avoid unintended attachment path usage. (#8660)
  • Fixed Star Context typing to restore related SDK type hints and runtime compatibility. (#8659)
  • Fixed QQ Official Webhook mode not restarting correctly.

Improvements

  • Improved Anthropic response parsing when content-filtered responses omit the usage field. (#8647)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track AstrBot

Get notified when new releases ship.

Sign up free

About AstrBot

All releases →

Related context

Earlier breaking changes

  • v4.25.3 Upgrades MiniMax Token Plan default model to M3.

Beta — feedback welcome: [email protected]