Repository navigation
fix(config): use deepseek-flash as the default model - #271
Merged
Merged
Conversation
Lucas1479
changed the title
Lucas1479
added a commit
that referenced
this pull request
Oct 29, 2026
## Problem and change The Python dependency audit now rejects the main branch's locked `msgpack 1.2.2` for [CVE-2026-114613 / GHSA-j586-36cw-2gc2](GHSA-j586-36cw-2gc2), blocking the otherwise reviewed dependency updates #266 and #265. Raise the Host's msgpack minimum to `1.2.3`, lock that patched release, and update the Fish Audio example pin and its documentation. The existing audit policy and exceptions are unchanged. This is the four-file dependency commit `dc237e3de7412d2a825d350a7591c36dc6c260e0` from #271, applied separately to current main so the shared security repair can be reviewed independently. It also covers the example dependency update in #272. ## Validation Fresh CPython 3.12.10 environment on Windows: - `uv sync --locked --extra dev`: passed; installed msgpack 1.2.3. - Exact CI audit command, `uv run --locked --no-sync python -m pip_audit --local --progress-spinner off --ignore-vuln PYSEC-2026-1845`: passed, no known vulnerabilities and 2 existing ignores. - `python -X utf8 -m pytest tests/test_tts_fish_audio_backend.py tests/test_extension_fish_audio.py -q`: 62 passed with real local WebSocket peers. - `uv lock --check --offline`, `python -m ruff check .`, and `python tools/verify_python_environment.py --profile ci`: passed. - Fish Audio example wheel build and `tools/extension_package.py check-wheel`: passed. - Structural comparison of the lockfile with main confirms msgpack is the only changed third-party package entry; `git diff --check` passed. Full hosted CI is pending. No live provider requests were made. Draft pending CI and maintainer approval of this prerequisite repair. Signed-off-by: Lucas1479 <sli776@aucklanduni.ac.nz>
Lucas1479
marked this pull request as ready for review
October 29, 2026 00:51
Lucas1479
force-pushed
the
codex/issue-270-deepseek-flash
branch
from
October 29, 2026 00:53
dc237e3 to
80d0283
Compare
Lucas1479
changed the title
Signed-off-by: Lucas1479 <sli776@aucklanduni.ac.nz>
Lucas1479
force-pushed
the
codex/issue-270-deepseek-flash
branch
from
October 29, 2026 01:21
80d0283 to
d1fb485
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What and why
Closes #270. Use
deepseek-flash, the recommended DeepSeek API model name, for fresh/default DeepSeek configurations.Update the canonical configuration catalog, Codex/Pi examples, generated configuration, existing UI/subtitle fallback values, and README guidance. This remains one configuration change across 11 files.
Compatibility
Validation
Updated head:
408bff13e4afe62e370c29de9c2985b336b7bd54, synchronized with maine90364362e19c0db063d94fef042b0243f584cb3.The update is conflict-free. Its complete tree
d7d37d16cb0005d3f0ff9df0b55c1d633c4e02bdexactly matches the locally tested main-plus-PR composition.python -X utf8 -m pytest tests/test_pi_model_metadata.py -q: 24 passed, offline.node --experimental-strip-types --test tests/configCatalog.test.mjs tests/sceneCapabilityProjection.test.mjs: 26 passed.npm run check:config,npm run build, andgit diff --check: passed.Validation used Windows, Python 3.12.10 and Node 22.21.1. No live provider calls were made. All 15 hosted checks passed on the updated head, including source/packaged Electron smoke and catalog publication/recovery. Merged main
ffb1037b6a4cc8bcbf768d51111b108361952cb0was verified identical to the tested tree.