## Tencent/AI-Infra-Guard — v4.6.0…v4.6.1

_45 commits._

### Features
- **Merge pull request #638 from kexinoh/add-glm-5-3-flash-fingerprint** (667f75d)
- **Add GLM-5.3-Flash fingerprint baseline** (b2dcb17)
- **Merge pull request #618 from Tencent/docs/whats-new-v460-update** (bb15526)
- **feat(api-checker): add Gemini, Gemma, and GLM fingerprints** (bdacf67)

### Fixes
- **fix(data): add missing severity fields in vuln_en YAML files** (e68bc5d)
- **fix(yamlcheck): support Chinese and UNKNOWN severity values, fix misplaced severity fields** (3b4c3b7)
- **fix(yamlcheck): use FingerPrintName instead of Name for vuln rule validation** (d04d4f9)
- **Merge pull request #642 from Tencent/fix/ai-agent-config-cve-name-mislabel** (82fd46e)
- **Merge pull request #623 from valleyxht/fix/empty-scan-incomplete-marker** (66ede31)
- **Merge pull request #588 from pucedoteth/fix-prerelease-version-normalization** (b437e46)
- **Merge pull request #622 from chaucerj/fix/agent-scan-unclosed-finish** (5f32939)
- **fix(data): correct mislabeled product names for CVE-2026-13236/13237/61428** (4688332)
- **Merge pull request #628 from rwinkelman/fix/mcp-scan-compact-security-findings-627** (dd6bd54)
- **Merge pull request #634 from Tencent/fix-main-docs-20260903-skill-scan-prescan-bytecode** (e4e622a)
- **Merge pull request #632 from NY1024/fix/skill-scan-hidden-content** (b2d8c16)
- **fix(skill-scan): stop silently hiding .pyc files and skip-dir payloads** (70824ef)
- **Merge pull request #541 from glatinone/fix/issue-534-mcp-connect-error-detail** (e4d0d94)
- **Merge pull request #624 from NY1024/fix/add-skill-scan-taskapi** (1e94fc2)
- **fix(mcp-scan): preserve security findings in context compaction prompt** (1abb851)
- **fix(mcp-scan): always set scanNote in result_meta and log in English** (ea627bd)
- **fix(taskapi): add skill_scan task type to Task API** (2263ea4)
- **fix(mcp-scan): 将空输出的扫描结果标记为 possibly-incomplete** (39692dd)
- **Merge pull request #612 from kexinoh/revert-599-fix/tencent-debian-mirror** (982d97c)
- **Revert "fix(docker): use Tencent Debian mirror for agent build"** (4ca9de8)
- **Merge pull request #599 from kexinoh/fix/tencent-debian-mirror** (d476070)
- **Merge pull request #608 from Tencent/fix-readme-whats-new-20260826** (75373a8)
- **Merge pull request #610 from NY1024/fix/mcp-timeout-float-cast** (9603022)
- **fix(mcp-scan): cast read_timeout_seconds to float for SDK 2.x type safety** (b59c93f)
- **Merge pull request #609 from NY1024/fix/mcp-sdk2x-api-compat** (7db50d8)
- **fix(mcp-scan): adapt to MCP Python SDK 2.x API changes** (dc5ae7f)
- **fix(mcp-scan): surface the underlying error when MCP connection fails (#534)** (8c70ac5)
- **fix(docker): use Tencent Debian mirror for agent build** (d369d46)
- **fix(parser): keep pre-release versions below their release in versionCheck** (abdba59)

### Backend
- **Merge pull request #640 from Tencent/community-health-files** (6bd026d)
- **Update API checker baseline tests** (23fe1b2)
- **Merge pull request #603 from kexinoh/feat/api-checker-model-fingerprints** (4a56459)
- **agent-scan: recover finish when LLM omits closing tags** (36102a9)
- **Merge pull request #607 from kexinoh/docs/api-checker-generic-relay-doc** (baa717d)

### Docs
- **docs: add CONTRIBUTING, CODE_OF_CONDUCT, issue/PR templates** (c533f62)
- **docs: update pre_scan capability description in skill-scan README** (3e9c114)
- **docs(taskapi): add comment clarifying attachments priority in skill_scan** (e299286)
- **docs: rewrite v4.6.0 What's New with LLM API poisoning detection, Agent-Scan v5.0.0, vuln library 146/2000+, MCP/Skill fixes** (087500a)
- **docs: add v4.6.0 What's New entry across all 9 README languages** (5e20568)
- **docs(api-checker): generalize relay consistency check** (76cc3a1)

### Chore
- **chore: bump version to v4.6.1** (7ef21e9)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/Tencent/AI-Infra-Guard?utm_source=github-action)._