Commit Graph
7772 Commits
Author SHA1 Message Date
Yansong Zhang d07e2d23b5 refactor(api): type network access control plane boundaries 2026-09-23 10:58:03 +08:00
Yansong Zhang af693a7222 fix(api): isolate MCP body parsing from database sessions 2026-09-23 10:49:19 +08:00
Yansong Zhang 4e1b63cda1 fix(api): skip unrelated bodies in app access error hook 2026-09-23 10:42:33 +08:00
Yansong Zhang e4a2c433ea chore: remove SaaS dev queue repair tooling from feature PR 2026-09-22 19:59:21 +08:00
Yansong Zhang 343fc36482 test(api): move SaaS dev queue repair tests into API suite 2026-09-22 19:37:58 +08:00
Yansong Zhang 388e663a30 fix(api): require published apps before public web admission 2026-09-22 16:50:07 +08:00
CodingOnStar 604d785fed fix: align access control editor permissions with PRD 2026-09-22 13:46:04 +08:00
Yansong Zhang b3fb4e7560 fix(api): align access failures with native endpoint contracts 2026-09-21 16:48:09 +08:00
Yansong Zhang 04f3ed744b fix(api): include trusted client IP in app access 404 errors
Refs SNP-837. Preserve existing error semantics and restrict request-local, non-cacheable IP metadata to Web/Console app access errors.
2026-09-20 19:00:55 +08:00
Yansong Zhang f01cdb35cd fix(api): expose trusted current IP before policy creation
Refs SNP-835. Support the first Policy without relaxing trusted-proxy or persisted workspace-role checks.
2026-09-20 15:52:36 +08:00
CodingOnStar a2c0868297 fix(ci): expose API documentation converter errors 2026-09-17 11:21:43 +08:00
Yansong Zhang d2de3fe533 chore: satisfy network access CI style checks 2026-09-11 17:13:32 +08:00
Yansong Zhang 9e985c2112 fix: complete network access control backend contracts 2026-09-11 17:01:55 +08:00
hjlarry e8b965a3c3 refactor: migrate network access group APIs 2026-09-10 14:25:38 +08:00
Yansong Zhang 4f82c193bc test: use validated config overrides 2026-09-09 18:42:01 +08:00
Yansong Zhang 1c3d5fce9e fix: avoid dynamic icon type lookup 2026-09-09 18:27:53 +08:00
Yansong Zhang 77525902ba Merge remote-tracking branch 'origin/main' into song/snp-682-ip-allowlist
# Conflicts:
#	api/controllers/console/wraps.py
#	api/tests/unit_tests/controllers/console/test_wraps.py
#	packages/contracts/generated/api/console/apps/orpc.gen.ts
#	packages/contracts/generated/api/console/workspaces/orpc.gen.ts
2026-09-09 18:22:47 +08:00
Yansong Zhang 1d9862b073 fix: separate network access API URL 2026-09-09 17:41:39 +08:00
dependabot[bot] 0468eee02f chore(deps): bump gunicorn from 26.1.0 to 26.2.0 in /api in the flask group across 1 directory (#41505)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-09 09:30:17 +00:00
Duda NogueiraandClaude Opus 5 647fec55d9 chore(release): Upgrade self-hosted Weaviate to 1.39 (#38214)
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-09 09:19:54 +00:00
dependabot[bot] a1a1a42c42 chore(deps): bump the storage group across 1 directory with 4 updates (#41893)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-09 09:18:06 +00:00
dependabot[bot] 1007cf8294 chore(deps): bump httpx2 from 2.5.0 to 2.12.0 in /api (#42012)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-09 09:15:16 +00:00
wangxiaolei adedbf1f12 fix: fix undo delete operation for webhook trigger node lead the url … (#42069) 2026-09-09 09:02:04 +00:00
Asuka Minato 677f2cf43f chore: example to add Mapped (#40374) 2026-09-09 08:56:41 +00:00
Asuka Minatoandautofix-ci[bot] f71047f31a test: migrate console workflow sessions and ORM models to SQLite (#40563)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-09 08:50:02 +00:00
Asuka Minato a062155841 test: migrate console app response sessions and ORM models to SQLite (#40562) 2026-09-09 08:47:46 +00:00
Yunlu WenandDevin a7cc6913af chore(deps): bump unstructured from 0.21.5 to 0.27.5 in /api (#42053)
Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-09-09 08:47:09 +00:00
Yansong Zhang 5ec3f43bb7 fix: align paid plan entitlement contract 2026-09-09 16:46:02 +08:00
Yansong Zhang 49b8284345 fix: normalize app access points by mode 2026-09-09 16:34:35 +08:00
Yansong Zhang c0bd864139 fix: harden network access policy compatibility 2026-09-09 16:31:13 +08:00
Yansong Zhang 7e3ceaba82 feat: align network access BFF with app policies 2026-09-09 15:44:23 +08:00
Wu Tianweiandautofix-ci[bot] f89c3e6ec7 feat: add agent resource permissions (#41940)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-09 07:30:39 +00:00
Asuka Minato 4f29213cdc test: migrate workflow node execution task sessions and ORM models to SQLite (#40571) 2026-09-09 07:27:39 +00:00
Asuka Minato 62adebcf4e test: reclassify response filter regressions (#40706) 2026-09-09 07:12:01 +00:00
Harsh Kashyap 6e91ee2694 fix: join all rich_text/title segments in Notion database extraction (#42050) 2026-09-09 06:36:13 +00:00
Harsh Kashyap 112e33a665 fix: escape double quotes in .xls cell values like the .xlsx path (#42049) 2026-09-09 06:05:08 +00:00
3f76dbe67a refactor(controllers/console): inject saved-message query with @model_validate (#41819)
Co-authored-by: 几一奥 <2481680240@qq.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-09 05:41:53 +00:00
nehal-a2zandnehal-a2z cd031ab423 refactor(api): remove InstalledApp implicit-session accessor (#42000)
Co-authored-by: nehal-a2z <183489955+nehal-a2z@users.noreply.github.com>
2026-09-09 05:31:08 +00:00
Eddy ZHANG dc9dd9c559 refactor(models): remove the App.bound_agent_id and App.is_agent wrappers (#41998) 2026-09-09 05:17:29 +00:00
Eddy ZHANG e65f45f17a refactor(models): remove the unread App.author_name db.session wrapper (#41983) 2026-09-09 05:16:14 +00:00
L1nSn0w 8a69aa2884 fix(console): stop advertising the education plan outside Dify Cloud (#41898) 2026-09-09 04:38:50 +00:00
dependabot[bot] f1c2917038 chore(deps): bump gitpython from 3.1.58 to 3.1.59 in /api (#42017)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-09 04:21:32 +00:00
Harsh Kashyap 0b8435da71 fix(api): accept valid epoch-0 timestamps in localtime conversion tool (#42027) 2026-09-09 03:38:58 +00:00
Harsh Kashyap 455951056a fix: keep Notion table cell rich text segments in one Markdown column (#41993) 2026-09-09 03:23:01 +00:00
林玮 (Jade Lin)andautofix-ci[bot] 0c443b7666 fix(api): handle invalid app icon references (#41977)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-09 02:56:40 +00:00
Harsh Kashyap cc44574543 fix(api): reject trailing newlines in user_input_form variable names (#42029) 2026-09-09 02:51:46 +00:00
Harsh Kashyapandautofix-ci[bot] 75f203cdb9 fix: validate declared blob size before allocating buffer in chunk merger (#42021)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-09 02:47:25 +00:00
Harsh Kashyap da6a1b01d1 fix(api): fall back to first server URL when X-Request-Env is set but servers lack env key (#42025) 2026-09-09 02:38:44 +00:00
FFXNandautofix-ci[bot] bb2945a1a3 fix: dataset hitcount deadlock (#41979)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-09 02:37:26 +00:00
CoralGarden52 89df7a670a fix(dataset): clean multimodal attachments during reindex (#41999) 2026-09-09 01:43:57 +00:00