Yansong Zhang
|
d07e2d23b5
|
refactor(api): type network access control plane boundaries
|
2026-09-23 10:58:03 +08:00 |
|
Yansong Zhang
|
af693a7222
|
fix(api): isolate MCP body parsing from database sessions
|
2026-09-23 10:49:19 +08:00 |
|
Yansong Zhang
|
4e1b63cda1
|
fix(api): skip unrelated bodies in app access error hook
|
2026-09-23 10:42:33 +08:00 |
|
Yansong Zhang
|
e4a2c433ea
|
chore: remove SaaS dev queue repair tooling from feature PR
|
2026-09-22 19:59:21 +08:00 |
|
Yansong Zhang
|
343fc36482
|
test(api): move SaaS dev queue repair tests into API suite
|
2026-09-22 19:37:58 +08:00 |
|
Yansong Zhang
|
388e663a30
|
fix(api): require published apps before public web admission
|
2026-09-22 16:50:07 +08:00 |
|
CodingOnStar
|
604d785fed
|
fix: align access control editor permissions with PRD
|
2026-09-22 13:46:04 +08:00 |
|
Yansong Zhang
|
b3fb4e7560
|
fix(api): align access failures with native endpoint contracts
|
2026-09-21 16:48:09 +08:00 |
|
Yansong Zhang
|
04f3ed744b
|
fix(api): include trusted client IP in app access 404 errors
Refs SNP-837. Preserve existing error semantics and restrict request-local, non-cacheable IP metadata to Web/Console app access errors.
|
2026-09-20 19:00:55 +08:00 |
|
Yansong Zhang
|
f01cdb35cd
|
fix(api): expose trusted current IP before policy creation
Refs SNP-835. Support the first Policy without relaxing trusted-proxy or persisted workspace-role checks.
|
2026-09-20 15:52:36 +08:00 |
|
CodingOnStar
|
a2c0868297
|
fix(ci): expose API documentation converter errors
|
2026-09-17 11:21:43 +08:00 |
|
Yansong Zhang
|
d2de3fe533
|
chore: satisfy network access CI style checks
|
2026-09-11 17:13:32 +08:00 |
|
Yansong Zhang
|
9e985c2112
|
fix: complete network access control backend contracts
|
2026-09-11 17:01:55 +08:00 |
|
hjlarry
|
e8b965a3c3
|
refactor: migrate network access group APIs
|
2026-09-10 14:25:38 +08:00 |
|
Yansong Zhang
|
4f82c193bc
|
test: use validated config overrides
|
2026-09-09 18:42:01 +08:00 |
|
Yansong Zhang
|
1c3d5fce9e
|
fix: avoid dynamic icon type lookup
|
2026-09-09 18:27:53 +08:00 |
|
Yansong Zhang
|
77525902ba
|
Merge remote-tracking branch 'origin/main' into song/snp-682-ip-allowlist
# Conflicts:
# api/controllers/console/wraps.py
# api/tests/unit_tests/controllers/console/test_wraps.py
# packages/contracts/generated/api/console/apps/orpc.gen.ts
# packages/contracts/generated/api/console/workspaces/orpc.gen.ts
|
2026-09-09 18:22:47 +08:00 |
|
Yansong Zhang
|
1d9862b073
|
fix: separate network access API URL
|
2026-09-09 17:41:39 +08:00 |
|
dependabot[bot]
|
0468eee02f
|
chore(deps): bump gunicorn from 26.1.0 to 26.2.0 in /api in the flask group across 1 directory (#41505)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-09-09 09:30:17 +00:00 |
|
 Duda NogueiraandClaude Opus 5
|
647fec55d9
|
chore(release): Upgrade self-hosted Weaviate to 1.39 (#38214)
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
|
2026-09-09 09:19:54 +00:00 |
|
dependabot[bot]
|
a1a1a42c42
|
chore(deps): bump the storage group across 1 directory with 4 updates (#41893)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-09-09 09:18:06 +00:00 |
|
dependabot[bot]
|
1007cf8294
|
chore(deps): bump httpx2 from 2.5.0 to 2.12.0 in /api (#42012)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-09-09 09:15:16 +00:00 |
|
wangxiaolei
|
adedbf1f12
|
fix: fix undo delete operation for webhook trigger node lead the url … (#42069)
|
2026-09-09 09:02:04 +00:00 |
|
Asuka Minato
|
677f2cf43f
|
chore: example to add Mapped (#40374)
|
2026-09-09 08:56:41 +00:00 |
|
![autofix-ci[bot]](/avatar/90c1f68f2dec38933926f82cc3639064fb96506a5738419500ebeb5085083409?size=40) Asuka Minatoandautofix-ci[bot]
|
f71047f31a
|
test: migrate console workflow sessions and ORM models to SQLite (#40563)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 08:50:02 +00:00 |
|
Asuka Minato
|
a062155841
|
test: migrate console app response sessions and ORM models to SQLite (#40562)
|
2026-09-09 08:47:46 +00:00 |
|
 Yunlu WenandDevin
|
a7cc6913af
|
chore(deps): bump unstructured from 0.21.5 to 0.27.5 in /api (#42053)
Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
|
2026-09-09 08:47:09 +00:00 |
|
Yansong Zhang
|
5ec3f43bb7
|
fix: align paid plan entitlement contract
|
2026-09-09 16:46:02 +08:00 |
|
Yansong Zhang
|
49b8284345
|
fix: normalize app access points by mode
|
2026-09-09 16:34:35 +08:00 |
|
Yansong Zhang
|
c0bd864139
|
fix: harden network access policy compatibility
|
2026-09-09 16:31:13 +08:00 |
|
Yansong Zhang
|
7e3ceaba82
|
feat: align network access BFF with app policies
|
2026-09-09 15:44:23 +08:00 |
|
![autofix-ci[bot]](/avatar/90c1f68f2dec38933926f82cc3639064fb96506a5738419500ebeb5085083409?size=40) Wu Tianweiandautofix-ci[bot]
|
f89c3e6ec7
|
feat: add agent resource permissions (#41940)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 07:30:39 +00:00 |
|
Asuka Minato
|
4f29213cdc
|
test: migrate workflow node execution task sessions and ORM models to SQLite (#40571)
|
2026-09-09 07:27:39 +00:00 |
|
Asuka Minato
|
62adebcf4e
|
test: reclassify response filter regressions (#40706)
|
2026-09-09 07:12:01 +00:00 |
|
Harsh Kashyap
|
6e91ee2694
|
fix: join all rich_text/title segments in Notion database extraction (#42050)
|
2026-09-09 06:36:13 +00:00 |
|
Harsh Kashyap
|
112e33a665
|
fix: escape double quotes in .xls cell values like the .xlsx path (#42049)
|
2026-09-09 06:05:08 +00:00 |
|
![autofix-ci[bot]](/avatar/90c1f68f2dec38933926f82cc3639064fb96506a5738419500ebeb5085083409?size=40) 
|
3f76dbe67a
|
refactor(controllers/console): inject saved-message query with @model_validate (#41819)
Co-authored-by: 几一奥 <2481680240@qq.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 05:41:53 +00:00 |
|
 nehal-a2zandnehal-a2z
|
cd031ab423
|
refactor(api): remove InstalledApp implicit-session accessor (#42000)
Co-authored-by: nehal-a2z <183489955+nehal-a2z@users.noreply.github.com>
|
2026-09-09 05:31:08 +00:00 |
|
Eddy ZHANG
|
dc9dd9c559
|
refactor(models): remove the App.bound_agent_id and App.is_agent wrappers (#41998)
|
2026-09-09 05:17:29 +00:00 |
|
Eddy ZHANG
|
e65f45f17a
|
refactor(models): remove the unread App.author_name db.session wrapper (#41983)
|
2026-09-09 05:16:14 +00:00 |
|
L1nSn0w
|
8a69aa2884
|
fix(console): stop advertising the education plan outside Dify Cloud (#41898)
|
2026-09-09 04:38:50 +00:00 |
|
dependabot[bot]
|
f1c2917038
|
chore(deps): bump gitpython from 3.1.58 to 3.1.59 in /api (#42017)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-09-09 04:21:32 +00:00 |
|
Harsh Kashyap
|
0b8435da71
|
fix(api): accept valid epoch-0 timestamps in localtime conversion tool (#42027)
|
2026-09-09 03:38:58 +00:00 |
|
Harsh Kashyap
|
455951056a
|
fix: keep Notion table cell rich text segments in one Markdown column (#41993)
|
2026-09-09 03:23:01 +00:00 |
|
![autofix-ci[bot]](/avatar/90c1f68f2dec38933926f82cc3639064fb96506a5738419500ebeb5085083409?size=40) 林玮 (Jade Lin)andautofix-ci[bot]
|
0c443b7666
|
fix(api): handle invalid app icon references (#41977)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 02:56:40 +00:00 |
|
Harsh Kashyap
|
cc44574543
|
fix(api): reject trailing newlines in user_input_form variable names (#42029)
|
2026-09-09 02:51:46 +00:00 |
|
![autofix-ci[bot]](/avatar/90c1f68f2dec38933926f82cc3639064fb96506a5738419500ebeb5085083409?size=40) Harsh Kashyapandautofix-ci[bot]
|
75f203cdb9
|
fix: validate declared blob size before allocating buffer in chunk merger (#42021)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 02:47:25 +00:00 |
|
Harsh Kashyap
|
da6a1b01d1
|
fix(api): fall back to first server URL when X-Request-Env is set but servers lack env key (#42025)
|
2026-09-09 02:38:44 +00:00 |
|
![autofix-ci[bot]](/avatar/90c1f68f2dec38933926f82cc3639064fb96506a5738419500ebeb5085083409?size=40) FFXNandautofix-ci[bot]
|
bb2945a1a3
|
fix: dataset hitcount deadlock (#41979)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-09-09 02:37:26 +00:00 |
|
CoralGarden52
|
89df7a670a
|
fix(dataset): clean multimodal attachments during reindex (#41999)
|
2026-09-09 01:43:57 +00:00 |
|