cetdev/dify
0
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
11,401 Commits 643 Branches 176 Tags
build/test-annotation
Commit Graph
11401 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
hjlarry ecea749297 Revert "chore: improve lambda plugin runtime error display" 
This reverts commit 6bc1508a6b.
 2026-07-23 13:35:52 +08:00
hjlarry 31fc6c71f7 fix(api): prevent identity logging deadlock 2026-07-23 13:16:38 +08:00
hjlarry 08f08c61c8 test(api): re-enable identity context log filter 2026-07-23 13:16:32 +08:00
hjlarry 6bc1508a6b chore: improve lambda plugin runtime error display 2026-07-23 09:17:07 +08:00
hjlarry be697e3050 test(api): disable identity context log filter 2026-07-23 09:16:22 +08:00
林玮 (Jade Lin) 688a279a75 fix(api): use resource tenant for draft variable files (#39307) 
(cherry picked from commit 28d17da3b1)
 2026-07-21 10:24:49 +08:00
林玮 (Jade Lin) 245876c468 fix(trigger): return 429 instead of 500 when API quota is exceeded (#38664) 
(cherry picked from commit 4043adacd7)
 2026-07-20 15:46:46 +08:00
林玮 (Jade Lin) 82c91170b7 fix(trigger): surface webhook trigger quota exceeded as 429 response (#38656) 
(cherry picked from commit 44fb074359)
 2026-07-20 15:46:46 +08:00
林玮 (Jade Lin) 7be4546083 fix(api, web): scope trial app file uploads to the app tenant (#39149) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit f93a5b95c6)
 2026-07-20 15:46:46 +08:00
非法操作 2766439c7c fix: can't create chat app when get tenant default model schema error (#39266) 
(cherry picked from commit 30df1433cc)
 2026-07-20 15:12:54 +08:00
林玮 (Jade Lin) 3cc26b84bb refactor(api): pass tenant_id explicitly to workflow repositories (#39042) 
(cherry picked from commit 678ce2ab37)
 2026-07-20 14:42:56 +08:00
Bond ZhuandBond Zhu b3dd8ffcfc chore(api): add breadcrumb logs around vector backend factory resolution 
Some production chat requests intermittently park forever between the
vector_db whitelist query and TidbOnQdrantVectorFactory.init_vector's
first log line: the message row stays status=normal with an empty answer,
no error is recorded, and no timeout ever fires. Live captures place the
freeze inside Vector._init_vector's factory resolution, but the API runs
gevent workers and a parked greenlet is invisible to py-spy (default and
--native modes both show only idle hubs), so the exact parking statement
cannot be captured from outside the process.

INFO-level breadcrumbs added:
- vector_factory._init_vector: before/after get_vector_factory, with
  tenant_id + dataset_id for correlating a hung request with its logs
- vector_backend_registry: cache-miss marker, and before/after ep.load()
  with the entry point value (module about to be imported)

Decoding the log tail of the next hung request:
- "resolving..." absent            -> parked before resolution
- "resolving..." only, no miss log -> parked on the cache-hit path or
                                      inside logging itself (handler lock)
- cache miss, no "loading..."      -> parked in entry_points() scan
- "loading...", no "... loaded"    -> parked inside ep.load() import
                                      (import lock / gevent interaction)
- "resolved...", no init_vector:   -> parked at the factory call boundary

All lines fire at most once per Vector construction; the slow-path lines
fire only on per-process first resolution, so added volume matches the
existing init_vector breadcrumb. Diagnostic instrumentation; no logic
changes, cheap to revert.
 2026-07-20 14:21:09 +08:00
yyhand非法操作 c949d1da27 ci: route default Depot jobs to 4-core runners (#39277) 
(cherry picked from commit 58d1dd8873)
 2026-07-20 14:17:51 +08:00
非法操作 1328644dfc fix: change email not work (#39182) 
(cherry picked from commit aff8a49bbf)
 2026-07-20 14:17:51 +08:00
非法操作 2467df55c7 fix: can't debug model plugins (#38500) 
(cherry picked from commit 6edce14e88)
 2026-07-20 14:17:51 +08:00
非法操作 fed5a9a627 fix(web): redirect imported apps with creator permissions (#38460) 
(cherry picked from commit 1247fa28f1)
 2026-07-20 14:17:51 +08:00
林玮 (Jade Lin) 0a10d02a9f refactor(api): pass session explicitly through recommended app service chain 2026-07-15 15:57:49 +08:00
Xiyuan Chenand林玮 (Jade Lin) 5c0a0759f0 fix: preserve ResponseStreamFilter state across workflow pause/resume (#38540) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit d72ee32ba1)
 2026-07-15 14:47:22 +08:00
林玮 (Jade Lin) 3443054d96 fix(api): harden trial apps access for recommended apps (#38970) 
(cherry picked from commit edca982b1e)
 2026-07-15 14:36:35 +08:00
wangxiaoleiandXiyuan Chen be737a3504 feat: when knowledge permission is all team need update rbac setttings (#38911) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit c278148c8f)
 2026-07-14 03:52:24 -07:00
wangxiaoleiandXiyuan Chen e0b910d43d feat: create app init rbac scope to all and add workspace members. (#38636) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 7e05f28a46)
 2026-07-14 03:52:24 -07:00
Coding On Star 44048320bd fix(auth): preserve redirect URL across auth flows (#38905) 
Co-authored-by: CodingOnStar <hanxujiang@dify.com>
(cherry picked from commit 2c4d8ef098)
 2026-07-14 18:23:54 +08:00
Coding On Star 3dc85bd398 fix(auth): prevent open redirects in post-login flows (#38864) 
Co-authored-by: CodingOnStar <hanxujiang@dify.com>
(cherry picked from commit c68e5e5ed3)
 2026-07-14 18:23:54 +08:00
SnakinyaandCoding On Star 56d87d6318 fix: SSRF bypass via raw httpx.get in API tool schema fetch (#37746) 
Co-authored-by: 归青 <guiqing.lzw@antgroup.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com>
(cherry picked from commit ae0d6ee214)
 2026-07-14 18:23:54 +08:00
林玮 (Jade Lin)andCoding On Star 73db4d3932 feat(oauth): preserve redirect_url through OAuth state for post-login… (#38900) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 82ff93cbdd)
 2026-07-14 18:23:54 +08:00
林玮 (Jade Lin)andCoding On Star 13c6556e6f fix(api): require trial app registration for reads (#38858) 
(cherry picked from commit 8e0d10bf5e)
 2026-07-14 18:23:54 +08:00
Xin ZhangandXiyuan Chen 7570427f51 feat(enterprise): enforce licensed seats cap at account creation (#38883) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 28a036066a)
 2026-07-14 00:22:05 -07:00
Xiyuan Chen 48717e5981 chore(deps): bump python-engineio, python-socketio, soupsieve for CVE fixes (#38844) 
(cherry picked from commit c21a248df6)
 2026-07-13 01:04:45 -07:00
Xiyuan Chen 5805b94e23 fix(api): wire dedicated timeout into inner RBAC requests (#38150) 
(cherry picked from commit 0d5f43520c)
 2026-07-12 23:39:30 -07:00
Jashwanth Reddy GummulaandXiyuan Chen c64c772b5b fix: resolve 36288 mypy errors (#37850) 
Co-authored-by: WH-2099 <wh2099@pm.me>
(cherry picked from commit dd0c4a2296)
 2026-07-12 21:53:31 -07:00
FFXNandXiyuan Chen b4537455cf fix: enhance SQL query safety and add metadata key validation (#38307) 
(cherry picked from commit 88864ae086)
 2026-07-12 21:53:31 -07:00
FFXNandXiyuan Chen 5fe010b653 fix: sql injection (#38295) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
(cherry picked from commit d9884efaee)
 2026-07-12 21:53:31 -07:00
蒜香飞行矮堇瓜andXiyuan Chen 66cd69b07e fix(api): avoid infinite loop in _delete_records when batch deletion fails (#38118) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 089c3f4af0)
 2026-07-12 21:53:31 -07:00
linhongkuanandXiyuan Chen 09eca00370 fix(api): isolate side-effect database writes (#37895) 
Co-authored-by: FFXN <31929997+FFXN@users.noreply.github.com>
(cherry picked from commit d8f3be4bcd)
 2026-07-12 21:53:31 -07:00
Xiyuan Chen 12cf69e5c8 fix(api): register rbac-migrate-dataset-permissions CLI command (#38204) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 5ce13d1773)
 2026-07-12 21:53:31 -07:00
wangxiaoleiandXiyuan Chen 4332023806 feat: support dataset permission migrate to rbac (#38166) 
(cherry picked from commit 528bf95d1b)
 2026-07-12 21:53:31 -07:00
Wu TianweiandXiyuan Chen dd9f1e041e fix: update documentation links in permission set and role modals (#38188) 
(cherry picked from commit 46163c68bd)
 2026-07-12 21:53:31 -07:00
Wu TianweiandXiyuan Chen 2271257c2f chore(i18n): update role management permission keys for multiple languages (#38186) 
(cherry picked from commit 54a8ff2c1d)
 2026-07-12 21:53:31 -07:00
wangxiaoleiandXiyuan Chen 8adbda988b perf: make command rbac-migrate-member-roles use less mem and make it… (#38151) 
(cherry picked from commit 49a92f096f)
 2026-07-12 21:53:31 -07:00
-LAN-andXiyuan Chen 876ac24496 fix(api): require edit access for trace config changes (#37973) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 0035d90e36)
 2026-07-12 21:53:31 -07:00
wangxiaolei 8b0892fd79 fix: fix auth prefix duplicate (#38616) 2026-07-10 10:51:05 +08:00
Coding On StarandCodingOnStar 50d2ad8479 fix: chunk workflow failure tracking data (#38598) 
(cherry picked from commit 2f99652203)

Co-authored-by: CodingOnStar <hanxujiang@dify.com>
 2026-07-09 17:11:46 +08:00
Crazywoolaandyyh 1ef8d3a2a9 fix: display errors for oauth page (#38546) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 5ffd4345dc)
 2026-07-08 16:31:31 +08:00
yyh b8adb0cac2 refactor(web): move app context layout styles to shell (#38511) 
(cherry picked from commit 2c6ec1a761)
 2026-07-08 16:31:31 +08:00
yyh df88c45e3c chore(dify-ui): update theme tokens (#38189) 
(cherry picked from commit f8afa49ab9)
 2026-07-08 16:31:31 +08:00
autofix-ci[bot]andYansong Zhang d3df1b2847 [autofix.ci] apply automated fixes 2026-07-08 09:55:47 +08:00
Yansong Zhang 709aac9337 test: cover credit pool quota paths 2026-07-08 09:55:47 +08:00
Yansong Zhang 865affdd9b test: update quota billing service mocks 2026-07-08 09:55:47 +08:00
Yansong Zhang 71840c3f71 fix(api): route quota calls to new billing 2026-07-08 09:55:47 +08:00
Yansong Zhang dc09aea7b3 feat(api): use billing quota for credit pool 2026-07-08 09:55:47 +08:00