GareArc
f729bc87a2
feat(inner_api): add endpoint to invalidate plugin model providers cache
...
Enterprise installs plugins into a workspace by talking to the plugin
daemon directly, so Dify never learns that a tenant's cached model
provider list is stale and serves it for the full 24h TTL.
Expose the existing PluginService.invalidate_plugin_model_providers_cache
over the inner API so enterprise can drop the cache for the tenants it
just changed. Batching is left to the caller.
2026-07-23 20:51:52 -07:00
GareArc
160a1bc405
Merge branch 'gareth/esq1-170-rbac-for-agent' into deploy/enterprise
2026-07-22 22:51:51 -07:00
GareArc
553c38b1f2
Merge branch 'gareth/esq1-170-rbac-for-agent' into deploy/enterprise
2026-07-22 22:17:03 -07:00
Xiyuan Chen and GitHub
9e74520b50
Merge branch 'main' into gareth/esq1-170-rbac-for-agent
2026-07-22 22:01:46 -07:00
GareArc
d16d2d1efa
Merge remote-tracking branch 'origin/gareth/esq1-170-rbac-for-agent' into gareth/esq1-170-rbac-for-agent
2026-07-22 21:32:30 -07:00
GareArc
91126a5fda
fix(agent): stack agent.manage onto agent app management and import paths
...
Roster composer writes keep their app_edit / snippets gate and require
workspace agent.manage in addition, instead of replacing it. Generic app
management routes (update/delete/copy/export/name/icon/site/site-enable/
api-enable/api-keys) enforce agent.manage when the target is a roster
Agent App and reject hidden workflow-only backing apps outright, which
stay usable only through the Agent runtime surfaces. Importing an Agent
DSL requires agent.manage and the denial surfaces as 403 instead of a
generic failed import.
2026-07-22 21:31:56 -07:00
GareArc
8482167f1c
fix(agent): authorize workflow-only agents against their parent workflow app
...
The RBAC resource resolver returned the hidden runtime backing app for
workflow-only agents, which never receives a resource access policy, so
per-resource overrides on the parent workflow app were ignored. Resolve
agent_id to the policy-owning agent.app_id instead and keep
backing_app_id strictly runtime-only.
2026-07-22 21:31:43 -07:00
1835e8ef31
fix: use re.fullmatch in email validator to reject trailing newlines ( #39234 ) ( #39320 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-07-23 04:19:44 +00:00
yyh and GitHub
6cd10f5e04
Merge branch 'main' into gareth/esq1-170-rbac-for-agent
2026-07-23 12:07:51 +08:00
2b8e40af32
fix(auth): validate account before accepting invitations ( #39438 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-23 03:56:32 +00:00
45711eb6dd
chore(api): cloud use presigned download url on api site ( #39436 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-23 03:34:49 +00:00
Asuka Minato and GitHub
fd703739b5
test: use sqlite3 session in test_async_workflow_service ( #38692 )
2026-07-23 03:34:10 +00:00
Asuka Minato and GitHub
82c8741c73
test: use sqlite3 session in test_hitl_service_api ( #38685 )
2026-07-23 03:33:01 +00:00
Asuka Minato and GitHub
78023bf50d
test: use sqlite3 session in test_conversation ( #38684 )
2026-07-23 03:32:17 +00:00
GareArc
1b5fbb2142
Merge remote-tracking branch 'origin/main' into gareth/esq1-170-rbac-for-agent
2026-07-22 20:24:53 -07:00
0ad985515b
test: move password reset coverage to unit tests ( #38936 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-23 03:16:06 +00:00
yunlu.wen
60885db938
Merge branch 'feat/redis-azure-managed-identity' into deploy/enterprise
2026-07-23 11:13:31 +08:00
David Park and GitHub
da2177c7b2
fix(api): send valid body in external knowledge validation probe ( #39410 )
2026-07-23 02:52:52 +00:00
yunlu.wen
cd62373421
valid pubsub url when mi is enabled
2026-07-23 09:50:08 +08:00
bd8f0104d6
feat(dataset): expose New RAG KnowledgeFS contracts ( #39314 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-23 01:48:36 +00:00
d5788cc019
feat: support tool multi-select input ( #39346 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-07-23 00:38:54 +00:00
zyssyz123 and GitHub
4da4fa72cd
fix(agent): refresh stale inline preview drafts ( #39415 )
2026-07-22 12:54:09 +00:00
34a5ca191b
feat(dataset): add New Knowledge list and empty state ( #39300 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 12:00:50 +00:00
Asuka Minato and GitHub
1271cfcf3f
test: use sqlite3 session in test_workflow_events_openapi ( #38683 )
2026-07-22 11:25:14 +00:00
Asuka Minato and GitHub
2a0b1a8a63
test: use sqlite3 session in test_runtime_credentials ( #38682 )
2026-07-22 09:50:31 +00:00
Asuka Minato and GitHub
4a2e92f43f
test: use sqlite3 session in test_plugin_wraps ( #38681 )
2026-07-22 09:49:54 +00:00
Asuka Minato and GitHub
84889b88ec
test: use sqlite3 session in test_init_validate ( #38680 )
2026-07-22 09:44:29 +00:00
Asuka Minato and GitHub
6f034d2c93
test: use sqlite3 session in test_tags ( #38679 )
2026-07-22 09:43:41 +00:00
f91ea49414
test: use sqlite3 session in test_app_import_api ( #38674 )
...
Co-authored-by: Byron Wang <byron@dify.ai >
2026-07-22 09:43:30 +00:00
Asuka Minato and GitHub
de07730548
test: use sqlite3 session in test_snippet_workflow_draft_variable ( #38678 )
2026-07-22 09:20:51 +00:00
Asuka Minato and GitHub
9b2aa8b216
test: use sqlite3 session in test_snippet_workflow ( #38677 )
2026-07-22 09:20:21 +00:00
Asuka Minato and GitHub
8ee3a7eabc
test: use sqlite3 session in test_rag_pipeline_workflow ( #38676 )
2026-07-22 09:19:25 +00:00
0f9fffb7a2
fix(agent): isolate build and preview chat conversations ( #39405 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 09:17:55 +00:00
Asuka Minato and GitHub
187501f53e
test: use sqlite3 session in test_reset_encrypt_key_pair ( #38673 )
2026-07-22 09:17:34 +00:00
acb5ee29e1
test(e2e): validate generated console contracts ( #39400 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 07:48:37 +00:00
林玮 (Jade Lin) and GitHub
c5aadfe557
fix(api,billing): invalidate vector space cache after cleanup ( #39404 )
2026-07-22 07:30:16 +00:00
c76ff4c38c
test: use sqlite3 session in test_base_app_runner ( #38740 )
...
Co-authored-by: Byron.wang <byron@dify.ai >
2026-07-22 07:21:22 +00:00
yunlu.wen
8dd62b6cef
delegate get_credentials directly
2026-07-22 15:19:52 +08:00
yunlu.wen
1c58bd0f15
move db validation to config layer
2026-07-22 14:37:03 +08:00
林玮 (Jade Lin) and GitHub
a3654d6a7d
fix(oauth): reauth after accepting invitation ( #39366 )
2026-07-22 05:59:04 +00:00
yunlu.wen
28a7c247b9
feat: support entraid for azure managed redis
2026-07-22 13:27:08 +08:00
05a25943e7
fix(e2e): align fixtures with generated contracts ( #39394 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 05:09:23 +00:00
Asuka Minato and GitHub
c5d471dbdd
test: use sqlite3 session in test_model_config_api ( #38675 )
2026-07-22 04:53:13 +00:00
Asuka Minato and GitHub
ba449890a9
test: use sqlite3 session in test_app_runner_conversation_variables ( #38687 )
2026-07-22 04:53:00 +00:00
Asuka Minato and GitHub
072953a83a
test: use sqlite3 session in test_export_service ( #38718 )
2026-07-22 04:52:19 +00:00
Asuka Minato and GitHub
7b95e2a75f
test: use sqlite3 session in test_generator_api_missing ( #38719 )
2026-07-22 04:52:06 +00:00
01efc6eecb
test: use SQLite sessions in service API fixtures ( #38784 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 04:51:49 +00:00
Asuka Minato and GitHub
a4c7261bf9
test: use sqlite3 session in test_workflow ( #38686 )
2026-07-22 04:51:33 +00:00
Asuka Minato and GitHub
66afa3bf4a
test: use sqlite3 session in test_clear_free_plan_tenant_expired_logs ( #38693 )
2026-07-22 04:16:21 +00:00
Asuka Minato and GitHub
79a5b31bc6
test: move console OAuth coverage to unit tests ( #38923 )
2026-07-22 02:27:55 +00:00
GareArc