cetdev/dify
0
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
9,696 Commits 643 Branches 176 Tags
fix/ui-fix
Commit Graph
9696 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Wu Tianweiandtwwu c2b9938a72 fix(chat): enhance pointer event handling in chat components (#38385) 
(cherry picked from commit 5b4ceacbe7)
 2026-07-07 16:46:11 +08:00
Wu TianweiandGitHub de1c5149ad Merge branch 'lts/1.13.x' into fix/ui-fix 2026-07-07 11:53:29 +08:00
twwu bdd6f952af refactor(web): migrate plugin auth overlays to base ui 
- replace legacy data source auth overlays with AlertDialog, Dialog, and
  Popover
  - add controlled open state support for API key and OAuth auth modals
  - update related frontend tests and prune resolved ESLint suppressions
 2026-07-07 11:48:11 +08:00
FFXNandYunlu Wen 7d3c1e1b6a fix: enhance SQL query safety by using parameterized queries and add metadata key validation. 
(cherry picked from commit d9884efaee)
 2026-07-07 11:18:32 +08:00
twwu 5e2cb2fb12 fix: update file paths and improve pointer event handling in chat components 2026-07-07 09:56:22 +08:00
-LAN-andYunlu Wen 89fb9321fe fix(api): pass ssl verify flag to ssrf proxy mounts 
Propagate the HTTP request node SSL verification setting into the per-scheme httpx proxy transports
 so disabling certificate verification is honored when separate SSRF HTTP and HTTPS proxies are configured.
Add a regression test that covers the proxy-mounted SSRF client construction.

(cherry picked from commit 30deef45d9)
 2026-06-30 17:31:10 +08:00
Wu TianweiandYunlu Wen 41c88d7efe fix: support Unicode characters in form field names (#38138) 
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
(cherry picked from commit d2216fe181)
 2026-06-29 13:43:47 +08:00
非法操作andYunlu Wen 6cde9563f4 fix: web app user avatar display incorrect black (#34624) 
(cherry picked from commit 2f9667de76)
 2026-06-26 18:12:33 +08:00
wangxiaoleiandYunlu Wen 86d41c3bf5 feat: redis add retry logic (#34566) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 27e484e7f8)
 2026-06-26 17:56:29 +08:00
yunlu.wenandYunlu Wen 88e04bcf70 chore: bump vinext 2026-06-26 11:17:05 +08:00
yunlu.wenandYunlu Wen d60dbb146e chore(deps): bump dep versions for CVE fixes 
- starlette 1.0.1 -> 1.3.1 (CVE-2026-41947, CVE-2026-41948, CVE-2026-41949, CVE-2026-41950, CVE-2026-41951)
- aiohttp 3.13.4 -> 3.14.1 (CVE-2026-3245, CVE-2026-3246, CVE-2026-3247, CVE-2026-3248, CVE-2026-3249, CVE-2026-3250, CVE-2026-3251)
- pypdf 6.10.2 -> 6.14.2 (CVE-2026-3352, CVE-2026-3353, CVE-2026-3354, CVE-2026-3355, CVE-2026-3356, CVE-2026-3357, CVE-2026-3358, CVE-2026-3359)
- cryptography 46.0.7 -> 49.0.0 (CVE-2026-29497)
- bleach 6.3.0 -> 6.4.0 (CVE-2026-32786)
- ujson 5.12.1 -> 5.13.0 (CVE-2026-32787)
- langsmith 0.8.5 -> 0.8.18 (GHSA-f4xh-w4cj-qxq8)
- pydantic-settings 2.13.1 -> 2.14.2 (CVE-2026-32788)
- add cryptography>=48.0.1 to override-dependencies to force upgrade past 46.x

(cherry picked from commit ce6297bed2)
 2026-06-26 11:17:05 +08:00
macatandYunlu Wen 01d684a016 refactor: split docker-compose env config into separate files (#31586) 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
(cherry picked from commit 48d27e250b)
 2026-06-22 10:38:30 +08:00
Stephen Zhouand-LAN- 050c059f7c fix web dependency vulnerabilities 2026-06-16 23:09:23 +08:00
s-kawamura-upgradeandYunlu Wen 18211c159e feat(web): add ALLOW_INLINE_STYLES env var to opt-in inline CSS in Markdown rendering (#34719) 
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
(cherry picked from commit 0e0bb3582f)
 2026-06-16 15:54:10 +08:00
Yunlu WenandYunlu Wen 4cda173a94 fix: preserve inline image for chatflow messages (#37455) 
(cherry picked from commit 4b15b0e6a6)
 2026-06-15 16:04:43 +08:00
wangxiaoleiandYunlu Wen 8b49092695 chore: compatiable conversation is not exists (#33274) 
Co-authored-by: -LAN- <laipz8200@outlook.com>
(cherry picked from commit 56d4d54c16)
 2026-06-13 10:03:27 +08:00
wangxiaoleiand-LAN- 72b229524f fix: fix orm_exc.DetachedInstanceError (#34904) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit bcd738d2e6)
 2026-06-12 22:41:36 +08:00
Yunlu WenandYunlu Wen 392807545d feat: trace document retrieval (#37283) 
(cherry picked from commit 84490179b0)
 2026-06-12 14:49:35 +08:00
Tim RenandYunlu Wen 50ba050bf2 fix(security): reject path traversal sequences before plugin daemon forward (GHSA-gvc6-fh3x-89xh) (#35796) 
Co-authored-by: Ido Shani <ido@zafran.io>
Co-authored-by: -LAN- <laipz8200@outlook.com>
(cherry picked from commit 0ce0127e7e)
 2026-06-09 09:58:24 +08:00
yunlu.wenandYunlu Wen 8be9c5f4d7 chore(deps): bump pyjwt to 2.13.0 
(cherry picked from commit a247d625e5)
 2026-06-04 10:23:11 +08:00
Tim RenandYunlu Wen 5b91f871b8 fix(security): tenant-scope FilePreviewApi text-extract endpoint (GHSA-2qwc-c2cc-2xwv) (#35797) 
Signed-off-by: xr843 <137012659+xr843@users.noreply.github.com>
Co-authored-by: Ido Shani <ido@zafran.io>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
(cherry picked from commit 432a6412a3)
 2026-06-03 13:14:07 +08:00
Tim RenandYunlu Wen 9d903a5f79 fix(security): enforce tenant scoping on app trace-config endpoints (GHSA-48xc-wmw8-3jr3) (#35793) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Ido Shani <ido@zafran.io>
Co-authored-by: -LAN- <laipz8200@outlook.com>
(cherry picked from commit 55d05fe52d)
 2026-06-03 13:14:07 +08:00
yunlu.wen c67c1090a2 chore(deps): bump sendgrid to v6.12.5 
CVE-2024-23342 (ecdsa) fixed by upgrading sendgrid from 6.12.4 to 6.12.5,
which replaces ecdsa with cryptography. ecdsa dependency removed entirely.
 2026-05-23 23:07:27 +08:00
Escape0707andYunlu Wen c9dd4a0dd4 fix: delete redundant api/libs/typing.py (#35890) 
(cherry picked from commit c6a5de3c18)
 2026-05-22 15:59:46 +08:00
corevibe555Yunlu Wenautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		bcfe8c368c feat(ci): add pyrefly type coverage reporting to CI (#34754) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>


(cherry picked from commit 26e8f1f876)
 2026-05-22 15:59:46 +08:00
Yunlu WenandYunlu Wen c5d8c008da fix: allow config pubsub join timeout for lower post-run latency (#36438) 
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com>
(cherry picked from commit e3b45a48eb)
 2026-05-20 18:28:36 +08:00
yunlu.wenandYunlu Wen d8a465a746 chore: bump versions for litellm and langsmith (#36385) 
(cherry picked from commit 718ab8433e)
 2026-05-20 14:25:32 +08:00
-LAN- 5aaf327d58 ci(workflows): sync workflows from main to lts/1.13.x 2026-05-18 18:32:42 +08:00
Yunlu WenandGitHub 0ef793f935 fix: performance optimization on TTFE critical path (#36185) 2026-05-15 16:30:31 +08:00
Yunlu WenandGitHub cc72e56cd0 fix: fix imports (#36042) 2026-05-11 17:26:36 +08:00
Yunlu WenandGitHub a5d6a0369d feat: allow disabling run-time credential check (#35894) 2026-05-11 14:14:30 +08:00
Yunlu WenandGitHub 1eac1aa03d fix: sync 34720 to lts (#36030) 2026-05-11 14:01:21 +08:00
FFXNandGitHub 654153fcf5 fix: Image rendering in the knowledge base failed. (#35975) 2026-05-11 13:02:33 +08:00
Xiyuan ChenandGitHub f3d4605dc7 fix(tools): scope builtin tool default-credential clear to tenant (#35888) 2026-05-08 12:45:33 +08:00
Stephen ZhouandGitHub cd771ed909 chore: bump nextjs (#35908) 2026-05-08 12:42:49 +08:00
Yunlu WenandGitHub cb94877c18 chore: bump versions (#35866) 2026-05-07 13:53:39 +08:00
Yunlu WenandGitHub 9853e28230 chore: bump xmldom to 0.8.13 (#35636) 2026-04-28 15:13:31 +08:00
Yunlu WenandGitHub d666fb1b25 chore: lts bump litellm and langsmith versions (#35592) 2026-04-28 13:05:49 +08:00
Yunlu WenandGitHub 573ec3af9e fix: cache credentials & enterprise calls (#35528) 2026-04-23 23:08:04 +08:00
Yunlu WenGitHub-LAN-
 		e7746cb256 fix: sync 35447 to lts (#35508) 
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2026-04-23 13:30:59 +08:00
Yunlu WenandGitHub 2256e75f16 fix: fix opensearch import (#35476) 2026-04-22 12:09:23 +08:00
Yunlu WenandGitHub 3184ffd39b chore: bump dependencies for lts (#35231) 2026-04-15 14:21:45 +08:00
Yunlu WenandGitHub 57a4828dbf chore: bump litellm to 1.83.0 (#34842) 2026-04-09 18:07:15 +08:00
Stephen ZhouandGitHub e7e28baff7 chore: update react & next version (#34834) 2026-04-09 16:01:45 +08:00
Yunlu WenGitHubXiyuan ChenQuantumGhostCopilotautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		3bd6f1a253 feat: sync enterprise telemetry to lts (#34190) 
Merge feat: enterprise otel exporter (#33138) into lts/1.13

Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-27 17:54:16 +08:00
Wu TianweiGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		d1f6edd7ab fix(prompt-editor): fix unexpected blur effect in prompt editor (#34114) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-03-26 14:44:40 +08:00
-LAN-GitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		59639ca9b2 chore: bump Dify to 1.13.3 and sandbox to 0.2.13 (#34079) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
1.13.3 		2026-03-25 20:03:15 +08:00
Xin ZhangandGitHub 66b8c42a25 feat: add inner API endpoints for admin DSL import/export (#34059) 2026-03-25 19:48:53 +08:00
+3
Coding On StarGitHubCodingOnStarautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>lifhjlarryStephen ZhoutmimmanuelDesel72RenzoKrishna ChaitanyayyhCopilot
 		449d8c7768 test(workflow-app): enhance unit tests for workflow components and hooks (#34065) 
Co-authored-by: CodingOnStar <hanxujiang@dify.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: lif <1835304752@qq.com>
Co-authored-by: hjlarry <hjlarry@163.com>
Co-authored-by: Stephen Zhou <hi@hyoban.cc>
Co-authored-by: tmimmanuel <14046872+tmimmanuel@users.noreply.github.com>
Co-authored-by: Desel72 <pedroluiscolmenares722@gmail.com>
Co-authored-by: Renzo <170978465+RenzoMXD@users.noreply.github.com>
Co-authored-by: Krishna Chaitanya <krishnabkc15@gmail.com>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-03-25 18:34:32 +08:00
非法操作andGitHub 0e6d97acf9 fix: HumanInput node should unable to paste into container (#34077) 2026-03-25 17:22:21 +08:00