FFXN and Yunlu Wen
7d3c1e1b6a
fix: enhance SQL query safety by using parameterized queries and add metadata key validation.
...
(cherry picked from commit d9884efaee
2026-07-07 11:18:32 +08:00
-LAN- and Yunlu Wen
89fb9321fe
fix(api): pass ssl verify flag to ssrf proxy mounts
...
Propagate the HTTP request node SSL verification setting into the per-scheme httpx proxy transports
so disabling certificate verification is honored when separate SSRF HTTP and HTTPS proxies are configured.
Add a regression test that covers the proxy-mounted SSRF client construction.
(cherry picked from commit 30deef45d9
2026-06-30 17:31:10 +08:00
wangxiaolei and Yunlu Wen
86d41c3bf5
feat: redis add retry logic ( #34566 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 27e484e7f8
2026-06-26 17:56:29 +08:00
Yunlu Wen and Yunlu Wen
4cda173a94
fix: preserve inline image for chatflow messages ( #37455 )
...
(cherry picked from commit 4b15b0e6a6
2026-06-15 16:04:43 +08:00
wangxiaolei and Yunlu Wen
8b49092695
chore: compatiable conversation is not exists ( #33274 )
...
Co-authored-by: -LAN- <laipz8200@outlook.com >
(cherry picked from commit 56d4d54c16
2026-06-13 10:03:27 +08:00
wangxiaolei and -LAN-
72b229524f
fix: fix orm_exc.DetachedInstanceError ( #34904 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit bcd738d2e6
2026-06-12 22:41:36 +08:00
Tim Ren and Yunlu Wen
50ba050bf2
fix(security): reject path traversal sequences before plugin daemon forward (GHSA-gvc6-fh3x-89xh) ( #35796 )
...
Co-authored-by: Ido Shani <ido@zafran.io >
Co-authored-by: -LAN- <laipz8200@outlook.com >
(cherry picked from commit 0ce0127e7e
2026-06-09 09:58:24 +08:00
Tim Ren and Yunlu Wen
5b91f871b8
fix(security): tenant-scope FilePreviewApi text-extract endpoint (GHSA-2qwc-c2cc-2xwv) ( #35797 )
...
Signed-off-by: xr843 <137012659+xr843@users.noreply.github.com >
Co-authored-by: Ido Shani <ido@zafran.io >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com >
(cherry picked from commit 432a6412a3
2026-06-03 13:14:07 +08:00
Tim Ren and Yunlu Wen
9d903a5f79
fix(security): enforce tenant scoping on app trace-config endpoints (GHSA-48xc-wmw8-3jr3) ( #35793 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Ido Shani <ido@zafran.io >
Co-authored-by: -LAN- <laipz8200@outlook.com >
(cherry picked from commit 55d05fe52d
2026-06-03 13:14:07 +08:00
bcfe8c368c
feat(ci): add pyrefly type coverage reporting to CI ( #34754 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 26e8f1f876
2026-05-22 15:59:46 +08:00
Yunlu Wen and Yunlu Wen
c5d8c008da
fix: allow config pubsub join timeout for lower post-run latency ( #36438 )
...
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
(cherry picked from commit e3b45a48eb
2026-05-20 18:28:36 +08:00
FFXN and GitHub
654153fcf5
fix: Image rendering in the knowledge base failed. ( #35975 )
2026-05-11 13:02:33 +08:00
Xiyuan Chen and GitHub
f3d4605dc7
fix(tools): scope builtin tool default-credential clear to tenant ( #35888 )
2026-05-08 12:45:33 +08:00
e7746cb256
fix: sync 35447 to lts ( #35508 )
...
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-04-23 13:30:59 +08:00
Yunlu Wen and GitHub
2256e75f16
fix: fix opensearch import ( #35476 )
2026-04-22 12:09:23 +08:00
3bd6f1a253
feat: sync enterprise telemetry to lts ( #34190 )
...
Merge feat: enterprise otel exporter (#33138 ) into lts/1.13
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-27 17:54:16 +08:00
59639ca9b2
chore: bump Dify to 1.13.3 and sandbox to 0.2.13 ( #34079 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-25 20:03:15 +08:00
Xin Zhang and GitHub
66b8c42a25
feat: add inner API endpoints for admin DSL import/export ( #34059 )
2026-03-25 19:48:53 +08:00
QuantumGhost and GitHub
1789988be7
fix(api): fix concurrency issues in StreamsBroadcastChannel ( #34061 )
2026-03-25 15:47:31 +08:00
5f82ccc750
test: migrate workflow app service tests to testcontainers ( #34036 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-25 13:43:06 +09:00
a9f2fb86a3
test: migrate tools transform service tests to testcontainers ( #34035 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-25 13:41:38 +09:00
81a2eba2a0
test: migrate app service tests to testcontainers ( #34025 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-25 12:50:30 +09:00
d87263f7c3
refactor: select in console datasets document controller ( #34029 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-25 12:47:25 +09:00
4c32acf857
refactor: select in console datasets segments and API key controllers ( #34027 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-25 12:46:22 +09:00
Desel72 and GitHub
b4e541e11a
test: migrate advanced prompt template service tests to testcontainers ( #34034 )
2026-03-25 12:45:13 +09:00
Desel72 and GitHub
a3855eca8b
test: migrate webapp auth service tests to testcontainers ( #34037 )
2026-03-25 12:42:41 +09:00
tmimmanuel and GitHub
a946015ebf
test: replace indexing_technique string literals with IndexTechnique ( #34042 )
2026-03-25 12:39:58 +09:00
QuantumGhost and GitHub
eef13853b2
fix(api): StreamsBroadcastChannel start reading messages from the end ( #34030 )
...
The current frontend implementation closes the connection once `workflow_paused` SSE event is received and establish a new connection to subscribe new events. The implementation of `StreamsBroadcastChannel` sets initial `_last_id` to `0-0`, consumes streams from start and send `workflow_paused` event created before pauses to frontend, causing excessive connections being established.
This PR fixes the issue by setting initial id to `$`, which means only new messages are received by the subscription.
2026-03-25 10:21:57 +08:00
Rajat Agarwal and GitHub
6f137fdb00
test: unit test cases for rag.cleaner, rag.data_post_processor and rag.datasource ( #32521 )
2026-03-25 02:19:15 +08:00
Rajat Agarwal and GitHub
36cc1bf025
test: unit test cases for sub modules in core.app (except core.app.apps) ( #32476 )
2026-03-25 02:13:28 +08:00
ca703fdda1
test: migrate mcp tools manage service tests to testcontainers ( #34024 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-25 00:06:28 +09:00
Desel72 and GitHub
b15d312f68
test: migrate dataset service document indexing tests to testcontainers ( #34022 )
2026-03-24 23:42:34 +09:00
cc0dadb5e3
test: migrate forgot password tests to testcontainers ( #33972 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 23:34:13 +09:00
b78ca4e8e8
test: migrate email register tests to testcontainers ( #33971 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 23:33:47 +09:00
Desel72 and GitHub
defb982c3e
test: remove agent service tests superseded by testcontainers ( #34023 )
2026-03-24 22:55:06 +09:00
Desel72 and GitHub
4f87625df5
test: migrate retention delete archived workflow run tests to testcon… ( #34020 )
2026-03-24 22:52:10 +09:00
Desel72 and GitHub
2a35f8a625
test: remove feedback service tests superseded by testcontainers ( #34026 )
2026-03-24 22:50:51 +09:00
e3c1112b15
refactor: select in console datasets document controller ( #34019 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 21:57:38 +09:00
542c1a14e0
test: migrate oauth tests to testcontainers ( #33973 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 21:56:40 +09:00
67d5c9d148
feat: configurable model parameters with variable reference support in LLM, Question Classifier and Variable Extractor nodes ( #33082 )
...
Co-authored-by: -LAN- <laipz8200@outlook.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 17:41:51 +08:00
1674f8c2fb
fix: fix omitted app icon_type updates ( #33988 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 15:10:05 +08:00
7fe25f1365
fix(rate_limit): flush redis cache when __init__ is triggered by changing max_active_requests ( #33830 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 15:08:55 +08:00
tmimmanuel and GitHub
8b634a9bee
refactor: use EnumText for ApiToolProvider.schema_type_str and Docume… ( #33983 )
2026-03-24 13:27:50 +09:00
BitToby and GitHub
ecd3a964c1
refactor(api): type auth service credentials with TypedDict ( #33867 )
2026-03-24 13:22:17 +09:00
49a1fae555
test: migrate password reset tests to testcontainers ( #33974 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 06:04:34 +09:00
tmimmanuel and GitHub
cc17c8e883
refactor: use EnumText for TidbAuthBinding.status and MessageFile.type ( #33975 )
2026-03-24 05:38:29 +09:00
tmimmanuel and GitHub
5d2cb3cd80
refactor: use EnumText for DocumentSegment.type ( #33979 )
2026-03-24 05:37:51 +09:00
Desel72 and GitHub
f2c71f3668
test: migrate oauth server service tests to testcontainers ( #33958 )
2026-03-24 03:15:22 +09:00
0492ed7034
test: migrate api tools manage service tests to testcontainers ( #33956 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 02:54:33 +09:00
dd4f504b39
refactor: select in remaining console app controllers ( #33969 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-24 02:53:05 +09:00
