cetdev/dify
0
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
8,659 Commits 643 Branches 176 Tags
release/e-1.11.4
Commit Graph
5095 Commits
Author SHA1 Message Date
GareArcandXiyuan Chen 485438043f fix(docker): pin npm to 11.x in the API image 
npm@latest resolves to 12.0.1, which requires node ^22.22.2 || ^24.15.0 ||
>=26.0.0. The image pins NODE_PACKAGE_VERSION=22.22.0, so the install fails
with EBADENGINE and the API build cannot complete.

The float is the defect: this step passed until npm 12 raised its node floor.
Pin the major so the build stops depending on npm's release schedule.
 2026-07-20 20:54:24 -07:00
GareArcandXiyuan Chen c01e3e7b8c refactor: align timeout config name with main 
main already defines ENTERPRISE_REQUEST_TIMEOUT for the same purpose
(added in #33158, which is not an ancestor of this branch). Introducing
ENTERPRISE_API_TIMEOUT here would leave two env vars controlling one
behavior once this branch merges forward, silently orphaning any
deployment configured on the old name.

Match main's name and int type. The default stays 90 on this branch.
 2026-07-20 20:54:24 -07:00
GareArcandXiyuan Chen c2ac76f013 feat: make enterprise inner API timeout configurable 
Requests to the enterprise inner API relied on httpx's implicit 5s default.
On tenants with many installed apps, POST /webapp/permission/batch exceeds
that budget and the Explore page fails with httpx.ReadTimeout.

Expose ENTERPRISE_API_TIMEOUT so the budget can be raised per deployment,
defaulting to 90s to sit above the enterprise server's own 60s request
timeout rather than racing it.
 2026-07-20 20:54:24 -07:00
Byron Wang 5e3387f38a update the pyproject.yaml 2026-03-01 16:50:55 +08:00
Byron Wang 1cdae16b28 update web and api dockerfile 2026-03-01 15:11:14 +08:00
Byron Wang 24ecc3e558 uv sync 2026-02-12 15:57:45 +08:00
Byron Wang e1b7b0f81d remove the weaviate and update dockerfiles 2026-02-12 15:56:55 +08:00
Byron Wang 32d6747ff2 delete vdb tablestore and dependencies 2026-02-11 19:26:23 +08:00
Byron Wang 6bb6a08769 bump weave versions 2026-02-11 17:54:11 +08:00
Byron Wang 6ea4b8ff31 upgrade setuptools version to 82.0.0 2026-02-10 18:14:49 +08:00
Byron Wang 065a69ced0 bump weave version and regenerate lock 2026-02-10 17:40:22 +08:00
Byron Wang 615da29433 bump unstructured pypi version 2026-02-10 16:22:12 +08:00
Byron Wang 16ef73cd76 remove unused stage 2026-02-10 15:46:22 +08:00
Byron Wang e532b6e882 update api base image to dhi base 2026-02-10 15:16:15 +08:00
Xiyuan ChenGareArcCopilot
 		3d2aea11a3 Update api/services/tools/builtin_tools_manage_service.py 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-02-04 18:35:15 -08:00
yunlu.wen ffc18bf318 chore: upgrade deps, see pull #30976 2026-01-28 13:02:01 +08:00
GareArc 6fd5df658c fix: add TYPE_CHECKING import for Account type annotation 2026-01-26 16:08:09 -08:00
GareArc 69b11cc364 security: fix IDOR and privilege escalation in set_default_provider 
- Add tenant_id verification to prevent IDOR attacks
- Add admin check for enterprise tenant-wide default changes
- Preserve non-enterprise behavior (users can set own defaults)
 2026-01-26 16:01:06 -08:00
GareArc 57721225b9 fix: remove user_id filter when clearing default provider (enterprise only) 
When setting a new default credential in enterprise mode, the code was
only clearing is_default for credentials matching the current user_id.
This caused issues when:
1. Enterprise credential A (synced with system user_id) was default
2. User sets local credential B as default
3. A still had is_default=true (different user_id)
4. Both A and B were considered defaults

The fix removes user_id from the filter only for enterprise deployments,
since enterprise credentials may have different user_id than local ones.
Non-enterprise behavior is unchanged to avoid breaking existing setups.

Fixes EE-1511
 2026-01-26 15:43:13 -08:00
GareArc 68dfb3d4d9 feat: add redis mq for account deletion cleanup 2026-01-25 22:38:19 -08:00
Xiyuan ChenandGareArc 7058de7a88 feat: implement workspace permission checks for member invitations an… (#31202) 2026-01-25 21:21:58 -08:00
wangxiaolei 5cd11a0071 fix: remove _try_resolve_user_from_request (#31360) 2026-01-22 11:25:06 +08:00
wangxiaolei 37c2f3d4b6 fix: fix instance is not bind to session (#30913) 2026-01-21 17:05:13 +08:00
-LAN- 036a7cf839 chore: bump version to 1.11.4 (#30961) 2026-01-15 11:40:33 +08:00
wangxiaoleiand-LAN- 2c6bd90d6f fix: fix missing id and message_id (#31008) 2026-01-15 11:40:13 +08:00
-LAN-andGitHub a22cc5bc5e chore: Bump Dify version to 1.11.3 (#30903) 2026-01-13 17:49:13 +08:00
非法操作GitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>-LAN-
 		491e1fd6a4 chore: case insensitive email (#29978) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2026-01-13 15:42:44 +08:00
非法操作andGitHub c09e29c3f8 chore: rename the migration file (#30893) 2026-01-13 15:26:41 +08:00
wangxiaoleiandGitHub 2d53ba8671 fix: fix object value is optional should skip validate (#30894) 2026-01-13 15:21:06 +08:00
呆萌闷油瓶GitHubgemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		9be863fefa fix: missing content if assistant message with tool_calls (#30083) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-01-13 12:46:33 +08:00
heysztGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		450578d4c0 feat(ops): set root span kind for AliyunTrace to enable service-level metrics aggregation (#30728) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-01-13 10:12:00 +08:00
非法操作andGitHub 837237aa6d fix: use node factory for single-step workflow nodes (#30859) 2026-01-13 10:11:18 +08:00
QuantumGhostGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		b63dfbf654 fix(api): defer streaming response until referenced variables are updated (#30832) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-01-12 16:23:18 +08:00
非法操作GitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>Copilotcrazywoola
 		51ea87ab85 feat: clear free plan workflow run logs (#29494) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2026-01-12 15:57:40 +08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		8cfdde594c chore(deps-dev): bump tos from 2.7.2 to 2.9.0 in /api (#30834) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-12 12:44:21 +08:00
-LAN-GitHubAsuka Minatoautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		1e10bf525c refactor(models): Refine MessageAgentThought SQLAlchemy typing (#27749) 
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-01-10 17:17:45 +09:00
wangxiaoleiandGitHub 0711dd4159 feat: enhance start node object value check (#30732) 2026-01-09 16:13:17 +08:00
QuantumGhostandGitHub ae0a26f5b6 revert: "fix: fix assign value stand as default (#30651)" (#30717) 
The original fix seems correct on its own. However, for chatflows with multiple answer nodes, the `message_replace` command only preserves the output of the last executed answer node.
 2026-01-09 16:08:24 +08:00
zyssyz123GitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 		fe0802262c feat: credit pool (#30720) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2026-01-08 13:17:30 +08:00
Xiyuan ChenandGitHub adaf0e32c0 feat: add decryption decorators for password and code fields in webapp (#30704) 2026-01-08 10:03:39 +08:00
-LAN-andGitHub 7ccf858ce6 fix(workflow): pass correct user_from/invoke_from into graph init (#30637) 2026-01-07 21:47:23 +08:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 		885f226f77 refactor: split changes for api/controllers/console/workspace/trigger… (#30627) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2026-01-07 21:18:02 +08:00
wangxiaoleiGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 		187bfafe8b fix: fix assign value stand as default (#30651) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-01-07 14:54:11 +08:00
Xiangxuan QuGitHubfghpdf
 		666640f7d5 refactor: remove unnecessary type: ignore from rag_pipeline_fields.py (#30666) 
Co-authored-by: fghpdf <fghpdf@users.noreply.github.com>
 2026-01-07 14:40:35 +08:00
Xiangxuan QuGitHubfghpdf
 		93faa672cc fix: add DB_TYPE environment variable to unit tests (#30660) 
Co-authored-by: fghpdf <fghpdf@users.noreply.github.com>
 2026-01-07 10:16:17 +08:00
Sara RasoolGitHubDevautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>Asuka Minatocrazywoola
 		4f0fb6df2b chore: use from __future__ import annotations (#30254) 
Co-authored-by: Dev <dev@Devs-MacBook-Pro-4.local>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2026-01-06 23:57:20 +09:00
Asuka MinatoandGitHub 0294555893 refactor: port api/fields/file_fields.py (#30638) 2026-01-06 22:55:58 +08:00
-LAN-andGitHub 55de731f9c refactor(api): clarify published RAG pipeline invoke naming (#30644) 2026-01-06 23:48:06 +09:00
Toshiki SugimizuGitHubClaude Opus 4.5Maries
 		f57aa08a3f fix: flask db check fails due to nullable mismatch between migrations and models (#30474) 
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Maries <xh001x@hotmail.com>
 2026-01-06 20:23:59 +08:00
wangxiaoleiandGitHub 2cc89d30db feat: use more universal C.UTF-8 instead of en_US.UTF-8 (#30621) 2026-01-06 16:39:04 +08:00