 wangxiaoleiandXiyuan Chen
|
977e1abe8a
|
chore: workflow comment remove rbac check (#38978)
(cherry picked from commit b3386192cc)
|
2026-07-15 01:20:03 -07:00 |
|
|
Xiyuan Chenand林玮 (Jade Lin)
|
5c0a0759f0
|
fix: preserve ResponseStreamFilter state across workflow pause/resume (#38540)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit d72ee32ba1)
|
2026-07-15 14:47:22 +08:00 |
|
|
林玮 (Jade Lin)
|
3443054d96
|
fix(api): harden trial apps access for recommended apps (#38970)
(cherry picked from commit edca982b1e)
|
2026-07-15 14:36:35 +08:00 |
|
|
wangxiaoleiandXiyuan Chen
|
be737a3504
|
feat: when knowledge permission is all team need update rbac setttings (#38911)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit c278148c8f)
|
2026-07-14 03:52:24 -07:00 |
|
|
wangxiaoleiandXiyuan Chen
|
e0b910d43d
|
feat: create app init rbac scope to all and add workspace members. (#38636)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 7e05f28a46)
|
2026-07-14 03:52:24 -07:00 |
|
|
SnakinyaandCoding On Star
|
56d87d6318
|
fix: SSRF bypass via raw httpx.get in API tool schema fetch (#37746)
Co-authored-by: 归青 <[email protected]>
Co-authored-by: QuantumGhost <[email protected]>
(cherry picked from commit ae0d6ee214)
|
2026-07-14 18:23:54 +08:00 |
|
|
林玮 (Jade Lin)andCoding On Star
|
73db4d3932
|
feat(oauth): preserve redirect_url through OAuth state for post-login… (#38900)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 82ff93cbdd)
|
2026-07-14 18:23:54 +08:00 |
|
|
林玮 (Jade Lin)andCoding On Star
|
13c6556e6f
|
fix(api): require trial app registration for reads (#38858)
(cherry picked from commit 8e0d10bf5e)
|
2026-07-14 18:23:54 +08:00 |
|
|
Xin ZhangandXiyuan Chen
|
7570427f51
|
feat(enterprise): enforce licensed seats cap at account creation (#38883)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 28a036066a)
|
2026-07-14 00:22:05 -07:00 |
|
|
Xiyuan Chen
|
48717e5981
|
chore(deps): bump python-engineio, python-socketio, soupsieve for CVE fixes (#38844)
(cherry picked from commit c21a248df6)
|
2026-07-13 01:04:45 -07:00 |
|
|
Xiyuan Chen
|
5805b94e23
|
fix(api): wire dedicated timeout into inner RBAC requests (#38150)
(cherry picked from commit 0d5f43520c)
|
2026-07-12 23:39:30 -07:00 |
|
|
Jashwanth Reddy GummulaandXiyuan Chen
|
c64c772b5b
|
fix: resolve 36288 mypy errors (#37850)
Co-authored-by: WH-2099 <[email protected]>
(cherry picked from commit dd0c4a2296)
|
2026-07-12 21:53:31 -07:00 |
|
|
FFXNandXiyuan Chen
|
b4537455cf
|
fix: enhance SQL query safety and add metadata key validation (#38307)
(cherry picked from commit 88864ae086)
|
2026-07-12 21:53:31 -07:00 |
|
|
FFXNandXiyuan Chen
|
5fe010b653
|
fix: sql injection (#38295)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
(cherry picked from commit d9884efaee)
|
2026-07-12 21:53:31 -07:00 |
|
|
蒜香飞行矮堇瓜andXiyuan Chen
|
66cd69b07e
|
fix(api): avoid infinite loop in _delete_records when batch deletion fails (#38118)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 089c3f4af0)
|
2026-07-12 21:53:31 -07:00 |
|
|
linhongkuanandXiyuan Chen
|
09eca00370
|
fix(api): isolate side-effect database writes (#37895)
Co-authored-by: FFXN <[email protected]>
(cherry picked from commit d8f3be4bcd)
|
2026-07-12 21:53:31 -07:00 |
|
|
Xiyuan Chen
|
12cf69e5c8
|
fix(api): register rbac-migrate-dataset-permissions CLI command (#38204)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 5ce13d1773)
|
2026-07-12 21:53:31 -07:00 |
|
|
wangxiaoleiandXiyuan Chen
|
4332023806
|
feat: support dataset permission migrate to rbac (#38166)
(cherry picked from commit 528bf95d1b)
|
2026-07-12 21:53:31 -07:00 |
|
|
wangxiaoleiandXiyuan Chen
|
8adbda988b
|
perf: make command rbac-migrate-member-roles use less mem and make it… (#38151)
(cherry picked from commit 49a92f096f)
|
2026-07-12 21:53:31 -07:00 |
|
|
-LAN-andXiyuan Chen
|
876ac24496
|
fix(api): require edit access for trace config changes (#37973)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 0035d90e36)
|
2026-07-12 21:53:31 -07:00 |
|
|
wangxiaolei
|
8b0892fd79
|
fix: fix auth prefix duplicate (#38616)
|
2026-07-10 10:51:05 +08:00 |
|
|
autofix-ci[bot]andYansong Zhang
|
d3df1b2847
|
[autofix.ci] apply automated fixes
|
2026-07-08 09:55:47 +08:00 |
|
|
Yansong Zhang
|
709aac9337
|
test: cover credit pool quota paths
|
2026-07-08 09:55:47 +08:00 |
|
|
Yansong Zhang
|
865affdd9b
|
test: update quota billing service mocks
|
2026-07-08 09:55:47 +08:00 |
|
|
Yansong Zhang
|
71840c3f71
|
fix(api): route quota calls to new billing
|
2026-07-08 09:55:47 +08:00 |
|
|
Yansong Zhang
|
dc09aea7b3
|
feat(api): use billing quota for credit pool
|
2026-07-08 09:55:47 +08:00 |
|
|
非法操作
|
99507a5ae5
|
fix: editor should not manage member (#38503)
(cherry picked from commit faaa4708a6)
|
2026-07-07 16:09:47 +08:00 |
|
|
|
55ae0aadf8
|
fix(api): resolve plugin external user ids in backwards invocation (#38098)
Co-authored-by: Harsh Kashyap <[email protected]>
Co-authored-by: Harsh Kashyap <[email protected]>
|
2026-07-06 17:12:39 +08:00 |
|
|
非法操作
|
6c4ba71a23
|
chore: use zstd for plugin model provider cache (#38382)
(cherry picked from commit 91cc50371b)
|
2026-07-03 17:19:43 +08:00 |
|
|
非法操作
|
3e392527e9
|
chore: compress large plugin_model obj in redis (#38374)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 059a1fe090)
|
2026-07-03 17:19:43 +08:00 |
|
|
WH-2099and非法操作
|
36d3a9c7fb
|
fix(api): keep provider refresh waiters single-flight (#38226)
(cherry picked from commit 7fb797c121)
|
2026-07-03 17:19:43 +08:00 |
|
|
Manan Bansaland非法操作
|
a83c7e89e0
|
fix(api): tolerate legacy service_api end-user type on load (#38271)
Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
(cherry picked from commit 41fb484491)
|
2026-07-03 10:55:44 +08:00 |
|
|
wangxiaoleiand非法操作
|
30c8e9b08d
|
fix: Working outside of application context. (#38300)
(cherry picked from commit 826b259d9f)
|
2026-07-02 15:07:12 +08:00 |
|
|
Bond Zhuand非法操作
|
2a63f26796
|
fix(workflow): guard on_tool_execution stdout traces behind DEBUG (#38200)
(cherry picked from commit 03d59dba47)
|
2026-07-01 14:05:02 +08:00 |
|
|
非法操作
|
71a936e89a
|
fix: editor can view the logs (#38165)
(cherry picked from commit fa1ac75922)
|
2026-07-01 14:05:02 +08:00 |
|
|
Yunlu WenandGitHub
|
3aa26fb637
|
chore: bump versions to 1.15.0 (#37929)
|
2026-06-25 12:02:38 +00:00 |
|
|
林玮 (Jade Lin)andGitHub
|
aa37c1d833
|
fix(api): tongyi credential compatibility (#37942)
|
2026-06-25 10:25:24 +00:00 |
|
|
|
e90c7ab8a7
|
refactor(tests): replace logger mocks with caplog (#37468) (#37922)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-06-25 09:48:43 +00:00 |
|
|
|
40119fef44
|
feat: update monitor permission key and plugin permission key (#37937)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-06-25 09:41:38 +00:00 |
|
|
|
72a03c2d6a
|
refactor(test): replace SimpleNamespace with real UploadFile model in test_dataset_models.py (#37935)
Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
|
2026-06-25 09:35:24 +00:00 |
|
|
QuantumGhostandGitHub
|
b33e8f0ddb
|
fix: improve error handling for workflow execution (#37919)
|
2026-06-25 07:36:34 +00:00 |
|
|
|
8f74e176ca
|
fix: remove redundant snippets permissions (#37921)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
|
2026-06-25 07:27:16 +00:00 |
|
|
GatewayandGitHub
|
abf2986299
|
build(deps): update Bleach sanitizer security fix (#37860)
|
2026-06-25 06:32:48 +00:00 |
|
|
|
d93989bfc0
|
chore: add type to test (#37876)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-06-25 03:01:09 +00:00 |
|
|
|
31a50a3b20
|
fix: eagerly validate conversation before generator to prevent hanging (#37224)
Co-authored-by: yunlu.wen <[email protected]>
|
2026-06-25 02:57:33 +00:00 |
|
|
|
9fc2925b00
|
feat: delete member delete rbac binding (#37904)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-06-25 02:08:07 +00:00 |
|
|
|
2483c091aa
|
refactor: replace logger patches with pytest caplog in tests (#37890)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <[email protected]>
|
2026-06-24 21:40:06 +00:00 |
|
|
|
4964359961
|
refactor(tests): use caplog in web login tests (#37889)
Co-authored-by: lin-hongkuan <[email protected]>
|
2026-06-24 14:44:01 +00:00 |
|
|
|
d87764b0f8
|
feat: filter dataset operator and add miss permission key (#37867)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-06-24 09:56:28 +00:00 |
|
|
JiangandGitHub
|
d135dab241
|
fix: Lindorm vector store errors caused by the update of opensearch-py (#37862)
|
2026-06-24 09:54:06 +00:00 |
|