yyh and 非法操作
c949d1da27
ci: route default Depot jobs to 4-core runners ( #39277 )
...
(cherry picked from commit 58d1dd8873 )
2026-07-20 14:17:51 +08:00
非法操作
1328644dfc
fix: change email not work ( #39182 )
...
(cherry picked from commit aff8a49bbf )
2026-07-20 14:17:51 +08:00
非法操作
2467df55c7
fix: can't debug model plugins ( #38500 )
...
(cherry picked from commit 6edce14e88 )
2026-07-20 14:17:51 +08:00
非法操作
fed5a9a627
fix(web): redirect imported apps with creator permissions ( #38460 )
...
(cherry picked from commit 1247fa28f1 )
2026-07-20 14:17:51 +08:00
林玮 (Jade Lin)
0a10d02a9f
refactor(api): pass session explicitly through recommended app service chain
2026-07-15 15:57:49 +08:00
Xiyuan Chen and 林玮 (Jade Lin)
5c0a0759f0
fix: preserve ResponseStreamFilter state across workflow pause/resume ( #38540 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit d72ee32ba1 )
2026-07-15 14:47:22 +08:00
林玮 (Jade Lin)
3443054d96
fix(api): harden trial apps access for recommended apps ( #38970 )
...
(cherry picked from commit edca982b1e )
2026-07-15 14:36:35 +08:00
wangxiaolei and Xiyuan Chen
be737a3504
feat: when knowledge permission is all team need update rbac setttings ( #38911 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit c278148c8f )
2026-07-14 03:52:24 -07:00
wangxiaolei and Xiyuan Chen
e0b910d43d
feat: create app init rbac scope to all and add workspace members. ( #38636 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 7e05f28a46 )
2026-07-14 03:52:24 -07:00
Coding On Star
44048320bd
fix(auth): preserve redirect URL across auth flows ( #38905 )
...
Co-authored-by: CodingOnStar <hanxujiang@dify.com >
(cherry picked from commit 2c4d8ef098 )
2026-07-14 18:23:54 +08:00
Coding On Star
3dc85bd398
fix(auth): prevent open redirects in post-login flows ( #38864 )
...
Co-authored-by: CodingOnStar <hanxujiang@dify.com >
(cherry picked from commit c68e5e5ed3 )
2026-07-14 18:23:54 +08:00
Snakinya and Coding On Star
56d87d6318
fix: SSRF bypass via raw httpx.get in API tool schema fetch ( #37746 )
...
Co-authored-by: 归青 <guiqing.lzw@antgroup.com >
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
(cherry picked from commit ae0d6ee214 )
2026-07-14 18:23:54 +08:00
林玮 (Jade Lin) and Coding On Star
73db4d3932
feat(oauth): preserve redirect_url through OAuth state for post-login… ( #38900 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 82ff93cbdd )
2026-07-14 18:23:54 +08:00
林玮 (Jade Lin) and Coding On Star
13c6556e6f
fix(api): require trial app registration for reads ( #38858 )
...
(cherry picked from commit 8e0d10bf5e )
2026-07-14 18:23:54 +08:00
Xin Zhang and Xiyuan Chen
7570427f51
feat(enterprise): enforce licensed seats cap at account creation ( #38883 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 28a036066a )
2026-07-14 00:22:05 -07:00
Xiyuan Chen
48717e5981
chore(deps): bump python-engineio, python-socketio, soupsieve for CVE fixes ( #38844 )
...
(cherry picked from commit c21a248df6 )
2026-07-13 01:04:45 -07:00
Xiyuan Chen
5805b94e23
fix(api): wire dedicated timeout into inner RBAC requests ( #38150 )
...
(cherry picked from commit 0d5f43520c )
2026-07-12 23:39:30 -07:00
Jashwanth Reddy Gummula and Xiyuan Chen
c64c772b5b
fix: resolve 36288 mypy errors ( #37850 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
(cherry picked from commit dd0c4a2296 )
2026-07-12 21:53:31 -07:00
FFXN and Xiyuan Chen
b4537455cf
fix: enhance SQL query safety and add metadata key validation ( #38307 )
...
(cherry picked from commit 88864ae086 )
2026-07-12 21:53:31 -07:00
FFXN and Xiyuan Chen
5fe010b653
fix: sql injection ( #38295 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
(cherry picked from commit d9884efaee )
2026-07-12 21:53:31 -07:00
蒜香飞行矮堇瓜 and Xiyuan Chen
66cd69b07e
fix(api): avoid infinite loop in _delete_records when batch deletion fails ( #38118 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 089c3f4af0 )
2026-07-12 21:53:31 -07:00
linhongkuan and Xiyuan Chen
09eca00370
fix(api): isolate side-effect database writes ( #37895 )
...
Co-authored-by: FFXN <31929997+FFXN@users.noreply.github.com >
(cherry picked from commit d8f3be4bcd )
2026-07-12 21:53:31 -07:00
Xiyuan Chen
12cf69e5c8
fix(api): register rbac-migrate-dataset-permissions CLI command ( #38204 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 5ce13d1773 )
2026-07-12 21:53:31 -07:00
wangxiaolei and Xiyuan Chen
4332023806
feat: support dataset permission migrate to rbac ( #38166 )
...
(cherry picked from commit 528bf95d1b )
2026-07-12 21:53:31 -07:00
Wu Tianwei and Xiyuan Chen
dd9f1e041e
fix: update documentation links in permission set and role modals ( #38188 )
...
(cherry picked from commit 46163c68bd )
2026-07-12 21:53:31 -07:00
Wu Tianwei and Xiyuan Chen
2271257c2f
chore(i18n): update role management permission keys for multiple languages ( #38186 )
...
(cherry picked from commit 54a8ff2c1d )
2026-07-12 21:53:31 -07:00
wangxiaolei and Xiyuan Chen
8adbda988b
perf: make command rbac-migrate-member-roles use less mem and make it… ( #38151 )
...
(cherry picked from commit 49a92f096f )
2026-07-12 21:53:31 -07:00
-LAN- and Xiyuan Chen
876ac24496
fix(api): require edit access for trace config changes ( #37973 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 0035d90e36 )
2026-07-12 21:53:31 -07:00
wangxiaolei
8b0892fd79
fix: fix auth prefix duplicate ( #38616 )
2026-07-10 10:51:05 +08:00
Coding On Star and CodingOnStar
50d2ad8479
fix: chunk workflow failure tracking data ( #38598 )
...
(cherry picked from commit 2f99652203 )
Co-authored-by: CodingOnStar <hanxujiang@dify.com >
2026-07-09 17:11:46 +08:00
Crazywoola and yyh
1ef8d3a2a9
fix: display errors for oauth page ( #38546 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 5ffd4345dc )
2026-07-08 16:31:31 +08:00
yyh
b8adb0cac2
refactor(web): move app context layout styles to shell ( #38511 )
...
(cherry picked from commit 2c6ec1a761 )
2026-07-08 16:31:31 +08:00
yyh
df88c45e3c
chore(dify-ui): update theme tokens ( #38189 )
...
(cherry picked from commit f8afa49ab9 )
2026-07-08 16:31:31 +08:00
autofix-ci[bot] and Yansong Zhang
d3df1b2847
[autofix.ci] apply automated fixes
2026-07-08 09:55:47 +08:00
Yansong Zhang
709aac9337
test: cover credit pool quota paths
2026-07-08 09:55:47 +08:00
Yansong Zhang
865affdd9b
test: update quota billing service mocks
2026-07-08 09:55:47 +08:00
Yansong Zhang
71840c3f71
fix(api): route quota calls to new billing
2026-07-08 09:55:47 +08:00
Yansong Zhang
dc09aea7b3
feat(api): use billing quota for credit pool
2026-07-08 09:55:47 +08:00
非法操作
99507a5ae5
fix: editor should not manage member ( #38503 )
...
(cherry picked from commit faaa4708a6 )
2026-07-07 16:09:47 +08:00
55ae0aadf8
fix(api): resolve plugin external user ids in backwards invocation ( #38098 )
...
Co-authored-by: Harsh Kashyap <Harsh23Kashyap@users.noreply.github.com >
Co-authored-by: Harsh Kashyap <harshkashyap@Harshs-MacBook-Pro.local >
2026-07-06 17:12:39 +08:00
非法操作
6c4ba71a23
chore: use zstd for plugin model provider cache ( #38382 )
...
(cherry picked from commit 91cc50371b )
2026-07-03 17:19:43 +08:00
非法操作
e5f53053e3
fix: incorrect backgroud when dark mode and no plugins ( #38378 )
...
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
(cherry picked from commit 81cc43b753 )
2026-07-03 17:19:43 +08:00
非法操作
3e392527e9
chore: compress large plugin_model obj in redis ( #38374 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
(cherry picked from commit 059a1fe090 )
2026-07-03 17:19:43 +08:00
WH-2099 and 非法操作
36d3a9c7fb
fix(api): keep provider refresh waiters single-flight ( #38226 )
...
(cherry picked from commit 7fb797c121 )
2026-07-03 17:19:43 +08:00
Jingyi and 非法操作
914598d7e3
fix: prevent app card meta overflow ( #38349 )
...
(cherry picked from commit d120995efc )
2026-07-03 10:55:44 +08:00
yyh and 非法操作
602c24cf8c
fix(web): align main nav app item states ( #38326 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: Jingyi-Dify <jingyi.qi@dify.ai >
(cherry picked from commit 57f687fb45 )
2026-07-03 10:55:44 +08:00
非法操作
e0b5ecc50f
fix: Notion sync empty state width in knowledge creation ( #38321 )
...
(cherry picked from commit 3d10f6c510 )
2026-07-03 10:55:44 +08:00
Manan Bansal and 非法操作
a83c7e89e0
fix(api): tolerate legacy service_api end-user type on load ( #38271 )
...
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
(cherry picked from commit 41fb484491 )
2026-07-03 10:55:44 +08:00
yyh and 非法操作
7a4252b3de
fix(web): fill dataset create layout height ( #38308 )
...
(cherry picked from commit 6ec56e7bd1 )
2026-07-02 16:25:42 +08:00
hjlarry
5c3dd25b32
fix: repair main nav hotfix backport
...
(cherry picked from commit 0bd359bb8f )
2026-07-02 15:25:06 +08:00