85e144cf64
fix(api): centralize remote file retrieval
...
Introduce a unified remote file fetcher that resolves first-party signed file URLs through database records and storage before falling back to the SSRF-protected HTTP client.
Route backend remote-file call sites through the new boundary, remove obsolete file signature verification helpers, and document when to use remote_fetcher versus ssrf_proxy.
2026-05-26 18:39:58 +08:00
323b2b82e0
chore: add EndUser and App type annotations to api endpoints ( #36677 )
2026-05-26 09:43:00 +00:00
f5d664887b
chore: backend feature api exclude_vector_space ( #36642 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-26 08:50:54 +00:00
5aa24c25d9
chore: add InstalledApp type annotations to api endpoints ( #36678 )
2026-05-26 08:32:38 +00:00
eed8d659d1
refactor(api): migrate tenant/user via DI: apikey, extension, data_source_bearer, oauth_server ( #36660 )
2026-05-26 08:22:35 +00:00
59e99ee1ae
refactor(api): migrate console tags to tenant/user via DI and improve tests ( #36658 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-26 08:20:10 +00:00
fb07b43107
feat(api): Node Output Inspector service + 3 REST endpoints (Stage 4 §8) ( #36644 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-26 07:34:33 +00:00
2b97f6c8c2
chore: inject tenant id in extension handlers ( #36656 )
2026-05-26 05:45:03 +00:00
75d6511284
chore: inject account context in file handlers ( #36655 )
2026-05-26 05:43:57 +00:00
fd059720e5
chore: inject tenant id in feature handlers ( #36654 )
2026-05-26 05:36:02 +00:00
2a5f7bb1aa
chore: inject current user in explore message handlers ( #36652 )
2026-05-26 05:31:51 +00:00
a728e0ac69
feat: adding dify cli ( #36348 )
...
Co-authored-by: GareArc <garethcxy@dify.ai >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: L1nSn0w <l1nsn0w@qq.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: gigglewang <gigglewang@dify.ai >
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
2026-05-26 01:12:36 +00:00
7d464d014c
fix: remove unused datasource_parameters from Notion pre-import query ( #36627 )
2026-05-26 01:05:30 +00:00
25da7ae0d9
chore: dep inject for sql session ( #36545 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-05-25 14:24:58 +00:00
87268f0662
chore: inject current user in console handlers ( #36628 )
2026-05-25 13:14:08 +00:00
135e01930b
chore: example of current user id dep injection ( #36588 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-25 11:31:40 +00:00
fbfb4b3a00
chore: use dify_config.BILLING_ENABLED ( #36619 )
2026-05-25 09:41:01 +00:00
3a467d1d63
fix: member invite limits with dedup, locking, and accurate new-member counting ( #36512 )
2026-05-25 08:58:42 +00:00
345ba80942
fix: type mismatches (route says uuid: but handler says str) ( #36612 )
2026-05-25 07:33:32 +00:00
e617435d03
fix: replace .distinct() with .group_by(Conversation.id) for PostgreSQL JSON compatibility ( #36610 )
...
Co-authored-by: cocoon <kuishou68@users.noreply.github.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-25 07:15:24 +00:00
6133c2ab6a
chore: add UUID/str type annotations to api endpoints for files in api/controllers/console ( #36563 )
2026-05-24 07:59:56 +00:00
603532863d
chore: add UUID/str type annotations to api endpoints for files in api/controllers/console/datasets ( #36560 )
2026-05-24 07:59:16 +00:00
a8ca0d47b9
chore: add UUID/str type annotations to api endpoints for files in api/controllers/service_api ( #36561 )
2026-05-24 07:58:42 +00:00
7b1aa33ad4
chore: add UUID/str type annotations to api endpoints for files in api/controllers/files and api/controllers/web ( #36562 )
2026-05-24 07:58:10 +00:00
5645ea0def
chore: add UUID/str type annotations to api endpoints for files in api/controllers/console/app ( #36559 )
2026-05-24 07:54:37 +00:00
6b1b1f3790
fix(api): use plain Session in RAG pipeline controllers to prevent closed-transaction error ( #36392 )
2026-05-24 03:50:59 +00:00
8d99326fb3
feat(plugin): cache plugin model providers by tenant ( #36449 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-05-23 09:12:09 +00:00
790ca72627
refactor(api): migrate console/service_api.dataset to BaseModel ( #36480 )
2026-05-22 17:39:07 +00:00
4d8b6c7dc0
refactor: add missing @override decorator to remaining MCP, Jieba, embeddings, and misc subclasses ( #36528 )
2026-05-22 13:45:35 +00:00
473c945839
chore: seprate vector space quota query ( #36514 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-22 09:26:17 +00:00
92181dbe09
fix(api): preserve remote file URL query params ( #36478 )
2026-05-22 01:45:20 +00:00
ea5e487d3c
fix(api): stop returning 204 with response body and add CI check ( #36489 )
2026-05-21 16:20:34 +00:00
092c8bca81
refactor(api): migrate console.datasets.metadata to BaseModel ( #36450 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-21 15:04:42 +00:00
1b4356b66a
fix(ci): bad pyinfra type coverage report comments ( #36482 )
2026-05-21 12:08:24 +00:00
d646bcf257
chore: remove unused pyrefly ignore comments in dataset.py ( #36443 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-20 09:14:43 +00:00
f04d809426
fix(api): fix invalid token error while changing email ( #36412 )
2026-05-20 05:51:15 +00:00
d9e90d0fa0
feat: add new agent ( #36284 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-19 10:43:23 +00:00
b04b4449db
chore(api): annotate simple contract responses ( #36331 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-05-19 06:13:20 +00:00
04d62867af
feat(dify-ui): add shared form primitives ( #36334 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-19 05:38:57 +00:00
1cee1a25b6
fix(console): require admin/owner to set default builtin tool credential ( #36264 )
...
Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com >
2026-05-18 10:15:51 +00:00
2eb37caf2e
refactor(api): migrate console.app.workflow to BaseModel ( #36216 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-18 07:31:37 +00:00
9d0906c684
chore: improve swagger markdown optional fields typing ( #36247 )
2026-05-16 16:40:20 +00:00
a252fbddfa
feat: initialize user timezone and language from browser ( #36170 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-15 08:12:52 +00:00
194b54bae4
fix: allow tag rename without type payload ( #36182 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-15 01:29:17 +00:00
432a6412a3
fix(security): tenant-scope FilePreviewApi text-extract endpoint (GHSA-2qwc-c2cc-2xwv) ( #35797 )
...
Signed-off-by: xr843 <137012659+xr843@users.noreply.github.com >
Co-authored-by: Ido Shani <ido@zafran.io >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-05-14 16:13:04 +00:00
55d05fe52d
fix(security): enforce tenant scoping on app trace-config endpoints (GHSA-48xc-wmw8-3jr3) ( #35793 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Ido Shani <ido@zafran.io >
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-05-14 15:59:31 +00:00
5798610f27
refactor(api): migrate console.app.workflow_comment to BaseModel ( #36180 )
2026-05-14 12:13:47 +00:00
a35b28dbef
refactor: cleanup duplicate code ( #36173 )
2026-05-14 10:34:31 +00:00
af4b9bfa8f
chore: Remove pyright in favor of pyrefly ( #36154 )
2026-05-14 05:49:08 +00:00
9d545144ce
chore: remove obsolete admin console routes ( #35637 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-13 08:08:50 +00:00
