85e144cf64
fix(api): centralize remote file retrieval
...
Introduce a unified remote file fetcher that resolves first-party signed file URLs through database records and storage before falling back to the SSRF-protected HTTP client.
Route backend remote-file call sites through the new boundary, remove obsolete file signature verification helpers, and document when to use remote_fetcher versus ssrf_proxy.
2026-05-26 18:39:58 +08:00
7d45335a32
fix(chat): close streaming LLM generator when stop response is triggered ( #36227 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-26 09:23:26 +00:00
f5d664887b
chore: backend feature api exclude_vector_space ( #36642 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-26 08:50:54 +00:00
eed8d659d1
refactor(api): migrate tenant/user via DI: apikey, extension, data_source_bearer, oauth_server ( #36660 )
2026-05-26 08:22:35 +00:00
59e99ee1ae
refactor(api): migrate console tags to tenant/user via DI and improve tests ( #36658 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-26 08:20:10 +00:00
fb07b43107
feat(api): Node Output Inspector service + 3 REST endpoints (Stage 4 §8) ( #36644 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-26 07:34:33 +00:00
2b97f6c8c2
chore: inject tenant id in extension handlers ( #36656 )
2026-05-26 05:45:03 +00:00
75d6511284
chore: inject account context in file handlers ( #36655 )
2026-05-26 05:43:57 +00:00
fd059720e5
chore: inject tenant id in feature handlers ( #36654 )
2026-05-26 05:36:02 +00:00
2a5f7bb1aa
chore: inject current user in explore message handlers ( #36652 )
2026-05-26 05:31:51 +00:00
0f06aa2fdd
feat(dify-agent): sync agent progress ( #36633 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-26 03:14:10 +00:00
a728e0ac69
feat: adding dify cli ( #36348 )
...
Co-authored-by: GareArc <garethcxy@dify.ai >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: L1nSn0w <l1nsn0w@qq.com >
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: gigglewang <gigglewang@dify.ai >
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
2026-05-26 01:12:36 +00:00
0ce0127e7e
fix(security): reject path traversal sequences before plugin daemon forward (GHSA-gvc6-fh3x-89xh) ( #35796 )
...
Co-authored-by: Ido Shani <ido@zafran.io >
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-05-25 16:17:39 +00:00
25da7ae0d9
chore: dep inject for sql session ( #36545 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-05-25 14:24:58 +00:00
87268f0662
chore: inject current user in console handlers ( #36628 )
2026-05-25 13:14:08 +00:00
135e01930b
chore: example of current user id dep injection ( #36588 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-25 11:31:40 +00:00
b1f0a11d84
feat: output declaration and inspector ( #36618 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-25 10:08:58 +00:00
fbfb4b3a00
chore: use dify_config.BILLING_ENABLED ( #36619 )
2026-05-25 09:41:01 +00:00
3a467d1d63
fix: member invite limits with dedup, locking, and accurate new-member counting ( #36512 )
2026-05-25 08:58:42 +00:00
9ddd98a265
fix(api): preserve dataset nested null shapes ( #36611 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: wangxiaolei <fatelei@gmail.com >
2026-05-25 08:06:33 +00:00
639e12a306
fix: request /api/datasets raise exception ( #36591 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-25 02:27:54 +00:00
8d99326fb3
feat(plugin): cache plugin model providers by tenant ( #36449 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-05-23 09:12:09 +00:00
790ca72627
refactor(api): migrate console/service_api.dataset to BaseModel ( #36480 )
2026-05-22 17:39:07 +00:00
473c945839
chore: seprate vector space quota query ( #36514 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-22 09:26:17 +00:00
92181dbe09
fix(api): preserve remote file URL query params ( #36478 )
2026-05-22 01:45:20 +00:00
30deef45d9
fix(api): pass SSL verify flag to SSRF proxy mounts ( #36455 )
2026-05-22 01:31:46 +00:00
7ecbed3b04
chore: add Type to test ( #36454 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-21 19:25:03 +00:00
ea5e487d3c
fix(api): stop returning 204 with response body and add CI check ( #36489 )
2026-05-21 16:20:34 +00:00
f19702f76c
feat(api): Flask-RESTX response() vs actual return value checker ( #36488 )
2026-05-21 15:05:06 +00:00
092c8bca81
refactor(api): migrate console.datasets.metadata to BaseModel ( #36450 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-21 15:04:42 +00:00
0cf9597f52
fix: suggested questions API crash on legacy conversation override configs ( #36459 )
2026-05-21 01:58:52 +00:00
60cd346fa6
feat: wire workflow agent node runtime ( #36437 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-20 12:39:45 +00:00
56d4d54c16
chore: compatiable conversation is not exists ( #33274 )
...
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-05-20 12:37:33 +00:00
e3b45a48eb
fix: allow config pubsub join timeout for lower post-run latency ( #36438 )
...
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
2026-05-20 08:45:51 +00:00
f04d809426
fix(api): fix invalid token error while changing email ( #36412 )
2026-05-20 05:51:15 +00:00
7bc5c89e3c
fix: prevent recursion error when SharePoint folder is empty ( #36372 )
2026-05-20 03:56:49 +00:00
d9e90d0fa0
feat: add new agent ( #36284 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-19 10:43:23 +00:00
34a89416f7
test(api): manage backend pytest services natively ( #36235 )
2026-05-19 07:52:15 +00:00
04d62867af
feat(dify-ui): add shared form primitives ( #36334 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-19 05:38:57 +00:00
2d5186fb28
fix(offline): guard marketplace I/O paths for ENG-421 ( #36335 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-18 13:53:42 +00:00
76bba64b79
chore: add type to test ( #36324 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-18 08:47:47 +00:00
2eb37caf2e
refactor(api): migrate console.app.workflow to BaseModel ( #36216 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-18 07:31:37 +00:00
d1238180ed
fix: use Generator type annotation with @contextmanager decorators ( #36297 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-05-18 07:12:49 +00:00
b96f372f45
chore(api): upgrade graphon to 0.4.0 ( #36124 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
2026-05-18 00:34:17 +00:00
3c70d28064
fix(auth): preserve phase field in _TokenData so reset-password / change-email phase-bound checks don't 400 ( #36116 ) ( #36117 )
...
Signed-off-by: vuko <alexander.vukovic@seqis.com >
2026-05-17 19:55:00 +00:00
9d0906c684
chore: improve swagger markdown optional fields typing ( #36247 )
2026-05-16 16:40:20 +00:00
41b6f894c0
fix: fetch memory of LLM node may cause out of flask context ( #36253 )
2026-05-16 16:38:48 +00:00
27b084c4d4
fix: reduce db roundtrips of message update ( #36213 )
2026-05-15 08:39:48 +00:00
a252fbddfa
feat: initialize user timezone and language from browser ( #36170 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-15 08:12:52 +00:00
cdcfd2ef2c
fix: regenerate document summary after update via API ( #35950 ) ( #36035 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-15 07:26:29 +00:00
