Yansong Zhang
|
305ff3a1b5
|
fix(agent): reject incompatible session snapshots
|
2026-08-28 17:13:48 +08:00 |
|
Pranav Agarwal
|
24f5e2ac69
|
fix(api): enforce admin and RBAC permissions on default model and provider models GET endpoints (#41099) (#41100)
|
2026-08-23 07:33:57 +00:00 |
|
Pranav Agarwal
|
07119e3f00
|
fix(api): enforce admin and RBAC permissions on data source integrates GET endpoint (#41079) (#41080)
|
2026-08-21 17:57:23 +00:00 |
|
Xiyuan Chen
|
d6147456e3
|
feat: Enterprise Home Snapshot — runtime endpoints and dify-agent adapter (#40996)
|
2026-08-21 10:39:36 +00:00 |
|
Yunlu Wen
|
373f33fd3b
|
fix: add missing metrics back and enhance typing (#40935)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-21 09:46:45 +00:00 |
|
Byron.wang
|
b38d907ede
|
refactor(api): finish account controller application boundary (#40440)
|
2026-08-21 08:46:06 +00:00 |
|
Byron.wang
|
a52adef203
|
refactor(api): extract change email state machine (#40439)
|
2026-08-21 08:13:23 +00:00 |
|
Byron.wang
|
3b05b5e553
|
refactor(api): move account lifecycle into application services (#40438)
|
2026-08-21 08:05:43 +00:00 |
|
Byron.wang
|
1d79b87307
|
refactor(api): move account access behind application services (#40437)
|
2026-08-21 05:56:30 +00:00 |
|
WH-2099
|
a5e284e6b1
|
fix(plugin): protect endpoint listings (#40897)
|
2026-08-21 02:17:58 +00:00 |
|
Pranav Agarwal
|
43e59d3bc5
|
fix(api): enforce edit and RBAC permissions on datasource credential …fix(api): enforce edit and RBAC permissions on datasource credential GET endpoint (#41040) (#41041)
|
2026-08-21 02:11:46 +00:00 |
|
WH-2099
|
edc805c453
|
fix(api): enforce app-scoped access on indirect resources (#40893)
|
2026-08-21 00:52:39 +00:00 |
|
wangxiaolei
|
785ca4b915
|
fix: when rbac enabled is true, not check_dataset_permission (#41022)
|
2026-08-20 14:45:40 +00:00 |
|
非法操作
|
1bb9183af9
|
refactor(api): replace legacy recommended app retrieval stack (#40395)
|
2026-08-20 13:13:43 +00:00 |
|
非法操作
|
de7e43a7ef
|
refactor(api): decouple recommended app runtime admission (#40257)
|
2026-08-20 13:13:43 +00:00 |
|
非法操作
|
b09691e5d2
|
refactor(api): isolate trial app usage writes (#40208)
|
2026-08-20 13:13:42 +00:00 |
|
GGbond
|
6f70ca8d26
|
refactor(api): decouple console tag management (#40843)
Co-authored-by: Byron Wang <byron@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 12:31:01 +00:00 |
|
Pranav Agarwal
|
43b6d8e32e
|
fix(api): enforce admin and RBAC permissions on tool OAuth custom client GET endpoint (#40944) (#40945)
|
2026-08-20 09:10:02 +00:00 |
|
FFXN
|
248df5dd25
|
fix(snippet): support snippet history version export (#41012)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 08:52:45 +00:00 |
|
非法操作
|
f97fc01c2f
|
refactor(api): extract recommended app query service (#40207)
|
2026-08-20 08:45:47 +00:00 |
|
林玮 (Jade Lin)
|
a6ace29e1a
|
fix(api): handle suspended email domains (#41004)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 08:04:05 +00:00 |
|
盐粒 Yanli
|
013b328555
|
fix(agent): complete ownership-aware deletion lifecycle (#40888)
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
|
2026-08-20 07:48:02 +00:00 |
|
chelsealong
|
d7b1531431
|
fix(snippets): implement delete for published snippet workflow versions (#41003)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 07:36:17 +00:00 |
|
非法操作
|
48f338e649
|
refactor(api): extract web app runtime bootstrap (#40949)
|
2026-08-20 05:05:31 +00:00 |
|
Byron.wang
|
b4e13ec83e
|
refactor(api): add account profile application service (#40436)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 05:03:08 +00:00 |
|
林玮 (Jade Lin)
|
602a646dbd
|
fix(api): enforce dataset document ownership (#40989)
|
2026-08-20 03:24:45 +00:00 |
|
非法操作
|
ee997d00fa
|
refactor(api): reuse web app access queries for permissions (#40984)
|
2026-08-20 02:27:49 +00:00 |
|
非法操作
|
532489babd
|
refactor(api): extract web app access queries (#40482)
|
2026-08-19 10:34:36 +00:00 |
|
非法操作
|
2f6e782215
|
refactor(api): reuse app definition queries for service API site (#40795)
|
2026-08-19 07:23:47 +00:00 |
|
zyssyz123
|
414f211cde
|
fix(auth): harden email code login verification (#40960)
|
2026-08-19 06:57:47 +00:00 |
|
Pranav Agarwal
|
f1b48a93a9
|
fix(api): enforce edit and RBAC permissions on model provider credential GET endpoints (#40899) (#40900)
|
2026-08-19 06:48:15 +00:00 |
|
盐粒 Yanli
|
8874f3c80b
|
refactor(agent): remove Agent Drive (#40887)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-19 06:34:36 +00:00 |
|
Byron.wang
|
ba61ab4f9f
|
refactor(api): extract account activation application service (#40421)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-18 05:27:40 +00:00 |
|
Byron.wang
|
891627b210
|
refactor(api): decouple data source API key auth flow (#40452)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-18 04:30:17 +00:00 |
|
Amogh Bhat Nagri
|
30c304c6a7
|
fix(api): repair two malformed logger format strings (#40901)
|
2026-08-18 02:10:59 +00:00 |
|
盐粒 Yanli
|
2aaac4dadb
|
feat(dify-agent): enforce signed upload size limits (#40883)
|
2026-08-17 11:59:42 +00:00 |
|
林玮 (Jade Lin)
|
5ef8becd25
|
feat: create accounts with client IP (#40875)
|
2026-08-17 09:29:57 +00:00 |
|
Weike Zhang
|
45be4620fe
|
refactor(controllers/web): dep-inject login and forgot-password payloads (#36659) (#40856)
|
2026-08-17 05:58:40 +00:00 |
|
YungLe
|
219596c4df
|
feat(plugin-auth): visibility picker for OAuth credentials (#39840)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Wu Tianwei <30284043+WTW0313@users.noreply.github.com>
Co-authored-by: twwu <twwu@dify.ai>
|
2026-08-17 02:41:26 +00:00 |
|
zy
|
141cbf9832
|
fix(api): support audio/x-m4a for ASR (#40776)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-16 02:47:31 +00:00 |
|
chenshiyang
|
d31a7d47bf
|
refactor(controllers/web): dep-inject payloads with @model_validate (#40796)
Co-authored-by: chenshiyang.10 <chenshiyang.10@jd.com>
|
2026-08-15 06:55:06 +00:00 |
|
WH-2099
|
fc7b51634d
|
fix(api): protect agent sandbox reads (#40794)
|
2026-08-14 13:51:41 +00:00 |
|
WH-2099
|
96bfcf20cd
|
fix(api): protect workspace credential mutations (#40790)
|
2026-08-14 12:03:54 +00:00 |
|
酒诗
|
b6319c819c
|
chore: dep inject for model in dataset document actions (#40787)
Co-authored-by: geneachina <geneachina@gmail.com>
|
2026-08-14 11:08:21 +00:00 |
|
WH-2099
|
b6694d462f
|
fix(api): protect custom OAuth client deletion (#40786)
|
2026-08-14 10:59:49 +00:00 |
|
L1nSn0w
|
ea6770c7a1
|
feat(oauth): drive silent authorization from oauth_provider_apps.auto_authorize (#40783)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 10:29:39 +00:00 |
|
WH-2099
|
62a544a146
|
fix(api): enforce RAG draft variable access boundaries (#40745)
|
2026-08-14 10:07:22 +00:00 |
|
非法操作
|
eec092f93d
|
refactor(api): reuse app definition queries for service API info (#40476)
|
2026-08-14 09:38:35 +00:00 |
|
非法操作
|
e0fd3b264a
|
refactor(api): reuse app definition queries for app parameters (#40465)
|
2026-08-14 09:38:34 +00:00 |
|
非法操作
|
17c8ff6a33
|
refactor(api): reuse app definition queries in web and service APIs (#40463)
|
2026-08-14 09:38:33 +00:00 |
|