WH-2099
|
a5e284e6b1
|
fix(plugin): protect endpoint listings (#40897)
|
2026-08-21 02:17:58 +00:00 |
|
Pranav Agarwal
|
43e59d3bc5
|
fix(api): enforce edit and RBAC permissions on datasource credential …fix(api): enforce edit and RBAC permissions on datasource credential GET endpoint (#41040) (#41041)
|
2026-08-21 02:11:46 +00:00 |
|
WH-2099
|
edc805c453
|
fix(api): enforce app-scoped access on indirect resources (#40893)
|
2026-08-21 00:52:39 +00:00 |
|
wangxiaolei
|
785ca4b915
|
fix: when rbac enabled is true, not check_dataset_permission (#41022)
|
2026-08-20 14:45:40 +00:00 |
|
非法操作
|
1bb9183af9
|
refactor(api): replace legacy recommended app retrieval stack (#40395)
|
2026-08-20 13:13:43 +00:00 |
|
非法操作
|
de7e43a7ef
|
refactor(api): decouple recommended app runtime admission (#40257)
|
2026-08-20 13:13:43 +00:00 |
|
非法操作
|
b09691e5d2
|
refactor(api): isolate trial app usage writes (#40208)
|
2026-08-20 13:13:42 +00:00 |
|
GGbond
|
6f70ca8d26
|
refactor(api): decouple console tag management (#40843)
Co-authored-by: Byron Wang <byron@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 12:31:01 +00:00 |
|
Pranav Agarwal
|
43b6d8e32e
|
fix(api): enforce admin and RBAC permissions on tool OAuth custom client GET endpoint (#40944) (#40945)
|
2026-08-20 09:10:02 +00:00 |
|
FFXN
|
248df5dd25
|
fix(snippet): support snippet history version export (#41012)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 08:52:45 +00:00 |
|
非法操作
|
f97fc01c2f
|
refactor(api): extract recommended app query service (#40207)
|
2026-08-20 08:45:47 +00:00 |
|
林玮 (Jade Lin)
|
a6ace29e1a
|
fix(api): handle suspended email domains (#41004)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 08:04:05 +00:00 |
|
盐粒 Yanli
|
013b328555
|
fix(agent): complete ownership-aware deletion lifecycle (#40888)
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
|
2026-08-20 07:48:02 +00:00 |
|
chelsealong
|
d7b1531431
|
fix(snippets): implement delete for published snippet workflow versions (#41003)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 07:36:17 +00:00 |
|
非法操作
|
48f338e649
|
refactor(api): extract web app runtime bootstrap (#40949)
|
2026-08-20 05:05:31 +00:00 |
|
Byron.wang
|
b4e13ec83e
|
refactor(api): add account profile application service (#40436)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 05:03:08 +00:00 |
|
林玮 (Jade Lin)
|
602a646dbd
|
fix(api): enforce dataset document ownership (#40989)
|
2026-08-20 03:24:45 +00:00 |
|
非法操作
|
ee997d00fa
|
refactor(api): reuse web app access queries for permissions (#40984)
|
2026-08-20 02:27:49 +00:00 |
|
非法操作
|
532489babd
|
refactor(api): extract web app access queries (#40482)
|
2026-08-19 10:34:36 +00:00 |
|
非法操作
|
2f6e782215
|
refactor(api): reuse app definition queries for service API site (#40795)
|
2026-08-19 07:23:47 +00:00 |
|
zyssyz123
|
414f211cde
|
fix(auth): harden email code login verification (#40960)
|
2026-08-19 06:57:47 +00:00 |
|
Pranav Agarwal
|
f1b48a93a9
|
fix(api): enforce edit and RBAC permissions on model provider credential GET endpoints (#40899) (#40900)
|
2026-08-19 06:48:15 +00:00 |
|
盐粒 Yanli
|
8874f3c80b
|
refactor(agent): remove Agent Drive (#40887)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-19 06:34:36 +00:00 |
|
Byron.wang
|
ba61ab4f9f
|
refactor(api): extract account activation application service (#40421)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-18 05:27:40 +00:00 |
|
Byron.wang
|
891627b210
|
refactor(api): decouple data source API key auth flow (#40452)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-18 04:30:17 +00:00 |
|
Amogh Bhat Nagri
|
30c304c6a7
|
fix(api): repair two malformed logger format strings (#40901)
|
2026-08-18 02:10:59 +00:00 |
|
盐粒 Yanli
|
2aaac4dadb
|
feat(dify-agent): enforce signed upload size limits (#40883)
|
2026-08-17 11:59:42 +00:00 |
|
林玮 (Jade Lin)
|
5ef8becd25
|
feat: create accounts with client IP (#40875)
|
2026-08-17 09:29:57 +00:00 |
|
Weike Zhang
|
45be4620fe
|
refactor(controllers/web): dep-inject login and forgot-password payloads (#36659) (#40856)
|
2026-08-17 05:58:40 +00:00 |
|
YungLe
|
219596c4df
|
feat(plugin-auth): visibility picker for OAuth credentials (#39840)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Wu Tianwei <30284043+WTW0313@users.noreply.github.com>
Co-authored-by: twwu <twwu@dify.ai>
|
2026-08-17 02:41:26 +00:00 |
|
zy
|
141cbf9832
|
fix(api): support audio/x-m4a for ASR (#40776)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-16 02:47:31 +00:00 |
|
chenshiyang
|
d31a7d47bf
|
refactor(controllers/web): dep-inject payloads with @model_validate (#40796)
Co-authored-by: chenshiyang.10 <chenshiyang.10@jd.com>
|
2026-08-15 06:55:06 +00:00 |
|
WH-2099
|
fc7b51634d
|
fix(api): protect agent sandbox reads (#40794)
|
2026-08-14 13:51:41 +00:00 |
|
WH-2099
|
96bfcf20cd
|
fix(api): protect workspace credential mutations (#40790)
|
2026-08-14 12:03:54 +00:00 |
|
酒诗
|
b6319c819c
|
chore: dep inject for model in dataset document actions (#40787)
Co-authored-by: geneachina <geneachina@gmail.com>
|
2026-08-14 11:08:21 +00:00 |
|
WH-2099
|
b6694d462f
|
fix(api): protect custom OAuth client deletion (#40786)
|
2026-08-14 10:59:49 +00:00 |
|
L1nSn0w
|
ea6770c7a1
|
feat(oauth): drive silent authorization from oauth_provider_apps.auto_authorize (#40783)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 10:29:39 +00:00 |
|
WH-2099
|
62a544a146
|
fix(api): enforce RAG draft variable access boundaries (#40745)
|
2026-08-14 10:07:22 +00:00 |
|
非法操作
|
eec092f93d
|
refactor(api): reuse app definition queries for service API info (#40476)
|
2026-08-14 09:38:35 +00:00 |
|
非法操作
|
e0fd3b264a
|
refactor(api): reuse app definition queries for app parameters (#40465)
|
2026-08-14 09:38:34 +00:00 |
|
非法操作
|
17c8ff6a33
|
refactor(api): reuse app definition queries in web and service APIs (#40463)
|
2026-08-14 09:38:33 +00:00 |
|
非法操作
|
c425e4cdd5
|
refactor(api): extract installed app definition queries (#40462)
|
2026-08-14 09:38:32 +00:00 |
|
zyssyz123
|
09f20b7a14
|
fix(agent): return conflict for duplicate creation (#40771)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 08:57:13 +00:00 |
|
Myshkin451
|
c903e93e8b
|
fix: preserve file preview content type (#37211)
Co-authored-by: FFXN <31929997+FFXN@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 07:45:21 +00:00 |
|
Joel
|
35132d6892
|
chore: reopen the education application flow (#40760)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 07:16:21 +00:00 |
|
Pranav Agarwal
|
e2852524be
|
fix(api): enforce edit and RBAC permissions on dataset API key GET endpoint (#40740) (#40743)
|
2026-08-14 04:27:37 +00:00 |
|
WH-2099
|
c1bde25bcc
|
fix(api): remove unsafe Bedrock test endpoint (#40742)
|
2026-08-13 19:47:13 +00:00 |
|
Harsh Kashyap
|
8238684334
|
fix(api): chain original exception in 13 except blocks per PEP 3134 (#40738)
Co-authored-by: Harsh Kashyap <Harsh23Kashyap@users.noreply.github.com>
|
2026-08-13 17:50:05 +00:00 |
|
zyssyz123
|
c9c7fb9962
|
fix(agent): meter internal LLM calls through API (#40613)
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
|
2026-08-13 12:15:44 +00:00 |
|
WH-2099
|
489772908b
|
fix: enforce API key list permissions (#40516)
|
2026-08-12 11:44:27 +00:00 |
|