QuantumGhost
737d290fdc
test(api): Simplify unit tests
...
Remove duplicated test cases.
2025-09-11 17:42:30 +08:00
QuantumGhost
81d9a9d00d
feat(api): limit conversation variable description length
...
Previously, conversation variable descriptions had no length limit, causing errors
when debugging chatflows. These descriptions are saved as draft variable descriptions
during debugging, which have a 256-character limit. Variables with descriptions
exceeding this limit could not be saved, resulting in 500 errors and "Internal
Server Error" messages during chatflow debugging.
This commit implements description length limits for conversation variables:
- New chatflows: Hard limit of 256 characters for descriptions. Longer
descriptions are rejected and prevent chatflow saving.
- Existing chatflows: If all conversation variable descriptions are under
256 characters, the same limit applies as new chatflows. Otherwise, no limit
is enforced to maintain backward compatibility.
2025-09-11 17:42:30 +08:00
JzoNg
215e318600
slice descrition when restore workflow
2025-09-11 17:41:35 +08:00
JzoNg
53faf90bea
fix conversation var restore & description length check
2025-09-11 17:41:34 +08:00
JzoNg
d2f12037da
add description length check
2025-09-11 17:41:34 +08:00
QuantumGhost
874406d934
security(api): fix privilege escalation vulnerability in model config and chat message APIs ( #25518 )
...
The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and
`ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`)
endpoints do not properly validate user permissions, allowing users without `editor`
permission to access restricted functionality.
This PR addresses this issue by adding proper permission check.
2025-09-11 14:53:35 +08:00
Nite Knite
07d067d828
chore: support Zendesk widget ( #25517 )
2025-09-11 13:17:50 +08:00
Xiyuan Chen
af7f67dc9c
Feat/enteprise cd ( #25508 )
2025-09-10 20:53:42 -07:00
Xiyuan Chen
34e55028ae
Feat/enteprise cd ( #25485 )
2025-09-10 19:01:32 -07:00
Eric Guo
70e4d6be34
Fix 500 in dataset page. ( #25474 )
2025-09-10 15:57:04 +08:00
Wu Tianwei
b690ac4e2a
fix: Remove sticky positioning from workflow component fields ( #25470 )
2025-09-10 15:17:49 +08:00
Asuka Minato
cbc0e639e4
update sql in batch ( #24801 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-10 13:00:17 +08:00
Guangdong Liu
b51c724a94
refactor: Migrate part of the console basic API module to Flask-RESTX ( #24732 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-10 12:15:47 +08:00
GuanMu
26a9abef64
test: imporve ( #25461 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-10 11:36:22 +08:00
Will
fecdb9554d
fix: inner_api get_user_tenant ( #25462 )
2025-09-10 11:31:16 +08:00
NeatGuyCoding
45ef177809
Feature add test containers create segment to index task ( #25450 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-10 10:02:53 +08:00
Newton José
6574e9f0b2
Fix: Add Password Validation to Account Creation ( #25382 )
2025-09-10 08:58:39 +08:00
Asuka Minato
cce13750ad
add rule for strenum ( #25445 )
2025-09-10 08:51:21 +08:00
17hz
928bef9d82
fix: imporve the condition for stopping the think timer. ( #25365 )
2025-09-10 08:45:00 +08:00
-LAN-
08dd3f7b50
Fix basedpyright type errors ( #25435 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-10 01:54:26 +08:00
Yongtao Huang
2ac7a9c8fc
Chore: thanks to bump-pydantic ( #25437 )
2025-09-09 20:07:17 +08:00
Novice
240b65b980
fix(mcp): properly handle arrays containing both numbers and strings ( #25430 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-09 20:06:35 +08:00
-LAN-
7443c5a6fc
refactor: update pyrightconfig to scan all API files ( #25429 )
2025-09-09 17:12:45 +08:00
GuanMu
a1cf48f84e
Add lib test ( #25410 )
2025-09-09 17:11:49 +08:00
-LAN-
e5122945fe
Fix: Use --fix flag instead of --fix-only in autofix workflow ( #25425 )
2025-09-09 17:00:00 +08:00
KVOJJJin
22cd97e2e0
Fix: judgement of open in explore ( #25420 )
2025-09-09 16:49:22 +08:00
Asuka Minato
38057b1b0e
add typing to all wraps ( #25405 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-09 16:48:33 +08:00
crazywoola
eb52216a9c
Revert "example of remove useEffect" ( #25418 )
2025-09-09 16:23:44 +08:00
Joel
4c92e63b0b
fix: avatar is not updated after setted ( #25414 )
2025-09-09 16:00:50 +08:00
XiamuSanhua
ac2aa967c4
feat: change history by supplementary node information ( #25294 )
...
Co-authored-by: alleschen <alleschen@tencent.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-09 15:18:42 +08:00
ttz12345
d2e50a508c
Fix:About the error problem of creating an empty knowledge base interface in service_api ( #25398 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-09 15:18:31 +08:00
Wu Tianwei
37975319f2
feat: Add customized json schema validation ( #25408 )
2025-09-09 15:15:32 +08:00
Yongtao Huang
4aba570fa8
Fix flask response: 200 -> {}, 200 ( #25404 )
2025-09-09 15:06:18 +08:00
Novice
e180c19cca
fix(mcp): current_user not being set in MCP requests ( #25393 )
2025-09-09 14:58:14 +08:00
zxhlyh
c595c03452
fix: credential not allow to use in load balancing ( #25401 )
2025-09-09 14:52:50 +08:00
Xiyuan Chen
64c9a2f678
Feat/credential policy ( #25151 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 23:45:05 -07:00
Novice
566e0fd3e5
fix(container-test): batch create segment position sort ( #25394 )
2025-09-09 13:47:29 +08:00
NeatGuyCoding
7dfb72e381
feat: add test containers based tests for clean notion document task ( #25385 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-09 11:02:19 +08:00
Asuka Minato
649242f82b
example of uuid ( #25380 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-09 10:45:08 +08:00
yinyu
cf1ee3162f
Support Anchor Scroll In The Output Node ( #25364 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-09 10:35:07 +08:00
NeatGuyCoding
bf6485fab4
minor fix: some translation mismatch ( #25386 )
2025-09-09 10:30:04 +08:00
Yeuoly
720ecea737
fix: tenant_id was not specific when retrieval end-user in plugin backwards invocation wraps ( #25377 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-09 09:49:35 +08:00
HuDenghui
d5e86d9180
fix: Fixed the X-axis scroll bar issue in the LLM node settings panel ( #25357 )
2025-09-09 09:47:27 +08:00
Yongtao Huang
cab1272bb1
Fix: use correct maxLength prop for verification code input ( #25371 )
...
Signed-off-by: Yongtao Huang <yongtaoh2022@gmail.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-08 20:44:48 +08:00
Matri Qi
563a5af9e7
Fix/disable no constant binary expression ( #25311 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 20:44:20 +08:00
-LAN-
ec0800eb1a
refactor: update pyrightconfig.json to use ignore field for better type checking configuration ( #25373 )
2025-09-08 19:55:25 +08:00
zyssyz123
ea61420441
Revert "feat: email register refactor" ( #25367 )
2025-09-08 19:20:09 +08:00
kenwoodjw
598ec07c91
feat: enable dsl export encrypt dataset id or not ( #25102 )
...
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
2025-09-08 18:03:24 +08:00
Debin.Meng
a932413314
fix: Incorrect URL Parameter Parsing Causes user_id Retrieval Error ( #25261 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 18:00:33 +08:00
NeatGuyCoding
aff2482436
Feature add test containers batch create segment to index ( #25306 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 17:55:57 +08:00