opensource
/
dify
mirror of https://github.com/langgenius/dify.git
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
7,272 Commits 295 Branches 160 Tags 506 MiB
Commit Graph

492 Commits

Author SHA1 Message Date
-LAN- 4ea43f93ae
Merge branch 'main' into chore/ssrf-config 2025-09-17 13:02:04 +08:00
Jiang b283b10d3e
Fix/lindorm vdb optimize (#25748) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-16 16:54:18 +08:00
-LAN- 44c5f7ec5c
Merge branch 'main' into chore/ssrf-config 2025-09-14 04:43:21 +08:00
zyssyz123 c2fcd2895b
Feat/email register refactor (#25369) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Joel <iamjoel007@gmail.com>
 2025-09-12 10:24:54 +08:00
-LAN- 895b847204
Merge branch 'main' into chore/ssrf-config 2025-09-10 03:23:44 +08:00
zyssyz123 ea61420441
Revert "feat: email register refactor" (#25367) 2025-09-08 19:20:09 +08:00
kenwoodjw 598ec07c91
feat: enable dsl export encrypt dataset id or not (#25102) 
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
 2025-09-08 18:03:24 +08:00
zyssyz123 860ee20c71
feat: email register refactor (#25344) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-08 17:51:43 +08:00
-LAN- c7700ac176
chore(docker): bump version (#25092) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-09-03 20:25:44 +08:00
Stream d011ddfc64
chore(version): bump version to 1.8.1 (#25060) 2025-09-03 18:54:07 +08:00
autofix-ci[bot] 4d184c98de
[autofix.ci] apply automated fixes 2025-09-01 06:59:44 +00:00
-LAN- 5ea168f03b
feat(ssrf_proxy): Support DEV_MODE 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-09-01 14:58:49 +08:00
autofix-ci[bot] b7c87245a3
[autofix.ci] apply automated fixes 2025-09-01 13:45:09 +08:00
-LAN- 6a54980824
feat(ssrf_proxy): Add dev-mode and tests for ssrf_proxy 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-09-01 13:45:08 +08:00
-LAN- 42110a8217
test(ssrf_proxy): Add integration test for ssrf proxy 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-09-01 13:45:08 +08:00
-LAN- fb36069f1c
chore: consolidate gitignore rules to root .gitignore 
- Move docker/ssrf_proxy/conf.d/ ignore rule to root .gitignore
- Remove redundant docker/ssrf_proxy/.gitignore file
- Keep all gitignore rules in a single location for better maintainability
 2025-09-01 13:45:08 +08:00
-LAN- 1e971bd20d
chore: reorder example configuration files after marketplace removal 
- Rename example configs to maintain sequential numbering (10, 20, 30)
- Update README to reflect new file numbering
- Keep testing config as 00 since it's a special case
 2025-09-01 13:45:08 +08:00
-LAN- 621ede0f7b
chore: allow marketplace access by default in SSRF proxy 
- Add marketplace.dify.ai to default allowed domains in squid.conf
- Remove separate marketplace configuration example as it's no longer needed
- Update documentation to reflect marketplace is allowed by default
 2025-09-01 13:45:08 +08:00
-LAN- 99ee64c864
chore: update docker compose tempalte 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-09-01 13:45:07 +08:00
-LAN- 1a49febc02
chore: harden SSRF proxy configuration with strict defaults 
- Block all private/internal networks by default to prevent SSRF attacks
- Restrict ports to only HTTP (80) and HTTPS (443)
- Deny all requests by default unless explicitly whitelisted
- Add customization support via conf.d directory for local overrides
- Provide example configurations for common use cases
- Add CI/testing setup script to ensure tests pass with strict config
- Update docker-compose files to support custom config mounting
- Add comprehensive documentation with security warnings
 2025-09-01 13:45:07 +08:00
autofix-ci[bot] 9e2b6325f3
[autofix.ci] apply automated fixes 2025-09-01 13:45:07 +08:00
-LAN- 23c97ec7f7
chore: strengthen SSRF proxy default configuration 
- Block all private/internal networks by default to prevent SSRF attacks
- Restrict allowed ports to only HTTP (80) and HTTPS (443)
- Remove default domain allowlists (e.g., marketplace.dify.ai)
- Implement deny-all-by-default policy with explicit whitelisting
- Add example configuration files for common customization scenarios
- Provide comprehensive documentation for security configuration

Fixes #24392
 2025-09-01 13:45:07 +08:00
Hwting d937cc491d
chore[docker]: Fix Redis health check error but display healthy (#24778) 2025-08-30 06:19:43 -07:00
Hwting 56c51f0112
chore: Plugin_daemon Service Add Sentry configuration (#24516) 
Co-authored-by: Hwting <wang.t.nice@gmail.com>
 2025-08-28 09:56:11 +08:00
-LAN- f04844435f
chore: bump version from 1.7.2 to 1.8.0 (#24539) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
 2025-08-27 15:20:10 +08:00
Bowen Liang 6e674b511a
api: support to config disabling Swagger UI in api service (#24440) 2025-08-26 15:48:04 +08:00
GuanMu b78ce1689a
feat: Add SQLALCHEMY_MAX_OVERFLOW configuration to support database connection pool overflow (#24432) 2025-08-25 09:51:37 +08:00
yihong 4c1ad40f8e
docs: format all md files (#24195) 
Signed-off-by: yihong0618 <zouzou0208@gmail.com>
 2025-08-20 13:49:11 +08:00
9527MrLi 75199442c1
feat: Implements periodic deletion of workflow run logs that exceed t… (#23881) 
Co-authored-by: shiyun.li973792 <shiyun.li@seres.cn>
Co-authored-by: 1wangshu <suewangswu@gmail.com>
Co-authored-by: Blackoutta <hyytez@gmail.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-08-19 09:47:34 +08:00
-LAN- 052d0e059e
feat: add Redis SSL/TLS certificate authentication support (#23624) 2025-08-18 10:59:07 +08:00
crazywoola 462ba8f416
chore: add configurable stdio buffer sizes for plugins in compose file (#23980) 2025-08-15 15:25:11 +08:00
xinlmain b3399642c5
feat: Add an asynchronous repository to improve workflow performance (#20050) 
Co-authored-by: liangxin <liangxin@shein.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: liangxin <xinlmain@gmail.com>
 2025-08-13 02:28:06 +08:00
ShuangLiu 66232792a2
fix: add MAX_TREE_DEPTH in env.service.web (#23785) 
Co-authored-by: crazywoola <427733928@qq.com>
 2025-08-12 12:01:51 +08:00
ShuangLiu a6c5b7414d
Fix: expose MAX_TREE_DEPTH in env (#23743) 
Co-authored-by: crazywoola <427733928@qq.com>
 2025-08-12 09:56:31 +08:00
Wu Tianwei 0baccb9e82
chore(version): bump version to 1.7.2 (#23740) 2025-08-11 17:12:44 +08:00
yunqiqiliang e01510e2a6
feat: Add Clickzetta Lakehouse vector database integration (#22551) 
Co-authored-by: Claude <noreply@anthropic.com>
 2025-08-07 14:21:46 +08:00
winsonwhe 2575eaf1d6
Update milvus version to LTS (#23393) 
Co-authored-by: crazywoola <427733928@qq.com>
 2025-08-05 21:29:38 +08:00
wanttobeamaster da5c003f97
chore: tablestore full text search support score normalization (#23255) 
Co-authored-by: xiaozhiqing.xzq <xiaozhiqing.xzq@alibaba-inc.com>
 2025-08-01 14:14:11 +08:00
rhochman eee576355b
Fix: Support for Elasticsearch Cloud Connector (#23017) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-07-30 11:12:16 +08:00
QuantumGhost 0d2d349ab3
chore(version): bump version to 1.7.1 (#23048) 2025-07-28 16:42:39 +08:00
znn d776a7cde7
adding LANG LC_ALL PYTHONIOENCODING UTF-8 (#22928) 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-07-27 09:19:13 +08:00
J2M3L2 89415ac453
fix: improve PostgreSQL healthcheck cmd to avoid fatal log errors (#22749) (#22917) 2025-07-25 09:05:47 +08:00
Novice 7ec94eb83c
chore(version): bump to 1.7.0 (#22830) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-07-23 18:37:30 +08:00
Junyan Qin (Chin) eaae79a581
feat: plugin auto upgrade strategy (#19758) 
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: crazywoola <427733928@qq.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Novice <novice12185727@gmail.com>
 2025-07-23 15:33:39 +08:00
JianhengHou 3b23fc5ad8
fix: Correct and enhance the doc on CELERY_BROKER_URL in .env.example (#22693) 
Co-authored-by: Jianheng Hou <jianhenh@example.com>
 2025-07-21 13:55:16 +08:00
znn 19c09d6111
enabling vector index prefix name via configuration files (#22661) 2025-07-20 11:10:08 +08:00
kenwoodjw 61a5741c05
fix celery config (#22566) 
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
 2025-07-18 09:41:09 +08:00
zyssyz123 a4f421028c
Feat/change user email (#22213) 
Co-authored-by: NFish <douxc512@gmail.com>
Co-authored-by: JzoNg <jzongcode@gmail.com>
Co-authored-by: Garfield Dai <dai.hai@foxmail.com>
 2025-07-17 10:55:59 +08:00
heyszt f082452c9b
feat: add otel endpoint config (#22492) 2025-07-16 18:24:17 +08:00
Jacky Wu da53bf511f
chore: add SQLALCHEMY_POOL_USE_LIFO option and missing SQLALCHEMY_POOL_PRE_PING env default value. (#22371) 2025-07-15 19:46:48 +08:00