Byron Wang
5e3387f38a
update the pyproject.yaml
2026-03-01 16:50:55 +08:00
Byron Wang
1cdae16b28
update web and api dockerfile
2026-03-01 15:11:14 +08:00
Byron Wang
1b64f642e6
update the web Dockerfile
2026-02-12 16:25:52 +08:00
Byron Wang
24ecc3e558
uv sync
2026-02-12 15:57:45 +08:00
Byron Wang
e1b7b0f81d
remove the weaviate and update dockerfiles
2026-02-12 15:56:55 +08:00
Byron Wang
32d6747ff2
delete vdb tablestore and dependencies
2026-02-11 19:26:23 +08:00
Byron Wang
6bb6a08769
bump weave versions
2026-02-11 17:54:11 +08:00
Byron Wang
6ea4b8ff31
upgrade setuptools version to 82.0.0
2026-02-10 18:14:49 +08:00
Byron Wang
065a69ced0
bump weave version and regenerate lock
2026-02-10 17:40:22 +08:00
Byron Wang
615da29433
bump unstructured pypi version
2026-02-10 16:22:12 +08:00
Byron Wang
16ef73cd76
remove unused stage
2026-02-10 15:46:22 +08:00
Byron Wang
6a9009f7e3
fix /app already exist in docker build
2026-02-10 15:29:55 +08:00
Byron Wang
6b60e93dfc
update dify web base image to dhi base
2026-02-10 15:22:13 +08:00
Byron Wang
e532b6e882
update api base image to dhi base
2026-02-10 15:16:15 +08:00
Xiyuan Chen
3d2aea11a3
Update api/services/tools/builtin_tools_manage_service.py
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-04 18:35:15 -08:00
NFish
c727d99e55
fix: hide invite button if current user is not workspace manager ( #31742 )
2026-01-30 15:35:11 +08:00
yunlu.wen
ffc18bf318
chore: upgrade deps, see pull #30976
2026-01-28 13:02:01 +08:00
Yunlu Wen
7623990f7b
chore: sync enterprise release ( #31626 )
...
Co-authored-by: zhsama <torvalds@linux.do>
2026-01-28 10:39:35 +08:00
NFish
0c4c912f8a
fix: enterprise CVE 2026 23864 ( #31599 )
2026-01-27 16:13:18 +08:00
GareArc
6fd5df658c
fix: add TYPE_CHECKING import for Account type annotation
2026-01-26 16:08:09 -08:00
GareArc
69b11cc364
security: fix IDOR and privilege escalation in set_default_provider
...
- Add tenant_id verification to prevent IDOR attacks
- Add admin check for enterprise tenant-wide default changes
- Preserve non-enterprise behavior (users can set own defaults)
2026-01-26 16:01:06 -08:00
GareArc
57721225b9
fix: remove user_id filter when clearing default provider (enterprise only)
...
When setting a new default credential in enterprise mode, the code was
only clearing is_default for credentials matching the current user_id.
This caused issues when:
1. Enterprise credential A (synced with system user_id) was default
2. User sets local credential B as default
3. A still had is_default=true (different user_id)
4. Both A and B were considered defaults
The fix removes user_id from the filter only for enterprise deployments,
since enterprise credentials may have different user_id than local ones.
Non-enterprise behavior is unchanged to avoid breaking existing setups.
Fixes EE-1511
2026-01-26 15:43:13 -08:00
GareArc
68dfb3d4d9
feat: add redis mq for account deletion cleanup
2026-01-25 22:38:19 -08:00
Xiyuan Chen
7058de7a88
feat: implement workspace permission checks for member invitations an… ( #31202 )
2026-01-25 21:21:58 -08:00
NFish
9c75061bdd
feat: ee workspace permission control ( #30841 )
2026-01-26 13:16:02 +08:00
wangxiaolei
d7509e6cdd
fix: fix visibilityState event handle ( #31354 )
2026-01-22 11:25:20 +08:00
wangxiaolei
5cd11a0071
fix: remove _try_resolve_user_from_request ( #31360 )
2026-01-22 11:25:06 +08:00
wangxiaolei
37c2f3d4b6
fix: fix instance is not bind to session ( #30913 )
2026-01-21 17:05:13 +08:00
CodingOnStar
fa56c53aaf
fix(i18n): update model provider tip to only mention OpenAI in English, Japanese, and Simplified Chinese translations
2026-01-21 15:50:49 +08:00
CodingOnStar
500428331b
chore(web): comment out unused provider entries in quota panel
2026-01-21 11:28:38 +08:00
wangxiaolei
acfd34e876
fix: fix Cannot destructure property 'name' of 'value' as it is undef… ( #30991 )
2026-01-15 13:25:30 +08:00
-LAN-
036a7cf839
chore: bump version to 1.11.4 ( #30961 )
2026-01-15 11:40:33 +08:00
Stephen Zhou
86beacc64f
build: require node 24.13.0 ( #30945 )
2026-01-15 11:40:27 +08:00
wangxiaolei
2c6bd90d6f
fix: fix missing id and message_id ( #31008 )
2026-01-15 11:40:13 +08:00
Stephen Zhou
f5aaa8f97e
fix: redirect after login ( #30985 )
2026-01-15 11:40:02 +08:00
-LAN-
a22cc5bc5e
chore: Bump Dify version to 1.11.3 ( #30903 )
2026-01-13 17:49:13 +08:00
yyh
1fbdf6b465
refactor(web): setup status caching ( #30798 )
2026-01-13 16:59:49 +08:00
非法操作
491e1fd6a4
chore: case insensitive email ( #29978 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2026-01-13 15:42:44 +08:00
青枕
0e33dfb5c2
fix: In the LLM model in dify, when a message is added, the first cli… ( #29540 )
...
Co-authored-by: 青枕 <qingzhen.ww@alibaba-inc.com>
2026-01-13 15:42:32 +08:00
lif
ea708e7a32
fix(web): add null check for SSE stream bufferObj to prevent TypeError ( #30131 )
...
Signed-off-by: majiayu000 <1835304752@qq.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-13 15:40:43 +08:00
非法操作
c09e29c3f8
chore: rename the migration file ( #30893 )
2026-01-13 15:26:41 +08:00
wangxiaolei
2d53ba8671
fix: fix object value is optional should skip validate ( #30894 )
2026-01-13 15:21:06 +08:00
呆萌闷油瓶
9be863fefa
fix: missing content if assistant message with tool_calls ( #30083 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-01-13 12:46:33 +08:00
Coding On Star
8f43629cd8
fix(amplitude): update sessionReplaySampleRate default value to 0.5 ( #30880 )
...
Co-authored-by: CodingOnStar <hanxujiang@dify.ai>
2026-01-13 12:26:50 +08:00
wangxiaolei
9ee71902c1
fix: fix formatNumber accuracy ( #30877 )
2026-01-13 11:51:15 +08:00
hsiong
a012c87445
fix: entrypoint.sh overrides NEXT_PUBLIC_TEXT_GENERATION_TIMEOUT_MS when TEXT_GENERATION_TIMEOUT_MS is unset ( #30864 ) ( #30865 )
2026-01-13 10:12:51 +08:00
heyszt
450578d4c0
feat(ops): set root span kind for AliyunTrace to enable service-level metrics aggregation ( #30728 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-01-13 10:12:00 +08:00
非法操作
837237aa6d
fix: use node factory for single-step workflow nodes ( #30859 )
2026-01-13 10:11:18 +08:00
QuantumGhost
b63dfbf654
fix(api): defer streaming response until referenced variables are updated ( #30832 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-01-12 16:23:18 +08:00
非法操作
51ea87ab85
feat: clear free plan workflow run logs ( #29494 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2026-01-12 15:57:40 +08:00
