82e8e419fb
Merge branch 'main' into fix/template-textarea-prefill
2025-12-29 09:48:03 +08:00
d8010a7fbc
fix: Add JSON RPC request type guard ( #30216 )
2025-12-28 03:02:46 +09:00
ecda6fc464
refactor: move imports to top of generated script, remove redundancy
2025-12-26 20:27:32 +02:00
26444d8b6c
fix(template-transform): use base64 encoding for Jinja2 templates
...
When Jinja2 templates containing special characters (quotes, newlines)
were embedded directly in the generated Python script using triple-quoted
strings, the script would break. This fix encodes the template as base64
before embedding, then decodes it at runtime.
Root cause: Templates were inserted via string replacement into a Python
script like `jinja2.Template('''...''')`. If the template contained `'''`,
the generated script had a syntax error.
Solution: Add serialize_code() method to base64-encode templates, then
override assemble_runner_script() in Jinja2TemplateTransformer to use
the encoded template with runtime decoding.
This specifically affects Jinja2 templates - Python3 and JavaScript
transformers insert user code at the top level (not inside strings),
so they don't have this vulnerability.
Fixes #26818
2025-12-26 20:08:12 +02:00
f610f6895f
fix: retrieval test and knowledge retrieval node failed in multimodal mode ( #30210 )
...
Co-authored-by: Stephen Zhou <38493346+hyoban@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-26 21:42:06 +08:00
d20a8d5b77
fix: fix missing not in ( #30207 )
2025-12-26 16:52:34 +08:00
8611301722
fix: fix DatasetRetrieval._process_metadata_filter_func miss in operator ( #30199 )
2025-12-26 16:34:50 +08:00
61d255a6e6
chore: bypass InsufficientPrivilege on Azure PostgreSQL ( #30191 )
2025-12-26 14:35:05 +08:00
9885e92854
fix: validate first then save to db ( #30107 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-25 19:36:52 +09:00
996c7d9e16
perf: using pipeline to delete redis cache ( #30159 )
2025-12-25 17:04:37 +08:00
a26b2d74d4
fix: allow None values in VariableMessage validation ( #30082 )
2025-12-25 10:20:25 +08:00
9000fa1a88
fix: handle list content type in Parameter Extraction node ( #30070 )
2025-12-25 10:19:50 +08:00
02e0fadef7
feat: add editing support for trigger subscriptions ( #29957 )
...
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
2025-12-24 19:15:54 +08:00
2f9d718997
fix: fix use build_request lead unexpect param ( #30095 )
2025-12-24 17:23:30 +08:00
f439e081b5
fix: loop streaming by clearing stale subgraph variables ( #30059 )
2025-12-24 11:28:52 +08:00
a5309bee25
fix: handle missing `credential_id` ( #30051 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-24 11:21:51 +08:00
111a39b549
fix: fix firecrawl url concat ( #30008 )
2025-12-24 09:40:32 +08:00
aea3a6f80c
fix: when use forward proxy with httpx, httpx will overwrite the use … ( #30029 )
2025-12-23 19:01:12 +08:00
3f27b3f0b4
fix(ops): correct LangSmith dotted_order timestamp format ( #30022 )
2025-12-23 19:00:17 +08:00
b321511518
feat: grace ful close the connection ( #30039 )
2025-12-23 18:56:38 +08:00
9701a2994b
chore: Translate stray Chinese comment to English ( #30024 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-23 14:05:21 +08:00
542eb04ad8
fix: preserve empty list for FILE_LIST type in base_app_generator ( #29618 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-12-22 21:32:07 +08:00
eaf4146e2f
perf: optimize DatasetRetrieval.retrieve、RetrievalService._deduplicat… ( #29981 )
2025-12-22 20:08:21 +08:00
6cf71366ba
fix: validate API key is not empty in HTTPRequest node ( #29950 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-21 17:04:07 +08:00
32605181bd
feat: first use INTERNAL_FILES_URL first, then FILES_URL ( #29962 )
2025-12-21 16:53:37 +08:00
7501360663
fix: add RFC 9728 compliant well-known URL discovery with path insertion fallback ( #29960 )
2025-12-21 09:19:11 +08:00
5067e4f255
fix 29184 ( #29188 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-18 17:11:52 +08:00
78ca5ad142
fix: fix fixed_separator ( #29861 )
2025-12-18 16:50:44 +08:00
e6545f2727
perf: decrease db query ( #29837 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-18 15:35:52 +08:00
eb5a444d3d
fix: plugin execution timeout not respecting PLUGIN_MAX_EXECUTION_TIMEOUT ( #29785 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-12-18 15:11:01 +08:00
dd237f129d
fix: fix json object validate ( #29840 )
2025-12-18 14:46:00 +08:00
acbeb04edc
fix: drop some dead links ( #29827 )
...
Signed-off-by: yihong0618 <zouzou0208@gmail.com>
2025-12-18 10:52:19 +08:00
8d1e36540a
fix: detect_file_encodings TypeError: tuple indices must be integers or slices, not str ( #29595 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-12-17 13:58:05 +08:00
ae4a9040df
Feat/update notion preview ( #29345 )
...
Co-authored-by: twwu <twwu@dify.ai>
2025-12-16 16:43:45 +08:00
bdccbb6e86
feat: add GraphEngine layer node execution hooks ( #28583 )
2025-12-16 13:26:31 +08:00
4cc6652424
feat: VECTOR_STORE supports seekdb ( #29658 )
2025-12-16 12:35:04 +09:00
4bf6c4dafa
chore: add online drive metadata source enum ( #29674 )
2025-12-15 21:13:23 +08:00
09982a1c95
fix: webhook node output file as file variable ( #29621 )
2025-12-15 19:55:59 +08:00
bd7b1fc6fb
fix: csv injection in annotations export ( #29462 )
...
Co-authored-by: hj24 <huangjian@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-15 17:14:05 +08:00
2bf44057e9
fix: ssrf, add internal ip filter when parse tool schema ( #29548 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yeuoly <45712896+Yeuoly@users.noreply.github.com>
2025-12-15 16:28:25 +08:00
714b443077
fix: correct i18n SSO translations and fix validation/type issues ( #29564 )
...
Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-15 15:58:33 +09:00
094f417b32
refactor: admin api using session factory ( #29628 )
2025-12-15 12:01:41 +08:00
8f3fd9a728
perf: commit once ( #29590 )
2025-12-15 11:40:26 +08:00
1a18012f98
fix(api): use json_repair for conversation title parsing ( #29649 )
2025-12-15 11:29:28 +08:00
02122907e5
fix(api): Populate Missing Attributes For Arize Phoenix Integration ( #29526 )
2025-12-15 11:15:18 +08:00
569c593240
feat: Add InterSystems IRIS vector database support ( #29480 )
...
Co-authored-by: Tomo Okuyama <tomo.okuyama@intersystems.com>
2025-12-15 10:20:43 +08:00
916df2d0f7
fix: fix mime type is none ( #29579 )
2025-12-15 10:09:11 +08:00
bece2f101c
fix: return None from retrieve_tokens when access_token is empty ( #29516 )
2025-12-12 13:49:11 +08:00
db42f467c8
fix: docx extractor external image failed ( #29558 )
2025-12-12 13:41:51 +08:00
12e39365fa
perf(core/rag): optimize Excel extractor performance and memory usage ( #29551 )
...
Co-authored-by: 01393547 <nieronghua@sf-express.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-12 12:15:03 +08:00
crazywoola