opensource
/
dify
mirror of https://github.com/langgenius/dify.git
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
8,440 Commits 300 Branches 160 Tags 524 MiB
Commit Graph

783 Commits

Author SHA1 Message Date
crazywoola 82e8e419fb
Merge branch 'main' into fix/template-textarea-prefill 2025-12-29 09:48:03 +08:00
NeatGuyCoding a00ac1b5b1
fix(api): fix credential type handling and rebuild subscription transaction safety (#30242) 
Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com>
 2025-12-28 20:29:35 +08:00
autofix-ci[bot] 832cc98744
[autofix.ci] apply automated fixes 2025-12-27 18:07:02 +00:00
Devbyteai 26444d8b6c fix(template-transform): use base64 encoding for Jinja2 templates 
When Jinja2 templates containing special characters (quotes, newlines)
were embedded directly in the generated Python script using triple-quoted
strings, the script would break. This fix encodes the template as base64
before embedding, then decodes it at runtime.

Root cause: Templates were inserted via string replacement into a Python
script like `jinja2.Template('''...''')`. If the template contained `'''`,
the generated script had a syntax error.

Solution: Add serialize_code() method to base64-encode templates, then
override assemble_runner_script() in Jinja2TemplateTransformer to use
the encoded template with runtime decoding.

This specifically affects Jinja2 templates - Python3 and JavaScript
transformers insert user code at the top level (not inside strings),
so they don't have this vulnerability.

Fixes #26818
 2025-12-26 20:08:12 +02:00
wangxiaolei 8611301722
fix: fix DatasetRetrieval._process_metadata_filter_func miss in operator (#30199) 2025-12-26 16:34:50 +08:00
wangxiaolei 61d255a6e6
chore: bypass InsufficientPrivilege on Azure PostgreSQL (#30191) 2025-12-26 14:35:05 +08:00
Asuka Minato 93d1b2fc32
refactor: split changes for api/controllers/console/workspace/load_ba… (#29887) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-12-26 11:00:03 +08:00
wangxiaolei bdd8a35b9d
feat: add mcp tool display directly (#30019) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-26 10:41:10 +08:00
wangxiaolei 9885e92854
fix: validate first then save to db (#30107) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-25 19:36:52 +09:00
wangxiaolei 996c7d9e16
perf: using pipeline to delete redis cache (#30159) 2025-12-25 17:04:37 +08:00
wangxiaolei d1f9911848
feat: make the SegmentService.get_segments sort stable (#30152) 2025-12-25 15:53:38 +08:00
-LAN- 1ebc17850b
fix(api): force download for HTML previews (#30090) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-12-25 11:43:07 +08:00
wangxiaolei 2f9d718997
fix: fix use build_request lead unexpect param (#30095) 2025-12-24 17:23:30 +08:00
Rhys a5309bee25
fix: handle missing `credential_id` (#30051) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-12-24 11:21:51 +08:00
Asuka Minato 037b8ae9e2
refactor: split changes for api/controllers/web/forgot_password.py (#29858) 2025-12-24 09:41:51 +08:00
Asuka Minato 0a448a13c8
refactor: split changes for api/controllers/console/extension.py (#29888) 2025-12-24 09:41:42 +08:00
wangxiaolei 111a39b549
fix: fix firecrawl url concat (#30008) 2025-12-24 09:40:32 +08:00
wangxiaolei aea3a6f80c
fix: when use forward proxy with httpx, httpx will overwrite the use … (#30029) 2025-12-23 19:01:12 +08:00
ericko-being 3f27b3f0b4
fix(ops): correct LangSmith dotted_order timestamp format (#30022) 2025-12-23 19:00:17 +08:00
-LAN- efac8766a1
fix: YAML URL import rewrite for GitHub attachments (#30003) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-23 19:14:39 +09:00
非法操作 d005689d0a
chore: remove unused login call from activation flow (#30017) 2025-12-23 12:26:52 +08:00
lif 542eb04ad8
fix: preserve empty list for FILE_LIST type in base_app_generator (#29618) 
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-12-22 21:32:07 +08:00
Ben Ghorbel Mohamed Aziz 6cf71366ba
fix: validate API key is not empty in HTTPRequest node (#29950) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-21 17:04:07 +08:00
wangxiaolei 32605181bd
feat: first use INTERNAL_FILES_URL first, then FILES_URL (#29962) 2025-12-21 16:53:37 +08:00
Rhys 471fc94455
fix: update Notion credential retrieval in document indexing sync task (#29933) 2025-12-21 16:51:24 +08:00
Novice 7501360663
fix: add RFC 9728 compliant well-known URL discovery with path insertion fallback (#29960) 2025-12-21 09:19:11 +08:00
Asuka Minato 054d3f0da5
refactor: split changes for api/tests/test_containers_integration_tes… (#29897) 2025-12-19 17:50:58 +08:00
wangxiaolei 78ca5ad142
fix: fix fixed_separator (#29861) 2025-12-18 16:50:44 +08:00
wangxiaolei e6545f2727
perf: decrease db query (#29837) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-18 15:35:52 +08:00
wangxiaolei dd237f129d
fix: fix json object validate (#29840) 2025-12-18 14:46:00 +08:00
hj24 9a51d2da57
feat: add billing subscription plan api (#29829) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-18 13:11:47 +08:00
wangxiaolei 4fce99379e
test(api): add a test for `detect_file_encodings` (#29778) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-17 14:33:30 +08:00
wangxiaolei dda7eb03c9
feat: _truncate_json_primitives support file (#29760) 2025-12-17 08:10:43 +09:00
zyssyz123 b7649f61f8
fix: Login secret text transmission (#29659) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-12-16 16:55:51 +08:00
-LAN- 0749e6e090
test: Stabilize sharded Redis broadcast multi-subscriber test (#29733) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-16 16:35:55 +08:00
非法操作 7695f9151c
chore: webhook with bin file should guess mimetype (#29704) 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Maries <xh001x@hotmail.com>
 2025-12-16 13:34:27 +08:00
heyszt bdccbb6e86
feat: add GraphEngine layer node execution hooks (#28583) 2025-12-16 13:26:31 +08:00
wangxiaolei 187450b875
chore: skip upload_file_id is missing (#29666) 2025-12-15 21:09:53 +08:00
wangxiaolei 09982a1c95
fix: webhook node output file as file variable (#29621) 2025-12-15 19:55:59 +08:00
zyssyz123 bd7b1fc6fb
fix: csv injection in annotations export (#29462) 
Co-authored-by: hj24 <huangjian@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-15 17:14:05 +08:00
zyssyz123 724cd57dbf
fix: dos in annotation import (#29470) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-15 15:22:04 +08:00
-LAN- 80c74cf725
test: Consolidate API CI test runner (#29440) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-12-15 13:20:31 +08:00
wangxiaolei 094f417b32
refactor: admin api using session factory (#29628) 2025-12-15 12:01:41 +08:00
Jyong acef56d7fd
fix: delete knowledge pipeline but pipeline and workflow don't delete (#29591) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-15 12:00:03 +08:00
wangxiaolei 8f3fd9a728
perf: commit once (#29590) 2025-12-15 11:40:26 +08:00
TomoOkuyama 569c593240
feat: Add InterSystems IRIS vector database support (#29480) 
Co-authored-by: Tomo Okuyama <tomo.okuyama@intersystems.com>
 2025-12-15 10:20:43 +08:00
wangxiaolei 470650d1d7
fix: fix delete_account_task not check billing enabled (#29577) 2025-12-15 10:12:35 +08:00
wangxiaolei 916df2d0f7
fix: fix mime type is none (#29579) 2025-12-15 10:09:11 +08:00
Stream 8daf9ce98d
test(trigger): add container integration tests for trigger (#29527) 
Signed-off-by: Stream <Stream_2@qq.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-12-12 11:31:34 +08:00
-LAN- 063b39ada5
fix: conversation rename payload validation (#29510) 2025-12-11 18:05:41 +09:00