非法操作
|
c563528a2d
|
refactor(api): standardize compliance downloads (#41057)
|
2026-08-26 06:32:13 +00:00 |
|
非法操作
|
c4ace15afd
|
refactor(api): extract console app site command boundary (#41216)
|
2026-08-26 06:31:06 +00:00 |
|
ccl125
|
d5a8ace1c4
|
fix(rag-pipeline): mark credential-free datasources as authorized (#39772)
Co-authored-by: ccl125 <ccl125@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: FFXN <31929997+FFXN@users.noreply.github.com>
|
2026-08-26 05:44:10 +00:00 |
|
Stephen Zhou
|
1c6f0a0388
|
fix(api): restore Service API OpenAPI semantics (#41274)
|
2026-08-26 05:05:36 +00:00 |
|
Pranav Agarwal
|
6b5952425d
|
fix(api): enforce RBAC permission on agent app detail GET endpoint (#41264) (#41265)
|
2026-08-26 02:51:13 +00:00 |
|
Stephen Zhou
|
92016aa139
|
fix(api): align Service API OpenAPI contract (#41248)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-25 10:54:14 +00:00 |
|
Rafli Surya Wijaya
|
cf236aed8a
|
fix(api): enforce APP_EDIT RBAC permission on MCP server refresh endpoint (#41235)
|
2026-08-25 06:38:13 +00:00 |
|
非法操作
|
f360a7bf94
|
fix: allow OAuth trigger builder verification without credentials (#39199)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-25 05:32:27 +00:00 |
|
非法操作
|
ef92cb7c65
|
refactor(api): complete account education boundary (#41153)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-25 01:48:12 +00:00 |
|
林玮 (Jade Lin)
|
70a513fc62
|
fix(api): scope hosted credits by tenant plan (#41131)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-24 06:35:42 +00:00 |
|
FFXN
|
bec4ef6ac7
|
fix: fix upload for plugin (#41133)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-24 05:39:27 +00:00 |
|
wangxiaolei
|
0024a845f7
|
feat: support agent skill (#39675)
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: zxhlyh <jasonapring2015@outlook.com>
Co-authored-by: 起岚 <155608604+xiaoyaoqilan@users.noreply.github.com>
Co-authored-by: Parman Mohammadalizadeh <prmma23@gmail.com>
Co-authored-by: Escape0707 <tothesong@gmail.com>
Co-authored-by: Xin Zhang <zhangxin@dify.ai>
Co-authored-by: iridescentWen <66297467+iridescentWen@users.noreply.github.com>
Co-authored-by: Bond Zhu <37842169+MRZHUH@users.noreply.github.com>
Co-authored-by: KVOJJJin <jzongcode@gmail.com>
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: 非法操作 <hjlarry@163.com>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
Co-authored-by: Chester <superdiao6@gmail.com>
Co-authored-by: WH-2099 <wh2099@pm.me>
Co-authored-by: Jony <619963502@qq.com>
Co-authored-by: Jony <13896935+zyz619963502zyz@users.noreply.github.com>
Co-authored-by: Harsh Kashyap <harsh.kashyap2001@gmail.com>
Co-authored-by: Harsh Kashyap <Harsh23Kashyap@users.noreply.github.com>
Co-authored-by: kenwoodjw <blackxin55+@gmail.com>
Co-authored-by: csurong <csurong1@gmail.com>
Co-authored-by: caosurong <surong.cao@thinkingdata.cn>
Co-authored-by: Taranum Wasu <81034301+Taranum01@users.noreply.github.com>
Co-authored-by: Taranum01 <50813317+Taranum01@users.noreply.github.com>
Co-authored-by: Pranav Agarwal <agarwalpranav0711@gmail.com>
Co-authored-by: Stephen Zhou <hi@hyoban.cc>
Co-authored-by: zl86790 <marshal_li_b@163.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com>
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
|
2026-08-24 05:29:14 +00:00 |
|
AsperforMias
|
3f7e6cdcb4
|
fix(tts): propagate and validate actual audio MIME (#41043)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: WH-2099 <wh2099@pm.me>
|
2026-08-24 03:38:09 +00:00 |
|
酒诗
|
aed1672366
|
refactor: pass session to workflow comment account accessors (#41117)
Co-authored-by: geneachina <geneachina@gmail.com>
|
2026-08-24 03:20:32 +00:00 |
|
XIIRUAN
|
ccd0f4b15d
|
refactor(web): use shared session factory for JWT decoding (#41007)
|
2026-08-24 03:16:44 +00:00 |
|
非法操作
|
ed45016475
|
refactor(api): standardize console billing portal errors (#41055)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-24 01:55:48 +00:00 |
|
Pranav Agarwal
|
24f5e2ac69
|
fix(api): enforce admin and RBAC permissions on default model and provider models GET endpoints (#41099) (#41100)
|
2026-08-23 07:33:57 +00:00 |
|
Pranav Agarwal
|
07119e3f00
|
fix(api): enforce admin and RBAC permissions on data source integrates GET endpoint (#41079) (#41080)
|
2026-08-21 17:57:23 +00:00 |
|
Xiyuan Chen
|
d6147456e3
|
feat: Enterprise Home Snapshot — runtime endpoints and dify-agent adapter (#40996)
|
2026-08-21 10:39:36 +00:00 |
|
Yunlu Wen
|
373f33fd3b
|
fix: add missing metrics back and enhance typing (#40935)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-21 09:46:45 +00:00 |
|
Byron.wang
|
b38d907ede
|
refactor(api): finish account controller application boundary (#40440)
|
2026-08-21 08:46:06 +00:00 |
|
Byron.wang
|
a52adef203
|
refactor(api): extract change email state machine (#40439)
|
2026-08-21 08:13:23 +00:00 |
|
Byron.wang
|
3b05b5e553
|
refactor(api): move account lifecycle into application services (#40438)
|
2026-08-21 08:05:43 +00:00 |
|
Byron.wang
|
1d79b87307
|
refactor(api): move account access behind application services (#40437)
|
2026-08-21 05:56:30 +00:00 |
|
WH-2099
|
a5e284e6b1
|
fix(plugin): protect endpoint listings (#40897)
|
2026-08-21 02:17:58 +00:00 |
|
Pranav Agarwal
|
43e59d3bc5
|
fix(api): enforce edit and RBAC permissions on datasource credential …fix(api): enforce edit and RBAC permissions on datasource credential GET endpoint (#41040) (#41041)
|
2026-08-21 02:11:46 +00:00 |
|
WH-2099
|
edc805c453
|
fix(api): enforce app-scoped access on indirect resources (#40893)
|
2026-08-21 00:52:39 +00:00 |
|
wangxiaolei
|
785ca4b915
|
fix: when rbac enabled is true, not check_dataset_permission (#41022)
|
2026-08-20 14:45:40 +00:00 |
|
非法操作
|
1bb9183af9
|
refactor(api): replace legacy recommended app retrieval stack (#40395)
|
2026-08-20 13:13:43 +00:00 |
|
非法操作
|
de7e43a7ef
|
refactor(api): decouple recommended app runtime admission (#40257)
|
2026-08-20 13:13:43 +00:00 |
|
非法操作
|
b09691e5d2
|
refactor(api): isolate trial app usage writes (#40208)
|
2026-08-20 13:13:42 +00:00 |
|
GGbond
|
6f70ca8d26
|
refactor(api): decouple console tag management (#40843)
Co-authored-by: Byron Wang <byron@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 12:31:01 +00:00 |
|
Pranav Agarwal
|
43b6d8e32e
|
fix(api): enforce admin and RBAC permissions on tool OAuth custom client GET endpoint (#40944) (#40945)
|
2026-08-20 09:10:02 +00:00 |
|
FFXN
|
248df5dd25
|
fix(snippet): support snippet history version export (#41012)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 08:52:45 +00:00 |
|
非法操作
|
f97fc01c2f
|
refactor(api): extract recommended app query service (#40207)
|
2026-08-20 08:45:47 +00:00 |
|
林玮 (Jade Lin)
|
a6ace29e1a
|
fix(api): handle suspended email domains (#41004)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 08:04:05 +00:00 |
|
盐粒 Yanli
|
013b328555
|
fix(agent): complete ownership-aware deletion lifecycle (#40888)
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
|
2026-08-20 07:48:02 +00:00 |
|
chelsealong
|
d7b1531431
|
fix(snippets): implement delete for published snippet workflow versions (#41003)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 07:36:17 +00:00 |
|
非法操作
|
48f338e649
|
refactor(api): extract web app runtime bootstrap (#40949)
|
2026-08-20 05:05:31 +00:00 |
|
Byron.wang
|
b4e13ec83e
|
refactor(api): add account profile application service (#40436)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-20 05:03:08 +00:00 |
|
林玮 (Jade Lin)
|
602a646dbd
|
fix(api): enforce dataset document ownership (#40989)
|
2026-08-20 03:24:45 +00:00 |
|
非法操作
|
ee997d00fa
|
refactor(api): reuse web app access queries for permissions (#40984)
|
2026-08-20 02:27:49 +00:00 |
|
非法操作
|
532489babd
|
refactor(api): extract web app access queries (#40482)
|
2026-08-19 10:34:36 +00:00 |
|
非法操作
|
2f6e782215
|
refactor(api): reuse app definition queries for service API site (#40795)
|
2026-08-19 07:23:47 +00:00 |
|
zyssyz123
|
414f211cde
|
fix(auth): harden email code login verification (#40960)
|
2026-08-19 06:57:47 +00:00 |
|
Pranav Agarwal
|
f1b48a93a9
|
fix(api): enforce edit and RBAC permissions on model provider credential GET endpoints (#40899) (#40900)
|
2026-08-19 06:48:15 +00:00 |
|
盐粒 Yanli
|
8874f3c80b
|
refactor(agent): remove Agent Drive (#40887)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-19 06:34:36 +00:00 |
|
Byron.wang
|
ba61ab4f9f
|
refactor(api): extract account activation application service (#40421)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-18 05:27:40 +00:00 |
|
Byron.wang
|
891627b210
|
refactor(api): decouple data source API key auth flow (#40452)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-18 04:30:17 +00:00 |
|
Amogh Bhat Nagri
|
30c304c6a7
|
fix(api): repair two malformed logger format strings (#40901)
|
2026-08-18 02:10:59 +00:00 |
|
盐粒 Yanli
|
2aaac4dadb
|
feat(dify-agent): enforce signed upload size limits (#40883)
|
2026-08-17 11:59:42 +00:00 |
|
林玮 (Jade Lin)
|
5ef8becd25
|
feat: create accounts with client IP (#40875)
|
2026-08-17 09:29:57 +00:00 |
|
Weike Zhang
|
45be4620fe
|
refactor(controllers/web): dep-inject login and forgot-password payloads (#36659) (#40856)
|
2026-08-17 05:58:40 +00:00 |
|
YungLe
|
219596c4df
|
feat(plugin-auth): visibility picker for OAuth credentials (#39840)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Wu Tianwei <30284043+WTW0313@users.noreply.github.com>
Co-authored-by: twwu <twwu@dify.ai>
|
2026-08-17 02:41:26 +00:00 |
|
zy
|
141cbf9832
|
fix(api): support audio/x-m4a for ASR (#40776)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-16 02:47:31 +00:00 |
|
chenshiyang
|
d31a7d47bf
|
refactor(controllers/web): dep-inject payloads with @model_validate (#40796)
Co-authored-by: chenshiyang.10 <chenshiyang.10@jd.com>
|
2026-08-15 06:55:06 +00:00 |
|
WH-2099
|
fc7b51634d
|
fix(api): protect agent sandbox reads (#40794)
|
2026-08-14 13:51:41 +00:00 |
|
WH-2099
|
96bfcf20cd
|
fix(api): protect workspace credential mutations (#40790)
|
2026-08-14 12:03:54 +00:00 |
|
酒诗
|
b6319c819c
|
chore: dep inject for model in dataset document actions (#40787)
Co-authored-by: geneachina <geneachina@gmail.com>
|
2026-08-14 11:08:21 +00:00 |
|
WH-2099
|
b6694d462f
|
fix(api): protect custom OAuth client deletion (#40786)
|
2026-08-14 10:59:49 +00:00 |
|
L1nSn0w
|
ea6770c7a1
|
feat(oauth): drive silent authorization from oauth_provider_apps.auto_authorize (#40783)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 10:29:39 +00:00 |
|
WH-2099
|
62a544a146
|
fix(api): enforce RAG draft variable access boundaries (#40745)
|
2026-08-14 10:07:22 +00:00 |
|
非法操作
|
eec092f93d
|
refactor(api): reuse app definition queries for service API info (#40476)
|
2026-08-14 09:38:35 +00:00 |
|
非法操作
|
e0fd3b264a
|
refactor(api): reuse app definition queries for app parameters (#40465)
|
2026-08-14 09:38:34 +00:00 |
|
非法操作
|
17c8ff6a33
|
refactor(api): reuse app definition queries in web and service APIs (#40463)
|
2026-08-14 09:38:33 +00:00 |
|
非法操作
|
c425e4cdd5
|
refactor(api): extract installed app definition queries (#40462)
|
2026-08-14 09:38:32 +00:00 |
|
zyssyz123
|
09f20b7a14
|
fix(agent): return conflict for duplicate creation (#40771)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 08:57:13 +00:00 |
|
Myshkin451
|
c903e93e8b
|
fix: preserve file preview content type (#37211)
Co-authored-by: FFXN <31929997+FFXN@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 07:45:21 +00:00 |
|
Joel
|
35132d6892
|
chore: reopen the education application flow (#40760)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-14 07:16:21 +00:00 |
|
Pranav Agarwal
|
e2852524be
|
fix(api): enforce edit and RBAC permissions on dataset API key GET endpoint (#40740) (#40743)
|
2026-08-14 04:27:37 +00:00 |
|
WH-2099
|
c1bde25bcc
|
fix(api): remove unsafe Bedrock test endpoint (#40742)
|
2026-08-13 19:47:13 +00:00 |
|
Harsh Kashyap
|
8238684334
|
fix(api): chain original exception in 13 except blocks per PEP 3134 (#40738)
Co-authored-by: Harsh Kashyap <Harsh23Kashyap@users.noreply.github.com>
|
2026-08-13 17:50:05 +00:00 |
|
zyssyz123
|
c9c7fb9962
|
fix(agent): meter internal LLM calls through API (#40613)
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
|
2026-08-13 12:15:44 +00:00 |
|
WH-2099
|
489772908b
|
fix: enforce API key list permissions (#40516)
|
2026-08-12 11:44:27 +00:00 |
|
Benjamin
|
6a37e1538a
|
fix(rbac): grant member policies when a dataset is opened to the work… (#39735)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-08-12 09:02:03 +00:00 |
|
wangxiaolei
|
eeaaf11a51
|
fix: fix create dataset with document miss rbac operation (#40599)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-12 08:57:43 +00:00 |
|
Byron.wang
|
51a007e84e
|
refactor(api): extract init validation into layered application service (#40046)
|
2026-08-12 08:42:09 +00:00 |
|
yyh
|
01460f681e
|
fix(web): render workspace plan badge during SSR (#40581)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-12 07:45:39 +00:00 |
|
WH-2099
|
af382be837
|
fix(api): bind remaining RAG resources to owners (#40503)
|
2026-08-12 06:05:16 +00:00 |
|
zyssyz123
|
059c9ce0b6
|
feat: add trunstile (#40494)
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-12 03:08:19 +00:00 |
|
Wu Tianwei
|
7aba539e82
|
feat: app deployment v2 (#39829)
Co-authored-by: zhangx1n <zhangxin@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-12 01:55:36 +00:00 |
|
WH-2099
|
ef8544b173
|
fix(api): bind dataset operations to owners (#40149)
|
2026-08-11 16:37:14 +00:00 |
|
Byron.wang
|
c1e94f8ee7
|
refactor(api): consolidate deployment edition handling (#40142)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-11 07:39:01 +00:00 |
|
Tushar Motwani
|
aa5e8a5eff
|
chore: suppress pyrefly necessary conversions (#40444)
|
2026-08-10 16:41:34 +00:00 |
|
Byron.wang
|
976d061f9b
|
refactor(api): merge ping and version endpoints into system (#40058)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-10 08:50:40 +00:00 |
|
非法操作
|
648806bc9c
|
refactor(api): extract explore banner query service (#40053)
|
2026-08-10 08:07:54 +00:00 |
|
Joel
|
5967bd8e08
|
chore: tighten education verification and pause discount access (#40402)
Co-authored-by: Yansong Zhang <916125788@qq.com>
|
2026-08-10 06:33:03 +00:00 |
|
Likalikali
|
e09eee8fd1
|
refactor: replace manual model_validate with @model_validate in datasets controllers (#40236)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-09 08:25:27 +00:00 |
|
Likalikali
|
b692ddd80c
|
refactor: replace manual model_validate with @model_validate in workspace remaining controllers (#40239)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-09 08:23:51 +00:00 |
|
Likalikali
|
5ebb389d26
|
refactor: replace manual model_validate with @model_validate in rag_pipeline controllers (#40237)
|
2026-08-09 08:22:50 +00:00 |
|
Likalikali
|
fff6f7cf2f
|
refactor: replace manual model_validate with @model_validate in app workflow controllers (#40235)
|
2026-08-09 08:20:10 +00:00 |
|
Likalikali
|
516fd12b8d
|
refactor: replace manual model_validate with @model_validate in app core controllers (#40234)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-09 08:18:02 +00:00 |
|
Likalikali
|
925ca49f21
|
refactor: replace manual model_validate with @model_validate in explore/snippets controllers (#40241)
|
2026-08-09 07:07:08 +00:00 |
|
Likalikali
|
a1577fc48c
|
refactor: replace manual model_validate with @model_validate in auth/billing/tag controllers (#40240)
|
2026-08-09 06:14:07 +00:00 |
|
Likalikali
|
acda0341ed
|
refactor: replace manual model_validate with @model_validate in workspace plugin/tool controllers (#40238)
|
2026-08-09 06:13:24 +00:00 |
|
Likalikali
|
98378cfe03
|
refactor: replace manual model_validate with @model_validate in agent controllers (#40233)
|
2026-08-09 06:11:33 +00:00 |
|
Byron.wang
|
4e18ab0ad4
|
refactor(api): decouple setup and spec endpoints (#40104)
|
2026-08-08 11:52:15 +00:00 |
|
Likalikali
|
d362bdbb4e
|
refactor: replace manual model_validate with @model_validate decorator in app controllers (#40170)
|
2026-08-08 05:47:11 +00:00 |
|
Likalikali
|
60d6be5b13
|
chore: dep inject for model in explore workflow run (#40158)
|
2026-08-08 02:50:27 +00:00 |
|
Likalikali
|
cc1b55aaf7
|
chore: dep inject for model in explore apis (#40160)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
|
2026-08-08 02:23:17 +00:00 |
|