yujunjun/dify
1
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2025-12-05 07:14:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,384 Commits 262 Branches 157 Tags
Commit Graph

4427 Commits

Author SHA1 Message Date
NeatGuyCoding
99f4cd1cfa
feat: add test containers based tests for deal dataset vector index (#25545) 2025-09-11 21:12:53 +08:00
QuantumGhost
874406d934
security(api): fix privilege escalation vulnerability in model config and chat message APIs (#25518) 
The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and 
`ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`) 
endpoints do not properly validate user permissions, allowing users without `editor` 
permission to access restricted functionality.

This PR addresses this issue by adding proper permission check.
 2025-09-11 14:53:35 +08:00
Eric Guo
70e4d6be34
Fix 500 in dataset page. (#25474) 2025-09-10 15:57:04 +08:00
Asuka Minato
cbc0e639e4
update sql in batch (#24801) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-09-10 13:00:17 +08:00
Guangdong Liu
b51c724a94
refactor: Migrate part of the console basic API module to Flask-RESTX (#24732) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-09-10 12:15:47 +08:00
GuanMu
26a9abef64
test: imporve (#25461) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-09-10 11:36:22 +08:00
Will
fecdb9554d
fix: inner_api get_user_tenant (#25462) 2025-09-10 11:31:16 +08:00
NeatGuyCoding
45ef177809
Feature add test containers create segment to index task (#25450) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-10 10:02:53 +08:00
Newton José
6574e9f0b2
Fix: Add Password Validation to Account Creation (#25382) 2025-09-10 08:58:39 +08:00
Asuka Minato
cce13750ad
add rule for strenum (#25445) 2025-09-10 08:51:21 +08:00
-LAN-
08dd3f7b50
Fix basedpyright type errors (#25435) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-10 01:54:26 +08:00
Yongtao Huang
2ac7a9c8fc
Chore: thanks to bump-pydantic (#25437) 2025-09-09 20:07:17 +08:00
Novice
240b65b980
fix(mcp): properly handle arrays containing both numbers and strings (#25430) 
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-09-09 20:06:35 +08:00
-LAN-
7443c5a6fc
refactor: update pyrightconfig to scan all API files (#25429) 2025-09-09 17:12:45 +08:00
GuanMu
a1cf48f84e
Add lib test (#25410) 2025-09-09 17:11:49 +08:00
Asuka Minato
38057b1b0e
add typing to all wraps (#25405) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-09 16:48:33 +08:00
ttz12345
d2e50a508c
Fix:About the error problem of creating an empty knowledge base interface in service_api (#25398) 
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-09 15:18:31 +08:00
Yongtao Huang
4aba570fa8
Fix flask response: 200 -> {}, 200 (#25404) 2025-09-09 15:06:18 +08:00
Novice
e180c19cca
fix(mcp): current_user not being set in MCP requests (#25393) 2025-09-09 14:58:14 +08:00
Xiyuan Chen
64c9a2f678
Feat/credential policy (#25151) 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-08 23:45:05 -07:00
Novice
566e0fd3e5
fix(container-test): batch create segment position sort (#25394) 2025-09-09 13:47:29 +08:00
NeatGuyCoding
7dfb72e381
feat: add test containers based tests for clean notion document task (#25385) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-09-09 11:02:19 +08:00
Asuka Minato
649242f82b
example of uuid (#25380) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-09 10:45:08 +08:00
Yeuoly
720ecea737
fix: tenant_id was not specific when retrieval end-user in plugin backwards invocation wraps (#25377) 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-09-09 09:49:35 +08:00
-LAN-
ec0800eb1a
refactor: update pyrightconfig.json to use ignore field for better type checking configuration (#25373) 2025-09-08 19:55:25 +08:00
zyssyz123
ea61420441
Revert "feat: email register refactor" (#25367) 2025-09-08 19:20:09 +08:00
kenwoodjw
598ec07c91
feat: enable dsl export encrypt dataset id or not (#25102) 
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
 2025-09-08 18:03:24 +08:00
NeatGuyCoding
aff2482436
Feature add test containers batch create segment to index (#25306) 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-08 17:55:57 +08:00
zyssyz123
860ee20c71
feat: email register refactor (#25344) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-08 17:51:43 +08:00
Krito.
74be2087b5
fix: ensure Performance Tracing button visible when no tracing provid… (#25351) 2025-09-08 16:38:09 +08:00
Cluas
f891c67eca
feat: add MCP server headers support #22718 (#24760) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Novice <novice12185727@gmail.com>
 2025-09-08 14:10:55 +08:00
NeatGuyCoding
5d0a50042f
feat: add test containers based tests for clean dataset task (#25341) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-08 13:09:53 +08:00
ZalterCitty
4ee49f3550
chore: remove weird account login (#22247) 
Co-authored-by: zhuqingchao <zhuqingchao@xiaomi.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-08 10:44:36 +08:00
Asuka Minato
f6059ef389
add more typing (#24949) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-08 10:40:00 +08:00
Ding
ce2281d31b
Fix: Parameter Extractor Uses Correct Prompt for Prompt Mode in Chat Models (#24636) 
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-09-08 10:29:12 +08:00
qxo
593f7989b8
fix: 'curr_message_tokens' where it is not associated with a value #25307 (#25308) 
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-08 09:59:53 +08:00
Asuka Minato
16a3e21410
more assert (#24996) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-08 09:59:43 +08:00
-LAN-
9b8a03b53b
[Chore/Refactor] Improve type annotations in models module (#25281) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-08 09:42:27 +08:00
-LAN-
7e629fd783
fix: update iteration node to use correct variable segment types (#25315) 2025-09-07 21:31:41 +08:00
NeatGuyCoding
afa7228076
fix: a failed index to be marked as created (#25290) 
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-06 22:53:26 +08:00
NeatGuyCoding
9964cc202d
Feature add test containers batch clean document (#25287) 
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
 2025-09-06 16:18:26 +08:00
-LAN-
b05245eab0
fix: resolve typing errors in configs module (#25268) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-06 16:08:14 +08:00
Asuka Minato
a78339a040
remove bare list, dict, Sequence, None, Any (#25058) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
 2025-09-06 03:32:23 +08:00
Asuka Minato
2b0695bdde
add more dataclass (#25039) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-09-06 03:20:13 +08:00
NeatGuyCoding
917d60a1cb
Feature add test containers add document to index (#25251) 2025-09-05 19:20:37 +08:00
taewoong Kim
edf4a1b652
feat: add reasoning format processing to LLMNode for <think> tag handling (#23313) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-05 18:15:35 +08:00
coolfinish
cd95237ae4
fix: loop node doesn't exit when it react the condition #24717 (#24844) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-05 14:38:52 +08:00
kenwoodjw
1ba69b8abf
fix: child chunk API 404 due to UUID type comparison (#25234) 
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
 2025-09-05 14:00:28 +08:00
-LAN-
e78f1cdc6a
refactor: improve plugin version validation to support full semantic versioning (#25161) 
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2025-09-05 12:39:48 +08:00
Yongtao Huang
432f89cf33
Chore: clean some # type: ignore (#25157) 2025-09-05 11:30:04 +08:00