mtfyun/dify
1
0 Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-11-13 06:41:07 +08:00
Code Issues Packages Projects Releases Wiki Activity
15,073 Commits 1,085 Branches 180 Tags
codex/file-malware-scan
Commit Graph
1838 Commits
Author SHA1 Message Date
JyongandClaude Fable 5.2 65de4cfb7b refactor(file-scan): resolve the dataset scope in the service layer 
Controllers must not query the database directly, and new tests must not
introduce mocks or namespaces as test doubles.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
 2026-11-11 18:50:03 +08:00
JyongandClaude Fable 5.2 7d6c1845b8 feat(file-scan): scan uploaded knowledge base files for malware 
Add a shared file malware-scanning module and use it in the Classic
Knowledge Base, RAG Pipeline local files and the Agent Knowledge Base.

- core/file_scan: scanner adapters for ClamAV (deployment-configured),
  Cloudmersive, Scanii, OPSWAT MetaDefender Cloud and API-based
  extensions (new `file.malware_scan` extension point).
- services/file_scan: FileScanService is the single entry point other
  modules call. Providers are workspace-wide; a policy belongs to a
  scope (dataset, knowledge_fs_space), so further modules can adopt
  scanning without schema changes.
- Each file is scanned on its own: a rejected file fails only its own
  document. Malware always blocks and deletes the stored original;
  invalid credentials and exhausted quota stop processing regardless of
  the "allow" fallback.
- Console: workspace scanner management and a per-knowledge-base
  policy section in both settings forms; the Agent Knowledge Base
  upload keeps going after a rejected file and explains each failure.
- Off by default behind FILE_SCAN_ENABLED.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
 2026-11-11 18:37:03 +08:00
Asuka Minatoautofix-ci[bot]Codex
 		3774ea85ae ci: bump tyck to check new err (#45614) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
 2026-11-11 07:31:35 +00:00
非法操作 b39a44c0e1 refactor(agent): isolate API access configuration (#46024) 2026-11-11 06:18:34 +00:00
wangxiaoleitwwuEldar DadashovByron.wangautofix-ci[bot]Yunlu Wen
 		583615e412 feat: support personal access token (#45540) 
Co-authored-by: twwu <twwu@dify.ai>
Co-authored-by: Eldar Dadashov <52511672+eldardada@users.noreply.github.com>
Co-authored-by: Byron.wang <byron@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai>
 2026-11-11 03:00:24 +00:00
FFXNandautofix-ci[bot] f3f9b121a4 feat(knowledge): add GitHub tree previews to source selection (#45990) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-11 02:47:23 +00:00
QuantumGhostandzxhlyh a4d64bcddd feat(hitl): improve forms, notifications, and IM contact sync (#45945) 
Co-authored-by: zxhlyh <jasonapring2015@outlook.com>
 2026-11-10 09:00:41 +00:00
非法操作andautofix-ci[bot] ce26b22970 refactor(api): isolate trigger execution lifecycle (#45950) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-10 08:17:39 +00:00
非法操作 27297e954f refactor(api): inject trigger debug runtime (#45946) 2026-11-10 07:09:35 +00:00
非法操作andStream 9fbd9dcd33 refactor(api): isolate native webhook runtime (#45912) 
Co-authored-by: Stream <Stream_2@qq.com>
 2026-11-10 05:08:50 +00:00
Tanishq 99683fe2e8 fix(trigger): store webhook uploads under the trigger end user (#44995) 2026-11-09 18:39:05 +00:00
XiaoBa 23ea5e3562 fix: validate retrieval attachment UUIDs and tolerate invalid image history (#45915) 2026-11-09 11:36:53 +00:00
非法操作 e37e727184 refactor(api): inject trigger workflow dispatch and execution logging (#45195) 2026-11-09 08:44:55 +00:00
非法操作 b6d2d2170d refactor(api): inject app trigger publication and quota status lifecycle (#45188) 2026-11-09 06:29:12 +00:00
非法操作 dd21c981f2 refactor(api): inject trigger subscription renewal and event execution (#44653) 2026-11-09 02:42:52 +00:00
非法操作 a83ce881a1 refactor(api): inject plugin dynamic option queries (#44576) 2026-11-06 08:08:45 +00:00
非法操作 138ad48d30 refactor(api): inject plugin trigger endpoint dispatch (#44547) 2026-11-06 07:05:04 +00:00
周龙杰 da24f6d133 test(api): verify workflow publish transactions with SQLite (#45142) 2026-11-06 04:02:44 +00:00
非法操作 803f5d3d9c refactor(api): isolate trigger subscription management (#44541) 2026-11-05 09:54:35 +00:00
非法操作 45279b704d feat: restrict SaaS workflow collaboration to paid plans (#45549) 2026-11-05 08:19:37 +00:00
非法操作 107bbf85ca refactor(api): inject trigger subscription builder lifecycle (#44532) 2026-11-05 08:18:01 +00:00
非法操作 db3ffcc92b refactor(api): isolate trigger provider and subscription queries (#44514) 2026-11-05 07:20:07 +00:00
Tianyu Cai ce7ccc3754 fix(api): use the dataset doc_form when document requests omit it (#45581) 2026-11-05 06:55:00 +00:00
非法操作 11517691d2 refactor(api): isolate trigger OAuth authorization flow (#44505) 2026-11-05 06:21:44 +00:00
Evan 5d0c0b6657 refactor(api): inject sessions into RAG pipeline console controllers (#45605) 2026-11-05 04:17:24 +00:00
非法操作 b501b64f82 refactor(api): isolate trigger OAuth client configuration (#44469) 2026-11-04 12:02:15 +00:00
Evan 0fe1b06d1e fix: reject malformed pagination params with 400 instead of silent fallback (#36855) 2026-11-04 07:52:27 +00:00
非法操作andautofix-ci[bot] 52ae152e00 fix(api): reject invalid model provider icon paths (#45445) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-03 10:01:37 +00:00
Alter-xyzautofix-ci[bot]yyh
 		28dabd92ac feat(agent): add opt-in show thinking toggle for Agent v2 chat (#45427) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
 2026-11-03 09:49:33 +00:00
非法操作 cf38e6ad67 feat(api): add workflow collaboration metrics (#45446) 2026-11-03 09:40:53 +00:00
Eddy ZHANG 074e9e0b92 refactor(api): annotate KnowledgeFS Service API return types (#45295) 2026-11-03 06:05:40 +00:00
-LAN-andautofix-ci[bot] 0257f20b48 fix(openapi): exclude directories from skill import file counts (#45393) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-11-03 05:48:00 +00:00
Guishi Wang b5722ed557 fix(api): enforce dataset service API token scope (#44840) 2026-11-02 21:30:01 +00:00
FFXNautofix-ci[bot]Stephen Zhou
 		96b1b20c76 feat(api): validate models before knowledge base upgrades (#45312) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Stephen Zhou <hi@hyoban.cc>
 2026-11-02 11:13:21 +00:00
Xiyuan Chen 61d2c7402f fix(openapi): mark import.skill as destructive (#45314) 2026-11-02 09:44:17 +00:00
-LAN- 43d8c3715a refactor(tracing): one trace pipeline behind a minimal provider interface (#44673) 2026-11-02 12:16:49 +08:00
Asuka Minatoautofix-ci[bot]Codex
 		64a99c5556 chore: bump restx. now deco has type (#37391) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
 2026-11-02 03:24:33 +00:00
QuantumGhost 9dd087b885 feat(hitl): expose bound IM providers in contact options (#45233) 2026-11-01 07:48:22 +00:00
yyh 4c521a3c0a feat(api): type billing error reasons per proto service (#45203) 2026-10-31 14:07:12 +00:00
Peter PanandWH-2099 5907db83b0 fix(oauth): serialize and persist provider credential refreshes (#32195) 
Co-authored-by: WH-2099 <wh2099@pm.me>
 2026-10-31 12:04:00 +00:00
yyh 3ae9147417 feat(api): map billing error reasons to typed console errors (#45170) 2026-10-31 06:27:30 +00:00
非法操作 e3ef66b8b9 refactor(api): detach console statistics admission (#44411) 2026-10-30 16:40:23 +00:00
yyhandClaude Opus 5.5 749754fcd9 feat(api): return education verification as a status-discriminated result (#45165) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-30 15:01:46 +00:00
yyhandhjlarry 4612a807fe refactor(api): call billing education, compliance, account and notification APIs through the generated client (#45136) 
Co-authored-by: hjlarry <hjlarry@163.com>
 2026-10-30 12:19:34 +00:00
Asuka Minatoautofix-ci[bot]Codex
 		4293584598 ci: bump type checker (#44015) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
 2026-10-30 11:22:51 +00:00
yyhandhjlarry d945bea129 refactor(api): read billing subscription and usage through the generated client (#45131) 
Co-authored-by: hjlarry <hjlarry@163.com>
 2026-10-30 09:40:06 +00:00
Xiyuan Chen b92228f6c2 feat(openapi): workspace skill list, export, import and publish ops (#44941) 2026-10-30 08:24:55 +00:00
zyssyz123 efe37c59ae fix(agent): omit prompt history from LLM gateway streams (#45137) 2026-10-30 07:52:45 +00:00
Winorenautofix-ci[bot]Crazywoola
 		2c3cbd5045 fix(api): reject conflicting multipart file shapes (#44903) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Crazywoola <100913391+crazywoola@users.noreply.github.com>
 2026-10-30 04:48:45 +00:00
Winoren b1d2e2983b fix(web-api): reject internal approval tokens on public HITL endpoints (#44644) 2026-10-30 04:37:17 +00:00