Jyong and Claude Fable 5.2
7d6c1845b8
feat(file-scan): scan uploaded knowledge base files for malware
...
Add a shared file malware-scanning module and use it in the Classic
Knowledge Base, RAG Pipeline local files and the Agent Knowledge Base.
- core/file_scan: scanner adapters for ClamAV (deployment-configured),
Cloudmersive, Scanii, OPSWAT MetaDefender Cloud and API-based
extensions (new `file.malware_scan` extension point).
- services/file_scan: FileScanService is the single entry point other
modules call. Providers are workspace-wide; a policy belongs to a
scope (dataset, knowledge_fs_space), so further modules can adopt
scanning without schema changes.
- Each file is scanned on its own: a rejected file fails only its own
document. Malware always blocks and deletes the stored original;
invalid credentials and exhausted quota stop processing regardless of
the "allow" fallback.
- Console: workspace scanner management and a per-knowledge-base
policy section in both settings forms; the Agent Knowledge Base
upload keeps going after a rejected file and explains each failure.
- Off by default behind FILE_SCAN_ENABLED.
Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com >
2026-11-11 18:37:03 +08:00
3774ea85ae
ci: bump tyck to check new err ( #45614 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com >
2026-11-11 07:31:35 +00:00
583615e412
feat: support personal access token ( #45540 )
...
Co-authored-by: twwu <twwu@dify.ai >
Co-authored-by: Eldar Dadashov <52511672+eldardada@users.noreply.github.com >
Co-authored-by: Byron.wang <byron@dify.ai >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai >
2026-11-11 03:00:24 +00:00
wangxiaolei
262cbe8dab
chore: remove unnessary rbac call ( #45857 )
2026-11-09 02:26:30 +00:00
Sourav Rajvi and Byron Wang
d65a57b7c7
fix(api): tighten RAGFlow external knowledge endpoint validation ( #40065 )
...
Co-authored-by: Byron Wang <byron@dify.ai >
2026-11-06 04:45:32 +00:00
FFXN
c3780668b8
fix(knowledge): restore downloads after converting datasets to pipelines ( #45428 )
2026-11-03 08:44:35 +00:00
Guishi Wang
b5722ed557
fix(api): enforce dataset service API token scope ( #44840 )
2026-11-02 21:30:01 +00:00
96b1b20c76
feat(api): validate models before knowledge base upgrades ( #45312 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Stephen Zhou <hi@hyoban.cc >
2026-11-02 11:13:21 +00:00
Peter Pan and WH-2099
5907db83b0
fix(oauth): serialize and persist provider credential refreshes ( #32195 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-10-31 12:04:00 +00:00
Tanishq
ae0ed2d2f1
fix(api): keep stored QA answers on partial segment updates ( #44997 )
2026-10-30 16:19:04 +00:00
4293584598
ci: bump type checker ( #44015 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com >
2026-10-30 11:22:51 +00:00
Tianyu Cai
a709c29669
perf(api): batch segment list child chunks and attachments ( #45050 )
2026-10-29 08:04:31 +00:00
wangxiaolei
a394d04443
fix: fix list dataset not include own ( #44795 )
2026-10-26 08:06:22 +00:00
Tianyu Cai and Claude Opus 5.5
06b8640c4a
fix(api): discard index entries of documents deleted during indexing ( #44364 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-26 05:24:08 +00:00
fd2db63184
feat: KnowledgeFS and New Knowledge ( #44165 )
...
Co-authored-by: Jyong <76649700+JohnJyong@users.noreply.github.com >
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: zhaohao1004 <zhaohao1004@gmail.com >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: FFXN <lizy@dify.ai >
2026-10-23 03:34:59 +00:00
7445e48323
chore: port Document to TypeBase ( #36084 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com >
2026-10-23 02:56:00 +00:00
e7c2c6fad5
fix(api): write built-in document metadata in a single format ( #44218 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: Stream <Stream_2@qq.com >
2026-10-20 14:44:34 +00:00
6f434baf93
ci: enable Ruff B904 ( #44121 )
...
Co-authored-by: Codex <codex@openai.com >
Co-authored-by: hjlarry <hjlarry@163.com >
2026-10-19 12:47:53 +00:00
7cafd65d54
refactor(web): migrate handwritten console API calls to the generated oRPC contract ( #44169 )
...
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-10-16 03:47:31 +00:00
Asuka Minato and Codex
6bdc670766
ci: enable Ruff N806 ( #44116 )
...
Co-authored-by: Codex <codex@openai.com >
2026-10-16 02:11:01 +00:00
Asuka Minato and Codex
cd8301a468
ci: enable Ruff SIM108 ( #44113 )
...
Co-authored-by: Codex <codex@openai.com >
2026-10-15 09:45:52 +00:00
Asuka Minato and Codex
a4e0a0c10d
ci: enable Ruff E712 ( #44114 )
...
Co-authored-by: Codex <codex@openai.com >
2026-10-15 07:37:57 +00:00
Asuka Minato and Codex
14f863a23f
ci: enable Ruff FURB113 ( #44109 )
...
Co-authored-by: Codex <codex@openai.com >
2026-10-15 05:00:19 +00:00
Asuka Minato and Codex
7b467ec651
ci: enable Ruff SIM103 ( #44110 )
...
Co-authored-by: Codex <codex@openai.com >
2026-10-15 05:00:16 +00:00
wangxiaolei and yunlu.wen
7a02240701
feat: support clean workspace related resource ( #43803 )
...
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
2026-10-14 04:44:38 +00:00
XiaoBa
51a8dba933
fix(api): preserve creator RBAC access across app and RAG pipeline creation ( #43941 )
2026-10-13 16:56:49 +00:00
Byron.wang and Stream
b71c5f8671
refactor(api): consolidate app queries and clarify session ownership ( #43288 )
...
Co-authored-by: Stream <Stream_2@qq.com >
2026-10-12 07:29:44 +00:00
Jasonfish
4f1fe1127f
fix: restore vectors when segments are re-enabled via API ( #43865 )
2026-10-11 15:30:10 +00:00
Byron.wang
2f20c7d958
refactor(api): separate workspace RBAC controllers and application service ( #43323 )
2026-10-10 09:46:01 +00:00
50f66b43c8
chore(api): bump minimum supported Python to 3.13 ( #43022 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: Stephen Zhou <38493346+hyoban@users.noreply.github.com >
2026-10-09 10:47:03 +00:00
c0dbb26f3e
feat: access token feature ( #42293 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
Co-authored-by: twwu <twwu@dify.ai >
2026-10-09 05:54:28 +00:00
Byron.wang and autofix-ci[bot]
95373bc4fd
refactor(api): consolidate account modules and shared errors ( #42570 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-30 07:26:44 +00:00
Byron.wang and Jyong
a67cd87eb0
refactor(api): establish dataset application boundaries ( #41729 )
...
Co-authored-by: Jyong <jyong@dify.ai >
2026-09-29 08:42:31 +00:00
Byron.wang and autofix-ci[bot]
8b7f903cff
refactor(api): centralize API key management ( #42489 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-23 08:38:48 +00:00