mtfyun/ragflow
1
0 Fork 0
mirror of https://github.com/infiniflow/ragflow.git synced 2026-11-13 14:51:12 +08:00
Code Issues Packages Projects Releases Wiki Activity
10,770 Commits 3 Branches 199 Tags
6aeb92deff2b46303559cd4c84a7b8db35ee3fb4
Commit Graph
10770 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sbaaoui Idriss 6aeb92deff fix(agent): support String and Object Invoke parameters (#21953) 2026-11-04 15:06:12 +08:00
balibabu 06d8605d4c Fix: The pipeline name is too long and overflows the release dialog. (#21957) 2026-11-04 15:03:48 +08:00
balibabu 2b3b4fc03b Fix: Long messages in floating embedded pages overflow the message box. (#21951) 2026-11-04 14:52:56 +08:00
buua436 18562f2cdc refa: derive service identity from context (#21942) 2026-11-04 14:15:41 +08:00
balibabu 7901a9e714 Fix: Chat embedded in a website: automatically scrolls down when a question is answered. (#21940) 2026-11-04 14:06:44 +08:00
balibabu 36448527fc Fix: Variables inserted using shortcuts fail to display in the message node. (#21946) 2026-11-04 14:05:26 +08:00
Jin Hai 47e94cb734 doc: fix typos (#21947) 
Signed-off-by: Jin Hai <haijin.chn@gmail.com>
 2026-11-04 14:03:31 +08:00
jay77721 9ed193674c feat(ingestion): recognize image tables through the DeepDoc page pipeline (#21911) dev-20261104-2 2026-11-04 13:14:38 +08:00
ZZZZY c2808b14fe fix(retrieval): bound rerank and KNN candidate windows (#21907) 2026-11-04 11:48:21 +08:00
buua436 7dd0164fb3 refa: derive service identity from request context (#21923) 2026-11-04 10:59:05 +08:00
CCLUCKY d2353a8c36 fix(ingestion): pass the MinerU timeout to the MonkeyOCR file_parse upload (#21930) 2026-11-04 10:43:21 +08:00
Andrej Kratky affbc97770 fix(agent): runtime fixes for tool naming, legacy sessions, tenant scoping and MCP SSRF (#20558) 2026-11-04 10:24:57 +08:00
foyou f9a0c3e83e feat(gpustack): rework provider setup and fix driver issues (#21903) 2026-11-04 10:16:06 +08:00
天海蒼灆 c44c69704b fix(agent): populate structured output and resolve deferred @structured (#20679) dev-20261104 2026-11-04 10:04:32 +08:00
balibabu 0df917e677 Fix: Agent – ​​Incomplete display of blueprint examples when creating a wiki template in Compiler (#21919) 2026-11-04 09:39:40 +08:00
chanx 74ac694b99 Fix: Adjust layout of DatasetFilter component to conditionally render FilterPopover and SearchInput (#21924) 2026-11-04 09:39:16 +08:00
Wang Qi 2c4bbbc720 Refactor: Better no such name (#21925) 2026-11-03 20:12:30 +08:00
superwiboy f5d7ab789e feat(ocr): make MinerU parser timeout configurable via environment and setup (#21832) 2026-11-03 20:11:39 +08:00
CCLUCKY 33806977d1 fix(file): scope commit changes to the target folder tree (#21795) 
## Problem

`POST /api/v1/folders/{folder_id}/commits` (also reachable as
`/workspaces/{workspace_id}/commits` and
`/datasets/{dataset_id}/commits`)
authorizes only the folder in the URL. `FileCommitService.CreateCommit`
then
applies every item of the client-supplied `files` array straight to the
`file`
table:

```go
tx.Model(&entity.File{}).Where("id = ?", change.FileID).Updates(map[string]interface{}{
    "location": objKey, "size": fSize,
})
```

None of the `add` / `modify` / `delete` / `rename` branches constrain
the
write by tenant or by folder, so an authenticated caller who is allowed
to
commit in *any* workspace can pass the ID of a file owned by another
workspace
or another tenant and rewrite its `location`, `size`, `name`, or
`status`.
That is the IDOR/CWE-639 class the DAO already documents on
`FileDAO.GetByIDAndTenant`, and the sibling write paths (`DeleteFiles`,
`MoveFiles`) authorize every file they touch.
 2026-11-03 19:47:47 +08:00
YanZhang 91f3c41091 docs：Restructure the Team documentation and align sharing configuration across Dataset, Agent, and Memory. (#21922) 
Reorganize team management, resource sharing, permissions, and
collaboration guides; clarify member capabilities, model sources, and
draft versus published versions; update configuration steps,
screenshots, and cross-links while reducing duplication.
 2026-11-03 19:37:52 +08:00
ciel 6b8fe86d05 fix(whatsapp): escape the gateway events session key once (#21871) 2026-11-03 19:35:58 +08:00
ZZZZY 5781bcaea7 fix(es): preserve dataset and document scope in single chunk updates (#21842) 2026-11-03 19:35:37 +08:00
buua436 535e8f6d15 fix(dao): include skill spaces in auto migration (#21921) 2026-11-03 19:32:14 +08:00
jay77721 8d44dca39b fix(ingestion): share extractor concurrency across tag extraction (#21891) 2026-11-03 18:48:40 +08:00
Harsh Kashyap 730f12ba45 fix(service): purge engine data from RemoveDocumentKeepFile (#20659) (#20768) 2026-11-03 18:42:53 +08:00
buua436 ff985091fb refa: derive service identity from context (#21904) 2026-11-03 18:38:32 +08:00
chanx d543182eab feat(web): add enterprise (ee) seam layer for build-time overlays (#21908) 2026-11-03 18:05:27 +08:00
jay77721 5dc7683aa4 fix(parser): detect Office content before selecting Go parsers (#21909) 2026-11-03 17:38:56 +08:00
Wang Qi 1d5ae546d3 Fix: disable ciation not working in agentic chat (#21913) 2026-11-03 17:38:40 +08:00
balibabu 2af92308de Fix: The referenced content in chat and agent messages is being obscured. (#21918) 2026-11-03 17:38:22 +08:00
balibabu f510e4ed56 Feat: Add a cancel button to pause tasks that are currently running or queued. (#21917) 2026-11-03 17:37:06 +08:00
buua436 84705f75c8 feat: add user ownership to resources (#21914) 2026-11-03 17:36:36 +08:00
xugangqiang 58360341ab Stop persisting process_end_at; recover end time from begin + duration (#21906) 2026-11-03 17:14:04 +08:00
balibabu f75527be93 Fix: Delete the agent log entry (#21910) 2026-11-03 16:32:15 +08:00
xugangqiang dd3c77c582 refactor(common): revert OSS ingest-log collection from #21711 (keep instrumentation only) (#21893) 2026-11-03 15:50:26 +08:00
Jin Hai ebcdf2eef6 remove codecov upload (#21902) 
Signed-off-by: Jin Hai <haijin.chn@gmail.com>
 2026-11-03 15:29:41 +08:00
balibabu 62a4eae87b Fix: Variables within the "Wait for Input" and "Start" components of an agent are not accessible in the floating window. (#21900) 2026-11-03 14:52:19 +08:00
Jin Hai c3437289eb add sync audit hook (#21901) 
Signed-off-by: Jin Hai <haijin.chn@gmail.com>
 2026-11-03 14:47:39 +08:00
Sbaaoui Idriss a916ee5776 fix(agent): pass scalar thresholds to memory retrieval (#21889) 2026-11-03 14:16:28 +08:00
Sbaaoui Idriss 53599f3f4d fix(agent): use stored log titles in tables and exports (#21890) 2026-11-03 14:14:49 +08:00
Jin Hai f06c4481a6 Revert "fix(ingestion): add process_end_at column and keep OSS ingest-log a no-op" (#21897) 
Reverts infiniflow/ragflow#21888
 2026-11-03 14:10:21 +08:00
Wang Qi a26066c879 Refactor: refine response data (#21858) 2026-11-03 14:10:05 +08:00
buua436 42fc0bac45 refa: derive permission identity from context (#21892) 2026-11-03 13:24:26 +08:00
balibabu a930b78bef Fix: Increase the spacing between the labels and the dropdown menus for the PDF and table parsers. (#21882) 2026-11-03 13:08:21 +08:00
xugangqiang f3be804337 fix(ingestion): add process_end_at column and keep OSS ingest-log a no-op (#21888) 2026-11-03 12:36:15 +08:00
Sourav Rajvi b614e976a5 feat(go): MonkeyOCR PDF dispatch on Go ingestion path (#20469) 2026-11-03 12:33:27 +08:00
Jin Hai 44c4517f6a update readme (#21894) 
Signed-off-by: Jin Hai <haijin.chn@gmail.com>
 2026-11-03 12:24:02 +08:00
CCLUCKY 0fb5835ae6 fix(docker): stop the SPA fallback from masking stale hashed assets (#21878) 2026-11-03 12:01:43 +08:00
xugangqiang c58d081a83 feat(document): one-click cancel all documents in parsing queue (#21861) 2026-11-03 12:00:19 +08:00
xugangqiang 6b2b5a9ca2 test(service): gate API-token identity test out of EE builds (#21885) dev-20261103-2 2026-11-03 11:24:58 +08:00