Commit Graph
892 Commits
Author SHA1 Message Date
devin-ai-integration[bot]andnik a0897a2205 feat(cve-alerts): one Slack post per run, thread repeats by CVE id, track CVEs per image (#16077)
Co-authored-by: nik <nik@onyx.app>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-10-15 18:31:24 +00:00
onyx-cherry-pick[bot] b480c8cdfe chore(deps): update node base image digests (#16066)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
2026-10-15 16:20:09 +00:00
Wenxi faaa183e3a chore(helm): require chart version and release note updates (#16035) 2026-10-14 21:32:29 +00:00
Justin Tahara 63549f860a fix(connectors): validate outbound destinations and isolate browser credentials (#14832) 2026-10-14 18:04:16 +00:00
Yuhong Sun 0846adfac8 fix(ci): disable telemetry in Onyx Lite test runner (#15958) 2026-10-13 17:35:37 +00:00
Evan LohnandClaude Opus 5.5 6d012dd2d3 ci: run the OneDrive job tests only on related PRs and fail fast on a throttled attempt (#15924)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-13 00:56:50 +00:00
devin-ai-integration[bot] e540e6f37f chore(ci): drop the unreachable multi-commit name in the CVE Alerts cherry-pick (#15928)
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-10-12 23:12:24 +00:00
Nikolas Garza 2489736c9f fix(ci): pin release lines to main's base image digests and post one failure notice per failure (#15889) 2026-10-12 22:58:04 +00:00
Evan LohnandClaude Opus 5.5 fcfbdf9ec2 ci: run the reindex port integration tests daily and on related PRs (#15910)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-12 20:18:04 +00:00
roshan 1fc15611a0 fix(llms): recommended-models agent defaults to the balanced tier, never Astra/Fable (#15890) 2026-10-12 17:47:48 +00:00
onyx-cherry-pick[bot] 3bd29d20e3 chore(deps): update node base image digests (#15887)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
2026-10-12 16:30:57 +00:00
onyx-cherry-pick[bot] 1e37fe90fe chore(deps): update node base image digests (#15815)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
2026-10-11 08:00:58 +00:00
roshan f8043024bf ci(mcp): pull MCP Compatibility images through the ECR pull-through cache (#15792) 2026-10-10 00:08:04 +00:00
Wenxi d89fd563ca feat(i18n): require translation updates for English copy changes (#15794) 2026-10-09 23:34:20 +00:00
Yuhong SunandClaude b19e2dd479 feat(telemetry): add bounded private fleet instrumentation (#15434)
Co-authored-by: Claude <noreply@anthropic.com>
2026-10-09 18:51:23 +00:00
onyx-cherry-pick[bot] 78b22c77cc chore(deps): update python base image digests (#15761)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
2026-10-09 10:46:57 +00:00
roshan 0d228a12b3 ci(mcp): guard native client compatibility and alert regressions (#15694) 2026-10-08 22:37:30 +00:00
Nikolas Garza 9cbbc5a475 fix(ci): keep the CVE Alerts nightly watching through failed run reads (#15716) 2026-10-08 21:09:15 +00:00
onyx-cherry-pick[bot] 34615bfef6 chore(deps): update python base image digests (#15714)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
2026-10-08 16:40:08 +00:00
Nikolas Garza 54155760fd chore: drop the two EE env vars from deploys, ods, CI and tests (#15645) 2026-10-07 21:29:31 +00:00
Nikolas Garza 78666df409 refactor(ee): gate Enterprise features on the license alone (#15640) 2026-10-07 21:29:30 +00:00
roshan df93d10fe3 fix(llm): mark endpoint-less OpenRouter routers unbounded, emit no output limit (#15660) 2026-10-07 20:55:52 +00:00
roshan aaac070f12 ci: dedupe base image refresh Slack announcements (#15671) 2026-10-07 20:45:57 +00:00
onyx-cherry-pick[bot]androshan 3a1cada068 chore(deps): update node base image digests (#15530)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
Co-authored-by: roshan <38771624+rohoswagger@users.noreply.github.com>
2026-10-07 19:08:51 +00:00
onyx-cherry-pick[bot] e6c4f8ac34 chore(deps): update python base image digests (#15531)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
2026-10-07 16:28:32 +00:00
roshan a9e1c651f9 fix(ci): give each run's ephemeral test image a unique digest (#15648) 2026-10-06 22:25:50 +00:00
roshan e4cfdb4d78 fix(llm): move citation guidance from the system prompt to the reminder (#15592) 2026-10-06 21:41:17 +00:00
roshan 232c99fa2b fix(ci): stop OpenSearch disk-watermark flakes on test runners (#15628) 2026-10-06 20:32:32 +00:00
roshan a7bb9a2353 ci: post maintenance PRs as Internal Tools in #ai-pr-reviews (#15620) 2026-10-06 20:07:51 +00:00
Nikolas Garza 033e4a01b9 fix(ci): give Dependabot's picked commits their parents (#15616) 2026-10-06 18:55:52 +00:00
Nikolas Garza 351b376f3b feat(ci): a fix landed on Dependabot's PR is backported like any other (#15605) 2026-10-06 17:43:17 +00:00
roshan e459e61fb3 feat(ci): post auto-update PRs to #ai-pr-reviews and tag the owner (#15579) 2026-10-06 16:31:01 +00:00
Nikolas Garza 4c867f1e69 feat(ci): a fix opened on main is backported to the four newest release lines (#15591) 2026-10-06 15:54:02 +00:00
Nikolas Garza a278fccfba feat(ci): audit the sandbox image's OS layer in the deploy gate and nightly (#15515) 2026-10-06 01:24:12 +00:00
Nikolas Garza 53b27d4270 feat(ci): a failed pull-request audit dispatches the CVE alerts on main (#15576) 2026-10-06 01:08:07 +00:00
roshan ae67bcd3da feat(llms): regenerate recommended models with an OpenAI agent (#15558) 2026-10-06 01:02:50 +00:00
roshan 6015590c00 chore(skills): make .agents/skills the canonical skills directory (#15550) 2026-10-05 21:53:19 +00:00
Evan LohnandClaude Opus 5.5 9cab509fb1 chore(ci): upload the integration worker logs when the tests fail (#15519)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-05 21:42:23 +00:00
Nikolas Garza f5c518f663 fix(ci): upload the backend image audit under its Dockerfile path (#15520) 2026-10-04 18:49:20 +00:00
Nikolas Garza 1a2699a78c fix(ci): backport every affected image family and keep distro releases apart (#15504) 2026-10-02 23:31:13 +00:00
Nikolas Garza dbde31aa1a feat(ci): run the release lines nightly and name the digest refresh as the fix (#15445) 2026-10-02 19:15:30 +00:00
Nikolas Garza afc066ae50 feat(ci): audit every shipped image's OS layer before the build (#15444) 2026-10-02 19:15:30 +00:00
Nikolas Garza 19659c8648 feat(ci): attach fixed versions to findings and thread repeat alerts (#15435) 2026-10-02 19:15:29 +00:00
onyx-cherry-pick[bot] 1711ff7315 chore(deps): update node base image digests (#15333)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
2026-10-01 23:16:26 +00:00
onyx-cherry-pick[bot] da2b69a6fb chore(deps): update python base image digests (#15334)
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
2026-10-01 23:16:23 +00:00
Nikolas Garza d28347343b fix(ci): keep an alert pending after a failed patch, prove a main fix (#15404) 2026-10-01 21:02:10 +00:00
Nikolas Garza 3fe68e62ef feat(ci): alert on deploy-blocking findings in a Slack thread (#15345) 2026-10-01 19:40:42 +00:00
Nikolas Garza c0049da2ef feat(ci): run CVE alerts on the release branch a failed tag came from (#15328) 2026-10-01 19:40:41 +00:00
Yuhong SunandClaude Opus 5.5 8ced9bc01f chore: remove Vespa and consolidate the document index interface (#15336)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-01 19:22:34 +00:00
Justin Tahara 804f4bef48 ci(dependabot): track mobile bun dependencies (#15367) 2026-10-01 18:05:13 +00:00