 Justin Tahara
|
b953fc39ca
|
fix(auth): cap bearer token length before hashing (#16044)
|
2026-10-14 22:29:42 +00:00 |
|
|
Justin Tahara
|
c3092f2fad
|
fix(mcp): enforce route access and protect identity headers (#14822)
|
2026-10-14 20:26:29 +00:00 |
|
|
Justin Tahara
|
d9ebc147c2
|
test(llm): make linear-time parse tests robust on slow runners (#16031)
|
2026-10-14 19:59:12 +00:00 |
|
|
Justin Tahara
|
63549f860a
|
fix(connectors): validate outbound destinations and isolate browser credentials (#14832)
|
2026-10-14 18:04:16 +00:00 |
|
|
Justin Tahara
|
0663f13c0d
|
fix(permissions): honour source ACLs only on perm-synced connectors (#15990)
|
2026-10-14 18:01:35 +00:00 |
|
|
Justin Tahara
|
811d96240c
|
fix(llm): parse LLM output in linear time (#15989)
|
2026-10-14 18:01:30 +00:00 |
|
|
Justin Tahara
|
4648187127
|
fix(file-processing): apply zip limits to xlsx and Google Sites archives (#15987)
|
2026-10-14 18:01:25 +00:00 |
|
|
Justin Tahara
|
bcb5ff9fc9
|
fix(devtools): stop local tools writing through symlinks and running fork hooks (#15992)
|
2026-10-14 17:29:12 +00:00 |
|
|
Justin Tahara
|
35eb83d3d5
|
test(auth): add route gate contract tests and make two read routes read-only (#15991)
|
2026-10-14 17:29:09 +00:00 |
|
|
Justin Tahara
|
15809326a2
|
fix(slack): bound channel regex matches and message markup parsing (#15986)
|
2026-10-14 17:29:06 +00:00 |
|
|
Justin Tahara
|
a0ff5a8633
|
fix(connectors): Jira date-error retry runs (#15781)
|
2026-10-09 23:10:59 +00:00 |
|
|
Justin Tahara
|
b912cceb4e
|
feat(connectors): named permission-sync and group-sync checks for Jira (#15772)
|
2026-10-09 20:33:13 +00:00 |
|
|
Justin Tahara
|
ad351d36ef
|
feat(connectors): named indexing capability checks for Jira (#15771)
|
2026-10-09 20:33:12 +00:00 |
|
|
Justin Tahara
|
419344b193
|
refactor(connectors): Jira source-operations gateway (#15770)
|
2026-10-09 20:33:11 +00:00 |
|
|
Justin Tahara
|
ed6867ac19
|
feat(embedding): add Bifrost as a native embedding provider (#15741)
|
2026-10-09 17:01:28 +00:00 |
|
|
Justin Tahara
|
485c3f28ab
|
fix(sharepoint): look up folder permissions without long URL paths (#15736)
|
2026-10-08 20:55:37 +00:00 |
|
|
Justin Tahara
|
ea0ceeb3ff
|
fix(security): serve persona avatars as inert images and scope token refresh to its transport (#15646)
|
2026-10-06 21:54:49 +00:00 |
|
|
Justin Tahara
|
49cc47feaf
|
fix(opensearch): surface readiness ping errors and trust custom CAs (#15608)
|
2026-10-06 21:19:14 +00:00 |
|
|
Justin Tahara
|
1d0c6900a7
|
fix(llm): deliver reasoning effort to models behind OpenAI-compatible providers (#15600)
|
2026-10-06 16:19:58 +00:00 |
|
|
Justin Tahara
|
d9cd87da27
|
fix(chat): render bold-labeled file links as links, not citations (#15599)
|
2026-10-06 15:27:40 +00:00 |
|
|
|
e0aecf3e4e
|
feat(web-search): add Firecrawl as a web search provider (#15483)
Co-authored-by: JuampiHernandez <102912458+JuampiHernandez@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-10-06 14:00:10 +00:00 |
|
|
Justin Tahara
|
3be40cfa32
|
chore(deps): bump hono to 4.13.7 (#15479)
|
2026-10-02 19:14:44 +00:00 |
|
|
Justin Tahara
|
4996c43c8a
|
chore(deps): bump qs to 6.16.0 (#15482)
|
2026-10-02 18:46:07 +00:00 |
|
|
Justin Tahara
|
11b61b7125
|
chore(deps): bump brace-expansion to 5.0.12 / 1.1.21 (#15476)
|
2026-10-02 18:46:05 +00:00 |
|
|
Justin Tahara
|
3087e321bb
|
chore(deps): bump postcss-selector-parser to 7.1.3 (#15481)
|
2026-10-02 18:39:52 +00:00 |
|
|
Justin Tahara
|
b2dd146931
|
chore(deps): bump fast-uri to 3.1.8 (#15477)
|
2026-10-02 18:35:35 +00:00 |
|
|
Justin Tahara
|
ff698f3ba3
|
chore(deps): bump ip-address to 10.7.1 (#15480)
|
2026-10-02 18:34:39 +00:00 |
|
|
Justin Tahara
|
ec0ea34e47
|
chore(deps): bump nanoid to 3.3.18 (#15478)
|
2026-10-02 18:30:23 +00:00 |
|
|
Justin Tahara
|
72ed9f4388
|
chore(deps): bump pypdf to 6.19.0 (#15467)
|
2026-10-02 17:06:10 +00:00 |
|
|
Justin Tahara
|
94f3451ab6
|
chore(deps): bump authlib to 1.8.0 (#15466)
|
2026-10-02 17:06:07 +00:00 |
|
|
Justin Tahara
|
3717121eea
|
chore(deps): bump shell-quote to 1.11.0 (#15465)
|
2026-10-02 17:06:03 +00:00 |
|
|
Justin Tahara
|
64364db59b
|
chore(deps): bump fflate to 0.4.9 (#15464)
|
2026-10-02 17:05:59 +00:00 |
|
|
Justin Tahara
|
45d1769930
|
chore(deps): bump compression to 1.8.2 (#15463)
|
2026-10-02 17:05:56 +00:00 |
|
|
Justin Tahara
|
9b5a3cda18
|
chore(deps): bump baseline-browser-mapping to 2.11.0 (#15462)
|
2026-10-02 17:05:52 +00:00 |
|
|
Justin Tahara
|
d9cb5c055c
|
fix(chat): stop corrupting closing code fences with plaintext labels (#15352)
|
2026-10-01 21:31:53 +00:00 |
|
|
Justin Tahara
|
8e8f622f8b
|
fix(deps): lock Craft template postcss to 8.5.28 (#15392)
|
2026-10-01 19:56:17 +00:00 |
|
|
Justin Tahara
|
d1f33f62e7
|
feat(image-gen): add GPT Image 2.5 models and fix Office output MIME types (#15353)
|
2026-10-01 19:37:17 +00:00 |
|
|
Justin Tahara
|
f8b1f6cfe3
|
chore(deps): bump next to 16.3.8 (#15358)
|
2026-10-01 18:44:17 +00:00 |
|
|
Justin Tahara
|
7106a622f8
|
fix(chat): keep file processing indicator until files are ready (#15354)
|
2026-10-01 18:19:37 +00:00 |
|
|
Justin Tahara
|
804f4bef48
|
ci(dependabot): track mobile bun dependencies (#15367)
|
2026-10-01 18:05:13 +00:00 |
|
|
Justin Tahara
|
b72b2ed149
|
chore(deps): override uuid to 11.1.1 in mobile (#15366)
|
2026-10-01 18:05:10 +00:00 |
|
|
Justin Tahara
|
04ab4d3f6a
|
chore(deps): bump browserslist to 4.28.7 (#15365)
|
2026-10-01 18:05:08 +00:00 |
|
|
Justin Tahara
|
b2d9153e59
|
chore(deps): bump brace-expansion to 5.0.11 / 1.1.20 (#15364)
|
2026-10-01 18:05:05 +00:00 |
|
|
Justin Tahara
|
184f7f995d
|
chore(deps): bump js-yaml to 4.3.2 / 3.15.2 (#15363)
|
2026-10-01 18:05:02 +00:00 |
|
|
Justin Tahara
|
12c3b56744
|
chore(deps): bump fast-uri to 3.1.7 (#15362)
|
2026-10-01 18:04:58 +00:00 |
|
|
Justin Tahara
|
4fb52d6a62
|
chore(deps): bump undici to 7.29.1 (#15361)
|
2026-10-01 18:04:55 +00:00 |
|
|
Justin Tahara
|
ed96b8ca9f
|
chore(deps): bump proxy-addr to 2.0.8 (#15360)
|
2026-10-01 18:04:52 +00:00 |
|
|
Justin Tahara
|
e0a570f9ee
|
chore(deps): bump sharp to 0.35.5 (#15359)
|
2026-10-01 18:04:49 +00:00 |
|
|
Justin Tahara
|
775689be71
|
chore(deps): bump cryptography to 50.0.0 (#15218)
|
2026-09-29 21:54:47 +00:00 |
|
|
Justin Tahara
|
7f7ca1b780
|
chore(deps): bump accelerate from 1.14.0 to 1.15.0 (#15235)
|
2026-09-29 21:08:17 +00:00 |
|
|
Justin Tahara
|
2445236832
|
chore(deps): drop the unused nltk dependency (#15234)
|
2026-09-29 21:08:15 +00:00 |
|
|
Justin Tahara
|
ac56dbb00f
|
chore(deps): refresh transitive browserslist in /web (#15233)
|
2026-09-29 21:08:12 +00:00 |
|
|
Justin Tahara
|
e7240a64ed
|
chore(deps): refresh transitive brace-expansion in /web (#15232)
|
2026-09-29 20:22:16 +00:00 |
|
|
Justin Tahara
|
63f852a8ad
|
chore(deps): refresh transitive js-yaml 3.x in /web (#15231)
|
2026-09-29 20:22:14 +00:00 |
|
|
Justin Tahara
|
833d38ae9f
|
chore(deps): refresh transitive fast-uri in /web (#15230)
|
2026-09-29 20:22:11 +00:00 |
|
|
Justin Tahara
|
3a9e0012bd
|
chore(deps): refresh transitive qs in /web (#15229)
|
2026-09-29 20:22:08 +00:00 |
|
|
Justin Tahara
|
9fc4ef874c
|
chore(deps): refresh transitive nanoid in /web (#15228)
|
2026-09-29 20:22:06 +00:00 |
|
|
Justin Tahara
|
72b763b997
|
chore(deps): bump sharp to 0.35.4 in /web (#15227)
|
2026-09-29 20:01:50 +00:00 |
|
|
Justin Tahara
|
8bbcf77217
|
fix(db): verify async Postgres TLS like libpq (#15237)
|
2026-09-29 19:42:35 +00:00 |
|
|
Justin Tahara
|
11dfd679c2
|
chore(deps): bump msgpack from 1.2.1 to 1.2.2 (#15222)
|
2026-09-29 19:40:21 +00:00 |
|
|
Justin Tahara
|
72da94eeb3
|
chore(deps): bump python-multipart from 0.0.31 to 0.0.32 (#15226)
|
2026-09-29 19:18:48 +00:00 |
|
|
Justin Tahara
|
ff9eb6cda7
|
chore(deps): bump pydantic-settings from 2.14.2 to 2.15.0 (#15225)
|
2026-09-29 19:18:46 +00:00 |
|
|
Justin Tahara
|
8a86409591
|
docs(gcp): make the README Helm values install (#15238)
|
2026-09-29 19:03:36 +00:00 |
|
|
Justin Tahara
|
ed0335f668
|
chore(deps): bump mako from 1.3.12 to 1.4.3 (#15224)
|
2026-09-29 19:00:28 +00:00 |
|
|
Justin Tahara
|
d5f5bf30f0
|
chore(deps): bump click from 8.4.2 to 8.5.0 (#15223)
|
2026-09-29 19:00:25 +00:00 |
|
|
Justin Tahara
|
6cf2fb1e3d
|
chore(deps): bump tornado from 6.5.8 to 6.5.10 (#15221)
|
2026-09-29 19:00:23 +00:00 |
|
|
Justin Tahara
|
177a17045f
|
chore(deps): bump urllib3 from 2.7.0 to 2.8.0 (#15220)
|
2026-09-29 19:00:21 +00:00 |
|
|
Justin Tahara
|
ad051b39d9
|
chore(deps): bump soupsieve from 2.8.4 to 2.9.2 (#15219)
|
2026-09-29 19:00:19 +00:00 |
|
|
Justin Tahara
|
43f74dd690
|
fix(helm): harden default pod security and warn on default credentials (#15046)
|
2026-09-28 23:52:20 +00:00 |
|
|
Justin Tahara
|
5c2e201839
|
fix(helm): scope pre-delete cleanup to this release and serialize startup migrations (#15045)
|
2026-09-28 23:46:01 +00:00 |
|
|
Justin Tahara
|
860164a54c
|
feat(terraform): opt-in L7 load balancer for GCP so Cloud Armor can attach (#15174)
|
2026-09-28 16:22:40 +00:00 |
|
|
Justin Tahara
|
817f41fc79
|
feat(code-interpreter): integrate Code Interpreter 0.4.8 with admission retries (#15131)
|
2026-09-25 22:20:56 +00:00 |
|
|
Justin Tahara
|
fa0237514d
|
docs(terraform): GCP and Azure modules have been applied to live projects (#15155)
|
2026-09-25 22:19:02 +00:00 |
|
|
Justin Tahara
|
dbaabb7830
|
fix(terraform): GCP module review fixes and workload identity ordering (#15148)
|
2026-09-25 21:35:22 +00:00 |
|
|
Justin Tahara
|
5f15e2aed2
|
feat(terraform): add GCP onyx composition and README (#15139)
|
2026-09-25 20:48:02 +00:00 |
|
|
Justin Tahara
|
8d8036d97e
|
feat(terraform): add GCP cloud-armor module (#15138)
|
2026-09-25 20:48:01 +00:00 |
|
|
Justin Tahara
|
468a41d5b5
|
feat(terraform): add GCP gke module (#15137)
|
2026-09-25 20:48:01 +00:00 |
|
|
Justin Tahara
|
e25ef546fb
|
feat(terraform): add GCP redis module (#15136)
|
2026-09-25 20:48:00 +00:00 |
|
|
Justin Tahara
|
b360e8f5a9
|
feat(terraform): add GCP postgres module (#15135)
|
2026-09-25 20:48:00 +00:00 |
|
|
Justin Tahara
|
838c97ccf5
|
feat(terraform): add GCP gcs module (#15134)
|
2026-09-25 20:47:59 +00:00 |
|
|
Justin Tahara
|
19350a61f2
|
feat(terraform): add GCP vpc module (#15133)
|
2026-09-25 20:47:58 +00:00 |
|
|
Justin Tahara
|
d29ce87d41
|
feat(connectors): data-access group picker for perm-synced connectors (#15033)
|
2026-09-24 22:38:06 +00:00 |
|
|
Justin Tahara
|
1779abb0e1
|
feat(connectors): SYNC_RESTRICTED access type and data-access groups (#15032)
|
2026-09-24 18:37:49 +00:00 |
|
|
Justin Tahara
|
2010b0dd69
|
fix(logging): drop query strings from uvicorn access and websocket logs (#15043)
|
2026-09-24 17:10:46 +00:00 |
|
|
Justin Tahara
|
dd32019df7
|
fix(authz): check credential ownership and scoped-manager cc_pair access (#14678)
|
2026-09-24 16:55:20 +00:00 |
|
|
Justin Tahara
|
74b53c108f
|
feat(helm): default readiness probes, drain on shutdown, opt-in PDBs (#15047)
|
2026-09-23 23:49:47 +00:00 |
|
|
Justin Tahara
|
07eef23f83
|
fix(ods): pin fork CI promotion to the confirmed commit (#14865)
|
2026-09-23 23:19:27 +00:00 |
|
|
Justin Tahara
|
3416606f3e
|
fix(files): bound archive expansion and skill frontmatter parsing (#14866)
|
2026-09-23 23:15:14 +00:00 |
|
|
Justin Tahara
|
e587e2efc0
|
fix(chat): keep file names and extensions on chat file downloads (#15044)
|
2026-09-23 23:05:25 +00:00 |
|
|
Justin Tahara
|
474be5c392
|
fix(connectors): bound and monitor server-supplied retry delays (#14988)
|
2026-09-23 23:03:15 +00:00 |
|
|
Justin Tahara
|
695d024fd9
|
fix(tools): bound open_url response bodies and block IPv6 IMDS (#14990)
|
2026-09-23 21:52:39 +00:00 |
|
|
Justin Tahara
|
7e54ce4fe3
|
feat(security): workspace toggle for connector group restrictions (#15031)
|
2026-09-23 21:19:36 +00:00 |
|
|
Justin Tahara
|
1cfa917fa9
|
fix(db): warm up only the connections the pool can hold (#15042)
|
2026-09-23 20:19:27 +00:00 |
|
|
Justin Tahara
|
cb5d547724
|
fix(security): scope Slack chat-seed to Slack-owned sessions (ENG-4294) (#13324)
|
2026-09-23 19:47:23 +00:00 |
|
|
Justin Tahara
|
082bf74402
|
fix(security): verify project ownership in move_chat_session (ENG-4297) (#13327)
|
2026-09-23 19:47:21 +00:00 |
|
|
Justin Tahara
|
49530ec121
|
fix(cli): keep remote serve sessions off the host config (#14986)
|
2026-09-23 18:13:07 +00:00 |
|
|
Justin Tahara
|
d97516d728
|
fix(craft): stop event pumps when a stream ends (#14984)
|
2026-09-23 18:13:04 +00:00 |
|
|
Justin Tahara
|
215f41d237
|
fix(auth): block password login and reset for service accounts (#14987)
|
2026-09-23 17:48:36 +00:00 |
|
|
Justin Tahara
|
47b67ea6c6
|
fix(auth): rate-limit JWT public key refetches (#14989)
|
2026-09-23 17:31:57 +00:00 |
|
|
Justin Tahara
|
3ee5d1a3b7
|
fix(api): return a generic body for unhandled server errors (#14985)
|
2026-09-23 17:31:55 +00:00 |
|