starred/onyx
1
0 Fork 0
mirror of https://github.com/onyx-dot-app/onyx.git synced 2026-10-23 20:02:57 -05:00
Code Issues Packages Projects Releases 10 Wiki Activity
8,575 Commits 2,097 Branches 2,546 Tags
447553c8f50bd59cd9df74ea84db98f5e9c6f711
Commit Graph
366 Commits
Author SHA1 Message Date
Jamison LahmanClaude Opus 4.8cubic-dev-ai[bot]
 		253e7be79b fix(security): require USER_AUTH_SECRET on non-dev deployments (#12038) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
 2026-06-12 21:29:15 +00:00
Jamison LahmanandClaude Opus 4.8 26868070e6 fix(security): harden default MinIO/S3 object-storage credentials (#12003) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-12 19:27:18 +00:00
Jamison LahmanandClaude Opus 4.8 279fbd366f feat(security): consolidate SSRF protection into one admin setting (#11881) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-12 00:47:08 +00:00
Justin Tahara b901cd7677 fix(CORS): Never pair wildcard CORS origins with allow_credentials (ENG-4126) (#11948) 2026-06-11 19:56:35 +00:00
Jamison LahmanandClaude Opus 4.8 b960e18eb5 fix(web): add frame-ancestors CSP to prevent clickjacking (#11936) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-11 19:18:19 +00:00
acaprau 5af845632b fix(craft): pr-craft-compose-integration.yml should use runs-on (#11865) 2026-06-10 16:58:09 +00:00
roshanandClaude Opus 4.8 a871ef9499 feat(craft): make Craft runtime-only; drop the craft backend image (#11877) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-10 01:45:39 +00:00
Jamison LahmanandClaude Opus 4.8 590f972768 feat(security): gate API docs/schema behind ENABLE_PUBLIC_DOCS (default off) (#11837) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-08 23:02:38 +00:00
Jamison LahmanandClaude Opus 4.8 44e985e581 feat(metrics): add optional METRICS_AUTH_TOKEN for the /metrics endpoint (#11813) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-08 17:13:23 +00:00
WenxiandClaude Opus 4.8 c30cd43595 chore(craft): bump sandbox default image to v0.1.52 (#11761) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-04 23:08:12 +00:00
roshanandClaude Opus 4.8 af56fb665c fix(craft): set install.sh SANDBOX_BACKEND by image tag (#11757) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-04 22:19:11 +00:00
acaprauandWenxi 61fdc9bdd1 feat(craft): Docker compose proxy path phase 4 (#11513) 
Co-authored-by: Wenxi <wenxi@onyx.app>
 2026-06-04 21:44:26 +00:00
Berat Erkan ElçelikBerat Erkan ElcelikClaude Opus 4.8
 		a54b38c0e0 feat(admin): add HIDE_QUERY_HISTORY_FROM_ADMIN_PANEL env var (#11579) 
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-04 21:02:48 +00:00
WenxiandClaude Opus 4.8 f4d837f612 refactor(craft): remove vestigial backend-image template mechanism (#11751) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-04 20:46:22 +00:00
WenxiandClaude Opus 4.8 690a406e0c refactor(craft): move sandbox image build context to sandbox/image, skills to onyx/skills/builtin (#11748) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-04 20:16:35 +00:00
roshanandClaude Opus 4.8 35504227c0 fix(craft): tolerate unknown SANDBOX_BACKEND values instead of crashing (#11746) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-04 19:50:37 +00:00
Wenxi 6e368f6638 chore(craft): bump sandbox default image to v0.1.51 (#11710) 2026-06-04 02:37:12 +00:00
Jamison LahmanandClaude Opus 4.8 084e94bcb4 test(web): rewrite MCP e2e tests with the page object model (#11608) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-03 20:08:04 +00:00
Jamison LahmanandClaude Opus 4.8 033938f78f feat(ci): consume ECR pull-through cache for CI base images (#11600) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-02 21:24:46 +00:00
Wenxi 47f6a71094 chore(craft): bump sandbox image to v0.1.50 (#11587) 2026-06-01 18:14:53 +00:00
WenxiandClaude Opus 4.7 06bcd26fb5 chore(craft): drop dead build configs and trim comments (#11543) 
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-29 19:57:15 +00:00
acaprau 3529e29e98 feat(ods): Per-worktree docker compose isolation with dynamic port allocation (#11337) 2026-05-28 01:54:22 +00:00
roshan d9b030b055 feat(craft): OPENCODE SERVE FRAMEMOGS OPENCODE ACP (#11408) 2026-05-28 00:59:46 +00:00
roshanandClaude Opus 4.7 28f758a334 feat(craft): port DockerSandboxManager to opencode-serve transport (#11402) 
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-27 23:34:04 +00:00
Amanda HattawayandJamison Lahman 97da673fa1 fix(smtp): allow unauthenticated SMTP relays without credentials (#10931) 
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
 2026-05-27 18:39:53 +00:00
roshanandClaude Opus 4.7 afb55e95b0 fix(install): guard DOCKER_SUDO[@] expansion for bash 3.2 (#11424) 
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-27 18:26:01 +00:00
Jamison LahmanandClaude Opus 4.7 c8f17c249b chore(deploy): replace bespoke nginx healthcheck in init-letsencrypt.sh (#11382) 
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-26 20:32:56 +00:00
Jamison LahmanandClaude Opus 4.7 c2be1e18a5 fix(install): drop sg dependency, use sudo for docker commands (#11326) 
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-26 16:53:59 +00:00
roshan 1caaede94c refactor(craft): nuke LocalSandboxManager, make kind the canonical Craft dev path (#11285) 2026-05-22 20:44:10 +00:00
Psyray 44ce6146c6 fix(docker): typo in the nginx conf name in no-letsencrypt compose file (#11236) 2026-05-21 03:56:48 +00:00
Jamison LahmanandClaude Opus 4.7 8f7b73e536 chore(install): enable shellcheck on install.sh (#11254) 
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-21 01:22:09 +00:00
Jamison LahmanandClaude Opus 4.7 4643b52816 fix(install): default to latest GitHub release for configs and image tag (#11250) 
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-21 00:26:32 +00:00
roshanandClaude Opus 4.7 df405a1252 docs(craft): document docker sandbox backend + check in feature plans (#11232) 
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-20 22:53:15 +00:00
Jamison LahmanandClaude Opus 4.7 c5a2b6864e chore(ci): replace bespoke curl healthchecks with docker compose --wait (#11252) 
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-20 22:36:27 +00:00
Jamison LahmanandClaude Opus 4.7 7d66a6987b chore(deployment): wait for healthy services via docker compose --wait (#11234) 
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-20 21:37:54 +00:00
Jamison LahmanandClaude Opus 4.7 2596acaec0 chore(install): consolidate Docker Compose detection into helper (#11233) 
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-20 18:43:08 +00:00
roshanRaunak BhagatNikolas GarzaClaude Opus 4.7greptile-apps[bot]
 		662b207e8d feat(craft): docker-compose sandbox backend (#11222) 
Co-authored-by: Raunak Bhagat <r@rabh.io>
Co-authored-by: Nikolas Garza <90273783+nmgarza5@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
 2026-05-20 18:16:49 +00:00
acaprau fa8fc678f9 feat(opensearch): Remove Vespa as an option entirely (#11207) 2026-05-20 02:03:45 +00:00
acaprau 844ceb7cea chore(logging, celery): Single source of truth for logging in celery workers (#11190) 2026-05-19 23:22:35 +00:00
acaprau c93f239664 chore(opensearch): Bump docker compose OpenSearch image tag to 3.6.0 (#11117) 2026-05-15 01:51:57 +00:00
Evan Lohn ea337286c4 chore: postgres tcp keepalive (#11116) 2026-05-15 01:29:42 +00:00
Evan Lohn 4f163ee17a fix(mcp): per user multiple header (#10995) 2026-05-11 23:19:06 +00:00
Martin Bergamascoandcubic-dev-ai[bot] 07eaa81298 feat(onyx/backend): add ability to use GCS with Workload identity (#10703) 
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
 2026-05-08 19:35:23 +00:00
Nikolas Garza 3c6ec8bf12 fix(deploy): add opensearch to depends_on so init-letsencrypt brings it up (#10722) 2026-04-30 01:06:06 +00:00
Jamison Lahman 08df1da283 feat(auth): add USER_DIRECTORY_ADMIN_ONLY flag to gate /users (#10399) 2026-04-21 16:24:42 +00:00
roshan e6f7c2b45c feat(install): add GitHub star prompt at end of install script (#9861) 2026-04-02 19:12:10 +00:00
Evan Lohn 4fb175ae65 fix: install early exit (#9818) 2026-04-01 01:09:05 +00:00
SubashMohan 146b5449d2 feat: configurable file upload size and token limits via admin settings (#9232) 2026-03-27 04:23:16 +00:00
Evan Lohn 5186356a26 fix: windows install improvements (#9542) 2026-03-22 20:59:35 +00:00
Evan Lohn fd6a110794 feat: installer invocable from other bash script (#9531) 2026-03-21 01:18:20 +00:00