 Justin Tahara
|
955b039ed0
|
fix(perm-sync): stop duplicate gdrive group-sync crawls from stacking to OOM (#13703)
|
2026-08-07 19:48:41 +00:00 |
|
|
Evan Lohn
|
fc3652db76
|
test: airgapped deployments (#13733)
|
2026-08-05 00:42:12 +00:00 |
|
|
roshan
|
f548bc47d4
|
feat(gateway): serve the OpenAI Responses API natively for true OpenAI models (#13724)
|
2026-08-04 20:07:52 +00:00 |
|
|
roshan
|
4b9695ba55
|
feat(gateway): native Anthropic passthrough for /v1/messages (#13697)
|
2026-08-04 19:29:04 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
627e24600b
|
fix(indexing): cap summarization LLM call time to stop worker wedge (#13613)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-08-04 13:37:03 +00:00 |
|
|
Justin Tahara
|
89f7475046
|
docs(env): drop the tenant-sharding block from the compose template (#13716)
|
2026-08-03 23:29:58 +00:00 |
|
|
Justin Tahara
|
9cccdce22d
|
feat(db): place new tenants on a configured shard (#13661)
|
2026-08-03 20:53:24 +00:00 |
|
|
Jamison LahmanandClaude Fable 5
|
1612fb7309
|
fix(install): persist ~/.local/bin on PATH for non-root installs (#13651)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-31 15:24:45 +00:00 |
|
|
Jamison LahmanandClaude Opus 5
|
73616a28de
|
chore(install): make install.sh a bootstrap for onyx-cli deploy (#13615)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
|
2026-07-30 21:36:08 +00:00 |
|
|
Jamison LahmanandClaude Opus 5
|
40781d046e
|
feat(cli): add --dev to onyx-cli deploy install (#13618)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
|
2026-07-30 19:08:43 +00:00 |
|
|
DanelegendandClaude Opus 5
|
bb5bbc2b40
|
feat(craft): pre-pull the sandbox image for docker-compose deployments (#13592)
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
|
2026-07-30 18:30:27 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
e98c09e7c5
|
feat(search): temporary env to force Search-UI document-set scope (#13491)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-30 06:07:01 +00:00 |
|
|
|
19860ae7be
|
feat(cli): teach onyx-cli deploy to manage prod compose deployments (#13594)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
|
2026-07-29 22:48:54 +00:00 |
|
|
Jamison LahmanandClaude Fable 5
|
3aee5a0877
|
feat(cli): onyx-cli deploy — replace install.sh/install.ps1 with a Go installer (#13522)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-29 19:12:32 +00:00 |
|
|
Jamison LahmanandClaude Fable 5
|
9fd104598b
|
feat(ods): sync onyx-cli's embedded deployment files via generate-compose (#13524)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-28 22:27:02 +00:00 |
|
|
Justin Tahara
|
53bd9bb9f8
|
feat(db): tenant -> database routing seam for multi-shard multitenancy (#13368)
|
2026-07-28 20:15:47 +00:00 |
|
|
|
5ba7e243fc
|
chore(deployment): generate docker compose variants from a shared template (#13487)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: onyx-cherry-pick[bot] <285052878+onyx-cherry-pick[bot]@users.noreply.github.com>
|
2026-07-28 17:34:30 +00:00 |
|
|
Nikolas Garza
|
e41db836e4
|
chore(deployment): stop advertising env-based SSO setup in templates and installers (#13292)
|
2026-07-27 22:17:34 +00:00 |
|
|
Jamison LahmanandClaude Opus 5
|
05f9305962
|
chore(build): publish -dev tags for the web, model-server, and sandbox images (#13478)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
|
2026-07-27 21:08:33 +00:00 |
|
|
Jamison LahmanandClaude Fable 5
|
e52d68d0ab
|
fix(build): remove dev tools from the default backend image, publish a -dev variant (#13441)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-27 18:05:41 +00:00 |
|
|
roshanandClaude Fable 5
|
2164093ae3
|
refactor: consolidate API routing on ONYX_SERVER_URL (#13375)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-23 23:13:18 +00:00 |
|
|
Jamison LahmanandClaude Fable 5
|
e31a3336f6
|
chore(deploy): remove unused docker-compose.prod-cloud.yml (#13325)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-22 20:30:03 +00:00 |
|
|
Justin Tahara
|
089b8b0d94
|
feat(file_store): add native Azure Blob Storage backend (#13280)
|
2026-07-22 01:50:53 +00:00 |
|
|
|
4a8c42b789
|
feat: per-user usage + cost tracking — accounting (2/4) [modifying #11887] (#12551)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-20 21:39:37 +00:00 |
|
|
Nikolas Garza
|
e935ecb651
|
feat(auth): per-tenant claims capture, enable IdP enrichment on multi-tenant (#13135)
|
2026-07-20 20:22:34 +00:00 |
|
|
Wenxi
|
d98bdb5a9a
|
feat(connectors): Box connector (indexing + permission sync) (#12862)
|
2026-07-19 16:50:54 +00:00 |
|
|
|
7ca741b96c
|
feat(auth): IdP directory-profile enrichment (modified mirror of #12905) (#12997)
Co-authored-by: Sergei Ivliev <siriusfrk@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-14 23:51:29 +00:00 |
|
|
Bo-Onyx
|
62033a2cd1
|
feat(onyx-wiki): config-driven document push for non-EE deployments (#12860)
|
2026-07-10 21:17:30 +00:00 |
|
|
Evan Lohn
|
51b5037657
|
feat: canvas perm sync (#12729)
|
2026-07-08 23:23:20 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
d557bd3702
|
refactor(model-server): gate DISABLE_MODEL_SERVER in python entrypoint (#12754)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-07 23:48:13 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
cba40dab12
|
feat(reindex): reindex-port flow — copy & re-embed live chunks into the new index (#11977)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-07-06 15:46:53 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
afb03a4853
|
chore: replace remaining Danswer branding mentions with Onyx (#12546)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-30 20:53:02 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
dd41d71428
|
feat(web): add strict CSP directives behind WEB_STRICT_CSP_ENABLED (#12475)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-26 21:29:48 +00:00 |
|
|
Wenxi
|
a112b48f08
|
feat(craft): make sandbox timing knobs configurable (#12432)
|
2026-06-25 18:24:32 +00:00 |
|
|
Justin Tahara
|
3535f1ceb0
|
chore(deployment): prune dead env vars from templates & helm values (#12414)
|
2026-06-25 00:46:11 +00:00 |
|
|
Justin Tahara
|
7de36de3a6
|
feat(db): mutual TLS (client certs) for Postgres + shared SSLContext builder (#12294)
|
2026-06-23 00:52:47 +00:00 |
|
|
Justin Tahara
|
713c1ec37d
|
feat(db): support TLS for Postgres with server certificate verification (#12290)
|
2026-06-22 23:22:35 +00:00 |
|
|
acaprau
|
0b827a5cd8
|
chore(install): Rename Vespa to OpenSearch (#12224)
|
2026-06-19 01:31:39 +00:00 |
|
|
Wenxi
|
e86db01e3e
|
feat(craft): align sandbox image tagging with app releases (#12141)
|
2026-06-17 19:20:02 +00:00 |
|
|
Wenxi
|
0bf2e232a2
|
feat(email): archive sent messages via bcc (#12119)
|
2026-06-16 20:46:11 +00:00 |
|
|
|
253e7be79b
|
fix(security): require USER_AUTH_SECRET on non-dev deployments (#12038)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
|
2026-06-12 21:29:15 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
26868070e6
|
fix(security): harden default MinIO/S3 object-storage credentials (#12003)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-12 19:27:18 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
279fbd366f
|
feat(security): consolidate SSRF protection into one admin setting (#11881)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-12 00:47:08 +00:00 |
|
|
Justin Tahara
|
b901cd7677
|
fix(CORS): Never pair wildcard CORS origins with allow_credentials (ENG-4126) (#11948)
|
2026-06-11 19:56:35 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
b960e18eb5
|
fix(web): add frame-ancestors CSP to prevent clickjacking (#11936)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-11 19:18:19 +00:00 |
|
|
acaprau
|
5af845632b
|
fix(craft): pr-craft-compose-integration.yml should use runs-on (#11865)
|
2026-06-10 16:58:09 +00:00 |
|
|
roshanandClaude Opus 4.8
|
a871ef9499
|
feat(craft): make Craft runtime-only; drop the craft backend image (#11877)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-10 01:45:39 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
590f972768
|
feat(security): gate API docs/schema behind ENABLE_PUBLIC_DOCS (default off) (#11837)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-08 23:02:38 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
44e985e581
|
feat(metrics): add optional METRICS_AUTH_TOKEN for the /metrics endpoint (#11813)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-08 17:13:23 +00:00 |
|
|
WenxiandClaude Opus 4.8
|
c30cd43595
|
chore(craft): bump sandbox default image to v0.1.52 (#11761)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-04 23:08:12 +00:00 |
|