 Nikolas Garza
|
c056a20b67
|
chore(deployment): expose the SharePoint file size cap in the templates (#15144)
|
2026-09-25 20:44:36 +00:00 |
|
|
Nikolas Garza
|
df0f68b427
|
feat(config): env-overridable permission sync and document sync lock TTLs (#15063)
|
2026-09-25 18:13:19 +00:00 |
|
|
Nikolas Garza
|
f61e05131f
|
fix(enterprise-settings): remove the Hide Onyx Branding toggle (#15112)
|
2026-09-24 21:20:41 +00:00 |
|
|
Justin Tahara
|
695d024fd9
|
fix(tools): bound open_url response bodies and block IPv6 IMDS (#14990)
|
2026-09-23 21:52:39 +00:00 |
|
|
Nikolas Garza
|
16c43a9032
|
feat(connectors): index files posted in Teams channels behind an attachments option (#14851)
|
2026-09-18 17:55:35 +00:00 |
|
|
Justin Tahara
|
92aee9f4b4
|
fix(connectors): cap downloads and protect temporary credentials (#14821)
|
2026-09-16 22:57:14 +00:00 |
|
|
Nikolas Garza
|
a23baa4355
|
feat(connectors): sync Outlook permissions from mailbox owners and event attendees (#14752)
|
2026-09-16 17:16:59 +00:00 |
|
|
Nikolas Garza
|
adbdd89fed
|
feat(connectors): index Outlook attachments and accept certificate credentials (#14736)
|
2026-09-16 04:06:07 +00:00 |
|
|
Nikolas Garza
|
0fed336c6b
|
fix(metrics): serve stale data while a collection stalls, add Redis socket deadlines (#14643)
|
2026-09-14 17:47:24 +00:00 |
|
|
SubashMohanandClaude Fable 5
|
18bd128172
|
feat(zoom): index Cloud Recording transcripts from configured meetings (#14482)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-09-10 09:52:36 +00:00 |
|
|
Jamison LahmanandClaude Opus 5
|
e6f17949ad
|
fix(deployment): pin the code-interpreter image (#14553)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
|
2026-09-08 19:47:55 +00:00 |
|
|
roshanandgreptile-apps[bot]
|
26a08c2a90
|
fix(mcp): limit API request timeout to tool calls (#14206)
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
|
2026-08-24 22:30:34 +00:00 |
|
|
Nikolas Garza
|
62c269aac8
|
feat(auth): optional audience and issuer enforcement for JWT auth (#14151)
|
2026-08-21 23:44:26 +00:00 |
|
|
Evan Lohn
|
fff51922ce
|
feat: add Salesforce OAuth credential lifecycle (#13985)
|
2026-08-17 23:28:46 +00:00 |
|
|
Justin Tahara
|
955b039ed0
|
fix(perm-sync): stop duplicate gdrive group-sync crawls from stacking to OOM (#13703)
|
2026-08-07 19:48:41 +00:00 |
|
|
roshan
|
f548bc47d4
|
feat(gateway): serve the OpenAI Responses API natively for true OpenAI models (#13724)
|
2026-08-04 20:07:52 +00:00 |
|
|
roshan
|
4b9695ba55
|
feat(gateway): native Anthropic passthrough for /v1/messages (#13697)
|
2026-08-04 19:29:04 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
627e24600b
|
fix(indexing): cap summarization LLM call time to stop worker wedge (#13613)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-08-04 13:37:03 +00:00 |
|
|
Justin Tahara
|
89f7475046
|
docs(env): drop the tenant-sharding block from the compose template (#13716)
|
2026-08-03 23:29:58 +00:00 |
|
|
Justin Tahara
|
9cccdce22d
|
feat(db): place new tenants on a configured shard (#13661)
|
2026-08-03 20:53:24 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
e98c09e7c5
|
feat(search): temporary env to force Search-UI document-set scope (#13491)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-30 06:07:01 +00:00 |
|
|
Jamison LahmanandClaude Fable 5
|
3aee5a0877
|
feat(cli): onyx-cli deploy — replace install.sh/install.ps1 with a Go installer (#13522)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-29 19:12:32 +00:00 |
|
|
Justin Tahara
|
53bd9bb9f8
|
feat(db): tenant -> database routing seam for multi-shard multitenancy (#13368)
|
2026-07-28 20:15:47 +00:00 |
|
|
Nikolas Garza
|
e41db836e4
|
chore(deployment): stop advertising env-based SSO setup in templates and installers (#13292)
|
2026-07-27 22:17:34 +00:00 |
|
|
Jamison LahmanandClaude Opus 5
|
05f9305962
|
chore(build): publish -dev tags for the web, model-server, and sandbox images (#13478)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
|
2026-07-27 21:08:33 +00:00 |
|
|
Jamison LahmanandClaude Fable 5
|
e52d68d0ab
|
fix(build): remove dev tools from the default backend image, publish a -dev variant (#13441)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-27 18:05:41 +00:00 |
|
|
roshanandClaude Fable 5
|
2164093ae3
|
refactor: consolidate API routing on ONYX_SERVER_URL (#13375)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-23 23:13:18 +00:00 |
|
|
Justin Tahara
|
089b8b0d94
|
feat(file_store): add native Azure Blob Storage backend (#13280)
|
2026-07-22 01:50:53 +00:00 |
|
|
|
4a8c42b789
|
feat: per-user usage + cost tracking — accounting (2/4) [modifying #11887] (#12551)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-20 21:39:37 +00:00 |
|
|
Nikolas Garza
|
e935ecb651
|
feat(auth): per-tenant claims capture, enable IdP enrichment on multi-tenant (#13135)
|
2026-07-20 20:22:34 +00:00 |
|
|
Wenxi
|
d98bdb5a9a
|
feat(connectors): Box connector (indexing + permission sync) (#12862)
|
2026-07-19 16:50:54 +00:00 |
|
|
|
7ca741b96c
|
feat(auth): IdP directory-profile enrichment (modified mirror of #12905) (#12997)
Co-authored-by: Sergei Ivliev <siriusfrk@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-14 23:51:29 +00:00 |
|
|
Bo-Onyx
|
62033a2cd1
|
feat(onyx-wiki): config-driven document push for non-EE deployments (#12860)
|
2026-07-10 21:17:30 +00:00 |
|
|
Evan Lohn
|
51b5037657
|
feat: canvas perm sync (#12729)
|
2026-07-08 23:23:20 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
cba40dab12
|
feat(reindex): reindex-port flow — copy & re-embed live chunks into the new index (#11977)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-07-06 15:46:53 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
dd41d71428
|
feat(web): add strict CSP directives behind WEB_STRICT_CSP_ENABLED (#12475)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-26 21:29:48 +00:00 |
|
|
Wenxi
|
a112b48f08
|
feat(craft): make sandbox timing knobs configurable (#12432)
|
2026-06-25 18:24:32 +00:00 |
|
|
Justin Tahara
|
3535f1ceb0
|
chore(deployment): prune dead env vars from templates & helm values (#12414)
|
2026-06-25 00:46:11 +00:00 |
|
|
Justin Tahara
|
7de36de3a6
|
feat(db): mutual TLS (client certs) for Postgres + shared SSLContext builder (#12294)
|
2026-06-23 00:52:47 +00:00 |
|
|
Justin Tahara
|
713c1ec37d
|
feat(db): support TLS for Postgres with server certificate verification (#12290)
|
2026-06-22 23:22:35 +00:00 |
|
|
Wenxi
|
e86db01e3e
|
feat(craft): align sandbox image tagging with app releases (#12141)
|
2026-06-17 19:20:02 +00:00 |
|
|
Wenxi
|
0bf2e232a2
|
feat(email): archive sent messages via bcc (#12119)
|
2026-06-16 20:46:11 +00:00 |
|
|
|
253e7be79b
|
fix(security): require USER_AUTH_SECRET on non-dev deployments (#12038)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
|
2026-06-12 21:29:15 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
26868070e6
|
fix(security): harden default MinIO/S3 object-storage credentials (#12003)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-12 19:27:18 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
279fbd366f
|
feat(security): consolidate SSRF protection into one admin setting (#11881)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-12 00:47:08 +00:00 |
|
|
Justin Tahara
|
b901cd7677
|
fix(CORS): Never pair wildcard CORS origins with allow_credentials (ENG-4126) (#11948)
|
2026-06-11 19:56:35 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
b960e18eb5
|
fix(web): add frame-ancestors CSP to prevent clickjacking (#11936)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-11 19:18:19 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
590f972768
|
feat(security): gate API docs/schema behind ENABLE_PUBLIC_DOCS (default off) (#11837)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-08 23:02:38 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
44e985e581
|
feat(metrics): add optional METRICS_AUTH_TOKEN for the /metrics endpoint (#11813)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-08 17:13:23 +00:00 |
|
|
WenxiandClaude Opus 4.8
|
c30cd43595
|
chore(craft): bump sandbox default image to v0.1.52 (#11761)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-04 23:08:12 +00:00 |
|