Bo-Onyx
|
8d4409c0ae
|
feat(hooks): drive endpoint SSRF validation from ssrf_protection_level (#13321)
|
2026-07-22 22:49:57 +00:00 |
|
  
|
618b5031bf
|
feat: per-user usage + cost tracking — enforcement (3/4) [edit of #11888] (#13222)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
|
2026-07-22 16:45:57 +00:00 |
|
Evan Lohn
|
1c4af29b1b
|
feat: efficient token tracking (#13275)
|
2026-07-22 01:02:36 +00:00 |
|
Evan Lohn
|
d3a4912a8b
|
fix: canvas start date (#13254)
|
2026-07-21 20:01:54 +00:00 |
|
Justin Tahara
|
e661962efd
|
fix(gdrive): stream folders during group sync to bound memory (#13190)
|
2026-07-20 19:53:43 +00:00 |
|
Jamison Lahman
|
9881c03822
|
chore(fmt): remove order-by-type (#13183)
|
2026-07-20 18:13:25 +00:00 |
|
Jamison Lahman
|
46af76e98a
|
chore(fmt): remove force-single-line (#12996)
|
2026-07-20 17:15:00 +00:00 |
|
Evan Lohn
|
4fe09b28d7
|
fix: sharepoint role names localization (#13167)
|
2026-07-20 05:45:56 +00:00 |
|
Wenxi
|
d98bdb5a9a
|
feat(connectors): Box connector (indexing + permission sync) (#12862)
|
2026-07-19 16:50:54 +00:00 |
|
Evan Lohn
|
a4a5d7b5b5
|
fix: sharepoint group permissions (#13109)
|
2026-07-16 22:07:21 +00:00 |
|
Nikolas Garza
|
9a9ad1e101
|
feat(auth): remove AUTH_TYPE and the AuthType enum, serve multi_tenant (#13029)
|
2026-07-16 21:08:07 +00:00 |
|
Nikolas Garza
|
577342f5cc
|
feat(auth): remove legacy single-provider SSO modes (#13027)
|
2026-07-16 20:08:34 +00:00 |
|
Nikolas Garza
|
fa0287e2d2
|
refactor(auth): gate cloud-only behavior on MULTI_TENANT (#13017)
|
2026-07-16 19:20:35 +00:00 |
|
 Evan LohnandBerat Erkan Elcelik
|
b3b1497d68
|
feat(mcp): group/public access control for MCP servers [Mirror of #12227 for EE edits] (#12972)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
|
2026-07-16 01:00:24 +00:00 |
|
Justin Tahara
|
4ae2921ad6
|
fix(enterprise-settings): stop custom-analytics-script 500 on tenant-less MT requests (#13003)
|
2026-07-14 21:57:25 +00:00 |
|
Justin Tahara
|
01dbc23b4a
|
fix(scim): return 409 not 500 on concurrent duplicate user create (#12966)
|
2026-07-13 22:19:34 +00:00 |
|
Justin Tahara
|
f6bf055321
|
fix(ttl): isolate + batch chat retention cleanup off the primary queue (#12928)
|
2026-07-13 20:06:43 +00:00 |
|
Nikolas Garza
|
0418773e19
|
feat(auth): gate multiple enabled SSO providers at Business tier (#12878)
|
2026-07-10 23:24:21 +00:00 |
|
Evan Lohn
|
05fa6ffd8f
|
fix: public root nodes (#12880)
|
2026-07-10 22:50:34 +00:00 |
|
Bo-Onyx
|
62033a2cd1
|
feat(onyx-wiki): config-driven document push for non-EE deployments (#12860)
|
2026-07-10 21:17:30 +00:00 |
|
Wenxi
|
698d0305fd
|
refactor(ee): share credential_json helper across perm-sync connectors (#12859)
|
2026-07-10 19:01:34 +00:00 |
|
Evan Lohn
|
0677c8c3ca
|
feat: canvas perm sync cleanup (#12798)
|
2026-07-09 00:28:12 +00:00 |
|
Evan Lohn
|
51b5037657
|
feat: canvas perm sync (#12729)
|
2026-07-08 23:23:20 +00:00 |
|
Nikolas Garza
|
d21ddb0519
|
fix: scope Drive domain shares to a domain group instead of instance-public (#12730)
|
2026-07-08 23:00:48 +00:00 |
|
Chris Weaver
|
1c0d6b858f
|
fix(jira): skip deleted groups during group sync (#12669)
|
2026-07-03 01:24:12 +00:00 |
|
Nikolas Garza
|
8f0e4e74dc
|
fix: tenant-scope and invalidate the token-rate-limit existence cache (#12623)
|
2026-07-01 21:35:12 +00:00 |
|
Nikolas Garza
|
2ad66cd791
|
fix: scope cross-tenant permission caches per tenant/instance (#12580)
|
2026-07-01 21:07:00 +00:00 |
|
 
|
656f00d3e0
|
feat: per-user usage + cost tracking — schema + models (1/4) [modifying #11766] (#12550)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-01 20:56:31 +00:00 |
|
 Jamison LahmanandClaude Opus 4.8
|
afb03a4853
|
chore: replace remaining Danswer branding mentions with Onyx (#12546)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-30 20:53:02 +00:00 |
|
Justin Tahara
|
505c93ac3a
|
fix(confluence): pass scoped_token to group sync client (#12559)
|
2026-06-30 19:48:28 +00:00 |
|
 Jamison LahmanandClaude Opus 4.8
|
46e19cc275
|
fix(ee): scope curator group writes to curated groups (#12525)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-30 01:18:45 +00:00 |
|
Nikolas Garza
|
86215ddb6b
|
fix(license): persist expiry-banner dismissal server-side via notifications (#12513)
|
2026-06-29 21:20:52 +00:00 |
|
Justin Tahara
|
c8510194d1
|
fix(scim): accept Entra ID group member removal (path=members + value list) (#12437)
|
2026-06-25 19:04:39 +00:00 |
|
 Evan LohnandClaude Sonnet 4.6
|
2e7e6f50f3
|
feat(hierarchy): add hierarchy node display_name search endpoint (#12411)
Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
|
2026-06-25 18:32:05 +00:00 |
|
 
|
335740bb00
|
chore(deps): bump pyjwt from 2.12.0 to 2.13.0 (#12400)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-24 22:18:53 +00:00 |
|
Evan Lohn
|
3c403941b5
|
fix: hierarchy node cross batch stubs (#12365)
|
2026-06-24 18:55:53 +00:00 |
|
![cubic-dev-ai[bot]](/assets/img/avatar_default.png) 
|
fb912b6c4c
|
fix(ee): unset default SUPER_CLOUD_API_KEY, fail closed when unconfigured (#12363)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
|
2026-06-24 00:02:36 +00:00 |
|
 Jamison LahmanandClaude Opus 4.8
|
978c45e94d
|
feat(audit): emit audit events for impersonation (#12359)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-23 23:50:14 +00:00 |
|
Justin Tahara
|
711377c5ab
|
feat(audit): wire the 3 remaining audit actions (password_reset, user.create, user.group_change) (#12362)
|
2026-06-23 23:47:28 +00:00 |
|
 Jamison LahmanandClaude Opus 4.8
|
2878d8502c
|
feat(tenants): feature-flag the impersonation endpoint, disabled by default (#12354)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-23 22:53:41 +00:00 |
|
Danelegend
|
fb4d0fcd30
|
feat(craft): Seed external apps for tenants in cloud (#12288)
|
2026-06-23 22:13:54 +00:00 |
|
Nikolas Garza
|
5bfa1b603c
|
feat(billing): redis cache for trial + billing info lookups (#10521)
|
2026-06-23 20:45:31 +00:00 |
|
Jamison Lahman
|
2ffe82730a
|
refactor(comments): replace mentions of mypy with app-agnostic comment (#12267)
|
2026-06-22 19:14:12 +00:00 |
|
Justin Tahara
|
a63856327a
|
Revert "feat(canvas): perm syncing(4)" (#12231)
|
2026-06-19 18:40:29 +00:00 |
|
 Ben WuandClaude Opus 4.8
|
2e94a07049
|
feat(canvas): perm syncing(4) (#10443)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-19 00:48:26 +00:00 |
|
Nikolas Garza
|
a6152aecf8
|
feat(agent-sharing): editor knowledge-attach guard - 4/7 (#12024)
|
2026-06-18 16:29:48 +00:00 |
|
 SubashMohanandClaude Opus 4.8
|
a01015a922
|
feat(auth): add mobile SSO bridge with PKCE one-time code exchange (#12150)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-18 11:46:20 +00:00 |
|
Nikolas Garza
|
4a378e3405
|
feat(agent-sharing): ownership and transfer - 3/7 (#12023)
|
2026-06-18 01:58:10 +00:00 |
|
Wenxi
|
6074037022
|
fix(slack): scope permission sync channel fetches (#12134)
|
2026-06-17 23:10:34 +00:00 |
|
 Jamison LahmanandClaude Opus 4.8
|
738404e779
|
fix(tenant): skip tenant resolution for /health and /metrics probes (#12168)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-17 23:09:54 +00:00 |
|