 Jamison LahmanandClaude Fable 5
|
e31a3336f6
|
chore(deploy): remove unused docker-compose.prod-cloud.yml (#13325)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-22 20:30:03 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
a4882d0610
|
feat(userfile-port): scope-polymorphic PortAttempt + helpers (#12766)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-07-22 11:46:42 +00:00 |
|
|
Justin Tahara
|
089b8b0d94
|
feat(file_store): add native Azure Blob Storage backend (#13280)
|
2026-07-22 01:50:53 +00:00 |
|
|
|
bf9b608798
|
feat(helm): distroless model-server chart — nonroot + 0.7.0 (#12788)
Co-authored-by: t <t@t.co>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-21 23:05:36 +00:00 |
|
|
|
4a8c42b789
|
feat: per-user usage + cost tracking — accounting (2/4) [modifying #11887] (#12551)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-20 21:39:37 +00:00 |
|
|
Nikolas Garza
|
e935ecb651
|
feat(auth): per-tenant claims capture, enable IdP enrichment on multi-tenant (#13135)
|
2026-07-20 20:22:34 +00:00 |
|
|
Wenxi
|
d98bdb5a9a
|
feat(connectors): Box connector (indexing + permission sync) (#12862)
|
2026-07-19 16:50:54 +00:00 |
|
|
|
148565b74a
|
feat(metrics): MCP server/client metrics + DB-snapshot connector state gauges [mirror of #12904 for edits] (#13086)
Co-authored-by: Sergei Ivliev <siriusfrk@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-17 21:38:23 +00:00 |
|
|
|
7ca741b96c
|
feat(auth): IdP directory-profile enrichment (modified mirror of #12905) (#12997)
Co-authored-by: Sergei Ivliev <siriusfrk@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-14 23:51:29 +00:00 |
|
|
Wenxi
|
6634bca095
|
fix(helm): increase sandbox proxy memory allocation (#13008)
|
2026-07-14 23:33:14 +00:00 |
|
|
Justin Tahara
|
f81a261862
|
fix(celery): model-server request timeouts + wire the orphaned hierarchy queue (#12964)
|
2026-07-13 22:14:03 +00:00 |
|
|
Nikolas Garza
|
281dce0f6a
|
feat(indexing): resume indexing on graceful worker shutdown instead of failing (#12954)
|
2026-07-13 22:03:42 +00:00 |
|
|
Justin Tahara
|
f6bf055321
|
fix(ttl): isolate + batch chat retention cleanup off the primary queue (#12928)
|
2026-07-13 20:06:43 +00:00 |
|
|
Bo-Onyx
|
62033a2cd1
|
feat(onyx-wiki): config-driven document push for non-EE deployments (#12860)
|
2026-07-10 21:17:30 +00:00 |
|
|
Evan Lohn
|
51b5037657
|
feat: canvas perm sync (#12729)
|
2026-07-08 23:23:20 +00:00 |
|
|
Nikolas Garza
|
aa1756191d
|
feat(auth): SAML providers driven by sso_provider rows (#12758)
|
2026-07-08 19:38:02 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
c7ff13bbbb
|
fix(model-server): merge custom CA roots in the entrypoint for distroless (#12761)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-08 17:34:30 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
d557bd3702
|
refactor(model-server): gate DISABLE_MODEL_SERVER in python entrypoint (#12754)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-07 23:48:13 +00:00 |
|
|
Justin Tahara
|
86c6667425
|
fix(helm): support external CNPG operators via postgresqlOperator.enabled (#12667)
|
2026-07-06 20:49:55 +00:00 |
|
|
Justin Tahara
|
01265a22ba
|
fix(helm): v4.3 chart deploy blockers — sandbox-proxy IPv6 netpol fail-closed + duplicate server_tokens nginx crash-loop (#12706)
|
2026-07-06 19:50:37 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
cba40dab12
|
feat(reindex): reindex-port flow — copy & re-embed live chunks into the new index (#11977)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-07-06 15:46:53 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
afb03a4853
|
chore: replace remaining Danswer branding mentions with Onyx (#12546)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-30 20:53:02 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
dd41d71428
|
feat(web): add strict CSP directives behind WEB_STRICT_CSP_ENABLED (#12475)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-26 21:29:48 +00:00 |
|
|
Wenxi
|
537e2d93a2
|
chore(craft): clean up old plans and add egress proxy docs (#12485)
|
2026-06-26 21:15:31 +00:00 |
|
|
WenxiandClaude Opus 4.8
|
87f2e9670e
|
chore(craft): real k8s integration tests (#12221)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-26 20:22:43 +00:00 |
|
|
Wenxi
|
1223ca3a00
|
ci(craft): run k8s integration tests against helm-installed onyx (#12470)
|
2026-06-26 19:37:21 +00:00 |
|
|
Justin Tahara
|
b3ea53311b
|
feat(helm): configurable api-server worker/threadpool concurrency + load-test sweep (#12438)
|
2026-06-26 01:23:02 +00:00 |
|
|
Wenxi
|
a112b48f08
|
feat(craft): make sandbox timing knobs configurable (#12432)
|
2026-06-25 18:24:32 +00:00 |
|
|
Justin Tahara
|
3535f1ceb0
|
chore(deployment): prune dead env vars from templates & helm values (#12414)
|
2026-06-25 00:46:11 +00:00 |
|
|
roshanandClaude Opus 4.8
|
4e3fe1670a
|
feat(terraform): make Craft sandbox node group configurable and autoscaling-ready (#12399)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-24 22:54:31 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
f3fc2b19d1
|
chore(nginx): disable server_tokens to hide nginx version (#12401)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-24 21:39:50 +00:00 |
|
|
roshanandClaude Opus 4.8
|
bccd9a792c
|
feat(craft): add sandbox-pod egress NetworkPolicy (#12334)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-23 22:57:50 +00:00 |
|
|
Justin Tahara
|
336a3594a4
|
fix(helm): drop privileged from model-server and celery default securityContext (#12337)
|
2026-06-23 19:54:15 +00:00 |
|
|
roshanandClaude Opus 4.8
|
a4ab88fcbc
|
fix(craft): add egress NetworkPolicy on the sandbox proxy (block IMDS/link-local) (#12229)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-23 06:17:37 +00:00 |
|
|
Justin Tahara
|
7de36de3a6
|
feat(db): mutual TLS (client certs) for Postgres + shared SSLContext builder (#12294)
|
2026-06-23 00:52:47 +00:00 |
|
|
Justin Tahara
|
713c1ec37d
|
feat(db): support TLS for Postgres with server certificate verification (#12290)
|
2026-06-22 23:22:35 +00:00 |
|
|
Wenxi
|
bc903f4ee7
|
feat(helm): allow disabling API startup migrations (#12268)
|
2026-06-22 18:24:11 +00:00 |
|
|
roshanandClaude Opus 4.8
|
4299c92af2
|
fix(craft): set readOnlyRootFilesystem on the sandbox egress proxy (#12218)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-19 01:34:03 +00:00 |
|
|
acaprau
|
0b827a5cd8
|
chore(install): Rename Vespa to OpenSearch (#12224)
|
2026-06-19 01:31:39 +00:00 |
|
|
roshanandClaude Opus 4.8
|
62f14fd8f6
|
fix(craft): let celery-worker-heavy create sandbox snapshots (NetworkPolicy + push key) (#12173)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-18 01:13:10 +00:00 |
|
|
Wenxi
|
e86db01e3e
|
feat(craft): align sandbox image tagging with app releases (#12141)
|
2026-06-17 19:20:02 +00:00 |
|
|
Wenxi
|
0bf2e232a2
|
feat(email): archive sent messages via bcc (#12119)
|
2026-06-16 20:46:11 +00:00 |
|
|
Wenxi
|
440ec956a9
|
feat: allow sandbox agents to write tmp (#12125)
|
2026-06-16 20:24:45 +00:00 |
|
|
roshanandClaude Fable 5
|
4661e0330c
|
chore(craft): kind image refresh tooling for local dev (#12034)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-06-13 00:14:18 +00:00 |
|
|
|
253e7be79b
|
fix(security): require USER_AUTH_SECRET on non-dev deployments (#12038)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
|
2026-06-12 21:29:15 +00:00 |
|
|
roshanandClaude Fable 5
|
09d4784726
|
fix(craft): set ephemeral-storage requests/limits on sandbox pods (#11921)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-06-12 20:14:41 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
26868070e6
|
fix(security): harden default MinIO/S3 object-storage credentials (#12003)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-12 19:27:18 +00:00 |
|
|
Nikolas Garza
|
cfd3c15c68
|
fix(indexing): cap spawned worker memory + Drive extracted-text size (#11969)
|
2026-06-12 02:35:03 +00:00 |
|
|
Wenxi
|
3df10921df
|
fix(craft): persist opencode chat history (#11922)
|
2026-06-12 01:25:55 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
279fbd366f
|
feat(security): consolidate SSRF protection into one admin setting (#11881)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-12 00:47:08 +00:00 |
|