 Jamison LahmanandClaude Fable 5
|
e31a3336f6
|
chore(deploy): remove unused docker-compose.prod-cloud.yml (#13325)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-22 20:30:03 +00:00 |
|
|
Justin Tahara
|
089b8b0d94
|
feat(file_store): add native Azure Blob Storage backend (#13280)
|
2026-07-22 01:50:53 +00:00 |
|
|
|
4a8c42b789
|
feat: per-user usage + cost tracking — accounting (2/4) [modifying #11887] (#12551)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-20 21:39:37 +00:00 |
|
|
Nikolas Garza
|
e935ecb651
|
feat(auth): per-tenant claims capture, enable IdP enrichment on multi-tenant (#13135)
|
2026-07-20 20:22:34 +00:00 |
|
|
Wenxi
|
d98bdb5a9a
|
feat(connectors): Box connector (indexing + permission sync) (#12862)
|
2026-07-19 16:50:54 +00:00 |
|
|
|
7ca741b96c
|
feat(auth): IdP directory-profile enrichment (modified mirror of #12905) (#12997)
Co-authored-by: Sergei Ivliev <siriusfrk@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-14 23:51:29 +00:00 |
|
|
Bo-Onyx
|
62033a2cd1
|
feat(onyx-wiki): config-driven document push for non-EE deployments (#12860)
|
2026-07-10 21:17:30 +00:00 |
|
|
Evan Lohn
|
51b5037657
|
feat: canvas perm sync (#12729)
|
2026-07-08 23:23:20 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
d557bd3702
|
refactor(model-server): gate DISABLE_MODEL_SERVER in python entrypoint (#12754)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-07 23:48:13 +00:00 |
|
|
SubashMohanandClaude Opus 4.8
|
cba40dab12
|
feat(reindex): reindex-port flow — copy & re-embed live chunks into the new index (#11977)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-07-06 15:46:53 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
afb03a4853
|
chore: replace remaining Danswer branding mentions with Onyx (#12546)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-30 20:53:02 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
dd41d71428
|
feat(web): add strict CSP directives behind WEB_STRICT_CSP_ENABLED (#12475)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-26 21:29:48 +00:00 |
|
|
Wenxi
|
a112b48f08
|
feat(craft): make sandbox timing knobs configurable (#12432)
|
2026-06-25 18:24:32 +00:00 |
|
|
Justin Tahara
|
3535f1ceb0
|
chore(deployment): prune dead env vars from templates & helm values (#12414)
|
2026-06-25 00:46:11 +00:00 |
|
|
Justin Tahara
|
7de36de3a6
|
feat(db): mutual TLS (client certs) for Postgres + shared SSLContext builder (#12294)
|
2026-06-23 00:52:47 +00:00 |
|
|
Justin Tahara
|
713c1ec37d
|
feat(db): support TLS for Postgres with server certificate verification (#12290)
|
2026-06-22 23:22:35 +00:00 |
|
|
acaprau
|
0b827a5cd8
|
chore(install): Rename Vespa to OpenSearch (#12224)
|
2026-06-19 01:31:39 +00:00 |
|
|
Wenxi
|
e86db01e3e
|
feat(craft): align sandbox image tagging with app releases (#12141)
|
2026-06-17 19:20:02 +00:00 |
|
|
Wenxi
|
0bf2e232a2
|
feat(email): archive sent messages via bcc (#12119)
|
2026-06-16 20:46:11 +00:00 |
|
|
|
253e7be79b
|
fix(security): require USER_AUTH_SECRET on non-dev deployments (#12038)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
|
2026-06-12 21:29:15 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
26868070e6
|
fix(security): harden default MinIO/S3 object-storage credentials (#12003)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-12 19:27:18 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
279fbd366f
|
feat(security): consolidate SSRF protection into one admin setting (#11881)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-12 00:47:08 +00:00 |
|
|
Justin Tahara
|
b901cd7677
|
fix(CORS): Never pair wildcard CORS origins with allow_credentials (ENG-4126) (#11948)
|
2026-06-11 19:56:35 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
b960e18eb5
|
fix(web): add frame-ancestors CSP to prevent clickjacking (#11936)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-11 19:18:19 +00:00 |
|
|
acaprau
|
5af845632b
|
fix(craft): pr-craft-compose-integration.yml should use runs-on (#11865)
|
2026-06-10 16:58:09 +00:00 |
|
|
roshanandClaude Opus 4.8
|
a871ef9499
|
feat(craft): make Craft runtime-only; drop the craft backend image (#11877)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-10 01:45:39 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
590f972768
|
feat(security): gate API docs/schema behind ENABLE_PUBLIC_DOCS (default off) (#11837)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-08 23:02:38 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
44e985e581
|
feat(metrics): add optional METRICS_AUTH_TOKEN for the /metrics endpoint (#11813)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-08 17:13:23 +00:00 |
|
|
WenxiandClaude Opus 4.8
|
c30cd43595
|
chore(craft): bump sandbox default image to v0.1.52 (#11761)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-04 23:08:12 +00:00 |
|
|
roshanandClaude Opus 4.8
|
af56fb665c
|
fix(craft): set install.sh SANDBOX_BACKEND by image tag (#11757)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-04 22:19:11 +00:00 |
|
|
acaprauandWenxi
|
61fdc9bdd1
|
feat(craft): Docker compose proxy path phase 4 (#11513)
Co-authored-by: Wenxi <wenxi@onyx.app>
|
2026-06-04 21:44:26 +00:00 |
|
|
|
a54b38c0e0
|
feat(admin): add HIDE_QUERY_HISTORY_FROM_ADMIN_PANEL env var (#11579)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-04 21:02:48 +00:00 |
|
|
WenxiandClaude Opus 4.8
|
f4d837f612
|
refactor(craft): remove vestigial backend-image template mechanism (#11751)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-04 20:46:22 +00:00 |
|
|
WenxiandClaude Opus 4.8
|
690a406e0c
|
refactor(craft): move sandbox image build context to sandbox/image, skills to onyx/skills/builtin (#11748)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-04 20:16:35 +00:00 |
|
|
roshanandClaude Opus 4.8
|
35504227c0
|
fix(craft): tolerate unknown SANDBOX_BACKEND values instead of crashing (#11746)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-04 19:50:37 +00:00 |
|
|
Wenxi
|
6e368f6638
|
chore(craft): bump sandbox default image to v0.1.51 (#11710)
|
2026-06-04 02:37:12 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
084e94bcb4
|
test(web): rewrite MCP e2e tests with the page object model (#11608)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-03 20:08:04 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.8
|
033938f78f
|
feat(ci): consume ECR pull-through cache for CI base images (#11600)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-02 21:24:46 +00:00 |
|
|
Wenxi
|
47f6a71094
|
chore(craft): bump sandbox image to v0.1.50 (#11587)
|
2026-06-01 18:14:53 +00:00 |
|
|
WenxiandClaude Opus 4.7
|
06bcd26fb5
|
chore(craft): drop dead build configs and trim comments (#11543)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
2026-05-29 19:57:15 +00:00 |
|
|
acaprau
|
3529e29e98
|
feat(ods): Per-worktree docker compose isolation with dynamic port allocation (#11337)
|
2026-05-28 01:54:22 +00:00 |
|
|
roshan
|
d9b030b055
|
feat(craft): OPENCODE SERVE FRAMEMOGS OPENCODE ACP (#11408)
|
2026-05-28 00:59:46 +00:00 |
|
|
roshanandClaude Opus 4.7
|
28f758a334
|
feat(craft): port DockerSandboxManager to opencode-serve transport (#11402)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
2026-05-27 23:34:04 +00:00 |
|
|
Amanda HattawayandJamison Lahman
|
97da673fa1
|
fix(smtp): allow unauthenticated SMTP relays without credentials (#10931)
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
|
2026-05-27 18:39:53 +00:00 |
|
|
roshanandClaude Opus 4.7
|
afb55e95b0
|
fix(install): guard DOCKER_SUDO[@] expansion for bash 3.2 (#11424)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
2026-05-27 18:26:01 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.7
|
c8f17c249b
|
chore(deploy): replace bespoke nginx healthcheck in init-letsencrypt.sh (#11382)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-26 20:32:56 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.7
|
c2be1e18a5
|
fix(install): drop sg dependency, use sudo for docker commands (#11326)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-26 16:53:59 +00:00 |
|
|
roshan
|
1caaede94c
|
refactor(craft): nuke LocalSandboxManager, make kind the canonical Craft dev path (#11285)
|
2026-05-22 20:44:10 +00:00 |
|
|
Psyray
|
44ce6146c6
|
fix(docker): typo in the nginx conf name in no-letsencrypt compose file (#11236)
|
2026-05-21 03:56:48 +00:00 |
|
|
Jamison LahmanandClaude Opus 4.7
|
8f7b73e536
|
chore(install): enable shellcheck on install.sh (#11254)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-21 01:22:09 +00:00 |
|