Commit Graph
58 Commits
Author SHA1 Message Date
Justin Tahara 089b8b0d94 feat(file_store): add native Azure Blob Storage backend (#13280) 2026-07-22 01:50:53 +00:00
4a8c42b789 feat: per-user usage + cost tracking — accounting (2/4) [modifying #11887] (#12551)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-20 21:39:37 +00:00
Nikolas Garza e935ecb651 feat(auth): per-tenant claims capture, enable IdP enrichment on multi-tenant (#13135) 2026-07-20 20:22:34 +00:00
Wenxi d98bdb5a9a feat(connectors): Box connector (indexing + permission sync) (#12862) 2026-07-19 16:50:54 +00:00
7ca741b96c feat(auth): IdP directory-profile enrichment (modified mirror of #12905) (#12997)
Co-authored-by: Sergei Ivliev <siriusfrk@gmail.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-14 23:51:29 +00:00
Bo-Onyx 62033a2cd1 feat(onyx-wiki): config-driven document push for non-EE deployments (#12860) 2026-07-10 21:17:30 +00:00
Evan Lohn 51b5037657 feat: canvas perm sync (#12729) 2026-07-08 23:23:20 +00:00
SubashMohanandClaude Opus 4.8 cba40dab12 feat(reindex): reindex-port flow — copy & re-embed live chunks into the new index (#11977)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-06 15:46:53 +00:00
Jamison LahmanandClaude Opus 4.8 dd41d71428 feat(web): add strict CSP directives behind WEB_STRICT_CSP_ENABLED (#12475)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-26 21:29:48 +00:00
Wenxi a112b48f08 feat(craft): make sandbox timing knobs configurable (#12432) 2026-06-25 18:24:32 +00:00
Justin Tahara 3535f1ceb0 chore(deployment): prune dead env vars from templates & helm values (#12414) 2026-06-25 00:46:11 +00:00
Justin Tahara 7de36de3a6 feat(db): mutual TLS (client certs) for Postgres + shared SSLContext builder (#12294) 2026-06-23 00:52:47 +00:00
Justin Tahara 713c1ec37d feat(db): support TLS for Postgres with server certificate verification (#12290) 2026-06-22 23:22:35 +00:00
Wenxi e86db01e3e feat(craft): align sandbox image tagging with app releases (#12141) 2026-06-17 19:20:02 +00:00
Wenxi 0bf2e232a2 feat(email): archive sent messages via bcc (#12119) 2026-06-16 20:46:11 +00:00
253e7be79b fix(security): require USER_AUTH_SECRET on non-dev deployments (#12038)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-06-12 21:29:15 +00:00
Jamison LahmanandClaude Opus 4.8 26868070e6 fix(security): harden default MinIO/S3 object-storage credentials (#12003)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-12 19:27:18 +00:00
Jamison LahmanandClaude Opus 4.8 279fbd366f feat(security): consolidate SSRF protection into one admin setting (#11881)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-12 00:47:08 +00:00
Justin Tahara b901cd7677 fix(CORS): Never pair wildcard CORS origins with allow_credentials (ENG-4126) (#11948) 2026-06-11 19:56:35 +00:00
Jamison LahmanandClaude Opus 4.8 b960e18eb5 fix(web): add frame-ancestors CSP to prevent clickjacking (#11936)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-11 19:18:19 +00:00
Jamison LahmanandClaude Opus 4.8 590f972768 feat(security): gate API docs/schema behind ENABLE_PUBLIC_DOCS (default off) (#11837)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-08 23:02:38 +00:00
Jamison LahmanandClaude Opus 4.8 44e985e581 feat(metrics): add optional METRICS_AUTH_TOKEN for the /metrics endpoint (#11813)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-08 17:13:23 +00:00
WenxiandClaude Opus 4.8 c30cd43595 chore(craft): bump sandbox default image to v0.1.52 (#11761)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-04 23:08:12 +00:00
roshanandClaude Opus 4.8 af56fb665c fix(craft): set install.sh SANDBOX_BACKEND by image tag (#11757)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-04 22:19:11 +00:00
a54b38c0e0 feat(admin): add HIDE_QUERY_HISTORY_FROM_ADMIN_PANEL env var (#11579)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-04 21:02:48 +00:00
Wenxi 6e368f6638 chore(craft): bump sandbox default image to v0.1.51 (#11710) 2026-06-04 02:37:12 +00:00
Wenxi 47f6a71094 chore(craft): bump sandbox image to v0.1.50 (#11587) 2026-06-01 18:14:53 +00:00
Amanda HattawayandJamison Lahman 97da673fa1 fix(smtp): allow unauthenticated SMTP relays without credentials (#10931)
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
2026-05-27 18:39:53 +00:00
roshanandClaude Opus 4.7 df405a1252 docs(craft): document docker sandbox backend + check in feature plans (#11232)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-20 22:53:15 +00:00
662b207e8d feat(craft): docker-compose sandbox backend (#11222)
Co-authored-by: Raunak Bhagat <r@rabh.io>
Co-authored-by: Nikolas Garza <90273783+nmgarza5@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-05-20 18:16:49 +00:00
acaprau fa8fc678f9 feat(opensearch): Remove Vespa as an option entirely (#11207) 2026-05-20 02:03:45 +00:00
acaprau 844ceb7cea chore(logging, celery): Single source of truth for logging in celery workers (#11190) 2026-05-19 23:22:35 +00:00
Evan Lohn ea337286c4 chore: postgres tcp keepalive (#11116) 2026-05-15 01:29:42 +00:00
Martin Bergamascoandcubic-dev-ai[bot] 07eaa81298 feat(onyx/backend): add ability to use GCS with Workload identity (#10703)
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-05-08 19:35:23 +00:00
Jamison Lahman 08df1da283 feat(auth): add USER_DIRECTORY_ADMIN_ONLY flag to gate /users (#10399) 2026-04-21 16:24:42 +00:00
SubashMohan 146b5449d2 feat: configurable file upload size and token limits via admin settings (#9232) 2026-03-27 04:23:16 +00:00
Justin Tahara 608491ac36 feat(oidc): Adding PKCE for OIDC (#9128) 2026-03-13 00:13:01 +00:00
Jessica Singh 19b33e4d93 chore(auth): deployment docker cleanup (#8587) 2026-03-10 16:48:27 +00:00
acaprau 87f0849330 feat(opensearch): Enable by default (#9211) 2026-03-09 17:30:32 -07:00
acaprau 15da1e0a88 feat(opensearch): Add OpenSearch in docker compose (#8611) 2026-02-21 02:57:31 +00:00
Evan Lohn 4b0c800db7 feat: postgres file store (#8246) 2026-02-09 04:28:42 +00:00
Yuhong Sun d80a4270cb fix: LLM Read Timeout (#8193) 2026-02-05 20:51:37 +00:00
Jamison Lahman f36d15d924 chore(flags): remove unused NEXT_PUBLIC_DEFAULT_SIDEBAR_OPEN (#7984) 2026-01-30 00:35:08 +00:00
roshan b110621b13 fix(craft): install script for craft-latest image (#7918) 2026-01-27 21:40:30 -08:00
Chris Weaver 7f0ce0531f feat: Onyx Craft (#7484)
Co-authored-by: Wenxi <wenxi@onyx.app>
Co-authored by: joachim-danswer <joachim@danswer.ai>
Co-authored-by: rohoswagger <roshan@onyx.app>
2026-01-26 17:12:42 -08:00
Justin Tahara 52a312a63b feat: onyx discord bot - supervisord and kube deployment (#7706) 2026-01-23 20:55:06 +00:00
Yuhong Sun caf8b85ec2 feat: LLM filter on query endpoint (#7492) 2026-01-17 15:56:07 -08:00
Raunak Bhagat 8a0ce4c294 feat: Feedback modals update (#7380) 2026-01-13 19:48:45 +00:00
Justin Tahara 324388fefc chore(envvar): Cleaning up Unused EnvVars (#7067) 2025-12-26 17:57:32 -08:00
Yuhong Sun 24a0ceee18 chore: fix llm interface (#6691) 2025-12-11 15:44:44 -08:00