Pull Request Explorer

Summary

Simplify lint plugin configuration

Clean up lint configuration by removing an unused plugin and reorganizing rules, preserving coverage and performance.

Health Assessment

• • Fast cycle time and minimal review rounds indicate a straightforward, low‑risk refactor that maintained lint coverage and performance.

Summary

Align member invitation flow and API contracts

Improved member invitation flow with consistent behavior and validation, replacing third-party email widget with owner-local recipient field.

Health Assessment

• • Large scope with many files changed, but review time was relatively fast at 5.8 hours.

Summary

Update frontend and pnpm dependencies

This PR bumps frontend and pnpm dependencies to keep the project up-to-date, ensuring compatibility and security.

Health Assessment

• • Fast cycle time and minimal review indicate a smooth process; large line changes are due to lock file updates, not functional changes.

Summary

Improve static check performance

Reduces linting time by ~20% and frees CI resources, boosting developer productivity.

Health Assessment

• • Fast cycle time and minimal changes indicate a low-risk, high-impact maintenance update.

Summary

Prevent open redirects in post-login flows

Stops authenticated users from being redirected to malicious external sites after login, enhancing security and protecting user data.

Health Assessment

• • Fast review and merge within 30 minutes indicates low friction and high confidence in the change.

Summary

Improve workflow generator accessibility and API contracts

Enhances accessibility for users and standardizes API contracts, reducing frontend/backend drift.

Health Assessment

• • Rapid iteration with many commits but short cycle time indicates efficient review process; large scope suggests high complexity.

Summary

Require trial app registration for reads

Ensures only trial‑registered apps can perform read operations, tightening security and compliance for the platform.

Health Assessment

• • The PR was reviewed and approved within minutes, indicating a straightforward change with minimal risk.

Summary

Migrate static checks to vp check

Unify Oxfmt, Oxlint, and TypeScript checks under vp check, improving code quality and consistency.

Health Assessment

• • The PR was merged quickly, indicating a smooth review process.
• • The changes are well-structured and follow the contribution guidelines.

Summary

Use SQLite3 session in test_create_document_index

Improves test reliability by using real SQLite sessions, ensuring ORM behavior is accurately validated.

Health Assessment

• • The review took over a day, but the change was limited to a single test file and poses minimal risk to production.

Summary

Bump dependencies for CVE fixes

Updates critical Python dependencies to address security vulnerabilities, ensuring system integrity.

Health Assessment

• • Fast review and merge with minimal changes, low risk to production.

Summary

Add skill upload failure tip

Adds a user‑facing tip when skill upload fails, improving user experience and reducing confusion.

Health Assessment

• • The PR was merged within 18 minutes, indicating minimal review friction.
• • The change is small in scope and carries low risk.

Summary

test: use sqlite3 session in test_oauth_device_flow

Improves test reliability by using real SQLite sessions instead of mocks, ensuring persisted state across OAuth device flow tests.

Health Assessment

• • The PR improved test reliability but had a long review time, indicating possible communication delays.

Summary

Use SQLite session in test event signals

Replace mocked DB session with real SQLite-backed models to verify signal order and state changes.

Health Assessment

• • The PR had a long review time but minimal changes and no rework, indicating a straightforward test update.

Summary

Use SQLite3 session in retrieval attachment test

Replaces fabricated session objects with real in-memory SQLite sessions to validate access grants and knowledge retrieval accurately.

Health Assessment

• • Test update improves reliability with minimal scope and low risk.

Summary

Use sqlite3 session in test_remote_retrieval

Replace ORM mocks with a real SQLite session in tests, ensuring transaction-free paths for recommendation retrieval logic.

Health Assessment

• • Long review time but minimal changes and single commit indicate low complexity and low risk.

Summary

Use sqlite3 session in billing service tests

This PR replaces mocked database sessions in billing service tests with real in-memory SQLite sessions, improving test reliability and ensuring persisted state across billing-provider, cache, and network boundaries.

Health Assessment

• • The PR had a long review time but minimal changes and no rework, indicating a straightforward test improvement.

Summary

Bump python-engineio and python-socketio for CVE fixes

Updates two Python dependencies to address high‑severity CVEs, ensuring secure operation of the Dify Enterprise image.

Health Assessment

• • Fast review and merge with minimal changes, indicating low risk and high confidence in the update.

Summary

Prevent chat attachments from scrolling out of view

This fix ensures chat attachments remain visible, improving user experience by preventing accidental loss of context.

Health Assessment

• • Quick review and merge with minimal changes indicates low complexity and high confidence in the fix.

Summary

Migrate linting to vp lint with ESLint fallback

This PR replaces the existing ESLint-first lint workflow with a Vite+ Oxlint-based system, improving lint performance and reducing false positives while preserving fallback rules for unsupported checks.

Health Assessment

• • Fast cycle time with minimal review friction indicates efficient collaboration; the PR involved extensive lint configuration changes but was completed quickly.

Summary

Fix max token params disabling in follow-up settings

Corrects a bug where disabling max token parameters in follow-up model settings was ineffective, ensuring accurate token limits for user interactions.

Health Assessment

• • Rapid review and merge indicate a straightforward bug fix with minimal impact.

Summary

Backport RBAC request timeout to hotfix branch

Fixes 500 errors on workspace load by increasing RBAC request timeout to 30s, improving reliability for enterprise users.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, low risk.

Summary

Use sqlite3 session in test_banner

Update unit tests to use SQLite session for banner controller, improving test isolation and coverage.

Health Assessment

• • Test changes required extended review time, but no significant rework or risk.

Summary

Use SQLite session in recommendation tests

This change replaces mock ORM calls with real SQLite sessions in recommendation tests, improving test accuracy and ensuring transaction integrity. It enhances confidence that recommendation logic behaves correctly in production-like conditions.

Health Assessment

• • The PR took over 60 hours from creation to merge, indicating a slow review process, but the change is small and low risk.

Summary

Use SQLite session in credential tests

Improves test reliability by using a real SQLite session, ensuring credential existence checks work without Flask context. All unit tests pass, confirming correct behavior.

Health Assessment

• • The PR had a long review time but involved only a small change to a test file, resulting in a low-risk, low-impact update.

Summary

Use SQLite session in trace metadata tests

Replaces mock ORM sessions with real SQLite sessions in trace metadata tests, improving test accuracy and reliability.

Health Assessment

• • Fast review and merge with minimal changes; tests now use real SQLite sessions for better reliability.

Summary

Use SQLite3 session in test wraps

Improves test reliability by using real SQLite state, ensuring tenant‑scoped behavior and trial record persistence.

Health Assessment

• • Test improvement with minimal changes, quick review, no rework.

Summary

Use SQLite session in comment model tests

Replaces mocked database interactions with a real in-memory SQLite session to validate account lookup, participant counts, missing accounts, and cache behavior in comment models.

Health Assessment

• • The PR added a small test change that replaced mocks with a real SQLite session, but the review was delayed, resulting in moderate review friction.

Summary

Use SQLite session in test_completion

Replace mocked ORM session with a real SQLite session, ensuring persisted App, EndUser, Conversation, and Message state for more reliable tests that better reflect production behavior.

Health Assessment

• • The PR had a moderate review time and small scope, indicating a straightforward test improvement.

Summary

Fix RBAC migration and bug fixes on hotfix

Applies critical RBAC migration and resolves multiple security and functionality bugs, ensuring consistent permission handling and improved system stability for end users.

Health Assessment

• • The PR involved extensive cherry‑picking of 11 commits and a long review cycle of nearly four days, indicating high complexity and potential risk to production stability.

Summary

Modernize Speech-to-Text Pipeline

Improves user experience by enabling efficient, reliable voice transcription and better resource management, reducing errors and improving performance.

Health Assessment

• • The PR had a single review after a long review time, with no significant rework, indicating a straightforward but large refactor.

Summary

Bump storage group dependencies in API

Updates storage-related dependencies to the latest patch versions, ensuring compatibility and security for cloud storage integrations.

Health Assessment

• • Fast merge with minimal changes, no review required, typical Dependabot update.

Summary

bump soupsieve from 2.8 to 2.8.4

Updates the soupsieve dependency to incorporate recent bug fixes and performance improvements, ensuring continued compatibility and stability for the API.

Health Assessment

• • Dependency bump took over 3 days, likely due to automated process and long review cycle, but no significant friction or risk was observed.

Summary

Bump Google API dependencies in /api

Updates Google API client libraries to newer versions, ensuring compatibility and security.

Health Assessment

• • Rapid review and merge with minimal changes indicate low complexity and risk.

Summary

Bump flask-cors dependency in API

Updates flask-cors to the latest patch, improving type support and security for the API.

Health Assessment

• • Fast review and merge, minimal impact.

Summary

Fix marketplace header jitter in sticky mode

This fix resolves visual instability on the marketplace page header when it becomes sticky, improving user experience and reducing confusion.

Health Assessment

• • Quick fix with minimal changes, fast review and merge, indicating low complexity and high confidence.

Summary

Use SQLite session in data migration tests

Replace mocked SQLAlchemy sessions with real in-memory SQLite sessions to validate ORM behavior and transaction isolation in unit tests.

Health Assessment

• • Long review delay indicates possible blocker or low priority; minimal code changes and single file suggest low risk.

Summary

Use SQLite3 session in plugin tool tests

Replace mocked SQLAlchemy Session with real in-memory SQLite Session for plugin tests, preserving boundaries. Ensures tests run against realistic session behavior.

Health Assessment

• • The PR had a long review time but only a single commit with no review comments, indicating low complexity and minimal risk.

Summary

Use SQLite session in removal task test

Ensures real SQLite sessions correctly delete data while preserving storage boundaries, improving test reliability.

Health Assessment

• • Long review time indicates delayed feedback, but small scope and single commit suggest minimal risk.

Summary

Prevent sandbox plan from executing special workflow

Ensures sandbox plans do not trigger special workflows, improving safety and compliance.

Health Assessment

• • The PR had a long review cycle of over 64 hours and required many changes, indicating potential complexity or lack of early feedback. The large scope of 374 added lines across 20 files further increases the risk of integration issues.

Summary

Update role selector max height

Improves the role selection UI by setting a maximum height for the scroll area, ensuring a smoother experience when inviting members.

Health Assessment

• • Quick fix with minimal changes and fast review, indicating low complexity and high confidence.

Summary

chore(deps): bump github-actions-dependencies group

Updates GitHub Actions dependencies to newer versions, ensuring CI pipelines use the latest stable actions for improved reliability and security.

Health Assessment

• • Quick merge with minimal changes, indicating routine dependency maintenance with no blockers.

Summary

Health Assessment

Summary

Fix eager conversation validation on service-api and explore chat endpoints

Ensures invalid conversation IDs return 404 immediately instead of hanging, improving reliability and user experience.

Health Assessment

• • Fast turnaround with minimal changes; quick fix to a hanging bug; low risk due to targeted controller updates.

Summary

Migrate to Vite+ vp fmt formatting

This PR migrates the repository's formatting configuration from ESLint stylistic rules to Vite+ vp fmt, improving code consistency and readability.

Health Assessment

• • The PR has a large scope with 20 files changed, but the review process was relatively smooth with a low friction level.

Summary

Split model selection and settings actions

Improves user experience by ensuring split‑button controls work correctly, preventing accidental opening of settings and enabling proper model selection.

Health Assessment

• • Quick turnaround with minimal rework indicates an efficient review process.

Summary

Enforce strict ESLint rules in dify-ui

Enforces strict ESLint rules to improve code quality and consistency across the UI component library. This reduces bugs, eases onboarding, and ensures maintainable code.

Health Assessment

Summary

Restore keyboard access to row actions

Improves accessibility by ensuring keyboard users can interact with row actions, enhancing usability and compliance.

Health Assessment

• • Single commit with moderate review time; minimal changes focused on accessibility fix.

Summary

Refactor web to normalize z-index layering

Normalize application dialogs and portalled pickers with the Dify UI overlay contract, removing redundant high z-index values and preserving feature-local paint order.

Health Assessment

• • The PR has a large scope with 20 files changed, but the review process was relatively smooth with a low friction level.

Summary

Correct knowledge dialog draft state

Fixes knowledge dialog state handling to prevent incorrect draft persistence and improve editing experience for users.

Health Assessment

• • The PR had a normal cycle time but a slow first review, with minimal rework and a single refactor commit, indicating a straightforward bug fix with moderate scope.

Summary

Improve marketplace install dialog accessibility

Enhances accessibility of the marketplace install dialog, ensuring assistive technologies can identify the dialog name and focus behavior, improving user experience for users with disabilities.

Health Assessment

• • Quick turnaround with minimal changes and no rework, indicating a straightforward bug fix with low risk.