openhands
41333a7c26
fix: tighten marketplace path validation
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 11:28:34 +00:00
openhands
d5e71ec79b
Merge origin/main and fix marketplace_path CI drift
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 02:42:17 +00:00
Saurya Velagapudi
dcb2e21b87
feat: Auto-forward LLM_* env vars to agent-server and fix host network config ( #13192 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 17:07:19 -07:00
Tim O'Farrell
7edebcbc0c
fix: use atomic write in LocalFileStore to prevent race conditions ( #13480 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: OpenHands Bot <contact@all-hands.dev >
2026-03-18 16:49:32 -06:00
HeyItsChloe
abd1f9948f
fix: return empty skills list instead of 404 for stopped sandboxes ( #13429 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 14:46:00 -06:00
Engel Nyst
fb7333aa62
fix: stop calling agent-server /generate_title ( #13093 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 17:10:07 +01:00
Chris Bagwell
35a40ddee8
fix: handle containers with tagless images in DockerSandboxService ( #13238 )
2026-03-18 11:55:48 -04:00
Xingyao Wang
75c823c486
feat: expose_secrets param on /users/me + sandbox-scoped secrets API ( #13383 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-17 12:54:57 +00:00
Tim O'Farrell
8941111c4e
refactor: use status instead of pod_status in RemoteSandboxService ( #13436 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-16 17:34:27 -06:00
Xingyao Wang
55e4f07200
fix: add missing params to TestLoadHooksFromWorkspace setup ( #13424 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-16 14:49:36 -04:00
Xingyao Wang
00daaa41d3
feat: Load workspace hooks for V1 conversations and add hooks viewer UI ( #12773 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: enyst <engel.nyst@gmail.com >
Co-authored-by: Alona King <alona@all-hands.dev >
2026-03-17 00:55:23 +08:00
Hiep Le
238cab4d08
fix(frontend): prevent chat message loss during websocket disconnections or page refresh ( #13380 )
2026-03-16 22:25:44 +07:00
Tim O'Farrell
d591b140c8
feat: Add configurable sandbox reuse with grouping strategies ( #11922 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-16 05:19:31 -06:00
chuckbutkus
922e3a2431
Add AwsSharedEventService for shared conversations ( #13141 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-13 14:32:58 -04:00
Tim O'Farrell
0527c46bba
Add sandbox_id__eq filter to AppConversationService search and count methods ( #13387 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-13 11:24:58 -06:00
Tim O'Farrell
8e6d05fc3a
Add sandbox_id__eq filter parameter to search/count conversation methods ( #13385 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-13 15:30:16 +00:00
Tim O'Farrell
8b8ed5be96
fix: Revert on_conversation_update to load conversation inside method ( #13368 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-12 19:08:04 -06:00
Tim O'Farrell
e2805dea75
Fix pagination bug in event_service_base.search_events causing duplicate events in exports ( #13364 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-12 12:24:06 -06:00
Tim O'Farrell
ab78d7d6e8
fix: Set correct user context in webhook callbacks based on sandbox owner ( #13340 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-12 09:11:35 -06:00
Xingyao Wang
53bb82fe2e
fix: use project_dir consistently for workspace.working_dir, setup.sh, and git hooks ( #13329 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-11 15:26:34 +08:00
Joe Laverty
3432bbbb88
fix: Remove N+1 request from Bitbucket Data Center integration ( #13281 )
2026-03-10 11:08:30 -05:00
Tim O'Farrell
598b381e3d
Added fallback for sandbox spec service ( #13317 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-09 12:21:52 -06:00
Ray Myers
698cfc2520
fix: sanitize file_path in git diff shell commands to prevent command injection ( #13051 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-09 17:29:25 +00:00
aivong-openhands
ef840b046a
remove mcp version check for cve_2025_66416 ( #13277 )
2026-03-09 09:38:44 -05:00
openhands
857a72272c
Apply skill loader test lint formatting
2026-03-07 20:20:46 +00:00
openhands
93b04f5e47
Apply settings test lint formatting
2026-03-07 20:14:45 +00:00
openhands
344feac259
Apply marketplace path test formatting
2026-03-07 19:54:19 +00:00
openhands
159ce4a27a
Merge remote-tracking branch 'origin/main' into feat/marketplace-path-setting
2026-03-07 19:53:48 +00:00
openhands
9c6fcb399a
Fix marketplace path validation and wiring
2026-03-07 19:43:52 +00:00
aivong-openhands
b0cdd0358f
fix: add mcp>=1.25 constraint and CVE-2025-66416 tests ( #13247 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-03-06 10:31:46 -06:00
Chris Bagwell
41d8bd28e9
fix: preserve llm_base_url when saving MCP server config ( #13225 )
2026-03-06 02:39:58 +01:00
Rohit Malhotra
4c380e5a58
feat: Add timeout handling for Slack repo query ( #13249 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-06 00:02:04 +00:00
Tim O'Farrell
15e9435b35
Remove ExperimentManager concept from codebase ( #13215 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-04 13:41:18 -07:00
Pierrick Hymbert
e7934ea6e5
feat(bitbucket): supports cloud and server APIs ( #11052 )
...
Co-authored-by: Ray Myers <ray.myers@gmail.com >
Co-authored-by: Chris Bagwell <chris@cnpbagwell.com >
Co-authored-by: CHANGE <joe.laverty@openhands.dev >
Co-authored-by: Joe Laverty <jlav@users.noreply.github.com >
2026-03-03 10:51:43 -05:00
openhands
2e701b968f
fix: address review comments for marketplace_path setting
...
- Fix Data Model Inconsistency: Change backend default from
'marketplaces/default.json' to None. Now null means 'load all skills
without filtering', and any string value means use that marketplace.
- Add Alembic migration: Create migration 099 to add marketplace_path
column to user_settings table for enterprise deployments.
- Simplify frontend handling: Use parseMarketplacePath() utility to
consistently convert empty string to null. Remove confusing
DEFAULT_MARKETPLACE_PATH constant, use MARKETPLACE_PATH_PLACEHOLDER
for UI hint only.
- Add validation: Implement isValidMarketplacePath() to validate
marketplace path formats (simple paths like 'marketplaces/default.json'
or cross-repo paths like 'owner/repo:path/file.json'). Show validation
errors inline and disable save button for invalid input.
- Add tests: Frontend tests for isValidMarketplacePath() and
parseMarketplacePath(). Backend tests for marketplace_path default
and custom value handling.
- Add i18n: Translation for marketplace path validation error message.
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-03 12:37:04 +00:00
chuckbutkus
0c7ce4ad48
V1 Changes to Support Path Based Routing ( #13120 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-02 22:37:37 -05:00
Hiep Le
8059c18b57
fix(backend): update planning agent to direct users to the build button instead of asking ready to proceed ( #13139 )
2026-03-03 03:31:29 +07:00
aivong-openhands
baaec8473a
Fix CVE-2024-23342: Replace python-jose with jwcrypto ( #13012 )
...
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev >
2026-02-27 22:15:23 +00:00
aivong-openhands
a905e35531
Fix CVE-2026-25990: Update pillow to 12.1.1 ( #13024 )
...
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev >
2026-02-27 12:37:25 -06:00
Tim O'Farrell
3161b365a8
Add sandbox_id field to conversation endpoints ( #13044 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-02-25 14:29:42 +00:00
MkDev11
51b989b5f8
feat: Allow attaching/changing repository for existing conversations ( #12671 )
...
Co-authored-by: mkdev11 <MkDev11@users.noreply.github.com >
Co-authored-by: hieptl <hieptl.developer@gmail.com >
2026-02-25 18:09:12 +07:00
Tim O'Farrell
0677c035ff
Optimize get_sandbox_by_session_api_key with hash lookup ( #13019 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-02-24 13:55:21 +00:00
Tim O'Farrell
ddb809bc43
Add webhook endpoint authentication bypass and admin context unfiltered data access ( #12956 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-02-23 09:28:49 +00:00
sp.wack
3bc2ef954e
fix(backend): config values ( #12944 )
2026-02-20 17:53:35 +04:00
Manrique Vargas
3fc977eddd
fix(mcp): skip conversation link when conversation_id is None ( #12941 )
...
Signed-off-by: machov <mv1742@nyu.edu >
Co-authored-by: Rohit Malhotra <rohitvinodmalhotra@gmail.com >
2026-02-19 21:41:26 +00:00
Chujiang
6676cae249
fix: add missing type hints and improve test logging ( #12810 )
...
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com >
2026-02-19 00:58:39 +01:00
Clay Arnold
fede37b496
fix: add claude-opus-4-6 to temperature/top_p guard ( #12874 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-19 00:33:17 +01:00
Engel Nyst
b06b9eedac
fix: wire suggested task prompts for V1 ( #12787 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-02-16 23:57:32 +01:00
Hiep Le
1948200762
chore: update sdk to the latest version ( #12811 )
2026-02-11 12:57:08 +07:00
MkDev11
4fa2ad0f47
fix: add exponential backoff retry for env var export when bash session is busy ( #12748 )
...
Co-authored-by: mkdev11 <MkDev11@users.noreply.github.com >
2026-02-06 05:07:17 -07:00