openhands
e18775b391
fix: avoid websocket send fallback race in frontend tests
...
- send via the websocket hook's live ref-backed sender
- treat OPEN connection state as authoritative for socket delivery
- prevent flaky fallback to pending-message REST queue during sends
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 22:46:54 +00:00
openhands
495de35139
fix: restore enterprise settings compatibility for SDK schema PR
...
- add backward-compatible Settings setters and sdk_settings_values alias
- update SaaS settings store org default mapping for agent_settings
- refresh enterprise test helper for agent_settings-backed settings
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 22:14:11 +00:00
openhands
be29d89b3c
Merge main and refresh settings schema PR for current CI
...
- merge latest main into the gui settings schema branch
- regenerate root and enterprise lockfiles after dependency changes
- fix stale llm-settings test to use sdk_settings_schema
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 21:59:17 +00:00
dependabot[bot]
e4515b21eb
chore(deps): bump socket.io-parser from 4.2.5 to 4.2.6 in /frontend in the security-all group across 1 directory ( #13474 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 17:28:15 -04:00
aivong-openhands
a8f6a35341
fix: patch GLib CVE-2025-14087 in runtime Docker images ( #13403 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 16:21:24 -05:00
Joe Laverty
f706a217d0
fix: Use commit SHA instead of mutable branch tag for enterprise base ( #13498 )
2026-03-19 16:24:07 -04:00
Graham Neubig
2890b8c6ff
fix: default settings entry point to LLM page instead of Integrations
...
Home page 'Settings' buttons (ConnectToProviderMessage, task-suggestions)
linked to /settings/integrations. Change to /settings so users land on the
LLM settings page (first nav item in OSS mode).
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-20 05:19:22 +09:00
Graham Neubig
39a846ccc3
fix: persist LLM provider prefix and show API key set indicator
...
- llm-settings.tsx: construct full model name (provider/model) in
CriticalFields onChange, matching the convention used everywhere else
- settings.py: redact set secrets to '<hidden>' instead of None so the
frontend can distinguish 'set but redacted' from 'not set'
- settings.py: reject '<hidden>' sentinel in _apply_settings_payload to
prevent accidental overwrite of real secrets
- Fix llm-settings test to use agent_settings/agent_settings_schema names
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-20 04:57:50 +09:00
aivong-openhands
0137201903
fix: remove vulnerable VSCode extensions in build_from_scratch path ( #13399 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: Ray Myers <ray.myers@gmail.com >
2026-03-19 19:36:22 +00:00
aivong-openhands
49a98885ab
chore: Update OpenSSL in Debian images for security patches ( #13401 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 14:33:23 -05:00
Hiep Le
38648bddb3
fix(frontend): use correct git path based on sandbox grouping strategy ( #13488 )
2026-03-20 00:13:02 +07:00
Hiep Le
b44774d2be
refactor(frontend): extract AddCreditsModal into separate component file ( #13490 )
2026-03-20 00:12:48 +07:00
Hiep Le
04330898b6
refactor(frontend): add delay before closing user context menu ( #13491 )
2026-03-20 00:12:38 +07:00
Chris Bagwell
120fd7516a
Fix: Prevent auto-logout on 401 errors in oss mode ( #13466 )
2026-03-19 16:33:01 +01:00
chuckbutkus
2224127ac3
Fix when budgets are None ( #13482 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 10:14:48 -05:00
aivong-openhands
2d1e9fa35b
Fix CVE-2026-33123: Update pypdf to 6.9.1 ( #13473 )
...
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev >
2026-03-19 11:05:30 -04:00
MkDev11
0ec962e96b
feat: add /clear endpoint for V1 conversations ( #12786 )
...
Co-authored-by: mkdev11 <MkDev11@users.noreply.github.com >
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: tofarr <tofarr@gmail.com >
Co-authored-by: hieptl <hieptl.developer@gmail.com >
2026-03-19 21:13:58 +07:00
Engel Nyst
3a9f00aa37
Keep VSCode accessible when agent errors ( #13492 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 14:46:56 +01:00
Hiep Le
e02dbb8974
fix(backend): validate API key org_id during authorization to prevent cross-org access (org project) ( #13468 )
2026-03-19 16:09:37 +07:00
Hiep Le
8039807c3f
fix(frontend): scope organization data queries by organization ID (org project) ( #13459 )
2026-03-19 14:18:29 +07:00
openhands
cae7b6e72f
chore: refresh SDK lockfile refs again
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 02:46:06 +00:00
openhands
7ca41486be
chore: refresh SDK lockfile refs
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 02:39:41 +00:00
openhands
81c02623a1
merge: update settings schema branch with main and SDK
...
- merge latest main into the GUI settings schema branch
- keep schema-driven LLM settings page and tests after conflict resolution
- update lockfiles to SDK branch head c333aedd
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-19 02:35:30 +00:00
Saurya Velagapudi
a96760eea7
fix: ensure LiteLLM user exists before generating API keys ( #12667 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 17:16:43 -07:00
Saurya Velagapudi
dcb2e21b87
feat: Auto-forward LLM_* env vars to agent-server and fix host network config ( #13192 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 17:07:19 -07:00
Tim O'Farrell
7edebcbc0c
fix: use atomic write in LocalFileStore to prevent race conditions ( #13480 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: OpenHands Bot <contact@all-hands.dev >
2026-03-18 16:49:32 -06:00
HeyItsChloe
abd1f9948f
fix: return empty skills list instead of 404 for stopped sandboxes ( #13429 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 14:46:00 -06:00
aivong-openhands
2879e58781
Fix CVE-2026-30922: Update pyasn1 to 0.6.3 ( #13452 )
...
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev >
2026-03-18 16:00:06 -04:00
Rohit Malhotra
1d1ffc2be0
feat(enterprise): Add service API for automation API key creation ( #13467 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 19:07:36 +00:00
Hiep Le
db41148396
feat(backend): expose API key org_id via new GET /api/keys/current endpoint (org project) ( #13469 )
2026-03-19 01:46:23 +07:00
Robert Brennan
39a4ca422f
fix: use sentence case for 'Waiting for sandbox' text ( #12958 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 14:42:46 -04:00
Varun Chawla
6d86803f41
Add loading feedback to git changes refresh button ( #12792 )
...
Co-authored-by: hieptl <hieptl.developer@gmail.com >
2026-03-19 01:26:27 +07:00
Jordi Mas
8e0386c416
feat: add Catalan translation ( #13299 )
2026-03-18 13:17:43 -04:00
Nelson Spence
48cd85e47e
fix(security): add sleep to container wait loop ( #12869 )
...
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-18 13:04:36 -04:00
不做了睡大觉
c62b47dcb1
fix: handle empty body in GitHub issue resolver ( #13039 )
...
Co-authored-by: User <user@example.com >
2026-03-18 12:36:52 -04:00
Jamie Chicago
eb9a822d4c
Update CONTRIBUTING.md ( #13463 )
2026-03-18 12:10:22 -04:00
Engel Nyst
fb7333aa62
fix: stop calling agent-server /generate_title ( #13093 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 17:10:07 +01:00
aivong-openhands
fb23418803
clarify docstring for provider token reference ( #13386 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 12:03:56 -04:00
Xingyao Wang
991585c05d
docs: add cross-repo testing skill for SDK ↔ OH Cloud e2e workflow ( #13446 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 16:00:23 +00:00
Chris Bagwell
35a40ddee8
fix: handle containers with tagless images in DockerSandboxService ( #13238 )
2026-03-18 11:55:48 -04:00
Hiep Le
5d1f9f815a
fix(frontend): preserve settings page route on browser refresh (org project) ( #13462 )
2026-03-18 22:50:42 +07:00
Hiep Le
d3bf989e77
feat(frontend): improve conversation access error message with workspace hint (org project) ( #13461 )
2026-03-18 22:50:30 +07:00
Hiep Le
6589e592e3
feat(frontend): add contextual info messages on LLM settings page (org project) ( #13460 )
2026-03-18 22:50:16 +07:00
Chris Bagwell
fe4c0569f7
Remove unused WORK_HOSTS_SKILL_FOOTER ( #12594 )
2026-03-18 21:57:23 +07:00
openhands
38dcf959bc
fix: restore search_api_key check in hasAdvancedSettingsSet lost during merge
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 14:41:56 +00:00
openhands
ef3acf726c
style: apply ruff-format fixes
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 14:35:25 +00:00
openhands
017d758a76
fix: skip frozen fields when applying settings payload
...
The secrets_store field on Settings is frozen, so setattr() raised a
validation error when the POST /api/settings payload included that key.
Filter out any frozen field before calling setattr in
_apply_settings_payload. Added a regression test.
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 14:04:46 +00:00
openhands
3ed37e18ac
Merge main into openhands/issue-2228-gui-settings-schema
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 14:00:39 +00:00
Xingyao Wang
28ecf06404
Render V1 paired tool summaries ( #13451 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-03-18 10:52:05 +00:00
dependabot[bot]
26fa1185a4
chore(deps): bump mcp from 1.25.0 to 1.26.0 in the mcp-packages group ( #13314 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: aivong-openhands <ai.vong@openhands.dev >
2026-03-17 17:44:35 -05:00