Commit Graph
6843 Commits
Author SHA1 Message Date
Tim O'Farrellandopenhands 2a3f06a75d perf: skip runtime API call in webhook auth via SandboxRecord (#14732)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-09 13:03:55 -06:00
3dc83a055d Bump SDK packages to v1.27.0 (#14726)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: simonrosenberg <157206163+simonrosenberg@users.noreply.github.com>
2026-06-09 20:51:31 +02:00
Engel Nystandopenhands 4b9fa526b8 ci: add label-triggered OpenHands QA workflow (#14730)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-09 20:08:14 +02:00
Engel Nystandopenhands 41eaaf44c0 Harden workflow GitHub context handling (#14537)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-09 19:48:31 +02:00
Tim O'Farrellandopenhands 65ae6bdabe fix: remove org_id from ownership assertion in save_app_conversation_info (#14727)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-09 11:23:22 -06:00
aivong-openhandsandopenhands 14532ca3ee PLTF-2899: Add async/await static analysis checks for enterprise code (#14664)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-09 11:59:59 -05:00
b34a7491c0 Revert ACP bootstrap-prompt resume + enable acp_isolate_data_dir on the cloud start path (#14722)
Co-authored-by: Simon Rosenberg <simon@openhands.dev>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-09 16:25:21 +02:00
Alona 85aa3bbca6 Enable org LLM profiles in settings (#14715) 2026-06-08 16:15:42 -05:00
shanemort1982andshanemort1982 ff9ab10979 fix: _configure_llm now preserves user LLM settings (#14451)
Co-authored-by: shanemort1982 <shanemort1982@users.noreply.github.com>
2026-06-08 20:45:09 +02:00
aivong-openhands cb13bd06e6 PLTF-2899: keep resume flow responsive during rate limits (#14660) 2026-06-08 18:25:12 +02:00
aivong-openhandsandopenhands 43b49a56af APP-2218: add indexes on conversation_metadata_saas (user_id, org_id) (#14662)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-08 09:25:28 -05:00
Tim O'Farrellandopenhands 7aa694fda2 Remove _get_sandbox_by_session_api_key_legacy to stop spurious runtime API queries on stopped sandboxes (#14706)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-08 08:14:52 -06:00
Alona 774a36ef7f Add OHE default organization bootstrap (#14713) 2026-06-08 01:49:45 -05:00
Alona 6068e4ab9b Fix Bitbucket DC userinfo lookup (#14711) 2026-06-07 14:54:47 -05:00
Alona fe6a63733a fix: support external Postgres SSL mode (#14695) 2026-06-07 13:03:11 -05:00
0d77a0d248 Bump SDK packages to v1.26.0 (#14679)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-07 09:51:37 -06:00
mamoodiandOpenHands CVE Fix Bot 03aab93625 Fix CVE-2026-42342: Update react-router to 7.15.0 (#14684)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-05 15:31:34 -04:00
mamoodiandopenhands 90544456c8 chore: bump vitest to ^4.1.0 and remove stale authors (#14681)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-05 14:08:56 -04:00
aivong-openhands ded85cd217 PLTF-2875: Add promote-to-development sender (#14635) 2026-06-05 13:06:43 -05:00
chuckbutkusandopenhands 0b7ccbace8 fix(auth): don't revoke offline_tokens on bearer-auth failures or bro… (#14666)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-05 12:51:02 -04:00
5a3d1a4844 fix(enterprise): return agent-settings union instead of coercing ACP→OpenHands (#14675)
Co-authored-by: Simon Rosenberg <simon@openhands.dev>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 18:00:35 +02:00
aivong-openhandsandopenhands 568beb1196 PLTF-2895: Enterprise Apply Migrations on Test DB (#14652)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-05 10:38:09 -05:00
1ec2cfdbec fix(acp): bootstrap-prompt resume when sandbox is recycled (Solution A) (#14640)
Co-authored-by: Simon Rosenberg <simon@openhands.dev>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 12:15:48 +02:00
4327be017d refactor(acp): remove acp_env wholesale-replacement compat code (#14668)
Co-authored-by: Simon Rosenberg <simon@openhands.dev>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-05 11:55:47 +02:00
64ae075208 Bump SDK packages to v1.25.0 (#14653)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-04 23:41:11 +02:00
aivong-openhandsandopenhands 21b3b46ed1 PLTF-2899: await SaaS get_user_id() in Slack repo-inference log (#14658)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-04 15:27:00 -05:00
aivong-openhandsandopenhands f2f77a666c PLTF-2899: store GitHub PR timestamps as naive UTC (asyncpg DataError) (#14657)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-04 15:21:38 -05:00
aivong-openhands 57b0da3df6 PLTF-2895: event_callback index — use plain CREATE INDEX (#14651) 2026-06-04 15:18:39 -05:00
Joe Laverty 459b00986b feat(enterprise): make rate limits configurable via env vars (#14628) 2026-06-04 12:59:26 -04:00
aivong-openhands 904e9cf311 PLTF-2895: add enterprise migration for event_callback composite index (#14649) 2026-06-04 10:10:46 -05:00
Ash Clarkeandopenhands 88291a5980 fix: add composite index on event_callback (conversation_id, status, event_kind) (#14630)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-04 10:15:25 -04:00
mamoodiandOpenHands CVE Fix Bot 73d1d9a1c9 Fix CVE-2026-44492: Update axios to 1.16.0 (#14627)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-03 14:24:51 -04:00
82744a0bc3 Cascade-delete sole-org requester on DELETE /api/organizations (#14617)
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: hieptl <hieptl.developer@gmail.com>
2026-06-03 14:20:13 -04:00
mamoodiandOpenHands CVE Fix Bot 3eb16a967d Fix CVE-2026-42305: Update dulwich to 1.2.5 (#14626)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-03 13:16:58 -04:00
dependabot[bot] ea95000794 chore(deps): bump dulwich from 1.2.0 to 1.2.5 (#14625)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 12:14:51 -04:00
mamoodiandopenhands 3b519f35c3 fix(frontend): upgrade vitest to ^4.1.0 to resolve Dependabot alert (#14622)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-03 11:05:18 -04:00
ce271add02 fix(acp): route provider creds via agent_context.secrets, not acp_env (#14620)
Co-authored-by: Simon Rosenberg <simon@openhands.dev>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-03 16:21:52 +02:00
Graham Neubigandopenhands 8fdf41d331 Avoid Keycloak full scan in Resend sync (#14560)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-02 18:04:19 -04:00
aivong-openhandsandOpenHands CVE Fix Bot b025cd2e0b Fix CVE-2026-41238: Update dompurify to 3.4.0 (#14607)
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev>
2026-06-02 10:29:50 -04:00
Graham Neubigandopenhands ba775c9227 Update default agent server image to 1.23.1 (#14612)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-06-02 08:42:51 -04:00
d04ddf6f8f fix(frontend): preserve returnTo through the onboarding interstitial (#14353)
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: OpenHands Bot <contact@all-hands.dev>
2026-06-01 17:44:47 -04:00
Hiep Le 982994cb8e feat: proxy runtime git/changes and git/diff via app-conversations (#14606) 2026-06-01 20:10:03 +07:00
Vasco SchiavoandVasco Schiavo e073659755 fix(logger): remove dead aifc pre-import block (alternative to #14592) (#14593)
Co-authored-by: Vasco Schiavo <openhands@all-hands.dev>
cloud-1.37.0
2026-05-29 12:13:46 +02:00
Vasco Schiavo 1e32eeefb6 feat(saas): seed Default LLM profile from legacy config on profiles upgrade (#14586) 2026-05-28 15:20:49 +02:00
1505caaaa9 Upgrade LiteLLM to 1.84.1 (#14396)
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: aivong-openhands <ai.vong@openhands.dev>
2026-05-27 23:03:06 -07:00
a9de690411 fix(APP-1892): restore PostHog onboarding-completed and create-pr-button-clicked events (#14519)
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: OpenHands Bot <contact@all-hands.dev>
2026-05-28 00:37:50 -04:00
Vasco Schiavoandopenhands 021d988cb7 Seed Default LLM profile from legacy config on first load in SaaS (#14580)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-05-27 13:43:41 -07:00
Alona fd1425ff1d [ALL-1887] Add Entra-backed Azure DevOps auth for enterprise (#14567) 2026-05-27 12:37:05 -04:00
Xingyao Wangandopenhands 9717aab355 chore: remove PR review GitHub Actions workflow (#14581)
Co-authored-by: openhands <openhands@all-hands.dev>
2026-05-27 11:48:02 -04:00
0a6cf00a4d feat: Add org-level LLM profiles for SaaS users (#14406)
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: VascoSch92 <vasco.schiavo@protonmail.com>
Co-authored-by: Vasco Schiavo <115561717+VascoSch92@users.noreply.github.com>
2026-05-27 07:15:00 -07:00