Alona
fe6a63733a
fix: support external Postgres SSL mode ( #14695 )
2026-06-07 13:03:11 -05:00
0d77a0d248
Bump SDK packages to v1.26.0 ( #14679 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-07 09:51:37 -06:00
mamoodi and OpenHands CVE Fix Bot
03aab93625
Fix CVE-2026-42342: Update react-router to 7.15.0 ( #14684 )
...
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev >
2026-06-05 15:31:34 -04:00
mamoodi and openhands
90544456c8
chore: bump vitest to ^4.1.0 and remove stale authors ( #14681 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-05 14:08:56 -04:00
aivong-openhands
ded85cd217
PLTF-2875: Add promote-to-development sender ( #14635 )
2026-06-05 13:06:43 -05:00
chuckbutkus and openhands
0b7ccbace8
fix(auth): don't revoke offline_tokens on bearer-auth failures or bro… ( #14666 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-05 12:51:02 -04:00
5a3d1a4844
fix(enterprise): return agent-settings union instead of coercing ACP→OpenHands ( #14675 )
...
Co-authored-by: Simon Rosenberg <simon@openhands.dev >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 18:00:35 +02:00
aivong-openhands and openhands
568beb1196
PLTF-2895: Enterprise Apply Migrations on Test DB ( #14652 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-05 10:38:09 -05:00
1ec2cfdbec
fix(acp): bootstrap-prompt resume when sandbox is recycled (Solution A) ( #14640 )
...
Co-authored-by: Simon Rosenberg <simon@openhands.dev >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 12:15:48 +02:00
4327be017d
refactor(acp): remove acp_env wholesale-replacement compat code ( #14668 )
...
Co-authored-by: Simon Rosenberg <simon@openhands.dev >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-05 11:55:47 +02:00
64ae075208
Bump SDK packages to v1.25.0 ( #14653 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-04 23:41:11 +02:00
aivong-openhands and openhands
21b3b46ed1
PLTF-2899: await SaaS get_user_id() in Slack repo-inference log ( #14658 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-04 15:27:00 -05:00
aivong-openhands and openhands
f2f77a666c
PLTF-2899: store GitHub PR timestamps as naive UTC (asyncpg DataError) ( #14657 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-04 15:21:38 -05:00
aivong-openhands
57b0da3df6
PLTF-2895: event_callback index — use plain CREATE INDEX ( #14651 )
2026-06-04 15:18:39 -05:00
Joe Laverty
459b00986b
feat(enterprise): make rate limits configurable via env vars ( #14628 )
2026-06-04 12:59:26 -04:00
aivong-openhands
904e9cf311
PLTF-2895: add enterprise migration for event_callback composite index ( #14649 )
2026-06-04 10:10:46 -05:00
Ash Clarke and openhands
88291a5980
fix: add composite index on event_callback (conversation_id, status, event_kind) ( #14630 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-04 10:15:25 -04:00
mamoodi and OpenHands CVE Fix Bot
73d1d9a1c9
Fix CVE-2026-44492: Update axios to 1.16.0 ( #14627 )
...
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev >
2026-06-03 14:24:51 -04:00
82744a0bc3
Cascade-delete sole-org requester on DELETE /api/organizations ( #14617 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: hieptl <hieptl.developer@gmail.com >
2026-06-03 14:20:13 -04:00
mamoodi and OpenHands CVE Fix Bot
3eb16a967d
Fix CVE-2026-42305: Update dulwich to 1.2.5 ( #14626 )
...
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev >
2026-06-03 13:16:58 -04:00
dependabot[bot]
ea95000794
chore(deps): bump dulwich from 1.2.0 to 1.2.5 ( #14625 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 12:14:51 -04:00
mamoodi and openhands
3b519f35c3
fix(frontend): upgrade vitest to ^4.1.0 to resolve Dependabot alert ( #14622 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-03 11:05:18 -04:00
ce271add02
fix(acp): route provider creds via agent_context.secrets, not acp_env ( #14620 )
...
Co-authored-by: Simon Rosenberg <simon@openhands.dev >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-03 16:21:52 +02:00
Graham Neubig and openhands
8fdf41d331
Avoid Keycloak full scan in Resend sync ( #14560 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-02 18:04:19 -04:00
aivong-openhands and OpenHands CVE Fix Bot
b025cd2e0b
Fix CVE-2026-41238: Update dompurify to 3.4.0 ( #14607 )
...
Co-authored-by: OpenHands CVE Fix Bot <openhands@all-hands.dev >
2026-06-02 10:29:50 -04:00
Graham Neubig and openhands
ba775c9227
Update default agent server image to 1.23.1 ( #14612 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-06-02 08:42:51 -04:00
d04ddf6f8f
fix(frontend): preserve returnTo through the onboarding interstitial ( #14353 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: OpenHands Bot <contact@all-hands.dev >
2026-06-01 17:44:47 -04:00
Hiep Le
982994cb8e
feat: proxy runtime git/changes and git/diff via app-conversations ( #14606 )
2026-06-01 20:10:03 +07:00
Vasco Schiavo and Vasco Schiavo
e073659755
fix(logger): remove dead aifc pre-import block (alternative to #14592 ) ( #14593 )
...
Co-authored-by: Vasco Schiavo <openhands@all-hands.dev >
2026-05-29 12:13:46 +02:00
Vasco Schiavo
1e32eeefb6
feat(saas): seed Default LLM profile from legacy config on profiles upgrade ( #14586 )
2026-05-28 15:20:49 +02:00
1505caaaa9
Upgrade LiteLLM to 1.84.1 ( #14396 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: aivong-openhands <ai.vong@openhands.dev >
2026-05-27 23:03:06 -07:00
a9de690411
fix(APP-1892): restore PostHog onboarding-completed and create-pr-button-clicked events ( #14519 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: OpenHands Bot <contact@all-hands.dev >
2026-05-28 00:37:50 -04:00
Vasco Schiavo and openhands
021d988cb7
Seed Default LLM profile from legacy config on first load in SaaS ( #14580 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-05-27 13:43:41 -07:00
Alona
fd1425ff1d
[ALL-1887] Add Entra-backed Azure DevOps auth for enterprise ( #14567 )
2026-05-27 12:37:05 -04:00
Xingyao Wang and openhands
9717aab355
chore: remove PR review GitHub Actions workflow ( #14581 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-05-27 11:48:02 -04:00
0a6cf00a4d
feat: Add org-level LLM profiles for SaaS users ( #14406 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: VascoSch92 <vasco.schiavo@protonmail.com >
Co-authored-by: Vasco Schiavo <115561717+VascoSch92@users.noreply.github.com >
2026-05-27 07:15:00 -07:00
Sanjay Santhanam
ce3ead82d4
chore: fix typos in comments, docstrings, and log messages ( #14577 )
2026-05-27 11:24:20 +02:00
7ea2aedae6
Update openhands-agent-server to 1.23.1 and remove openhands-aci dependency ( #14566 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
Co-authored-by: VascoSch92 <vasco@openhands.dev >
Co-authored-by: Graham Neubig <neubig@gmail.com >
2026-05-26 18:28:13 +02:00
Alona
a719372a4e
Clarify Jira DC repository access prompt ( #14570 )
2026-05-26 11:49:48 -04:00
Alona
ae8caca41a
Polish Jira DC webhook settings UX ( #14547 )
2026-05-26 10:10:06 -04:00
Graham Neubig and openhands
5c8249bf5a
Simplify event callback execution filters ( #14557 )
...
Co-authored-by: openhands <openhands@all-hands.dev >
2026-05-26 08:40:11 -05:00
Alona
802f3c341a
Support KOTS-managed Jira DC service accounts
...
Adds KOTS-managed Jira Data Center service-account support and connection-scoped Jira DC webhooks. Validated end to end on replicated-02 with the Jira DC shim for OAuth linking, automatic webhook setup, pause/resume, and webhook-triggered OpenHands automation.
2026-05-26 08:54:19 -04:00
Alona
43ec2b64dd
Enforce single active Jira DC link ( #14536 )
2026-05-26 05:07:54 -05:00
Alona
2afe08c896
Include Bitbucket DC PR comments in resolver context
2026-05-26 03:30:37 -04:00
Alona
4335396c6b
Add connection-scoped Bitbucket DC webhooks
2026-05-26 03:13:09 -04:00
Alona
5e311f7f99
Forward Bitbucket Data Center events to automations
...
Forward signed Bitbucket Data Center webhook deliveries to the automation service, expand the enrolled webhook event set, resolve automation org context from the Bitbucket DC project key, and normalize eventKey for automation parsing.
Validated on R01 OHE with signed Bitbucket DC webhook deliveries creating and completing an automation run.
2026-05-22 20:33:44 -04:00
Alona
077039ef0c
Broaden Jira Data Center automation webhook events ( #14532 )
2026-05-22 17:49:08 -05:00
Alona
e0bfb874d8
Support Bitbucket Data Center org claims ( #14530 )
2026-05-22 16:49:50 -05:00
Alona
bd0106e8ba
Support Jira Data Center automation forwarding ( #14522 )
2026-05-22 15:44:41 -05:00
Alona
5b17dbbdf4
Scope resolver runtime auth to resolved org ( #14529 )
2026-05-22 15:39:48 -05:00
Alona