langflow-ai/langflow
1
146.3k
Fork 0
mirror of https://github.com/langflow-ai/langflow.git synced 2026-03-27 12:11:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • fa9118742d fix(cloud): Backfill cloud metadata for saved nodes cloud-dev-toggle Jordan Frazier 2026-03-27 07:48:43 -04:00
  • 473e6602e6 Add tiny guard to not update on zero length nodes flow-json-edited-flag Jordan Frazier 2026-03-27 07:43:30 -04:00
  • 1887866bb4 fix: update components on render consolidate config reads Jordan Frazier 2026-03-27 07:17:05 -04:00
  • ed426c145e Merge branch 'release-1.9.0' into cz/fix-shareable-playground cz/fix-shareable-playground cristhianzl 2026-03-27 08:18:00 -03:00
  • 4775eb402e [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-27 11:03:16 +00:00
  • c93a878d00 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-27 11:02:23 +00:00
  • 718a21f039 update starter projects Jordan Frazier 2026-03-27 06:59:16 -04:00
  • 097fc7500c fix(cloud): Tighten cloud compatibility truthfulness Jordan Frazier 2026-03-25 15:34:25 -04:00
  • 0dedceccdc feat: wire deploy button and populate deployments page with real API data wxo-fe Viktor Avelino 2026-03-27 02:24:16 -04:00
  • b84f13595e feat: add name field to provider accounts, multi-select connections, and real API call Viktor Avelino 2026-03-27 01:52:54 -04:00
  • bc7e3be499 Merge branch 'release-1.9.0' of github.com:langflow-ai/langflow into wxo-fe Viktor Avelino 2026-03-27 00:51:47 -04:00
  • 5ff9cc8b7a fix: Support self-referential MCP JSON schema fix-mcp-selfref Eric Hare 2026-03-26 20:18:25 -07:00
  • d030e818be Merge branch 'release-1.9.0' into fix-mcp-settings-link fix-mcp-settings-link Eric Hare 2026-03-26 20:07:58 -07:00
  • 9b5073e558 fix: Close popup when navigating to MCP settings Eric Hare 2026-03-26 20:05:54 -07:00
  • efbc4a16e6 fix: prevent MCP command injection via allowlist validation (CWE-78) (#12290) release-1.9.0 add-wxo-ff Janardan Singh Kavia 2026-03-27 08:12:00 +05:30
  • beeb9a2fb0 fix: add detailed logging to mcp duplicate server test for debugging mcp-security-fixes-clean Janardan S Kavia 2026-03-26 21:38:55 -04:00
  • d6aef4dea7 [autofix.ci] apply automated fixes (attempt 2/3) policies-intg autofix-ci[bot] 2026-03-27 01:32:36 +00:00
  • f8dfcaabdb [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-27 01:30:41 +00:00
  • 2d68c01262 fix: move toolguard dep to langflow-base complete installation Hamza Rashid 2026-03-27 01:27:45 +00:00
  • 0799c7ce4d fix: add MCP command injection security validation with allowlist, argument/env checks, and 65 tests Janardan S Kavia 2026-03-26 21:14:01 -04:00
  • d191e3ff86 chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 in /src/frontend dependabot/npm_and_yarn/src/frontend/handlebars-4.7.9 dependabot[bot] 2026-03-27 00:50:47 +00:00
  • c81fd44832 [autofix.ci] apply automated fixes feature/flow-devops-toolkit autofix-ci[bot] 2026-03-27 00:46:13 +00:00
  • f73f358898 Update build_and_push_backend.Dockerfile Eric Hare 2026-03-26 17:44:17 -07:00
  • 7dbe97e9ac Update version and project name v1.9.0.dev19 Langflow Bot 2026-03-27 00:40:10 +00:00
  • 7cf7a11c8e update component index Hamza Rashid 2026-03-27 00:14:16 +00:00
  • a13411d9a8 Update build_and_push.Dockerfile Eric Hare 2026-03-26 17:13:08 -07:00
  • 8189057c4a merge with origin release-1.9.0 Hamza Rashid 2026-03-27 00:09:24 +00:00
  • 4d26684b01 [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-26 23:57:27 +00:00
  • 914d86681d [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 23:55:38 +00:00
  • a7b5ac4d54 Update tests Eric Hare 2026-03-26 16:53:44 -07:00
  • 4b3a8f8d14 [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-26 23:42:32 +00:00
  • c9bfa46146 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 23:40:28 +00:00
  • 8334185fd7 Merge branch 'release-1.9.0' into feature/flow-devops-toolkit Eric Hare 2026-03-26 16:38:43 -07:00
  • 8247c5afb6 Update component_index.json Eric Hare 2026-03-26 16:36:10 -07:00
  • 11d78f5beb fix ruff issues Eric Hare 2026-03-26 16:36:03 -07:00
  • aad3ab4f80 Cleanup of the command interface in help Eric Hare 2026-03-26 16:35:04 -07:00
  • c0f3169a63 Reorder the commands in the help Eric Hare 2026-03-26 15:47:46 -07:00
  • af8da56941 revert: restore Langflow-runner for AMD64 Docker builds v1.8.3 release-1.8.3 vijay kumar katuri 2026-03-26 17:55:35 -04:00
  • 42832d07a5 feat: add core deployment implementation (#12108) Hamza Rashid 2026-03-26 17:54:30 -04:00
  • b0cf8c23da fix: replace removed Langflow-runner with ubuntu-latest for AMD64 Docker builds vijay kumar katuri 2026-03-26 17:38:27 -04:00
  • 852fb037b2 [autofix.ci] apply automated fixes feat/globalization-pipeline autofix-ci[bot] 2026-03-26 21:15:20 +00:00
  • 945a81936c Merge branch 'release-1.9.0' into feat/globalization-pipeline Ram Gopal Srikar Katakam 2026-03-26 17:13:15 -04:00
  • a4540bbcdf feat(i18n): refactor language constants and improve GP pipeline RamGopalSrikar 2026-03-26 17:12:28 -04:00
  • ea696863e1 [autofix.ci] apply automated fixes (attempt 2/3) cz/assistant-v0 autofix-ci[bot] 2026-03-26 20:48:48 +00:00
  • 19838c7258 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 20:46:57 +00:00
  • 2e0c037a0f add basic session management on chat assistant cristhianzl 2026-03-26 17:46:02 -03:00
  • 1ad7e51a3e peer-review docs-css-redesign Mendon Kissling 2026-03-26 16:42:02 -04:00
  • 09b574a527 [autofix.ci] apply automated fixes fix/monitor-message-ownership autofix-ci[bot] 2026-03-26 20:33:11 +00:00
  • 96cb1cc17d Merge branch 'release-1.9.0' into fix/monitor-message-ownership Janardan Singh Kavia 2026-03-27 01:59:36 +05:30
  • 5b4db3a513 fix padding equal to input cristhianzl 2026-03-26 17:06:53 -03:00
  • 7050aa9881 fix button floating on new session, fix tracing on component generation cristhianzl 2026-03-26 17:00:57 -03:00
  • e691da85f3 feat(i18n): move language selector from account menu to Settings > General RamGopalSrikar 2026-03-26 15:54:58 -04:00
  • 907408a6b7 Merge branch 'release-1.9.0' into dependabot/npm_and_yarn/docs/multi-b243aed831 dependabot/npm_and_yarn/docs/multi-b243aed831 Janardan Singh Kavia 2026-03-27 01:17:36 +05:30
  • 881b37d657 fix: update PyTorch to 2.6.0+ to fix torch.load() RCE vulnerability (#12323) Janardan Singh Kavia 2026-03-27 01:16:56 +05:30
  • 32ec5ce013 refactor: minor cleanup from code review feat/flow-polling-mechanism ogabrielluiz 2026-03-26 16:42:54 -03:00
  • 3bdbfefb4a Merge branch 'release-1.9.0' into docs-rename-data-to-json docs-rename-data-to-json Mendon Kissling 2026-03-26 15:36:30 -04:00
  • 64d8863267 fix: log clipboard unavailability instead of silently passing fix/api-key-pyperclip-headless andifilhohub 2026-03-26 16:34:53 -03:00
  • 5e7aa51b1c notes Mendon Kissling 2026-03-26 15:32:09 -04:00
  • b106503190 find-and-replace-components Mendon Kissling 2026-03-26 15:30:10 -04:00
  • af69176561 release-notes Mendon Kissling 2026-03-26 15:29:30 -04:00
  • e8413f1d2e fix: handle missing clipboard in headless environments for langflow api-key command andifilhohub 2026-03-26 16:17:36 -03:00
  • 0d58c761ac fix(mcp): Stop sending API key as Bearer token in MCP client (#12349) Cristhian Zanforlin Lousa 2026-03-26 16:08:53 -03:00
  • b8084f07f7 [autofix.ci] apply automated fixes (attempt 3/3) autofix-ci[bot] 2026-03-26 18:56:00 +00:00
  • 93d8132b4a [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-26 18:54:07 +00:00
  • 75364be5d0 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 18:52:09 +00:00
  • 8e549ca4f8 Merge branch 'release-1.9.0' into feature/flow-devops-toolkit Eric Hare 2026-03-26 11:50:06 -07:00
  • 975b9299bc Merge branch 'release-1.9.0' into feature/flow-devops-toolkit Eric Hare 2026-03-26 11:38:44 -07:00
  • 3004f88382 datatypes-page-and-sidebars Mendon Kissling 2026-03-26 14:28:29 -04:00
  • 41d34b2048 fix: prevent path traversal in knowledge base create endpoint (#12337) a2a-initial-framework Antônio Alexandre Borges Lima 2026-03-26 15:20:05 -03:00
  • ae7a214998 chore: update translations from Globalization Pipeline [skip ci] github-actions[bot] 2026-03-26 18:17:40 +00:00
  • 48f7ea46bd [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 18:17:17 +00:00
  • f7c584ff18 Merge branch 'release-1.9.0' into feat/globalization-pipeline Ram Gopal Srikar Katakam 2026-03-26 14:16:20 -04:00
  • 951c603f58 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 18:15:08 +00:00
  • fce8867633 improve button cristhianzl 2026-03-26 15:13:02 -03:00
  • 3a287aaa7d fix: handle AUTO_LOGIN nullable user_id, remove double processFlows, fix pluralization ogabrielluiz 2026-03-26 14:54:13 -03:00
  • 937de0184e feat(ui): Add custom build error message transform hook (#12208) Cristhian Zanforlin Lousa 2026-03-26 15:11:31 -03:00
  • 6cd6267efd fix: Search beyond the first page of users (#12203) gh-readonly-queue/release-1.9.0/pr-12203-db68b52e2bfb579e80fa0a9da0d5ceb123416ba9 Eric Hare 2026-03-26 10:58:41 -07:00
  • db68b52e2b feat(ui): Add custom build error message transform hook (#12208) Cristhian Zanforlin Lousa 2026-03-26 14:57:38 -03:00
  • e4f6529ee4 fix(deployments): enforce deployment guard constraints with clean API errors Add DB trigger guards to block deleting deployed flow versions, deleting projects with deployments, and moving deployed flows across projects. Translate trigger violations to HTTP 409 with sanitized details, add best-effort pre-operation deployment/snapshot sync to reduce stale-state false positives, and cover guard parsing/delete flush behavior with tests. deployment-constrs Hamza Rashid 2026-03-25 21:46:35 +00:00
  • 62052642da [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-25 14:08:32 +00:00
  • a4e7735e7f [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-25 14:06:29 +00:00
  • 030abffbb1 fix(deployments): stop prefixing wxo raw connection app_ids Preserve caller app_ids for newly created wxo connections while keeping lf_ prefixing for tool/deployment naming, centralize resource_name_prefix validation, and update mapper/service schema tests and docs to reflect the new behavior. Hamza Rashid 2026-03-26 17:43:44 +00:00
  • 5f9b6b5072 new head Jordan Frazier 2026-03-25 21:25:11 -04:00
  • 1ee5cb54de fix(deployments): Harden delete cleanup and wxO create tests Jordan Frazier 2026-03-25 15:46:14 -04:00
  • a4e207658f fix(deployments): Isolate snapshot sync writes Jordan Frazier 2026-03-25 14:44:23 -04:00
  • 3bd3d1a037 update url validator docs; remove outdated reference to private url blacklist logic Hamza Rashid 2026-03-25 17:45:55 +00:00
  • d22217e497 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-25 15:36:06 +00:00
  • aba66eb876 fix(deployments): Harden provider account validation and WXO rollback Jordan Frazier 2026-03-25 11:33:39 -04:00
  • 609d5cbde2 [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-25 14:08:32 +00:00
  • f2dd2f2b4b [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-25 14:06:29 +00:00
  • 790e22fdcc feat: BREAKING: move credentials into provider_data and centralize update logic in mapper - Replace top-level api_key: SecretStr with opaque provider_data: dict in API schemas; mapper extracts credentials via resolve_credential_fields for DB storage - Add resolve_provider_account_update to base mapper so routes delegate full update-kwargs assembly (including cross-field logic) to the mapper - WXO mapper override re-derives provider_tenant_id when provider_url changes - Add tenant extraction utilities and validate_tenant_url_consistency in deployment_provider_account/utils.py as single source of truth - Add model_validator on DeploymentProviderAccount for defense-in-depth tenant/URL consistency checks - Rename DEPLOYMENT_BOUNDARY_RULES.md → RULES.md; document DB-direction mapper contract, credential flow, and update assembly - Update all tests for new provider_data shape, mapper update methods, tenant extraction, and model-level consistency validation Hamza Rashid 2026-03-25 05:28:13 +00:00
  • 8d5ddf495d use whitelist only for valid urls Hamza Rashid 2026-03-25 04:55:40 +00:00
  • cb9df8082c feat: verify provider credentials before account creation Add a verify_credentials step to the provider account creation flow that validates API keys against the provider before persisting them. This prevents storing invalid or revoked credentials and gives users immediate feedback. Key changes: - Add verify_credentials to the deployment adapter interface (base, service, protocol) with WXO implementation that obtains a token via the IBM authenticator - Add SSRF-hardened URL validation for provider_url (HTTPS-only, private IP blocklist, localhost rejection, normalization) - Introduce ValidatedUrl/ValidatedUrlOptional annotated types in the API schema layer - Refactor raise_for_status_and_detail to accept an optional cause parameter for explicit exception chain control - Use ResourceNotFoundError (parent) instead of DeploymentNotFoundError in raise_for_status_and_detail for provider-agnostic 404 mapping - Narrow get_authenticator return type to concrete union Hamza Rashid 2026-03-25 03:43:51 +00:00
  • 35943f1da5 remove bogus unverified math from migration file Hamza Rashid 2026-03-24 19:37:24 +00:00
  • e74020d51f fix: replace hand-written migration with Alembic-generated revision Replace the manually authored migration (b4e6f8a2c1d3) with an Alembic-generated one (8255e9fc18d9) for the deployment_provider_account name column. Fix SQLite compatibility: sa.func.concat() generates a concat() function call which does not exist in SQLite. Use sa.literal().concat() instead, which produces the || operator and works on both PostgreSQL and SQLite. Hamza Rashid 2026-03-24 19:34:25 +00:00
  • 57166a0205 feat: add name column to deployment_provider_account Add a required, user-chosen display name to provider accounts (e.g. "staging", "prod") that is unique within a given provider_key. Includes model, CRUD, API schema/route, mapper, migration with backfill, and tests. Hamza Rashid 2026-03-24 19:20:56 +00:00
  • 8d84fed2a7 refactor(deployments): enforce ownership boundaries on execution responses Move provider-owned execution identifiers (execution_id, agent_id, status, timestamps, errors) out of the top-level API response and into provider_data, keeping only Langflow-owned fields (deployment_id) at the top level. This prevents future collisions if Langflow introduces its own execution tracking. Key changes: - Remove execution_id from _ExecutionResponseBase; provider's opaque run identifier now lives exclusively inside provider_data - Rename WatsonxExecutionResultData → WatsonxAgentExecutionResultData (adapter layer) and split the API-layer class into a private base (_WatsonxApiAgentExecutionResultBase) with dedicated WatsonxApiAgentExecutionCreateResultData and WatsonxApiAgentExecutionStatusResultData subclasses - Translate WXO run_id → execution_id at the adapter boundary (create_agent_run_result / get_agent_run). - Collapse util_execution_id + util_execution_deployment_resource_key into a single util_resource_key_from_execution that trusts the adapter-provided result.deployment_id directly - Remove build_orchestrate_runs_query and extra payload fields (thread_id, llm_params, guardrails, etc.) unused in MVP - Simplify WxOClient.post_run signature (drop query_suffix) - Exclude provider_data from flow tool artifact to avoid unexpected top-level keys in the WxO tool runtime - Document ownership boundary rules in DEPLOYMENT_BOUNDARY_RULES.md §14 - Add E2E polling for terminal execution status, input format variants, and missing-deployment negative test - Expand unit tests for renamed schemas, field mapping, passthrough validation, and simplified payload builder Hamza Rashid 2026-03-24 15:33:40 +00:00
  • 62923efce9 Update tests Jordan Frazier 2026-03-24 11:18:41 -04:00
  • be227ab8e8 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-24 01:33:16 +00:00
  • b86b6ef1be Add user id authentication to a few missing endpoints Jordan Frazier 2026-03-23 21:30:46 -04:00