langflow-ai/langflow
1
146.3k
Fork 0
mirror of https://github.com/langflow-ai/langflow.git synced 2026-03-28 01:21:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 1ad7e51a3e peer-review Mendon Kissling 2026-03-26 16:42:02 -04:00
  • 09b574a527 [autofix.ci] apply automated fixes fix/monitor-message-ownership autofix-ci[bot] 2026-03-26 20:33:11 +00:00
  • 96cb1cc17d Merge branch 'release-1.9.0' into fix/monitor-message-ownership Janardan Singh Kavia 2026-03-27 01:59:36 +05:30
  • 5b4db3a513 fix padding equal to input cristhianzl 2026-03-26 17:06:53 -03:00
  • 7050aa9881 fix button floating on new session, fix tracing on component generation cristhianzl 2026-03-26 17:00:57 -03:00
  • e691da85f3 feat(i18n): move language selector from account menu to Settings > General RamGopalSrikar 2026-03-26 15:54:58 -04:00
  • 907408a6b7 Merge branch 'release-1.9.0' into dependabot/npm_and_yarn/docs/multi-b243aed831 dependabot/npm_and_yarn/docs/multi-b243aed831 Janardan Singh Kavia 2026-03-27 01:17:36 +05:30
  • 881b37d657 fix: update PyTorch to 2.6.0+ to fix torch.load() RCE vulnerability (#12323) Janardan Singh Kavia 2026-03-27 01:16:56 +05:30
  • 32ec5ce013 refactor: minor cleanup from code review feat/flow-polling-mechanism ogabrielluiz 2026-03-26 16:42:54 -03:00
  • 3bdbfefb4a Merge branch 'release-1.9.0' into docs-rename-data-to-json docs-rename-data-to-json Mendon Kissling 2026-03-26 15:36:30 -04:00
  • 64d8863267 fix: log clipboard unavailability instead of silently passing fix/api-key-pyperclip-headless andifilhohub 2026-03-26 16:34:53 -03:00
  • 5e7aa51b1c notes Mendon Kissling 2026-03-26 15:32:09 -04:00
  • b106503190 find-and-replace-components Mendon Kissling 2026-03-26 15:30:10 -04:00
  • af69176561 release-notes Mendon Kissling 2026-03-26 15:29:30 -04:00
  • e8413f1d2e fix: handle missing clipboard in headless environments for langflow api-key command andifilhohub 2026-03-26 16:17:36 -03:00
  • 0d58c761ac fix(mcp): Stop sending API key as Bearer token in MCP client (#12349) Cristhian Zanforlin Lousa 2026-03-26 16:08:53 -03:00
  • b8084f07f7 [autofix.ci] apply automated fixes (attempt 3/3) autofix-ci[bot] 2026-03-26 18:56:00 +00:00
  • 93d8132b4a [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-26 18:54:07 +00:00
  • 75364be5d0 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 18:52:09 +00:00
  • 8e549ca4f8 Merge branch 'release-1.9.0' into feature/flow-devops-toolkit Eric Hare 2026-03-26 11:50:06 -07:00
  • 975b9299bc Merge branch 'release-1.9.0' into feature/flow-devops-toolkit Eric Hare 2026-03-26 11:38:44 -07:00
  • 3004f88382 datatypes-page-and-sidebars Mendon Kissling 2026-03-26 14:28:29 -04:00
  • 41d34b2048 fix: prevent path traversal in knowledge base create endpoint (#12337) Antônio Alexandre Borges Lima 2026-03-26 15:20:05 -03:00
  • ae7a214998 chore: update translations from Globalization Pipeline [skip ci] github-actions[bot] 2026-03-26 18:17:40 +00:00
  • 48f7ea46bd [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 18:17:17 +00:00
  • f7c584ff18 Merge branch 'release-1.9.0' into feat/globalization-pipeline Ram Gopal Srikar Katakam 2026-03-26 14:16:20 -04:00
  • 951c603f58 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 18:15:08 +00:00
  • fce8867633 improve button cristhianzl 2026-03-26 15:13:02 -03:00
  • 3a287aaa7d fix: handle AUTO_LOGIN nullable user_id, remove double processFlows, fix pluralization ogabrielluiz 2026-03-26 14:54:13 -03:00
  • 937de0184e feat(ui): Add custom build error message transform hook (#12208) Cristhian Zanforlin Lousa 2026-03-26 15:11:31 -03:00
  • 6cd6267efd fix: Search beyond the first page of users (#12203) gh-readonly-queue/release-1.9.0/pr-12203-db68b52e2bfb579e80fa0a9da0d5ceb123416ba9 Eric Hare 2026-03-26 10:58:41 -07:00
  • db68b52e2b feat(ui): Add custom build error message transform hook (#12208) Cristhian Zanforlin Lousa 2026-03-26 14:57:38 -03:00
  • e4f6529ee4 fix(deployments): enforce deployment guard constraints with clean API errors Add DB trigger guards to block deleting deployed flow versions, deleting projects with deployments, and moving deployed flows across projects. Translate trigger violations to HTTP 409 with sanitized details, add best-effort pre-operation deployment/snapshot sync to reduce stale-state false positives, and cover guard parsing/delete flush behavior with tests. deployment-constrs Hamza Rashid 2026-03-25 21:46:35 +00:00
  • 62052642da [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-25 14:08:32 +00:00
  • a4e7735e7f [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-25 14:06:29 +00:00
  • 030abffbb1 fix(deployments): stop prefixing wxo raw connection app_ids Preserve caller app_ids for newly created wxo connections while keeping lf_ prefixing for tool/deployment naming, centralize resource_name_prefix validation, and update mapper/service schema tests and docs to reflect the new behavior. Hamza Rashid 2026-03-26 17:43:44 +00:00
  • 5f9b6b5072 new head Jordan Frazier 2026-03-25 21:25:11 -04:00
  • 1ee5cb54de fix(deployments): Harden delete cleanup and wxO create tests Jordan Frazier 2026-03-25 15:46:14 -04:00
  • a4e207658f fix(deployments): Isolate snapshot sync writes Jordan Frazier 2026-03-25 14:44:23 -04:00
  • 3bd3d1a037 update url validator docs; remove outdated reference to private url blacklist logic Hamza Rashid 2026-03-25 17:45:55 +00:00
  • d22217e497 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-25 15:36:06 +00:00
  • aba66eb876 fix(deployments): Harden provider account validation and WXO rollback Jordan Frazier 2026-03-25 11:33:39 -04:00
  • 609d5cbde2 [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-25 14:08:32 +00:00
  • f2dd2f2b4b [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-25 14:06:29 +00:00
  • 790e22fdcc feat: BREAKING: move credentials into provider_data and centralize update logic in mapper - Replace top-level api_key: SecretStr with opaque provider_data: dict in API schemas; mapper extracts credentials via resolve_credential_fields for DB storage - Add resolve_provider_account_update to base mapper so routes delegate full update-kwargs assembly (including cross-field logic) to the mapper - WXO mapper override re-derives provider_tenant_id when provider_url changes - Add tenant extraction utilities and validate_tenant_url_consistency in deployment_provider_account/utils.py as single source of truth - Add model_validator on DeploymentProviderAccount for defense-in-depth tenant/URL consistency checks - Rename DEPLOYMENT_BOUNDARY_RULES.md → RULES.md; document DB-direction mapper contract, credential flow, and update assembly - Update all tests for new provider_data shape, mapper update methods, tenant extraction, and model-level consistency validation Hamza Rashid 2026-03-25 05:28:13 +00:00
  • 8d5ddf495d use whitelist only for valid urls Hamza Rashid 2026-03-25 04:55:40 +00:00
  • cb9df8082c feat: verify provider credentials before account creation Add a verify_credentials step to the provider account creation flow that validates API keys against the provider before persisting them. This prevents storing invalid or revoked credentials and gives users immediate feedback. Key changes: - Add verify_credentials to the deployment adapter interface (base, service, protocol) with WXO implementation that obtains a token via the IBM authenticator - Add SSRF-hardened URL validation for provider_url (HTTPS-only, private IP blocklist, localhost rejection, normalization) - Introduce ValidatedUrl/ValidatedUrlOptional annotated types in the API schema layer - Refactor raise_for_status_and_detail to accept an optional cause parameter for explicit exception chain control - Use ResourceNotFoundError (parent) instead of DeploymentNotFoundError in raise_for_status_and_detail for provider-agnostic 404 mapping - Narrow get_authenticator return type to concrete union Hamza Rashid 2026-03-25 03:43:51 +00:00
  • 35943f1da5 remove bogus unverified math from migration file Hamza Rashid 2026-03-24 19:37:24 +00:00
  • e74020d51f fix: replace hand-written migration with Alembic-generated revision Replace the manually authored migration (b4e6f8a2c1d3) with an Alembic-generated one (8255e9fc18d9) for the deployment_provider_account name column. Fix SQLite compatibility: sa.func.concat() generates a concat() function call which does not exist in SQLite. Use sa.literal().concat() instead, which produces the || operator and works on both PostgreSQL and SQLite. Hamza Rashid 2026-03-24 19:34:25 +00:00
  • 57166a0205 feat: add name column to deployment_provider_account Add a required, user-chosen display name to provider accounts (e.g. "staging", "prod") that is unique within a given provider_key. Includes model, CRUD, API schema/route, mapper, migration with backfill, and tests. Hamza Rashid 2026-03-24 19:20:56 +00:00
  • 8d84fed2a7 refactor(deployments): enforce ownership boundaries on execution responses Move provider-owned execution identifiers (execution_id, agent_id, status, timestamps, errors) out of the top-level API response and into provider_data, keeping only Langflow-owned fields (deployment_id) at the top level. This prevents future collisions if Langflow introduces its own execution tracking. Key changes: - Remove execution_id from _ExecutionResponseBase; provider's opaque run identifier now lives exclusively inside provider_data - Rename WatsonxExecutionResultData → WatsonxAgentExecutionResultData (adapter layer) and split the API-layer class into a private base (_WatsonxApiAgentExecutionResultBase) with dedicated WatsonxApiAgentExecutionCreateResultData and WatsonxApiAgentExecutionStatusResultData subclasses - Translate WXO run_id → execution_id at the adapter boundary (create_agent_run_result / get_agent_run). - Collapse util_execution_id + util_execution_deployment_resource_key into a single util_resource_key_from_execution that trusts the adapter-provided result.deployment_id directly - Remove build_orchestrate_runs_query and extra payload fields (thread_id, llm_params, guardrails, etc.) unused in MVP - Simplify WxOClient.post_run signature (drop query_suffix) - Exclude provider_data from flow tool artifact to avoid unexpected top-level keys in the WxO tool runtime - Document ownership boundary rules in DEPLOYMENT_BOUNDARY_RULES.md §14 - Add E2E polling for terminal execution status, input format variants, and missing-deployment negative test - Expand unit tests for renamed schemas, field mapping, passthrough validation, and simplified payload builder Hamza Rashid 2026-03-24 15:33:40 +00:00
  • 62923efce9 Update tests Jordan Frazier 2026-03-24 11:18:41 -04:00
  • be227ab8e8 [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-24 01:33:16 +00:00
  • b86b6ef1be Add user id authentication to a few missing endpoints Jordan Frazier 2026-03-23 21:30:46 -04:00
  • 904617954d feat(flow-versions): add deployment awareness and sync-on-read Jordan Frazier 2026-03-23 21:10:56 -04:00
  • 6cc4eca4d9 feat: convert provider_key and deployment_type columns to DB-level enums Replace plain string columns with SQLAlchemy Enum types backed by Postgres/SQLite enum constraints, enforcing valid values at the DB layer rather than only in application code. Migration follows expand-contract pattern (add enum column, backfill, drop old string column, rename) with index ops outside batch context to avoid SQLite column-lookup issues. Upgrade and downgrade are fully atomic. - Add DeploymentProviderKey enum as single source of truth for provider identifiers; remove magic strings and _DeploymentTypeColumn TypeDecorator - Make provider_key immutable after creation (remove from update request schema and API handler) - Fix pre-existing test gap: add missing deployment_type argument to all TestDeploymentCRUD create_deployment() calls Hamza Rashid 2026-03-23 18:30:08 +00:00
  • 91f17d6855 fix(deployments): remove upsert behavior and fail fast on duplicate name Hamza Rashid 2026-03-23 05:46:54 +00:00
  • bcd4c9ec98 remove pompous performance commentary Hamza Rashid 2026-03-23 05:28:30 +00:00
  • 156e9115c8 refactor(deployments): extract route helpers, harden sync and error handling Move bulk of deployment route logic into mappers/helpers layer to slim down deployments.py and enforce clearer boundary between routes, mappers, and adapters (documented in DEPLOYMENT_BOUNDARY_RULES.md). Key changes: - Extract ~700 lines from deployments.py into helpers.py (pagination, adapter/mapper resolution, attachment management, snapshot sync, rollback, response shaping) - Add read-path snapshot-level sync: get_deployment and list_deployments_synced verify provider_snapshot_ids against the provider and prune stale attachments, with graceful fallback on error - Add compensating rollback for create (rollback_provider_create) and update (rollback_provider_update) when DB commit fails after provider mutation, using mapper-driven payload reconstruction - Introduce handle_adapter_errors() context manager centralising DeploymentServiceError → HTTP status mapping via http_status_for_deployment_error; sanitise 500 detail to avoid leaking internals - Add DeploymentNotConfiguredError → 503 mapping - Add util_snapshot_ids_to_verify and resolve_rollback_update to base mapper with WxO overrides for provider-specific snapshot ID extraction and put_tools-based rollback payloads - Add put_tools field to WatsonxDeploymentUpdatePayload for full tool list replacement; early-return in build_provider_update_plan and validate_operation_references when put_tools is set - Extract verify_tools_by_ids into core/tools.py helper - Harden resource_name_prefix with strip_whitespace + min_length=1 - Deduplicate snapshot_ids before provider calls - Add deterministic order_by(created_at) to attachment CRUD queries - Add exc_info=True to all best-effort rollback/compensate error logs - Add session.rollback() in get_deployment snapshot sync error path - Warn when list_snapshots receives both deployment_ids and snapshot_ids - Add E2E scenarios for empty snapshot list, mixed snapshot IDs, tools endpoint, and deployment re-list after update Tests: - Add test_deployment_route_handlers.py covering stale-row delete + commit, non-404 adapter errors, handle_adapter_errors wiring, snapshot sync (happy path, skip, error fallback), project-scoped flow version validation for create and update - Expand test_deployment_sync.py with snapshot-phase tests, rollback tests, pagination guard, and project-scoped validation - Add deployment_type assertion to response mapping test - Add DeploymentNotConfiguredError and bare DeploymentServiceError cases to exception mapping tests - Add put_tools schema and update plan tests Hamza Rashid 2026-03-23 05:23:10 +00:00
  • aa8fb8b90a Enforce DeploymentType enum and add description column Hamza Rashid 2026-03-22 00:13:00 +00:00
  • 0f6ddb4998 refactor(deployments): replace snapshot_id/reference_id with source_ref-correlated tool refs Introduce WatsonxToolRefBinding to correlate source_ref (flow version id) with provider tool_id across all operation types. This replaces the prior reference_id and snapshot_id fields with a unified structure that carries provenance through create, bind, unbind, and remove_tool operations. Key changes: - Flatten API operation payloads: hoist flow_version_id onto operations, remove nested WatsonxApiUpdateToolReference wrapper - Replace tools.existing_ids with inline tool_id_with_ref on bind operations - Rename WatsonxCreateSnapshotBinding to WatsonxToolRefBinding (input) and WatsonxResultToolRefBinding (output, with created flag) - Add created_app_ids to update results for connection tracking - Raise HTTPException on contract violations in _to_api_tool_app_bindings instead of silently dropping unmappable bindings - Add schema-level validation for conflicting source_ref on same tool_id - E2E: cache tool_id→source_ref from create results, use helpers to build refs with distinct source_ref vs tool_id values Hamza Rashid 2026-03-21 20:13:36 +00:00
  • 19a72664d7 add todo in execution.py Hamza Rashid 2026-03-21 14:59:04 +00:00
  • a5cf85f66d further refactoring. add rollback of existing tools (undo new app bindings) in the create path Hamza Rashid 2026-03-20 21:51:16 +00:00
  • 38ad76a010 api impl for wxo-specific create payload Hamza Rashid 2026-03-20 17:18:48 +00:00
  • 170669ba9e refactor(deployments): modularize watsonx orchestrate create/update flow Hamza Rashid 2026-03-20 04:49:06 +00:00
  • 63c9ee34bd fix(deployments): harden watsonx payload boundary contracts Hamza Rashid 2026-03-19 20:24:35 +00:00
  • 8e29fff955 first pass with formalized boundary rules Hamza Rashid 2026-03-19 03:27:44 +00:00
  • f21752d5e6 patch down-revision Hamza Rashid 2026-03-18 03:14:25 +00:00
  • 158241fbba refactor(deployments): align provider mapper routing and WXO update payload mapping Hamza Rashid 2026-03-18 03:05:37 +00:00
  • 7752f7586a rebase on release-1.9.0 and align with lfx/services Hamza Rashid 2026-03-17 19:03:15 +00:00
  • 9a9cd05ef9 deployment sync: extract helpers, server-side type filter, orphan detection Jordan Frazier 2026-03-12 14:05:36 -04:00
  • 06408b10a5 add materialize_snapshots to deployment service protocol Jordan Frazier 2026-03-12 06:54:50 -04:00
  • 9018b25e0d [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-12 10:24:56 +00:00
  • acc676ddd3 harden deployment API: fail loudly on invalid state instead of silently passing Jordan Frazier 2026-03-12 06:22:18 -04:00
  • ca88638342 rename column to "provider_snapshot_id" Hamza Rashid 2026-03-11 18:01:20 +00:00
  • 0fef93005d address bugs and inconsistencies Hamza Rashid 2026-03-10 15:13:46 +00:00
  • f6f46beebf [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-09 20:53:31 +00:00
  • 9ab39e79f4 Add flow version migration and minor exception handling, etc Jordan Frazier 2026-03-09 16:50:34 -04:00
  • 10798fb10e recover a little todo comment Hamza Rashid 2026-03-09 16:07:28 +00:00
  • 79c757e946 Fix provider account id mapping Jordan Frazier 2026-03-09 12:01:19 -04:00
  • bfd590ba2a update to use "version" terminology for flows instead of outdated "history" verbage Hamza Rashid 2026-03-09 15:43:03 +00:00
  • 03a2967e1f add missing table Hamza Rashid 2026-03-09 15:20:28 +00:00
  • 555f98e5cb checkout api handlers Hamza Rashid 2026-03-09 14:55:03 +00:00
  • ad53aa1aaf use-hackerone-and-remove-cve-list Mendon Kissling 2026-03-26 13:34:27 -04:00
  • 6126d2d131 fix(core): Add environment variable fallback for provider API key resolution (#12288) Cristhian Zanforlin Lousa 2026-03-26 14:31:36 -03:00
  • b35c1231c7 fix: Add ephemeral file upload support (#12300) Cristhian Zanforlin Lousa 2026-03-26 14:31:32 -03:00
  • 5a6d4ec140 chore(deps-dev): bump requests from 2.32.5 to 2.33.0 dependabot/uv/requests-2.33.0 dependabot[bot] 2026-03-26 17:29:37 +00:00
  • ed12502ef1 fix: Use plain axios for external GitHub and Discord API calls (#12347) Cristhian Zanforlin Lousa 2026-03-26 14:28:43 -03:00
  • 1a4ea25d79 [autofix.ci] apply automated fixes (attempt 3/3) fix-read-file-duplicates autofix-ci[bot] 2026-03-26 17:24:11 +00:00
  • 933d275e1e [autofix.ci] apply automated fixes (attempt 2/3) autofix-ci[bot] 2026-03-26 17:22:19 +00:00
  • 8d7638a1ac [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 17:20:26 +00:00
  • 9175104f52 fix: canvas reload, locking, and toast formatting ogabrielluiz 2026-03-26 14:19:26 -03:00
  • af8b69add9 Update component_index.json Eric Hare 2026-03-26 10:18:31 -07:00
  • 34ba05dd5b [autofix.ci] apply automated fixes autofix-ci[bot] 2026-03-26 17:17:11 +00:00
  • 94e5f34dc2 Merge branch 'release-1.9.0' into fix-read-file-duplicates Eric Hare 2026-03-26 10:15:09 -07:00
  • 047ef8200a feat(sdk): add BackgroundJob for non-blocking async flow execution Eric Hare 2026-03-26 10:11:00 -07:00
  • 9be0d4ed92 feat(sdk): add WorkflowResponse-style helpers to RunResponse Eric Hare 2026-03-26 10:06:41 -07:00
  • a0834df3a2 [autofix.ci] apply automated fixes feature/le-374 autofix-ci[bot] 2026-03-26 15:49:19 +00:00
  • 0e6a372072 test: add E2E tests for token usage tracking Viktor Avelino 2026-03-26 11:47:20 -04:00
  • 62a7ef38cd fix: UX improvements for agent events banner ogabrielluiz 2026-03-26 12:11:34 -03:00