tiennm99/DocsGPT
1
0 Fork 0
mirror of https://github.com/tiennm99/DocsGPT.git synced 2026-10-12 18:15:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,179 Commits 2 Branches 0 Tags
6f5d2553d1e2dc1fd0b9ceca5fca72d00ac5bfca
Commit Graph
5179 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 6f5d2553d1 chore(deps): bump react-i18next from 17.0.6 to 17.0.11 in /frontend 
Bumps [react-i18next](https://github.com/i18next/react-i18next) from 17.0.6 to 17.0.11.
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v17.0.6...v17.0.11)

---
updated-dependencies:
- dependency-name: react-i18next
  dependency-version: 17.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-19 10:26:13 +00:00
Alex a51131d3fc Merge pull request #2682 from ManishMadan2882/main 
fix(frontend): dedupe Radix dismissable-layer so body pointer-events unlock
 2026-08-18 13:32:33 +01:00
ManishMadan2882 a7b5a1aaf1 fix(frontend): dedupe Radix dismissable-layer so body pointer-events unlocks 2026-08-17 03:42:23 +05:30
Alex a70362a5f3 feat: better fallback shim 2026-08-14 17:30:36 +01:00
Alex 0b58075107 chore: bump version to 0.19.0 2026-08-13 17:30:15 +01:00
Alex b5659ec8c2 Merge pull request #2672 from arc53/better-pre-send-guard 
feat: better attachments pre send guard
 2026-08-13 17:20:45 +01:00
Alex 49f89a67c2 feat: better attachments pre send guard 2026-08-13 17:19:39 +01:00
Alex 1430037a52 Merge pull request #2671 from arc53/composer-no-silent-drop 
fix: better message input arming
 2026-08-13 16:58:44 +01:00
Alex 8fdbc82199 fix: better message input arming 2026-08-13 16:57:08 +01:00
Alex 053f6d81b9 Merge pull request #2670 from arc53/attachment-extraction-provenance 
feat: attachment provenance
 2026-08-13 16:06:05 +01:00
Alex 7ad2f38512 feat: faster attachment processing 2026-08-13 16:04:45 +01:00
Alex 0a15ce8fbb feat: attachment provenance 2026-08-13 14:30:28 +01:00
Manish Madan 961eac4f5c Merge pull request #2661 from arc53/dependabot/npm_and_yarn/frontend/radix-ui/react-slot-1.3.3 
chore(deps): bump @radix-ui/react-slot from 1.3.0 to 1.3.3 in /frontend
 2026-08-13 17:30:45 +05:30
dependabot[bot] 41521c45d2 chore(deps): bump @radix-ui/react-slot from 1.3.0 to 1.3.3 in /frontend 
Bumps [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) from 1.3.0 to 1.3.3.
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

---
updated-dependencies:
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-13 11:58:31 +00:00
Manish Madan abae82eabd Merge pull request #2659 from arc53/dependabot/npm_and_yarn/frontend/shadcn/react-0.3.0 
chore(deps): bump @shadcn/react from 0.2.1 to 0.3.0 in /frontend
 2026-08-13 17:27:24 +05:30
dependabot[bot] ce88764511 chore(deps): bump @shadcn/react from 0.2.1 to 0.3.0 in /frontend 
Bumps [@shadcn/react](https://github.com/shadcn-ui/ui/tree/HEAD/packages/react) from 0.2.1 to 0.3.0.
- [Release notes](https://github.com/shadcn-ui/ui/releases)
- [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/shadcn-ui/ui/commits/@shadcn/react@0.3.0/packages/react)

---
updated-dependencies:
- dependency-name: "@shadcn/react"
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-13 11:54:41 +00:00
Manish Madan ac84cf2b56 Merge pull request #2657 from arc53/dependabot/npm_and_yarn/frontend/radix-ui/react-popover-1.1.23 
chore(deps): bump @radix-ui/react-popover from 1.1.19 to 1.1.23 in /frontend
 2026-08-13 17:23:13 +05:30
dependabot[bot] 0f6ffc2fd0 chore(deps): bump @radix-ui/react-popover in /frontend 
Bumps [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) from 1.1.19 to 1.1.23.
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

---
updated-dependencies:
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-13 11:50:38 +00:00
Manish Madan 5583280311 Merge pull request #2656 from arc53/dependabot/npm_and_yarn/frontend/types/react-19.2.18 
chore(deps-dev): bump @types/react from 19.2.14 to 19.2.18 in /frontend
 2026-08-13 17:19:32 +05:30
dependabot[bot] 3a4f845e46 chore(deps-dev): bump @types/react from 19.2.14 to 19.2.18 in /frontend 
Bumps [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) from 19.2.14 to 19.2.18.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-13 11:48:15 +00:00
Manish Madan bed45e011e Merge pull request #2654 from arc53/dependabot/npm_and_yarn/frontend/eslint-plugin-promise-7.3.0 
chore(deps-dev): bump eslint-plugin-promise from 6.6.0 to 7.3.0 in /frontend
 2026-08-13 17:16:54 +05:30
dependabot[bot] 2f9e938838 chore(deps-dev): bump eslint-plugin-promise in /frontend 
Bumps [eslint-plugin-promise](https://github.com/eslint-community/eslint-plugin-promise) from 6.6.0 to 7.3.0.
- [Release notes](https://github.com/eslint-community/eslint-plugin-promise/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-promise/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-community/eslint-plugin-promise/compare/v6.6.0...v7.3.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-promise
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-13 11:34:48 +00:00
Alex daf8a5aa26 Merge pull request #2669 from arc53/images-sharing-refactor 
feat: image refactor
 2026-08-13 11:26:13 +01:00
Alex cf075790ab fix: k8s config and silent source ingests 2026-08-13 11:25:56 +01:00
Alex e4b06609b1 fix: adopted agent image loss 2026-08-13 10:05:17 +01:00
Alex ee552620eb fix: mini nits 2026-08-12 17:05:57 +01:00
Alex 71c2e8d4c9 Update base.py 2026-08-12 16:58:53 +01:00
Alex 663869868f fix: better zip protection 2026-08-12 16:55:33 +01:00
Alex 9d091681e6 Merge pull request #2668 from ManishMadan2882/main 
chore(frontend): target Node 22 and fix Vite native config loader warning
 2026-08-12 15:48:03 +01:00
Alex 8dd4c9a417 fix: more mermaid protection 2026-08-12 15:01:41 +01:00
Alex 4b1bc17c77 feat: image refactor 2026-08-12 12:36:43 +01:00
ManishMadan2882 bf8aec0dd7 (fix/switch): clear color contrast 2026-08-12 17:00:55 +05:30
ManishMadan2882 7167befe59 chore(frontend): target Node 22 and fix Vite native config loader warning 2026-08-12 16:43:34 +05:30
Alex 1c2b0f506a Merge pull request #2667 from arc53/chore/bump-docling-2.119 
chore: bump docling
 2026-08-12 09:14:47 +01:00
Alex ca53a3ac4b chore: bump docling 2026-08-12 09:05:00 +01:00
Alex f1c13d4f30 Merge pull request #2653 from ManishMadan2882/fix/react-widget-audit-security 
fix(react-widget): resolve npm audit advisories in shipped dependency tree
 2026-08-11 17:30:40 +01:00
Alex 8d4ac88a04 Merge pull request #2666 from arc53/chore/docs-deps-bump 
chore: bump docs dependencies to latest
 2026-08-11 17:28:24 +01:00
Alex 1b612e4e96 chore: bump docs dependencies to latest 
Upgrade the docs site to Next 16 and React 19:

- next 15.5.9 -> 16.3.0
- react / react-dom 18.2.0 -> 19.2.8
- @vercel/analytics 1.1.1 -> 2.0.1
- docsgpt-react 0.5.1 -> 0.6.3
- pagefind 1.4.0 -> 1.5.2
- typescript 5.9.3 -> 6.0.3

Two deliberate holds:

Next 16 makes Turbopack the default builder, but nextra 4.6.1 is not
compatible with it. Its loader calls transformerTwoslash() at module top
level, and twoslash gets an undefined ts.sys inside Turbopack's
webpack-loader shim, so every .mdx file fails to compile. Nextra offers no
option to disable twoslash, so the dev and build scripts opt out with
--webpack until nextra supports Turbopack.

typescript stays on 6.0.3 rather than 7.0.2 for the same reason: TS 7 is the
native rewrite and drops the ts.sys API that @typescript/vfs and twoslash
rely on, which breaks the build even under webpack. twoslash declares
typescript ^5.5.0 || ^6.0.0, so 6.0.3 is the ceiling this toolchain supports.

nextra and nextra-theme-docs were already at the latest 4.6.1.
 2026-08-11 17:23:28 +01:00
Alex 0d7fd529ef Merge pull request #2664 from arc53/feat/agent-guardrails 
feat: guardrails init
 2026-08-11 17:06:09 +01:00
Alex d21a49158c fix: close two guardrail bypasses and an inert instance floor 
URLCheck read the host from a regex capture group whose character class
excluded "@", so a userinfo-prefixed URL passed its userinfo off as the
host: https://allowed.com@evil.tld/ satisfied an allow_hosts entry for
allowed.com, and http://ok.com@blocked.tld/ evaded block_hosts. Match the
whole URL and take the host from the parsed authority instead. A URL that
will not parse is now redacted rather than waved through.

The PRIVATE_KEY secret pattern matched only the BEGIN header, so a redact
action masked the header and released the key material and END line in
the clear. Span the whole armored block, falling back to the header when
the block is unterminated or over the cap, and raise max_match_chars so
the streaming guard's window still covers a full PEM. The pattern also
now catches ENCRYPTED, DSA and PGP BLOCK headers, which it missed
entirely.

The documented GUARDRAILS_FLOOR example omitted "enabled": true, and the
field defaults to false, so an operator copying it got a floor that
parsed clean, merged to nothing and warned nowhere. Fix the example and
warn when a floor is set but disabled.
 2026-08-11 16:15:58 +01:00
Alex 3adc09af5d fix: more guardrail hardening 2026-08-11 15:13:27 +01:00
Alex 9446c16108 fix: guardrail fixes 2026-08-11 13:33:52 +01:00
Alex e44cff2e91 fix: mini copy edits 2026-08-11 12:29:46 +01:00
Alex 4f5d565298 Merge pull request #2665 from arc53/ManishMadan2882/main 
(fix)ui/chat: drop bubble avatar chrome, unify live-step state
 2026-08-11 12:16:23 +01:00
Alex 9aa7a01949 fix: e2e tests 2026-08-11 11:47:09 +01:00
Alex 64a6b81fbb feat: guardrails init 2026-08-11 00:09:56 +01:00
ManishMadan2882 c5b6c27f05 (chore)deps: purge unused snarkdown 2026-08-11 03:27:51 +05:30
ManishMadan2882 7d1aafebce fix(react-widget): resolve npm audit advisories in shipped dependency tree 
Lockfile-only update; package.json is unchanged.

extensions/react-widget is published as the npm package `docsgpt` and as an
HTML embed, so its production dependency tree reaches every consumer. That
tree carried 5 advisories (2 high, 2 moderate, 1 low), 7 across the full tree.

  dompurify        3.4.0  -> 3.4.13  (moderate, XSS)
  js-yaml          4.1.1  -> 4.3.1   (high, quadratic-complexity DoS)
  linkify-it       5.0.0  -> 5.0.2   (high)
  markdown-it     14.1.0  -> 14.3.0  (moderate)
  svgo             4.0.1  -> 4.0.2   (high, dev)
  brace-expansion  1.1.12 -> 1.1.18  (high, CVE-2026-13149; nested copies)
  @babel/core      7.29.0 -> 7.29.7  (low)

npm audit goes 7 -> 0 (production tree 5 -> 0). Verified locally: clean
npm ci, `npm run build` (embed) and `npm run build:react` (library) both
build, npm run lint and tsc --noEmit pass.
 2026-08-11 03:27:51 +05:30
Alex f7b3d3eacd Merge pull request #2636 from ManishMadan2882/main 
(feat)ui/chat: inline streaming steps for reasoning and tool calls
 2026-08-10 19:49:21 +01:00
Alex 94766c93cb fix: minor edits, cleanup, light changes 2026-08-10 19:45:57 +01:00