Onyx - Browse /v4.1.0 at SourceForge.net

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
README.md	< 16 hours ago	50.2 kB	0
v4.1.0 source code.tar.gz	< 16 hours ago	18.5 MB	0
v4.1.0 source code.zip	< 16 hours ago	21.5 MB	0
Totals: 3 Items		40.0 MB	0

Warning

Do not upgrade to this release if you want to preserve your existing indexed documents but have not yet run the document index migration, which can be done from any version v3.x. See additional documentation here.

See the assets to download this version and install.

What's Changed

fix(sharepoint): skip per-site Graph failures instead of aborting run by @Subash-Mohan in https://github.com/onyx-dot-app/onyx/pull/11193
feat(craft): backend-agnostic sandbox cleanup + snapshot stream helpers by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11218
fix(ollama): honor Modelfile num_ctx when fetching models by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11160
fix: sharepoint download retries by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11221
feat(craft): docker-compose sandbox backend by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11222
chore(install): consolidate Docker Compose detection into helper by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11233
refactor(craft): shared ACPExecClient base across K8s + Docker by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11225
docs(craft): approvals plan by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11224
fix: mcp oauth token handling by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11238
feat(helm): optional External Secrets Operator support by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11237
fix(icons): size unsized @opal/icons usages by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11239
chore(deps): bump pillow from 11.3.0 to 12.2.0 in /backend/onyx/server/features/build/sandbox/kubernetes/docker by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11146
chore(deployment): wait for healthy services via docker compose --wait by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11234
feat(tracing): populate Langfuse user_id and release on traces by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11247
feat(wiki): skip document push hook during initial indexing by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/11248
chore(deps): bump idna from 3.11 to 3.15 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11202
chore(deps): bump lxml from 6.0.2 to 6.1.0 in /backend/onyx/server/features/build/sandbox/kubernetes/docker by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11147
chore(ci): replace bespoke curl healthchecks with docker compose --wait by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11252
feat(craft): Add tables for external apps by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11033
docs(craft): document docker sandbox backend + check in feature plans by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11232
fix(tenants): block GATED_ACCESS tenants from cloud API by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11253
fix(install): default to latest GitHub release for configs and image tag by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11250
perf(tests): drop unnecessary reset fixture from no_vectordb tests by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11256
chore(install): enable shellcheck on install.sh by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11254
chore(ci): render sandbox namespace from helm chart in craft k8s lane by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11259
chore(craft): remove extraneous init.py files by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11249
chore(deps): migrate web/ package management from npm to bun by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11262
fix(docker): typo in the nginx conf name in no-letsencrypt compose file by @psyray in https://github.com/onyx-dot-app/onyx/pull/11236
chore(tests): drop unnecessary reset fixtures from integration tests by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11261
refactor(tailwind): use Opal preset, remove 220 lines of duplicated tokens by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11263
fix(sharepoint): handle HTTP 423 locked sites as per-site failures by @Subash-Mohan in https://github.com/onyx-dot-app/onyx/pull/11266
fix(craft): unblock sandbox push under telepresence and own .env.k8s by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11257
feat(helm): fail-fast safeguard against 0.4.x → 0.5.x Vespa data loss by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11255
fix(ci): use runs-on volume=100gb label (hdd= was silently ignored) by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11271
refactor(modals): move components/modals → sections/modals, adopt Formik by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11264
feat(craft): wake user sandbox when a scheduled task fires by @Weves in https://github.com/onyx-dot-app/onyx/pull/11171
fix(craft): remove public_global sharing scope by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11272
fix(craft): strip viewer credentials in webapp proxy by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11273
fix(lint): collapse sandbox_daemon import block (ruff isort) by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11274
chore(dev): use bun for Web Server launch config by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11279
perf(craft): bun + hardlinked node_modules for sandbox sessions by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11276
feat(helm): gate scheduled-tasks worker on ENABLE_CRAFT by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11270
refactor(craft): Skills have built-in-skill-id by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11258
fix(chat): cache failed plaintext extractions to stop S3 re-fetch storm by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11268
ci(craft): enable snapshot tests in ci by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11283
fix: confluence pagination limit by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11284
refactor(craft): remove org_info directory from sandbox by @Weves in https://github.com/onyx-dot-app/onyx/pull/11198
feat(craft): External App Management by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11039
fix: confluence pagination limit2 by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11291
fix(tests): reset_postgres requires POSTGRES_DB env by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11292
chore(dev): add k8s: alembic upgrade head vscode task by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11281
fix: docfetching doc count by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11294
chore(ci): replace integration test image with devcontainer by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11280
feat(opal): move font definitions into opal typography.css by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11297
feat: persistent indexing by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11301
feat(craft): OAuth for external apps by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11087
feat(connector): Index documents on github connector by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11293
fix(auth): make /auth/verify tenant-aware in multi-tenant cloud by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/10868
fix(metrics): populate llm_model column for single-model chats by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11309
chore(devcontainer): upgrade image by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11306
ci: allow Linear check ignorelist for jmelahman by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11307
chore(devtools): replace npm with bun in ods by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11275
feat(opal): more icons by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11310
chore(ci): upgrade zizmor to 1.25.2 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11312
chore(tests): use FastAPI TestClient for integration tests by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11300
chore(deps): upgrade ods: 0.7.7->0.7.8 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11319
fix(skills): drop orphan manifest_metadata before built-in seed by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11321
refactor(craft): nuke LocalSandboxManager, make kind the canonical Craft dev path by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11285
chore(deps): add mitmproxy==11.0.2 by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11320
fix: persistent indexing docfetching raise by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11311
feat: catch sharepoint errors by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11324
fix: remove unnecessary license dependency from test by @yuhongsun96 in https://github.com/onyx-dot-app/onyx/pull/11325
fix(voice): unbreak OpenAI STT after Realtime Beta API deprecation by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11322
perf(craft): shrink sandbox image and prune unused deps by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11304
feat(craft): Built-in apps for slack, gcal, linear by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11346
fix: dispose all Postgres pools on api server shutdown by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11350
fix(skills): fix skills table simplification by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11349
fix(images): deduplicate project images and add opt-in Azure cap by @Subash-Mohan in https://github.com/onyx-dot-app/onyx/pull/11344
chore(craft): bump default models to gpt-5.5 by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11333
feat(craft): Custom External Apps by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11347
refactor(external-apps): Improve design for built-in external app defns by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11364
fix(craft): auto-refresh scheduled task runs by @Weves in https://github.com/onyx-dot-app/onyx/pull/11359
feat(craft): opencode-serve transport with PodEventBus by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11334
fix(ci): set MODEL_SERVER_HOST in nightly LLM provider test runner by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11353
chore(deps): bump openai to 2.38.0 and tiktoken to 0.13.0 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11380
fix(install): drop sg dependency, use sudo for docker commands by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11326
fix(craft): opencode-serve translator — termination, status shape, delta race by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11384
chore(deps): upgrade litellm to 1.85.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11385
chore(deploy): replace bespoke nginx healthcheck in init-letsencrypt.sh by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11382
fix(web): set conservative SWR opts on useCCPairs by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11387
feat(billing): cache /proxy/billing-information per tenant in Redis by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11389
ci(helm): serialize releases to avoid gh-pages push race by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11399
perf(ci): skip project sync for ods check-lazy-imports hook by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11400
feat(api): cache /auth/type response in browsers by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11388
fix(craft): pre-register all build-mode LLM providers on session restore by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11396
fix(api-key): clean up synthetic user associations on delete (#11118) by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11404
fix: mcp user email replacement by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11390
chore(db): drop unused KG indexes + redundant chunk_stats.id index by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11398
feat(voice): migrate OpenAI streaming STT to GA Realtime API by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11323
fix: jira dc v9 perm sync by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11409
docs(craft): plan live scheduled task runs by @Weves in https://github.com/onyx-dot-app/onyx/pull/11393
fix(craft): scope opencode-serve /event SSE per directory by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11414
feat(craft): sandbox egress proxy with action-approval gating (phases 1+2) by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11302
feat(billing): cache /admin/billing/billing-information per tenant by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11401
fix(ci): pass S3/MinIO env vars to nightly provider chat test runner by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11423
fix(clickup): use relative API endpoints by @dimanjet in https://github.com/onyx-dot-app/onyx/pull/11417
fix(web): poll useDocumentSets only while a set is syncing by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11392
fix(web): bump useCurrentUser dedupingInterval to 5 min by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11391
fix(helm): truncate child resource names to 63-char limit by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11431
refactor(opal): migrate Spacer into Opal by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11429
feat(ods): add --no-verify flag to run-ci by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11410
fix(install): guard DOCKER_SUDO[@] expansion for bash 3.2 by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11424
refactor(opal): migrate SettingsLayouts into Opal by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11430
fix(smtp): allow unauthenticated SMTP relays without credentials by @amanda-nathan in https://github.com/onyx-dot-app/onyx/pull/10931
fix(opal/divider): fix vertical divider sizing, remove Separator component by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11427
fix(ods): Auto-set DEVCONTAINER_REMOTE_USER=root on macOS by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11328
fix(craft): bind Next.js dev server to 0.0.0.0 so kube Service can reach it by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11441
fix(craft): mark notification read on click for relative links by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11442
feat(claude): enable security-guidance plugin for the repo by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11438
feat(craft): remove file extension and MIME limits on uploads by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11440
fix(craft): repair the craft-k8s sandbox test lane (proxy identity + app-path provisioning) by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11426
fix(craft): open Next.js dev port range in sandbox NetworkPolicy by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11445
chore(helm): Bump Onyx Helm chart to 0.5.10 by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11446
feat(craft): UI overhaul — per-tool rendering + smoother streaming by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11386
fix(chat): lazy-load chat file bytes to stop api-server OOM by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11439
fix(ods): Forward SSH agent via Docker Desktop helper on macOS by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11327
chore(opal/infra): migrate sizes.css + dbg.css into Opal, migrate typography.css to use @utility by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11428
feat(craft): wire egress proxy for secret decryption + secrets-injection plans by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11451
refactor(backend): simplify validate_user_prompt_authorization by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11454
feat(craft): port DockerSandboxManager to opencode-serve transport by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11402
fix(craft proxy): default stream responses instead of buffer by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11447
chore(repo): consolidate npm projects into a root bun workspace by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11455
fix(opal/settings-layouts): replace non-existent SvgDatabase with SvgServer in stories by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11456
feat(craft): OPENCODE SERVE FRAMEMOGS OPENCODE ACP by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11408
test(craft): share sandbox_proxy test factories in conftest by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11467
chore(craft): remove dead followup-suggestions + connector-banner UI by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11466
feat(ods): Per-worktree docker compose isolation with dynamic port allocation by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11337
chore(deps): bump cookies-next from 5.1.0 to 6.1.1 in /web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11461
feat(craft): Set policy for external app actions by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11366
chore(deps): Add graphql-core by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11470
fix(hierarchy): iterative upsert_parents to avoid RecursionError on deep chains by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11469
fix(craft): improve scheduled run chat indicator by @Weves in https://github.com/onyx-dot-app/onyx/pull/11358
fix(craft): improve scheduled tasks empty state by @Weves in https://github.com/onyx-dot-app/onyx/pull/11361
refactor(opal): migrate InputTypein into Opal by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11342
feat(craft): Match external-app policies in proxy by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11457
fix(craft): skip LLM setup when a build-mode provider is already configured by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11478
fix(crawler): install playwright system deps by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11480
feat(craft): add Apps/Craft Storybook layer with tool-cards stories by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11481
chore(deps): downgrade transformers from 5.5.4 to 4.57.6 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11479
feat(craft): Inject credentials into external apps in proxy by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11471
fix(ods): Activate s3-filestore profile so compose down stops minio by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11341
ci: tag stable releases with major/minor/patch aliases by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11488
fix: confluence perm sync draft 404s by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11468
chore(devtools): upgrade ods: 0.7.8->0.8.0 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11493
feat(logging): opt-in structured JSON logs via LOG_FORMAT=json by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11490
chore(devtools): Wire launch.json and tasks.json to ods compose/env by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11338
refactor(opal): migrate Switch into Opal by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11474
chore(helm): Bump harts to 0.5.13 w/ code interpreter 0.4.2 by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11496
feat(ee): Prometheus metrics for license seats and expiry by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11495
chore(devcontainer): upgrade CC w/ Opus 4.8 release by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11498
refactor(opal): migrate CopyButton into Opal by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11472
ci: run backend unit tests in parallel on 4cpu runner by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11501
refactor(opal): migrate Code into Opal by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11473
feat(craft): action-approval chat UI + proxy/matcher fixes by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11403
fix(craft): remove scheduled task timezones by @Weves in https://github.com/onyx-dot-app/onyx/pull/11362
fix(craft): green the Craft CI lanes (opencode-serve readiness, model-catalog cache, test deadlock) by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11482
fix(auth): allow dotted Gmail to sign in via Google OAuth by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11511
fix(craft): deny opencode built-in customize-opencode skill by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11506
feat(craft): remove dedicated build-mode provider requirement by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11502
refactor(opal): migrate Tabs component into Opal by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11340
refactor(opal): fix styling for InputTypein by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11519
feat(craft): Encrypt external app credentials by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11514
ci: run connector tests inside the production image by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11520
feat(craft): CredentialInjectionDispatcher + ExternalAppResolver by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11516
ci: always run all backend unit tests even on failures by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11523
fix(llm): omit sampling params + use adaptive thinking for Claude Opus 4.8 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11524
fix(craft): proxy env vars in local dev by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11525
fix(chat): eliminate ReDoS in citation processor partial-citation regex by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11527
chore(pre-commit): tsgo type check for widget + examples/widget by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11485
chore(cli): increase search timeout by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11199
chore(deps): prune unused and transitive-only backend dependencies by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11533
chore(deps): remove unused claude-agent-sdk (~220 MB) by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11539
refactor(craft): multi-action approval requests by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11532
fix(craft): seed default LLM provider for ext-dep tests; drop dead _get_llm_config by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11538
chore(craft): bump default onyx-cli version for longer search timeout by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11542
chore(craft): drop dead build configs and trim comments by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11543
chore(deps): move test/stub-only packages out of the prod backend group by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11536
chore(devcontainer): set UV_LINK_MODE=copy container-wide by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11544
test: deflake pool metrics hold-duration test by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11526
perf(ci): scope playwright install to chromium, skip redundant --with-deps by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11546
refactor: inline trivial single-call helper functions by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11545
feat(craft): inject Onyx PAT via egress proxy, remove from sandbox pod by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11549
test(craft): amortize pod provisioning in K8s tests by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11551
chore(deps-dev): bump oxlint from 1.64.0 to 1.66.0 in /web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11459
chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11458
chore(ci): replace softprops/action-gh-release with gh CLI by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/10825
chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/10824
chore(deps-dev): bump vite from 7.3.3 to 8.0.14 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11463
fix(ods): tolerate externally-occupied ports in portutil test by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11540
feat(craft): inject LLM provider key via egress proxy, remove from sandbox pod by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11556
feat(craft): External app refresh tokens by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11553
fix(craft): keep chat column on-screen for long conversations by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11557
feat(craft): Gmail external app by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11413
refactor(chat): extract shared queued-message navigation hook by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11559
perf(sandbox): tighten pod-ready feedback loop by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11555
feat(craft): queue messages sent while a response is streaming by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11560
chore(craft): add storybook stories for input bar and queued-message bar by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11561
perf(build): replace pypandoc-binary with a mistune + python-docx converter by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11547
perf(build): split backend image into builder + runtime stages by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11565
refactor(craft): Remove DBSessionFactory pattern by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11562
test(e2e): pre-set admin display name to dismiss onboarding prompt by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11564
feat(craft): looksmaxxing (subagents + ui stuff) by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11504
feat(craft): External app per action default policy by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11573
chore: bump opal to v0.1.4 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11548
fix(craft): center the welcome screen content by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11584
feat(craft): interrupt agent in chat turn by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11572
fix(web): pin Turbopack workspace root to web/ by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11586
chore(craft): bump sandbox image to v0.1.50 by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11587
fix(confluence): skip image attachments in slim-doc pass when allow_images is False by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11588
fix(web): silence Node DEP0205 module.register() deprecation from Sentry by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11589
feat(craft): External app action non-availability mentioned in skill file by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11590
refactor(craft): up arrow queued message hint in input bar by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11596
feat(craft): useful instructive error messages from proxy by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11595
test(playwright): isolate /admin/indexing/status visual regression by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11597
refactor(craft): make sandbox egress proxy unconditional by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11604
fix(chat): recover raw answer when content/citation processing strips it empty by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11594
feat(craft): Add github as a built-in external app by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11598
refactor(opal): migrate time utilities to @opal/time by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11541
fix(auth): use a native type="password" field on login/signup by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11585
feat(auth): add coarse API-surface permission scopes for PAT scoping by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11618
feat(craft): skill tiles + always-on paste tiles in input bar by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11563
chore(helm): Bump to 0.5.15 by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11622
feat(config): make JOB_TIMEOUT configurable via JOB_TIMEOUT_SECONDS by @beraterkanelcelik in https://github.com/onyx-dot-app/onyx/pull/11610
refactor(input): centralize input-bar keydown precedence + tiles storybook by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11621
fix(craft): harden sandbox restore against conflicts, transient failures, and unreachable pods by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11567
perf(web): disable React Compiler in the dev server by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11592
feat(craft): External app default timeout 3min by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11623
fix(craft): scope CraftToolGroup error styling to individual cards by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11617
refactor(input ui): restyle paste tile to match skill tile with gray tint by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11624
chore(devcontainer): re-install node by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11626
fix(web): stage embedding model when connecting registry-less cloud providers (LiteLLM/Azure) by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11606
test(web): de-flake E2E tests (global-state isolation + afterEach race) by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11619
feat(craft): / skill picker — split into Skills + Apps sections by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11607
fix(ClickUp): connector API URL construction by @mjakubowskimtt in https://github.com/onyx-dot-app/onyx/pull/11611
chore(craft): update agents.md +373 tok by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11593
fix(search-settings): coerce null embedding prefixes to empty string by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11632
feat(mcp): add known-provider oauth schema and contracts by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11599
feat(ci): consume ECR pull-through cache for CI base images by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11600
chore(deps): bump docker/bake-action from 7.0.0 to 7.2.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11464
ci: add zizmor pre-commit hook + scope workflow permissions by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11635
feat(auth): scope Personal Access Tokens via Permission intersection by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11630
fix(confluence): use Bearer auth for scoped tokens on Cloud by @ppomes in https://github.com/onyx-dot-app/onyx/pull/11363
fix(ingestion-api): stop overriding source = FILE on documents by @ppomes in https://github.com/onyx-dot-app/onyx/pull/11355
feat(helm): allow disabling bundled redis-operator independently by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11643
fix(ui): match SearchTool by in_code_tool_id when picking default temperature by @ppomes in https://github.com/onyx-dot-app/onyx/pull/11356
feat(craft): remove role/level onboarding by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11642
chore(deps-dev): bump @types/node from 20.19.41 to 25.9.1 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11460
refactor(craft): extract session exception classes to errors.py [1/6] by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11648
feat(mcp): add known-provider oauth connect and callback flow by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11605
refactor(opal): migrate SimpleLoader into @opal/icons by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11625
refactor(craft): extract session naming into naming.py [2/6] by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11649
perf(craft): async webapp proxy with connection pooling and per-asset DB caching by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11566
refactor(craft): extract LLM provider selection into llm_config.py [3/6] by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11650
feat(mcp): add known-provider OAuth controls in auth modal by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11629
chore(opal): release 0.1.5 by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11657
feat(craft): scope sandbox PAT to read:search + exempt /me from scope gate by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11647
refactor(craft): extract sandbox state machine into sandbox_lifecycle.py [4/6] by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11651
feat(devcontainer): CLAUDE.md overlay + Playwright e2e bootstrap docs by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11658
feat(mcp): make per-call MCP tool timeout env-configurable by @beraterkanelcelik in https://github.com/onyx-dot-app/onyx/pull/11662
test(mcp): cover known-provider oauth helper logic by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11636
feat(craft): redesign input bar with skill chips, plus menu, and BaseInputBar abstraction by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11634
fix(teams connector): retry transient Microsoft Graph 5xx errors by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11641
fix: enable prompt caching and sticky routing for OpenRouter by @fejesd in https://github.com/onyx-dot-app/onyx/pull/11660
refactor(craft): extract turn-streaming pipeline into streaming.py [5/6] by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11652
Revert "fix(confluence): use Bearer auth for scoped tokens on Cloud" by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11668
feat(craft): update default LLM models per provider by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11669
ci(connectors): run connector tests post-merge instead of in the merge queue by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11673
fix(google_drive): skip get_all_drive_ids() call when no shared drives are requested by @ppomes in https://github.com/onyx-dot-app/onyx/pull/11357
fix(craft): grant scheduled-tasks worker sandbox push access by @Weves in https://github.com/onyx-dot-app/onyx/pull/11677
fix(connectors): add optional AWS region to S3 connector for non-default partitions by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11676
refactor(craft): extract shared artifact/filesystem helpers in SessionManager [6/6] by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11653
test(web): rewrite MCP e2e tests with the page object model by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11608
feat(opal): add RootLayout, design tokens, and sidebar breakpoint constants by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11667
chore(pre-commit): enable check-yaml hook and add prek to the devcontainer by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11683
refactor(craft): point all callers at canonical session modules [7/6] by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11654
ci(playwright): shard admin project across parallel runners by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11601
feat(craft): Docker compose proxy path phase 0 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11507
fix(craft): make prompt_slot a cross-replica distributed lock by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11681
feat(opal): remove AppLayouts; introduce RootLayout.App + AppChrome by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11688
feat(craft): distinguish live skills & approvals with a comet edge by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11687
feat(devcontainer): cache the Python venv in a named volume by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11692
chore(opal): release 0.1.6 by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11695
fix(tenants): allow /enterprise-settings for gated tenants by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11694
feat(craft): Docker compose proxy path phase 1 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11508
fix(craft): Clear _synced on clean watch EOF for docker + k8s lookups by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11693
chore: remove YAML validation section from CLAUDE.md by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11697
fix(craft): self-heal stale opencode-serve password across replicas by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11679
feat(craft): Docker compose proxy path phase 2 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11510
chore(deps-dev): bump aiohttp from 3.13.4 to 3.14.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11690
fix(craft): make sandbox pod + egress-proxy addressing telepresence-correct by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11698
test(cli): mock LLM responses in CLI integration suite by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11699
fix(craft): don't cache DockerSandboxManager singleton until init succeeds by @beraterkanelcelik in https://github.com/onyx-dot-app/onyx/pull/11580
chore(deps): upgrade tornado to 6.5.6 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11701
feat(craft): Extend gmail external app capabilities by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11703
fix: mcp custom oauth security by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11685
feat(craft): scheduled task pre-approvals — gate short-circuit + grants by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11674
feat(auth): scope chat APIs with read:chat / write:chat by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11672
feat(craft): Seed external apps on Cloud by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11603
feat(craft): pre-approved apps UI for scheduled tasks by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11709
feat(craft): clean up the Craft sidebar to four tabs and rehome settings by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11671
fix(craft): fast-fail bus creation for terminated sandboxes across replicas by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11680
chore(craft): bump sandbox default image to v0.1.51 by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11710
chore(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11717
chore(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11719
chore(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11718
chore(deps): bump lucide-react from 0.454.0 to 1.16.0 in /web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11716
chore(deps): bump posthog-js from 1.288.0 to 1.376.3 in /web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11714
chore(deps): bump marked from 12.0.2 to 18.0.4 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11711
chore(deps): bump @sentry/nextjs from 10.38.0 to 10.54.0 in /web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11712
chore(examples): prune unused dev dependencies from widget example by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11720
build: upgrade Python from 3.11 to 3.13 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11721
chore(deps): bump flask from 3.1.0 to 3.1.3 in /backend by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11724
chore(deps): bump pyopenssl from 24.3.0 to 26.0.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11723
chore(deps): bump flask from 3.1.0 to 3.1.3 in /backend by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11726
chore(deps): bump flask from 3.1.0 to 3.1.3 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/11729
feat(craft): Add google drive external app by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11708
feat(auth): make auth cookie name configurable via AUTH_COOKIE_NAME by @Weves in https://github.com/onyx-dot-app/onyx/pull/11739
feat(craft): show Onyx-branded logo in Craft chat by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11738
fix(craft): use real Google Drive logo for external app by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11743
refactor(craft): migrate Text component to Opal by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11741
fix(billing): handle past_due portal redirect on resubscribe by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11737
feat(ci): cloud deploy dispatch on image build by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11707
chore: remove internal infra references from public repo by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11736
fix(web): stop deriving doc_updated_at from Last-Modified by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/11749
fix(craft): tolerate unknown SANDBOX_BACKEND values instead of crashing by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11746
refactor(craft): move sandbox image build context to sandbox/image, skills to onyx/skills/builtin by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11748
feat(craft): Docker compose proxy path phase 3 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11512
refactor(craft): remove vestigial backend-image template mechanism by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11751
feat(admin): add HIDE_QUERY_HISTORY_FROM_ADMIN_PANEL env var by @beraterkanelcelik in https://github.com/onyx-dot-app/onyx/pull/11579
feat(craft): redesign the Library (Your Files) modal by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11742
fix: accept empty choices packet from LLM by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11752
feat(PAT): user-facing scope selection (API + settings UI) by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11744
feat(craft): Docker compose proxy path phase 4 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11513
feat(craft): Decode gmail payloads on approval by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11756
feat(craft): support live scheduled run viewing by @Weves in https://github.com/onyx-dot-app/onyx/pull/11734
fix(craft): set install.sh SANDBOX_BACKEND by image tag by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11757
chore(craft): bump sandbox default image to v0.1.52 by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11761
feat: show connectors page lite mode by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11762
fix: sanitize CSV exports against spreadsheet formula injection by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11754
fix(discord): grant LIMITED service-account keys chat scope by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11763
fix: forward user identifier to OpenRouter activity tracking via extra_body by @fejesd in https://github.com/onyx-dot-app/onyx/pull/11731
chore(gha): add read permissions to paths filter by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11771
fix(craft): Custom apps use glob for upstream url instead of regex by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11765
fix(docker): restore psql in api pods after perl-base autoremove by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11773
fix(discord): refresh tenant cache concurrently by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11769
chore(gha): git actions-checkout read permissions by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11781
feat(craft): Docker compose proxy path phase 5 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11515
fix(craft): gate external-app domains by credential, not stored policy rows by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11774
feat(craft): Docker compose proxy path phase 6 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/11517
chore(mcp): add agent-wiki MCP server by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/11789
chore(mcp): add Linear MCP server by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11786
chore(dev): don't hot-reload local python on skill bundle edits by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11784
refactor(craft): store external-app policies as overrides, not full catalog by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11775
feat(input): expand paste tiles back into the input bar by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11776
fix(craft): keep file-sync IRSA out of the untrusted sandbox container by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11788
fix(opal): fix InputTypeIn height to 36px by @raunakab in https://github.com/onyx-dot-app/onyx/pull/11796
feat(craft): Use github cli for github external app by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/11795
feat(craft): drive model picker from shared recommended-models config by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11760
feat(metrics): add optional METRICS_AUTH_TOKEN for the /metrics endpoint by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11813
chore(devcontainer): upgrade image to default python 3.13 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11730
fix(craft): prevent stuck opencode turns by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11804
fix(slack-skill): form-encode Slack API args so query params aren't dropped by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/11783
fix(craft): Persist thinking as collapsed rows by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11779
fix(craft): keep Craft preview URLs contained and copyable by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/11780
fix(slack): skip doc-set and persona ACL checks for anonymous Slack bot users (#11817) to release v4.1 by @onyx-cherry-pick[bot] in https://github.com/onyx-dot-app/onyx/pull/11820
fix(scim): promote shadow EXT_PERM_USER on SCIM adoption (#11814) to release v4.1 by @onyx-cherry-pick[bot] in https://github.com/onyx-dot-app/onyx/pull/11827
fix(users): revalidate users table + counts after invite (#11826) to release v4.1 by @onyx-cherry-pick[bot] in https://github.com/onyx-dot-app/onyx/pull/11836
perf(llm): cache non-admin LLM provider listings per tenant (#11856) to release v4.1 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11861
fix: fall back to global default model when personal default's provider is gone (#11866) to release v4.1 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11869
chore(deps): bump azure-cognitiveservices-speech: 1.38.0->1.50.0 (#11894) to release v4.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11898
feat: rate limit chat message feedback endpoints (#11758) to release v4.1 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/11912
chore(hotfix): cherry-pick 3 commits to release v4.1 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/11942
chore(hotfix): cherry-pick 5 commits to release v4.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/11944