* fix: add NODE_VERSION build-arg and native build deps to fix Docker CI build
* fix: add NODE_VERSION build-arg and native build deps to fix Docker CI build
* fix: use native ARM runners and parallel matrix builds for Docker Hub CI
* fix: update Docker Hub CI artifact pattern to include 'linux' in filename
* Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---------
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* fix: available dependencies in sandbox
* fix: better url validation and prevent arbitrary url injection into the sandbox
* fix: permissions in docker
* revert: all docker-related changes
* fix: review feedback
* add: new executions:update permissions and apply it to PUT /api/v1/executions endpoint
* add: executions:update permissions check in UI
* fix: review feedback
* update: node version
* fix: lint issues
* add: missing dependency in ci for faiss
* fix: pin pnpm version
* fix: more dependency issues
* fix: even more dependency issues
* update: pnpm overrides
* revert: experimental changes
* fix(httpSecurity.ts): flowise 453
* fix(httpSecurity.ts): ensure IP comparison uses parsed IP format
* fix(httpSecurity.ts): improve IP denial logic by using CIDR parsing and adjusting masks
* fix(httpSecurity.ts): skip malformed IPv4-mapped CIDR entries in deny list processing
* fix(httpSecurity.ts): enhance IP denial logic to handle non-canonical IPv6 addresses and improve entry comparison
Pricing values in chatMistralAI and chatCohere were entered as $/1K tokens
instead of the $/token unit used by every other provider in this file.
All 17 Mistral models and 5 Cohere models had their input_cost and
output_cost divided by 1000 to match actual published pricing:
- open-mistral-nemo: $0.15/M tokens (was showing $150/M)
- mistral-large-latest: $2/M in, $6/M out (was showing $2000/$6000)
- command-r-plus-08-2024: $2.50/M in, $10/M out (was showing $2500/$10000)
- command-r-08-2024: $0.15/M in, $0.60/M out (was showing $150/$600)
Co-authored-by: Claude Sonnet 4.6 <[email protected]>
* guard prediction API against webhook/schedule trigger flows and surface trigger-specific API snippets
* Enhance error message for webhook trigger configuration in executeAgentFlow function to include the configured HTTP method
* update: type field for some credentials where string type could expose secrets
* update: contribution docs with note on adding credential files
* update: add reveal for url type, permissions for get credential by id
* fix: review feedback
* fix: review feedback
* update: agentflow package with credentials ui changes
* fix: test coverage, add tests for changes in CreateCredentialDialog
* revert: changes to agentflows package
* fix(server): remove ungated overrideConfig spread into flowConfig/flowData
The spread allowed API callers to inject arbitrary keys into the $flow.*
template namespace — bypassing the per-parameter gating that
replaceInputsWithConfig() enforces. Properly gated override paths
(replaceInputsWithConfig, $vars) are unaffected.
Closes FLOWISE-308
* added chatflowId and apiMessageId into flowData in buildFlow
Ilango