zeekay
8670ff6033
Document flow's API under /v1
...
Claude-Session: https://claude.ai/code/session_011i2AG9nwpiKUCVxAdDzYuU
2026-09-29 18:34:39 -07:00
zeekay
94741a8363
refactor(rebrand): sweep the remaining langflow — env vars, identifiers, stragglers
...
Completes the rebrand per direction: LANGFLOW_/LANGFLOW -> FLOW_/FLOW (env vars,
headers), langflow_ -> flow_ (settings fields, local vars), camelCase identifiers
(LangflowClient/Logo/HTTPError, builtWithLangflow, getLangflowDesktop) -> Flow*,
and all remaining bare tokens. Fixed the identifier-space hazard (Langflow ->
'Hanzo Flow' is prose-only; in code it collapses to Flow so no identifier gains a
space). compileall of flow + lfx is clean.
Repo-wide langflow now = 4, all the protected MIT attribution to langflow-ai/
langflow in README (legally required; deliberately preserved).
Breaking (per no-backwards-compat / forward-perfection): the LANGFLOW_* env-var
prefix is now FLOW_* — deployments must update their env. CI's uv + frontend
build is the runtime gate.
2026-07-16 10:18:53 -07:00
zeekay
d650dd60f0
refactor(rebrand): langflow->flow across docs, starter-project data, CI, tests
...
Docs corpus (Langflow->Hanzo Flow, upstream URLs langflow-ai/langflow->hanzoai/
flow, docs.langflow.org->docs.hanzo.ai), starter-project template help-URLs, CI
workflows, and test files. Remaining 'langflow' repo-wide is now dominated by
LANGFLOW_* env-var names + langflow_ settings fields — the config-boundary layer
deliberately preserved pending a coordinated FLOW_/HANZO_ alias-with-fallback
(renaming them blind breaks every deployment).
2026-07-16 10:00:51 -07:00
zeekay
488de4eb05
merge: upstream/main (sync, brand preserved)
...
# Conflicts:
# .github/workflows/docs-update-openapi.yml
# AGENTS.md
# AGENTS.md~upstream_main
# CLAUDE.md
# CLAUDE.md~upstream_main
# docker_example/docker-compose.yml
# src/backend/base/flow/agentic/flows/TranslationFlow.json
# src/backend/base/flow/agentic/flows/langflow_assistant.py
# src/backend/base/flow/agentic/helpers/code_security.py
# src/backend/base/flow/agentic/helpers/input_sanitization.py
# src/backend/base/flow/agentic/helpers/streaming_retry.py
# src/backend/base/flow/alembic/versions/8255e9fc18d9_add_name_to_deployment_provider_account.py
# src/backend/base/flow/alembic/versions/a1b2c3d4e5f6_convert_provider_key_and_deployment_.py
# src/backend/base/flow/alembic/versions/c0d2ce43b315_add_flow_version_deployment_attachment_.py
# src/backend/base/flow/alembic/versions/d306e5c17c41_add_api_key_hash_column_to_apikey_table.py
# src/backend/base/flow/alembic/versions/ef4b036b585d_add_session_metadata_column_to_message_.py
# src/backend/base/flow/api/utils/flow_utils.py
# src/backend/base/flow/api/utils/zip_utils.py
# src/backend/base/flow/api/v1/flow_events.py
# src/backend/base/flow/api/v1/flows_helpers.py
# src/backend/base/flow/api/v1/mappers/__init__.py
# src/backend/base/flow/api/v1/mappers/deployments/RULES.md
# src/backend/base/flow/api/v1/mappers/deployments/__init__.py
# src/backend/base/flow/api/v1/mappers/deployments/base.py
# src/backend/base/flow/api/v1/mappers/deployments/contracts.py
# src/backend/base/flow/api/v1/mappers/deployments/helpers.py
# src/backend/base/flow/api/v1/mappers/deployments/registry.py
# src/backend/base/flow/api/v1/mappers/deployments/sync.py
# src/backend/base/flow/api/v1/mappers/deployments/watsonx_orchestrate/__init__.py
# src/backend/base/flow/api/v1/mappers/deployments/watsonx_orchestrate/mapper.py
# src/backend/base/flow/api/v1/mappers/deployments/watsonx_orchestrate/payloads.py
# src/backend/base/flow/api/v1/projects_files.py
# src/backend/base/flow/api/v1/projects_mcp_helpers.py
# src/backend/base/flow/services/cache/disk.py
# src/backend/base/flow/services/database/models/deployment/exceptions.py
# src/backend/base/flow/services/database/models/deployment/guards.py
# src/backend/base/flow/services/database/models/deployment/orm_guards.py
# src/backend/base/flow/services/database/models/deployment_provider_account/schemas.py
# src/backend/base/flow/services/database/models/deployment_provider_account/utils.py
# src/backend/base/flow/services/tracing/span_sorting.py
# src/backend/base/flow/tests/api/v1/test_deployment_guard_delete_endpoints.py
# src/backend/base/flow/tests/services/database/models/deployment/test_deployment_guard_triggers.py
# src/backend/base/flow/tests/services/database/models/deployment/test_exceptions.py
# src/backend/base/flow/tests/services/database/models/deployment/test_guards.py
# src/backend/base/flow/tests/services/database/models/deployment_provider_account/test_utils.py
# src/backend/base/langflow/api/v1/__init__.py
# src/backend/tests/unit/agentic/flows/test_langflow_assistant.py
# src/frontend/Dockerfile
# src/lfx/src/lfx/base/models/unified_models.py
2026-06-02 10:52:30 -07:00
Mendon Kissling and GitHub
27c0b7df92
docs: point security reports to hackerone ( #12368 )
...
* use-hackerone-and-remove-cve-list
* link-to-ibm-hackerone
* add-release-note
* typo
2026-04-02 01:42:03 +00:00
5d849622db
feat: add secret key rotation script and documentation ( #10978 )
...
* feat: add script for migrating encrypted data to a new secret key
* test: add unit tests for secret key migration script
* docs: update SECURITY.md to include secret key rotation process and migration instructions
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes (attempt 2/3)
* [autofix.ci] apply automated fixes (attempt 3/3)
* update component index
* update component index
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes (attempt 2/3)
* [autofix.ci] apply automated fixes (attempt 3/3)
* refactor: use atomic transaction for secret key migration
* fix: print new key for both generated and provided cases
Ensure users always see the key being used regardless of whether
it was auto-generated or provided via --new-key flag.
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes (attempt 2/3)
* fix: improve error handling and test coverage for secret key migration
- Update docstring to accurately reflect migrated fields (remove KB reference)
- Change migrate_auth_settings to return (result, failed_fields) tuple
- Skip folders with failed field migrations instead of silently preserving old values
- Add tests for transaction atomicity and rollback behavior
- Add tests for error handling: invalid data, null values, malformed JSON
- Add test for file permissions (0o600 on Unix)
- Add test for dry-run mode database preservation
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes (attempt 2/3)
* [autofix.ci] apply automated fixes (attempt 3/3)
* docs: improve docstrings for secret key migration script
- Add detailed description for ensure_valid_key explaining short vs long key handling
- Add Returns section to migrate_value documenting None return on failure
- Add full Args documentation and transaction behavior to migrate function
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes (attempt 2/3)
* [autofix.ci] apply automated fixes (attempt 3/3)
* fix: update .gitignore to include new data files and user-specific cache
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes (attempt 2/3)
* [autofix.ci] apply automated fixes (attempt 3/3)
* fix: update usage instructions to include 'uv run' for secret key migration script
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes (attempt 2/3)
* [autofix.ci] apply automated fixes (attempt 3/3)
* feat: add migration verification functionality and corresponding tests
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes (attempt 2/3)
* [autofix.ci] apply automated fixes (attempt 3/3)
---------
Co-authored-by: Hanzo Dev <[email protected]
2026-03-03 13:06:58 +00:00
zeekay
817f45ef71
Restore Hanzo branding after v1.8.0 merge
...
Re-apply brand changes (maintainer info, URLs, product name) that
were overwritten by the upstream merge.
2026-02-26 10:28:05 -08:00
Mendon Kissling and GitHub
f2eeca5228
docs: CSV agent RCE ( #11798 )
...
* arbitrary-code-execution-warniing
* remove-parenthetical
* cleanup
* add-security-note
* remove-parenthetical
2026-02-24 14:20:34 +00:00
Mendon Kissling and GitHub
fafaf5ddb5
docs: CVEs for 1.7 ( #11112 )
...
* ssrf-cve
* cve-filename
* readme
2025-12-19 16:48:08 +00:00
0874eef17b
docs: warnings for dotenv vulnerability ( #10138 )
...
* dotenv-warnings-and-164-patch
Dotenv warnings and 164 patch.
* Apply suggestions from code review
* remove-pragma-flags
* Apply suggestion from @mendonk
* Apply suggestion from @mendonk
* Apply suggestion from @mendonk
---------
Co-authored-by: April I. Murphy <[email protected]
2025-10-07 18:10:36 +00:00
Mendon Kissling and GitHub
6c7747cc8e
docs: CVE advisory and patch release 1.5.1 ( #9584 )
...
* add-info-for-CVE-2025-57760
* cleanup
2025-08-28 18:42:14 +00:00
a00f4b1ddd
fix: enforce authentication for superuser cli command ( #9152 )
...
* Enforce authentication for superuser cli command
* shorten security md
* cleanup
* use session_scope
* re-add uvlock
* [autofix.ci] apply automated fixes
* ruff
* update env example
* [autofix.ci] apply automated fixes
* better exception handling
* [autofix.ci] apply automated fixes
* update tests to not use mocks
* [autofix.ci] apply automated fixes
* [autofix.ci] apply automated fixes
* Remove old test
* Catch exceptions for typer
* Try output instead of stdout
* Use xdist to run in serial
* Separate create superuse
* [autofix.ci] apply automated fixes
* Ruff
* [autofix.ci] apply automated fixes
* lint
---------
Co-authored-by: Hanzo Dev <[email protected]
2025-08-14 20:29:35 +00:00
66ec28cf5c
docs: combine api keys and authentication pages ( #9172 )
...
* combine-api-keys-and-auth
* remove-old-page-redirect-and-sidebar
* Update docs/docs/Configuration/api-keys-and-authentication.mdx
Co-authored-by: Hanzo Dev <[email protected] [email protected] [email protected] [email protected] [email protected]
2025-07-30 01:07:15 +00:00
429936a032
docs: langflow 1.5 auto-login security doc ( #9057 )
...
* langflow-auto-login-security-doc
* trailing-space
* auto-not-auth
* clarify-new-behavior
* env-var-default
* security-md-and-var-names
* Apply suggestions from code review
* Update docs/docs/Configuration/environment-variables.mdx
* Update docs/docs/Configuration/configuration-authentication.mdx
---------
Co-authored-by: April I. Murphy <[email protected]
2025-07-23 13:48:46 +00:00
Jordan Frazier and GitHub
027057880b
docs: create initial security policy ( #8598 )
...
* Create security.md
* move known to end
2025-06-17 18:55:43 +00:00
zeekay
