Tencent/WeKnora v0.7.0 on GitHub

What's Changed

feat(im): 新增QQBot即时通讯平台集成支持 by @YS-zdck in #1824
fix(frontend): hide redundant card badges when section headers apply by @lyingbug in #1825
chore: bump version to 0.6.3 by @lyingbug in #1826
fix(embedding): add SSRF validation and safe HTTP client for embedders by @lyingbug in #1828
ui(frontend): polish channel cards and use official QQBot icon by @lyingbug in #1830
feat(frontend): Chrome 插件与 Claw Skill 集成落地页 by @lyingbug in #1832
fix(frontend): reposition card hover popover to card instead of cursor by @hiasky in #1829
feat(frontend): show stacked integration icons on sidebar hover by @lyingbug in #1837
fix: make infrastructure host/port configurable via env vars in docker-compose by @hiasky in #1840
test: fix stale Doris SQL-shape and flaky OSS bucket assertions by @lyingbug in #1842
feat(chat): @Skill/@MCP mentions with scoped agent runtime by @lyingbug in #1841
optimize grep tag mention scope by @lyingbug in #1843
feat(mcp): drive auth by AuthType and auto-detect OAuth on connection test by @lyingbug in #1844
feat(mcp): prompt and resume OAuth authorization mid-conversation by @lyingbug in #1845
Align MCP OAuth and tool approval cards with agent tool timeline by @lyingbug in #1846
feat: scope API MCP OAuth by principal by @lyingbug in #1847
fix(frontend): gate API integration tab and polish landing pages by @lyingbug in #1850
fix(docker): default DB_HOST to postgres in .env.example by @lyingbug in #1851
feat(frontend): add API integration playground by @lyingbug in #1852
Chore: update dev script checks and Air docs by @oxkrypton in #1854
fix(vlm): allow configurable temperature for VLM models by @lawrence1912 in #1858
feat(agent): add configurable MCP OAuth wait timeout per agent by @lyingbug in #1863
Fix lint and test failures by @lyingbug in #1871
feat(im): include per-service MCP OAuth URLs in IM auth notices by @lyingbug in #1874
Fix MCP code import placeholder by @lyingbug in #1877
fix(security): close SQL validator bypass in agent database tools by @lyingbug in #1881
fix(security): enforce KB access on wiki reads and related IDOR paths by @lyingbug in #1882
fix(security): block SSRF in knowledge import, web_fetch, and datasource connectors by @lyingbug in #1883
fix(security): redact integration secrets from viewer-accessible endpoints by @lyingbug in #1884
fix(security): close open GHSA findings from security triage by @lyingbug in #1887
fix(security): block refresh tokens as bearer and sandbox MCP uploads by @lyingbug in #1890
fix(nginx):embed iframe x-frame-options by @oxkrypton in #1879
fix(security): redact IM list credentials and harden MinerU SSRF by @lyingbug in #1897
fix(security): harden follow-up request and preview surfaces by @lyingbug in #1899
fix(client): harden chat and agent SSE reliability by @coconut-yc in #1740
feat(cli)!: add agent-first chat / session ask output modes by @coconut-yc in #1741
fix(cli): align stream error handling after output-mode merge by @lyingbug in #1903
Fix manual knowledge editor publish flow by @lyingbug in #1911
fix(frontend): prevent white screen from corrupted localStorage by @hiasky in #1925
fix(frontend): harden settings localStorage load after #1925 by @lyingbug in #1927
[codex] Fix Feishu card markdown image uploads by @lyingbug in #1933
refactor(frontend): extract shared document action menu and card view component by @hiasky in #1931
fix(frontend): unify document action menu styles and reset move state on close by @lyingbug in #1939
feat(cli)!: v0.10 CLI reliability, agent-UX & command-surface hardening by @voidkey in #1917
feat(redis): support TLS for Redis connections by @qilifan in #1930
fix(redis): harden TLS tests and surface TLS config at startup by @lyingbug in #1940
fix(im/feishu): actually close WebSocket long connection when channel is stopped by @Greenplumwine in #1908
fix(agent): treat end_turn as natural stop by @jacentsao in #1868
fix(search): apply tag filters to knowledge search by @langcaiye in #1907
feat: add scoped tenant API keys by @lyingbug in #1922
fix(frontend): keep HMAC secret visible for copy after save by @lyingbug in #1947
feat: add Keenable as a configurable web search provider by @ilya-bogin-keenable in #1946
fix(web-search): polish Keenable provider integration after #1946 by @lyingbug in #1948
Improve quick QA source drawer and agent capability controls by @lyingbug in #1949
Close references drawer when switching chat sessions by @lyingbug in #1951
fix(agent): polish selector capability status chips by @lyingbug in #1956
fix(search): harden tag scope resolution after #1907 by @lyingbug in #1952
fix(faq): guard against division by zero in import timing logs by @lyingbug in #1965
feat(dev): support remote infrastructure via .env.local by @lyingbug in #1966
fix(knowledge-base): improve doc filter bar responsive layout by @lyingbug in #1967
feat(knowledge-list): show Wiki badge on knowledge base cards by @lyingbug in #1970
Add knowledge base duplicate flow by @lyingbug in #1971
feat(frontend): add inline session title rename in sidebar by @lyingbug in #1973
fix: harden document pipeline concurrency and diagnostics by @lyingbug in #1978
fix(im): ingest DingTalk file/image messages into knowledge base by @voidkey in #1969
fix(im): harden DingTalk file download with SSRF checks by @lyingbug in #1982
feat(wiki): dedicated worker pool with concurrent claim-based batching by @lyingbug in #1979
feat(models): cap background LLM concurrency per model by @lyingbug in #1986
chore(env): update WEKNORA_MODEL_MAX_CONCURRENCY to 32 in configuration files by @lyingbug in #1995
feat(tenant): optional legacy auto-create API key on tenant creation by @lyingbug in #1999
fix(im/feishu): reply via reply-message API so replies land in the or… by @Greenplumwine in #1898
feat(system): add runtime task queue observability dashboard by @lyingbug in #2001
refactor(RuntimeQueues): enhance UI layout and styling for better readability by @lyingbug in #2002
feat(system): expose model concurrency stats on runtime queues dashboard by @lyingbug in #2003
chore(deps): resolve Dependabot security alerts by @lyingbug in #2005
fix(docreader): route mislabeled legacy DOC files correctly by @lyingbug in #2004
fix(spans): expand knowledge span name column for long wiki slugs by @lyingbug in #2020
fix(spans): make fitSpanName rune-aware and normalize lookups by @lyingbug in #2021
fix(router): allow scoped API keys to poll FAQ import progress by @lyingbug in #2022
fix(files): serve shared KB images via KB-scoped file proxy by @lyingbug in #2023
feat(knowledge-base): add per-pipeline custom instruction fields by @lyingbug in #2026
feat(worker): per-pool asynq governance with shared elastic capacity by @lyingbug in #2030
fix(wiki): strip internal chunk aliases from page content by @lyingbug in #2028
feat(provider): add Requesty as an OpenAI-compatible model provider by @Thibaultjaigu in #2013
docs(model): add Requesty to API and wiki provider lists by @lyingbug in #2036
fix(security): harden agent share listing and align full-access API key routes by @lyingbug in #2034
feat(auth): tenantless provisioning and gated self-service workspace creation by @lyingbug in #2037
refactor(auth): unify OIDC provisioning under shared default_tenant_mode policy by @lyingbug in #2038
feat(frontend): reorganize system settings into tabbed sections by @lyingbug in #2039
feat(system): add admin password reset with session revocation by @lyingbug in #2040
feat(agent): add question suggestions with after-answer follow-ups by @lyingbug in #2045
style(system): polish admin password reset trigger and dialog layout by @lyingbug in #2046
fix(frontend): add cancelled, finalizing, draft statuses to parse-status dropdown by @hiasky in #2041
fix: propagate chunking strategy to parent-child splitter configs by @darcyx in #2048
feat(system): add failed-task inspection and manual retry for runtime queues by @lyingbug in #2049
feat(system): expand runtime queue task inspection and safe actions by @lyingbug in #2050
feat(models): let system admins edit builtin model config by @lyingbug in #2051
refactor(terminology): rename user-facing tenant labels to workspace by @lyingbug in #2052
fix(knowledge): align processing timeline status with knowledge row by @lyingbug in #2053
feat(system): cursor pagination for runtime queue tasks by @lyingbug in #2056
feat(chat): polish follow-up suggestion loading and answer toolbar timing by @lyingbug in #2060
fix(knowledge): recover tasks safely after server restart by @lyingbug in #2059
fix(frontend): open chat reference links in new tabs by @lyingbug in #2062
fix(knowledge): reload doc list after tag rename in manage drawer by @hiasky in #2064
feat(api-keys): let manage_kbs cover full KB lifecycle routes by @lyingbug in #2068
fix: storage engine config retrieval and default provider fallback handling by @ShadowSmallBaby in #2067
fix(api-keys): let manage_kbs keys poll KB copy progress by @lyingbug in #2070
fix(storage): align default provider fallback with STORAGE_ALLOW_LIST by @lyingbug in #2071
feat(storage): add multi-instance storage backends per workspace by @lyingbug in #2072
feat(resource): stable resource registry with LLM-context alias compaction by @lyingbug in #2075
feat(agent): enrich follow-up suggestion generation context by @lyingbug in #2076
fix(chat): improve Markdown image context and enforce retrieved image output by @lyingbug in #2077
fix(agent): ground follow-up suggestions and preserve KB scope on click by @lyingbug in #2080
feat(chat): session-scoped temporary attachments with async parsing by @lyingbug in #2086
fix(chat): native loading placeholders and suggestion UI polish by @lyingbug in #2089
fix(agent): improve MCP selector and attachment upload nav in editor by @lyingbug in #2092
feat(llm): introduce request-local source reference aliases by @lyingbug in #2093
fix(chat): polish references drawer layout and web reference titles by @lyingbug in #2097
feat(im,datasource): support Lark, Feishu's international edition by @qilifan in #2096
fix(chat): emit retrieval references when citation output is disabled by @lyingbug in #2098
fix(parser): remove workspace chat parser policy UI by @lyingbug in #2104
docs: release v0.7.0 notes and version artifacts by @lyingbug in #2107

New Contributors

@YS-zdck made their first contribution in #1824
@oxkrypton made their first contribution in #1854
@lawrence1912 made their first contribution in #1858
@coconut-yc made their first contribution in #1740
@qilifan made their first contribution in #1930
@Greenplumwine made their first contribution in #1908
@jacentsao made their first contribution in #1868
@ilya-bogin-keenable made their first contribution in #1946
@Thibaultjaigu made their first contribution in #2013
@darcyx made their first contribution in #2048
@ShadowSmallBaby made their first contribution in #2067

Full Changelog: v0.6.3...v0.7.0