Security

Workflow runs for Security

• fix(indexing): detect the document's language instead of assuming English

  completed successfully:
  Security#1067:Pull request#1252openedbyetiquet
  IA-Generative:fix/detect-document-language-upstream

  Oct 24, 20262m 21s
  More actions for workflow run 1067

• feat(vlm): downscale images to an endpoint's max_image_side before captioning

  completed successfully:
  Security#1066:Pull request#1251openedbyetiquet
  IA-Generative:feat/vlm-max-image-side-upstream

  Oct 24, 20262m 8s
  More actions for workflow run 1066

• fix(milvus): shorten an oversized chunk instead of failing its file's insert

  completed successfully:
  Security#1065:Pull request#1250openedbyetiquet
  IA-Generative:fix/milvus-row-limits-upstream

  Oct 24, 20261m 24s
  More actions for workflow run 1065

• Docs 1085

  requires action with the application:
  Security#1064:Pull request#1248openedbykanchi1802
  kanchi1802:docs-1085

  Oct 24, 2026Action required
  More actions for workflow run 1064

• fix(api): bound URL-encoded request bodies before they are parsed

  completed successfully:
  Security#1063:Pull request#1223synchronizebyandyne13
  fix/bound-urlencoded-bodies

  Oct 23, 202623m 55s
  More actions for workflow run 1063

• Merge pull request #1240 from linagora/chore/bump-aiohttp-urllib3

  completed successfully:
  Security#1062:Commitbd066ffpushedbyandyne13
  develop

  Oct 23, 202625m 27s
  More actions for workflow run 1062

• fix(api): bound URL-encoded request bodies before they are parsed

  cancelled:
  Security#1061:Pull request#1223synchronizebyandyne13
  fix/bound-urlencoded-bodies

  Oct 23, 202614m 54s
  More actions for workflow run 1061

• fix(parsers): decode uploaded images only in the formats uploads accept

  completed successfully:
  Security#1060:Pull request#1225synchronizebyandyne13
  fix/restrict-image-decoders

  Oct 23, 202628m 33s
  More actions for workflow run 1060

• chore(ui): serve the admin UI from nginx-unprivileged 1.30-alpine

  completed successfully:
  Security#1059:Pull request#1245synchronizebyandyne13
  chore/admin-ui-nginx-base

  Oct 23, 202629m 33s
  More actions for workflow run 1059

• fix(api): bound URL-encoded request bodies before they are parsed

  cancelled:
  Security#1058:Pull request#1223synchronizebyandyne13
  fix/bound-urlencoded-bodies

  Oct 23, 202613m 57s
  More actions for workflow run 1058

• fix(api): bound URL-encoded request bodies before they are parsed

  cancelled:
  Security#1057:Pull request#1223synchronizebyandyne13
  fix/bound-urlencoded-bodies

  Oct 23, 20266m 58s
  More actions for workflow run 1057

• fix(compose): publish the Ray dashboard only through an opt-in overlay

  completed successfully:
  Security#1056:Pull request#1226synchronizebyandyne13
  fix/compose-ray-dashboard-opt-in

  Oct 23, 202628m 39s
  More actions for workflow run 1056

• chore(deps): bump aiohttp to 3.14.5 and urllib3 to 2.8.0

  completed successfully:
  Security#1055:Pull request#1240synchronizebyandyne13
  chore/bump-aiohttp-urllib3

  Oct 23, 202631m 35s
  More actions for workflow run 1055

• Merge pull request #1243 from linagora/chore/bump-pip

  completed successfully:
  Security#1054:Commit751efa0pushedbyandyne13
  develop

  Oct 23, 202643m 49s
  More actions for workflow run 1054

• fix(parsers): decode uploaded images only in the formats uploads accept

  cancelled:
  Security#1053:Pull request#1225synchronizebyandyne13
  fix/restrict-image-decoders

  Oct 23, 202627m 57s
  More actions for workflow run 1053

• chore(deps): bump pip to 26.2.2

  completed successfully:
  Security#1052:Pull request#1243synchronizebyandyne13
  chore/bump-pip

  Oct 23, 202615m 25s
  More actions for workflow run 1052

• Normalize URL hosts in SSRF checks (#1238)

  completed successfully:
  Security#1051:Commitd2ed14cpushedbyhedhoud
  develop

  Oct 23, 20268m 30s
  More actions for workflow run 1051

• Normalize URL hosts in SSRF checks

  completed successfully:
  Security#1050:Pull request#1238synchronizebyhedhoud
  fix/url-hostname-followup

  Oct 23, 202618m 31s
  More actions for workflow run 1050

• chore(compose): disable TLS session tickets in the proxy overlay

  completed successfully:
  Security#1049:Pull request#1247openedbyAhmath-Gadji
  chore/compose-proxy-tls-sessions

  Oct 23, 202626m 28s
  More actions for workflow run 1049

• chore(deps): bump pip to 26.2.2

  completed successfully:
  Security#1048:Pull request#1243synchronizebyandyne13
  chore/bump-pip

  Oct 23, 202641m 43s
  More actions for workflow run 1048

• feat(xlsx): add safe sheet-aware streaming ingestion

  requires action with the application:
  Security#1047:Pull request#1246synchronizebynthtrng
  nthtrng:codex/xlsx-parser

  Oct 23, 2026Action required
  More actions for workflow run 1047

• feat(xlsx): add safe sheet-aware streaming ingestion

  requires action with the application:
  Security#1046:Pull request#1246synchronizebynthtrng
  nthtrng:codex/xlsx-parser

  Oct 23, 2026Action required
  More actions for workflow run 1046

• Merge pull request #1206 from linagora/fix/admin-ui-job-file-access

  completed successfully:
  Security#1045:Commitc49e03cpushedbyAhmath-Gadji
  develop

  Oct 23, 20261m 37s
  More actions for workflow run 1045

• chore(ui): serve the admin UI from nginx-unprivileged 1.30-alpine

  completed successfully:
  Security#1044:Pull request#1245synchronizebyandyne13
  chore/admin-ui-nginx-base

  Oct 23, 20261m 24s
  More actions for workflow run 1044

• fix(chunking): give recursive_splitter text chunks the page of their first word

  completed successfully:
  Security#1043:Pull request#1205synchronizebyandyne13
  fix/1204-recursive-page-numbers

  Oct 23, 20264m 39s
  More actions for workflow run 1043