Skip to content

Release v3.2.4

Choose a tag to compare

View all tags
@Sakura520222 Sakura520222 released this 02 Oct 07:37
· 284 commits to main since this release
v3.2.4
cea2bd3

v3.2.4 (2026-10-10)

总结 / Summary

本版本为包含功能扩展、架构精简与平台支持增强的常规功能与维护版本。

核心变化包括：正式支持 Windows x86_64 源码开发环境并补充 CI 冒烟测试；为 Agent 团队依赖安装引入指数退避重试与动态配置；在 AI 审查器 read_file 工具中支持范围限制搜索；统一 WebUI 弹窗与确认交互体系；彻底移除 Telegram 专用业务事件通知并收敛其职责为公告投递通道；新增中英文贡献指南与安全策略文档，同时升级了 SQLAlchemy 与 Starlette 等核心依赖。

This release is a minor feature and maintenance update delivering functional enhancements, architectural cleanup, and expanded platform compatibility.

Key highlights include adding Windows x86_64 source development support with CI smoke testing, introducing retry fault tolerance and dynamic configurations for Agent team dependency installations, enabling range-restricted search in the AI reviewer read_file tool, and unifying the WebUI dialog and modal architecture. Furthermore, dedicated Telegram business notifications have been removed in favor of unified announcement delivery and GitHub PR comment triggers, accompanied by new bilingual contributing and security policies alongside runtime dependency upgrades including SQLAlchemy and Starlette.

升级提示 / Upgrade Notes

  • 依赖重新同步：由于 pyproject.toml 与 uv.lock 升级了 SQLAlchemy（2.1+）、Starlette（1.7+）等多项核心运行时依赖并新增 Windows 平台标记，源码部署环境需执行 uv sync --locked 重新同步依赖。

  • 服务重启要求：在 WebUI 系统核心配置中修改 telegram_enabled 或 telegram_bot_token 配置项后，必须重启后端服务方可使 Telegram Bot 实例加载生效。

  • 沙箱镜像重构：docker/Dockerfile.agent-sandbox 与 docker/Dockerfile.sandboxd 更新了 Python 3.14 基础镜像的固定摘要，本地构建镜像的环境需重新构建容器镜像。

  • Dependency Synchronization: Because core runtime dependencies such as SQLAlchemy (2.1+) and Starlette (1.7+) were updated in pyproject.toml and uv.lock alongside Windows environment markers, source deployments must run 'uv sync --locked' to update dependencies.

  • Service Restart Required: Modifying telegram_enabled or telegram_bot_token in the WebUI core system configuration requires a backend service restart for the bot instance changes to take effect.

  • Sandbox Container Rebuild: Base Python 3.14 image digest pins were updated in docker/Dockerfile.agent-sandbox and docker/Dockerfile.sandboxd; deployments building images locally should rebuild their containers.

注意事项 / Important Notes

Warning

Telegram 业务事件通知彻底下线：PR 审查、Issue 分析、安全扫描、MFA 失败锁定及退款等业务流程的 Telegram 专用消息推送已完全移除，且未引入替代的即时业务事件通道。PR 审查和扫描结果均转由 GitHub PR/Issue、WebUI 或 API 查看。Telegram 目前仅作为系统公告广播的可选 Provider，Bot 命令仅保留 /start 与 /bind 用于端点绑定。

Telegram Business Notifications Removed: Dedicated Telegram messages for PR reviews, issue analyses, security scans, MFA lockout alerts, and refunds have been removed without an immediate event substitute. Review and scan outcomes should be viewed via GitHub PR/Issue, WebUI, or API. Telegram is now retained solely as an optional provider for broadcast announcements, with bot commands restricted to /start and /bind.

Important

手动审查触发机制变更：原 Telegram Bot 中的 /review <pr_url> 命令已停用。手动触发 PR 全量审查统一调整为在 GitHub PR 评论区中发布 /full-review 评论，且触发者须具备 PR 作者身份或仓库写权限。

Manual Review Trigger Changed: The legacy Telegram Bot '/review <pr_url>' command has been retired. Triggering a full PR review manually must now be done by posting a '/full-review' comment directly inside an open GitHub PR, requiring the comment author to be the PR author or a collaborator with write permissions.

Note

Windows 平台源码开发支持：官方源码开发平台现已涵盖 Windows 11 x86_64。需要注意在 Windows 模式下沙箱执行策略可能受限，生产部署与审查执行后端仍建议保持容器化环境运行。

Windows Source Development Support: Windows 11 x86_64 is now officially recognized as a supported source development platform. Note that sandbox backends may be restricted under native Windows execution, and containerized deployment remains recommended for production.

中文更新日志

新增功能

  • 支持 Windows x86_64 平台源码开发，并在 CI 工作流中新增 Windows uv 依赖同步与模块导入冒烟测试。
  • Agent 专家团队实现依赖安装容错重试机制，瞬时网络故障默认支持最多 3 次指数退避重试并保留脱敏诊断信息。
  • 后端增加依赖安装重试次数与等待延迟的动态配置，并优化配置读取与 WebUI 交互展示。
  • AI 审查器的 read_file 工具支持范围限制搜索能力。

问题修复

  • Agent 团队页面对话框全面接入 Sakura 统一弹窗管理器。

重构

  • 移除 Telegram 专用业务通知实现及相关废弃代码，将 Telegram Bot 职责收敛至端点绑定与公告投递。
  • 统一 WebUI 的 modal 弹窗、dialog 对话框与 confirm 确认交互体系。

文档更新

  • 添加中英文贡献指南文档（CONTRIBUTING.md / CONTRIBUTING_EN.md）与安全策略文档（SECURITY.md / SECURITY_CN.md）。
  • 更新手动触发审查文档，明确通过 GitHub PR 评论 /full-review 触发全量审查的操作流程与权限边界。
  • 更新 Python 语法基线至 3.14+，移除 Python 2 遗留规则，并明确 PEP 758 语法误报规则与异常捕获规范。
  • 更新 AGENTS.md 中的项目目录结构与通知服务架构说明。

其他变更

  • 调整 Agent 团队页面弹窗遮罩层的不透明度样式。
  • 更新运行依赖与开发依赖版本，包括 SQLAlchemy 升级至 2.1+（启用 asyncio 额外特性）、Starlette 升级至 1.7.0、asyncmy 升级至 0.2.15、python-slugify、OAuthLib、PyJWT 及 Ruff。
  • 升级 Dockerfile.agent-sandbox 与 Dockerfile.sandboxd 中的 Python 3.14 基础镜像哈希摘要。
  • 合并 Sakura 记忆记录，并从审查反思中抽取结构化知识文档。
  • 项目版本号递增至 3.2.4。
English Changelog

New Features

  • Support Windows x86_64 for source development and add Windows uv lockfile sync and module import smoke testing in CI.
  • Implement dependency installation fault tolerance for Agent teams, providing exponential backoff retries (up to 3 attempts by default) for transient network failures while preserving sanitized diagnostics.
  • Add dynamic configuration in the backend for dependency retry attempts and delay duration, improving config retrieval and WebUI interaction.
  • Support range-restricted search within the read_file tool for the AI reviewer.

Bug Fixes

  • Integrate Sakura modal manager for dialogs in the Agent team page.

Refactor

  • Remove Telegram dedicated business notification functionality and related legacy code, scoping Telegram Bot strictly to endpoint binding and announcement delivery.
  • Unify modal, dialog, and confirm prompt systems across WebUI.

Documentation

  • Add bilingual contribution guidelines (CONTRIBUTING.md / CONTRIBUTING_EN.md) and security policies (SECURITY.md / SECURITY_CN.md).
  • Update manual review documentation to document GitHub PR comment triggers via /full-review along with permission specifications.
  • Update Python syntax baseline to 3.14+, remove legacy Python 2 rules, and define PEP 758 false-positive rules and exception handling specifications.
  • Update project structure layout and notification service descriptions in AGENTS.md.

Other Changes

  • Increase modal backdrop opacity in the Agent team page styling.
  • Update runtime and development dependencies, bumping SQLAlchemy to 2.1+ with asyncio extra, Starlette to 1.7.0, asyncmy to 0.2.15, python-slugify, OAuthLib, PyJWT, and Ruff.
  • Bump Python 3.14 base image digest hashes in Dockerfile.agent-sandbox and Dockerfile.sandboxd.
  • Consolidate Sakura memory entries and extract structured knowledge from reflections.
  • Bump project version to 3.2.4.
Assets 9
Loading