v1.16.0-rc1

[QuantumGhost]

Introducing Dify Agent (Experimental): A New Agent Experience in Dify

Warning

You should provide Dify Agent services ⚠️only to trusted, non-malicious users⚠️.

As many of you know, the shell-based LLM agent paradigm has brought a major leap in agent capabilities and changed how we think about agents. Meanwhile, Skills provide a standardized way to package and distribute capabilities, making it easier to build powerful agents.

Today, we are experimentally launching Dify Agent. Like other leading agents, it runs in a Linux sandbox. This release includes:

• A builder for creating Dify Agents

  • You can build Dify Agents through the UI: set a base prompt, upload Skills and files, and connect tools and knowledge from the Dify ecosystem.
  • We also provide an agent that helps you build Dify Agents. Through conversation, it can configure the Linux sandbox environment, install required packages, and create new Skills and files that your Dify Agent can use later.

• Dify Workflow integration for Dify Agent

  • You can use an existing Dify Agent in a Dify Workflow, or temporarily create an inline Dify Agent. It will execute the task defined by the workflow node, generate the required output, and pass it to the next node.

• A new web app experience

  • The Dify Agent you build can be published and used as a web app. While the user experience remains familiar, it is now powered by Dify Agent.

Docs: https://docs.dify.ai/en/self-host/use-dify/build/new-agent/overview

Limitations

Please note that in the current experimental release, all Dify Agents run in the same sandbox. This means:

• Under normal circumstances, each Dify Agent configures its environment and executes tasks within its own workspace without interfering with others.
• However, with simple instructions, any Dify Agent can read or interfere with the environments and data of other Dify Agents, including user data.

Strict isolation will be implemented in a future release. For now,

Warning

You should provide Dify Agent services ⚠️only to trusted, non-malicious users⚠️.

Similarly, because Dify Agent is not fully ready yet, you may find that some features are not available for Dify Agent. For example, Dify Workflow DSL export is unavailable when the workflow contains nodes that reference Dify Agent.

Upgrade Guide

Important

• This release includes new database migrations. Run them as part of the upgrade.
• Environment variables changed. Review the Environment Variable Changes section and update your .env accordingly.
• Docker Compose configuration files changed. If you maintain a customized docker-compose.yaml, review the changes and re-apply local customizations carefully.

Docker Compose Deployments

1. Back up your customized docker-compose YAML and env files.

   cd docker
   cp docker-compose.yaml docker-compose.yaml.$(date +%s).bak
   cp .env .env.$(date +%s).bak 2>/dev/null || true

2. Get the latest code for the 1.16.0-rc1 release.

   git fetch --tags
   git checkout 1.16.0-rc1

3. Stop the services (run inside the docker directory).

   docker compose down

4. Back up data.

   tar -cvf volumes-$(date +%s).tgz volumes

5. Review any env file changes and re-apply local customizations.
6. Upgrade services.

   docker compose up -d

Source Code Deployments

1. Stop the API server, Worker, and Web frontend server.
2. Get the latest code for the 1.16.0-rc1 release.

   git fetch --tags
   git checkout 1.16.0-rc1

3. Update Python dependencies.

   cd api
   uv sync

4. Run database migrations.

   uv run flask db upgrade

5. Restart the API server, Worker, and Web frontend server. To experiment with the new agent feature, you also need to start dify-agent and shellctl. Important: shellctl does not include built‑in authentication — for security, it is strongly recommended to run it inside a container.

What's Changed

• chore(api): surface pyrefly output on type-check failures by @QuantumGhost in chore(api): surface pyrefly output on type-check failures #37934
• test: replace logger mock with caplog in workflow collaboration test by @ojasarora77 in test: replace logger mock with caplog in workflow collaboration test #37971
• ci: emit pyrefly diagnostics as GitHub workflow commands by @ojasarora77 in ci: emit pyrefly diagnostics as GitHub workflow commands #37974
• refactor(api): migrate response contract tooling to BaseModel by @cqjjjzr in refactor(api): migrate response contract tooling to BaseModel #37950
• fix(cli): use a(n) article in difyctl prerelease warning by @GareArc in fix(cli): use a(n) article in difyctl prerelease warning #37976
• fix(api): require edit access for trace config changes by @laipz8200 in fix(api): require edit access for trace config changes #37973
• feat(webapp): display app description on chat and text-generation app screens by @kurokobo in feat(webapp): display app description on chat and text-generation app screens #37345
• fix: decouple deployment access control dialog by @hyoban in fix: decouple deployment access control dialog #37936
• refactor(tests): use caplog in workflow collaboration service tests (remove patch logger in test, search for mock_log #37468) by @hikariming in refactor(tests): use caplog in workflow collaboration service tests (#37468) #37991
• fix(web): make marketplace URL builder SSR-safe by @lyzno1 in fix(web): make marketplace URL builder SSR-safe #37944
• refactor: simplify deployment access ownership by @hyoban in refactor: simplify deployment access ownership #37994
• refactor: Use pytest caplog instead of logger patching in test_spec.py by @DevCube24 in refactor: Use pytest caplog instead of logger patching in test_spec.py #37997
• refactor: align deployment detail state ownership by @hyoban in refactor: align deployment detail state ownership #38008
• fix: isolate node selector keyboard events by @lyzno1 in fix: isolate node selector keyboard events #37998
• fix(web): keep HITL input-field save button visible in the edit dialog by @manan-tech in fix(web): keep HITL input-field save button visible in the edit dialog #38007
• refactor(api): enforce enums over string literals on openapi surface by @GareArc in refactor(api): enforce enums over string literals on openapi surface #38009
• chore: migrate account role test to testcontainers by @escape0707 in chore: migrate account role test to testcontainers #38010
• refactor: pass db session into service calls (make db.session pass from parameter. #37403) by @xiejl001 in refactor: pass db session into service calls (#37403) #38016
• feat(api): cache workflow provider configurations by @linw1995 in feat(api): cache workflow provider configurations #37980
• fix(web): capture blog UTM/slug attribution reliably under CSP by @CodingOnStar in fix(web): capture blog UTM/slug attribution reliably under CSP #38022
• fix: plugin installation task popover layout when some failed too long by @hjlarry in fix: plugin installation task popover layout when some failed too long #38000
• feat(web): add customizable input placeholder for Agent/Chatflow/Chatbot web app by @CyberPU2099 in feat(web): add customizable input placeholder for Agent/Chatflow/Chatbot web app #37790
• refactor: replace patch logger with caplog in test_version.py by @EvanYao826 in refactor: replace patch logger with caplog in test_version.py #38029
• docs(web): fix testing guide link by @Harsh23Kashyap in docs(web): fix testing guide link #38006
• feat(agent-v2): sync nightly updates to main (2026-06-25) by @BeautyyuYanli in feat(agent-v2): sync nightly updates to main (2026-06-25) #37915
• chore: inject session by @asukaminato0721 in chore: inject session #37941
• fix(web): download markdown file-preview links as attachments by @uxgnod in fix(web): download markdown file-preview links as attachments #38030
• chore(i18n): sync translations with en-US by @github-actions[bot] in chore(i18n): sync translations with en-US #38035
• fix: remove aria-busy from loading button by @lyzno1 in fix: remove aria-busy from loading button #38036
• fix: improve members role chip accessibility by @lyzno1 in fix: improve members role chip accessibility #38037
• fix: improve workflow run archive idempotency and batching by @41tair in fix: improve workflow run archive idempotency and batching #38027
• refactor(web): organize deployment feature state by @hyoban in refactor(web): organize deployment feature state #38065
• fix: prevent exiting toasts from blocking page clicks by @lyzno1 in fix: prevent exiting toasts from blocking page clicks #38063
• fix: gate deployments in route layout by @lyzno1 in fix: gate deployments in route layout #38078
• refactor: shell provider protocol by @wylswz in refactor: shell provider protocol #38077
• fix: simplify scroll area composition by @lyzno1 in fix: simplify scroll area composition #38113
• fix(web): improve main nav focus outline by @lyzno1 in fix(web): improve main nav focus outline #38114
• fix: CAN_REPLACE_LOGO should be false by @fatelei in fix: CAN_REPLACE_LOGO should be false #38126
• chore: update deps by @hyoban in chore: update deps #38128
• chore: downgrade openapi-ts by @hyoban in chore: downgrade openapi-ts #38141
• fix: support Unicode characters in form field names by @WTW0313 in fix: support Unicode characters in form field names #38138
• feat: refine snippet siderbar and support RBAC. by @FFXN in feat: refine snippet siderbar and support RBAC. #38134
• fix(web): align web app nav item width by @lyzno1 in fix(web): align web app nav item width #38146
• fix(api): isolate side-effect database writes by @lin-hongkuan in fix(api): isolate side-effect database writes #37895
• fix(api): wire dedicated timeout into inner RBAC requests by @GareArc in fix(api): wire dedicated timeout into inner RBAC requests #38150
• fix: multimodal segment attachment indexing by @Blackoutta in fix: multimodal segment attachment indexing #38080
• fix: agent app log detail modal not display well by @hjlarry in fix: agent app log detail modal not display well #38014
• fix(vdb): remove deprecated SQL options for ADB-PG 7.0 compatibility by @shiyuanfang2nd in fix(vdb): remove deprecated SQL options for ADB-PG 7.0 compatibility #38004
• fix: editor should not query billing subscriptions by @hjlarry in fix: editor should not query billing subscriptions #38157
• perf(api): retrieve published workflows via app.workflow_id by @linw1995 in perf(api): retrieve published workflows via app.workflow_id #38153
• fix: editor can view the logs by @hjlarry in fix: editor can view the logs #38165
• perf: make command rbac-migrate-member-roles use less mem and make it… by @fatelei in perf: make command rbac-migrate-member-roles use less mem and make it… #38151
• fix(api): skip uuidv7() creation when PostgreSQL 18 provides it natively by @zeeshan56656 in fix(api): skip uuidv7() creation when PostgreSQL 18 provides it natively #36998
• feat(mcp): support dynamic HTTP request headers in MCPClient by @Sanket2329 in feat(mcp): support dynamic HTTP request headers in MCPClient #37938
• chore(i18n): update role management permission keys for multiple languages by @WTW0313 in chore(i18n): update role management permission keys for multiple languages #38186
• fix: update documentation links in permission set and role modals by @WTW0313 in fix: update documentation links in permission set and role modals #38188
• test(e2e): add agent v2 test infrastructure by @lyzno1 in test(e2e): add agent v2 test infrastructure #38191
• feat: support dataset permission migrate to rbac by @fatelei in feat: support dataset permission migrate to rbac #38166
• chore: inject more db.session by @asukaminato0721 in chore: inject more db.session #38045
• fix(workflow): guard on_tool_execution stdout traces behind DEBUG by @MRZHUH in fix(workflow): guard on_tool_execution stdout traces behind DEBUG #38200
• fix: stress test setup process and report structure workflow for Dify 1.15.0+ by @Blackoutta in fix: stress test setup process and report structure workflow for Dify 1.15.0+ #38194
• fix: debug plugin permission setting not work by @hjlarry in fix: debug plugin permission setting not work #38197
• chore(dify-ui): update theme tokens by @lyzno1 in chore(dify-ui): update theme tokens #38189
• fix(api): scope nested resource lookups by owner refs by @WH-2099 in fix(api): scope nested resource lookups by owner refs #38177
• fix(api): register rbac-migrate-dataset-permissions CLI command by @GareArc in fix(api): register rbac-migrate-dataset-permissions CLI command #38204
• fix(api): Fixing API contract generation infrastructure by @cqjjjzr in fix(api): Fixing API contract generation infrastructure #38042
• fix(api): prevent plugin provider cache stampedes by @VeraPyuyi in fix(api): prevent plugin provider cache stampedes #37388
• perf(web): improve vinext home startup time by @hyoban in perf(web): improve vinext home startup time #38219
• fix(web): hide deployment access tab by @hyoban in fix(web): hide deployment access tab #38222
• fix(web): hide deployment access sidebar tab by @hyoban in fix(web): hide deployment access sidebar tab #38229
• perf(web): lazy load console contract shards by @hyoban in perf(web): lazy load console contract shards #38230
• fix(api): avoid infinite loop in _delete_records when batch deletion fails by @p2003722 in fix(api): avoid infinite loop in _delete_records when batch deletion fails #38118
• refactor(web): migrate console contracts to generated types by @hyoban in refactor(web): migrate console contracts to generated types #38231
• feat(workflow-generator): enhance the AI auto-creation flow end-to-end by @crazywoola in feat(workflow-generator): enhance the AI auto-creation flow end-to-end #38175
• chore(i18n): sync translations with en-US by @github-actions[bot] in chore(i18n): sync translations with en-US #38239
• build(deps): bump pydantic-ai-slim from 1.85.1 to 1.102.0 in /dify-agent by @dependabot[bot] in build(deps): bump pydantic-ai-slim from 1.85.1 to 1.102.0 in /dify-agent #38135
• fix: handle integration marketplace install callbacks by @Jingyi-Dify in fix: handle integration marketplace install callbacks #38236
• chore(agent-v2): sync daily changes by @lyzno1 in chore(agent-v2): sync daily changes #38162
• refactor(web): migrate console contracts to generated routes by @hyoban in refactor(web): migrate console contracts to generated routes #38233
• refactor(web): decouple detail sidebars from main nav by @hyoban in refactor(web): decouple detail sidebars from main nav #38241
• refactor: pass db.session explicitly in DatasetIndexToolCallbackHandler by @sergioperezcheco in refactor: pass db.session explicitly in DatasetIndexToolCallbackHandler #38082
• refactor: use Pydantic for sensitive word avoidance config (Fixes 能否支持自定义 key，自定义 API 端点 #37… by @escapefyh in refactor: use Pydantic for sensitive word avoidance config (Fixes #37… #37660
• fix: order main nav account classes by @hjlarry in fix: order main nav account classes #38251
• chore(github): add e2e labeler and code owner by @lyzno1 in chore(github): add e2e labeler and code owner #38257
• fix(web): improve card grid responsiveness by @hyoban in fix(web): improve card grid responsiveness #38263
• chore: remove useless tag params logic in use effect by @iamjoel in chore: remove useless tag params logic in use effect #38269
• fix(web): clarify unpublished explore app handling by @euxx in fix(web): clarify unpublished explore app handling #38260
• refactor(ui): use inset ring utilities by @lyzno1 in refactor(ui): use inset ring utilities #38275
• refactor(web): migrate model provider console contracts by @hyoban in refactor(web): migrate model provider console contracts #38253
• refactor(web): migrate trigger console contracts by @hyoban in refactor(web): migrate trigger console contracts #38255
• refactor(web): migrate rbac access console contracts by @hyoban in refactor(web): migrate rbac access console contracts #38256
• refactor(web): migrate plugin console contracts by @hyoban in refactor(web): migrate plugin console contracts #38252
• refactor(web): migrate snippet console contracts by @hyoban in refactor(web): migrate snippet console contracts #38258
• refactor(web): migrate trial app console contracts by @hyoban in refactor(web): migrate trial app console contracts #38254
• chore: remove empty .codex file by @QuantumGhost in chore: remove empty .codex file #38286
• fix(web): add missing i18n for CLI device flow login page by @GareArc in fix(web): add missing i18n for CLI device flow login page #38282
• refactor(api): migrate console app common endpoints to BaseModel by @cqjjjzr in refactor(api): migrate console app common endpoints to BaseModel #37951
• refactor(web): remove custom console contract loaders by @hyoban in refactor(web): remove custom console contract loaders #38284
• refactor(api): migrate console app chat endpoints to BaseModel by @cqjjjzr in refactor(api): migrate console app chat endpoints to BaseModel #37952
• fix(api): keep provider refresh waiters single-flight by @WH-2099 in fix(api): keep provider refresh waiters single-flight #38226
• fix(api): tolerate legacy service_api end-user type on load by @manan-tech in fix(api): tolerate legacy service_api end-user type on load #38271
• fix(templates): make End output variable names unique in built-in templates by @manan-tech in fix(templates): make End output variable names unique in built-in templates #38293
• fix: web detail adjustment before release by @iamjoel in fix: web detail adjustment before release #38296
• test(e2e): add agent v2 core coverage by @lyzno1 in test(e2e): add agent v2 core coverage #38209
• fix: sql injection by @FFXN in fix: sql injection #38295
• fix(api): stop swallowing document indexing errors in create handler by @Harsh23Kashyap in fix(api): stop swallowing document indexing errors in create handler #38192
• chore(api): disallow builtins getattr variants in new code by @QuantumGhost in chore(api): disallow builtins getattr variants in new code #38250
• fix: Working outside of application context. by @fatelei in fix: Working outside of application context. #38300
• fix(agent-v2): preserve oauth2 credential refs when converting tool c… by @linw1995 in fix(agent-v2): preserve oauth2 credential refs when converting tool c… #38303
• fix(web): align monitoring overview charts by @hyoban in fix(web): align monitoring overview charts #38292
• fix(web): fill dataset create layout height by @lyzno1 in fix(web): fill dataset create layout height #38308
• fix: support multi-worker workflow collaboration by @hjlarry in fix: support multi-worker workflow collaboration #38242
• refactor(web): move marketplace contract to contracts package by @hyoban in refactor(web): move marketplace contract to contracts package #38311
• chore(i18n): sync translations with en-US by @github-actions[bot] in chore(i18n): sync translations with en-US #38301
• fix: enhance SQL query safety and add metadata key validation by @FFXN in fix: enhance SQL query safety and add metadata key validation #38307
• feat(agent-v2): resolve Dify core tools in agent runtime runner by @linw1995 in feat(agent-v2): resolve Dify core tools in agent runtime runner #38316
• fix: Notion sync empty state width in knowledge creation by @hjlarry in fix: Notion sync empty state width in knowledge creation #38321
• fix: normalize query array params for oRPC by @hyoban in fix: normalize query array params for oRPC #38322
• fix(workspace): expose last opened in contract by @lyzno1 in fix(workspace): expose last opened in contract #38323
• fix(web): keep app sort filter with header filters by @hyoban in fix(web): keep app sort filter with header filters #38324
• test: migrate tag service tests to testcontainers by @escape0707 in test: migrate tag service tests to testcontainers #38313
• refactor: thread explicit sessions through app retrieval paths by @41tair in refactor: thread explicit sessions through app retrieval paths #38309
• fix(web): align main nav app item states by @lyzno1 in fix(web): align main nav app item states #38326
• fix: prevent app card meta overflow by @Jingyi-Dify in fix: prevent app card meta overflow #38349
• perf(memory): batch-load message files in TokenBufferMemory to remove N+1 queries by @weijun-xia in perf(memory): batch-load message files in TokenBufferMemory to remove N+1 queries #38002
• feat(device-flow): redirect SSO-complete failures to a dedicated device error view by @GareArc in feat(device-flow): redirect SSO-complete failures to a dedicated device error view #38185
• fix(web): align external API and service API buttons vertically in datasets header by @p2003722 in fix(web): align external API and service API buttons vertically in datasets header #38139
• chore(api): upgrade graphon to v0.6.0, migrate HITL logic back to Dify by @QuantumGhost in chore(api): upgrade graphon to v0.6.0, migrate HITL logic back to Dify #38247
• fix: handle Xinference model credential context by @AsperforMias in fix: handle Xinference model credential context #38348
• chore(i18n): sync translations with en-US by @github-actions[bot] in chore(i18n): sync translations with en-US #38355
• feat(api): abort active workflow runs during Celery warm shutdown by @linw1995 in feat(api): abort active workflow runs during Celery warm shutdown #38220
• feat: snippet siderbar update by @JzoNgKVO in feat: snippet siderbar update #38371
• chore: compress large plugin_model obj in redis by @hjlarry in chore: compress large plugin_model obj in redis #38374
• fix(cli): report GitHub API rate limits in difyctl install scripts by @lin-snow in fix(cli): report GitHub API rate limits in difyctl install scripts #38375
• refactor: manage rag pipeline sessions explicitly by @41tair in refactor: manage rag pipeline sessions explicitly #38274
• fix: incorrect backgroud when dark mode and no plugins by @hjlarry in fix: incorrect backgroud when dark mode and no plugins #38378
• chore: use zstd for plugin model provider cache by @hjlarry in chore: use zstd for plugin model provider cache #38382
• fix(web): adjust snippets input count badge color by @JzoNgKVO in fix(web): adjust snippets input count badge color #38386
• fix(chat): enhance pointer event handling in chat components by @WTW0313 in fix(chat): enhance pointer event handling in chat components #38385
• feat(api): add sandbox info endpoint for Agent App conversations by @linw1995 in feat(api): add sandbox info endpoint for Agent App conversations #38390
• refactor: make session boundaries explicit for migration flows by @41tair in refactor: make session boundaries explicit for migration flows #38379
• refactor: replace db.paginate with plain SQLAlchemy pagination by @sergioperezcheco in refactor: replace db.paginate with plain SQLAlchemy pagination #38280
• test(dify-ui): remove low-value style assertions by @lyzno1 in test(dify-ui): remove low-value style assertions #38418
• fix(dify-ui): standardize story focus indicators by @lyzno1 in fix(dify-ui): standardize story focus indicators #38417
• fix(models): correct onupdate typo on trigger.py updated_at columns by @SquabbyZ in fix(models): correct onupdate typo on trigger.py updated_at columns #38341
• refactor(dify-ui): render ContextMenu story trigger as a semantic area by @lyzno1 with @Copilot in refactor(dify-ui): render ContextMenu story trigger as a semantic area #38420
• chore(agent-v2): sync daily changes by @lyzno1 in chore(agent-v2): sync daily changes #38298
• style: fix provider card dropdown menu seperator margin by @lyzno1 in style: fix provider card dropdown menu seperator margin #38422
• ci: extract external E2E into dedicated post-merge workflow by @lyzno1 with @Copilot in ci: extract external E2E into dedicated post-merge workflow #38426
• fix(web): prevent plugin cards from overlapping marketplace panel by @lyzno1 in fix(web): prevent plugin cards from overlapping marketplace panel #38427
• fix(dify-ui): improve picker type inference by @lyzno1 in fix(dify-ui): improve picker type inference #38428
• fix(dify-ui): preserve radio value generics by @lyzno1 in fix(dify-ui): preserve radio value generics #38429
• test(e2e): split agent build draft apply coverage by @lyzno1 in test(e2e): split agent build draft apply coverage #38431
• fix(api/tasks): use f-string for raise messages in resume_workflow_ex… by @Harsh23Kashyap in fix(api/tasks): use f-string for raise messages in resume_workflow_ex… #37607
• refactor(api): migrate console explore endpoints to BaseModel by @cqjjjzr in refactor(api): migrate console explore endpoints to BaseModel #37953
• refactor: drop redundant len(tag_ids)==0 check in get_target_ids_by_tag_ids by @isheng-eqi in refactor: drop redundant len(tag_ids)==0 check in get_target_ids_by_tag_ids #38447
• build(deps): bump the github-actions-dependencies group across 1 directory with 12 updates by @dependabot[bot] in build(deps): bump the github-actions-dependencies group across 1 directory with 12 updates #38430
• fix(web): update snippet placeholder icon color by @JzoNgKVO in fix(web): update snippet placeholder icon color #38445
• fix(api): isolate side-effect session writes in multimodal and RAG handlers by @agarwalpranav0711 in fix(api): isolate side-effect session writes in multimodal and RAG handlers #38210
• docs(dify-ui): clarify radio composition stories by @lyzno1 in docs(dify-ui): clarify radio composition stories #38456
• refactor(api): migrate workspace account endpoints to BaseModel by @cqjjjzr in refactor(api): migrate workspace account endpoints to BaseModel #37954
• refactor(api): migrate dataset rag pipeline endpoints to BaseModel by @cqjjjzr in refactor(api): migrate dataset rag pipeline endpoints to BaseModel #37958
• refactor(api): remove member field compatibility by @cqjjjzr in refactor(api): remove member field compatibility #37966
• test: example use sqlite3 as unittest backend by @asukaminato0721 in test: example use sqlite3 as unittest backend #38159
• refactor(api): migrate web auth endpoints to BaseModel by @cqjjjzr in refactor(api): migrate web auth endpoints to BaseModel #37961
• fix(api): resolve plugin external user ids in backwards invocation by @Harsh23Kashyap in fix(api): resolve plugin external user ids in backwards invocation #38098
• feat(api): pass app_id to model plugins for provider-side cost attribution by @ryuta-kobayashi-ug in feat(api): pass app_id to model plugins for provider-side cost attribution #35859
• fix(web): redirect imported apps with creator permissions by @hjlarry in fix(web): redirect imported apps with creator permissions #38460
• chore: Update sidebar web app menu translations by @hjlarry in chore: Update sidebar web app menu translations #38473
• refactor(dify-ui): consolidate radio family API by @lyzno1 in refactor(dify-ui): consolidate radio family API #38479
• chore(agent-v2): sync changes by @lyzno1 in chore(agent-v2): sync changes #38442
• refactor(api): Stop masking refresh-token service errors as 401 by @QuantumGhost in refactor(api): Stop masking refresh-token service errors as 401 #38463
• fix(web): unify detail sidebar home control by @Jingyi-Dify in fix(web): unify detail sidebar home control #38487
• refactor(api): clarify DSL import and plugin migration boundaries by @WH-2099 in refactor(api): clarify DSL import and plugin migration boundaries #38483
• chore: set NEXT_PUBLIC_ENABLE_FEATURE_PREVIEW default to true by @crazywoola with @Copilot in chore: set NEXT_PUBLIC_ENABLE_FEATURE_PREVIEW default to true #38362
• feat(mcp): support MCP protocol 2025-06-18 for workflow-as-MCP server (version negotiation + structured output) by @CourTeous33 in feat(mcp): support MCP protocol 2025-06-18 for workflow-as-MCP server (version negotiation + structured output) #37892
• test(e2e): stabilize Agent v2 external runtime checks by @hyoban in test(e2e): stabilize Agent v2 external runtime checks #38493
• chore: add sqlite3 to conftest by @asukaminato0721 in chore: add sqlite3 to conftest #38475
• fix: resolve 36288 mypy errors by @jashwanth-reddy-g in fix: resolve 36288 mypy errors #37850
• fix: editor should not manage member by @hjlarry in fix: editor should not manage member #38503
• chore: update editor permission by @fatelei in chore: update editor permission #38505
• chore: improve cherry pick missed message by @FFXN in chore: improve cherry pick missed message #38496
• docs(component): document focus-visible guidance by @lyzno1 in docs(component): document focus-visible guidance #38509
• refactor(web): move app context layout styles to shell by @lyzno1 in refactor(web): move app context layout styles to shell #38511
• fix(web): add backdrop blur to skip nav by @lyzno1 in fix(web): add backdrop blur to skip nav #38517
• fix: can't debug model plugins by @hjlarry in fix: can't debug model plugins #38500
• refactor(web): clarify app context bootstrap graph by @hyoban in refactor(web): clarify app context bootstrap graph #38516
• chore(api): cache the setup status to cut down DB access by @cqjjjzr in chore(api): cache the setup status to cut down DB access #36966
• refactor(test): replace SimpleNamespace with typed mocks in schedule service tests by @ojasarora77 in refactor(test): replace SimpleNamespace with typed mocks in schedule service tests #38393
• refactor(web): reduce query atom subscriptions by @hyoban in refactor(web): reduce query atom subscriptions #38521
• test(services): cover DSL import and plugin migration regressions by @Lillian68 in test(services): cover DSL import and plugin migration regressions #36072
• refactor(openapi): resource-oriented paths for /openapi/v1 + difyctl version gate by @lin-snow in refactor(openapi): resource-oriented paths for /openapi/v1 + difyctl version gate #38367
• refactor(web): migrate dataset access context by @hyoban in refactor(web): migrate dataset access context #38523
• chore: clean Db session from service by @asukaminato0721 in chore: clean Db session from service #38227
• test(dify-ui): remove brittle primitive assertions by @lyzno1 in test(dify-ui): remove brittle primitive assertions #38529
• refactor(web): migrate app context consumers by @hyoban in refactor(web): migrate app context consumers #38530
• chore(deps): upgrade vite-plus toolchain by @lyzno1 in chore(deps): upgrade vite-plus toolchain #38534
• fix(web): cache server console context by @lyzno1 in fix(web): cache server console context #38535
• test(web): align auth e2e with console home by @lyzno1 in test(web): align auth e2e with console home #38538
• fix: raise clear error on unsupported language in execute_code by @isheng-eqi in fix: raise clear error on unsupported language in execute_code #38448
• fix(ci): make no-new-getattr guard stable in shallow PR checkouts by @EvanYao826 in fix(ci): make no-new-getattr guard stable in shallow PR checkouts #38480
• fix(web): guard invite-settings activate button against double-click by @SquabbyZ in fix(web): guard invite-settings activate button against double-click #38337
• refactor(web): migrate plugins and tools app context consumers by @hyoban in refactor(web): migrate plugins and tools app context consumers #38533
• refactor(web): migrate billing app context consumers by @hyoban in refactor(web): migrate billing app context consumers #38541
• feat(api): use billing quota for credit pool by @zyssyz123 in feat(api): use billing quota for credit pool #38028
• fix(cli): --insecure also skips TLS certificate verification by @GareArc in fix(cli): --insecure also skips TLS certificate verification #38531
• chore: remove superpowers artifacts by @lyzno1 in chore: remove superpowers artifacts #38547
• fix: display errors for oauth page by @crazywoola in fix: display errors for oauth page #38546
• refactor(web): migrate account settings app context consumers by @hyoban in refactor(web): migrate account settings app context consumers #38544
• test: more caplog by @asukaminato0721 in test: more caplog #38452
• refactor(web): migrate workflow app context consumers by @hyoban in refactor(web): migrate workflow app context consumers #38552
• refactor(web): migrate agent v2 app context consumers by @hyoban in refactor(web): migrate agent v2 app context consumers #38558
• refactor(api): migrate workspace tool endpoints to BaseModel by @cqjjjzr in refactor(api): migrate workspace tool endpoints to BaseModel #37959
• refactor(api): remove remaining legacy field remnants by @cqjjjzr in refactor(api): remove remaining legacy field remnants #37967
• refactor(web): migrate shell navigation app context consumers by @hyoban in refactor(web): migrate shell navigation app context consumers #38560
• test: scope agent build draft e2e selector by @lyzno1 in test: scope agent build draft e2e selector #38563
• refactor(web): remove remaining app context consumers by @hyoban in refactor(web): remove remaining app context consumers #38565
• chore(agent-v2): sync changes by @lyzno1 in chore(agent-v2): sync changes #38513
• perf: batch-load messages in advanced-chat workflow run list to remove N+1 by @weijun-xia in perf: batch-load messages in advanced-chat workflow run list to remove N+1 #38359
• refactor(web): remove app context provider by @hyoban in refactor(web): remove app context provider #38568
• test(e2e): stabilize agent build draft note scenario by @lyzno1 in test(e2e): stabilize agent build draft note scenario #38571
• refactor(web): sync app context effects with jotai by @hyoban in refactor(web): sync app context effects with jotai #38570
• test(e2e): fix agent build note runtime connection by @lyzno1 in test(e2e): fix agent build note runtime connection #38574
• fix: preserve ResponseStreamFilter state across workflow pause/resume by @GareArc in fix: preserve ResponseStreamFilter state across workflow pause/resume #38540
• chore: upgrade TypeScript 7 by @hyoban in chore: upgrade TypeScript 7 #38575
• fix: when delete custom model remove its cache by @hjlarry in fix: when delete custom model remove its cache #38577
• refactor(web): add prefetched query atom by @hyoban in refactor(web): add prefetched query atom #38572
• chore: generate fastopenapi console contracts by @hyoban in chore: generate fastopenapi console contracts #38580
• refactor(api): migrate workspace model endpoints to BaseModel by @cqjjjzr in refactor(api): migrate workspace model endpoints to BaseModel #37963
• refactor(api): migrate snippet workspace endpoints to BaseModel by @cqjjjzr in refactor(api): migrate snippet workspace endpoints to BaseModel #37956
• refactor(api): migrate dataset endpoints to BaseModel by @cqjjjzr in refactor(api): migrate dataset endpoints to BaseModel #37957
• refactor(api): migrate web chat endpoints to BaseModel by @cqjjjzr in refactor(api): migrate web chat endpoints to BaseModel #37962
• refactor(api): migrate service app endpoints to BaseModel by @cqjjjzr in refactor(api): migrate service app endpoints to BaseModel #37960
• fix: run user_connect authorization inside Flask app context by @GareArc in fix: run user_connect authorization inside Flask app context #38585
• fix: guard chat tree against out-of-order parents by @iamjoel in fix: guard chat tree against out-of-order parents #38590
• fix(web): preserve attribution from auth redirect by @CodingOnStar in fix(web): preserve attribution from auth redirect #38583
• refactor(web): split app context state atoms by @hyoban in refactor(web): split app context state atoms #38588
• refactor(tests): replace logger mocks with caplog in trace provider tests by @melooooooo in refactor(tests): replace logger mocks with caplog in trace provider tests #38569
• fix: chunk workflow failure tracking data by @CodingOnStar in fix: chunk workflow failure tracking data #38598
• chore: batch example use update(model).select().values to update, instead of manually commit #38419 by @asukaminato0721 in chore: batch example #38419 #38474
• fix: harden workflow archive DB retries by @zhaohao1004 in fix: harden workflow archive DB retries #38170
• fix(api): ignore invalid utf8 cache payloads by @Harsh23Kashyap in fix(api): ignore invalid utf8 cache payloads #37835
• docs: remove Dify Premium on AWS Marketplace section from all READMEs by @Inlei in docs: remove Dify Premium on AWS Marketplace section from all READMEs #38607
• feat: daily sync by @zyssyz123 in feat: daily sync #38593
• fix(web): update docs links by @hyoban in fix(web): update docs links #38591
• fix: fix miss session param by @fatelei in fix: fix miss session param #38612
• chore: Bump version to 1.16.0-rc1 by @QuantumGhost in chore: Bump version to 1.16.0-rc1 #38600
• fix: fix auth prefix duplicate by @fatelei in fix: fix auth prefix duplicate #38616
• fix: remove hardcoded sandbox path in configuration file by @QuantumGhost in fix: remove hardcoded sandbox path in configuration file #38618

New Contributors

• @ojasarora77 made their first contribution in test: replace logger mock with caplog in workflow collaboration test #37971
• @DevCube24 made their first contribution in refactor: Use pytest caplog instead of logger patching in test_spec.py #37997
• @CyberPU2099 made their first contribution in feat(web): add customizable input placeholder for Agent/Chatflow/Chatbot web app #37790
• @Harsh23Kashyap made their first contribution in docs(web): fix testing guide link #38006
• @uxgnod made their first contribution in fix(web): download markdown file-preview links as attachments #38030
• @shiyuanfang2nd made their first contribution in fix(vdb): remove deprecated SQL options for ADB-PG 7.0 compatibility #38004
• @zeeshan56656 made their first contribution in fix(api): skip uuidv7() creation when PostgreSQL 18 provides it natively #36998
• @Sanket2329 made their first contribution in feat(mcp): support dynamic HTTP request headers in MCPClient #37938
• @VeraPyuyi made their first contribution in fix(api): prevent plugin provider cache stampedes #37388
• @p2003722 made their first contribution in fix(api): avoid infinite loop in _delete_records when batch deletion fails #38118
• @sergioperezcheco made their first contribution in refactor: pass db.session explicitly in DatasetIndexToolCallbackHandler #38082
• @escapefyh made their first contribution in refactor: use Pydantic for sensitive word avoidance config (Fixes #37… #37660
• @SquabbyZ made their first contribution in fix(models): correct onupdate typo on trigger.py updated_at columns #38341
• @isheng-eqi made their first contribution in refactor: drop redundant len(tag_ids)==0 check in get_target_ids_by_tag_ids #38447
• @agarwalpranav0711 made their first contribution in fix(api): isolate side-effect session writes in multimodal and RAG handlers #38210
• @ryuta-kobayashi-ug made their first contribution in feat(api): pass app_id to model plugins for provider-side cost attribution #35859
• @melooooooo made their first contribution in refactor(tests): replace logger mocks with caplog in trace provider tests #38569

Full Changelog: 1.15.0...1.16.0-rc1

---

This discussion was created from the release v1.16.0-rc1.