onyx-cli v1.5.0

Changes

• feat(cli): add --document-set filter to onyx-cli search and a document-sets command (#17504) (34d4307)
• feat(chat): enable code mode behind CODE_MODE_ENABLED (#17339) (a9b8dfb)
• feat(search): add POST /search/raw for search with no LLM calls [edit of #17035] (#17261) (2ab9f2a)
• feat(connectors): add the registration seam for event sources (#16992) (e4ddc15)
• feat(slack): make the Slack cloud configurable for GovSlack (#16985) (c92cead)
• feat(connectors): Azure Data Lake Storage permission and group sync (#16887) (d937790)
• feat(deployment): add a webhook server process (#16915) (d8bcf60)
• fix(chat): wait for session readiness across supported clients (#16773) (da1343c)
• feat(log-export): collect every pod's stdout, crashes, and events on Kubernetes (#16836) (62e283e)
• chore(code-interpreter): bump to 0.4.10 (#16780) (146f19e)
• chore(ci): move CI, tests, and defaults off gpt-4o/gpt-5 to gpt-6 models (#16643) (556f83e)
• fix(perm-sync): stop a doc permission sync on stalled progress, not elapsed time (#16635) (4332f04)
• feat(craft): open static HTML previews from Apps (#16573) (ae8fb04)
• fix(deployment): keep MinIO and its copy service stopped on a fresh Compose install (#16429) (ec1ed83)
• feat(indexing): add new embedding models and upgrade-only model selection (#15351) (b86caa7)
• docs(deployment): downgrade the schema before rolling back from v5 (#16424) (2f9ed25)
• fix(deployment): warn when a hand-run Compose upgrade leaves files in MinIO (#16375) (fd99626)
• feat(indexing): re-chunk tabular documents indexed by the old chunker (#16153) (e6772d6)
• feat(youtrack): permission sync (#16136) (b16c101)
• chore(permissions): remove the Redis state for permission and group syncs (#15977) (308ad09)
• feat(permissions): report permission sync progress while it runs (#15974) (d3e304e)
• feat(indexing): add SKIP_SPREADSHEET_CONTENT to index spreadsheets by title only (#16075) (81b2e2b)
• fix(devtools): stop local tools writing through symlinks and running fork hooks (#15992) (bcb5ff9)
• feat(craft): show a Business upsell for Craft on Community Edition (#15901) (777b9bf)
• feat(deployment): run the MCP server by default in docker compose (#15963) (8ce6fab)
• feat(hubspot): permission sync from HubSpot's record viewers (#15788) (c4522a5)
• feat(linear): permission sync (#15783) (0d5a7f8)
• feat(llm): gate release-notes fetch behind ONYX_AIRGAPPED (#15691) (2feffd6)
• feat(llm): prefer live model catalog from main, vendored table as offline floor (#15684) (55f866e)
• feat(craft): support IPv6-only Docker sandboxes (#15677) (a1b8669)
• feat(zoom): sync recording permissions periodically (#15020) (2d78a8c)
• feat(zoom): sync domain groups from the account roster (#15019) (cb0509d)
• chore: drop the two EE env vars from deploys, ods, CI and tests (#15645) (5415576)
• chore(deps): update golang base image digests (#14934) (5c67b8e)
• fix(ci): stop OpenSearch disk-watermark flakes on test runners (#15628) (232c99f)
• chore(code-interpreter): bump to 0.4.9 (#15506) (2481294)
• chore: remove Vespa and consolidate the document index interface (#15336) (8ced9bc)
• feat(cli): move installs and upgrades to the object store (#15251) (8d31e4b)
• feat(file-store): copy MinIO's files into the object store and retire it (#15250) (bf98589)
• feat(file-store): write to both stores and fall back to MinIO during the move (#15249) (cfe73b7)
• feat(deployment): add the SeaweedFS object-store service beside MinIO (#15248) (6df6026)
• feat: sync OneDrive permissions (#14848) (ace1683)
• feat(code-interpreter): integrate Code Interpreter 0.4.8 with admission retries (#15131) (817f41f)
• chore(deployment): expose the SharePoint file size cap in the templates (#15144) (c056a20)
• feat(config): env-overridable permission sync and document sync lock TTLs (#15063) (df0f68b)
• fix(enterprise-settings): remove the Hide Onyx Branding toggle (#15112) (f61e051)
• fix(deployment): pull MinIO from our own Docker Hub mirror (#15086) (9987d2b)
• fix(cli): title the chat session after a one-shot ask (#15059) (706cfa2)
• fix(tools): bound open_url response bodies and block IPv6 IMDS (#14990) (695d024)
• fix(cli): keep remote serve sessions off the host config (#14986) (49530ec)
• feat(connectors): index files posted in Teams channels behind an attachments option (#14851) (16c43a9)
• refactor(cli): order struct fields to remove padding (#14872) (a49fd02)
• fix(connectors): cap downloads and protect temporary credentials (#14821) (92aee9f)
• feat(connectors): sync Outlook permissions from mailbox owners and event attendees (#14752) (a23baa4)
• feat(connectors): index Outlook attachments and accept certificate credentials (#14736) (adbdd89)
• feat(ods): add ods release cli and ods release ods (#14724) (4190ba9)
• build: pin the wheel build environment and upgrade Go to 1.27.1 (#14719) (16247ee)
• fix(metrics): serve stale data while a collection stalls, add Redis socket deadlines (#14643) (0fed336)