通过 API 携带笔记的丰富文本 / 纯文本模式
创建对所请求模式的遵守并默认为富人,匹配 编辑器创建了注释。 更新像其他一样是无防护的 字段,所以只发送 {是RichText } 的呼叫者不会 空白的纸条。 DTO读取的是 RichTextOrDefault( ), 所以这行不知何故 逃出后填充被报告为富人。 错误地保留 格式化是安全的方向:相反将显示格式化 将它...
声明保存对象的秘密“ 配置地图” 不再包含
MinIO 密钥从 ConfigMap 中移入微型应用程序证书 秘密,但从里面得到的补给 它只应用到现场 ——从未在这里承诺. 下一个CI的部署回了这个清单 在活的补丁上留下一个没有默认和没有环境的配置图 满足它, 和服务 坠毁在无法解决 {\fn黑体\fs22\bord1\shad0\3aHBE\4aH00\fscx...
停止传输共享证书作为配置默认值
该平台的共享密码被烤入为 DB PASWORD 和 MINIO ROOT PASWORD,所以它生活在这种回波和所建的图像中以及 在星团显示。 生产从未使用 DB 默认 —— *** 用品 DB PASWORD通过envFrom,它的值是一个不同的密码. 米尼欧 默认正在被使用: 没有设置部署 MINIO ROOT ...
根据共享图书馆重建@Lob LONGVARCHAR fix
Hibernate 的 PostgreSQL 方言通过 getLong () 读取 @Lob String 列为 OID . 影响笔记、联系人、日历、 OAuth 令牌、 IMAP 密码、 电子邮件活动 身体,网络记录的秘密, 坎瓦和社会证书.
点到 YugabyteDB 并使用 PostgreSQLdialect
CockroachDB被尤加比特DB所取代. 连接字符串从 蟑螂db-公用:26257到yb-tserver-service:5433,并使用希伯来语方言 从QQ到PostgreSQLDialect.
重试共享- library 构建, LAN 上行链路会不断腐蚀
三所建筑今天因"塔格不匹配"而死, 帮助,因为 kbservice, mcpgatewaysservice 和 ragservice 与 Google 发生相同的错误 镜子本身。 因此,这从来不是马文中央的费率限制。 K1m1 eno49: 超过 ~ 20MB 的 15-35% 的 转移 。 (参考:2026-08-...
通过 Google GCS 复制镜像映像中心
每个Docker阶段都从冷~/.m2开始,并重新绘制整个依赖树,所以中枢看到了 每一个同时服务建设的全重。 它回答429, 和两次今天腐败 转帐: BillingService在"Tag不匹配"取tomcat-embed-core上死亡. 警卫事务和 mlos-doc-orchestration-service 已经通...
Harden Kubctl的下载 以对抗被片状攻击 [skip ci]
dl.k8s.io 在跑道上断断续续地下降 中转: 卷曲:(56) OpenSSL SSL read:解密失败或记录错误 mac 无法在绿地上部署 多次观察 卡莫-签名-莫诺雷波和卡莫-翻译-词典. 添加 -- retry/-retry-all-errors: plain --retry 不涵盖该类 中转失败。 同时...
创造就业的货币范围,而不是部署Kubernetes
工作流量一级连通整条管道(包括克贝克特尔) (推出)。 将组移动到构建任务中, 只需从不同位置部署任务 运行可以重叠。 Kluster Services 工作流程下调工作流程货币 并行推动不排队于只部署的任务.
Rebuild for kamo-shared-library update (CREATE_CHILD_ORG right + apply-to flags)
Pulls the new RoleRightType.CREATE_CHILD_ORG (id 131), the three apply-to flags on ChildOrgSecurityModel, the two 13-arg service overloads, and the AppliedModel...
Rebuild for kamo-shared-library update (appConfig upsert-only fix)
Pulls the hardened **************** that no longer deletes appConfig rows whose service types are absent from the caller's payload — prevents silent data loss w...
Rebuild for kamo-shared-library update (effective-feature resolver)
Picks up the new AppliedModelEnforcementService methods (computeAvailabilitiesMap, isAppEffectivelyEnabled, getEffectivelyEnabledAppTypes, computeEffectiveFeatu...
Rebuild for kamo-shared-library update (applied-model enforcement + appConfigs + isPrivate)
Triggers a rebuild so this service pulls the updated kamo-shared-library containing AppliedModelEnforcementService, ChildOrgSecurityModelAppConfig entity, Servi...
Rebuild for kamo-shared-library update (runtime force rules + DEFAULT fallback in MemberRightsAppliedService)
Triggers a rebuild so this service picks up the updated **************** that applies template force rules and DEFAULT-template fallbacks on top of the existing...
Rebuild for kamo-shared-library update (master model, default role templates, force-rule resolver)
Triggers a rebuild so this service pulls the new kamo-shared-library revision containing Organization.branchTypeID, Organization.masterModelID, ****************...
Remove translate config from application.yml — belongs in k8s/configmap.yaml
Add async translation for KB articles, add locale-aware public article APIs
Add concurrency group to prevent duplicate workflow runs
When a push triggers a workflow and workflow_dispatch is also fired (or two pushes arrive in quick succession), both runs would execute simultaneously. Adding a...
Add unauthenticated public endpoints for KB articles
Add KbPublicArticleController with endpoints for the marketing site to fetch published articles where aiVisibleToPublic=true, without requiring OTK authenticati...
Defer NATS event publishing until after transaction commits to prevent RAG race condition
Events were firing inside @Transactional methods, causing RAGService to read stale data from CockroachDB before the commit. Also auto-defaults aiVisibleToMember...
Support AI visibility toggles in KB article create/update
Accept aiEnabled and visibility flags in create/update endpoints. Handle AI toggle changes by publishing delete events when AI is disabled, triggering re-indexi...
Add notes management with RAG integration
Move notes CRUD from SecurityService to KBService. Add note encryption, NATS event publishing for RAG pipeline, and AI processing toggle support. Notes with AI ...
Update KB media and version ID references from Long to UUID
Article IDs (KbArticle) remain Long. Version, media, pin, and review IDs now use UUID for improved CockroachDB write performance.
Add unpublish endpoint for KB articles
Add POST /articles/{guid}/unpublish that sets status back to DRAFT and publishes a kb.article.unpublished NATS event so RAGService can remove the article from t...
Return article guid/title in pending reviews response
The KbArticleReview entity has @JsonIgnore on article, so the pending reviews endpoint was returning reviews without article details (guid, title). Now uses eag...
Add error handling to createArticle endpoint
Wrap createArticle call in try-catch to return proper JSON error responses instead of Spring Boot's default HTML error page.
Add org-level resource management and article-media linking APIs
Rewrite KbMediaService/Controller for org-level media CRUD with paginated listing, search, metadata update, and soft delete. Add article-media link/unlink/sync ...
Correct hasRight to match flat rights array format and honor god mode
Session rights are stored as ["VIEW_DASHBOARD", ...] not [{name, setting}]. Also bypass right checks when GD (god mode) is true.
Accept parentGuid from frontend in article creation
Frontend sends parentGuid (string) not parentId (numeric). Resolve GUID to ID server-side via lookup.