← back to report

OpenHands/OpenHands

// all events — 2026-05-20

Type AI Score Description Actor Reason Date
commit 1.00 feat(acp): minimal generic ACP agent UI (#14401) Commit message contains explicit AI assi 2026-05-15
commit 1.00 chore: bump openhands SDK to v1.22.1 (#14424) Commit message contains explicit AI assi 2026-05-15
commit 1.00 Update AgentSettings usage for SDK removal Explicit mention: 'Merged by an AI agent 2026-05-14
commit 1.00 fix(i18n): use NBSP before tags to prevent Trans space Commit message contains explicit AI assi 2026-05-12
commit 1.00 fix(i18n): disable i18next escapeValue (React renderer is th Commit message contains explicit AI assi 2026-05-11
commit 1.00 fix(dev): run pre-commit on staged files instead of broken s Commit message contains explicit AI assi 2026-05-07
commit 1.00 fix(acp): route pending message delivery through correct age Commit message contains explicit AI assi 2026-05-06
commit 1.00 fix(security): strengthen log redaction for API keys and pro Commit message contains explicit AI assi 2026-05-06
commit 1.00 fix(security): remove debug log that exposes hook_config sec Commit message contains explicit AI assi 2026-05-06
commit 1.00 chore: delete _redact_compat shim and import directly from o Commit message contains explicit AI assi 2026-05-06
commit 1.00 feat(frontend/chat): add inline LLM profile switcher button Commit message contains explicit AI assi 2026-05-05
commit 1.00 feat(chat): add /model slash command to list and switch LLM Commit message contains explicit AI assi 2026-05-05
commit 1.00 feat(settings): add saved LLM profiles (FE) - OSS (#14149) Commit message contains explicit AI assi 2026-05-04
commit 1.00 APP-1325: accept '1' as truthy value for SLACK_WEBHOOKS_ENAB Commit message contains explicit AI assi 2026-05-01
commit 1.00 chore: update protobufjs for CVE-2026-41242 (#14027) Commit message contains explicit AI assi 2026-05-01
commit 1.00 refactor(settings): replace LLMAgentSettings with OpenHandsA Commit message contains explicit AI assi 2026-04-30
commit 1.00 Bump SDK packages to v1.19.1 (#14238) Commit message contains explicit AI assi 2026-04-30
pr 1.00 Clarify good first issue criteria in issue triage PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Pass user_id to StartConversationRequest for Laminar tracing PR body explicitly mentions AI collabora 2026-05-13
pr 1.00 Fix CVE-2026-44289: Pin protobufjs to 7.5.6 PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Fix Slack message for critic API key startup errors PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Fix CVE-2026-44431: Update urllib3 to 2.7.0 PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 fix: replace jwcrypto with joserfc to address CVE-2024-28102 PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Fix CVE-2026-42561: Update python-multipart to 0.0.28 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 Update workflow shell context handling PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Fix CVE-2026-35397: Update jupyter-server to 2.18.2 PR body explicitly mentions AI collabora 2026-05-15
pr 1.00 feat(settings): add saved LLM profiles - SaaS PR body explicitly mentions AI collabora 2026-05-13
pr 1.00 Make trigger comment more prominent in github bot initial me PR body explicitly mentions AI collabora 2026-05-04
pr 1.00 Remove App tab from conversation workspace PR body explicitly mentions AI collabora 2026-05-12
pr 1.00 fix: cloud event search timestamp comparison (str vs datetim PR body explicitly mentions AI collabora 2026-05-13
pr 1.00 Fix CVE-2026-44244: Update gitpython to 3.1.50 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 fix(api): add title field to AppConversationUpdateRequest PR body explicitly mentions AI collabora 2026-05-14
pr 1.00 Add PR readiness confirmation CI workflow PR body explicitly mentions AI collabora 2026-05-15
pr 1.00 Add PR review bot triage guidelines PR body explicitly mentions AI collabora 2026-05-13
pr 1.00 Fix CVE-2026-42264: Update axios to 1.15.2 PR body explicitly mentions AI collabora 2026-05-15
pr 1.00 Fix CVE-2026-44307: Update mako to 1.3.12 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 Fix CVE-2026-44897: Update mistune to 3.2.1 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 fix(config-api): show 'openhands' provider first in provider PR body explicitly mentions AI collabora 2026-05-04
pr 1.00 Fix CVE-2026-41312: Update pypdf to 6.10.2 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 ci: add 7-day Dependabot cooldown PR body explicitly mentions AI collabora 2026-05-19
pr 1.00 Break verified_models → app_server.config import cycle PR body explicitly mentions AI collabora 2026-05-16
pr 1.00 Pass repository metadata to observability traces PR body explicitly mentions AI collabora 2026-05-15
pr 1.00 Upgrade LiteLLM to 1.84.0rc1 PR body explicitly mentions AI collabora 2026-05-12
pr 1.00 feat(acp): add minimal agent settings form PR body explicitly mentions AI collabora 2026-05-12
pr 0.20 Add issue duplicate automation workflow Slightly formal but concise and domain-s 2026-05-16
pr 0.20 fix(app_server): use live title when stored title is default Human-like phrasing; technical explanati 2026-05-18
pr 0.20 feat: Add org-level LLM profiles for SaaS users Slightly more formal but technical and s 2026-05-13
pr 0.20 feat: add native Databricks AI Gateway provider (OAuth, mode Domain-specific details and abbreviation 2026-05-17
pr 0.20 feat(sandbox): add boxd cloud microVM backend Technical domain references; concise and 2026-05-18
pr 0.20 Add Bitbucket Cloud webhook enrollment lifecycle Technical terms, concise summary, and in 2026-05-14
pr 0.15 Bump SDK packages to v1.21.1 Automated version bump text, but structu 2026-05-08
commit 0.10 [PLTF-2500] Add Bitbucket DC webhook enrollment UI for manua Brief PR title; standard issue notation 2026-05-18
pr 0.10 Add automated Bitbucket Data Center webhook lifecycle (Part Human-written summary, concise, no AI ph 2026-05-18
pr 0.10 Add X-Org-Id header validation and effective-org resolution Brief, technical, no AI phrasing or unna 2026-05-11
pr 0.10 Fix sub-agent settings and built-in registration Contains bugs/typos, direct and domain-s 2026-05-14
pr 0.10 chore: bump openhands SDK to v1.22.1 Technical changelog, uses domain terms, 2026-05-15
pr 0.10 feat(acp): minimal generic ACP agent UI Jargon-heavy, direct style, no AI-style 2026-05-13
pr 0.10 [PLTF-2500] Add Bitbucket DC webhook enrollment UI for manua Detailed, domain-specific, no signs of A 2026-05-13
pr 0.10 fix: avoid rewriting provider credit errors Domain-specific detail, terse bullet poi 2026-05-16
pr 0.10 feat: support pagination for branch search queries Technical detail, concise, human-like ch 2026-04-11
pr 0.10 fix: race condition in EventStream and deprecated asyncio pa Detailed summary, concise, domain-specif 2026-04-30
pr 0.10 feat(frontend): show "Delivering..." status for queued messa End-user description starts, but tone an 2026-05-20
pr 0.10 fix(app_server): require true to expose enterprise sso Direct technical summary, no AI-style ph 2026-04-03
pr 0.10 fix: load org skills from .agents repositories Technical summary, minimal filler, domai 2026-05-17
pr 0.10 chore(deps): make pythonnet Windows-only dependency Technically focused, platform markers, n 2026-03-21
pr 0.10 fix(app_server): normalize web client feature flags Domain-specific flags, summary is concis 2026-04-03
pr 0.10 Add 👀 eye reaction acknowledgement for BBDC PR comments (Par Brief, informal tone and technical refer 2026-05-18
pr 0.10 fix(acp): bootstrap resumed conversations after sandbox rest Brief, technical summary and changelog; 2026-05-10
pr 0.10 feat: preserve LLM/condenser/MCP config across OH ↔ ACP kind Direct, technical bullets characteristic 2026-05-18
pr 0.10 feat(app-server): plumb llm.base_url into ACP subprocess env Describes fix with technical details, no 2026-05-06
commit 0.05 Fix BBDC mentioner resolution to use numeric id, and add 👀 e Technical context, jargon, informal tone 2026-05-20
pr 0.05 Add sdk to mypy checking in the enterprise folder and fix th Template structure, technical content; d 2026-05-19
pr 0.05 fix(acp): bootstrap-prompt resume when sandbox is recycled ( Uses domain jargon, clear technical cont 2026-05-04
pr 0.05 Fix conversation metadata startup race Concise, technical summary with issue re 2026-05-20
pr 0.05 fix: support .agents org skill repos Contains brief domain-specific details a 2026-05-16
pr 0.05 feat: permissive CORS for API-key requests Domain-specific terms, concise phrasing, 2026-05-20
pr 0.05 feat: extend LLM profiles to support ACP agent configuration Technically focused, specific change, la 2026-05-18
pr 0.05 chore: disable global skills loading, project-only skills Brief, jargon-heavy summary and clear te 2026-05-20
pr 0.05 fix(i18n): disable i18next escapeValue (React renderer is th Technical explanation, domain-specific, 2026-05-11
pr 0.05 fix(i18n): use NBSP before tags to prevent Trans space Detailed technical bug description, doma 2026-05-11
pr 0.05 fix(bitbucket): Replace deprecated/deleted API Domain-specific summary, clear human eng 2026-05-10
pr 0.05 PLTF-2506: enterprise upgrade openhands SDK to 1.21.1 Content minimal, truncated, matches typi 2026-05-13
pr 0.05 Fix agent-server config not updating on restart Bugfix, informal punctuation, domain-spe 2026-04-10
pr 0.05 feat(acp): subscription auth for Claude Code (Max) and Codex PR content uses technical jargon and inf 2026-05-15
pr 0.05 fix: queue V1 WebSocket messages in memory during CONNECTING Direct explanatory tone and context-spec 2026-05-19
pr 0.05 feat: add /api/me endpoint for user info with role and permi Contains domain-specific terms and conci 2026-04-08
pr 0.05 chore: Add sdk to mypy checking in enterprise folder and fix Brief, technical language with no AI hal 2026-04-06
commit 0.00 Fix CVE-2026-44289: Pin protobufjs to 7.5.6 (#14484) Short, terse CVE fix commit; typical hum 2026-05-20
commit 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-20
commit 0.00 chore(deps-dev): bump the eslint group across 1 directory wi — 2026-05-20
commit 0.00 chore(deps): bump actions/setup-node from 4 to 6 (#14090) — 2026-05-20
commit 0.00 chore(deps): bump docker/setup-buildx-action from 3 to 4 (#1 — 2026-05-20
commit 0.00 chore(deps): bump actions/setup-python from 5 to 6 (#14093) — 2026-05-20
commit 0.00 chore(deps): bump dawidd6/action-download-artifact from 15 t — 2026-05-20
commit 0.00 chore(deps): bump ubuntu from 22.04 to 26.04 in /containers/ — 2026-05-20
commit 0.00 chore(deps): bump actions/github-script from 7 to 9 (#14466) — 2026-05-20
commit 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
commit 0.00 chore(deps): bump mcp from 1.27.0 to 1.27.1 in the mcp-packa — 2026-05-20
commit 0.00 Fix CVE-2026-44431: Update urllib3 to 2.7.0 (#14481) Direct CVE fix with co-authors, concise 2026-05-20
commit 0.00 fix: replace jwcrypto with joserfc to address CVE-2024-28102 Terse, domain-specific commit, typical h 2026-05-20
commit 0.00 Chunk the keycloak_auth cookie to survive the 4096-byte brow Technical, succinct and domain-jargon; n 2026-05-20
commit 0.00 Add automated Bitbucket Data Center webhook lifecycle (Part Brief, technical, lacking AI formal phra 2026-05-20
commit 0.00 Fix CVE-2026-42561: Update python-multipart to 0.0.28 (#1435 Short CVE fix, domain-specific, human co 2026-05-20
commit 0.00 Update workflow shell context handling (#14478) Short, domain-specific; typical human co 2026-05-20
commit 0.00 Fix CVE-2026-35397: Update jupyter-server to 2.18.2 (#14435) Concise CVE fix, bot co-authorship; foll 2026-05-20
commit 0.00 fix: avoid rewriting provider credit errors (#14437) Terse commit message with domain jargon, 2026-05-19
commit 0.00 Break verified_models → app_server.config import cycle (#144 Concise commit, co-authored by human, cl 2026-05-19
commit 0.00 ci: add 7-day Dependabot cooldown (#14465) Brief technical commit message, no AI si 2026-05-19
commit 0.00 Fix CVE-2026-41312: Update pypdf to 6.10.2 (#14355) Standard CVE patch note, co-authored by 2026-05-18
commit 0.00 fix(config-api): show 'openhands' provider first in provider Commit message is concise and uses co-au 2026-05-18
commit 0.00 Add issue duplicate automation workflow (#14444) Co-authored commit message; template usa 2026-05-16
commit 0.00 Fix CVE-2026-44897: Update mistune to 3.2.1 (#14360) Commit message from CVE Fix Bot, but cle 2026-05-16
commit 0.00 Fix CVE-2026-44307: Update mako to 1.3.12 (#14356) Commit message from CVE Fix Bot; indicat 2026-05-16
commit 0.00 chore(deps): bump pypdf from 6.9.2 to 6.10.2 in /enterprise — 2026-05-16
commit 0.00 Fix CVE-2026-42264: Update axios to 1.15.2 (#14428) Commit is bot-authored; standard CVE pat 2026-05-15
commit 0.00 Add PR review bot triage guidelines (#14410) Bot co-author, but text shows standard t 2026-05-15
commit 0.00 Add PR readiness confirmation CI workflow (#14429) Bot co-author, message uses concise tech 2026-05-15
commit 0.00 chore(deps-dev): bump notebook from 7.5.5 to 7.5.6 (#14358) — 2026-05-15
commit 0.00 fix(api): add title field to AppConversationUpdateRequest (# Co-authored by bot; domain-specific, ter 2026-05-15
commit 0.00 Fix sub-agent settings and built-in registration (#14418) Terse commit title, standard human style 2026-05-14
commit 0.00 PLTF-2506: enterprise upgrade openhands SDK to 1.21.1 (#1440 Concise, conventional commit with no AI 2026-05-13
commit 0.00 Fix CVE-2026-44244: Update gitpython to 3.1.50 (#14354) Standard CVE fix commit, no AI or ChatGP 2026-05-13
commit 0.00 fix: cloud event search timestamp comparison (str vs datetim Terse, technical commit with typos/abbre 2026-05-13
commit 0.00 Remove App tab from conversation workspace (#14395) Concise, domain-specific commit message; 2026-05-12
commit 0.00 Add X-Org-Id header validation and effective-org resolution Technical commit message, domain vocabul 2026-05-12
commit 0.00 fix(bitbucket): Replace deprecated/deleted API (#14363) Brief, conventional human commit format; 2026-05-12
commit 0.00 Fix so offline token is not deleted. (#14387) Specific bugfix, minimal message; clearl 2026-05-12
commit 0.00 Make trigger comment more prominent in github bot initial me Concise commit message with co-author, n 2026-05-11
commit 0.00 Bump SDK packages to v1.21.1 (#14350) Standard dependency bump, no free-text A 2026-05-11
commit 0.00 feat: enable sub-agent delegation via TaskToolSet in app ser Commit message uses domain-specific phra 2026-05-08
commit 0.00 fix Windows compatibility: use cross-platform temp directory Commit message is terse and technical, t 2026-05-08
commit 0.00 feat(frontend): Add critic result types, component, and even Uses domain jargon, co-authors provide h 2026-05-08
commit 0.00 Bump SDK packages to v1.21.0 (#14340) Commit uses terse, domain-specific phras 2026-05-07
commit 0.00 Enforce canonical settings query keys in frontend (#14011) Direct, concise message with domain jarg 2026-05-07
commit 0.00 feat(settings): use from_persisted for stored settings (#141 Contains standard changelog format and d 2026-05-07
commit 0.00 Revert "fix(acp): route pending message delivery through cor Standard git revert commit with no AI ha 2026-05-06
commit 0.00 fix: skip store_idp_tokens for SAML IdPs (#14243) Terse, domain-specific message with co-a 2026-05-06
commit 0.00 Bump SDK packages to v1.20.1 (#14315) Bot co-author is github-actions; no AI w 2026-05-06
commit 0.00 feat(frontend): show full model name in conversation header Standard feature commit message; no AI s 2026-05-06
commit 0.00 DRAFT: docs: update plugin launch flow with complete data fl Concise technical commit summary with do 2026-05-05
commit 0.00 fix: handle persisted agent_kind='openhands' in org response Specific code context and informal, ters 2026-05-05
commit 0.00 fix(i18n): translate hardcoded settings strings (#14286) Typical concise human commit message wit 2026-05-05
commit 0.00 fix: share GCS storage.Client() across requests to prevent c Typical co-authored commit with human do 2026-05-04
commit 0.00 Fix GHSA-xqmj-j6mv-4862: Update litellm to 1.83.14 (#14299) Brief CVE fix message; standard bot co-a 2026-05-04
commit 0.00 Fix CVE-2026-41066: Update lxml to 6.1.0 (#14259) Concise CVE fix with bot co-author; huma 2026-05-04
commit 0.00 APP-1547 Added sqlalchemy mapper to loquacious logger list ( Short technical commit message; informal 2026-05-04
commit 0.00 APP-1546 feat(frontend): expose sandbox grouping strategy UI Domain-specific jargon and issue refs; h 2026-05-04
commit 0.00 feat: move PostHog server side (#14006) Casual, technical commit; human style an 2026-05-04
commit 0.00 feat: Proxy Tavily MCP connections through app server (#1427 Concise, domain-specific commit; human a 2026-05-04
commit 0.00 Fix SaaS routes shadowed by frontend mount (#14279) Commit message is terse and domain-speci 2026-05-03
commit 0.00 Add unit tests for get_version() and fix pkg_resources Unbou Standard commit message format with huma 2026-05-01
commit 0.00 Fix agent kind (#14263) Concise and technical commit message, ty 2026-05-01
commit 0.00 docs: document truthy value convention for env var enable to Terse documentation change, normal for h 2026-05-01
commit 0.00 docs: fix stale and inaccurate markdown documentation (#1425 Brief commit message and standard human 2026-05-01
commit 0.00 refactor: Move openhands.server content to openhands.app_ser Technical refactor log, terse and specif 2026-05-01
commit 0.00 refactor: move AppMode class to config_api/config_models.py Standard refactor message; domain-specif 2026-05-01
commit 0.00 Remove openhands.core package (#14252) Simple package removal message; entirely 2026-05-01
commit 0.00 refactor: remove OpenHandsConfig from settings and secrets s Technical refactor with domain details, 2026-05-01
commit 0.00 Release 1.7.0 (#14184) Standard release commit format, with hum 2026-05-01
commit 0.00 Migrate all jwt_secret consumers from OpenHandsConfig to Jwt Typical migration/refactor log with spec 2026-05-01
commit 0.00 fix: align OAuth 2.0 with Jira DC server requirements (#1425 Succinct technical commit; domain-specif 2026-05-01
commit 0.00 Remove mcp_config.py: drop TOML-based MCP configuration (#14 Concise commit message; uses technical j 2026-04-30
commit 0.00 Remove legacy LLMConfig and all related code (#14239) Technical, succinct commit subject; natu 2026-04-30
commit 0.00 feat: introduce LLMModelService with DI, replacing legacy co Commit follows standard conventional com 2026-04-30
commit 0.00 refactor: move openhands.core.logger to openhands.app_server Terse, technical; matches developer comm 2026-04-30
commit 0.00 Remove unused OpenHandsConfig from RepositoryStore and UserR Human style; domain-specific and concise 2026-04-30
commit 0.00 feat: add bitbucket data center resolver for pr comment trig Informal phrasing with common feature in 2026-04-30
commit 0.00 refactor: move openhands.utils to openhands.app_server.utils Routine refactor message using typical m 2026-04-30
pr 0.00 docs: add Tuning Engines gateway example Incomplete, short phrasing typical of hu 2026-05-20
pr 0.00 Fix BBDC mentioner resolution to use numeric id, and add 👀 e Uses domain jargon and specific technica 2026-05-20
pr 0.00 fix: MCP settings wont update Brief, informal, and contains domain-spe 2026-05-20
pr 0.00 Clarify Minimax model usage in README Concise phrasing, human tone, specific c 2026-05-20
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-20
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-20
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
pr 0.00 chore(deps): bump node from 25.9-trixie-slim to 26.1-trixie- — 2026-05-14
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-02-09
pr 0.00 chore(deps-dev): bump the eslint group across 1 directory wi — 2026-04-15
pr 0.00 chore(deps): bump actions/setup-node from 4 to 6 — 2026-04-23
pr 0.00 chore(deps): bump docker/setup-buildx-action from 3 to 4 — 2026-04-23
pr 0.00 chore(deps): bump actions/setup-python from 5 to 6 — 2026-04-23
pr 0.00 chore(deps): bump dawidd6/action-download-artifact from 15 t — 2026-04-30
pr 0.00 chore(deps): bump ubuntu from 22.04 to 26.04 in /containers/ — 2026-05-07
pr 0.00 chore(deps): bump actions/github-script from 7 to 9 — 2026-05-19
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
pr 0.00 chore(deps): bump mcp from 1.27.0 to 1.27.1 in the mcp-packa — 2026-05-11
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
pr 0.00 Chunk the keycloak_auth cookie to survive the 4096-byte brow Technical details and informal explanati 2026-05-20
pr 0.00 feat(app-server): add opt-in MemoryIntegrityCallbackProcesso Domain technical vocabulary, not AI-gene 2026-05-20
pr 0.00 fix: recover conversation metadata save race Terse summary, domain references; not AI 2026-05-20
pr 0.00 ci: pin external third-party actions to commit SHAs + scope Technical changelog phrasing, no AI hall 2026-05-20
pr 0.00 test(bdd): assert OpenHands context summary absent from agen Specific BDD test detail, technical lang 2026-05-20
pr 0.00 fix(slack): show clear message when critic LLM API key is mi Structured summary with domain specifics 2026-05-20
pr 0.00 chore(deps-dev): bump notebook from 7.5.5 to 7.5.6 — 2026-05-09
pr 0.00 chore(deps): bump pypdf from 6.9.2 to 6.10.2 in /enterprise — 2026-04-25
pr 0.00 Feat/stay logged in PR uses template; actual content is inco 2026-05-13
pr 0.00 fix(events): avoid hydrating unpaged filesystem events Only template is present; no free-text o 2026-05-16
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-04
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-19
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-07