← back to report

OpenHands/OpenHands

// all events — 2026-05-22

Type AI Score Description Actor Reason Date
commit 1.00 chore(lint): pyproject.toml as single source of truth for ru Commit message contains explicit AI assi 2026-05-21
commit 1.00 fix: show raw llm_model on OpenHands conversation chip (#145 Commit message contains explicit AI assi 2026-05-21
commit 1.00 PLTF-2686: Add sdk to mypy checking in the enterprise folder Commit message contains explicit AI assi 2026-05-21
commit 1.00 feat(acp): minimal generic ACP agent UI (#14401) Commit message contains explicit AI assi 2026-05-15
commit 1.00 chore: bump openhands SDK to v1.22.1 (#14424) Commit message contains explicit AI assi 2026-05-15
commit 1.00 Update AgentSettings usage for SDK removal Explicit mention: 'Merged by an AI agent 2026-05-14
commit 1.00 fix(i18n): use NBSP before tags to prevent Trans space Commit message contains explicit AI assi 2026-05-12
commit 1.00 fix(i18n): disable i18next escapeValue (React renderer is th Commit message contains explicit AI assi 2026-05-11
commit 1.00 fix(dev): run pre-commit on staged files instead of broken s Commit message contains explicit AI assi 2026-05-07
commit 1.00 fix(acp): route pending message delivery through correct age Commit message contains explicit AI assi 2026-05-06
commit 1.00 fix(security): strengthen log redaction for API keys and pro Commit message contains explicit AI assi 2026-05-06
commit 1.00 fix(security): remove debug log that exposes hook_config sec Commit message contains explicit AI assi 2026-05-06
commit 1.00 chore: delete _redact_compat shim and import directly from o Commit message contains explicit AI assi 2026-05-06
commit 1.00 feat(frontend/chat): add inline LLM profile switcher button Commit message contains explicit AI assi 2026-05-05
commit 1.00 feat(chat): add /model slash command to list and switch LLM Commit message contains explicit AI assi 2026-05-05
pr 1.00 fix(APP-1892): restore PostHog onboarding-completed and crea PR body explicitly mentions AI collabora 2026-05-21
pr 1.00 Require human context at the top of PR descriptions PR body explicitly mentions AI collabora 2026-05-22
pr 1.00 Fix issue opened workflow automation PR body explicitly mentions AI collabora 2026-05-22
pr 1.00 Automate good first issue labeling in issue triage PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Add Support for Switching Models via llama.cpp Compatible AP PR body explicitly mentions AI collabora 2026-03-22
pr 1.00 dependabot python multi ecosystem group for single PR depend PR body explicitly mentions AI collabora 2026-04-01
pr 1.00 Use user email as Laminar trace user_id when available PR body explicitly mentions AI collabora 2026-05-21
pr 1.00 Fix binaryornot Python 3 crash on binary reads PR body explicitly mentions AI collabora 2026-05-21
pr 1.00 Fix CVE-2026-41140: Update poetry to 2.3.4 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 Fix CVE-2026-39373: Update jwcrypto to 1.5.7 PR body explicitly mentions AI collabora 2026-05-21
pr 1.00 Fix CVE-2026-39377: Update nbconvert to 7.17.1 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 chore: change default model to MiniMax-M2.7 PR body explicitly mentions AI collabora 2026-05-21
pr 1.00 Pass user_id to StartConversationRequest for Laminar tracing PR body explicitly mentions AI collabora 2026-05-13
pr 1.00 Add /docs/ folder with README.md for new contributors PR body explicitly mentions AI collabora 2026-03-27
pr 1.00 feat: add `notifications` scope to GitHub OAuth defaultScope PR body explicitly mentions AI collabora 2026-04-10
pr 1.00 Fix CVE-2026-44289: Pin protobufjs to 7.5.6 PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Fix Slack message for critic API key startup errors PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Fix CVE-2026-44431: Update urllib3 to 2.7.0 PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 fix: replace jwcrypto with joserfc to address CVE-2024-28102 PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Fix CVE-2026-42561: Update python-multipart to 0.0.28 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 Update workflow shell context handling PR body explicitly mentions AI collabora 2026-05-20
pr 1.00 Fix CVE-2026-35397: Update jupyter-server to 2.18.2 PR body explicitly mentions AI collabora 2026-05-15
pr 1.00 feat(settings): add saved LLM profiles - SaaS PR body explicitly mentions AI collabora 2026-05-13
pr 1.00 Make trigger comment more prominent in github bot initial me PR body explicitly mentions AI collabora 2026-05-04
pr 1.00 Remove App tab from conversation workspace PR body explicitly mentions AI collabora 2026-05-12
pr 1.00 fix: cloud event search timestamp comparison (str vs datetim PR body explicitly mentions AI collabora 2026-05-13
pr 1.00 Fix CVE-2026-44244: Update gitpython to 3.1.50 PR body explicitly mentions AI collabora 2026-05-09
pr 1.00 fix(api): add title field to AppConversationUpdateRequest PR body explicitly mentions AI collabora 2026-05-14
pr 0.20 Bump SDK packages to v1.23.0 Very slightly more formal but still chan 2026-05-20
pr 0.15 fix(frontend): stop infinite scroll loop in conversation his Brief, domain-specific phrasing; no AI s 2026-03-25
pr 0.15 Bump SDK packages to v1.21.1 Automated version bump text, but structu 2026-05-08
commit 0.10 [PLTF-2500] Add Bitbucket DC webhook enrollment UI for manua Brief PR title; standard issue notation 2026-05-18
pr 0.10 ci: pin external third-party actions to commit SHAs + scope Brief, domain-specific phrasing—no clear 2026-05-20
pr 0.10 feat: Add org-level LLM profiles for SaaS users Specific domain references, brief summar 2026-05-13
pr 0.10 feat(frontend): Allow bulk selection and deletion of convers Concise, clear, and technical—typical hu 2026-04-06
pr 0.10 fix: validate base_url rejects API endpoint paths with actio Uses concise technical bullet points; hu 2026-03-25
pr 0.10 Remove dead frontend exports Direct, domain-specific summary, human-w 2026-04-09
pr 0.10 feat(microagent): add dependency_repos frontmatter field for Technical and concise; lacks AI stylisti 2026-04-11
pr 0.10 fix: queue V1 WebSocket messages in memory during CONNECTING Clear domain language, technical issue, 2026-05-19
pr 0.10 feat(acp): persist current_model_id on conversations Technical context and domain terms; huma 2026-05-21
pr 0.10 feat: encode harness in chip icon, surface model in chip tex Domain-focused, concise, no AI-formal or 2026-05-21
pr 0.10 chore(lint): pyproject.toml as single source of truth for ru Technical bullet points, brief rationale 2026-05-21
pr 0.10 fix: show raw llm_model on OpenHands conversation chip Concise, domain-specific bugfix phrasing 2026-05-21
pr 0.10 feat(acp): persist ACP session id, redirect storage onto /wo Uses domain terms and incomplete sentenc 2026-05-21
pr 0.10 Added Vercel deployment Informal phrasing; filled with user need 2026-05-20
pr 0.10 fix: validate conversation storage path components (CWE-22) Technical, concise, specific jargon; doe 2026-05-07
pr 0.10 Add 👀 eye reaction acknowledgement for BBDC PR comments (Par Casual, references PR stack, domain abbr 2026-05-18
pr 0.10 Add automated Bitbucket Data Center webhook lifecycle (Part Human-written summary, concise, no AI ph 2026-05-18
pr 0.10 Add X-Org-Id header validation and effective-org resolution Brief, technical, no AI phrasing or unna 2026-05-11
pr 0.10 Fix sub-agent settings and built-in registration Contains bugs/typos, direct and domain-s 2026-05-14
commit 0.05 Fix BBDC mentioner resolution to use numeric id, and add 👀 e Technical context, jargon, informal tone 2026-05-20
pr 0.05 Get Jira Data Center Resolver working in OHE Domain jargon and casual phrasing; human 2026-05-21
pr 0.05 BBDC: optionally post comments/reactions as a bot service ac Technical detail and informal tone; no A 2026-05-21
pr 0.05 BBDC: prompt unenrolled @-mentioners to sign up instead of f Terse, domain-specific, casual phrasing; 2026-05-21
pr 0.05 fix: bump binaryornot to >=0.5.0 to fix Python 3 NameError ( Domain abbreviations, specific issues, h 2026-05-21
pr 0.05 feat: permissive CORS for API-key requests Domain-specific terms, concise phrasing, 2026-05-20
pr 0.05 PLTF-2686: Add sdk to mypy checking in the enterprise folder Template structure, technical content; d 2026-05-19
pr 0.05 fix(acp): bootstrap-prompt resume when sandbox is recycled ( Uses domain jargon, clear technical cont 2026-05-04
pr 0.05 Fix conversation metadata startup race Concise, technical summary with issue re 2026-05-20
pr 0.05 fix: support .agents org skill repos Contains brief domain-specific details a 2026-05-16
pr 0.05 feat: extend LLM profiles to support ACP agent configuration Technically focused, specific change, la 2026-05-18
pr 0.05 chore: disable global skills loading, project-only skills Brief, jargon-heavy summary and clear te 2026-05-20
pr 0.05 fix(i18n): disable i18next escapeValue (React renderer is th Technical explanation, domain-specific, 2026-05-11
pr 0.05 fix(i18n): use NBSP before tags to prevent Trans space Detailed technical bug description, doma 2026-05-11
pr 0.05 fix(bitbucket): Replace deprecated/deleted API Domain-specific summary, clear human eng 2026-05-10
pr 0.05 PLTF-2506: enterprise upgrade openhands SDK to 1.21.1 Content minimal, truncated, matches typi 2026-05-13
commit 0.00 Broaden Jira Data Center automation webhook events (#14532) Concise technical summary typical of hum 2026-05-22
commit 0.00 Support Bitbucket Data Center org claims (#14530) Brief, domain-specific, lacks AI phrasin 2026-05-22
commit 0.00 Support Jira Data Center automation forwarding (#14522) Short, technical description with no AI 2026-05-22
commit 0.00 Scope resolver runtime auth to resolved org (#14529) Technical phrasing and domain abbreviati 2026-05-22
commit 0.00 Get Jira Data Center Resolver working in OHE (#14520) Casual tone, uses technical/project-spec 2026-05-22
commit 0.00 fix(resolver): use literal placeholders in branch/PR naming Commit message uses domain jargon; no AI 2026-05-22
commit 0.00 fix: scope MCP and ACP env vars to the acting org member (#1 Terse, domain-specific, and natural comm 2026-05-22
commit 0.00 Require human context at the top of PR descriptions (#14527) Co-authored-by trailer, but not AI-speci 2026-05-22
commit 0.00 ci: pin external third-party actions to commit SHAs + scope Technical CI commit, wording typical of 2026-05-22
commit 0.00 Fix issue opened workflow automation (#14526) Co-authored-by trailer, but attributed t 2026-05-22
commit 0.00 Automate good first issue labeling in issue triage (#14498) Standard concise commit message; no AI s 2026-05-22
commit 0.00 Use user email as Laminar trace user_id when available (#145 Commit message is concise, technical, an 2026-05-21
commit 0.00 fix: MCP settings wont update (#14492) Informal, terse fix message with domain 2026-05-21
commit 0.00 BBDC: optionally post comments/reactions as a bot service ac Message uses project jargon and brief, h 2026-05-21
commit 0.00 BBDC: prompt unenrolled @-mentioners to sign up instead of f Technical, concise, informal wording typ 2026-05-21
commit 0.00 Fix CVE-2026-41140: Update poetry to 2.3.4 (#14361) Standard CVE fix message, brief and tech 2026-05-21
commit 0.00 Fix CVE-2026-39373: Update jwcrypto to 1.5.7 (#14503) CVE update phrase is succinct and domain 2026-05-21
commit 0.00 Fix CVE-2026-39377: Update nbconvert to 7.17.1 (#14362) Domain-focused CVE fix, minimal boilerpl 2026-05-21
commit 0.00 chore: change default model to MiniMax-M2.7 (#14508) Terse, technical commit with human tone. 2026-05-21
commit 0.00 feat: permissive CORS for API-key requests (#14473) Brief, technical description without AI 2026-05-21
commit 0.00 Pass user_id to StartConversationRequest for Laminar tracing Concise, human-like technical commit mes 2026-05-21
commit 0.00 Fix CVE-2026-44289: Pin protobufjs to 7.5.6 (#14484) Short, terse CVE fix commit; typical hum 2026-05-20
commit 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-20
commit 0.00 chore(deps-dev): bump the eslint group across 1 directory wi — 2026-05-20
commit 0.00 chore(deps): bump actions/setup-node from 4 to 6 (#14090) — 2026-05-20
commit 0.00 chore(deps): bump docker/setup-buildx-action from 3 to 4 (#1 — 2026-05-20
commit 0.00 chore(deps): bump actions/setup-python from 5 to 6 (#14093) — 2026-05-20
commit 0.00 chore(deps): bump dawidd6/action-download-artifact from 15 t — 2026-05-20
commit 0.00 chore(deps): bump ubuntu from 22.04 to 26.04 in /containers/ — 2026-05-20
commit 0.00 chore(deps): bump actions/github-script from 7 to 9 (#14466) — 2026-05-20
commit 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
commit 0.00 chore(deps): bump mcp from 1.27.0 to 1.27.1 in the mcp-packa — 2026-05-20
commit 0.00 Fix CVE-2026-44431: Update urllib3 to 2.7.0 (#14481) Direct CVE fix with co-authors, concise 2026-05-20
commit 0.00 fix: replace jwcrypto with joserfc to address CVE-2024-28102 Terse, domain-specific commit, typical h 2026-05-20
commit 0.00 Chunk the keycloak_auth cookie to survive the 4096-byte brow Technical, succinct and domain-jargon; n 2026-05-20
commit 0.00 Add automated Bitbucket Data Center webhook lifecycle (Part Brief, technical, lacking AI formal phra 2026-05-20
commit 0.00 Fix CVE-2026-42561: Update python-multipart to 0.0.28 (#1435 Short CVE fix, domain-specific, human co 2026-05-20
commit 0.00 Update workflow shell context handling (#14478) Short, domain-specific; typical human co 2026-05-20
commit 0.00 Fix CVE-2026-35397: Update jupyter-server to 2.18.2 (#14435) Concise CVE fix, bot co-authorship; foll 2026-05-20
commit 0.00 fix: avoid rewriting provider credit errors (#14437) Terse commit message with domain jargon, 2026-05-19
commit 0.00 Break verified_models → app_server.config import cycle (#144 Concise commit, co-authored by human, cl 2026-05-19
commit 0.00 ci: add 7-day Dependabot cooldown (#14465) Brief technical commit message, no AI si 2026-05-19
commit 0.00 Fix CVE-2026-41312: Update pypdf to 6.10.2 (#14355) Standard CVE patch note, co-authored by 2026-05-18
commit 0.00 fix(config-api): show 'openhands' provider first in provider Commit message is concise and uses co-au 2026-05-18
commit 0.00 Add issue duplicate automation workflow (#14444) Co-authored commit message; template usa 2026-05-16
commit 0.00 Fix CVE-2026-44897: Update mistune to 3.2.1 (#14360) Commit message from CVE Fix Bot, but cle 2026-05-16
commit 0.00 Fix CVE-2026-44307: Update mako to 1.3.12 (#14356) Commit message from CVE Fix Bot; indicat 2026-05-16
commit 0.00 chore(deps): bump pypdf from 6.9.2 to 6.10.2 in /enterprise — 2026-05-16
commit 0.00 Fix CVE-2026-42264: Update axios to 1.15.2 (#14428) Commit is bot-authored; standard CVE pat 2026-05-15
commit 0.00 Add PR review bot triage guidelines (#14410) Bot co-author, but text shows standard t 2026-05-15
commit 0.00 Add PR readiness confirmation CI workflow (#14429) Bot co-author, message uses concise tech 2026-05-15
commit 0.00 chore(deps-dev): bump notebook from 7.5.5 to 7.5.6 (#14358) — 2026-05-15
commit 0.00 fix(api): add title field to AppConversationUpdateRequest (# Co-authored by bot; domain-specific, ter 2026-05-15
commit 0.00 Fix sub-agent settings and built-in registration (#14418) Terse commit title, standard human style 2026-05-14
commit 0.00 PLTF-2506: enterprise upgrade openhands SDK to 1.21.1 (#1440 Concise, conventional commit with no AI 2026-05-13
commit 0.00 Fix CVE-2026-44244: Update gitpython to 3.1.50 (#14354) Standard CVE fix commit, no AI or ChatGP 2026-05-13
commit 0.00 fix: cloud event search timestamp comparison (str vs datetim Terse, technical commit with typos/abbre 2026-05-13
commit 0.00 Remove App tab from conversation workspace (#14395) Concise, domain-specific commit message; 2026-05-12
commit 0.00 Add X-Org-Id header validation and effective-org resolution Technical commit message, domain vocabul 2026-05-12
commit 0.00 fix(bitbucket): Replace deprecated/deleted API (#14363) Brief, conventional human commit format; 2026-05-12
commit 0.00 Fix so offline token is not deleted. (#14387) Specific bugfix, minimal message; clearl 2026-05-12
commit 0.00 Make trigger comment more prominent in github bot initial me Concise commit message with co-author, n 2026-05-11
commit 0.00 Bump SDK packages to v1.21.1 (#14350) Standard dependency bump, no free-text A 2026-05-11
commit 0.00 feat: enable sub-agent delegation via TaskToolSet in app ser Commit message uses domain-specific phra 2026-05-08
commit 0.00 fix Windows compatibility: use cross-platform temp directory Commit message is terse and technical, t 2026-05-08
commit 0.00 feat(frontend): Add critic result types, component, and even Uses domain jargon, co-authors provide h 2026-05-08
commit 0.00 Bump SDK packages to v1.21.0 (#14340) Commit uses terse, domain-specific phras 2026-05-07
commit 0.00 Enforce canonical settings query keys in frontend (#14011) Direct, concise message with domain jarg 2026-05-07
commit 0.00 feat(settings): use from_persisted for stored settings (#141 Contains standard changelog format and d 2026-05-07
commit 0.00 Revert "fix(acp): route pending message delivery through cor Standard git revert commit with no AI ha 2026-05-06
commit 0.00 fix: skip store_idp_tokens for SAML IdPs (#14243) Terse, domain-specific message with co-a 2026-05-06
commit 0.00 Bump SDK packages to v1.20.1 (#14315) Bot co-author is github-actions; no AI w 2026-05-06
commit 0.00 feat(frontend): show full model name in conversation header Standard feature commit message; no AI s 2026-05-06
commit 0.00 DRAFT: docs: update plugin launch flow with complete data fl Concise technical commit summary with do 2026-05-05
commit 0.00 fix: handle persisted agent_kind='openhands' in org response Specific code context and informal, ters 2026-05-05
commit 0.00 fix(i18n): translate hardcoded settings strings (#14286) Typical concise human commit message wit 2026-05-05
commit 0.00 fix: share GCS storage.Client() across requests to prevent c Typical co-authored commit with human do 2026-05-04
commit 0.00 Fix GHSA-xqmj-j6mv-4862: Update litellm to 1.83.14 (#14299) Brief CVE fix message; standard bot co-a 2026-05-04
commit 0.00 Fix CVE-2026-41066: Update lxml to 6.1.0 (#14259) Concise CVE fix with bot co-author; huma 2026-05-04
commit 0.00 APP-1547 Added sqlalchemy mapper to loquacious logger list ( Short technical commit message; informal 2026-05-04
commit 0.00 APP-1546 feat(frontend): expose sandbox grouping strategy UI Domain-specific jargon and issue refs; h 2026-05-04
commit 0.00 feat: move PostHog server side (#14006) Casual, technical commit; human style an 2026-05-04
commit 0.00 feat: Proxy Tavily MCP connections through app server (#1427 Concise, domain-specific commit; human a 2026-05-04
pr 0.00 Broaden Jira Data Center automation webhook events PR summary uses technical jargon and inf 2026-05-22
pr 0.00 fix: forward insecure git access env to sandboxes Technical, terse, and domain-specific su 2026-05-22
pr 0.00 Support Bitbucket Data Center org claims PR content is highly specific and uses t 2026-05-22
pr 0.00 Support Jira Data Center automation forwarding Summary is technical and lacks AI-genera 2026-05-22
pr 0.00 Scope resolver runtime auth to resolved org Free-text is technical and informal, not 2026-05-22
pr 0.00 Clarify Minimax model usage in README README update is direct, with no AI-like 2026-05-20
pr 0.00 Devin vyzorix changes No clear free-text; only template remnan 2026-05-08
pr 0.00 fix(resolver): use literal placeholders in branch/PR naming Uses domain-specific terms and direct ph 2026-05-22
pr 0.00 fix: scope MCP and ACP env vars to the acting org member Content is incomplete but uses informal 2026-05-22
pr 0.00 chore(deps): bump docker/build-push-action from 7 to 7.1.0 — 2026-05-21
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-20
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
pr 0.00 fix: MCP settings wont update Brief, informal, and contains domain-spe 2026-05-20
pr 0.00 chore(deps): bump actions/stale from 10 to 10.2.0 — 2026-05-21
pr 0.00 chore(deps): bump python from 3.13.7-slim-trixie to 3.14.5-s — 2026-05-21
pr 0.00 chore(deps): bump node from 25.9-trixie-slim to 26.2-trixie- — 2026-05-21
pr 0.00 chore(deps): bump node from 25.9-trixie-slim to 26.1-trixie- — 2026-05-14
pr 0.00 fix: recover conversation metadata save race Terse summary, domain references; not AI 2026-05-20
pr 0.00 docs: add Tuning Engines gateway example Incomplete, short phrasing typical of hu 2026-05-20
pr 0.00 Fix BBDC mentioner resolution to use numeric id, and add 👀 e Uses domain jargon and specific technica 2026-05-20
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-20
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-02-09
pr 0.00 chore(deps-dev): bump the eslint group across 1 directory wi — 2026-04-15
pr 0.00 chore(deps): bump actions/setup-node from 4 to 6 — 2026-04-23
pr 0.00 chore(deps): bump docker/setup-buildx-action from 3 to 4 — 2026-04-23
pr 0.00 chore(deps): bump actions/setup-python from 5 to 6 — 2026-04-23
pr 0.00 chore(deps): bump dawidd6/action-download-artifact from 15 t — 2026-04-30
pr 0.00 chore(deps): bump ubuntu from 22.04 to 26.04 in /containers/ — 2026-05-07
pr 0.00 chore(deps): bump actions/github-script from 7 to 9 — 2026-05-19
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
pr 0.00 chore(deps): bump mcp from 1.27.0 to 1.27.1 in the mcp-packa — 2026-05-11
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
pr 0.00 Chunk the keycloak_auth cookie to survive the 4096-byte brow Technical details and informal explanati 2026-05-20
pr 0.00 feat(app-server): add opt-in MemoryIntegrityCallbackProcesso Domain technical vocabulary, not AI-gene 2026-05-20
pr 0.00 test(bdd): assert OpenHands context summary absent from agen Specific BDD test detail, technical lang 2026-05-20
pr 0.00 fix(slack): show clear message when critic LLM API key is mi Structured summary with domain specifics 2026-05-20