← back to report

OpenHands/OpenHands

// all events — 2026-06-09

Type AI Score Description Actor Reason Date
commit 1.00 Revert ACP bootstrap-prompt resume + enable acp_isolate_data Commit message contains explicit AI assi 2026-06-09
commit 1.00 Fix CVE-2026-42342: Update react-router to 7.15.0 (#14684) Contains bot trailer ('Co-authored-by: O 2026-06-05
commit 1.00 fix(enterprise): return agent-settings union instead of coer Commit message contains explicit AI assi 2026-06-05
commit 1.00 fix(acp): bootstrap-prompt resume when sandbox is recycled ( Commit message contains explicit AI assi 2026-06-05
commit 1.00 refactor(acp): remove acp_env wholesale-replacement compat c Commit message contains explicit AI assi 2026-06-05
commit 1.00 fix(acp): route provider creds via agent_context.secrets, no Commit message contains explicit AI assi 2026-06-03
commit 1.00 Upgrade LiteLLM to 1.84.1 (#14396) Commit message contains explicit AI assi 2026-05-28
commit 1.00 chore(lint): pyproject.toml as single source of truth for ru Commit message contains explicit AI assi 2026-05-21
commit 1.00 fix: show raw llm_model on OpenHands conversation chip (#145 Commit message contains explicit AI assi 2026-05-21
commit 1.00 PLTF-2686: Add sdk to mypy checking in the enterprise folder Commit message contains explicit AI assi 2026-05-21
pr 1.00 perf: skip runtime API call in webhook auth via SandboxRecor PR body explicitly mentions AI collabora 2026-06-09
pr 1.00 settings: stop reverse-mapping OpenHands provider models PR body explicitly mentions AI collabora 2026-06-09
pr 1.00 ci: add label-triggered OpenHands QA workflow PR body explicitly mentions AI collabora 2026-06-09
pr 1.00 Harden workflow GitHub context handling PR body explicitly mentions AI collabora 2026-05-24
pr 1.00 fix: remove org_id from ownership assertion in save_app_conv PR body explicitly mentions AI collabora 2026-06-09
pr 1.00 Fix OpenHands LLM key access for credited orgs PR body explicitly mentions AI collabora 2026-06-09
pr 1.00 Distinguish stopped sandboxes from archived conversations PR body explicitly mentions AI collabora 2026-06-09
pr 1.00 Fix CVE-2026-41238: Update dompurify to 3.4.0 PR body explicitly mentions AI collabora 2026-06-01
pr 1.00 Avoid Keycloak full scan in Resend sync PR body explicitly mentions AI collabora 2026-05-26
pr 1.00 fix(frontend): upgrade vitest to ^4.1.0 to resolve Dependabo PR body explicitly mentions AI collabora 2026-06-03
pr 1.00 Fix CVE-2026-42305: Update dulwich to 1.2.5 PR body explicitly mentions AI collabora 2026-06-03
pr 1.00 Fix CVE-2026-44492: Update axios to 1.16.0 PR body explicitly mentions AI collabora 2026-06-03
pr 1.00 PLTF-2895: add composite index on event_callback (conversati PR body explicitly mentions AI collabora 2026-06-03
pr 1.00 PLTF-2899: store GitHub PR timestamps as naive UTC (asyncpg PR body explicitly mentions AI collabora 2026-06-04
pr 1.00 PLTF-2899: await SaaS get_user_id() in Slack repo-inference PR body explicitly mentions AI collabora 2026-06-04
pr 1.00 chore: bump vitest to ^4.1.0 and remove stale authors PR body explicitly mentions AI collabora 2026-06-05
pr 1.00 Fix CVE-2026-42342: Update react-router to 7.15.0 PR body explicitly mentions AI collabora 2026-06-05
pr 1.00 Remove _get_sandbox_by_session_api_key_legacy to stop spurio PR body explicitly mentions AI collabora 2026-06-07
pr 1.00 APP-2218: add indexes on conversation_metadata_saas (user_id PR body explicitly mentions AI collabora 2026-06-04
pr 1.00 fix(frontend): preserve chat input text when server send fai PR body explicitly mentions AI collabora 2026-06-07
pr 1.00 fix: prevent agent_context=null from corrupting org settings PR body explicitly mentions AI collabora 2026-06-07
pr 0.60 feat: implement semantic file chunking using tree-sitter AST Phrases like 'I saw a to-do in your proj 2026-06-07
pr 0.30 Bump SDK packages to v1.25.0 Automated bump, but summary sounds templ 2026-06-04
pr 0.20 Bump SDK packages to v1.27.0 Automated version bump phrasing is terse 2026-06-09
pr 0.20 feat: add validation for secret names to ensure valid env va Direct reference to another PR and clear 2026-02-21
pr 0.20 feat(acp): snapshot ACP agent spec at conversation creation Technical vocabulary and focused summary 2026-06-05
pr 0.15 fix: add test for InMemoryRateLimiter.__init__ to prevent du Uses domain jargon and a specific techni 2026-06-09
commit 0.10 Support KOTS-managed Jira DC service accounts Domain-specific, some formality but tech 2026-05-26
commit 0.10 Forward Bitbucket Data Center events to automations Technical domain jargon and concise, hum 2026-05-23
pr 0.10 feat(acp): add model dropdown and credential fields to agent Brief, domain-specific, includes terse p 2026-06-09
pr 0.10 PLTF-2895: add enterprise migration integrity check Technical and brief, workflow details sh 2026-06-05
pr 0.10 fix: allow self-hosted BYOR key export Narrow domain fix described in succinct, 2026-06-01
pr 0.10 fix: delete LiteLLM user on personal org reset Contains issue references and brief, tec 2026-06-07
pr 0.10 fix(security): redact credentials in plugin source URLs befo Short, terse field-level summary is typi 2026-02-21
pr 0.10 fix: sanitize subprocess call in process_sandbox_service.py Technical summary and security field tab 2026-04-29
pr 0.10 Clarify Minimax model usage in README Simple, direct language updating docs; n 2026-05-20
pr 0.10 ci: adopt release-please for app and cloud releases PR content is concise and uses a natural 2026-06-08
pr 0.10 fix: support pagination for branch search Domain-specific language and concise bul 2026-04-25
pr 0.10 feat: add native Databricks Unity AI Gateway provider (OAuth Technical context and specific jargon us 2026-05-17
pr 0.10 fix: _configure_llm now preserves user LLM settings Exhibits technical depth and personalize 2026-05-17
pr 0.10 fix(frontend): preserve returnTo through the onboarding inte Brief, informal, with a typo and domain 2026-05-09
pr 0.10 fix(acp): route provider creds via agent_context.secrets, no Technical, includes jargon and is slight 2026-06-03
pr 0.10 Cascade-delete sole-org requester on DELETE /api/organizatio Direct, technical, uses code and informa 2026-06-02
pr 0.10 PLTF-2895: add enterprise migration for event_callback compo Technical description with domain jargon 2026-06-04
pr 0.10 PLTF-2895: event_callback index — use plain CREATE INDEX Contains problem analysis, technical, hu 2026-06-04
pr 0.10 refactor(acp): remove acp_env wholesale-replacement compat c Technical notes and references, clear do 2026-06-05
pr 0.10 fix(acp): bootstrap-prompt resume when sandbox is recycled ( Mix of informal summary and domain-speci 2026-06-04
pr 0.10 PLTF-2895: Enterprise Apply Migrations on Test DB Informal, uses 'Human:' prefix and techn 2026-06-04
pr 0.10 fix(enterprise): return agent-settings union instead of coer Uses direct, domain-specific language wi 2026-06-05
pr 0.10 fix(auth): don't revoke offline_tokens on bearer-auth failur Clear, technical, and concise with proje 2026-06-05
pr 0.10 PLTF-2875: Add promote-to-development sender Project-specific terminology and succinc 2026-06-04
pr 0.10 Fix Bitbucket DC userinfo lookup Clear, domain-specific summary; no AI in 2026-06-07
pr 0.10 Add OHE default organization bootstrap Human-written style, mentions specific v 2026-06-08
pr 0.10 feat(acp): subscription auth for Claude Code (Max) and Codex Technical abbreviations, project referen 2026-05-15
pr 0.10 feat(acp): credential file injection for cloud deployments ( Authentic technical explanation, uses ja 2026-05-06
pr 0.10 Persist Claude ACP resume state Domain-specific, uses abbreviations and 2026-05-06
pr 0.10 feat(acp): persist ACP session id, redirect storage onto /wo Jargon-rich, focused explanation, projec 2026-05-21
pr 0.10 Share linked Jira DC OAuth token with eligible conversations Concise, domain-specific; lacks AI hallm 2026-06-06
pr 0.10 feat(jira-dc): persist and inject per-user OAuth tokens in r Terse, technical language; no AI indicat 2026-06-04
pr 0.10 docs: add missing components to openhands-ui README Concise, technical, checklist completed; 2026-04-18
pr 0.10 security: fix critical default-off confirmation mode and pla Security-specific, structured, lacking A 2026-04-28
pr 0.10 fix(frontend): add scrolling support to user avatar popup Terse, domain-specific changelog with br 2026-04-16
pr 0.10 refactor(frontend): consolidate loading states around shared Uses domain-specific language with natur 2026-04-26
pr 0.10 feat(jira-dc): persist and inject per-user OAuth tokens in r Terse, technical language; no AI indicat 2026-05-31
pr 0.08 Revert ACP bootstrap-prompt resume + enable acp_isolate_data Direct revert message, terse technical r 2026-06-09
pr 0.06 Fix WebSocket user messages triggering agent run Technical explanation, informal, human p 2026-06-07
commit 0.05 Fix BBDC mentioner resolution to use numeric id, and add 👀 e Technical context, jargon, informal tone 2026-05-20
pr 0.05 feat: enforce conversation limits Only template content and checkbox, no A 2026-04-27
pr 0.05 fix: ignore null provider tokens in file secrets store Very concise explanation, lacks AI-like 2026-06-09
pr 0.05 fix: deliver pending messages in self-hosted installs withou Direct, technical; matches human bugfix 2026-04-22
pr 0.05 Bump SDK packages to v1.26.0 Concise technical description, no AI sig 2026-06-05
pr 0.05 fix(app_server): preserve user LLM settings for DeepSeek via Technical, uses terse commit style, no A 2026-06-07
pr 0.05 docs: fix formatting and add troubleshooting steps to fronte Uses checklist, clear technical motivati 2026-04-18
pr 0.05 feat(sandbox): add opt-in Runtime API V2 for SaaS users Domain-specific command, informal tone, 2026-06-07
pr 0.05 fix(runtime): fix CJK UTF-8 files misidentified as binary by Domain-specific explanation, concise sum 2026-04-03
pr 0.04 fix(ui): show 'Loading conversation...' during event history Technical bullet points, demo mention, h 2026-03-23
pr 0.04 docs(ui): clarify custom model format for OpenAI-compatible Concise technical summary and rationale, 2026-04-09
pr 0.04 feat(llm): Sign in with ChatGPT on LLM settings (personal / Human shorthand, domain jargon, clear ab 2026-04-10
commit 0.00 perf: skip runtime API call in webhook auth via SandboxRecor Commit message is terse and domain-speci 2026-06-09
commit 0.00 Bump SDK packages to v1.27.0 (#14726) Standard dependency bump with bot co-aut 2026-06-09
commit 0.00 ci: add label-triggered OpenHands QA workflow (#14730) Concise technical commit; no AI signals. 2026-06-09
commit 0.00 Harden workflow GitHub context handling (#14537) Standard technical commit message withou 2026-06-09
commit 0.00 fix: remove org_id from ownership assertion in save_app_conv Message is direct and domain-relevant; c 2026-06-09
commit 0.00 PLTF-2899: Add async/await static analysis checks for enterp Contains project-specific code changes; 2026-06-09
commit 0.00 Enable org LLM profiles in settings (#14715) Concise commit message with domain terms 2026-06-08
commit 0.00 fix: _configure_llm now preserves user LLM settings (#14451) Standard fix commit; trailer indicates h 2026-06-08
commit 0.00 PLTF-2899: keep resume flow responsive during rate limits (# Jargon and ticket ref; brief, human-styl 2026-06-08
commit 0.00 APP-2218: add indexes on conversation_metadata_saas (user_id Technical, terse, uses ticket ref; co-au 2026-06-08
commit 0.00 Remove _get_sandbox_by_session_api_key_legacy to stop spurio Detailed human-written commit, co-author 2026-06-08
commit 0.00 Add OHE default organization bootstrap (#14713) Short technical phrase; no AI signals. 2026-06-08
commit 0.00 Fix Bitbucket DC userinfo lookup (#14711) Very brief, standard commit message with 2026-06-07
commit 0.00 fix: support external Postgres SSL mode (#14695) Terse, technical commit message, typical 2026-06-07
commit 0.00 Bump SDK packages to v1.26.0 (#14679) Standard dependency bump with bot traile 2026-06-07
commit 0.00 chore: bump vitest to ^4.1.0 and remove stale authors (#1468 Uses bot as co-author but commit message 2026-06-05
commit 0.00 PLTF-2875: Add promote-to-development sender (#14635) Short ticket-based commit message withou 2026-06-05
commit 0.00 fix(auth): don't revoke offline_tokens on bearer-auth failur Contains typical human fix message with 2026-06-05
commit 0.00 PLTF-2895: Enterprise Apply Migrations on Test DB (#14652) Succinct ticket-based description typica 2026-06-05
commit 0.00 Bump SDK packages to v1.25.0 (#14653) Standard version bump commit, no AI sign 2026-06-04
commit 0.00 PLTF-2899: await SaaS get_user_id() in Slack repo-inference Standard technical commit message, human 2026-06-04
commit 0.00 PLTF-2899: store GitHub PR timestamps as naive UTC (asyncpg Technical commit with domain terms; huma 2026-06-04
commit 0.00 PLTF-2895: event_callback index — use plain CREATE INDEX (#1 Technical DB change, concise and to the 2026-06-04
commit 0.00 feat(enterprise): make rate limits configurable via env vars Typical feature commit, human brevity, d 2026-06-04
commit 0.00 PLTF-2895: add enterprise migration for event_callback compo Migration-related commit, no AI traits p 2026-06-04
commit 0.00 fix: add composite index on event_callback (conversation_id, Concise technical commit with no AI mark 2026-06-04
commit 0.00 Fix CVE-2026-44492: Update axios to 1.16.0 (#14627) Standard auto-generated commit with clea 2026-06-03
commit 0.00 Cascade-delete sole-org requester on DELETE /api/organizatio No AI indicators, credits to developers 2026-06-03
commit 0.00 Fix CVE-2026-42305: Update dulwich to 1.2.5 (#14626) Standard automated CVE fix with bot cred 2026-06-03
commit 0.00 chore(deps): bump dulwich from 1.2.0 to 1.2.5 (#14625) — 2026-06-03
commit 0.00 fix(frontend): upgrade vitest to ^4.1.0 to resolve Dependabo Terse commit, credits human and bot, no 2026-06-03
commit 0.00 Avoid Keycloak full scan in Resend sync (#14560) Commit message is concise and domain-spe 2026-06-02
commit 0.00 Fix CVE-2026-41238: Update dompurify to 3.4.0 (#14607) Standard CVE and dependency update forma 2026-06-02
commit 0.00 Update default agent server image to 1.23.1 (#14612) Routine update commit, no AI hallmarks p 2026-06-02
commit 0.00 fix(frontend): preserve returnTo through the onboarding inte Commit message is concise and co-authore 2026-06-01
commit 0.00 feat: proxy runtime git/changes and git/diff via app-convers Commit message is terse, technical, and 2026-06-01
commit 0.00 fix(logger): remove dead aifc pre-import block (alternative — 2026-05-29
commit 0.00 feat(saas): seed Default LLM profile from legacy config on p Technical commit message with standard s 2026-05-28
commit 0.00 fix(APP-1892): restore PostHog onboarding-completed and crea Human style, includes domain markers and 2026-05-28
commit 0.00 Seed Default LLM profile from legacy config on first load in Commit message is terse and includes co- 2026-05-27
commit 0.00 [ALL-1887] Add Entra-backed Azure DevOps auth for enterprise Direct, domain-specific abbreviation; ty 2026-05-27
commit 0.00 chore: remove PR review GitHub Actions workflow (#14581) Brief, domain-focused; co-author Git tra 2026-05-27
commit 0.00 feat: Add org-level LLM profiles for SaaS users (#14406) Uses codebase vocabulary and names co-au 2026-05-27
commit 0.00 chore: fix typos in comments, docstrings, and log messages ( Standard terse engineering commit, not A 2026-05-27
commit 0.00 Update openhands-agent-server to 1.23.1 and remove openhands Commit message is terse and includes hum 2026-05-26
commit 0.00 Clarify Jira DC repository access prompt (#14570) Short, imperative, and domain-specific p 2026-05-26
commit 0.00 Polish Jira DC webhook settings UX (#14547) Brief, domain-specific language with no 2026-05-26
commit 0.00 Simplify event callback execution filters (#14557) Terse style and human co-author indicate 2026-05-26
commit 0.00 Enforce single active Jira DC link (#14536) Short, specific, no AI hallmarks. 2026-05-26
commit 0.00 Include Bitbucket DC PR comments in resolver context Terse, focused on domain, with no AI-ind 2026-05-26
commit 0.00 Add connection-scoped Bitbucket DC webhooks Short, direct, uses domain terms; not AI 2026-05-26
commit 0.00 Broaden Jira Data Center automation webhook events (#14532) Concise technical summary typical of hum 2026-05-22
commit 0.00 Support Bitbucket Data Center org claims (#14530) Brief, domain-specific, lacks AI phrasin 2026-05-22
commit 0.00 Support Jira Data Center automation forwarding (#14522) Short, technical description with no AI 2026-05-22
commit 0.00 Scope resolver runtime auth to resolved org (#14529) Technical phrasing and domain abbreviati 2026-05-22
commit 0.00 Get Jira Data Center Resolver working in OHE (#14520) Casual tone, uses technical/project-spec 2026-05-22
commit 0.00 fix(resolver): use literal placeholders in branch/PR naming Commit message uses domain jargon; no AI 2026-05-22
commit 0.00 fix: scope MCP and ACP env vars to the acting org member (#1 Terse, domain-specific, and natural comm 2026-05-22
commit 0.00 Require human context at the top of PR descriptions (#14527) Co-authored-by trailer, but not AI-speci 2026-05-22
commit 0.00 ci: pin external third-party actions to commit SHAs + scope Technical CI commit, wording typical of 2026-05-22
commit 0.00 Fix issue opened workflow automation (#14526) Co-authored-by trailer, but attributed t 2026-05-22
commit 0.00 Automate good first issue labeling in issue triage (#14498) Standard concise commit message; no AI s 2026-05-22
commit 0.00 Use user email as Laminar trace user_id when available (#145 Commit message is concise, technical, an 2026-05-21
commit 0.00 fix: MCP settings wont update (#14492) Informal, terse fix message with domain 2026-05-21
commit 0.00 BBDC: optionally post comments/reactions as a bot service ac Message uses project jargon and brief, h 2026-05-21
commit 0.00 BBDC: prompt unenrolled @-mentioners to sign up instead of f Technical, concise, informal wording typ 2026-05-21
commit 0.00 Fix CVE-2026-41140: Update poetry to 2.3.4 (#14361) Standard CVE fix message, brief and tech 2026-05-21
commit 0.00 Fix CVE-2026-39373: Update jwcrypto to 1.5.7 (#14503) CVE update phrase is succinct and domain 2026-05-21
commit 0.00 Fix CVE-2026-39377: Update nbconvert to 7.17.1 (#14362) Domain-focused CVE fix, minimal boilerpl 2026-05-21
commit 0.00 chore: change default model to MiniMax-M2.7 (#14508) Terse, technical commit with human tone. 2026-05-21
commit 0.00 feat: permissive CORS for API-key requests (#14473) Brief, technical description without AI 2026-05-21
commit 0.00 Pass user_id to StartConversationRequest for Laminar tracing Concise, human-like technical commit mes 2026-05-21
commit 0.00 Fix CVE-2026-44289: Pin protobufjs to 7.5.6 (#14484) Short, terse CVE fix commit; typical hum 2026-05-20
commit 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-05-20
commit 0.00 chore(deps-dev): bump the eslint group across 1 directory wi — 2026-05-20
commit 0.00 chore(deps): bump actions/setup-node from 4 to 6 (#14090) — 2026-05-20
commit 0.00 chore(deps): bump docker/setup-buildx-action from 3 to 4 (#1 — 2026-05-20
commit 0.00 chore(deps): bump actions/setup-python from 5 to 6 (#14093) — 2026-05-20
commit 0.00 chore(deps): bump dawidd6/action-download-artifact from 15 t — 2026-05-20
commit 0.00 chore(deps): bump ubuntu from 22.04 to 26.04 in /containers/ — 2026-05-20
commit 0.00 chore(deps): bump actions/github-script from 7 to 9 (#14466) — 2026-05-20
commit 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
commit 0.00 chore(deps): bump mcp from 1.27.0 to 1.27.1 in the mcp-packa — 2026-05-20
commit 0.00 Fix CVE-2026-44431: Update urllib3 to 2.7.0 (#14481) Direct CVE fix with co-authors, concise 2026-05-20
commit 0.00 fix: replace jwcrypto with joserfc to address CVE-2024-28102 Terse, domain-specific commit, typical h 2026-05-20
commit 0.00 Chunk the keycloak_auth cookie to survive the 4096-byte brow Technical, succinct and domain-jargon; n 2026-05-20
commit 0.00 Add automated Bitbucket Data Center webhook lifecycle (Part Brief, technical, lacking AI formal phra 2026-05-20
pr 0.00 fix(bitbucket-dc): resolve user via whoami so avatars load w Actual PR content is technical and infor 2026-06-09
pr 0.00 fix(auth): reconcile EMAIL_PATTERN_WHITELIST/BLACKLIST env v Free-text is clear, technical, and conte 2026-06-09
pr 0.00 feat: add TWZRD Agent Intel skill for x402 trust verificatio Domain jargon, references, and clear sum 2026-06-08
pr 0.00 PLTF-2895: scope DB sessions tightly in poll_agent_servers t Template with issue context; actual cont 2026-06-04
pr 0.00 fix(frontend): deliver queued startup messages after websock Technical, concise bullet points; lacks 2026-04-29
pr 0.00 chore(deps): bump mcp from 1.27.1 to 1.27.2 in the mcp-packa — 2026-06-08
pr 0.00 chore(deps): bump actions/checkout from 6 to 6.0.2 — 2026-06-04
pr 0.00 PLTF-2899: Add async/await static analysis checks for enterp Includes mypy reference; tone is informa 2026-06-04
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-06-05
pr 0.00 chore(deps-dev): bump the eslint group across 1 directory wi — 2026-06-04
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-06-05
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-05-20
pr 0.00 fix: seed system_message_suffix from saved user agent_contex Informal tone, domain terms, and evidenc 2026-06-07
pr 0.00 Add Ota readiness contract and pressure matrix coverage (v1. Mostly template; no AI traits in the min 2026-06-01
pr 0.00 feat(acp): native session/load resume across sandbox recycle Uses brief domain terms and casual langu 2026-06-07
pr 0.00 chore(refit): slop-mop case study onboarding Technical onboarding description; no AI 2026-06-08
pr 0.00 Enable org LLM profiles in settings Template usage; actual content is concis 2026-06-08
pr 0.00 fix(slack): post final assistant message instead of generate Concise, explains change in plain, techn 2026-06-08
pr 0.00 PLTF-2899: keep resume flow responsive during rate limits Incomplete but includes human signal and 2026-06-04
pr 0.00 feat: proxy runtime git/changes and git/diff via app-convers Concise technical description with natur 2026-06-01
pr 0.00 chore(deps): bump dulwich from 1.2.0 to 1.2.5 — 2026-06-03
pr 0.00 feat(enterprise): make rate limits configurable via env vars No free-text content; only template chec 2026-06-03
pr 0.00 fix: support external Postgres SSL mode Domain-specific details, informal valida 2026-06-06
pr 0.00 Bumped SDK to 1.26.0 No free-text content; all template scaff 2026-06-07
pr 0.00 WebSocket Gateway Update has typos and informal tone, cons 2026-03-21