← back to report

OpenHands/OpenHands

// all events — 2026-06-22

Type AI Score Description Actor Reason Date
commit 1.00 fix: self-heal stale LiteLLM user on re-onboarding (#14932) Commit message contains explicit AI assi 2026-06-22
commit 1.00 chore: purge dead acp_env field footprint (removed in SDK 1. Commit message contains explicit AI assi 2026-06-22
commit 1.00 test: PLTF-1269 replace test_should_ naming with test_verb_n Commit message contains explicit AI assi 2026-06-21
commit 1.00 refactor: extract billing test fixtures for PLTF-1269 (#1399 Commit message contains explicit AI assi 2026-06-21
commit 1.00 test: replace real sleeps in maintenance runner tests (#1393 Commit message contains explicit AI assi 2026-06-21
commit 1.00 fix: Fix CVE-2026-53539: Update python-multipart to >=0.0.30 Commit message co-authored by a bot, lik 2026-06-17
commit 1.00 fix: Fix CVE-2026-12143: Update form-data to 4.0.6 (#14875) Commit attributed to a bot, indicating A 2026-06-17
commit 1.00 docs: revise source code links in README.md Explicitly states an AI agent generated 2026-06-17
commit 1.00 feat: encode harness in chip icon, surface model in chip tex Commit message contains explicit AI assi 2026-06-17
commit 1.00 fix: Fix CVE-2026-54278: Update aiohttp to 3.14.1 (#14871) CVE bot as coauthor points to AI-generat 2026-06-17
commit 1.00 fix: Fix CVE-2026-49855: Update tornado to 6.5.7 (#14856) Commit coauthored by CVE Fix Bot; likely 2026-06-17
commit 1.00 build(deps): bump SDK packages to v1.28.0 (#14753) Commit message contains explicit AI assi 2026-06-15
commit 1.00 fix(acp): surface acp_server on cloud conversations so the m Commit message contains explicit AI assi 2026-06-15
commit 1.00 refactor(settings): delegate agent-settings merge to SDK app Commit message contains explicit AI assi 2026-06-15
commit 1.00 feat(acp): allow MCP server config for ACP agents (#14613) Commit message contains explicit AI assi 2026-06-15
commit 1.00 fix: redact credentials from PluginSpec.source during serial Commit message contains explicit AI assi 2026-06-13
commit 1.00 feat: add validation for secret names to ensure valid env va Commit message contains explicit AI assi 2026-06-12
commit 1.00 feat(acp): add model dropdown and credential fields to agent Commit message contains explicit AI assi 2026-06-11
commit 1.00 fix(acp): sanitize agent-server error body in switch_acp_mod Commit message contains explicit AI assi 2026-06-11
commit 1.00 feat(acp): add switch_acp_model proxy endpoint for cloud con Commit message contains explicit AI assi 2026-06-11
commit 1.00 Revert ACP bootstrap-prompt resume + enable acp_isolate_data Commit message contains explicit AI assi 2026-06-09
pr 1.00 feat: Support Slack attachments in agent context PR body explicitly mentions AI collabora 2026-06-22
pr 1.00 ci: stop using pytest --forked so coverage is captured PR body explicitly mentions AI collabora 2026-06-20
pr 1.00 Pin dependency versions exactly PR body explicitly mentions AI collabora 2026-05-12
pr 1.00 feat: pass repository metadata to observability traces PR body explicitly mentions AI collabora 2026-05-15
pr 1.00 test: replace real sleeps in maintenance runner tests PR body explicitly mentions AI collabora 2026-04-15
pr 1.00 fix: replace datetime.now() with datetime.now(timezone.utc) PR body explicitly mentions AI collabora 2026-05-01
pr 1.00 feat(enterprise): cap automation-minted API keys to org memb PR body explicitly mentions AI collabora 2026-06-20
pr 1.00 feat(enterprise): scoped API credentials foundation (Phase 1 PR body explicitly mentions AI collabora 2026-06-20
pr 1.00 feat(org): Add organization conversation admin dashboard PR body explicitly mentions AI collabora 2026-06-16
pr 1.00 fix: avoid decrypting org_member.llm_api_key when not set PR body explicitly mentions AI collabora 2026-06-18
pr 1.00 fix: avoid decrypting org_member.llm_api_key when not set PR body explicitly mentions AI collabora 2026-06-18
pr 0.20 fix: keep Slack agent responses concise Somewhat more structured, but technical 2026-06-22
pr 0.20 fix: [Bug]: Forgejo under subpath not working Clearly bug-related, includes direct con 2026-06-22
pr 0.20 feat+fix(app-server): add auto_pause_existing flag and fix s Slightly formal opening, but technical a 2026-03-04
pr 0.19 refactor: enhance Azure DevOps PR operations with robust add Technical detail and domain language, no 2026-06-16
pr 0.14 fix(app_server): fall back to default sandbox spec for file Technical content, direct with no AI sig 2026-04-02
pr 0.14 fix(app_server): trim config env helpers Technical and concise; human tone with d 2026-04-03
pr 0.13 fix(frontend): explain OpenAI-compatible provider settings Direct, domain-specific, template struct 2026-04-03
pr 0.12 feat: implement semantic file chunking using tree-sitter AST Free-text is informal; shows human conte 2026-06-07
pr 0.11 feat(app-server): proxy agent-server traffic for reverse-pro Minimal content, no AI signals; mostly t 2026-06-22
pr 0.10 Fix/openhands features Very short and incomplete, minimal text; 2026-06-19
pr 0.10 fix(frontend): show task-specific startup statuses Brief, incomplete phrase, lacks formalit 2026-06-22
pr 0.10 feat: Add dynamic marketplace support for plugin registratio Broken-off, very terse; reads like human 2026-06-18
pr 0.10 fix: load global user & org skills without a selected reposi Short note, technical phrase; no AI hall 2026-06-12
pr 0.10 feat(enterprise): add admin user-provisioning endpoint Technical, brief, just the essentials; h 2026-06-17
pr 0.10 feat: OpenHands Gateway and V1 routing for self-hosted deplo Terse, checked-off item, informal reason 2026-06-19
pr 0.10 fix: self-heal stale LiteLLM user on re-onboarding Terse, informal summary; human-like mini 2026-06-22
pr 0.10 fix: align delete_sandbox path param with handler arg (#1492 Brief, domain-specific content; checkmar 2026-06-21
pr 0.10 chore: purge dead acp_env field footprint (removed in SDK 1. Domain-specific terms and terse, incompl 2026-06-21
pr 0.10 fix(llm): skip Gemini full endpoint URL as base_url to preve Technical detail and casual phrasing ind 2026-04-20
pr 0.10 Add /integration/github/token endpoint PR uses standard technical bullet points 2026-04-28
pr 0.10 feat: add financial document intelligence utility for regula Uses domain-specific file/path, project 2026-05-02
pr 0.10 feat: scoped api credentials for sandbox to prevent privileg Informal bulleted list, domain-specific 2026-06-21
pr 0.10 chore(security): add 7-day Python and npm dependency freshne Technical summaries and bullet lists, na 2026-04-03
pr 0.10 feat: Implement scoped API keys (Stage 0 foundation) Contains domain detail and lacks AI-like 2026-06-20
pr 0.10 fix(app-server): pin FileStore text I/O to UTF-8 via a share Direct and specific technical summary, h 2026-06-21
pr 0.10 Fix/14920 sandbox router delete path Terse, task-focused phrasing and minimal 2026-06-21
pr 0.10 PLTF-1269: replace time.sleep with threading.Barrier in ente Technical free-text, terse, no AI-specif 2026-04-16
pr 0.10 refactor: extract billing test fixtures for PLTF-1269 Brief, technical commit, contains domain 2026-04-17
pr 0.10 Bump SDK packages to v1.22.0 Standard package bump phrasing; possible 2026-05-11
pr 0.10 fix: command injection in git user config (#14903) Technical vuln description, compact expl 2026-06-19
pr 0.10 test: cover execute_bash without security risk Concise, technical points; not overly fo 2026-06-20
pr 0.10 fix: make openhands.server.app resilient to missing optional Direct references, domain context, human 2026-04-20
pr 0.10 fix(secrets): return 404 for missing custom secret Technical, straightforward explanation w 2026-04-30
pr 0.10 fix(frontend): allow attachment-only chat submits Concise feature summary; no AI-like verb 2026-04-30
pr 0.10 fix: raise HTTPException instead of return in secrets update Direct and technical language; minimal, 2026-04-30
pr 0.10 fix(security): sanitize git_user_name/email in shell command Domain-specific fix details; natural, co 2026-04-30
pr 0.10 docs(atlascloud): document Atlas Cloud as an OpenAI-compatib Technical tone, domain-specific refs, no 2026-06-17
pr 0.10 feat: PLTF-2968 allow per-deployment resolver macro via OH_R Uses issue code, concise explanation, hu 2026-06-18
pr 0.10 fix: clean up LLM Profile auth fields (dedupe variant sectio Abbreviated, technical context, domain-s 2026-06-18
pr 0.10 feat(enterprise): enforce org conversation expiration Bullet points, jargon, developer-centric 2026-06-13
pr 0.10 test(frontend): add V1 pending message queue coverage Free-text is terse, technical, and uses 2026-06-16
pr 0.10 test: pin SDK to main (ab886d3) for OHE 1.38.1 validation [d Domain-specific abbreviations and a succ 2026-06-18
pr 0.10 fix: stop the connection-error banner from flashing on trans Casual tone, technical language, abbrevi 2026-06-18
pr 0.10 fix: forward insecure git access env to sandboxes Short, technical summary using informal 2026-05-22
pr 0.09 feat: add parallel tool calls (tool_concurrency_limit) to ag Brief, technical, informal phrasing; hum 2026-06-22
pr 0.08 feat: add sub-agent task (TaskToolSet) visualizer to the cha Concise and domain-specific, typical hum 2026-06-22
pr 0.08 fix: add pagination support for branch search Casual phrasing and specific technical c 2026-05-26
pr 0.08 fix: sanitize subprocess call in process_sandbox_service.py Terese summary, issue ID field, security 2026-04-29
pr 0.06 fix(app-server): stop dropping items at git pagination bound Technical explanation, some typos, clear 2026-06-12
pr 0.05 fix: Forgejo/Gitea clone failure when hosted under a subpath Brief, domain-specific, human tone with 2026-06-22
pr 0.05 fix: path param mismatch in delete_sandbox breaks DELETE /sa Direct fix summary, terse and domain-spe 2026-06-20
pr 0.05 fix: update Bitbucket skill token guidance Mentions commit #, context-specific, hum 2026-06-14
pr 0.05 fix: PLTF-2956 Tests for GitHub payload-processing failure l Terse, reveals typo, technical context, 2026-06-15
pr 0.05 chore: bump SDK and agent-server to 1.29.0 Includes version details, deployment con 2026-06-18
pr 0.03 fix: use SDK validation before persisting settings Short, informal, and domain-specific exp 2026-06-05
commit 0.00 fix: Forgejo/Gitea clone failure when hosted under a subpath Terse, issue-referenced commit message; 2026-06-22
commit 0.00 docs: fix broken README urls (#14907) Very terse and domain-specific, clearly 2026-06-19
commit 0.00 fix: prevent conversation export overload (#14899) Commit message is terse and technical, t 2026-06-18
commit 0.00 feat: PLTF-2968 allow per-deployment resolver macro via OH_R Brief, domain-specific commit message wi 2026-06-18
commit 0.00 fix: clean up LLM Profile auth fields (dedupe variant sectio Contains abbreviations, casual style, an 2026-06-18
commit 0.00 fix: PLTF-2956 Tests for GitHub payload-processing failure l Human engineering tone, ticket reference 2026-06-18
commit 0.00 chore: bump SDK and agent-server to 1.29.0 (#14889) Standard technical changelog with ticket 2026-06-18
commit 0.00 fix(frontend): send on Enter for touchscreen laptops (#14870 Domain jargon, concise, informal, no AI 2026-06-18
commit 0.00 feat: surface a clear error when a custom sandbox image's ag Direct, technical commit message with do 2026-06-18
commit 0.00 fix: post Bitbucket DC comments as the bot account and backg Human-style description with abbreviatio 2026-06-18
commit 0.00 fix: revert conversation limit enforcement from #14168 (#148 Terse, domain-specific phrasing and no A 2026-06-17
commit 0.00 fix: PLTF-2956 Log 5xx responses at error level in Automatio Typical commit style; 'co-authored-by' u 2026-06-17
commit 0.00 fix(frontend): skip Git-related API calls when no Git provid Domain-specific, concise, and co-authore 2026-06-17
commit 0.00 feat: PLTF-2956 parallelize GitHub GraphQL queries in get_su Technical feature message, no AI or bot 2026-06-17
commit 0.00 fix: decouple API-key (Bearer) auth from Keycloak offline se Direct technical language; no indication 2026-06-17
commit 0.00 fix: log error level for failed GitHub payload processing (# Concise commit message with domain terms 2026-06-17
commit 0.00 docs(skills): fix typo in OpenHands docs URL in add_agent.md Terse, domain-specific typo fix typical 2026-06-17
commit 0.00 fix: PLTF-2956 log level from warning to error for automatio Standard terse commit message with domai 2026-06-16
commit 0.00 feat: add DynamicRemoteSandboxSpecService backed by runtime- Contains domain-specific jargon and conc 2026-06-16
commit 0.00 fix: Fix CVE-2026-48526: Update pyjwt to 2.13.0 (#14854) Follows standard CVE fix pattern; no AI 2026-06-16
commit 0.00 fix: PLTF-2956 batch_get_sandboxes to gracefully handle runt Brief, domain-targeted summary; no AI st 2026-06-16
commit 0.00 chore(deps): bump pyjwt from 2.12.1 to 2.13.0 (#14852) — 2026-06-16
commit 0.00 docs: Bring README.md over from Agent Canvas (#14844) Typical docs migration message, minimal 2026-06-16
commit 0.00 fix: API key CORS header handling (#14835) Terse, technical description, no AI sign 2026-06-16
commit 0.00 fix: renumber duplicate migration 122 → 123 (drop is_paused) Concise technical correction, uses domai 2026-06-16
commit 0.00 fix: use runtime /list API for sandbox concurrency count, no Direct, technical commit with abbreviati 2026-06-16
commit 0.00 fix: write trajectory exports as utf-8 (#14810) Short, actionable phrase; standard human 2026-06-16
commit 0.00 feat(jira-dc): share linked OAuth token with eligible conver Jargon-heavy summary, consistent with hu 2026-06-16
commit 0.00 feat(jira-dc): persist and inject per-user OAuth tokens in r Concise technical language and domain-sp 2026-06-16
commit 0.00 fix: duplicate Slack no-repository selections (#14833) Brief, domain-specific, informal commit 2026-06-15
commit 0.00 fix: Ignore OpenHands bot GitHub resolver events (#14832) Short, technical commit with clear domai 2026-06-15
commit 0.00 fix: Use final response endpoint for resolver callbacks (#14 Direct, domain-specific commit message, 2026-06-15
commit 0.00 fix: Add SaaS migration for sandbox pause state (#14829) Concise, technical message; lacks AI sty 2026-06-15
commit 0.00 feat(APP-2136): expose automations menu item for all users ( Technical description; APP-2136 is speci 2026-06-15
commit 0.00 feat: enforce conversation limits (#14168) Short, to the point, domain-relevant mes 2026-06-15
commit 0.00 fix(frontend): avoid dirty language filter input (#14812) Direct technical fix with jargon, no AI 2026-06-15
commit 0.00 fix: default enterprise injector kinds in the image, not jus Brief, technical, lacks AI phrasing or f 2026-06-15
commit 0.00 fix: reconcile and label per-(user,org) LiteLLM managed keys Short commit, terse technical phrasing, 2026-06-14
commit 0.00 feat: OHE multi-model LLM discovery + BYOK gating (proxy dis Concise, domain-specific, no AI hallmark 2026-06-14
commit 0.00 feat: explicit OH_DEPLOYMENT_MODE flag; gate cloud-account C Commit message uses domain abbreviations 2026-06-13
commit 0.00 feat: accept pending invitations by verified-email match at Brief, technical commit message with pro 2026-06-13
commit 0.00 feat: expose copyable invite links so invitations work witho Human-style, minimal commit with domain- 2026-06-13
commit 0.00 fix(frontend): accept typed emails without requiring Space i Commit is concise and refers to UI speci 2026-06-12
commit 0.00 fix(frontend): hydrate the LLM profile edit form from the se Uses terse, specific language typical of 2026-06-12
commit 0.00 fix(frontend): only render the API key input once a provider Commit message is concise and reflects h 2026-06-12
commit 0.00 fix(frontend): treat managed openhands base URLs as provider All items are terse, technical commit me 2026-06-12
commit 0.00 feat: auto-accept invitation links instead of the confirm/ca Terse, domain-specific language, no AI s 2026-06-12
commit 0.00 fix: delete LiteLLM user on personal org reset (#14700) Brief, technical fix description typical 2026-06-12
commit 0.00 fix(enterprise): litellm_proxy/ → openhands/ on settings loa Concise fix message with co-author trail 2026-06-12
commit 0.00 fix: preserve LLM base URL on basic saves (#14776) Technical commit, Signed-off-by trailer, 2026-06-12
commit 0.00 fix(frontend): start new LLM profiles on basic settings with Terse, domain-specific fix, lacks AI-gen 2026-06-12
commit 0.00 fix(deps): bump postcss to 8.5.15 to fix XSS (GHSA-qx2v-qp2m Technical dependency update, references 2026-06-12
commit 0.00 fix: Pin duplicate checker action to extensions release (#14 Short, technical fix, co-author trailer, 2026-06-12
commit 0.00 Use reusable issue duplicate checker action (#14609) Concise, technical context, co-author pr 2026-06-12
commit 0.00 Fix OpenHands LLM key access for credited orgs (#14724) Terse commit message with specific fix, 2026-06-11
commit 0.00 refactor(llm): clean up reverse-mapping OpenHands provider m Technical commit, includes domain abbrev 2026-06-11
commit 0.00 fix: bump agent-server to 1.28.0 (#14754) Standard commit message; no AI hallmarks 2026-06-10
commit 0.00 feat: make the first signed-in user the default org owner, t Standard commit summary; domain specific 2026-06-10
commit 0.00 fix: bump agent-server to 1.27.1 for Gemini cache fix (#1475 Touches on Gemini but content is standar 2026-06-10
commit 0.00 feat: add hide_personal_workspaces flag for org-only OHE ins Standard feature commit message; domain- 2026-06-10
commit 0.00 feat: route unclaimed automation events to the default org o Direct and domain-specific; no AI hallma 2026-06-10
commit 0.00 feat: move existing users into the default org when first au Concise and typical commit message; not 2026-06-10
commit 0.00 ci: adopt release-please for app and cloud releases (#14718) Standard CI commit message; no AI traits 2026-06-10
commit 0.00 PLTF-2895: scope DB sessions tightly in poll_agent_servers t Co-authored-by trailer shows human contr 2026-06-10
commit 0.00 PLTF-2895: add enterprise migration integrity check (#14689) Co-authored-by trailer indicates human c 2026-06-10
commit 0.00 Release 1.8.0 (#14743) Standard release commit; no signs of AI 2026-06-10
commit 0.00 fix(bitbucket-dc): resolve user via whoami so avatars load w Commit message is terse, technical, and 2026-06-10
commit 0.00 perf: skip runtime API call in webhook auth via SandboxRecor Commit message is terse and domain-speci 2026-06-09
commit 0.00 Bump SDK packages to v1.27.0 (#14726) Standard dependency bump with bot co-aut 2026-06-09
commit 0.00 ci: add label-triggered OpenHands QA workflow (#14730) Concise technical commit; no AI signals. 2026-06-09
commit 0.00 Harden workflow GitHub context handling (#14537) Standard technical commit message withou 2026-06-09
commit 0.00 fix: remove org_id from ownership assertion in save_app_conv Message is direct and domain-relevant; c 2026-06-09
commit 0.00 PLTF-2899: Add async/await static analysis checks for enterp Contains project-specific code changes; 2026-06-09
commit 0.00 Enable org LLM profiles in settings (#14715) Concise commit message with domain terms 2026-06-08
commit 0.00 fix: _configure_llm now preserves user LLM settings (#14451) Standard fix commit; trailer indicates h 2026-06-08
commit 0.00 PLTF-2899: keep resume flow responsive during rate limits (# Jargon and ticket ref; brief, human-styl 2026-06-08
commit 0.00 APP-2218: add indexes on conversation_metadata_saas (user_id Technical, terse, uses ticket ref; co-au 2026-06-08
commit 0.00 Remove _get_sandbox_by_session_api_key_legacy to stop spurio Detailed human-written commit, co-author 2026-06-08
commit 0.00 Add OHE default organization bootstrap (#14713) Short technical phrase; no AI signals. 2026-06-08
pr 0.00 chore(main): release cloud 1.39.0 — 2026-06-10
pr 0.00 chore(main): release 1.9.0 — 2026-06-10
pr 0.00 chore(deps): bump mcp from 1.27.1 to 1.28.0 in the mcp-packa — 2026-06-08
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-06-22
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-06-17
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-06-15
pr 0.00 chore(deps): bump the security-all group across 1 directory — 2026-06-15
pr 0.00 chore(deps-dev): bump the eslint group across 1 directory wi — 2026-06-04
pr 0.00 test: PLTF-1269 replace test_should_ naming with test_verb_n Only template artifacts and user indicat 2026-04-18
pr 0.00 PLTF-1269: split enterprise test_user_model into focused per No free-text, only template and changelo 2026-04-17
pr 0.00 feat: add structured audit logging for secrets access endpoi Domain-specific summary and natural tech 2026-03-22
pr 0.00 feat(frontend): render sub-agent task events in GUI Terse, domain-specific summary typical f 2026-04-01
pr 0.00 fix(integrations): return True on error in Azure DevOps is_p Very terse, technical, changelog-like fr 2026-04-22
pr 0.00 fix(app_server): raise HTTPException in update_custom_secret Terse summary with real file paths, natu 2026-04-22
pr 0.00 fix(integrations): guard Bitbucket get_user against null lin Domain-specific explanation with clear t 2026-04-22
pr 0.00 fix(integrations): guard Bitbucket _parse_repository against Changelog-style summary, domain details, 2026-04-23
pr 0.00 fix(integrations): guard Bitbucket Data Center against null Free-text is technical, specific, and fo 2026-04-24
pr 0.00 fix(integrations): guard cloud Bitbucket against null target Technical, context-specific, no generic 2026-04-26
pr 0.00 App 564 add onboarding plugin modal No substantial free-text; only templates 2026-05-01
pr 0.00 test: enforce GitHub Actions pinning policy No actual free-text; only template and m 2026-06-21
pr 0.00 Update .gitattributes Standard title, no natural language or A 2026-06-20
pr 0.00 WebSocket Gateway Informal, self-referential text; lacks A 2026-03-21
pr 0.00 fix: preserve SSE MCP server timeouts Domain-specific jargon and informal sent 2026-06-16
pr 0.00 fix: clear stale git changes on context change Casual with domain context and clear hum 2026-06-16
pr 0.00 fix: show LLM timeout in advanced settings Focused and technical, no AI hallmarks p 2026-06-16
pr 0.00 feat: support sandbox specs in conversation start Concise, informal, domain-specific; huma 2026-06-16
pr 0.00 docs: fix broken README urls Terse, technical, and missing AI hallmar 2026-06-19
pr 0.00 fix: drop wholesale key when its update value is None Technical description, contains domain a 2026-06-19
pr 0.00 Add Ota readiness contract and pressure matrix coverage (v1. Brief, domain-language, lacks AI-style p 2026-06-01
pr 0.00 feat(app-server): add opt-in MemoryIntegrityCallbackProcesso Only template, no actual free-text conte 2026-05-20
pr 0.00 fix: prevent conversation export overload Template + human PR content, with casual 2026-06-18
pr 0.00 fix: don't switch LLM profile before the conversation UUID e Template + human PR content; direct, inf 2026-06-18
pr 0.00 fix: prevent conversation export overload Template + human PR content, with casual 2026-06-18
pr 0.00 chore(deps): bump python from 3.13.7-slim-trixie to 3.14.6-s — 2026-06-18