← back to report

OpenHands/OpenHands

// all events — 2026-07-05

Type AI Score Description Actor Reason Date
commit 1.00 feat(app-server): add repo/branch to Laminar trace metadata Commit message contains explicit AI assi 2026-07-01
commit 1.00 chore: bump SDK and agent-server to 1.30.0 (#15079) Commit message contains explicit AI assi 2026-07-01
commit 1.00 fix: Fix CVE-2026-44681: Update authlib to >=1.6.12 (#14983) Commit message contains explicit AI assi 2026-06-29
commit 1.00 feat(app-server): capture production workspace state — initi Commit message contains explicit AI assi 2026-06-29
commit 1.00 fix: Fix CVE-2026-48779: Update ws to 8.21.0 (#15007) Contains 'Co-authored-by' with a bot, st 2026-06-26
commit 1.00 chore(security): add Python dependency freshness guardrails Commit message contains explicit AI assi 2026-06-26
commit 1.00 fix: self-heal stale LiteLLM user on re-onboarding (#14932) Commit message contains explicit AI assi 2026-06-22
commit 1.00 chore: purge dead acp_env field footprint (removed in SDK 1. Commit message contains explicit AI assi 2026-06-22
commit 1.00 test: PLTF-1269 replace test_should_ naming with test_verb_n Commit message contains explicit AI assi 2026-06-21
commit 1.00 refactor: extract billing test fixtures for PLTF-1269 (#1399 Commit message contains explicit AI assi 2026-06-21
commit 1.00 test: replace real sleeps in maintenance runner tests (#1393 Commit message contains explicit AI assi 2026-06-21
commit 1.00 fix: Fix CVE-2026-53539: Update python-multipart to >=0.0.30 Commit message co-authored by a bot, lik 2026-06-17
commit 1.00 fix: Fix CVE-2026-12143: Update form-data to 4.0.6 (#14875) Commit attributed to a bot, indicating A 2026-06-17
commit 1.00 docs: revise source code links in README.md Explicitly states an AI agent generated 2026-06-17
commit 1.00 feat: encode harness in chip icon, surface model in chip tex Commit message contains explicit AI assi 2026-06-17
commit 1.00 fix: Fix CVE-2026-54278: Update aiohttp to 3.14.1 (#14871) CVE bot as coauthor points to AI-generat 2026-06-17
commit 1.00 fix: Fix CVE-2026-49855: Update tornado to 6.5.7 (#14856) Commit coauthored by CVE Fix Bot; likely 2026-06-17
pr 1.00 Add org migrate CLI PR body explicitly mentions AI collabora 2026-07-01
pr 1.00 fix: encrypt settings secret fields at rest PR body explicitly mentions AI collabora 2026-07-03
pr 1.00 fix: add managed LLM key refresh endpoint PR body explicitly mentions AI collabora 2026-06-29
pr 1.00 PLTF-2992: show TESTING text on login page for preview-env v PR body explicitly mentions AI collabora 2026-07-02
pr 1.00 fix(frontend): restore cross-domain PostHog tracking by alig PR body explicitly mentions AI collabora 2026-07-02
pr 1.00 ci: add release ready gate PR body explicitly mentions AI collabora 2026-06-25
pr 1.00 build: pin dependency versions exactly PR body explicitly mentions AI collabora 2026-05-12
pr 1.00 refactor(enterprise/auth): source accepted_tos from User tab PR body explicitly mentions AI collabora 2026-07-01
pr 1.00 fix: set email person property in PostHog during onboarding PR body explicitly mentions AI collabora 2026-06-30
pr 1.00 Self-heal stale managed LLM keys before conversation startup PR body explicitly mentions AI collabora 2026-06-29
pr 1.00 fix: distinguish stopped sandboxes from archived conversatio PR body explicitly mentions AI collabora 2026-06-09
pr 0.30 fix: prevent path traversal in LocalFileStore Brief direct bug description; minor temp 2026-07-01
pr 0.30 feat+fix(app-server): add auto_pause_existing flag and fix s Technical summary, bullet list, and code 2026-03-04
pr 0.20 fix: crash when request.client is None in InMemoryRateLimite Slightly formal phrasing, but domain-spe 2026-07-04
pr 0.20 feat(app): add MCP server validation endpoint More formal tone, but still domain-speci 2026-07-02
pr 0.20 fix: bump binaryornot to >=0.5.0 to fix Python 3 NameError ( Technical details with changelog, code r 2026-05-21
pr 0.20 fix: validate base_url rejects API endpoint paths with actio Slightly formal, full sentences but not 2026-03-25
pr 0.20 feat(acp): persist current_model_id on conversations Domain-specific and concise issue summar 2026-05-21
pr 0.20 Restore "Stay Logged In" feature (was wiped from #14367 by f Casual reference to users and bots; dire 2026-05-13
pr 0.20 fix: add retryable conversation list error state Terse bullet list with patch summary; do 2026-07-01
pr 0.20 fix: make openhands.server.app resilient to missing optional Standard bugfix summary with casual phra 2026-04-20
pr 0.15 feat(frontend): Allow bulk selection and deletion of convers Somewhat formal, but with dev shorthand 2026-04-06
pr 0.15 fix(frontend): stop infinite scroll loop in conversation his Uses 'Summary of PR', but technical lang 2026-03-25
pr 0.15 feat: add structured audit logging for secrets access endpoi Minor formality but technical/concise ph 2026-03-22
pr 0.15 fix(integrations): return True on error in Azure DevOps is_p Technical explanation, minor formality, 2026-04-22
pr 0.15 fix(app_server): raise HTTPException in update_custom_secret Technical fix, brief description, not AI 2026-04-22
pr 0.15 fix(integrations): guard Bitbucket get_user against null lin Technical changelog-style summary, not A 2026-04-22
pr 0.15 fix(integrations): guard Bitbucket _parse_repository against Technical summary, concise, domain-speci 2026-04-23
pr 0.15 fix(integrations): guard Bitbucket Data Center against null Technical and concise; casual structure, 2026-04-24
commit 0.10 feat(jira-dc): email-mode auto-link, targeted repo lookup, a Domain-specific, concise, human-style te 2026-06-26
commit 0.10 feat(azure-devops): add resolver mentions + org-level one-cl Technical, detailed, direct language wit 2026-06-26
pr 0.10 fix(settings): reject unsupported LLM fields in settings upd Contains domain details and mid-sentence 2026-07-01
pr 0.10 fix: apply disabled_skills filter in conversation skills end Concise technical explanation; direct an 2026-06-24
pr 0.10 fix(frontend): mark language settings dirty only on selectio Brief, domain-specific, informal and inc 2026-05-24
pr 0.10 fix(frontend): explain OpenAI-compatible provider settings Brief, technical changelog-style bullet 2026-04-03
pr 0.10 fix(app_server): trim config env helpers Technical summary and terse style is hum 2026-04-03
pr 0.10 feat: Add dynamic marketplace support for plugin registratio Mostly template, human section is terse 2026-06-18
pr 0.10 fix(enterprise): normalize integration webhook skip logging[ Brief technical explanation and clear is 2026-06-30
pr 0.10 docs: document TrustedRouter LLM config Direct, minimal phrasing with specifics; 2026-06-12
pr 0.10 fix: tolerate malformed pagination cursors in page_id_to_off Concise description of error handling; i 2026-07-02
pr 0.10 feat(app-server): stamp repo identity into workspace archive Technical content with terse, domain-spe 2026-06-30
pr 0.10 feat(frontend): render sub-agent task events in GUI Bullet list and technical references, in 2026-04-01
pr 0.10 fix(app_server): fall back to default sandbox spec for file Concise bullet list, domain-specific, ca 2026-04-02
pr 0.10 Bump SDK packages to v1.22.0 Typical automated version bump with tech 2026-05-11
pr 0.10 feat(app-server): add repo/branch to Laminar trace metadata Structured template with minimal partial 2026-06-30
pr 0.10 feat(api-keys): add optional active window (not_before & exp Short, direct product-focused phrasing; 2026-07-01
pr 0.10 feat(api-keys): add optional active window (not_before & exp Short, direct product-focused phrasing; 2026-07-01
pr 0.10 feat(org): expose caller permissions on GET /organizations/{ Uses domain references, checklist, and i 2026-06-30
pr 0.10 fix(enterprise): inherit org agent_kind in org⊕member settin Predominantly template, AGENT section mo 2026-06-05
pr 0.10 chore: bump SDK and agent-server to 1.30.0 Brief, technical changelog with test out 2026-07-01
pr 0.10 feat(integrations): add DakeraConversationSecretEnricher for Uses code-specific context and concise e 2026-07-01
pr 0.10 fix: use SDK validation before persisting settings Concise, domain-specific, no AI hallmark 2026-06-05
pr 0.05 fix: run .openhands setup.sh with POSIX source Brief, domain-specific, slight typo; nat 2026-06-27
pr 0.05 feat: add multi-repo dependency support (closes #11938) Informal, domain-specific and interrupte 2026-06-24
pr 0.05 feat: add dependency_repos field to clone additional reposit Direct, technical phrasing with a partia 2026-06-11
pr 0.05 feat(api-keys): make 'unbound' org scope an explicit, first- Terse commit rationale with domain refer 2026-07-02
pr 0.05 feat: add parallel tool calls (tool_concurrency_limit) to ag Casual list format and short summary; hu 2026-06-22
commit 0.00 chore: bump SDK packages to v1.31.1 (#15127) Commit message is terse and matches stan 2026-07-05
commit 0.00 fix: crash when request.client is None in InMemoryRateLimite Terse commit message, domain-specific an 2026-07-04
commit 0.00 fix(frontend): stop streamed deltas rendering twice and frag Commit uses conventional style, no AI ha 2026-07-03
commit 0.00 fix: add test for InMemoryRateLimiter.__init__ to prevent du Commit co-author format but no AI attrib 2026-07-03
commit 0.00 feat(saas-auth): accept api_key cookie as a fallback credent Commit message is terse and domain-speci 2026-07-02
commit 0.00 feat: Add dynamic marketplace support for plugin registratio Brief commit with domain focus; lacks AI 2026-07-02
commit 0.00 feat(jira-dc): fix the integration panel so members get guid Uses human-like phrasing about fixing gu 2026-07-02
commit 0.00 feat(api-keys): make 'unbound' org scope an explicit, first- Technical commit, concise and human-typi 2026-07-02
commit 0.00 feat: add parallel tool calls (tool_concurrency_limit) to ag Succinct commit, uses domain terms; not 2026-07-02
commit 0.00 ci: add release ready gate (#14987) Basic CI-related commit with human brevi 2026-07-02
commit 0.00 build: pin dependency versions exactly (#14384) Standard commit message; includes co-aut 2026-07-01
commit 0.00 fix: Timezones stored in the db do not have a timezone (#150 Commit message is precise and includes d 2026-07-01
commit 0.00 fix: set email person property in PostHog during onboarding Terse, technical; no language suggesting 2026-07-01
commit 0.00 feat(api-keys): add optional active window (not_before & exp Domain jargon and brevity typical of hum 2026-07-01
commit 0.00 feat(org): expose caller permissions on GET /organizations/{ Standard and brief commit message, lacks 2026-07-01
commit 0.00 fix: stream LLM tokens for cloud conversations and profile s Terse, domain-specific commit message ty 2026-06-30
commit 0.00 feat(enterprise/auth): add super roles via user.role_id with Domain-specific commit with co-authors; 2026-06-30
commit 0.00 fix(jira-dc): don't org-gate a personal-workspace Jira DC in Informal, concise message typical of hum 2026-06-30
commit 0.00 fix(device-verify): rename 'Workspace' dropdown to 'Organiza Standard commit message with co-author; 2026-06-30
commit 0.00 fix(jira-dc): more forgiving repo + mention resolution for D Brief, domain-specific commit message; c 2026-06-30
commit 0.00 feat(device-verify): align warning, button color, and add wo Informal, domain-oriented; human tone an 2026-06-30
commit 0.00 fix(enterprise): add alembic migration for execution_status Standard commit message with no AI indic 2026-06-29
commit 0.00 fix(enterprise): log automation HTTP response failures as er Standard commit message, concise and dom 2026-06-29
commit 0.00 fix: don't switch LLM profile before the conversation UUID e Concise message with domain slang; no AI 2026-06-29
commit 0.00 feat(org): Add organization conversation admin dashboard (#1 Standard commit header, no AI hallmarks. 2026-06-29
commit 0.00 feat: implement semantic file chunking using tree-sitter AST Commit is well-formed, co-authored, no A 2026-06-28
commit 0.00 fix(jira): make Jira Cloud and Jira DC HTTP timeouts configu Terse, domain-specific commit message; n 2026-06-27
commit 0.00 chore(main): release cloud 1.40.0 (#14969) — 2026-06-26
commit 0.00 chore(deps-dev): bump jupyterlab from 4.5.7 to 4.5.9 (#15009 — 2026-06-26
commit 0.00 fix: remove duplicate Close button on the org invite links m Terse commit message, typical for humans 2026-06-26
commit 0.00 fix(llm): restore managed member-key fallback in effective L Commit uses terse technical language and 2026-06-25
commit 0.00 fix: return actionable error when Jira DC token endpoint is Direct, technical phrasing with actionab 2026-06-25
commit 0.00 feat: add default_sandbox_spec_id to user settings (#14985) Standard abbreviation and direct phrasin 2026-06-25
commit 0.00 fix(frontend): stop polling app-conversations with task IDs Technical bugfix note; abbreviations and 2026-06-25
commit 0.00 fix: handle None git_full_clone from DB in SaasSettingsStore Direct handling described, includes doma 2026-06-25
commit 0.00 fix: Fix CVE-2026-48712: Update protobufjs to 7.6.4 (#14981) Security fix message, co-author is a CVE 2026-06-25
commit 0.00 fix: Fix GHSA-4xgf-cpjx-pc3j: Update pydantic-settings to 2. CVE fix with explicit versioning; co-aut 2026-06-25
commit 0.00 fix: Fix CVE-2026-54285: Update @opentelemetry/core to 2.8.0 CVE update; no signs of AI text or phras 2026-06-25
commit 0.00 docs: fix dead link to self-hosting guide in README (#14975) Simple documentation fix, human co-autho 2026-06-25
commit 0.00 fix: avoid decrypting org_member.llm_api_key when not set (# Concise technical changelog, standard co 2026-06-24
commit 0.00 feat: Use interrupt endpoint for agent pause UI (#14972) Succinct PR title, human-like commit str 2026-06-24
commit 0.00 feat(enterprise): add admin user-provisioning endpoint (#148 Technical commit, brief and domain-speci 2026-06-24
commit 0.00 feat: Add full Git history user setting (#14950) Straightforward function addition, no AI 2026-06-24
commit 0.00 chore(main): release cloud 1.39.0 (#14748) — 2026-06-24
commit 0.00 fix: Fix CVE-2026-8723: Update qs to 6.15.2 (#14957) Short vulnerability fix message, standar 2026-06-24
commit 0.00 fix: Fix CVE-2026-54283: Update starlette to 1.3.1 (#14874) Security update commit, follows routine 2026-06-24
commit 0.00 fix: Fix CVE-2026-41691: Update i18next-http-backend to 3.0. Brief, factual security update with doma 2026-06-24
commit 0.00 fix: Fix GHSA-cmwh-pvxp-8882: Update dompurify to 3.4.11 (#1 Standard security changelog, no AI phras 2026-06-24
commit 0.00 fix: Fix GHSA-jm82-fx9c-mx94: Update pypdf to >=6.13.3 (#149 Direct CVE fix format, matches human eng 2026-06-24
commit 0.00 fix: binaryornot Python 3 crash on binary reads (#14518) Terse description of bug fix, typical hu 2026-06-24
commit 0.00 fix: Fix CVE-2026-44727: Update jupyter-server to 2.20.0 (#1 Git trailer shows automated bot, no AI s 2026-06-23
commit 0.00 fix: Fix CVE-2026-49458: Update dompurify to 3.4.6 (#14872) Git trailer shows automated bot, no AI s 2026-06-23
commit 0.00 fix: Fix GHSA-6v7p-g79w-8964: Update msgpack to 1.2.1 (#1494 Git trailer shows automated bot, no AI s 2026-06-23
commit 0.00 fix: Fix CVE-2026-45409: Update idna to 3.15 (#14946) Git trailer shows automated bot, no AI s 2026-06-23
commit 0.00 fix: Fix GHSA-gj48-438w-jh9v: Update bleach to 6.4.0 (#14945 Git trailer shows automated bot, no AI s 2026-06-23
commit 0.00 feat: add sub-agent task (TaskToolSet) visualizer to the cha Git trailer shows bot, no AI signals in 2026-06-23
commit 0.00 fix: load global user & org skills without a selected reposi Short message, informal, no AI signals. 2026-06-23
commit 0.00 feat: Support Slack attachments in agent context (#14934) Co-authored by bot; free text is concise 2026-06-23
commit 0.00 fix: Forgejo/Gitea clone failure when hosted under a subpath Terse, issue-referenced commit message; 2026-06-22
commit 0.00 docs: fix broken README urls (#14907) Very terse and domain-specific, clearly 2026-06-19
commit 0.00 fix: prevent conversation export overload (#14899) Commit message is terse and technical, t 2026-06-18
commit 0.00 feat: PLTF-2968 allow per-deployment resolver macro via OH_R Brief, domain-specific commit message wi 2026-06-18
commit 0.00 fix: clean up LLM Profile auth fields (dedupe variant sectio Contains abbreviations, casual style, an 2026-06-18
commit 0.00 fix: PLTF-2956 Tests for GitHub payload-processing failure l Human engineering tone, ticket reference 2026-06-18
commit 0.00 chore: bump SDK and agent-server to 1.29.0 (#14889) Standard technical changelog with ticket 2026-06-18
commit 0.00 fix(frontend): send on Enter for touchscreen laptops (#14870 Domain jargon, concise, informal, no AI 2026-06-18
commit 0.00 feat: surface a clear error when a custom sandbox image's ag Direct, technical commit message with do 2026-06-18
commit 0.00 fix: post Bitbucket DC comments as the bot account and backg Human-style description with abbreviatio 2026-06-18
commit 0.00 fix: revert conversation limit enforcement from #14168 (#148 Terse, domain-specific phrasing and no A 2026-06-17
commit 0.00 fix: PLTF-2956 Log 5xx responses at error level in Automatio Typical commit style; 'co-authored-by' u 2026-06-17
commit 0.00 fix(frontend): skip Git-related API calls when no Git provid Domain-specific, concise, and co-authore 2026-06-17
commit 0.00 feat: PLTF-2956 parallelize GitHub GraphQL queries in get_su Technical feature message, no AI or bot 2026-06-17
commit 0.00 fix: decouple API-key (Bearer) auth from Keycloak offline se Direct technical language; no indication 2026-06-17
commit 0.00 fix: log error level for failed GitHub payload processing (# Concise commit message with domain terms 2026-06-17
commit 0.00 docs(skills): fix typo in OpenHands docs URL in add_agent.md Terse, domain-specific typo fix typical 2026-06-17
commit 0.00 fix: PLTF-2956 log level from warning to error for automatio Standard terse commit message with domai 2026-06-16
commit 0.00 feat: add DynamicRemoteSandboxSpecService backed by runtime- Contains domain-specific jargon and conc 2026-06-16
commit 0.00 fix: Fix CVE-2026-48526: Update pyjwt to 2.13.0 (#14854) Follows standard CVE fix pattern; no AI 2026-06-16
commit 0.00 fix: PLTF-2956 batch_get_sandboxes to gracefully handle runt Brief, domain-targeted summary; no AI st 2026-06-16
commit 0.00 chore(deps): bump pyjwt from 2.12.1 to 2.13.0 (#14852) — 2026-06-16
commit 0.00 docs: Bring README.md over from Agent Canvas (#14844) Typical docs migration message, minimal 2026-06-16
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-07-03
pr 0.00 chore(deps): bump mcp from 1.27.1 to 1.28.1 in the mcp-packa — 2026-06-08
pr 0.00 chore(main): release 1.9.0 — 2026-06-10
pr 0.00 chore(main): release cloud 1.41.0 — 2026-06-27
pr 0.00 chore: bump SDK packages to v1.31.1 Changelog text is brief and structured, 2026-07-05
pr 0.00 docs: add pilot-protocol skill for agent-to-agent messaging Description is direct and technical, no 2026-07-05
pr 0.00 docs: use installable netcat package on Linux Human section is concise and domain-spec 2026-06-05
pr 0.00 Feat/encrypt settings at rest Technical implementation description, no 2026-07-05
pr 0.00 fix(app_server): create workspace dir from an existing cwd s Bugfix explanation is specific and infor 2026-07-05
pr 0.00 feat(frontend): Add Budgets dashboard and expand Usage Dashb Informal, domain-specific summary; human 2026-06-29
pr 0.00 fix(onboarding): remove redundant tabIndex on native button Description is technical and appropriate 2026-06-30
pr 0.00 fix(app-server): list ~/.openhands/skills (V1) user skills i Description uses technical jargon, no AI 2026-07-05
pr 0.00 feat(observability): pass repository metadata to observabili No free-text content; structure is from 2026-07-05
pr 0.00 fix(enterprise): reject unsupported LLM fields in org defaul No free-text; only template sections and 2026-07-05
pr 0.00 fix: support SDK-native MCP settings in SaaS Bug description is specific, casual, and 2026-07-02
pr 0.00 Student free red black theme Template filled with minimal/empty text; 2026-07-04
pr 0.00 feat(app-server): proxy agent-server traffic for reverse-pro Almost entirely template; no AI signs in 2026-06-22
pr 0.00 fix(i18n): restore missing interpolation placeholders Very concise and technical PR descriptio 2026-05-13
pr 0.00 fix(process-sandbox): use loopback for child agent server he Only template and terse technical summar 2026-05-24
pr 0.00 fix: replace raw error string with retryable error state in Template used; human free-text is terse 2026-07-02
pr 0.00 fix(app-server): deduplicate repositories by full_name in Pr Template; human content contains jargon 2026-07-03
pr 0.00 feat(enterprise): Agent Profiles on the cloud/SaaS backend ( Dense technical content with domain refs 2026-06-30
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-07-01
pr 0.00 chore(deps-dev): bump the eslint group across 1 directory wi — 2026-06-04
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-06-23
pr 0.00 fix(frontend): stop streamed deltas rendering twice and frag Human section uses casual tone, mentions 2026-07-03
pr 0.00 feat: support sandbox specs in conversation start Human free-text is informal and task-foc 2026-06-16
pr 0.00 fix: forward ALLOW_INSECURE_GIT_ACCESS to agent server Technical content, concise human rationa 2026-05-23
pr 0.00 fix: add test for InMemoryRateLimiter.__init__ to prevent du Template; human and AGENT sections not A 2026-06-09
pr 0.00 fix(llm): normalize Workers AI model ids Template sections, clipped human content 2026-07-03
pr 0.00 feat(oauth-device): add /cookie endpoint that sets the api_k Only template and 'Basically, it is'; to 2026-07-02
pr 0.00 fix: PLTF-2895 release DB transactions before runtime API I/ Template plus a technical, informal, dom 2026-06-11
pr 0.00 feat(saas-auth): accept api_key cookie as a fallback credent Only template and an incomplete human se 2026-07-02
pr 0.00 feat(jira-dc): fix the integration panel so members get guid Domain-specific, concise fill in templat 2026-06-30
pr 0.00 PLTF-2992: yellow app background (preview-env validation, do PR template with informal, clear, goal-f 2026-07-01
pr 0.00 Rename "Personal Workspace" to "My Workspace" in UI PR template followed, natural and domain 2026-07-01
pr 0.00 fix(integrations): guard cloud Bitbucket against null target Summary section uses domain specifics an 2026-04-26
pr 0.00 App 564 add onboarding plugin modal No free-text content provided by the use 2026-05-01
pr 0.00 chore(deps): bump the version-all group across 1 directory w — 2026-06-30
pr 0.00 fix: Timezones stored in the db do not have a timezone PR template with clear, succinct human e 2026-07-01
pr 0.00 fix: Alembic index creation for execution_status migration PR template completed in terse, technica 2026-07-01
pr 0.00 fix(jira-dc): more forgiving repo + mention resolution for D Jargon and issue refs; compact and clear 2026-06-30
pr 0.00 chore(deps): bump python from 3.13.7-slim-trixie to 3.14.5-s — 2026-05-21
pr 0.00 chore(deps): bump actions/stale from 10 to 10.2.0 — 2026-05-21
pr 0.00 feat: add NVIDIA NIM support to OpenHands Brief, technical free-text with typos; h 2026-06-23