349 Commits

Author SHA1 Message Date
Sebastian Husch Lee 5a30df5b5b fix: validate modules during callable traversal (#12416) 2026-08-21 15:28:23 +02:00
bogdankostic e84738b9a2 fix: harden deserialization by blocking internal interfaces to prevent RCE (#12378)
Co-authored-by: Julian Risch <julian.risch@deepset.ai>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-17 21:40:57 +02:00
bogdankostic efcf6b895f fix: prevent RCE by hardening deserialization and Jinja sandbox (#12312) 2026-08-11 18:22:28 +02:00
Singaraj B 50eebe097b fix: serialize and deserialize typing.Literal (#12286) 2026-08-10 14:08:29 +02:00
Sebastian Husch Lee 49f8d2d549 fix: make strict datetime filter comparison opt-in (#12257) 2026-08-07 09:03:19 +02:00
苏紫辰 a68ed4ac2b fix: cancel sibling tasks when concurrent retrieval fails (#11967)
Co-authored-by: bogdankostic <bogdankostic@web.de>
2026-08-04 11:19:03 +02:00
Aarkin Karnik 3ec9d08ace fix: normalize ISO date equality filters (#11963)
Co-authored-by: Julian Risch <julian.risch@deepset.ai>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-04 11:11:10 +02:00
David Pavlovschii fcc13465c5 fix: round-trip serialization of mixed-type lists in schema-based serialization (#12202)
Co-authored-by: Sebastian Husch Lee <10526848+sjrl@users.noreply.github.com>
2026-08-04 09:56:38 +02:00
vidigoat 1f460e6207 fix: round-trip serialization of Callable types with an explicit parameter list (#12122)
Co-authored-by: David S. Batista <dsbatista@gmail.com>
2026-07-30 12:47:47 +02:00
Sebastian Husch Lee 36793a99ae fix: fix serialization of State and PipelineSnapshot (#12113) 2026-07-22 17:36:38 +02:00
Madan kumar 04fe770243 fix: round-trip serialization of Ellipsis in variadic tuple and Callable types (#12062) 2026-07-21 07:44:42 +00:00
eeshsaxena 9638ff1458 fix: honor custom timeout on every attempt in request_with_retry (#11998)
Co-authored-by: Sebastian Husch Lee <10526848+sjrl@users.noreply.github.com>
2026-07-20 07:57:19 +02:00
bogdankostic 4327c6dc14 fix: strengthen deserialization allowlist checks to prevent bypass vulnerabilities (#12028)
Co-authored-by: David S. Batista <dsbatista@gmail.com>
2026-07-17 10:39:28 +02:00
Stefano Fiorucci 3b935d212b chore!: remove unused raise_on_invalid_filter_syntax utility function (#11947) 2026-07-10 09:03:07 +00:00
Otis Cui 3cfbaa23c9 fix: reconcile tz-aware and naive datetimes in ordering filters (#11943) 2026-07-10 10:28:34 +02:00
David S. Batista 525f376754 feat: expose deserialize_component_inplace (#11913) 2026-07-09 10:17:17 +00:00
David S. Batista d4d1872fc2 chore!: removing deadcode (#11905) 2026-07-08 13:46:42 +00:00
Sebastian Husch Lee d7260db122 Merge branch 'v3' of github.com:deepset-ai/haystack into merge-v3-into-main 2026-07-08 14:29:43 +02:00
David S. Batista 4e599e0c45 refactor: unifying import class logic into a single place/function (#11904) 2026-07-08 09:42:14 +02:00
David S. Batista 2bcb65f0a4 docs: detailing in docstrings the scope and context of each serialisation function (#11903) 2026-07-07 16:01:49 +00:00
David S. Batista da17b3e151 fix: raise DeserializationError for unimportable classes (#11890)
Co-authored-by: Julian Risch <julian.risch@deepset.ai>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-07 09:35:20 +02:00
Sebastian Husch Lee c78cc3fc2a Merge branch 'main' of github.com:deepset-ai/haystack into merge-main-into-v3 2026-07-07 08:16:13 +02:00
Aarkin Karnik 15636144ff fix: redact token from TokenSecret repr to prevent API key leaks (#11810) 2026-07-01 14:47:27 +02:00
Mustafa Amir Khokhar 7fdd1a85f1 test: type-check test/utils and add it to mypy config (#11728) 2026-07-01 10:30:42 +02:00
Sebastian Husch Lee 4a5af169f8 fix: fix async tool deserialization (#11811) 2026-06-29 15:34:22 +02:00
Sebastian Husch Lee 7ea60252b2 feat: Add Agent Hooks (#11747) 2026-06-29 14:33:52 +02:00
Muhammad Furqan 1a68ffaefc fix: raise FilterError on unknown metadata filter operators (#11795)
Co-authored-by: David S. Batista <dsbatista@gmail.com>
2026-06-29 11:25:07 +02:00
Sebastian Husch Lee be19e12867 Merge branch 'main' of github.com:deepset-ai/haystack into merge-main-into-v3 2026-06-29 11:04:40 +02:00
milljer 7fc8151ca4 fix: FilterError when comparing string metadata dates with datetime objects (#11700)
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Julian Risch <julian.risch@deepset.ai>
2026-06-26 10:53:51 +02:00
Stefano Fiorucci 6958876449 fix: better Jinja2 Chat extension security (#11718) 2026-06-24 10:05:41 +02:00
Sebastian Husch Lee fdef1a5512 fix: Fix issues related to automatic logging set up in Haystack (#11635) 2026-06-24 07:12:22 +00:00
Sebastian Husch Lee f962e67347 chore: Merge main into v3 (#11715)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anubhav Anand <76263415+i-anubhav-anand@users.noreply.github.com>
Co-authored-by: Julian Risch <julian.risch@deepset.ai>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: Srivatsa Kamballa <skamb10@uic.edu>
Co-authored-by: David S. Batista <dsbatista@gmail.com>
Co-authored-by: gyx09212214-prog <gyx09212214@gmail.com>
Co-authored-by: gyx09212214-prog <243787584+gyx09212214-prog@users.noreply.github.com>
Co-authored-by: Haystack Bot <73523382+HaystackBot@users.noreply.github.com>
Co-authored-by: anakin87 <44616784+anakin87@users.noreply.github.com>
Co-authored-by: milljer <milljer@users.noreply.github.com>
Co-authored-by: bogdankostic <48713846+bogdankostic@users.noreply.github.com>
Co-authored-by: julian-risch <4181769+julian-risch@users.noreply.github.com>
Co-authored-by: davidsbatista <7937824+davidsbatista@users.noreply.github.com>
Co-authored-by: AxelRay <raynaldo.axel@gmail.com>
Co-authored-by: Ayush <158567328+Ayushhgit@users.noreply.github.com>
Co-authored-by: bogdankostic <bogdankostic@web.de>
Co-authored-by: Ashith Fernandes <fernandesashith24@gmail.com>
Co-authored-by: Kunal <kkunal_be23@thapar.edu>
Co-authored-by: Aditya Raut <rautaditya2606@gmail.com>
2026-06-22 18:04:43 +02:00
Stefano Fiorucci dd4bab522c chore: rename utility function (#11666) 2026-06-17 16:24:31 +02:00
Anubhav Anand 6f786afc07 fix: handle non-dict intermediate value in nested metadata filters (#11649) 2026-06-16 14:28:44 +02:00
Sebastian Husch Lee c4db41825a Merge branch 'main' of github.com:deepset-ai/haystack into merge-main-into-v3 2026-06-16 12:35:30 +02:00
Stefano Fiorucci 6411c8cef9 chore!: remove sentence transformers components (#11646) 2026-06-16 12:23:49 +02:00
IRONBEEM 2574517f74 fix: keep NoneType argument when serializing typing generics (#11368)
Co-authored-by: ATOM00blue <219721791+ATOM00blue@users.noreply.github.com>
Co-authored-by: Sebastian Husch Lee <10526848+sjrl@users.noreply.github.com>
2026-06-15 11:37:59 +02:00
Julian Risch 8a48fca96b Merge main into v3 2026-06-12 12:31:31 +02:00
Ayush 2b4450c0fa fix: make >= and < filters compare parsed datetimes, not raw strings (#11584)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-06-12 10:57:59 +02:00
bogdankostic 3464f29ec9 feat!: Gate pipeline deserialization through a module allowlist (#11432)
Co-authored-by: Julian Risch <julian.risch@deepset.ai>
2026-06-12 10:25:23 +02:00
Stefano Fiorucci ea78fab82d chore!: remove transformers components (#11572) 2026-06-10 13:21:46 +00:00
Stefano Fiorucci 0c07a2034a chore!: remove HF API components (moved to integrations) (#11516) 2026-06-05 14:44:35 +02:00
Sebastian Husch Lee a193e1476a refactor: Add new _run_component_async utility method (#11524) 2026-06-05 08:54:03 +00:00
Sebastian Husch Lee aac56ef8b6 chore: Merge main into v3 (#11495)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Pragnyan Ramtha <pragnyanramtha@gmail.com>
Co-authored-by: Julian Risch <julian.risch@deepset.ai>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Aarkin Karnik <56022539+Aarkin7@users.noreply.github.com>
Co-authored-by: Haystack Bot <73523382+HaystackBot@users.noreply.github.com>
Co-authored-by: Stefano Fiorucci <stefanofiorucci@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: davidsbatista <7937824+davidsbatista@users.noreply.github.com>
Co-authored-by: bogdankostic <48713846+bogdankostic@users.noreply.github.com>
Co-authored-by: bogdankostic <bogdankostic@web.de>
Co-authored-by: Sachin Yadav <118251564+sachinn854@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: anakin87 <44616784+anakin87@users.noreply.github.com>
Co-authored-by: Abdulhamid Onawole <93547612+HamidOna@users.noreply.github.com>
Co-authored-by: David S. Batista <dsbatista@gmail.com>
Co-authored-by: Aditya Raut <rautaditya2606@gmail.com>
Co-authored-by: Nhat Huy Vu <150295143+MechaCritter@users.noreply.github.com>
Co-authored-by: julian-risch <4181769+julian-risch@users.noreply.github.com>
Co-authored-by: kota <lakotawilsonproton@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: devteamaegis <devteam.aegis@gmail.com>
Co-authored-by: Ritwij Aryan Parmar <88580521+RitwijParmar@users.noreply.github.com>
Co-authored-by: Srivatsa Kamballa <skamb10@uic.edu>
2026-06-03 11:43:55 +00:00
Sebastian Husch Lee 3b1558fabd feat: Extend ChatPromptBuilder with messages tag (#11486) 2026-06-03 12:02:20 +02:00
Stefano Fiorucci 2b09dbbece refactor: accept sync callbacks in run_async (#11466) 2026-06-03 10:56:47 +02:00
David S. Batista 1661601112 fix: pagination error too many values to unpack (#11475)
Co-authored-by: devteamaegis <devteam.aegis@gmail.com>
Co-authored-by: Sebastian Husch Lee <10526848+sjrl@users.noreply.github.com>
2026-06-02 09:42:23 +00:00
Stefano Fiorucci c487176311 chore!: remove legacy generators (#11421) 2026-05-29 09:19:59 +02:00
Sebastian Husch Lee 744198ce52 feat: Add reciprocal rank fusion to MultiRetriever (#11220) 2026-04-30 13:33:05 +02:00
Sebastian Husch Lee 2a4f104edf feat: Add new components TextEmbeddingRetriever and MultiRetriever (#10872) 2026-04-29 09:29:01 +02:00