v2.5.0

New Features

• Agent: Upgraded the "Application" module to the "Agent" module;
• Agent: Added automatic agent calling function to simple agents, and merged tools, MCP, and agents into the "Skills" function;
• Agent: Added automatic agent calling function to AI Conversation nodes in advanced agents, and merged tools, MCP, and agents into the "Skills" function;
• Agent: Supported creating agents via templates in the Template Center;
• Agent: Added exception branch output to all AI capability nodes in advanced agents to enhance process fault tolerance;
• Agent: Supported displaying feedback information filled by users in conversation log details;
• Agent: The user input parameter component in the Basic Information node supports multi-line text boxes, single-line tab components, and single-line multi-select tab components;
• Agent: Input parameters in custom tool nodes support boolean type;
• Q&A Page: Supported users to fill in feedback information when submitting feedback;
• Knowledge Base: Supported canceling the document import process in workflow knowledge bases;
• Knowledge Base: Added workflow import/export function to workflow knowledge bases;
• Knowledge Base: Supported viewing associated resources;
• Tools: Supported viewing associated resources;
• Tools: Added JSON text box and slider components to the component types in parameter dialogs;
• Folders: Supported sorting by name, creation time, and custom drag-and-drop order;
• Models: Supported viewing associated resources;
• Login Authentication (X-Pack): Added default role assignment function for third-party users in login settings;
• Login Authentication (X-Pack): Added account lockout function after failed login attempts in login settings;
• User Management: Supported setting default resource permissions when creating users;
• User Management (X-Pack): Supported batch role assignment and batch user deletion.

Feature Optimizations

• Agent: Added conversation user group {{global.chat_user_group}} to the start node in advanced agents;
• Knowledge Base: Optimized the hit test interface to use POST requests;
• Folders: Supported authorizing folders by user roles;
• API Key: Optimized system API Keys to be isolated by user;
• Q&A Page: Removed the limit of only viewing 20 historical chat records;
• Q&A Page: Supported editing and re-submitting the last question;
• Q&A Page (X-Pack): Supported logout function for third-party conversation users after logging into the Q&A page;
• System: Optimized the system UI interface.

Bug Fixes

• Security Vulnerability: Fixed the XSS vulnerability caused by file uploads;
• Security Vulnerability: Fixed the issue where Python code in the tool module loaded dynamic link libraries to bypass security restrictions;
• Security Vulnerability: Fixed the potential RCE issue caused by deserializing untrusted objects via pickle in Celery;
• Tools: Fixed the false interception of emails sent via the SMTP protocol;
• Agent: Fixed the issue where the scroll bar of the tool drop-down box in MCP nodes could not scroll;
• Agent: Fixed the style issue where execution details of MCP call and tool nodes exceeded the screen;
• Agent: Fixed the issue where child agents could not receive video files from parent agents (#4568);
• Knowledge Base: Fixed the style issue where video components in segmentation details exceeded the segmentation detail area (#4542);
• Knowledge Base: Fixed the issue where all videos automatically played when opening the segmentation details page.