Skip to content

Conversation

nighca
Copy link
Collaborator

@nighca nighca commented Sep 12, 2025

Related project: https://github.com/orgs/goplus/projects/6/views/1

Backend-op required changes

No changes required.

dependabot bot and others added 22 commits September 8, 2025 10:29
…2111)

Bumps [gorm.io/gorm](https://github.com/go-gorm/gorm) from 1.30.2 to 1.30.3.
- [Release notes](https://github.com/go-gorm/gorm/releases)
- [Commits](go-gorm/gorm@v1.30.2...v1.30.3)

---
updated-dependencies:
- dependency-name: gorm.io/gorm
  dependency-version: 1.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) from 9.12.1 to 9.13.0.
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md)
- [Commits](redis/go-redis@v9.12.1...v9.13.0)

---
updated-dependencies:
- dependency-name: github.com/redis/go-redis/v9
  dependency-version: 9.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…2102)

Bumps [github.com/casdoor/casdoor-go-sdk](https://github.com/casdoor/casdoor-go-sdk) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/casdoor/casdoor-go-sdk/releases)
- [Changelog](https://github.com/casdoor/casdoor-go-sdk/blob/master/.releaserc.json)
- [Commits](casdoor/casdoor-go-sdk@v1.17.0...v1.18.0)

---
updated-dependencies:
- dependency-name: github.com/casdoor/casdoor-go-sdk
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/openai/openai-go/v2](https://github.com/openai/openai-go) from 2.2.2 to 2.3.0.
- [Release notes](https://github.com/openai/openai-go/releases)
- [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md)
- [Commits](openai/openai-go@v2.2.2...v2.3.0)

---
updated-dependencies:
- dependency-name: github.com/openai/openai-go/v2
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/openai/openai-go/v2](https://github.com/openai/openai-go) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/openai/openai-go/releases)
- [Changelog](https://github.com/openai/openai-go/blob/main/CHANGELOG.md)
- [Commits](openai/openai-go@v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: github.com/openai/openai-go/v2
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…2121)

Bumps [github.com/casdoor/casdoor-go-sdk](https://github.com/casdoor/casdoor-go-sdk) from 1.18.0 to 1.19.0.
- [Release notes](https://github.com/casdoor/casdoor-go-sdk/releases)
- [Changelog](https://github.com/casdoor/casdoor-go-sdk/blob/master/.releaserc.json)
- [Commits](casdoor/casdoor-go-sdk@v1.18.0...v1.19.0)

---
updated-dependencies:
- dependency-name: github.com/casdoor/casdoor-go-sdk
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…dates (#2124)

Migrate from individual ecosystem updates to multi-ecosystem groups
[^1][^2] to reduce PR volume and improve dependency management workflow:
- Add `infrastructure` group for GitHub Actions with weekly scheduling
- Add `go-modules` group consolidating `spx-backend`, `tools/spxls`, and
  `tools/ai`
- Use `directories` field to manage multiple Go module paths under
  single ecosystem

[^1]: https://github.blog/changelog/2025-07-01-single-pull-request-for-dependabot-multi-ecosystem-support/
[^2]: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/configuring-multi-ecosystem-updates

Signed-off-by: Aofei Sheng <[email protected]>
Bumps the go-modules group with 1 update in the /spx-backend directory: [gorm.io/gorm](https://github.com/go-gorm/gorm).


Updates `gorm.io/gorm` from 1.30.3 to 1.30.4
- [Release notes](https://github.com/go-gorm/gorm/releases)
- [Commits](go-gorm/gorm@v1.30.3...v1.30.4)

---
updated-dependencies:
- dependency-name: gorm.io/gorm
  dependency-version: 1.30.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…validation (#2137)

- Create restricted user with production-level privileges only
- Use restricted user instead of root for migration testing

Signed-off-by: Aofei Sheng <[email protected]>
* Fix name

* Add product design for camera & physics
…sertion in `extractCommandSpec` (#2154)

This replaces complex reflection-based method invocation with more
performant direct interface type assertion for extracting command
descriptions. The previous approach used `reflect.PointerTo` and
`method.Func.Call` which causes browser hangs in Wasm environments due
to the overhead of reflection method calls.

Signed-off-by: Aofei Sheng <[email protected]>
* Fix issue with special characters in resource name

* Apply suggestion from @Copilot

Co-authored-by: Copilot <[email protected]>

---------

Co-authored-by: Copilot <[email protected]>
…ing and improve prompting (#2077)

- Replace string-based response parsing with structured Function Calling
  API[^1]
- Improve conversation flow using proper system/assistant/user message
  types
- Reduce over-reliance on system messages for better context handling

[^1]: https://platform.openai.com/docs/guides/function-calling

Signed-off-by: Aofei Sheng <[email protected]>
* fix(authenticator): replace http with https in avatar URL

* fix(authenticator): update avatar URL handling to use insecureAvatarDomains

* fix(authenticator): ensure avatar URL is fixed before updating user record

* fix(authenticator): temporarily replace http avatar URLs with https to prevent loading issues

* fix(authenticator): update TODO comment for avatar URL handling in OAuth

* fix(authenticator): update TODO comment for avatar URL handling in Authenticate method

* test(authenticator): add TestFixAvatar to validate avatar URL handling
Previously, the backend automatically managed conversation history by
archiving old turns when reaching a threshold. This approach had several
issues:
- Could cause API response delays or timeouts during archiving
  operations
- Made performance issues opaque to frontend clients
- Coupled history management with interaction logic
- Made it difficult for clients to control archiving behavior

This commit moves history management responsibility to the client:
- Remove automatic history archiving from the backend
- Add explicit `/ai/interaction/archive` endpoint for client-controlled
  archiving
- Implement async history management in the client with configurable
  thresholds

Signed-off-by: Aofei Sheng <[email protected]>
* feat(spx-gui): test Copilot open/close style

* feat(spx-gui): format CopilotUI code

* feat(spx-gui): improve Copilot login feedback, improve Markdown style

* feat(spx-gui): adjust copilot style

* feat(spx-gui): add backdrop blur when copilot out of bounds

This comment was marked as off-topic.

Copy link

qiniu-prow bot commented Sep 12, 2025

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

* feat(spx-gui): improve Spotlight overlay

* feat(spx-gui): improve distance calculation for spotlight reveal animation

* feat(spx-gui): add a move animation when Copilot overlay
@qiniu-ci
Copy link

This PR has been deployed to the preview environment. You can explore it using the preview URL.

Warning

Please note that deployments in the preview environment are temporary and will be automatically cleaned up after a certain period. Make sure to explore it before it is removed. For any questions, contact the XBuilder team.

@nighca nighca merged commit 4e467cc into main Sep 12, 2025
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants