feat: valkey support

.agents/skills/e2e-testing/SKILL.md

@@ -21,7 +21,7 @@ description: Write and review Playwright E2E tests for Langflow. Trigger when th
 
 | Tool | Version | Purpose |
 |------|---------|---------|
-| Playwright | 1.57.0 | E2E test runner + browser automation |
+| Playwright | 1.59.1 | E2E test runner + browser automation |
 | Chromium | (bundled) | Default browser (Firefox/Safari disabled) |
 | Custom fixtures | `tests/fixtures.ts` | Auto-detects API errors and flow execution failures |
 

.github/workflows/docker-build-v2.yml

@@ -137,7 +137,8 @@ jobs:
             echo "Latest main release version: $last_released_version"
           fi
 
-          if [ "$version" = "$last_released_version" ]; then
+          # Skip check only applies to main image, not backend/frontend which are separate images
+          if [ "$version" = "$last_released_version" ] && [[ "${{ inputs.release_type }}" != "main-backend" ]] && [[ "${{ inputs.release_type }}" != "main-frontend" ]]; then
             echo "Main docker version $version is already released. Skipping release."
             echo skipped=true >> $GITHUB_OUTPUT
             exit 0

.github/workflows/mend.yml

@@ -0,0 +1,56 @@
+name: "Mend"
+
+on:
+  push:
+    branches: ["release-*", "main"]
+  pull_request:
+    branches: ["release-*", "main"]
+
+concurrency:
+  group: mend-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  NODE_VERSION: "22"
+
+jobs:
+  mend-scan:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js Environment
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: "npm"
+          cache-dependency-path: ./src/frontend/package-lock.json
+
+      - name: Install Frontend Dependencies
+        working-directory: ./src/frontend
+        run: npm ci
+
+      - name: Set up Java (Semeru)
+        uses: actions/setup-java@v5
+        with:
+          distribution: "semeru"
+          java-version: "21"
+
+      - name: Download Mend Unified Agent
+        run: |
+          curl --fail --show-error --retry 3 --location -o wss-unified-agent.jar https://unified-agent.s3.amazonaws.com/wss-unified-agent.jar
+
+      - name: Run Mend Scan
+        #prevent forks from running mend scans
+        if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+        env:
+          WS_APIKEY: ${{ secrets.WS_APIKEY }}
+          WS_WSS_URL: ${{ secrets.WS_WSS_URL }}
+          WS_USERKEY: ${{ secrets.WS_USERKEY }}
+          WS_PRODUCTNAME: ${{ secrets.WS_PRODUCTNAME }}
+          WS_PROJECTNAME: ${{ secrets.WS_PROJECTNAME }}
+        run: |
+          java -jar wss-unified-agent.jar -d src -logLevel info

.github/workflows/python_test.yml

@@ -93,7 +93,7 @@ jobs:
       - name: Run unit tests
         uses: nick-fields/retry@v3
         with:
-          timeout_minutes: 15
+          timeout_minutes: 20
           max_attempts: 2
           command: make unit_tests args="-x -vv --splits ${{ matrix.splitCount }} --group ${{ matrix.group }} --reruns 5 --cov --cov-config=src/backend/.coveragerc --cov-report=xml --cov-report=html"
 

.github/workflows/release.yml

@@ -53,6 +53,11 @@ on:
         required: false
         type: boolean
         default: true
+      run_pip_check:
+        description: "Whether to run pip check - ONLY SET TO FALSE ONCE YOU HAVE ALREADY ATTEMPTED AND FAILED A RUN THEN MADE SURE DEPS DO NOT CAUSE FAILURES"
+        required: false
+        type: boolean
+        default: true
 
 jobs:
   echo-inputs:
@@ -98,6 +103,46 @@ jobs:
 
           echo "Validated: '${{ inputs.release_tag }}' is a valid tag."
 
+  validate-tag-format:
+    name: Validate Tag Format and Check for Duplicates
+    runs-on: ubuntu-latest
+    needs: [validate-tag]
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Validate Tag Has v Prefix
+        run: |
+          TAG="${{ inputs.release_tag }}"
+          if [[ ! "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "❌ Error: Tag must start with 'v' and follow semver format (v1.2.3)"
+            echo "   Got: $TAG"
+            echo ""
+            echo "This is required to ensure GitHub's generateReleaseNotes uses the correct base comparison."
+            exit 1
+          fi
+          echo "✅ Tag format is valid: $TAG"
+
+      - name: Check for Duplicate Tag Without v Prefix
+        run: |
+          TAG="${{ inputs.release_tag }}"
+          TAG_WITHOUT_V="${TAG#v}"
+
+          if git rev-parse "$TAG_WITHOUT_V" >/dev/null 2>&1; then
+            echo "❌ Error: Duplicate tag without 'v' prefix exists: $TAG_WITHOUT_V"
+            echo "   This will cause release notes to use the wrong base comparison."
+            echo ""
+            echo "   The tag '$TAG_WITHOUT_V' points to commit: $(git rev-parse --short $TAG_WITHOUT_V)"
+            echo "   The tag '$TAG' points to commit: $(git rev-parse --short $TAG)"
+            echo ""
+            echo "   To fix this, delete the duplicate tag:"
+            echo "   git push origin :refs/tags/$TAG_WITHOUT_V"
+            exit 1
+          fi
+          echo "✅ No duplicate tag found"
+
   validate-dependencies:
     name: Validate Release Dependencies
     runs-on: ubuntu-latest
@@ -560,6 +605,7 @@ jobs:
           fi
           uv pip install $FIND_LINKS --prerelease=allow -e src/backend/base
       - name: Check for dependency incompatibility
+        if: ${{ inputs.run_pip_check }}
         run: uv pip check
       - name: Set version for pre-release
         if: ${{ inputs.pre_release }}
@@ -707,6 +753,7 @@ jobs:
           fi
           uv pip install $FIND_LINKS --prerelease=allow -e .
       - name: Check for dependency incompatibility
+        if: ${{ inputs.run_pip_check }}
         run: uv pip check
       - name: Set version for pre-release
         if: ${{ inputs.pre_release }}
@@ -1000,14 +1047,16 @@ jobs:
   create_release:
     name: Create Release
     runs-on: ubuntu-latest
-    needs: [determine-main-version, build-main, publish-main]
+    needs:
+      [determine-main-version, build-main, publish-main, validate-tag-format]
     if: |
       always() &&
       !cancelled() &&
       !inputs.dry_run &&
       inputs.create_release &&
       needs.build-main.result == 'success' &&
-      needs.publish-main.result == 'success'
+      needs.publish-main.result == 'success' &&
+      needs.validate-tag-format.result == 'success'
     steps:
       - uses: actions/download-artifact@v4
         with:

.github/workflows/typescript_test.yml

@@ -70,7 +70,7 @@ env:
   # Define the directory where Playwright browsers will be installed.
   # This path is used for caching across workflows
   PLAYWRIGHT_BROWSERS_PATH: "ms-playwright"
-  PLAYWRIGHT_VERSION: "1.57.0"
+  PLAYWRIGHT_VERSION: "1.59.1"
   LANGFLOW_FEATURE_WXO_DEPLOYMENTS: "true"
 
 jobs:

.gitignore

@@ -292,4 +292,11 @@ sso-config.yaml
 AGENTS.md
 CLAUDE.local.md
 langflow.log.*
-tmp_toolguard/
+tmp_toolguard/
+
+#whitesource
+whitesource/
+
+
+#AI
+.kiro