# Dify 1.15.0 - Product: Dify (https://whatsnew.fyi/product/dify) - Vendor: LangGenius - Date: 2026-06-25 - Version: 1.15.0 - Original notes: https://github.com/langgenius/dify/releases/tag/1.15.0 - Permalink: https://whatsnew.fyi/product/dify/releases/1.15.0 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **added** — difyctl command-line client to run apps and workflows from the terminal without opening the web UI - **added** — Stream model reasoning into a dedicated live thinking panel in Chat Flow, Workflow, and CLI while keeping the final answer separate - **added** — Human-in-the-loop forms now support dropdown selects and file/multi-file uploads in addition to free text - **added** — Workflows can now use long-running generation models such as image or video generation via a polling mechanism - **added** — Extract images embedded inside Excel files during knowledge import - **added** — Set custom trace session id for Phoenix to align traces with your application's sessions - **added** — Plugin daemon auto-detects region at startup and automatically selects a nearby package mirror for faster installs - **changed** — Redesigned landing and onboarding for an easier first-run experience - **changed** — Improved go to anything palette with faster navigation and autofocused search inputs - **changed** — Workflow editor now features collapsible panels for a cleaner interface - **changed** — Notifications show consistent toasts that display long errors in full - **changed** — Refreshed start node and smarter output node provide more control over workflow returns - **changed** — Reduced workflow startup latency for Chatflow and lowered workflow termination latency - **fixed** — One-click confirmation before removing an app prevents accidental deletes - **fixed** — Fixed Lindorm vector store errors caused by opensearch-py update - **fixed** — Fixed Tongyi credential compatibility - **fixed** — Invalidated credential cache after OAuth refresh - **fixed** — Improved workflow execution error handling and prevented legacy stop from interrupting GraphEngine runs - **fixed** — Fixed conversation variable description length validation to prevent varchar(255) truncation - **security** — Fixed path traversal issue in plugin-daemon forwarding #### Dify 1.15.0 Release Note ##### What's Changed ###### UX & UI Enhancements 录屏2026-06-25 21 12 33 - **Redesigned landing / onboarding** for an easier first-run experience (#37433, #37844, #37800) - **Faster navigation** — improved "go to anything" palette and autofocused search inputs (#32130, #37175) - **Safer deletes** — one-click confirmation before removing an app (#37263) - **Cleaner workflow editor** with collapsible panels (#37276) - **Clearer notifications** — consistent toasts that show long errors in full (#37382, #37581) - **More accessible** — plugin permission hints, restored contact-us menu, skip-nav link, and keyboard focus polish (#37310, #37774, #37644) ###### New Features **difyctl — drive Dify from the command line** ([Docs](https://docs.dify.ai/en/cli/overview)) - difyctl is a command-line client for Dify: you can now run apps and workflows straight from your terminal, so personal agents, scripts, and CI pipelines can invoke Dify workflows without opening the web UI (#37036) - Install it on any platform (macOS, Linux, Windows) with a single command and no access token — binaries are published as public releases with checksum verification (#37036, #37454) - Pass scoped environment variables to CLI tool runs, and get clearer, consistent error messages (including friendly rate-limit handling) across both difyctl and the `/openapi/v1` API (#37324, #37285, #37313, #36896) **See CoT in Workflow & Chatflow & CLI** - Chat Flow / Workflow can now stream the model's reasoning into a dedicated live "thinking" panel while keeping the final answer clean and readable. The reasoning is preserved so it's still there after a page refresh, and the same reasoning is visible in CLI and workflow run previews (#37460, #37828) **Richer Human-in-the-Loop forms** - When a workflow pauses to ask a person for input, the form can now include dropdown selects and file / multi-file uploads — not just free text — so people can answer with structured choices and attachments (#36322) **Support for slow, long-running models** - Workflows can now use generation models that take a long time to respond (such as image or video generation) via a polling mechanism: the node patiently waits for the final result instead of timing out (#37462) **Knowledge from richer spreadsheets** - Images embedded inside Excel files are now extracted during knowledge import, so spreadsheet content that relies on pictures (diagrams, screenshots, charts) is no longer lost (#37104) **Deeper observability** - Set your own trace session id for Phoenix so traces line up with your application's sessions, and follow document-retrieval steps in traces to understand how RAG results were produced (#37056, #37283) **Workflow authoring polish** - A refreshed start node makes it clearer how a workflow begins, and a smarter output node gives you more control over what a workflow returns (#37348, #35511) - Friendlier errors when an app or workspace ID is malformed, instead of confusing failures (#37212) **Faster plugin installs in certain regions** - The plugin daemon now auto-detects your region at startup and, where network connectivity to PyPI is poor, automatically picks a nearby package mirror — so installing plugins is faster and more reliable without any manual setup. You can still pin a specific mirror if you prefer (dify-plugin-daemon#750) ###### Security Updates This release fixes a path traversal issue in plugin-daemon forwarding (cve-2026-41948). ###### Bug Fixes - Hardened outbound HTTP with bounded timeouts for Firecrawl, Jina, Watercrawl, Nacos, and Marketplace requests, and hardened default SSRF proxy egress (#37638, #37637, #37515, #37444, #37424, #36332) - Fixed Lindorm vector store errors caused by the `opensearch-py` update (#37862) and Tongyi credential compatibility _[Truncated at 4000 characters — full notes: https://github.com/langgenius/dify/releases/tag/1.15.0]_