Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: gradio-app/gradio
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: gradio@6.15.0
Choose a base ref
...
head repository: gradio-app/gradio
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: gradio@6.15.1
Choose a head ref
  • 5 commits
  • 10 files changed
  • 10 contributors

Commits on May 26, 2026

  1. Fix audio cache keys to include metadata (#13394)

    * fix: include audio metadata in cache key
    
    * fix: coerce sample_rate to int before hashing audio cache key
    
    A numpy integer sample_rate (e.g., np.int64) would crash json.dumps
    when building the audio cache key, regressing Audio component
    postprocessing for users who pass numpy-typed sample rates.
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
    
    * add changeset
    
    ---------
    
    Co-authored-by: xiatian19@nudt.edu.cn <dem0@kali.kali>
    Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
    Co-authored-by: Abubakar Abid <abubakar@huggingface.co>
    Co-authored-by: gradio-pr-bot <gradio-pr-bot@users.noreply.github.com>
    5 people authored May 26, 2026
    Configuration menu
    Copy the full SHA
    7c2a21b View commit details
    Browse the repository at this point in the history
  2. test: regression coverage for from_config proxy_url SSRF guard (GHSA-…

    …jmh7-g254-2cq9) (#13388)
    
    * test: regression coverage for from_config proxy_url SSRF guard (GHSA-jmh7-g254-2cq9)
    
    The published fix for GHSA-jmh7-g254-2cq9 lives in `Blocks.from_config()`
    at `gradio/blocks.py:1212,1239` — only register `proxy_url`s whose host
    ends in `.hf.space`. There is no test exercising that guard, so future
    refactors of the config-processing path could silently regress an SSRF
    fix that ships in every release.
    
    Adds `test_from_config_rejects_non_hf_space_proxy_url` covering:
    
      1. Top-level non-`.hf.space` proxy_url (e.g. `http://169.254.169.254`)
         must not enter `blocks.proxy_urls`.
      2. Suffix-confusion (`https://victim.hf.space.evil.com`) must be
         rejected by the `endswith(".hf.space")` check.
      3. Child component props carrying a malicious `proxy_url` in a
         tampered `gr.load()` config must also be filtered, even when the
         top-level proxy_url is legitimate.
      4. Legitimate `.hf.space` hosts on both top-level and children are
         still registered (positive control).
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
    
    * changes
    
    * changes
    
    ---------
    
    Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
    Co-authored-by: Abubakar Abid <abubakar@huggingface.co>
    Co-authored-by: Abubakar Abid <islamrealm@gmail.com>
    4 people authored May 26, 2026
    Configuration menu
    Copy the full SHA
    4f2b563 View commit details
    Browse the repository at this point in the history
  3. fix(dataframe): handle empty and 1d auto datatype values (#13391)

    * fix(dataframe): handle empty and 1d auto datatype values
    
    * add changeset
    
    ---------
    
    Co-authored-by: Abubakar Abid <abubakar@huggingface.co>
    Co-authored-by: gradio-pr-bot <gradio-pr-bot@users.noreply.github.com>
    3 people authored May 26, 2026
    Configuration menu
    Copy the full SHA
    f94972a View commit details
    Browse the repository at this point in the history

Commits on May 27, 2026

  1. Ssr node port (#13424)

    * fix node proxy timing
    
    * cs
    pngwn authored May 27, 2026
    Configuration menu
    Copy the full SHA
    e386e36 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    4012c4b View commit details
    Browse the repository at this point in the history
Loading