v3.12.0

MaintenanceUnskippable

Released Jul 30, 2026·Community 1.16.1·Community commit 4e4a9af·Enterprise 0.19.0·Helm chart·Docker Compose

Breaking

None

Security

Issues

Changes

3F · 4B

Downtime

Zero

Upgrade Impact

3 features · 4 fixes

Non-breaking:This release seeds a new agent.manage RBAC permission automatically on startup, so this version cannot be skipped when upgrading across multiple releases — no manual action is required for that. Kubernetes Agent Sandbox (kubernetes-sigs/agent-sandbox integration) ships disabled by default; if you plan to use it, install the agent-sandbox controller and CRDs before upgrading, otherwise the upgrade will fail creating SandboxTemplate/SandboxWarmPool resources. For more details on agent sandbox setup, please refer to Official Docs

What Changed

New Features

Agent Apps: Now Available in Dify EnterpriseDify Agent — introduced in Dify CE 1.16.0 as a new app type with a built-in code/shell sandbox, a skill system for tool/API calls, and an agent roster — are now available in Dify Enterprise. EE adds enterprise-grade sandboxing via the official kubernetes-sigs/agent-sandbox project (sandbox-gateway + agent-runtime, replacing the local Dify Sandbox), a dedicated agent.manage RBAC permission, bearer-token auth between the Dify API and the agent backend, and a Squid-proxied egress lockdown for the sandbox. Kubernetes Agent Sandbox ships disabled by default — see Migration Notes to enable it.

RBAC: New agent.manage Workspace PermissionA dedicated agent.manage permission now gates who can create, edit, and publish Agent apps. Agent apps also gain an enterprise access-control entry point, with newly published agents defaulting to "Specific members within the platform."

Webapp: Option to Disable Public AccessEnterprise admins can now disable public, unauthenticated access to web apps entirely via WEBAPP_PUBLIC_ACCESS_ENABLED. Defaults to the existing open behavior, so no action is required unless you want to lock it down.

Bug Fixes

Plugin Daemon: Fixed Declaration Cache Deadlock Causing Full Plugin OutageFixed a bug in the plugin declaration cache's eviction logic where a size-accounting drift could spin the eviction loop forever while holding its lock, blocking every plugin-related API call (install, list, credential validation) until the daemon was restarted.

Admin Console: RBAC Fixes for Owner Transfer & InvitationsFixed several admin console RBAC issues around workspace owner transfer and join/email invitation guards.

Plugin Management: Backend-Assigned Plugins Not VisibleFixed a bug where plugins assigned to a workspace from the admin backend did not appear when configuring credentials in that workspace until the plugin was also installed from the front end.

Security: CVE Dependency RemediationBumped vulnerable dependencies across components (starlette, soupsieve, cryptography, wandb, grpc, sharp) to close CVEs identified in the pre-release Docker Scout scan.

Upgrade Guide

Pre-Upgrade Checklist

Back up PostgreSQL database and Redis data

Confirm Kubernetes cluster has sufficient resources for the rolling update

This version cannot be skipped: it seeds a new agent.manage RBAC permission automatically on startup (no manual action needed)

If you plan to use Kubernetes Agent Sandbox, install the agent-sandbox controller and CRDs BEFORE upgrading, then set sandboxGateway.enabled: true (see Migration Notes) — otherwise the upgrade will fail creating SandboxTemplate/SandboxWarmPool resources

To lock down public webapp access, set enterprise.webappPublicAccessEnabled: false

Zero-downtime rolling upgrade supported

Upgrade Command

# Back up database first, then:

$ helm upgrade -i dify -f values.yaml dify-ee/dify --version 3.12.0

Rollback

$ helm rollback dify 0

Security & CVE

Full CVE report →

Security vulnerabilities found in this release.2 Critical · 23 High CVE across all container images

critical

high

medium

low

Status

PASS

FAIL

PASS

FAIL

ScannerDocker Scout

Scanned

Jul 31, 2026

Data Source

Docker

CVEs for the opt-in api-insecure image is excluded from the CVE table above.

View api-insecure CVE report →

Benchmark Report

Full benchmark report →

TTFE – Time To First Event (ms)

AVG

171.42

MIN

152

MAX

194

P50

170.5

P90

185.5

P95

189.6

Connections

Max Concurrent

Avg Active

Empty Workflow QPS

Max QPS

Avg QPS

39.89

Avg Duration (ms)

221.52

License Compliance

Full license report →

All dependencies compliant - no copyleft issues detected

Apache-2.0MITBSD-3-ClauseMPL-2.0BSD-2-ClauseISCCC0-1.0