From 29b240a68999fd88629f05f839e1c1e0430915dc Mon Sep 17 00:00:00 2001 From: Bukely_ Date: Thu, 23 Apr 2026 23:59:26 +0800 Subject: [PATCH 01/26] Add Dependabot config for GitHub Actions updates (#241) Weekly scan to open PRs upgrading third-party actions used in CI. pip dependencies remain pinned and are covered by Dependabot security updates separately. --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..871c592 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,9 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + labels: + - dependencies + - github-actions From 40073375ff2ec2bae68e8ab37ef732a31a1005be Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 25 Apr 2026 00:19:47 +0800 Subject: [PATCH 02/26] Bump the pip group across 1 directory with 2 updates (#247) Bumps the pip group with 2 updates in the / directory: [litellm](https://github.com/BerriAI/litellm) and [python-dotenv](https://github.com/theskumar/python-dotenv). Updates `litellm` from 1.83.0 to 1.83.7 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](https://github.com/BerriAI/litellm/commits) Updates `python-dotenv` from 1.1.0 to 1.2.2 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.1.0...v1.2.2) --- updated-dependencies: - dependency-name: litellm dependency-version: 1.83.7 dependency-type: direct:production dependency-group: pip - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 11cb001..e6ad805 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ -litellm==1.83.0 +litellm==1.83.7 # openai-agents # optional: required for examples/agentic_vectorless_rag_demo.py pymupdf==1.26.4 PyPDF2==3.0.1 -python-dotenv==1.1.0 +python-dotenv==1.2.2 pyyaml==6.0.2 From a51d97f63cedbf1d36b1121ff47386ea4e088ff5 Mon Sep 17 00:00:00 2001 From: Bukely_ Date: Sat, 25 Apr 2026 00:46:01 +0800 Subject: [PATCH 03/26] Add security CI workflows (#248) * Add security CI workflows * Remove duplicate Python CodeQL workflow --- .github/workflows/codeql.yml | 34 +++++++++++++++++++++++++ .github/workflows/dependency-review.yml | 22 ++++++++++++++++ 2 files changed, 56 insertions(+) create mode 100644 .github/workflows/codeql.yml create mode 100644 .github/workflows/dependency-review.yml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml new file mode 100644 index 0000000..0674ae3 --- /dev/null +++ b/.github/workflows/codeql.yml @@ -0,0 +1,34 @@ +name: CodeQL + +on: + push: + branches: [main] + pull_request: + branches: [main] + schedule: + - cron: '37 9 * * 1' + +permissions: + security-events: write + contents: read + actions: read + +jobs: + analyze: + name: Analyze (actions) + runs-on: ubuntu-latest + timeout-minutes: 30 + steps: + - name: Checkout repository + uses: actions/checkout@v6 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v4 + with: + languages: actions + build-mode: none + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v4 + with: + category: /language:actions diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..eeb0eec --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,22 @@ +name: Dependency Review + +on: + pull_request: + branches: [main] + +permissions: + contents: read + +jobs: + dependency-review: + name: Dependency Review + runs-on: ubuntu-latest + timeout-minutes: 10 + steps: + - name: Checkout repository + uses: actions/checkout@v6 + + - name: Dependency Review + uses: actions/dependency-review-action@v4 + with: + fail-on-severity: moderate From 46244aed33f47e7d407928f18cbce23aeab323df Mon Sep 17 00:00:00 2001 From: Ray Date: Tue, 5 May 2026 23:55:21 +0800 Subject: [PATCH 04/26] update README --- README.md | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index a85fbd0..d7f35ce 100644 --- a/README.md +++ b/README.md @@ -30,7 +30,8 @@

πŸ“’ Updates

-- πŸ”₯ [**Agentic Vectorless RAG**](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) β€” A simple *agentic, vectorless RAG* [example](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) with self-hosted PageIndex, using OpenAI Agents SDK. +- πŸ”₯ [**Agentic Vectorless RAG**](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) with PageIndex β€” A simple *agentic, vectorless RAG* [example](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) with self-hosted PageIndex, using OpenAI Agents SDK. +- [**Scale PageIndex to Millions of Documents**](https://pageindex.ai/blog/pageindex-filesystem) β€” The *PageIndex File System* is a file-level tree layer that lets PageIndex reason over an entire corpus, not just a single document, enabling massive-scale document search. - [PageIndex Chat](https://chat.pageindex.ai) β€” Human-like document analysis agent [platform](https://chat.pageindex.ai) for professional long documents. Also available via [MCP](https://pageindex.ai/developer) or [API](https://pageindex.ai/developer). - [PageIndex Framework](https://pageindex.ai/blog/pageindex-intro) β€” Deep dive into PageIndex: an *agentic, in-context tree index* that enables LLMs to perform *reasoning-based, human-like retrieval* over long documents. @@ -75,8 +76,8 @@ To learn more, please see a detailed introduction to the [PageIndex framework](h The PageIndex service is available as a ChatGPT-style [chat platform](https://chat.pageindex.ai), or can be integrated via [MCP](https://pageindex.ai/developer) or [API](https://pageindex.ai/developer). ### πŸ› οΈ Deployment Options -- Self-host β€” run locally with this open-source repo. -- Cloud Service β€” try instantly with our [Chat Platform](https://chat.pageindex.ai/), or integrate via [MCP](https://pageindex.ai/developer) or [API](https://pageindex.ai/developer). +- Self-host β€” run locally with this open-source repo (using standard PDF parsing). +- Cloud Service β€” production-grade pipeline with enhanced OCR, tree building, and retrieval for best results. Try instantly with our [Chat Platform](https://chat.pageindex.ai/), or integrate via [MCP](https://pageindex.ai/developer) or [API](https://pageindex.ai/developer). - _Enterprise_ β€” private or on-prem deployment. [Contact us](https://ii2abc2jejf.typeform.com/to/tK3AXl8T) or [book a demo](https://calendly.com/pageindex/meet) for more details. ### πŸ§ͺ Quick Hands-on @@ -135,12 +136,14 @@ Below is an example PageIndex tree structure. Also see more example [documents]( ... ``` -You can generate the PageIndex tree structure with this open-source repo, or use our [API](https://pageindex.ai/developer). +You can generate the PageIndex tree structure with this open-source repo; or use our [API](https://pageindex.ai/developer) for higher-quality results powered by our enhanced OCR and tree building pipeline. --- # βš™οΈ Package Usage +> **Note:** This open-source package uses standard Python PDF parsing. For use cases with complex PDFs, our [Cloud Service](https://pageindex.ai/developer) provides significantly better results with enhanced OCR, tree building, and retrieval. Available via [MCP](https://pageindex.ai/developer) or [API](https://pageindex.ai/developer). + You can follow these steps to generate a PageIndex tree from a PDF document. ### 1. Install dependencies From 495e8929b524b3dfcdac47fda2e6e15d1ec2eece Mon Sep 17 00:00:00 2001 From: Ray Date: Wed, 6 May 2026 04:39:17 +0800 Subject: [PATCH 05/26] Trim Cloud Service note in README --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d7f35ce..39d4674 100644 --- a/README.md +++ b/README.md @@ -142,7 +142,7 @@ You can generate the PageIndex tree structure with this open-source repo; or use # βš™οΈ Package Usage -> **Note:** This open-source package uses standard Python PDF parsing. For use cases with complex PDFs, our [Cloud Service](https://pageindex.ai/developer) provides significantly better results with enhanced OCR, tree building, and retrieval. Available via [MCP](https://pageindex.ai/developer) or [API](https://pageindex.ai/developer). +> **Note:** This package uses standard PDF parsing. For use cases with complex PDFs, our [Cloud Service](https://pageindex.ai/developer) (via MCP and API) offers enhanced OCR, tree building, and retrieval. You can follow these steps to generate a PageIndex tree from a PDF document. From dcda5656ba270cc30caaa9486a450d639e1d2081 Mon Sep 17 00:00:00 2001 From: Ray Date: Wed, 6 May 2026 04:52:24 +0800 Subject: [PATCH 06/26] Fix Agentic RAG entry formatting in Updates --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 39d4674..65f7c58 100644 --- a/README.md +++ b/README.md @@ -30,8 +30,8 @@

πŸ“’ Updates

-- πŸ”₯ [**Agentic Vectorless RAG**](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) with PageIndex β€” A simple *agentic, vectorless RAG* [example](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) with self-hosted PageIndex, using OpenAI Agents SDK. -- [**Scale PageIndex to Millions of Documents**](https://pageindex.ai/blog/pageindex-filesystem) β€” The *PageIndex File System* is a file-level tree layer that lets PageIndex reason over an entire corpus, not just a single document, enabling massive-scale document search. +- πŸ”₯ [**Agentic Vectorless RAG**](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) β€” A simple *agentic, vectorless RAG* [example](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) with self-hosted PageIndex, using OpenAI Agents SDK. +- [**Scale PageIndex to Millions of Documents**](https://pageindex.ai/blog/pageindex-filesystem) β€” *PageIndex File System* is a file-level tree layer that lets PageIndex reason over an entire corpus, not just a single document, enabling massive-scale document search. - [PageIndex Chat](https://chat.pageindex.ai) β€” Human-like document analysis agent [platform](https://chat.pageindex.ai) for professional long documents. Also available via [MCP](https://pageindex.ai/developer) or [API](https://pageindex.ai/developer). - [PageIndex Framework](https://pageindex.ai/blog/pageindex-intro) β€” Deep dive into PageIndex: an *agentic, in-context tree index* that enables LLMs to perform *reasoning-based, human-like retrieval* over long documents. From e7dfc5e1ff7a34970cc9b43857f2ac3b2e522e00 Mon Sep 17 00:00:00 2001 From: Ray Date: Thu, 7 May 2026 20:57:14 +0800 Subject: [PATCH 07/26] update README (#259) --- README.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 65f7c58..d17b5e9 100644 --- a/README.md +++ b/README.md @@ -13,7 +13,7 @@ # PageIndex: Vectorless, Reasoning-based RAG -

Reasoning-based RAG  β—¦  No Vector DB  β—¦  No Chunking  β—¦  Human-like Retrieval

+

Reasoning-based RAG  β—¦  No Vector DB or Chunking  β—¦  Context-Aware  β—¦  Human-like Retrieval

🌐 Homepage  β€’   @@ -33,7 +33,7 @@ - πŸ”₯ [**Agentic Vectorless RAG**](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) β€” A simple *agentic, vectorless RAG* [example](https://github.com/VectifyAI/PageIndex/blob/main/examples/agentic_vectorless_rag_demo.py) with self-hosted PageIndex, using OpenAI Agents SDK. - [**Scale PageIndex to Millions of Documents**](https://pageindex.ai/blog/pageindex-filesystem) β€” *PageIndex File System* is a file-level tree layer that lets PageIndex reason over an entire corpus, not just a single document, enabling massive-scale document search. - [PageIndex Chat](https://chat.pageindex.ai) β€” Human-like document analysis agent [platform](https://chat.pageindex.ai) for professional long documents. Also available via [MCP](https://pageindex.ai/developer) or [API](https://pageindex.ai/developer). -- [PageIndex Framework](https://pageindex.ai/blog/pageindex-intro) β€” Deep dive into PageIndex: an *agentic, in-context tree index* that enables LLMs to perform *reasoning-based, human-like retrieval* over long documents. +- [PageIndex Framework](https://pageindex.ai/blog/pageindex-intro) β€” Deep dive into PageIndex: an *agentic, in-context tree index* that enables LLMs to perform *reasoning-based, context-aware retrieval* over long documents.