feat: add api/versions to onyx

[wenxi-onyx]

Description

• Replicates app.danswer.ai/api/versions in onyx

How Has This Been Tested?

[Describe the tests you ran to verify your changes]

Backporting (check the box to trigger backport action)

Note: You have to check that the action passes, otherwise resolve the conflicts manually and tag the patches.

• This PR should be backported (make sure to check that the backport attempt succeeds)
• [Optional] Override Linear Check

---

Summary by cubic

Adds a public GET /versions endpoint that returns the latest stable and beta Onyx Docker image versions across components, mirroring app.danswer.ai/api/versions. Also whitelists the route in auth to allow unauthenticated reads.

• New Features
  • New GET /versions returns AllVersions {stable, dev, migration} with image tags for: danswer (Onyx), relational_db, index, and nginx.
  • Pulls tags from DockerHub for onyxdotapp/onyx-model-server, onyxdotapp/onyx-backend, and onyxdotapp/onyx-web-server.
  • Uses strict patterns (vX.Y.Z and vX.Y.Z-beta.N), finds tags common to all repos, and selects the latest for each stream.
  • Returns fixed companion tags: postgres:15.2-alpine, vespaengine/vespa:8.277.17, nginx:1.23.4-alpine; migration image set to airgapped-intfloat-nomic-migration.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
internal-search	Ready	Preview	Comment	Aug 27, 2025 0:47am

[greptile-apps]

Greptile Summary

This PR adds a new /api/versions endpoint to Onyx that replicates functionality from app.danswer.ai/api/versions. The implementation consists of two main parts:

Data Models: Two new Pydantic models are added to models.py:

• ContainerVersions: Defines the structure for container versions with four components (danswer, relational_db, index, nginx)
• AllVersions: Contains three ContainerVersions instances for different deployment environments (stable, dev, migration)

Public Endpoint: The /versions endpoint is added to the PUBLIC_ENDPOINT_SPECS list in auth_check.py, making it publicly accessible without authentication. This endpoint fetches Docker image version information from DockerHub and returns it in the structured format defined by the new models.

The endpoint appears to be designed for automated tooling, deployment scripts, or monitoring systems that need to programmatically retrieve current version information for different Onyx deployment scenarios. This fits into the broader application architecture by providing external visibility into available container versions, supporting automated deployment and update workflows.

Confidence score: 4/5

• This PR is safe to merge with minimal risk as it only adds new functionality without modifying existing behavior
• Score reflects simple additive changes with clear data models, though the actual endpoint implementation isn't visible in the diff
• Pay close attention to the endpoint implementation in get_state.py to ensure proper error handling and API design

_{2 files reviewed, no comments}

_{Edit Code Review Bot Settings | Greptile}

[cubic-dev-ai]

2 issues found across 3 files

_{React with 👍 or 👎 to teach cubic. You can also tag @cubic-dev-ai to give feedback, ask questions, or re-run the review.}