< cd ..

Open WebUI

~/open-webui/open-webui

--harness github web

Self-hosted AI interface and agent workspace

●●● stats.json

latest

v0.8.7

total

30

stable

30

scraped

Mar 2, 2026

#ai #self-hosted #assistant #harness

/changelog

v0.8.7 [Mar 2, 2026] details → github →

[0.8.7] - 2026-03-01

Fixed

  • 🔒 Connection access control privacy. Tool server and terminal connections without explicit access grants are now private (admin-only) by default, fixing a bug where connections configured with no access grants were visible to all users instead of being restricted. Commit
  • 🧠 ChatControls memory leak. The ChatControls panel no longer leaks event listeners, ResizeObserver instances, and media query handlers when navigating between chats, fixing memory accumulation that could degrade performance during extended use. #22112
  • 💾 Temporary chat params preservation. Model parameters are now correctly saved when creating a temporary chat, ensuring custom settings like temperature and top_p persist across the session. Commit
  • Faster artifact content updates. Artifact content extraction during streaming is now debounced via requestAnimationFrame, reducing redundant DOM reads and improving CPU efficiency when tokens arrive faster than the browser can paint. Commit
v0.8.6 [Mar 1, 2026] details → github →

[0.8.6] - 2026-03-01

Added

  • 🖥️ Open Terminal integration. Users can now connect to Open Terminal instances to browse, read, and upload files directly in chat, with the terminal acting as an always-on tool. File navigation includes folder browsing, image and PDF previews, drag-and-drop uploads, directory creation, and file deletion. The current working directory is automatically injected into tool descriptions for context-aware commands. Commit, Commit, Commit
  • 📄 Terminal file creation. Users can now create new empty files directly in the Open Terminal file browser, in addition to the existing folder creation functionality. Commit
  • ✏️ Terminal file editing. Users can now edit text files directly in the Open Terminal file browser, with the ability to save changes back to the terminal. Commit
  • 🛠️ Terminal file preview toolbar. The Open Terminal file browser now displays contextual toolbar buttons based on file type, including preview/source toggle for Markdown and CSV files, reset view for images, and improved editing controls for text files. Commit
  • 🔄 Terminal file write refresh. The file browser now automatically refreshes when files are written or modified via the write_file or replace_file_content tools, eliminating the need to manually refresh. Commit
  • 🛡️ Docker image SBOM attestation. Docker images now include a Software Bill of Materials (SBOM) for vulnerability scanning and supply chain security compliance. #21779, Commit
  • 📡 Reporting-Endpoints security header. Administrators can now configure a Reporting-Endpoints header via the REPORTING_ENDPOINTS environment variable to receive CSP violation reports directly, aiding in security policy debugging and hardening. #21830
  • 🎯 Action button priority sorting. Action buttons under assistant messages now appear in a consistent order based on the priority field from function Valves, allowing developers to control button placement. #21790
  • 🏷️ Public/Private model filtering. The Admin Settings Model listing now displays Public/Private badges and includes filter options to easily view public or private models. #21732, #21797
  • 👁️ Show/Hide all models bulk action. Administrators can now show or hide all models at once from the Admin Settings Models page Actions menu, making it faster to manage model visibility. Bulk actions now display a single toast notification on success for better user feedback. #21838, #21958
  • 🔐 Individual user sharing control. Administrators can now disable individual user sharing via the USER_PERMISSIONS_ACCESS_GRANTS_ALLOW_USERS environment variable, allowing only group-based sharing when set to false. #21793, Commit, Commit
  • 🔄 OAuth profile sync on login. Administrators can now enable automatic synchronization of user profile name and email from OAuth providers on login via the OAUTH_UPDATE_NAME_ON_LOGIN and OAUTH_UPDATE_EMAIL_ON_LOGIN environment variables. #21787, Commit
  • 👥 Default group share permission. Administrators can now configure the default sharing permission for new groups via the DEFAULT_GROUP_SHARE_PERMISSION environment variable, controlling whether anyone, no one, or only members can share to new groups. Commit
  • 💨 Streaming performance. Chat responses now render more efficiently during streaming, reducing CPU usage and improving responsiveness. Commit
  • 🧮 Streaming message comparison. Chat message updates during streaming are now faster thanks to an optimization that skips expensive comparisons when content changes. #21884
  • 🚀 Streaming scroll optimization. Chat auto-scroll during streaming is now more efficient by batching scroll operations via requestAnimationFrame, reducing unnecessary layout reflows when tokens arrive faster than the browser can paint. #21946
  • 📋 Message cloning performance. Chat message cloning during streaming is now more efficient thanks to the use of structuredClone() instead of JSON.parse(JSON.stringify(...)). #21948
  • 🎯 Faster code block rendering. Chat message updates during streaming are now faster. #22101
  • 📊 Faster status history display. Chat message updates during streaming are now faster. #22103
  • 🛠️ Faster tool result handling. Tool execution results are now handled more efficiently, improving streaming performance. #22104
  • 💾 Faster model and file operations. Model selection, file preparation, and history saving are now faster. #22102
  • 🛠️ Tool server advanced options toggle. Advanced OpenAPI configuration options in the tool server modal are now hidden by default behind a toggle, simplifying the interface for basic setups. The admin settings tab was also renamed from "Tools" to "Integrations" for clearer organization. Commit, Commit
  • 🔧 Faster tool loading. Tool access control now skips an unnecessary database query when no tools are attached to the request, slightly improving performance. #21873
  • Faster math rendering. Mathematical notation now renders more efficiently, improving responsiveness when displaying equations in chat. #21880
  • 🏎️ Faster message list updates. The chat message list now rebuilds at most once per animation frame during streaming, reducing CPU overhead. #21885
  • 📋 Faster message rendering. Chat message rendering is now more efficient during streaming. #22086
  • 🗄️ Faster real-time chat updates. Chat responses now process faster with improved handling for concurrent users. #22087
  • 📝 Faster status persistence. Only final status updates are now saved to the database during streaming, reducing unnecessary writes. #22085
  • 🔄 Faster event matching. Event handling in the socket handler is now more efficient. Commit
  • 🔀 General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
  • 🌐 Translation updates. Translations for German, Portuguese (Brazil), Simplified Chinese, Traditional Chinese, Catalan, and Spanish were enhanced and expanded.

Fixed

  • 🗄️ Database migration execution. Database migrations now run correctly on startup, fixing a circular import issue that caused schema updates to fail silently. #21848, Commit
  • 🔔 Notification HTML escaping. Notification messages now properly escape HTML content, matching the behavior in chat messages and ensuring consistent rendering across the interface. #21860, Commit
  • 🛠️ Tool call JSON error handling. Chat no longer crashes when models generate malformed JSON in tool call arguments; instead, a descriptive error message is returned to the model for retry. #21984, Commit
  • 🧠 Reasoning model KV cache preservation. Reasoning model thinking tags are no longer stored as HTML in the database, preserving KV cache efficiency for backends like llama.cpp and ensuring faster subsequent conversation turns. #21815, Commit
  • Duplicate model execution prevention. Models are no longer called twice when no tools are configured, eliminating unnecessary API requests and reducing latency. #21802, Commit
  • 🔐 OAuth session database error. OAuth login no longer fails with a database error when creating sessions, fixing the "'NoneType' object has no attribute 'id'" and "can't adapt type 'dict'" errors that occurred during OAuth group creation. #21788
  • 👤 User sharing permission enforcement. The user sharing option now correctly respects the USER_PERMISSIONS_ACCESS_GRANTS_ALLOW_USERS setting, fixing an issue where sharing to individual users was incorrectly allowed even when disabled. #21856, Commit, Commit
  • 🔑 Password manager autofill. Password manager autofill (like iCloud Passwords, 1Password, Bitwarden) now correctly captures filled-in passwords, fixing login failures where the password appeared filled but was sent as empty. #21869, Commit
  • 📝 RAG template duplication. RAG templates are no longer duplicated in chat messages when models make multiple tool calls, preventing hallucinations and incorrect tool usage. #21780, Commit
  • 📋 Audit log stdout. Audit logs now correctly appear on stdout when the ENABLE_AUDIT_STDOUT environment variable is set to true, aligning runtime behavior with the intended configuration. #21777
  • 🎯 Function valve priority resolution. Function priorities defined in code are now correctly applied when no custom value has been saved in the database, ensuring consistent action button and filter ordering. #21841
  • 📄 Web content knowledge base append. Processing web URLs with overwrite=false now correctly appends content to existing knowledge bases instead of silently doing nothing, fixing a regression where no content was being added. #21786, Commit
  • 🔍 Web search domain filter config. The WEB_SEARCH_DOMAIN_FILTER_LIST environment variable is now correctly read and applied, fixing an issue where domain filtering for web searches always used an empty default value. #21964, #20186
  • 🧹 Tooltip memory leak. Tooltip instances are now properly destroyed when elements change, fixing a memory leak that could cause performance issues over time. #21969
  • ⌨️ MessageInput memory leak. Event listeners in the message input component are now properly cleaned up, preventing a memory leak that could cause page crashes during extended use. #21968
  • 📝 Notes memory leak. Event listeners in the Notes component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #21963
  • 🏗️ Model create memory leak. Event listeners in the model creation page are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #21966
  • 💬 MentionList memory leak. Event listeners in the MentionList component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #21965
  • 📐 Sidebar memory leak. Event listeners in the Sidebar component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #22082
  • 🎨 Sidebar user menu positioning. The sidebar user menu no longer drifts rightward when the sidebar is resized, keeping the menu properly aligned with its trigger. #21853
  • 💻 Code block UI. Code block headers are now sticky and properly positioned, with language labels now showing tooltips for truncated text. Commit
  • 📊 Multi-model responses horizontal scroll. The model list in multi-model responses tabs now has horizontal scroll support, making all models accessible on desktop screens. #21800, Commit
  • 🎭 TailwindCSS gray color theme. Custom gray color palette is now correctly applied to the CSS root theme layer, fixing an issue where --color-gray-x variables were missing. #21900, #21899
  • 📎 Broken documentation links. Fixed broken links in the backend config and admin settings that pointed to outdated documentation locations. #21904
  • 🔓 OAuth session token decryption. OAuth sessions are now properly detached from the database context before token decryption, preventing potential database session conflicts when reading encrypted tokens. #21794
  • 🕐 Chat timestamp i18n fix. Chat timestamps in the sidebar now display correctly, fixing an issue where the time ago format (e.g., "5m", "2h", "3d") was not being localized properly due to incorrect variable casing in the translation function. Commit
  • 🍞 Model toast notification fix. Hiding or showing a single model now displays only one toast notification instead of two, removing the redundant generic "model updated" message when a specific action toast is shown. #22079
  • 📡 Offline mode embedding model fix. Open WebUI no longer attempts to download embedding models when in offline mode, fixing error logs that occurred when trying to fetch models that weren't cached locally. #22106, #21405
v0.8.5 [Feb 23, 2026] details → github →

[0.8.5] - 2026-02-23

Added

  • ⌨️ Voice dictation shortcut. Users can now toggle voice dictation using Cmd+Shift+L (or Ctrl+Shift+L on Windows/Linux), making it faster to start and stop dictation without clicking the microphone button.

Fixed

  • 🚫 Model access KeyError fix. The /api/models endpoint no longer crashes with a 500 error when models have incomplete info metadata missing the user_id field (e.g. models using global default metadata).
  • 🔄 Frontend initialization resilience. The app layout now gracefully handles individual API failures during initialization (getModels, getBanners, getTools, getUserSettings, setToolServers) instead of blocking the entire page load when any single call fails.
  • 🛡️ Backend config null safety. Language detection during app initialization no longer crashes when the backend config fetch fails, preventing a secondary cause of infinite loading.
v0.8.4 [Feb 23, 2026] details → github →

[0.8.4] - 2026-02-23

Added

  • 🛜 Provider URL suggestions. The connection form now displays a dropdown with suggested URLs for popular AI providers, making it easier to configure connections. Commit
  • ☁️ Anthropic model fetching. The system now properly fetches available models from the Anthropic API, ensuring all Anthropic models are accessible. Commit
  • 💡 No models prompt. When no models are available, a helpful prompt now guides users to manage their provider connections. Commit
  • ⚙️ Connection enable/disable toggles. Individual provider connections can now be enabled or disabled from both admin and user settings. Commit
  • ⏸️ Prompt enable/disable toggle. Users can now enable or disable prompts directly from the prompts list using a toggle switch, without needing to delete and recreate them. Inactive prompts display an "Inactive" badge and are still visible in the list. Commit
  • 🗑️ Memory deletion. Agents can now delete specific memories that are no longer relevant, duplicated, or incorrect, giving better control over stored memory content. Commit
  • 📋 Memory listing. Agents can now list all stored memories, enabling them to identify which memories to manage or delete based on the complete memory inventory. Commit
  • 📦 Auto pip install toggle. Administrators can now disable automatic pip package installation from function frontmatter requirements using the ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS environment variable, providing more control over function dependency management. Commit
  • 🔗 Anthropic Messages API proxy. A new API endpoint now supports the Anthropic Messages API format, allowing tools like Claude Code to authenticate through Open WebUI and access configured models. Tool calls are now properly supported in streaming responses with correct multi-block indexing, and error status from tools is propagated correctly. The endpoint converts requests to OpenAI format internally, routes them through the existing chat pipeline, and returns responses in Anthropic format. #21390, Commit, Commit
  • 👥 Multi-device OAuth sessions. Users can now stay logged in on multiple devices simultaneously with OAuth, as re-logging in no longer terminates existing sessions. The oldest sessions are automatically pruned when the session limit is exceeded. #21647, Commit
  • 🔐 OAuth group default share setting. Administrators can now configure the default sharing setting for OAuth-created groups using the OAUTH_GROUP_DEFAULT_SHARE environment variable, allowing control over whether new groups default to private or shared with members. #21679, Commit
  • 🔧 Knowledge base import behavior. The web content import endpoint now supports a configurable overwrite flag, allowing users to add multiple URLs to the same knowledge base instead of replacing existing content. #21613, #21336, Commit
  • 🧩 Skill JSON import support. Skills can now be imported from both JSON and Markdown files. #21511
  • 🔍 You.com web search provider. A new web search provider option for You.com is now available, giving users another search engine choice for web-enabled models. The You.com provider enriches search results by including both descriptions and snippets for better context. #21599
  • 🚀 Message list performance. Loading conversation history when sending messages is now significantly faster, improving response latency before the model starts generating. This also speeds up chat search and RAG context building. #21588
  • 🎯 Concurrent embedding request control. Administrators can now control the maximum number of concurrent embedding API requests using the RAG_EMBEDDING_CONCURRENT_REQUESTS environment variable, helping manage API rate limits while maintaining embedding performance. #21662, Commit
  • Message upsert optimization. Loading chat data during message saving is now significantly faster by eliminating a redundant database call that occurred on every message upsert, which happens many times during streaming responses. #21592
  • Message send optimization. Loading chat data during message sending is now significantly faster by eliminating unnecessary full conversation history loads. The system now uses targeted queries that fetch only the needed data instead of loading entire chat objects with all message history. #21596
  • 🚀 Tag filtering optimization. Chat search with tag filtering now uses more efficient database queries, making filtered searches significantly faster. Commit
  • Shared chat loading optimization. The shared chats endpoint now loads only the needed columns instead of the full conversation history, making shared chat listings significantly faster. #21614
  • 🗂️ Archived and pinned chat loading. Loading archived and pinned chat lists is now significantly faster by loading only the needed columns instead of full conversation data. #21591
  • 💨 Chat title query optimization. Retrieving chat titles now queries only the title column instead of the entire conversation history, making title lookups significantly faster and reducing database load. #21590
  • 🗄️ Batch access grants for multiple resources. Loading channels, knowledge bases, models, notes, prompts, skills, and tools now uses batch database queries for access grants instead of individual queries per item, significantly reducing database load. For 30 items, this reduces approximately 31 queries to just 3. #21616
  • 📋 Notes list payload optimization. Notes list and search endpoints now return only a 200-character preview instead of the full note content, reducing response payload from ~167 MB to ~10 KB for 60 notes and eliminating N+1 queries for access grants. The Notes tab now loads in seconds instead of tens of seconds. #21549
  • Tools list performance. Loading the tools list is now significantly faster by deferring content and specs fields from database queries, and using cached tool modules instead of reloading them for each request. Commit
  • 📝 Group description display. The admin groups list now shows each group's description, making it easier for administrators to identify groups at a glance.
  • 🏷️ Sort by dropdown. Administrators can now sort groups using a dropdown menu with options for Name or Members, replacing the previous clickable column headers.
  • 📶 Admin groups list sorting. The Group and Users columns in the admin groups list are now clickable for sorting, allowing administrators to sort groups alphabetically by name or numerically by member count. #21692
  • 🔽 Rich UI auto-scroll. The view now automatically scrolls to action-generated Rich UI content once it renders, ensuring users can see the results without manually scrolling. #21698, #21482
  • 📊 Admin analytics toggle. Administrators can now enable or disable the analytics feature using the ENABLE_ADMIN_ANALYTICS environment variable, giving more control over available admin features. #21651, Commit
  • 📊 Analytics sorting enhancement. The Analytics dashboard now supports sorting by Tokens column for both Model Usage and User Usage tables, and the Share/Percentage columns are now clickable for sorting. Administrators can more easily identify the most token-consuming models and users. Commit
  • 📑 Fetch URL citation sources. When models fetch URLs during tool calling, the fetched URLs now appear as clickable citation sources in the UI with content previews, matching the existing behavior of web search and knowledge file tools. #21669
  • 🔗 Admin settings tab navigation. The admin settings sidebar now supports native browser tab opening, allowing users to middle-click or right-click to open settings pages in new tabs. The navigation was converted from button-based to anchor-based elements. #21721
  • 🏷️ Model visibility badges. The Admin Settings Models page now displays Public or Private badges directly on each model, making it easy to identify model access levels at a glance without opening the edit screen. #21732, Commit
  • 🛠️ Global model defaults. Administrators can now configure default metadata and parameters that automatically apply to all models, reducing manual configuration for newly discovered models. Default capabilities (like vision, web search, code interpreter) and parameters (like temperature, max_tokens) can be set globally in Admin Settings, with per-model overrides still available. #20658, Commit
  • 💬 Plaintext tool output display. Tool outputs that are plain strings now display naturally in a monospace block instead of quoted/escaped format, making multi-line string outputs easier to read. #21553, Commit
  • 🔐 Event call input masking. Functions can now request masked password input in confirmation dialogs, allowing sensitive data entry to be hidden from view. This extends the existing masking feature from user valves to event calls. #21540, Commit
  • 🗂️ JSON logging support. Administrators can now enable JSON-formatted logging by setting the LOG_FORMAT environment variable to "json", making logs suitable for log aggregators like Loki, Fluentd, CloudWatch, and Datadog. #21747
  • UI accessibility improvements. Screen reader users can now navigate the interface more easily with improved keyboard navigation in dialogs and proper ARIA labels on all interactive elements. Added aria-labels to close, back, and action buttons across various components, and improved semantic HTML and screen reader support across auth, sidebar, chat, and notification components, addressing WCAG compliance. Added aria-labels to search inputs, select fields, and modals in admin and user settings, and improved accessibility for text inputs, rating components, citations, and web search results. Added aria-labels to workspace components including Knowledge, Models, Prompts, Skills, and Tools pages for improved screen reader support. #21706, #21705, #21710, #21709, #21717, #21715, #21708, #21719
  • 🔄 General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
  • 🌐 Translations for Finnish, French, Portuguese (Brazil), Simplified Chinese, and Traditional Chinese were enhanced and expanded.

Fixed

  • 💥 Admin functions page crash fix. The admin Functions tab no longer crashes when clicked, fixing a null reference error that occurred while the functions list was loading. #21661, Commit
  • 💀 Cyclic chat history deadlock fix. Chat histories with circular parent-child message references no longer cause the backend to freeze when syncing usage stats. The system now detects and safely aborts when encountering cyclic message references. #21681
  • 🔀 Model fallback routing fix. Custom model fallback now works correctly across all model types, preventing "Model not found" errors when the fallback model uses a different backend (pipe, Ollama, or OpenAI). #21736
  • 🐛 Default model selection fix. Admin-configured default models are now properly respected when starting new chats instead of being overwritten by the first available model. #21736
  • 👁️ Scroll jumping fix. Deleting a message pair after stopping generation no longer causes the chat to visually jump around, making message deletion smoother. #21743, Commit
  • 💬 New chat message handling fix. Fixed a bug where clicking "New Chat" after sending a message would silently drop subsequent messages. The system now properly clears pending message queues when starting a new conversation. #21731
  • 🔍 RAG template mutation fix. Fixed a bug where RAG template text was recursively injected into user messages during multiple sequential tool calls, causing message content to grow exponentially and potentially confuse the model. The system now preserves the original user message before tool-calling loops and correctly accumulates citation sources. #21663, #21668, Commit
  • 🔒 Iframe sandbox security. Embedded tools can no longer submit forms or access same-origin content by default, improving security for users. #21529
  • 🔐 Signup race condition fix. Fixed a security vulnerability where multiple admin accounts could be created on fresh deployments when running multiple uvicorn workers. The signup handler now properly handles concurrent requests during first-user registration, preventing unauthorized admin privilege escalation. #21631
  • 🔐 LDAP optional fields fix. LDAP configuration now properly accepts empty Application DN and password values, allowing LDAP authentication to work without these optional fields. Previously, empty values caused authentication failures. Commit
  • 🛠️ API tools fix. The /api/v1/chat/completions endpoint now properly respects caller-provided tools instead of overriding them with server-side tools, fixing issues where external agents like Claude Code or Cursor would receive unexpected tool advertisements. #21557, #21555
  • ⏱️ Embeddings and proxy timeout fix. The embeddings and OpenAI proxy endpoints now properly honor the AIOHTTP_CLIENT_TIMEOUT environment variable, instead of using default timeouts that could cause requests to hang. #21558
  • 📄 Text file type detection fix. TypeScript and other text files that were mis-detected as video files based on their extension are now correctly identified and processed as text files, fixing upload rejections for .ts files. #21454, Commit
  • 🗄️ File access control respect. The files list and search endpoints now properly respect the BYPASS_ADMIN_ACCESS_CONTROL setting, ensuring admins only see their own files when the setting is disabled, consistent with other endpoints. #21595, #21589
  • 🗄️ PostgreSQL workspace cloning. Cloning workspace models now works correctly on PostgreSQL databases by generating proper unique IDs for access grants instead of using potentially duplicate or invalid IDs. Commit
  • 🔓 MCP SSL verification fix. MCP tool connections now properly respect the AIOHTTP_CLIENT_SESSION_TOOL_SERVER_SSL environment variable to disable SSL verification, instead of always verifying SSL certificates. Commit, #21481
  • 🔒 Model default feature permissions. Model default features like code interpreter, web search, and image generation now respect global configuration and user permission settings, preventing disabled features from appearing in the chat input. #21690
  • 🔍 Model selector typing fix. The model selector list no longer disappears or becomes grayed out when typing quickly in the search field, thanks to improved virtual scroll handling. #21659
  • Disabled model cloning prevention. Disabled models can no longer be cloned as workspace models, preventing invalid empty configurations from being created. The Clone option is now hidden for inactive models. #21724
  • 🔧 SCIM parameter handling. The SCIM Users and Groups endpoints now accept out-of-range startIndex and count values by clamping them to valid ranges instead of returning errors, in compliance with RFC 7644. #21577
  • 🔍 Hybrid search result fix. Hybrid search now returns correct results after fixing a bug where query result unpacking order was mismatched, causing search results to appear empty. #21562
  • 🛠️ Imported items display. Imported functions and tools now appear immediately in the list after import, without requiring a page reload. #21593
  • 🔄 WebSocket race condition fix. Collaborative note saves no longer crash with errors when users disconnect before pending saves complete, preventing AttributeError exceptions and excessive logging. #21601, Commit
  • Drag-and-drop overlay fix. The "Add Files" overlay no longer remains stuck on screen when dragging files back out of the chat window in Mozilla Firefox. #21664
  • 👁️ Group search visibility fix. Groups now appear correctly in access control search results, even when the search doesn't match any users. #21691
  • 🖱️ User menu drag and click fixes. Fixed draggable ghost images when dragging menu items and eliminated phantom link clicks that occurred when dragging outside dropdown menus. #21699
  • 🧭 Admin and workspace nav drag fix. Fixed ghost drag images when dragging top navigation tabs in the Admin and Workspace panels by adding proper drag constraints and text selection prevention. #21701
  • 🎮 Playground nav drag fix. Fixed ghost drag images when dragging top navigation tabs in the Playground panel by adding proper drag constraints and text selection prevention. #21704
  • Dropdown menu drag fix. Dropdown menu items can no longer be accidentally dragged as ghost images when highlighting text, making menu interactions smoother. #21713
  • 🗂️ Folder menu drag fix. Folder dropdown menu items can no longer be accidentally highlighted or dragged as ghost images, making folder options behave like standard menus. #21753
  • 📝 Console log spam fix. Requesting deleted or missing files no longer floods the backend console with Python traceback logs, thanks to proper exception handling for expected 404 errors. #21687
  • 🐛 Firefox avatar overflow fix. Fixed a visual bug in Firefox where broken model or user avatar images would display overflowing alt text that overlapped adjacent labels on the Analytics and Leaderboard pages. Failed avatar images now properly show fallback icons instead. #21730
  • 🎨 Dark mode select background fix. Fixed an issue where select inputs and dropdown menus had inconsistent lighter background colors in dark mode by removing conflicting dark theme overrides, ensuring a cohesive transparent look. #21728
  • 💾 Prompt import fix. Importing prompts that were previously exported no longer fails with a "[object Object]" error toast, making prompt backup and restore work correctly. #21594
  • 🔧 Ollama reasoning effort fix. Reasoning effort now works correctly with Ollama models that require string values ("low", "medium", "high") instead of boolean, fixing "invalid option provided" errors when using models like GPT-OSS. #20921, #20928, Commit
  • 🔍 Hybrid search deduplication fix. Hybrid search now correctly deduplicates results using content hashes, preventing duplicate chunks from appearing when using enriched text for BM25 search. Commit
  • 📋 SQLAlchemy warning fix. Fixed a SQLAlchemy warning that appeared in logs when deleting shared chats, improving log clarity. Commit

Changed

  • 🎯 Prompt suggestions relocated. Prompt suggestions have been moved from Admin Panel - Settings - Interface to Admin Panel - Settings - Models, where they can now be configured per-model or globally via the new model defaults.
  • 📢 Banners relocated. Banners configuration has been moved from Admin Panel - Settings - Interface to Admin Panel - Settings - General.
v0.8.3 [Feb 17, 2026] details → github →

[0.8.3] - 2026-02-17

Added

  • ✏️ Model edit shortcut. Users can now edit models directly from the model selector dropdown menu, making it faster to modify model settings without navigating to separate admin or workspace pages. Commit
  • 🎨 Image edit API background support. The image edit API now supports the background parameter for OpenAI's gpt-image-1 model, enabling background transparency control ("transparent", "opaque", "auto") when the feature is exposed in the UI. #21459
  • Faster model filtering. Model access control filtering no longer makes a redundant database query to re-fetch model info that is already available in memory, reducing latency when loading model lists for non-admin users. Commit
  • 🔧 Tool call display improvements. Tool call results now display arguments in a cleaner key-value format instead of raw JSON, with a responsive layout that shows only the tool name on narrow screens and the full label on wider screens, preventing text wrapping to multiple lines. Commit
  • 🔄 General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
  • 🌐 Translations for Portuguese (Brazil), Simplified Chinese, and Traditional Chinese were enhanced and expanded.

Fixed

  • 📧 USER_EMAIL variable fix. The {{USER_EMAIL}} template variable now correctly returns the user's email address instead of "Unknown" in prompts. #21479, #21465
  • 🖼️ Image and file attachment handling fixes. Uploaded images are now correctly sent to vision-enabled models, and file attachments now work even when no user text is entered alongside a system prompt. This fixes two issues where the backend was not properly processing file attachments: images weren't converted to the expected format for API requests, and file context was dropped when the user sent only a file without accompanying text. Commit, #21477, #21457
  • 🛡️ Missing function error handling. Models that reference deleted functions no longer cause the entire /api/models endpoint to crash; instead, the missing functions are skipped and logged, allowing the rest of the models to load successfully. #21476, #21464
  • 🚀 Startup model pre-fetch error handling. If model pre-fetching fails during app startup, the application now logs a warning and continues instead of crashing entirely. Commit
  • ⚙️ Function module loading error handling. Function modules that fail to load during startup or model processing are now caught and logged, preventing crashes when models reference functions with loading errors. Commit
  • 🗄️ PostgreSQL group query fix. The '/api/v1/groups/' endpoint no longer fails with a GROUP BY error when using PostgreSQL; member counts are now calculated using correlated subqueries for better database compatibility. #21458, #21467
v0.8.2 [Feb 16, 2026] details → github →

[0.8.2] - 2026-02-16

Added

  • 🧠 Skill content handling. User-selected skills now have their full content injected into the chat, while model-attached skills only display name and description in the available skills list. This allows users to override skill behavior while model-attached skills remain flexible. Commit
  • ⚙️ Chat toggles now control built-in tools. Users can now disable web search, image generation, and code execution on a per-conversation basis, even when those tools are enabled as builtin tools on the model. #20641, #21318, Commit, Commit
  • 🖼️ Image preview in file modal. Images uploaded to chats can now be previewed directly in the file management modal, making it easier to identify and manage image files. #21413, Commit
  • 🏷️ Batch tag operations. Tag creation, deletion, and orphan cleanup for chats now use batch database queries instead of per-tag loops, significantly reducing database round trips when updating, archiving, or deleting chats with multiple tags. Commit
  • 💨 Faster group list loading. Group lists and search results now load with a single database query that joins member counts, replacing the previous pattern of fetching groups first and then counting members in a separate batch query. Commit
  • 🔐 Skills sharing permissions. Administrators can now control skills sharing and public sharing permissions per-group, matching the existing capabilities for tools, knowledge, and prompts. Commit
  • Long content truncation in preview modals. Citation and file content modals now truncate markdown-rendered content at 10,000 characters with a "Show all" expansion button, preventing UI jank when previewing very large documents.
  • 🌐 Translation updates. Translations for Spanish and German were enhanced and expanded.

Fixed

  • 🔐 OAuth session error handling. Corrupted OAuth sessions are now gracefully handled and automatically cleaned up instead of causing errors. Commit
  • 🐛 Task model selector validation. The task model selector in admin settings now correctly accepts models based on the new access grants system instead of rejecting all models with an incorrect error. Commit
  • 🔗 Tool call message preservation. Models no longer hallucinate tool outputs in multi-turn conversations because tool call history is now properly preserved instead of being merged into assistant messages. #21098, #20600, Commit
  • 🔧 Tool server startup initialization. External tool servers configured via the "TOOL_SERVER_CONNECTIONS" environment variable now initialize automatically on startup, eliminating the need to manually visit the Admin Panel and save for tools to become available. This enables proper GitOps and containerized deployments. #18140, #20914, Commit
  • ♻️ Resource handle cleanup. File handles are now properly closed during audio transcription and pipeline uploads, preventing resource leaks that could cause system instability over time. #21411
  • ⌨️ Strikethrough shortcut conflict fix. Pressing Ctrl+Shift+S to toggle the sidebar no longer causes text to become struck through in the chat input, by disabling the TipTap Strike extension's default keyboard shortcut when rich text mode is off. Commit
  • 🔧 Tool call finish_reason fix. API responses now correctly set finish_reason to "tool_calls" instead of "stop" when tool calls are present, fixing an issue where external API clients (such as OpenCode) would halt prematurely after tool execution when routing Ollama models through the Open WebUI API. #20896
v0.8.1 [Feb 14, 2026] details → github →

[0.8.1] - 2026-02-14

> [!CAUTION] > ⚠️ Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility.

Added

  • 🚀 Channel user active status. Checking user active status in channels is now faster thanks to optimized database queries. Commit
  • 🔗 Responses API endpoint with model routing. The OpenAI API proxy now supports a /responses endpoint that routes requests to the correct backend based on the model field in the request, instead of always using the first configured endpoint. This enables support for backends like vLLM that provide /skills and /v1/responses endpoints. Commit, Commit
  • Model and prompt list optimization. Improved performance when loading models and prompts by pre-fetching user group IDs once instead of making multiple database queries. Commit
  • 🗄️ Batch access control queries. Improved performance when loading models, prompts, and knowledge bases by replacing multiple individual access checks with single batch queries, significantly reducing database load for large deployments. Commit
  • 💨 Faster user list loading. User lists now load significantly faster by deferring profile image loading; images are fetched separately in parallel by the browser, improving caching and reducing database load. Commit
  • 🔍 Web search result count. The built-in search_web tool now respects the admin-configured "Search Result Count" setting instead of always returning 5 results when using Native Function Calling mode. #21373, #21371
  • 🔐 SCIM externalId support. SCIM-enabled deployments can now store and manage externalId for user provisioning, enabling better integration with identity providers like Microsoft Entra ID and Okta. #21099, #21280, Commit
  • 🌐 Translation updates. Portuguese (Brazil) translations were updated.

Fixed

  • 🛡️ Public sharing security fix. Fixed a security issue where users with write access could see the Public sharing option regardless of their actual public sharing permission, and direct API calls could bypass frontend sharing restrictions. #21358, #21356
  • 🔒 Direct model access control fix. Model access control changes now persist correctly for direct Ollama and OpenAI models that don't have database entries, and error messages display properly instead of showing "[object Object]". Commit, #21377
  • 💭 Reasoning trace rendering performance. Reasoning traces from models now render properly without being split into many fragments, preventing browser slowdowns during streaming responses. #21348, Commit
  • 🖥️ ARM device compatibility fix. Fixed an issue where upgrading to 0.8.0 would fail to start on ARM devices (like Raspberry Pi 4) due to torch 2.10.0 causing SIGILL errors; now pinned to torch<=2.9.1. #21385, #21349
  • 🗄️ Skills PostgreSQL compatibility fix. Fixed a PostgreSQL compatibility issue where creating or listing skills would fail with a TypeError, while SQLite worked correctly. #21372, Commit, #21365
  • 🗄️ PostgreSQL analytics query fix. Fixed an issue where retrieving chat IDs by model ID would fail on PostgreSQL due to incompatible DISTINCT ordering, while SQLite worked correctly. #21347, Commit
  • 🗃️ SQLite cascade delete fix. Deleting chats now properly removes all associated messages in SQLite, matching PostgreSQL behavior and preventing orphaned data. #21362
  • ☁️ Ollama Cloud model naming fix. Fixed an issue where using Ollama Cloud models would fail with "Model not found" errors because ":latest" was incorrectly appended to model names. #21386
  • 🛠️ Knowledge selector tooltip z-index. Fixed an issue where tooltips in the "Select Knowledge" dropdown were hidden behind the menu, making it difficult to read knowledge item names and descriptions. #21375
  • 🎯 Model selector scroll position. The model selector dropdown now correctly scrolls to and centers the currently selected model when opened, and resets scroll position when reopened. Commit
  • 🐛 Sync modal unexpected appearance. Fixed an issue where the Sync Modal would appear unexpectedly after enabling the "Community Sharing" feature if the user had previously visited the app with the sync parameter. #21376
  • 🎨 Knowledge collection layout fix. Fixed a layout issue in the Knowledge integration menu where long collection names caused indentation artifacts and now properly truncate with ellipsis. #21374
  • 📝 Metadata processing crash fix. Fixed a latent bug where processing document metadata containing certain keys (content, pages, tables, paragraphs, sections, figures) would cause a RuntimeError due to dictionary mutation during iteration. #21105
  • 🔑 Password validation regex fix. Fixed the password validation regex by adding the raw string prefix, ensuring escape sequences like d and w are interpreted correctly. #21400, #21399

Changed

  • ⚠️ Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility.
v0.8.0 [Feb 12, 2026] details → github →

[0.8.0] - 2026-02-12

> [!CAUTION] > ⚠️ Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility. > [!WARNING] > ⚠️ Long-Running Database Migration: This release includes a migration for the chat_message table that can take a significant amount of time to complete, especially in larger deployments with extensive chat histories. Please plan for adequate downtime and allow the migration to finish completely without interruption.

Added

  • 📊 Analytics dashboard. Administrators now have access to an Analytics dashboard showing model usage statistics, token consumption by model and user, user activity rankings, and time-series charts with hourly or daily granularity; clicking any model opens a detail view with feedback history, associated tags, and chat browser, and results can be filtered by user group. #21106, Commit, Commit
  • 🎯 Experimental support for Skills. Open WebUI now supports the Skill standard — allowing users to create and manage reusable AI skills with detailed instructions, reference them in chats using the "$" command, or attach them to specific models for automatic context in conversations. #21312
  • 🧪 Experimental support for Open Responses protocol. Connections can now be configured to use the experimental Open Responses protocol instead of Chat Completions, enabling native support for extended thinking, streaming reasoning tokens, and richer tool call handling for compatible providers. Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit
  • 👥 Redesigned access control UI. The access control UI was redesigned with a more intuitive interface that makes it easier to add multiple groups at once. #21277
  • 👤 Per-user resource sharing. Resources including knowledge bases, prompts, models, tools, channels, and base models can now be shared directly to individual users alongside the existing per-group sharing capability. #21277
  • 📨 Message queuing. Messages can now be queued while a response is generating rather than being blocked, allowing you to continue your train of thought; queued messages are automatically combined and sent when generation completes, and can be edited, deleted, or sent immediately from the input area. Commit, Commit
  • 💡 Active task sidebar indicator. Users can now see which chats have active tasks running directly in the sidebar. Commit
  • 📝 Prompt version control. Prompts now include version control with full history tracking, allowing users to commit changes with messages, view past versions, compare differences between versions, and roll back to previous versions when needed. #20945
  • 🏷️ Prompt tags. Prompts can now be organized with tags, and users can filter the prompt workspace by tag to quickly find related prompts across large collections. #20945
  • 🐍 Native function calling code execution. Code execution now works with Native function calling mode, allowing models to autonomously run Python code for calculations, data analysis, and visualizations without requiring Default mode. #20592, Docs:#998
  • 🚀 Async web search. Web search operations now run asynchronously in the background, allowing users to continue interacting with the application while searches complete. #20630
  • Search debouncing. Search operations across the application now respond more efficiently with debouncing that reduces unnecessary server requests while typing, improving responsiveness when searching users, groups, functions, tools, prompts, knowledge bases, notes, and when using the knowledge and prompts commands in chat. #20982, Commit, Commit, Commit
  • 🤝 Shared chats management. Users can now view and manage all their shared chats from Settings, with options to copy share links or unshare conversations they no longer want public. Commit
  • 📁 User file management. Users can now view, search, and delete all their uploaded files from Settings, providing centralized file management in one place. Commit, #21047
  • 🗑️ Shift-click quick delete. Files in the File Manager can now be quickly deleted by holding Shift and clicking the delete button, bypassing the confirmation dialog for faster bulk cleanup. #21044
  • ⌨️ Model selector shortcut. The model selector can now be opened with Ctrl+Shift+M keyboard shortcut. #21130
  • 🧠 Smarter knowledge vs web search. Models now choose more intelligently between knowledge base search and web search rather than always trying knowledge first. #21115
  • 🌍 Community model reviews. Users can now access community reviews for models directly from the model selector menu and are prompted to leave reviews after rating responses, with administrators able to disable this via the "Community Sharing" setting. Commit
  • 📄 Prompts workspace pagination. The prompts workspace now includes pagination for large prompt collections, loading 30 prompts at a time with search, filtering, and sorting capabilities for improved performance and navigation. Commit
  • 🎨 Action function HTML rendering. Action functions can now render rich HTML content directly in chat as embedded iframes, matching the capabilities that tools already had and eliminating the need for action authors to inject codeblocks. #21294, Commit
  • 🔒 Password-masked valve fields. Tool and function developers can now mark sensitive fields as passwords, which are automatically masked in the settings UI to prevent shoulder surfing and accidental exposure. #20852, Commit
  • 📋 Prompt quick copy. Prompts in the workspace now include a quick copy button for easily copying prompt content to the clipboard. Commit
  • 🔔 Dismissible notification toasts. Notification toasts for new messages and other events now include a close button that appears on hover, allowing users to dismiss them immediately instead of waiting for auto-dismissal. #21056, Commit
  • 🔔 Temporary chat notification privacy. Notifications from temporary chats now only appear on the device where the chat is running, preventing privacy leaks across logged-in sessions. #21292
  • 💡 Null chat title fallback. Notifications without chat titles now display "New Chat" instead of showing null. #21292
  • 🖼️ Concurrent image editing. Image editing operations with multiple images now complete faster by loading all images concurrently instead of sequentially. #20911
  • 📧 USER_EMAIL template variable. Users can now reference their email address in prompts and system messages using the "{{USER_EMAIL}}" template variable. #20881
  • 🔤 Alphabetical tool ordering. Tools and Functions in the Chat Controls sidebar now appear in alphabetical order, making it easier to locate specific tools when working with multiple integrations. #20871
  • 👁️ Model list status filtering. Administrators can now filter the model list by status (enabled, disabled, visible, hidden) and bulk enable or disable all filtered models at once. #20553, #20774, Commit
  • ⚙️ Per-model built-in tool toggles. Administrators can now enable or disable individual built-in tools for each model, including time utilities, memory, chat history, notes, knowledge base, and channels. #20641, Commit
  • 📑 PDF loading modes. Administrators can now choose between "page" and "single" PDF loading modes, allowing documents to be processed as individual pages or as complete documents for better chunking across page boundaries. Commit
  • 📑 Model Settings pagination. Administrators can now navigate large model lists more efficiently in Model Settings, with pagination displaying 30 models per page for smoother navigation. Commit
  • 📌 Pin read-only models. Users can now pin read-only models from the workspace. #21308, Commit
  • 🔍 Yandex search provider. Administrators can now configure Yandex as a web search provider, expanding search engine options for retrieval-augmented generation. #20922
  • 🔐 Custom password hints. Administrators can now provide custom password requirement hints to users via the "PASSWORD_VALIDATION_HINT" environment variable, making it clearer what password criteria must be met during signup or password changes. #20647, #20650
  • 🔑 OAuth token exchange. Administrators can now enable OAuth token exchange via "ENABLE_OAUTH_TOKEN_EXCHANGE", allowing external applications to authenticate users by exchanging OAuth provider tokens for Open WebUI session tokens. Commit
  • 🗄️ Weaviate custom endpoints. Administrators can now connect to self-hosted Weaviate deployments with separate HTTP and gRPC endpoints via new environment variables. #20620
  • 🛡️ MCP custom SSL certificates. Administrators can now connect to MCP servers with self-signed or custom SSL certificates via the "AIOHTTP_CLIENT_SESSION_TOOL_SERVER_SSL" environment variable. #20875, Commit
  • 🗃️ Redis Sentinel reconnection delay. Administrators using Redis Sentinel can now configure a reconnection delay via "REDIS_RECONNECT_DELAY" to prevent retry exhaustion during failover elections. #21021
  • 📡 Custom user info headers. Administrators can now customize the header names used when forwarding user information to external services, enabling compatibility with services like AWS Bedrock AgentCore that require specific header prefixes. Commit
  • 🔗 Forward user info to tool servers. User identity and chat context can now be forwarded to MCP servers and external tool servers when "ENABLE_FORWARD_USER_INFO_HEADERS" is enabled, allowing tool providers to implement per-user authorization, auditing, and rate limiting. #21092, Commit
  • 📬 External tool event emitters. External tools (OpenAPI/MCP) can now send tool events back to Open WebUI using the event emitter endpoint, as message ID is now forwarded alongside chat ID when "ENABLE_FORWARD_USER_INFO_HEADERS" is enabled. #21214
  • 📥 Playground chat export. Administrators can now export playground chats as JSON or plain text files, allowing them to save their conversations for backup or sharing outside the platform. Commit
  • 🖼️ Images playground. Administrators can now test image generation and editing directly in a new Images playground, with support for uploading source images for edits and downloading results. Commit
  • 🛠️ Dynamic dropdown valve fields. Tool and function developers can now create dropdown fields with dynamically-generated options that update based on runtime context, such as available models or user permissions. Commit
  • 🏎️ Faster profile updates. User profile updates and role changes are now faster by eliminating redundant database queries. #21011
  • 🔑 Faster authentication. User authentication is now 34% faster by combining database lookups into a single query. #21010
  • 🔋 Faster chat completions. Chat completions and embeddings now respond much faster by checking the model cache before fetching model lists, reducing Time To First Token from several seconds to subsecond for most requests. #20886, #20069
  • 🏎️ Faster Redis model list loading. Model list loading is now significantly faster when using Redis with many models, reducing API response latency by caching configuration values locally instead of making repeated Redis lookups on every model iteration. #21306
  • 💨 Faster knowledge base file batch-add. Batch-adding files to knowledge bases is now faster with a single database query instead of one query per file. #21006
  • Smoother model selector dropdown. The model selector dropdown now renders smoothly even with hundreds of models, eliminating the lag and freezing that occurred when opening the dropdown with large model lists. Commit
  • 🚗 Faster model visibility toggling. Toggling model visibility in the admin panel is now faster with optimized database access. #21009
  • 💾 Faster model access control checks. Model access control checks are now faster by batch-fetching model info and group memberships upfront instead of querying for each model. #21008
  • ⚙️ Faster model list and imports. Model list loading and model imports are now faster by eliminating redundant database queries. #21004
  • 🏃 Faster SCIM group member lookups. SCIM group member lookups are now up to 13x faster by batching user queries instead of fetching each member individually. #21005
  • 💨 Batched group member counts. Group member counts are now fetched in a single batch query when loading group lists, eliminating redundant database lookups. Commit
  • 💨 Faster bulk operations. Bulk feedback deletion and group member removal are now 4-5x faster with optimized batch operations. #21019
  • 🧠 Faster memory updates. Memory updates are now up to 39% faster by eliminating redundant database queries. #21013
  • ⚙️ Faster filter function loading. Filter function loading is now faster by batching database queries instead of fetching each function individually. #21018
  • 🖼️ Image model regex configuration. Administrators can now configure which image generation models support auto-sizing and URL responses via new regex environment variables, improving compatibility with LiteLLM and other proxies that use prefixed model names. #21126, Commit
  • 🎁 Easter eggs toggle. Administrators can now control the visibility of easter egg features via the "ENABLE_EASTER_EGGS" environment variable. Commit
  • 🔌 Independent access control updates. API endpoints now support independent access control updates for models, tools, knowledge bases, and notes, enabling finer-grained permission management. Commit, Commit, Commit
  • Screen reader accessibility. Screen reader users now hear the password field label only once on the login page, improving form navigation for assistive technology users. Commit
  • 🔄 General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
  • 🌐 Translation updates. Translations for Catalan, Finnish, Irish, French, German, Japanese, Latvian, Polish, Portuguese (Brazil), Simplified Chinese, Slovak, Spanish, and Traditional Chinese were enhanced and expanded.

Fixed

  • 🚫 LDAP authentication hang fix. LDAP authentication no longer freezes the entire service when logging in with non-existent accounts, preventing application hangs. Commit, #21300
  • Trusted Header auto-registration fix. Trusted Header Authentication now properly auto-registers new users after the first login, assigning the configured default role instead of failing for users not yet in the database. Commit
  • 🛡️ SSRF protection for image loading. External image loading now validates URLs before fetching to prevent SSRF attacks against local and private network addresses. Commit
  • 🛡️ Malformed Authorization header fix. Malformed Authorization headers no longer cause server crashes; requests are now handled gracefully instead of returning HTTP 500 errors. #20938, Commit
  • 🚪 Channel notification access control. Users without channel permissions can no longer access channels through notifications, properly enforcing access controls across all channel entry points. #20883, #20789
  • 🐛 Ollama model name suffix fix. Ollama-compatible providers that do not use ":latest" in model names can now successfully chat, fixing errors where model names were incorrectly appended with ":latest" suffixes. #21331, Commit
  • ♻️ Streaming connection cleanup. Streaming responses now properly clean up network connections when interrupted, preventing "Unclosed client session" errors from accumulating over time. #20889, #17058
  • 💾 Inline image context exhaustion fix. Inline images no longer exhaust the model's context window by including their full base64 data in chat metadata, preventing premature context exhaustion with image-heavy conversations. #20916
  • 🚀 Status indicator GPU usage fix. High GPU usage caused by the user online status indicator animation has been resolved, reducing consumption from 35-40% to near-zero in browsers with hardware acceleration. #21062, Commit
  • 🔧 Async pipeline operations. Pipeline operations now run asynchronously instead of blocking the FastAPI event loop, allowing the server to handle other requests while waiting for external pipeline API calls. #20910
  • 🔌 MCP tools regression fix. MCP tools now work reliably again after a regression in v0.7.2 that caused "cannot pickle '_asyncio.Future' object" errors when attempting to use MCP servers in chat. #20629, #20500, Commit
  • 🔗 Function chat ID propagation fix. Functions now reliably receive the chat identifier during internal task invocations like web search query generation, RAG query generation, and image prompt generation, enabling stateful functions to maintain consistent per-chat state without fragmentation. #20563, #20585
  • 💻 Markdown fence code execution fix. Code execution now works reliably when models wrap code in markdown fences, automatically stripping the backticks before execution to prevent syntax errors that affected most non-GPT models. #20941, Commit, Commit
  • 💻 ANSI code execution fix. Code execution is now reliable when LLMs include ANSI terminal color codes in their output, preventing random failures that previously caused syntax errors. #21091, Commit
  • 🗨️ Incomplete model metadata crash fix. Starting chats with models that have incomplete metadata information no longer crashes the application. #20565, Commit
  • 💬 Unavailable model crash fix. Adding message pairs with Ctrl+Shift+Enter no longer crashes when the chat's model is unavailable, showing a helpful error message instead. #20663
  • 📚 Knowledge base file upload fix. Uploading files to knowledge bases now works correctly, fixing database mapping errors that prevented file uploads. #20925, #20931
  • 🧠 Knowledge base query type fix. Knowledge base queries no longer fail intermittently when models send tool call parameters as strings instead of their expected types. #20705
  • 📚 Knowledge base reindex fix. Reindexing knowledge base files now works correctly instead of failing with duplicate content errors. #20854, #20857
  • 🔧 Multi-worker knowledge base timeout fix. In multi-worker deployments, uploading very large documents to knowledge bases no longer causes workers to be killed by health check timeouts, and administrators can now configure a custom embedding timeout via "RAG_EMBEDDING_TIMEOUT". #21158, Discussion, Commit
  • 🌅 Dark mode icon inversion fix. Icons in chat and action menus are now displayed correctly in dark mode, fixing an issue where PNG icons with "svg" in their base64 encoding were randomly inverted. #21272, Commit
  • 🛠️ Admin model write permission fix. Fixed the admin panel allowing models to be assigned write permissions, since users with write permission are not admins and cannot write. Commit
  • 🛠️ Prompt access control save fix. Prompt access control settings are now saved correctly when modifying resource permissions. Commit
  • ✏️ Knowledge base file edit fix. Editing files within knowledge bases now saves correctly and can be used for retrieval, fixing a silent failure where the save appeared successful but the file could not be searched. Commit
  • 🖼️ Reasoning section artifact rendering fix. Code blocks within model reasoning sections no longer incorrectly render as interactive artifacts, ensuring only intended output displays as previews. #20801, #20877, Commit
  • 🔐 Group resource sharing fix. Sharing resources with groups now works correctly, fixing database errors and an issue where models shared with read-only access were not visible to group members. #20666, #21043, Commit
  • 🔑 Docling API key fix. Docling API key authentication now works correctly by using the proper "X-Api-Key" header format instead of the incorrect "Bearer" authorization prefix. #20652
  • 🔌 MCP OAuth 2.1 fix. MCP OAuth 2.1 authentication now works correctly, resolving connection verification failures and 401 errors during the authorization callback. #20808, #20828, Commit
  • 💻 MATLAB syntax highlighting. MATLAB code blocks now display with proper syntax highlighting in chat messages. #20719, #20773
  • 📊 CSV export HTML entity decoding. Exporting tables to CSV now properly decodes HTML entities, ensuring special characters display correctly in the exported file. #20688
  • 📄 Markdown Header Text Splitter persistence. The "Markdown Header Text Splitter" document setting now persists correctly when disabled, preventing it from reverting to enabled after page refresh. #20929, #20930
  • 🔌 Audio service timeout handling. Audio transcription and text-to-speech requests now have proper timeouts, preventing the UI from freezing when external services don't respond. #21055
  • 💬 Reference Chats visibility fix. The "Reference Chats" option now appears in the message input menu even when the sidebar is collapsed, fixing the issue where it was hidden on mobile devices and at first load. #20827, Commit
  • 🔍 Chat search self-exclusion. The "search_chats" builtin tool now excludes the current conversation from search results, preventing redundant matches. #20718, Commit
  • 📚 Knowledge base pagination fix. Paginating through knowledge base files no longer shows duplicates or skips files when multiple documents share the same update timestamp. #20846, Commit
  • 📋 Batch file error reporting. Batch file processing operations now return properly structured error information when failures occur, making it clearer what went wrong during multi-file operations. #20795, Commit
  • ⚙️ Persistent config with Redis fix. Configuration values now respect the "ENABLE_PERSISTENT_CONFIG" setting when Redis is used, ensuring environment variables are reloaded on restart when persistent config is disabled. #20830, Commit
  • 🔧 Engine.IO logging fix. The "WEBSOCKET_SERVER_ENGINEIO_LOGGING" environment variable now works correctly, allowing administrators to configure Engine.IO logging independently from general websocket logging. #20727, Commit
  • 🌐 French language default fix. Browsers requesting French language now default to French (France) instead of French (Canada), matching standard language preference expectations. #20603, Commit
  • 🔘 Firefox delete button fix. Pressing Enter after clicking delete buttons no longer incorrectly retriggers confirmation modals in Firefox. Commit
  • 🌍 RTL table rendering fix. Chat markdown tables now correctly display right-to-left when containing RTL language content (Arabic, Hebrew, Farsi, etc.), matching the "Auto" direction setting behavior. #21160, Commit
  • 🔒 Write permission enforcement for tools. Users without write permissions are now properly prevented from editing tools, with a clear error message displayed when attempting unauthorized edits. Commit, Commit
  • 🛡️ Chat Valves permission enforcement. The "Allow Chat Valves" permission is now properly enforced in the integrations menu, preventing users from bypassing access restrictions. #20691
  • 📝 Audit log browser session fix. Audit logs now properly capture all user activity including browser-based sessions, not just API key requests. #20651, Commit, Commit
  • 🎨 Long model name truncation. Long model names and IDs in the admin panel now truncate properly to prevent visual overflow, with full names visible on hover. #20696
  • 👥 Admin user filter pagination fix. Filtering users in the admin panel now automatically resets to page 1, preventing empty results when searching from pages beyond the first. #20723, Commit
  • 🔎 Username search on workspace pages. Searching for users by username now works correctly on Models, Knowledge, and Functions workspace pages, making it easier to find resources owned by specific users. #20780
  • 🗑️ File deletion orphaned embeddings fix. Deleting files now properly removes associated knowledge base embeddings, preventing orphaned data from accumulating. Commit
  • 🧹 Event listener memory leak fix. Memory leaks caused by event listeners not being cleaned up during navigation have been resolved. #20913
  • 🐳 Docker Ollama update fix. Ollama can now be updated within Docker containers after adding a missing zstd dependency. #20994, #21052
  • 📝 Workspace duplicate API request fix. The prompts, knowledge, and models workspaces no longer make duplicate API requests when loading. Commit, Commit
  • 📡 OpenTelemetry Redis cluster fix. OpenTelemetry instrumentation now works correctly with Redis cluster mode deployments. #21129
  • 🐳 Airgapped NLTK tokenizer fix. Document extraction now works reliably in airgapped environments after container restarts by bundling NLTK tokenizer data in the Docker image. #21165, #21150
  • 💬 Channel model mention crash fix. Mentioning a model in channels no longer crashes when older thread messages have missing data. #21112
  • 🔧 OpenAPI tool import fix. Importing OpenAPI tool specifications no longer crashes when parameters lack explicit name fields, fixing compatibility with complex request body definitions. #21121, Commit
  • 🌐 Webpage attachment content fix. Attaching webpages to chats now retrieves full content instead of only metadata, fixing an unawaited coroutine in SSL certificate verification. #21166, Commit
  • 💾 File upload settings persistence. File upload settings (Max Upload Size, Max File Count, Image Compression dimensions) now persist correctly and are no longer erased when updating other RAG configuration settings. #21057, Commit
  • 📦 Tool call expand/collapse fix. Tool call results in chat can now be expanded and collapsed again after a recent refactor disabled this behavior. #21205
  • 🪛 Disabled API endpoint bypass fix. Fixed Ollama/OpenAI API endpoints bypassing 'ENABLE_OLLAMA_API' and 'ENABLE_OPENAI_API' flags when the 'url_idx' parameter was provided. Endpoints now properly return a 503 error with a clear "API is disabled" message instead of attempting to connect and logging confusing connection errors.
  • 🛠️ OpenSearch 3.0 compatibility fix. Document uploads to knowledge bases now work correctly when using OpenSearch backend with opensearch-py >= 3.0.0, fixing a TypeError that previously caused failures. #21248, #20649
  • 📱 Gboard multi-line paste fix. Multi-line text pasted from Gboard on Android now inserts correctly instead of being replaced with a single newline, fixing a bug where the keyboard's clipboard suggestion strip sent text via 'insertText' events instead of standard paste events. #21265
  • 🔧 Batch embeddings endpoint fix. The '/api/embeddings' endpoint now correctly returns separate embeddings for each input string when processing batch requests to Ollama providers. Commit, #21279
  • 🗝️ SSL verification for embeddings. SSL certificate verification now respects the "AIOHTTP_CLIENT_SESSION_SSL" setting for OpenAI and Azure OpenAI embedding requests, allowing connections to self-signed certificate endpoints when disabled. Commit
  • 🔧 Tool call HTML entity fix. Models now receive properly formatted tool call results in multi-turn conversations, fixing an issue where HTML entities caused malformed content that was hard to parse. #20755
  • 💾 Duplicate inline image context fix. Inline images no longer exhaust the model's context window by including their full base64 data in chat metadata, preventing premature context exhaustion with image-heavy conversations. #20916
  • 🐛 OpenAI model cache lookup fix. The OpenAI API router model lookup was corrected to use the proper model identifier when checking the cache, ensuring consistent and correct model retrieval during chat completions. #21327
  • 🐛 Ollama latest suffix fix. Ollama-compatible providers that don't use ":latest" in model names can now successfully chat, fixing errors where model names were incorrectly appended with ":latest" suffixes. #21331, Commit
  • OpenAI endpoint detection fix. OpenAI API endpoint detection was corrected to use exact hostname matching instead of substring matching, preventing third-party providers with similar URL patterns from being incorrectly filtered. Commit
  • 🛠️ RedisCluster task stopping fix. Task stopping now works correctly in RedisCluster deployments, fixing an issue where tasks would remain active after cancellation attempts. #20803, Commit
  • 📎 Citation parsing error fix. Citation parsing no longer crashes when builtin tools return error responses, fixing AttributeError issues when tools like search_web fail. #21071

Changed

  • ‼️ Database Migration Required — This release includes database schema changes; multi-worker, multi-server, or load-balanced deployments must update all instances simultaneously rather than performing rolling updates, as running mixed versions will cause application failures due to schema incompatibility between old and new instances.
  • ⚠️ Chat Message Table Migration — This release includes a new chat message table migration that can take a significant amount of time to complete in larger deployments with extensive chat histories. Administrators should plan for adequate maintenance windows and allow the migration to complete fully without interruption. Running the migration with insufficient time or resources may result in data integrity issues.
  • 🔗 Prompt ID-based URLs. Prompts now use unique ID-based URLs instead of command-based URLs, allowing more flexible command renaming without breaking saved links or integrations. #20945
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @aindriu80, @Edgaras0x4E, @tomasloksa, @ctolon, @ShirasawaSama, @sjhddh, @PeterDaveHello, @schneider-f, @joaoback, @silentoplayz, @tremlin, @aleixdorca, @veeceey, @Algorithm5838, @jannikstdl, @Th3Un1q3, @EntropyYue, @Classic298, @pelmennoteam, @mickeytheseal, @hsienz

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) @amd, @roosi-gmbh, @rndmcnlly, @feddersen-group, @SRKConsulting, @mushmax, @icanbwell, @Classic298, @loitragg, @haka4githu6, @silenceroom, @walsermedia, @crizCraig, @GenieDev101, @CubicleGangster, @TOWaB, @comet-ml, @catalyst-net-nz, @JrdnHans, @hkosm, @joaoback, @LuxTronic
v0.7.2 [Jan 10, 2026] details → github →

[0.7.2] - 2026-01-10

Fixed

  • ⚡ Users no longer experience database connection timeouts under high concurrency due to connections being held during LLM calls, telemetry collection, and file status streaming. #20545, #20542, #20547
  • 📝 Users can now create and save prompts in the workspace prompts editor without encountering errors. Commit
  • 🎙️ Users can now use local Whisper for speech-to-text when STT_ENGINE is left empty (the default for local mode). #20534
  • 📊 The Evaluations page now loads faster by eliminating duplicate API calls to the leaderboard and feedbacks endpoints. Commit
  • 🌐 Fixed missing Settings tab i18n label keys. #20526
v0.7.1 [Jan 9, 2026] details → github →

[0.7.1] - 2026-01-09

Fixed

  • Improved reliability for low-spec and SQLite deployments. Fixed page timeouts by disabling database session sharing by default, improving stability for resource-constrained environments. Users can re-enable via 'DATABASE_ENABLE_SESSION_SHARING=true' if needed. #20520
v0.7.0 [Jan 9, 2026] details → github →

[0.7.0] - 2026-01-09

Added

  • 🤖 Native Function Calling with Built-in Tools. Users can now ask models to perform multi-step tasks that combine web research, knowledge base queries, note-taking, and image generation in a single conversation—for example, "research the latest on X, save key findings to a note, and generate an infographic." Requires models with native function calling support and function calling mode set to "Native" in Chat Controls. #19397, Commit
  • 🧠 Users can now ask the model to find relevant context from their notes, past chats, and channel messages—for example, "what did I discuss about project X last week?" or "find the conversation where I brainstormed ideas for Y." Commit
  • 📚 Users can now ask the model to search their knowledge bases and retrieve documents without manually attaching files—for example, "find the section about authentication in our API docs" or "what do our internal guidelines say about X?" Commit
  • 💭 Users with models that support interleaved thinking now get more refined results from multi-step workflows, as the model can analyze each tool's output before deciding what to do next.
  • 🔍 When models invoke web search, search results appear as clickable citations in real-time for full source verification. Commit
  • 🎚️ Users can selectively disable specific built-in tools (timestamps, memory, chat history, notes, web search, knowledge bases) per model via the model editor's capabilities settings. Commit
  • 👁️ Pending tool calls are now displayed during response generation, so users know which tools are being invoked. Commit
  • 📁 Administrators can now limit the number of files that can be uploaded to folders using the "FOLDER_MAX_FILE_COUNT" setting, preventing resource exhaustion from bulk uploads. #19810, Commit, Commit
  • ⚡ Users experience transformative speed improvements across the entire application through completely reengineered database connection handling, delivering noticeably faster page loads, butter-smooth interactions, and rock-solid stability during intensive operations like user management and bulk data processing. Commit, Commit, Commit, Commit, Commit, Commit
  • 🚀 Users experience significantly faster initial page load times through dynamic loading of document processing libraries, reducing the initial bundle size. #20200, #20202, #20203, #20204
  • 💨 Administrators experience dramatically faster user list loading through optimized database queries that eliminate N+1 query patterns, reducing query count from 1+N to just 2 total queries regardless of user count. #20427
  • 📋 Notes now load faster through optimized database queries that batch user lookups instead of fetching each note's author individually. Commit
  • 💬 Channel messages, pinned messages, and thread replies now load faster through batched user lookups instead of individual queries per message. #20458, #20459, #20460
  • 🔗 Users can now click citation content links to jump directly to the relevant portion of source documents with automatic text highlighting, making it easier to verify AI responses against their original sources. #20116, Commit
  • 📌 Users can now pin or hide models directly from the Workspace Models page and Admin Settings Models page, making it easier to manage which models appear in the sidebar without switching to the chat interface. #20176
  • 🔎 Administrators can now quickly find settings using the new search bar in the Admin Settings sidebar, which supports fuzzy filtering by category names and related keywords like "whisper" for Audio or "rag" for Documents. #20434
  • 🎛️ Users can now view read-only models in the workspace models list, with clear "Read Only" badges indicating when editing is restricted. #20243, #20369
  • 📝 Users can now view read-only prompts in the workspace prompts list, with clear "Read Only" badges indicating when editing is restricted. #20368
  • 🔧 Users can now view read-only tools in the workspace tools list, with clear "Read Only" badges indicating when editing is restricted. #20243, #20370
  • 📂 Searching for files is now significantly faster, especially for users with large file collections. Commit
  • 🏆 The Evaluations leaderboard now calculates Elo ratings on the backend instead of in the browser, improving performance and enabling topic-based model ranking through semantic search. #15392, #20476, Commit
  • 📊 The Evaluations leaderboard now includes a per-model activity chart displaying daily wins and losses as a diverging bar chart, with 30-day, 1-year, and all-time views using weekly aggregation for longer timeframes.
  • 🎞️ Users can now upload animated GIF and WebP formats as model profile images, with animation preserved by skipping resize processing for these file types. Commit
  • 📸 Users uploading profile images for users, models, and arena models now benefit from WebP compression at 80% quality instead of JPEG, resulting in significantly smaller file sizes and faster uploads while maintaining visual quality. Commit
  • ⭐ Action Function developers can now update message favorite status using the new "chat:message:favorite" event, enabling the development of pin/unpin message actions without race conditions from frontend auto-save. #20375
  • 🌐 Users with OpenAI-compatible models that have web search capabilities now see URL citations displayed as sources in the interface. #20172, Commit
  • 📰 Users can now dismiss the "What's New" changelog modal permanently using the X button, matching the behavior of the "Okay, Let's Go!" button. #20258
  • 📧 Administrators can now configure the admin contact email displayed in the Account Pending overlay directly from the Admin Panel instead of only through environment variables. #12500, #20260
  • 📄 Administrators can now enable markdown header text splitting as a preprocessing step that works with either character or token splitting, through the new "ENABLE_MARKDOWN_HEADER_TEXT_SPLITTER" setting. Commit, Commit, Commit
  • 🧩 Administrators can now set a minimum chunk size target using the "CHUNK_MIN_SIZE_TARGET" setting to merge small markdown header chunks with neighbors, which improves retrieval quality by eliminating tiny meaningless fragments, significantly speeds up document processing and embedding, reduces storage costs, and lowers embedding API costs or local compute requirements. #19595, #20314, Commit
  • 💨 Administrators can now enable KV prefix caching optimization by setting "RAG_SYSTEM_CONTEXT" to true, which injects RAG context into the system message instead of user messages, enabling models to reuse cached tokens for follow-up questions instead of reprocessing the entire context on each turn, significantly improving response times and reducing costs for cloud-based models. #20301, #20317
  • 🖼️ Administrators and Action developers can now control image generation denoising steps per-request using a steps parameter, allowing Actions and API calls to override the global IMAGE_STEPS configuration for both ComfyUI and Automatic1111 engines. #20337
  • 🗄️ Administrators running multi-pod deployments can now designate a master pod to handle database migrations using the "ENABLE_DB_MIGRATIONS" environment variable. Commit
  • 🎙️ Administrators can now configure Whisper's compute type using the "WHISPER_COMPUTE_TYPE" environment variable to fix compatibility issues with CUDA/GPU deployments. Commit
  • 🔍 Administrators can now control sigmoid normalization for CrossEncoder reranking models using the "SENTENCE_TRANSFORMERS_CROSS_ENCODER_SIGMOID_ACTIVATION_FUNCTION" environment variable, enabled by default for proper relevance threshold behavior with MS MARCO models. #19999 #20228
  • 🔒 Administrators can now disable SSL certificate verification for external tools using the "REQUESTS_VERIFY" environment variable, enabling integration with self-signed certificates for Tika, Ollama embeddings, and external rerankers. #19968, Commit
  • 📈 Administrators can now control audit log output destinations using "ENABLE_AUDIT_STDOUT" and "ENABLE_AUDIT_LOGS_FILE" environment variables, allowing audit logs to be sent to container logs for centralized logging systems. #20114, Commit
  • 🛡️ Administrators can now restrict non-admin user access to Interface Settings through per-user or per-group permissions. #20424
  • 🧠 Administrators can now globally enable or disable the Memories feature and control access through per-user or per-group permissions, with the Personalization tab automatically hidden when the feature is disabled. #20462
  • 🟢 Administrators can now globally enable or disable user status visibility through the "ENABLE_USER_STATUS" setting in Admin Settings. #20488
  • 🪝 Channel managers can now create webhooks to allow external services to post messages to channels without authentication. Commit
  • 📄 In the model editor users can now disable the "File Context" capability to skip automatic file content extraction and injection, forwarding raw messages with file attachment metadata instead for use with custom tools or future built-in file access tools. Commit, Docs:Commit
  • 🔊 In the model editor users can now configure a specific TTS voice for each model, overriding user preferences and global defaults to give different AI personas distinct voices. #3097, Commit
  • 👥 Administrators now have three granular group sharing permission options instead of a simple on/off toggle, allowing them to choose between "No one", "Members", or "Anyone" for who can share content to each group. Commit
  • 📦 Administrators can now export knowledge bases as zip files containing text files for backup and archival purposes. #20120, Commit
  • 🚀 Administrators can now create an admin account automatically at startup via "WEBUI_ADMIN_EMAIL", "WEBUI_ADMIN_PASSWORD", and "WEBUI_ADMIN_NAME" environment variables, enabling headless and automated deployments without exposing the signup page. #17654, Commit
  • 🦆 Administrators can now select a specific search backend for DDGS instead of random selection, with options including Bing, Brave, DuckDuckGo, Google, Wikipedia, Yahoo, and others. #20330, #20366
  • 🧭 Administrators can now configure custom Jina Search API endpoints using the "JINA_API_BASE_URL" environment variable, enabling region-specific deployments such as EU data processing. #19718, Commit
  • 🔥 Administrators can now configure Firecrawl timeout values using the "FIRECRAWL_TIMEOUT" environment variable to control web scraping wait times. #19973, Commit
  • 💾 Administrators can now use openGauss as the vector database backend for knowledge base document storage and retrieval. #20179
  • 🔄 Various improvements were implemented across the application to enhance performance, stability, and security.
  • 📊 Users can now sync their anonymous usage statistics to the Open WebUI Community platform to power community leaderboards, drive model evaluations, and contribute to open-source AI research that benefits everyone, all while keeping conversations completely private (only metadata like model names, message counts, and ratings are shared). By sharing your stats, you're helping the community identify which models perform best, contributing to transparent AI benchmarking, and supporting the collective effort to make AI better for all. You can also download your stats as JSON for personal analysis.
  • 🌐 Translations for German, Portuguese (Brazil), Spanish, Simplified Chinese, Traditional Chinese, and Polish were enhanced and expanded.

Fixed

  • 🔊 Text-to-speech now correctly splits on newlines in addition to punctuation, so markdown bullet points and lists are spoken as separate sentences instead of being merged together. #5924, Commit
  • 🔒 Users are now protected from stored XSS vulnerabilities in iFrame embeds for citations and response messages through configurable same-origin sandbox settings instead of hardcoded values. #20209, #20210
  • 🔑 Image Generation, Web Search, and Audio (TTS/STT) API endpoints now enforce permission checks on the backend, closing a security gap where disabled features could previously be accessed via direct API calls. #20471
  • 🛠️ Tools and Tool Servers (MCP and OpenAPI) now enforce access control checks on the backend, ensuring users can only access tools they have permission to use even via direct API calls. #20443, Commit
  • 🔁 System prompts are no longer duplicated when using native function calling, fixing an issue where the prompt would be applied twice during tool-calling workflows. Commit
  • 🗂️ Knowledge base uploads to folders no longer fail when "FOLDER_MAX_FILE_COUNT" is unset, fixing an issue where the default null value caused all uploads to error. Commit
  • 📝 The "Create Note" button in the chat input now correctly hides for users without Notes permissions instead of showing and returning a 401 error when clicked. #20486, Commit
  • 📊 The Evaluations page no longer crashes when administrators have large amounts of feedback data, as the leaderboard now fetches only the minimal required fields instead of loading entire conversation snapshots. #20476, #20489, Commit
  • 💬 Users can now export chats, use the Ask/Explain popup, and view chat lists correctly again after these features were broken by recent refactoring changes that caused 500 and 400 server errors. #20146, #20205, #20206, #20212
  • 💭 Users no longer experience data corruption when switching between chats during background operations like image generation, where messages from one chat would appear in another chat's history. #20266
  • 🛡️ Users no longer encounter critical chat stability errors, including duplicate key errors from circular message dependencies, null message access during chat loading, and errors in the chat overview visualization. #20268
  • 📡 Users with Channels no longer experience infinite recursion and connection pool exhaustion when fetching threaded replies, preventing RecursionError crashes during chat history loading. #20299, Commit
  • 📎 Users no longer encounter TypeError crashes when viewing messages with file attachments that have undefined URL properties. #20343
  • 🔐 Users with MCP integrations now experience reliable OAuth 2.1 token refresh after access token expiration through proper Protected Resource discovery, preventing integration failures that caused sessions to be deleted. #19794, #20138, #20291, Commit, Commit
  • 📚 Users who belong to multiple groups can now see Knowledge Bases shared with those groups, fixing an issue where they would disappear when shared with more than one group. #20124, #20229, Commit
  • 📂 Users now see the correct Knowledge Base name when hovering over # file references in chat input instead of "undefined". #20329, #20333
  • 📋 Users now see notes displayed in correct chronological order within their time range groupings, fixing an issue where insertion order was not preserved. Commit
  • 📑 Users collaborating on notes now experience proper content sync when initializing from both HTML and JSON formats, fixing sync failures in collaborative editing sessions. Commit
  • 🔎 Users searching notes can now find hyphenated words and variations with spaces, so searching "todo" now finds "to-do" and "to do". Commit
  • 📥 Users no longer experience false duplicate file warnings when reuploading files after initial processing failed, as the file hash is now only stored after successful processing completion. #19264, #20282, Commit
  • 💾 Users experience significantly improved page load performance as model profile images now cache properly in browsers, avoiding unnecessary image refetches. Commit
  • 🎨 Users can now successfully edit uploaded images instead of having new images generated, fixing an issue introduced by the file storage refactor where images with type "file" and content_type starting with "image/" weren't being recognized as editable images. #20237, #20169, #20239, Commit
  • 🌐 Users writing in Persian and Arabic now see properly displayed right-to-left text in the notes section through automatic text direction detection. #19743, #20102, Commit
  • 🤖 Users can now successfully @ mention models in Channels instead of experiencing silent failures. Commit
  • 📋 Users on Windows now see correctly preserved line breaks when using the {{CLIPBOARD}} variable through CRLF to LF normalization. #19370, #20283
  • 📁 Users now see the Knowledge Selector dropdown correctly displayed above the Create Folder modal instead of being hidden behind it. #20219, #20213
  • 🌅 Users now see profile images in non-PNG formats like SVG, JPEG, and GIF displayed correctly instead of appearing broken. #20171
  • 🆕 Non-admin users with disabled temporary chat permissions can now successfully create new chats and use pinned models from the sidebar. #20336, #20367, Commit
  • 🎛️ Users can now successfully use workspace models in chat, fixing "Model not found" errors that occurred when using custom model presets. #20340, #20344, Commit, Commit
  • 🔁 Users can now regenerate messages without crashes when the parent message is missing or corrupted in the chat history. #20264
  • ✏️ Users no longer experience TipTap rich text editor crashes with "editor view is not available" errors when plugins or async methods try to access the editor after it has been destroyed. #20266
  • 📗 Administrators with bypass access control enabled now correctly have write access to all knowledge bases. #20371
  • 🔍 Administrators using local CrossEncoder reranking models now see proper relevance threshold behavior through MS MARCO model score normalization to the 0-1 range via sigmoid activation. #19999, #20228
  • 🎯 Administrators using local SentenceTransformers embedding engine now benefit from proper batch size settings, preventing excessive memory usage from the default batch size of 32. #20053, #20054, Commit
  • 🔧 Administrators and users in offline mode or restricted environments like uv, poetry, and NixOS no longer experience crashes when Tools and Functions have frontmatter requirements, as pip installation is now skipped when offline mode is enabled. #20320, #20321, Commit
  • 📄 Administrators can now properly configure the MinerU document parsing service as the MinerU Cloud API key field is now available in the Admin Panel Documents settings. #20319, #20328
  • ⚠️ Administrators no longer see SyntaxWarnings for invalid escape sequences in password validation regex patterns. #20298, Commit
  • 🎨 Users with ComfyUI workflows now see only the intended final output images in chat instead of duplicate images from intermediate processing nodes like masks, crops, or segmentation previews. #20158, #20182
  • 🖼️ Users with image generation enabled no longer see false vision capability warnings, allowing them to send follow-up messages after generating images and to send images to non-vision models for image editing. #20129, #20256
  • 🔌 Administrators no longer experience infinite loading screens when invalid or MCP-style configurations are used with OpenAPI connection types for external tools. #20207, #20257
  • 📥 Administrators no longer encounter TypeError crashes during SHA256 verification when uploading GGUF models via URL, fixing 500 Internal Server Error crashes. #20263
  • 🚦 Users with Brave Search now experience automatic retry with a 1-second delay when hitting rate limits, preventing failures when sequential requests exceed the 1 request per second limit, though this only works reliably when web search concurrency is set to a maximum of 1. #15134, #20255
  • 🗄️ Administrators with Redis Sentinel deployments no longer experience crashes during websocket disconnections due to improper async-generator handling in the YDocManager. #20142, #20145
  • 🔐 Administrators using SCIM group management no longer encounter 500 errors when working with groups that have no members. #20187
  • 🔗 Users now experience more reliable citations from AI models, especially when using smaller or weaker models that may not format citation references perfectly. Commit
  • 🕸️ Administrators can now successfully save WebSearch settings without encountering validation errors for domain filter lists, YouTube language settings, or timeout values. #20422
  • 📦 Administrators installing with the uv package manager now experience successful installation after deprecated dependencies that were causing conflicts were removed. #20177, #20192
  • ⏱️ Administrators using custom "AIOHTTP_CLIENT_TIMEOUT" settings now see the configured timeout correctly applied to embedding generation, OAuth discovery, webhook calls, and tool/function loading instead of falling back to the default 300-second timeout. Commit

Changed

  • ⚠️ This release includes a major overhaul of database connection handling in the backend that requires all instances in multi-worker, multi-server, or load-balanced deployments to be updated simultaneously; running mixed versions will cause failures due to incompatible database connection management between old and new instances.
  • 📝 Administrators who previously used the standalone "Markdown (Header)" text splitter must now switch to "character" or "token" mode with the new "ENABLE_MARKDOWN_HEADER_TEXT_SPLITTER" toggle enabled, as document chunking now applies markdown header splitting as a preprocessing step before character or token splitting. Commit, Commit, Commit
  • 🖼️ Users no longer see the "Generate Image" action button in chat message interfaces; custom function should be used. Commit
  • 🔗 Administrators will find the Admin Evaluations page at the new URL "/admin/evaluations/feedback" instead of "/admin/evaluations/feedbacks" to use the correct uncountable form of the word. #20296
  • 🔐 Scripts or integrations that directly called Image Generation, Web Search, or Audio APIs while those features were disabled in the Admin UI will now receive 403 Forbidden errors, as backend permission enforcement has been added to match frontend restrictions. #20471
  • 👥 The default group sharing permission changed from "Members" to "Anyone", meaning users can now share content to any group configured with "Anyone" permission regardless of their membership in that group. Commit
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @ShirasawaSama, @BLACKTHOMAS, @imsamurai, @jannikstdl, @silentoplayz, @joaoback, @rgaricano, @silentoplayz, @Classic298, @majiayu000, @Ithanil, @vincentsunx, @landerrosette, @BarerRocket2678, @rgaricano

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) @amd, @roosi-gmbh, @rndmcnlly, @feddersen-group, @SRKConsulting, @mushmax, @icanbwell, @loitragg, @haka4githu6, @silenceroom, @crizCraig, @GenieDev101, @CubicleGangster, @TOWaB, @Classic298, @comet-ml, @FominVO, @catalyst-net-nz, @JrdnHans, @hkosm, @VeroFess, @joaoback, @walsermedia, @LuxTronic
v0.6.43 [Dec 22, 2025] details → github →

[0.6.43] - 2025-12-22

Fixed

  • 🐍 Python dependency installation issues were resolved by correcting pip dependency handling, preventing installation failures in certain environments and improving setup reliability. Commit
  • 🎙️ Speech-to-Text default content type handling was fixed and refactored to ensure correct MIME type usage, improving compatibility across STT providers and preventing transcription errors caused by incorrect defaults. Commit
  • 🖼️ Temporary chat image handling was fixed and refactored, ensuring images generated or edited in temporary chats are correctly processed, stored, and displayed without inconsistencies or missing references. Commit
  • 🎨 Image action button fixed, restoring the ability to trigger image generation, editing, and related image actions from the chat UI. Commit
v0.6.42 [Dec 21, 2025] details → github →

[0.6.42] - 2025-12-21

> [!CAUTION] > This release includes database schema changes; multi-worker, multi-server, or load-balanced deployments must update all instances simultaneously rather than performing rolling updates, as running mixed versions will cause application failures due to schema incompatibility between old and new instances. > [!WARNING] > This release includes dependency version bumps; existing plugins may need to update their imports to remain compatible, as outdated import paths or APIs may cause build or runtime errors.

Added

  • 📚 Knowledge base file management was overhauled with server-side pagination loading 30 files at a time instead of loading entire collections at once, dramatically improving performance and responsiveness for large knowledge bases with hundreds or thousands of files, reducing initial load times and memory usage while adding server-side search and filtering, view options for files added by the user versus shared files, customizable sorting by name or date, and file authorship tracking with upload timestamps. Commit
  • ✨ Knowledge base file management was enhanced with automatic list refresh after file operations ensuring immediate UI updates, improved permission validation at the model layer, and automatic channel-file association for files uploaded with channel metadata. Commit
  • 🔎 Knowledge command in chat input now uses server-side search for massive performance increases when selecting knowledge bases and files. Commit
  • 🗂️ Knowledge workspace listing now uses server-side pagination loading 30 collections at a time with new search endpoints supporting query filtering and view options for created versus shared collections. Commit
  • 📖 Knowledge workspace now displays all collections with read access including shared read-only collections, enabling users to discover and explore knowledge bases they don't own while maintaining proper access controls through visual "Read Only" badges and automatically disabled editing controls for name, description, file uploads, content editing, and deletion operations. Commit
  • 📁 Bulk website and YouTube video attachment now supports adding multiple URLs at once (newline-separated) with automatic YouTube detection and transcript retrieval, processed sequentially to prevent resource strain, and both websites and videos can now be added directly to knowledge bases through the workspace UI. Commit, #6202, #19587, #8231
  • 🪟 Sidebar width is now resizable on desktop devices with persistent storage in localStorage, enforcing minimum and maximum width constraints (220px to 480px) while all layout components now reference the dynamic sidebar width via CSS variables for consistent responsive behavior. Commit
  • 📝 Notes feature now supports server-side search and filtering with view options for notes created by the user versus notes shared with them, customizable sorting by name or date in both list and grid view modes within a redesigned interface featuring consolidated note management controls in a unified header, group-based permission sharing with read, write, and read-only access control displaying note authorship and sharing status for better collaboration, and paginated infinite scroll for improved performance with large note collections. Commit
  • 👁️ Notes now support read-only access permissions, allowing users to share notes for viewing without granting edit rights, with the editor automatically becoming non-editable and appropriate UI indicators when read-only access is detected. Commit
  • 📄 Notes can now be created directly from the chat input field, allowing users to save drafted messages or content as notes without navigation or retyping. Commit
  • 🪟 Sidebar folders, channels, and pinned models sections now automatically expand when creating new items or pinning models, providing immediate visual feedback for user actions. Commit, #19929
  • 📋 Chat file associations are now properly tracked in the database through a new "chat_file" table, enabling accurate file management across chats and ensuring proper cleanup of files when chats are deleted, while improving database consistency in multi-node deployments. Commit
  • 🖼️ User-uploaded images are now automatically converted from base64 to actual file storage on the server, eliminating large inline base64 strings from being stored in chat history and reducing message payload sizes while enabling better image management and sharing across multiple chats. Commit
  • 📸 Shared chats with generated or edited images now correctly display images when accessed by other users by properly linking generated images to their chat and message through the chat_file table, ensuring images remain accessible in shared chat links. Commit, #19393
  • 📊 File viewer modal was significantly enhanced with native-like viewers for Excel/CSV spreadsheets rendering as interactive scrollable tables with multi-sheet navigation support, Markdown documents displaying with full typography including headers, lists, links, and tables, and source code files showing syntax highlighting, all accessible through a tabbed interface defaulting to raw text view. #20035, #2867
  • 📏 Chat input now displays an expand button in the top-right corner when messages exceed two lines, providing optional access to a full-screen editor for composing longer messages with enhanced workspace and visibility while temporarily disabling the main input to prevent editing conflicts. Commit
  • 💬 Channel message data lazy loading was implemented, deferring attachment and file metadata retrieval until needed to improve initial message list load performance. Commit
  • 🖼️ Channel image upload handling was optimized to process and store compressed images directly as files rather than inline data, improving memory efficiency and message load times. Commit
  • 🎥 Video file playback support was added to channel messages, enabling inline video viewing with native player controls. Commit
  • 🔐 LDAP authentication now supports user entries with multiple username attributes, correctly handling cases where the username field contains a list of values. Commit, #19878
  • 👨‍👩‍👧‍👦 The "ENABLE_PUBLIC_ACTIVE_USERS_COUNT" environment variable now allows restricting active user count visibility to administrators, reducing backend load and addressing privacy concerns in large deployments. #20027, #13026
  • 🚀 Models page search input performance was optimized with a 300ms debounce to reduce server load and improve responsiveness. #19832
  • 💨 Frontend performance was optimized by preventing unnecessary API calls for API Keys and Channels features when they are disabled in admin settings, reducing backend noise and improving overall system efficiency. #20043, #19967
  • 📎 Channel file association tracking was implemented, automatically linking uploaded files to their respective channels with a dedicated association table enabling better organization and future file management features within channels. Commit
  • 👥 User profile previews now display group membership information for easier identification of user roles and permissions. Commit
  • 🌍 The "SEARXNG_LANGUAGE" environment variable now allows configuring search language for SearXNG queries, replacing the hardcoded "en-US" default with a configurable setting that defaults to "all". #19909
  • ⏳ The "MINERU_API_TIMEOUT" environment variable now allows configuring request timeouts for MinerU document processing operations. #20016, #18495
  • 🔧 The "RAG_EXTERNAL_RERANKER_TIMEOUT" environment variable now allows configuring request timeouts for external reranker operations. #20049, #19900
  • 🎨 OpenAI GPT-IMAGE 1.5 model support was added for image generation and editing with automatic image size capabilities. Commit
  • 🔑 The "OAUTH_AUDIENCE" environment variable now allows OAuth providers to specify audience parameters for JWT access token generation. #19768
  • ⏰ The "REDIS_SOCKET_CONNECT_TIMEOUT" environment variable now allows configuring socket connection timeouts for Redis and Sentinel connections, addressing potential failover and responsiveness issues in distributed deployments. #19799, Docs:#882
  • ⏱️ The "WEB_LOADER_TIMEOUT" environment variable now allows configuring request timeouts for SafeWebBaseLoader operations. #19804, #19734
  • 🚀 Models API endpoint performance was optimized through batched model loading, eliminating N+1 queries and significantly reducing response times when filtering models by user permissions. Commit
  • 🔀 Custom model fallback handling was added, allowing workspace-created custom models to automatically fall back to the default chat model when their configured base model is not found; set "ENABLE_CUSTOM_MODEL_FALLBACK" to true to enable, preventing workflow disruption when base models are removed or renamed, while ensuring other requests remain unaffected. Commit, #19985
  • 📡 A new /feedbacks/all/ids API endpoint was added to return only feedback IDs without metadata, significantly improving performance for external integrations working with large feedback collections. Commit
  • 📈 An experimental chat usage statistics endpoint (GET /api/v1/chats/stats/usage) was added with pagination support (50 chats per page) and comprehensive per-chat analytics including model usage counts, user and assistant message breakdowns, average response times calculated from message timestamps, average content lengths, and last activity timestamps; this endpoint remains experimental and not suitable for production use as it performs intensive calculations by processing entire message histories for each chat without caching. Commit
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Translations for German, Danish, Finnish, Korean, Portuguese (Brazil), Simplified Chinese, Traditional Chinese, Catalan, and Spanish were enhanced and expanded.

Fixed

  • ⚡ External reranker operations were optimized to prevent event loop blocking by offloading synchronous HTTP requests to a thread pool using asyncio.to_thread(), eliminating application freezes during RAG reranking queries. #20049, #19900
  • 💭 Text loss in the explanation feature when using the "CHAT_STREAM_RESPONSE_CHUNK_MAX_BUFFER_SIZE" environment variable was resolved by correcting newline handling in streaming responses. #19829
  • 📚 Knowledge base batch file addition failures caused by Pydantic validation errors are now prevented by making the meta field optional in file metadata responses, allowing files without metadata to be processed correctly. #20022, #14220
  • 🗄️ PostgreSQL null byte insertion failures when attaching web pages or processing embedded content are now prevented by consolidating text sanitization logic across chat messages, web search results, and knowledge base documents, removing null bytes and invalid UTF-8 surrogates before database insertion. #20072, #19867, #18201, #15616
  • 🎫 MCP OAuth 2.1 token exchange failures are now fixed by removing duplicate credential passing that caused "ID1,ID1" concatenation and 401 errors from the token endpoint. #20076, #19823
  • 📝 Notes "Improve" action now works correctly after the streaming API change in v0.6.41 by ensuring uploaded files are fully retrieved with complete metadata before processing, restoring note improvement and summarization functionality. Commit, #20078
  • 🔑 MCP OAuth 2.1 tool servers now work correctly in multi-node deployments through lazy-loading of OAuth clients from Redis-synced configuration, eliminating 404 errors when load balancers route requests to nodes that didn't process the original config update. #20076, #19902, #19901
  • 🧩 Chat loading failures when channels permissions were disabled are now prevented through graceful error handling. Commit
  • 🔍 Search bar freezing and crashing issues in Models, Chat, and Archived Chat pages caused by excessively long queries exceeding server URL limits were resolved by truncating queries to 500 characters, and knowledge base layout shifting with long names was fixed by adjusting flex container properties. #19832
  • 🎛️ Rate limiting errors (HTTP 429) with Brave Search free tier when generating multiple queries are now prevented through asyncio.Semaphore-based concurrency control applied globally to all search engines. #20070, #20003, #14107, #15134
  • 💥 UI crashes and white screen errors caused by null chat lists during loading or network failures were prevented by adding null safety checks to chat iteration in folder placeholders and archived chat modals. #19898
  • 🧩 Chat overview tab crashes caused by undefined model references were resolved by adding proper null checks when accessing deleted or ejected models. #19935
  • 🔄 MultiResponseMessages component crashes when navigating chat history after removing or changing selected models are now prevented through proper component re-initialization. Commit, #18599
  • 🚫 Channel API endpoint access is now correctly blocked when channels are globally disabled, preventing users with channel permissions from accessing channel data via API requests when the feature is turned off in admin settings. #19957, #19914
  • 👤 User list popup display in the admin panel was fixed to correctly track user identity when sorting or filtering changes the list order, preventing popups from showing incorrect user information. Commit, #20046
  • 👥 User selection in the "Edit User Group" modal now preserves pagination position, allowing administrators to select multiple users across pages without resetting to page 1. #19959
  • 📸 Model avatar images now update immediately in the admin models list through proper Cache-Control headers, eliminating the need for manual cache clearing. #19959
  • 🔒 Temporary chat permission enforcement now correctly prevents users from enabling the feature through personal settings when disabled in default or group permissions. #19785
  • 🎨 Image editing with reference images now correctly uses both previously generated images and newly uploaded reference images. Commit
  • 🧠 Image generation and editing operations are now explicitly injected into system context, improving LLM comprehension even for weaker models so they reliably acknowledge operations instead of incorrectly claiming they cannot generate images. Commit
  • 📑 Source citation rendering errors when citation syntax appeared in user messages or contexts without source data were resolved. Commit
  • 📄 DOCX file parsing now works correctly in temporary chats through client-side text extraction, preventing raw data from being displayed. Commit
  • 🔧 Pipeline settings save failures when valve properties contain null values are now handled correctly. #19791
  • ⚙️ Model usage settings are now correctly preserved when switching between models instead of being unexpectedly cleared or reset. #19868, #19549
  • 🛡️ Invalid PASSWORD_VALIDATION_REGEX_PATTERN configurations no longer cause startup warnings, with automatic fallback to the default pattern when regex compilation fails. #20058
  • 🎯 The DefaultFiltersSelector component in model settings now correctly displays when only global toggleable filters are present, enabling per-model default configuration. #20066
  • 🎤 Audio file upload failures caused by MIME type matching issues with spacing variations and codec parameters were resolved by implementing proper MIME type parsing. #17771, #17761
  • ⌨️ Regenerate response keyboard shortcut now only activates when chat input is selected, preventing unintended regeneration when modals are open or other UI elements are focused. #19875
  • 📋 Log truncation issues in Docker deployments during application crashes were resolved by disabling Python stdio buffering, ensuring complete diagnostic output is captured. #19844
  • 🔴 Redis cluster compatibility issues with disabled KEYS command were resolved by replacing blocking KEYS operations with production-safe SCAN iterations. #19871, #15834
  • 🔤 File attachment container layout issues when using RTL languages were resolved by applying chat direction settings to file containers across all message types. #19891, #19742
  • 🔃 Ollama model list now automatically refreshes after model deletion, preventing deleted models from persisting in the UI and being inadvertently re-downloaded during subsequent pull operations. #19912
  • 🌐 Ollama Cloud web search now correctly applies domain filtering to search results. Commit
  • 📜 Tool specification serialization now preserves non-ASCII characters including Chinese text, improving LLM comprehension and tool selection accuracy by avoiding Unicode escape sequences. #19942
  • 🛟 Model editor stability was improved with null safety checks for tools, functions, and file input operations, preventing crashes when stores are undefined or file objects are invalid. #19939
  • 🗣️ MoA completion handling stability was improved with null safety checks for response objects, boolean casting for settings, and proper timeout type definitions. #19921
  • 🎛️ Chat functionality failures caused by empty logit_bias parameter values are now prevented by properly handling empty strings in the parameter parsing middleware. #19982
  • 🔏 Administrators can now delete read-only knowledge bases from deleted users, resolving permission issues that previously prevented cleanup of orphaned read-only content. Commit
  • 💾 Cloned prompts and tools now correctly preserve their access control settings instead of being reset to null, preventing unintended visibility changes when duplicating private or restricted items. #19960, #19360
  • 🎚️ Text scale adjustment buttons in Interface Settings were fixed to correctly increment and decrement the scale value. #19699
  • 🎭 Group channel invite button text visibility in light theme was corrected to display properly against dark backgrounds. #19828
  • 📁 The move button is now hidden when no folders exist, preventing display of non-functional controls. #19705
  • 📦 Qdrant client dependency was updated to resolve startup version incompatibility warnings. #19757
  • 🧮 The "ENABLE_ASYNC_EMBEDDING" environment variable is now correctly applied to embedding operations when configured exclusively via environment variables. #19748
  • 🌄 The "COMFYUI_WORKFLOW_NODES" and "IMAGES_EDIT_COMFYUI_WORKFLOW_NODES" environment variables are now correctly loaded and parsed as JSON lists, and the configuration key name was corrected from "COMFYUI_WORKFLOW" to "COMFYUI_WORKFLOW_NODES". #19918, #19886
  • 💫 Channel name length is now limited to 128 characters with validation to prevent display issues caused by excessively long names. Commit
  • 🔐 Invalid PASSWORD_VALIDATION_REGEX_PATTERN configurations no longer cause startup warnings, with automatic fallback to the default pattern when regex compilation fails. #20058
  • 🔎 Bocha search with filter list functionality now works correctly by returning results as a list instead of a dictionary wrapper, ensuring compatibility with result filtering operations. Commit, #19733

Changed

  • ⚠️ This release includes database schema changes; multi-worker, multi-server, or load-balanced deployments must update all instances simultaneously rather than performing rolling updates, as running mixed versions will cause application failures due to schema incompatibility between old and new instances.
  • 📡 WEB_SEARCH_CONCURRENT_REQUESTS default changed from 10 to 0 (unlimited) — This setting now applies to all search engines instead of only DuckDuckGo; previously users were implicitly limited to 10 concurrent queries, but now have unlimited parallel requests by default; set to 1 for sequential execution if using rate-limited APIs like Brave free tier. #20070
  • 💾 SQLCipher absolute path handling was fixed to properly support absolute database paths (e.g., "/app/data.db") instead of incorrectly stripping leading slashes and converting them to relative paths; this restores functionality for Docker volume mounts and explicit absolute path configurations while maintaining backward compatibility with relative paths. #20074
  • 🔌 Knowledge base file listing API was redesigned with paginated responses and new filtering parameters; the GET /knowledge/{id}/files endpoint now returns paginated results with user attribution instead of embedding all files in the knowledge object, which may require updates to custom integrations or scripts accessing knowledge base data programmatically. Commit
  • 🗑️ Legacy knowledge base support for deprecated document collections and tag-based collections was removed; users with pre-knowledge base documents must migrate to the current knowledge base system as legacy items will no longer appear in selectors or command menus. Commit
  • 🔨 Source-level log environment variables (AUDIO_LOG_LEVEL, CONFIG_LOG_LEVEL, MODELS_LOG_LEVEL, etc.) were removed as they provided limited configuration options and added significant complexity across 100+ files; the GLOBAL_LOG_LEVEL environment variable, which already took precedence over source-level settings, now serves as the exclusive logging configuration method. #20045
  • 🐍 LangChain was upgraded to version 1.2.0, representing a major dependency update and significant progress toward Python 3.13 compatibility while improving RAG pipeline functionality for document loading and retrieval operations. #19991
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @rgaricano, @jekuaitk, @borisboc, @ascodeasice, @westbrook-ai, @Cyp9715, @joaoback, @aleixdorca, @taylorwilsdon, @Ithanil, @Zyfax, @okamototk, @ndrsfel, @kim-seokjin, @michi-onl, @ShirasawaSama, @broskees, @silentoplayz, @zengxy, @jolow99, @bitsofinfo, @Kylapaallikko, @Classic298

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) @amd, @roosi-gmbh, @rndmcnlly, @feddersen-group, @SRKConsulting, @mushmax, @icanbwell, @loitragg, @haka4githu6, @silenceroom, @crizCraig, @GenieDev101, @CubicleGangster, @TOWaB, @Classic298, @comet-ml, @FominVO, @catalyst-net-nz, @JrdnHans, @hkosm, @VeroFess, @joaoback, @LuxTronic
v0.6.41 [Dec 2, 2025] details → github →

[0.6.41] - 2025-12-02

> [!CAUTION] > ⚠️ IMPORTANT for Multi-Instance Deployments: This release includes database schema changes; multi-worker, multi-server, or load-balanced deployments must update all instances simultaneously rather than performing rolling updates, as running mixed versions will cause application failures due to schema incompatibility between old and new instances.

Added

  • 🚦 Sign-in rate limiting was implemented to protect against brute force attacks, limiting login attempts to 15 per 3-minute window per email address using Redis with automatic fallback to in-memory storage when Redis is unavailable. Commit
  • 📂 Administrators can now globally disable the folders feature and control user-level folder permissions through the admin panel, enabling minimalist interface configurations for deployments that don't require workspace organization features. #19529, #19210, #18459, #18299
  • 👥 Group channels were introduced as a new channel type enabling membership-based collaboration spaces where users explicitly join as members rather than accessing through permissions, with support for public or private visibility, automatic member inclusion from specified user groups, member role tracking with invitation metadata, and post-creation member management allowing channel managers to add or remove members through the channel info modal. Commit, Commit
  • 💬 Direct Message channels were introduced with a dedicated channel type selector and multi-user member selection interface, enabling private conversations between specific users without requiring full channel visibility. Commit
  • 📨 Direct Message channels now support a complete user-to-user messaging system with member-based access control, automatic deduplication for one-on-one conversations, optional channel naming, and distinct visual presentation using participant avatars instead of channel icons. Commit
  • 🙈 Users can now hide Direct Message channels from their sidebar while preserving message history, with automatic reactivation when new messages arrive from other participants, providing a cleaner interface for managing active conversations. Commit
  • ☑️ A comprehensive user selection component was added to the channel creation modal, featuring search functionality, sortable user lists, pagination support, and multi-select checkboxes for building Direct Message participant lists. Commit
  • 🔴 Channel unread message count tracking was implemented with visual badge indicators in the sidebar, automatically updating counts in real-time and marking messages as read when users view channels, with join/leave functionality to manage membership status. Commit
  • 📌 Message pinning functionality was added to channels, allowing users to pin important messages for easy reference with visual highlighting, a dedicated pinned messages modal accessible from the navbar, and complete backend support for tracking pinned status, pin timestamp, and the user who pinned each message. Commit, Commit
  • 🟢 Direct Message channels now display an active status indicator for one-on-one conversations, showing a green dot when the other participant is currently online or a gray dot when offline. Commit, Commit
  • 🆔 Users can now start Direct Message conversations directly from user profile previews by clicking the "Message" button, enabling quick access to private messaging without navigating away from the current channel. Commit
  • ⚡ Channel messages now appear instantly when sent using optimistic UI rendering, displaying with a pending state while the server confirms delivery, providing a more responsive messaging experience. Commit
  • 👍 Channel message reactions now display the names of users who reacted when hovering over the emoji, showing up to three names with a count for additional reactors. Commit
  • 🛠️ Channel creators can now edit and delete their own group and DM channels without requiring administrator privileges, enabling users to manage the channels they create independently. Commit
  • 🔌 A new API endpoint was added to directly get or create a Direct Message channel with a specific user by their ID, streamlining programmatic DM channel creation for integrations and frontend workflows. Commit
  • 💭 Users can now set a custom status with an emoji and message that displays in profile previews, the sidebar user menu, and Direct Message channel items in the sidebar, with the ability to clear status at any time, providing visibility into availability or current focus similar to team communication platforms. Commit, Commit
  • 📤 A group export API endpoint was added, enabling administrators to export complete group data including member lists for backup and migration purposes. Commit
  • 📡 A new API endpoint was added to retrieve all users belonging to a specific group, enabling programmatic access to group membership information for administrative workflows. Commit
  • 👁️ The admin user list now displays an active status indicator next to each user, showing a visual green dot for users who have been active within the last three minutes. Commit
  • 🔑 The admin user edit modal now displays OAuth identity information with a per-provider breakdown, showing each linked identity provider and its associated subject identifier separately. #19573
  • 🧩 OAuth role claim parsing now respects the "OAUTH_ROLES_SEPARATOR" configuration, enabling proper parsing of roles returned as comma-separated strings and providing consistent behavior with group claim handling. #19514
  • 🎛️ Channel feature access can now be controlled through both the "USER_PERMISSIONS_FEATURES_CHANNELS" environment variable and group permission toggles in the admin panel, allowing administrators to restrict channel functionality for specific users or groups while defaulting to enabled for all users. Commit
  • 🎨 The model editor interface was refined with access control settings moved to a dedicated modal, group member counts now displayed when configuring permissions, reorganized layout with improved visual hierarchy, and redesigned prompt suggestions cards with tooltips for field guidance. Commit, Commit
  • 🏗️ Knowledge base file management was rebuilt with a dedicated database table replacing the previous JSON array storage, enabling pagination support for large knowledge bases, significantly faster file listing performance, and more reliable file-knowledge base relationship tracking. Commit
  • ☁️ Azure Document Intelligence model selection was added, allowing administrators to specify which model to use for document processing via the "DOCUMENT_INTELLIGENCE_MODEL" environment variable or admin UI setting, with "prebuilt-layout" as the default. #19692, Docs:#872
  • 🚀 Milvus multitenancy vector database performance was improved by removing manual flush calls after upsert operations, eliminating rate limit errors and reducing load on etcd and MinIO/S3 storage by allowing Milvus to manage segment persistence automatically via its WAL and auto-flush policies. #19680
  • ✨ Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌍 Translations for German, French, Portuguese (Brazil), Catalan, Simplified Chinese, and Traditional Chinese were enhanced and expanded.

Fixed

  • 🔄 Tool call response token duplication was fixed by removing redundant message history additions in non-native function calling mode, resolving an issue where tool results were included twice in the context and causing 2x token consumption. #19656, Commit
  • 🛡️ Web search domain filtering was corrected to properly block results when any resolved hostname or IP address matches a blocked domain, preventing blocked sites from appearing in search results due to permissive hostname resolution logic that previously allowed results through if any single resolved address passed the filter. #19670, #19669
  • 🧠 Custom models based on Ollama or OpenAI now properly inherit the connection type from their base model, ensuring they appear correctly in the "Local" or "External" model selection tabs instead of only appearing under "All". #19183, Commit
  • 🐍 SentenceTransformers embedding initialization was fixed by updating the transformers dependency to version 4.57.3, resolving a regression in v0.6.40 where document ingestion failed with "'NoneType' object has no attribute 'encode'" errors due to a bug in transformers 4.57.2. #19512, #19513
  • 📈 Active user count accuracy was significantly improved by replacing the socket-based USER_POOL tracking with a database-backed heartbeat mechanism, resolving long-standing issues where Redis deployments displayed inflated user counts due to stale sessions never being cleaned up on disconnect. #16074, Commit
  • 👥 Default group assignment now applies consistently across all user registration methods including OAuth/SSO, LDAP, and admin-created users, fixing an issue where the "DEFAULT_GROUP_ID" setting was only being applied to users who signed up via the email/password signup form. #19685
  • 🔦 Model list filtering in workspaces was corrected to properly include models shared with user groups, ensuring members can view models they have write access to through group permissions. #19461, Commit
  • 🖼️ User profile image display in preview contexts was fixed by resolving a Pydantic validation error that prevented proper rendering. Commit
  • 🔒 Redis TLS connection failures were resolved by updating the python-socketio dependency to version 5.15.0, restoring support for the "rediss://" URL schema. #19480, #19488
  • 📝 MCP tool server configuration was corrected to properly handle the "Function Name Filter List" as both string and list types, preventing AttributeError when the field is empty and ensuring backward compatibility. #19486, Commit, Commit
  • 📎 Web page attachment failures causing TypeError on metadata checks were resolved by correcting async threadpool parameter passing in vector database operations. #19493, Commit
  • 💾 Model allowlist persistence in multi-worker deployments was fixed by implementing Redis-based shared state for the internal models dictionary, ensuring configuration changes are consistently visible across all worker processes. #19395, Commit
  • ⏳ Chat history infinite loading was prevented by enhancing message data structure to properly track parent message relationships, resolving issues where missing parentId fields caused perpetual loading states. #19225, Commit
  • 🩹 Database migration robustness was improved by automatically detecting and correcting missing primary key constraints on the user table, ensuring successful schema upgrades for databases with non-standard configurations. #19487, Commit
  • 🏷️ OAuth group assignment now updates correctly on first login when users transition from admin to user role, ensuring group memberships reflect immediately when group management is enabled. #19475, #19476
  • 💡 Knowledge base file tooltips now properly display the parent collection name when referencing files with the hash symbol, preventing confusion between identically-named files in different collections. #19491, Commit
  • 🔐 Knowledge base file access inconsistencies were resolved where authorized non-admin users received "Not found" or permission errors for certain files due to race conditions during upload causing mismatched collection_name values, with file access validation now properly checking against knowledge base file associations. #18689, #19523, Commit
  • 📦 Knowledge API batch file addition endpoint was corrected to properly handle async operations, resolving 500 Internal Server Error responses when adding multiple files simultaneously. #19538, Commit
  • 🤖 Embedding model auto-update functionality was fixed to properly respect the "RAG_EMBEDDING_MODEL_AUTO_UPDATE" setting by correctly passing the flag to the model path resolver, ensuring models update as expected when the auto-update option is enabled. #19687
  • 📉 API response payload sizes were dramatically reduced by removing base64-encoded profile images from most endpoints, eliminating multi-megabyte responses caused by high-resolution avatars and enabling better browser caching. #19519, Commit
  • 📞 Redundant API calls on the admin user overview page were eliminated by consolidating reactive statements, reducing four duplicate requests to a single efficient call and significantly improving page load performance. #19509, Commit
  • 🧹 Duplicate API calls on the workspace models page were eliminated by removing redundant model list fetching, reducing two identical requests to a single call and improving page responsiveness. #19517, Commit
  • 🔘 The model valves button was corrected to prevent unintended form submission by adding explicit button type attribute, ensuring it no longer triggers message sending when the input area contains text. #19534
  • 🗑️ Ollama model deletion was fixed by correcting the request payload format and ensuring the model selector properly displays the placeholder option. Commit
  • 🎨 Image generation in temporary chats was fixed by correctly handling local chat sessions that are not persisted to the database. Commit
  • 🕵️‍♂️ Audit logging was fixed by correctly awaiting the async user authentication call, resolving failures where coroutine objects were passed instead of user data. #19658, Commit
  • 🌙 Dark mode select dropdown styling was corrected to use proper background colors, fixing an issue where dropdown borders and hover states appeared white instead of matching the dark theme. #19693, #19442
  • 🔍 Milvus vector database query filtering was fixed by correcting string quote handling in filter expressions and using the proper parameter name for queries, resolving false "duplicate content detected" errors that prevented uploading multiple files to knowledge bases. #19602, #18119, #16345, #17088, #18485
  • 🆙 Milvus multitenancy vector database was updated to use query_iterator() for improved robustness and consistency with the standard Milvus implementation, fixing the same false duplicate detection errors and improving handling of large result sets in multi-tenant deployments. #19695

Changed

  • ⚠️ IMPORTANT for Multi-Instance Deployments — This release includes database schema changes; multi-worker, multi-server, or load-balanced deployments must update all instances simultaneously rather than performing rolling updates, as running mixed versions will cause application failures due to schema incompatibility between old and new instances.
  • 👮 Channel creation is now restricted to administrators only, with the channel add button hidden for regular users to maintain organizational control over communication channels. Commit
  • ➖ The active user count indicator was removed from the bottom-left user menu in the sidebar to streamline the interface. Commit
  • 🗂️ The user table was restructured with API keys migrated to a dedicated table supporting future multi-key functionality, OAuth data storage converted to a JSON structure enabling multiple identity providers per user account, and internal column types optimized from TEXT to JSON for the "info" and "settings" fields, with automatic migration preserving all existing data and associations. #19573
  • 🔄 The knowledge base API was restructured to support the new file relationship model.
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @Classic298, @ShirasawaSama, @tobiasge, @RomualdYT, @joaoback, @kjpoccia, @gerhardj-b, @aleixdorca, @acwoo97, @matthew-kusz, @stevessr, @HennieLP

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) @amd, @roosi-gmbh, @rndmcnlly, @feddersen-group, @SRKConsulting, @mushmax, @icanbwell, @loitragg, @haka4githu6, @silenceroom, @GenieDev101, @CubicleGangster, @TOWaB, @Classic298, @comet-ml, @FominVO, @catalyst-net-nz, @JrdnHans, @hkosm, @VeroFess, @joaoback, @walsermedia, @LuxTronic
v0.6.40 [Nov 25, 2025] details → github →

[0.6.40] - 2025-11-25

Fixed

  • 🗄️ A critical PostgreSQL user listing performance issue was resolved by removing a redundant count operation that caused severe database slowdowns and potential timeouts when viewing user lists in admin panels.
v0.6.39 [Nov 25, 2025] details → github →

[0.6.39] - 2025-11-25

Added

  • 💬 A user list modal was added to channels, displaying all users with access and featuring search, sorting, and pagination capabilities. Commit
  • 💬 Channel navigation now displays the total number of users with access to the channel. Commit
  • 🔌 Tool servers and MCP connections now support function name filtering, allowing administrators to selectively enable or block specific functions using allow/block lists. Commit
  • ⚡ A toggle to disable parallel embedding processing was added via "ENABLE_ASYNC_EMBEDDING", allowing sequential processing for rate-limited or resource-constrained local embedding setups. #19444
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Localization improvements were made for German (de-DE) and Portuguese (Brazil) translations.

Fixed

  • 📝 Inline citations now render correctly within markdown lists and nested elements instead of displaying as "undefined" values. #19452
  • 👥 Group member selection now works correctly without randomly selecting other users or causing the user list to jump around. #19426
  • 👥 Admin panel user list now displays the correct total user count and properly paginates 30 items per page after fixing database query issues with group member joins. #19429
  • 🔍 Knowledge base reindexing now works correctly after resolving async execution chain issues by implementing threadpool workers for embedding operations. #19434
  • 🖼️ OpenAI image generation now works correctly after fixing a connection adapter error caused by incorrect URL formatting. #19435

Changed

  • 🔧 BREAKING: Docling configuration has been consolidated from individual environment variables into a single "DOCLING_PARAMS" JSON configuration and now supports API key authentication via "DOCLING_API_KEY", requiring users to migrate existing Docling settings to the new format. #16841, #19427
  • 🔧 The environment variable "REPLACE_IMAGE_URLS_IN_CHAT_RESPONSE" has been renamed to "ENABLE_CHAT_RESPONSE_BASE64_IMAGE_URL_CONVERSION" for naming consistency.
v0.6.38 [Nov 24, 2025] details → github →

[0.6.38] - 2025-11-24

Fixed

  • 🔍 Hybrid search now works reliably after recent changes.
  • 🛠️ Tool server saving now handles errors gracefully, preventing failed saves from impacting the UI.
  • 🔐 SSO/OIDC code fixed to improve login reliability and better handle edge cases.
v0.6.37 [Nov 24, 2025] details → github →

[0.6.37] - 2025-11-24

Added

  • 🔐 Granular sharing permissions are now available with two-tiered control separating group sharing from public sharing, allowing administrators to independently configure whether users can share workspace items with groups or make them publicly accessible, with separate permission toggles for models, knowledge bases, prompts, tools, and notes, configurable via "USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_SHARING", "USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_PUBLIC_SHARING", and corresponding environment variables for other workspace item types, while groups can now be configured to opt-out of sharing via the "Allow Group Sharing" setting. Commit, Commit
  • 🔐 Password policy enforcement is now available with configurable validation rules, allowing administrators to require specific password complexity requirements via "ENABLE_PASSWORD_VALIDATION" and "PASSWORD_VALIDATION_REGEX_PATTERN" environment variables, with default pattern requiring minimum 8 characters including uppercase, lowercase, digit, and special character. #17794
  • 🔐 Granular import and export permissions are now available for workspace items, introducing six separate permission toggles for models, prompts, and tools that are disabled by default for enhanced security. #19242
  • 👥 Default group assignment is now available for new users, allowing administrators to automatically assign newly registered users to a specified group for streamlined access control to models, prompts, and tools, particularly useful for organizations with group-based model access policies. #19325, #17842
  • 🔒 Password-based authentication can now be fully disabled via "ENABLE_PASSWORD_AUTH" environment variable, enforcing SSO-only authentication and preventing password login fallback when SSO is configured. #19113
  • 🖼️ Large stream chunk handling was implemented to support models that generate images directly in their output responses, with configurable buffer size via "CHAT_STREAM_RESPONSE_CHUNK_MAX_BUFFER_SIZE" environment variable, resolving compatibility issues with models like Gemini 2.5 Flash Image. #18884, #17626
  • 🖼️ Streaming response middleware now handles images in delta updates with automatic base64 conversion, enabling proper display of images from models using the "choices[0].delta.images.image_url" format such as Gemini 2.5 Flash Image Preview on OpenRouter. #19073, #19019
  • 📈 Model list API performance was optimized by pre-fetching user group memberships and removing profile image URLs from response payloads, significantly reducing both database queries and payload size for instances with large model lists, with profile images now served dynamically via dedicated endpoints. #19097, #18950
  • ⏩ Batch file processing performance was improved by reducing database queries by 67% while ensuring data consistency between vector and relational databases. #18953
  • 🚀 Chat import performance was dramatically improved by replacing individual per-chat API requests with a bulk import endpoint, reducing import time by up to 95% for large chat collections and providing user feedback via toast notifications displaying the number of successfully imported chats. #17861
  • ⚡ Socket event broadcasting performance was optimized by implementing user-specific rooms, significantly reducing server overhead particularly for users with multiple concurrent sessions. #18996
  • 🗄️ Weaviate is now supported as a vector database option, providing an additional choice for RAG document storage alongside existing ChromaDB, Milvus, Qdrant, and OpenSearch integrations. #14747
  • 🗄️ PostgreSQL pgvector now supports HNSW index types and large dimensional embeddings exceeding 2000 dimensions through automatic halfvec type selection, with configurable index methods via "PGVECTOR_INDEX_METHOD", "PGVECTOR_HNSW_M", "PGVECTOR_HNSW_EF_CONSTRUCTION", and "PGVECTOR_IVFFLAT_LISTS" environment variables. #19158, #16890
  • 🔍 Azure AI Search is now supported as a web search provider, enabling integration with Azure's cognitive search services via "AZURE_AI_SEARCH_API_KEY", "AZURE_AI_SEARCH_ENDPOINT", and "AZURE_AI_SEARCH_INDEX_NAME" configuration. #19104
  • ⚡ External embedding generation now processes API requests in parallel instead of sequential batches, reducing document processing time by 10-50x when using OpenAI, Azure OpenAI, or Ollama embedding providers, with large PDFs now processing in seconds instead of minutes. #19296
  • 💨 Base64 image conversion is now available for markdown content in chat responses, automatically uploading embedded images exceeding 1KB and replacing them with file URLs to reduce payload size and resource consumption, configurable via "REPLACE_IMAGE_URLS_IN_CHAT_RESPONSE" environment variable. #19076
  • 🎨 OpenAI image generation now supports additional API parameters including quality settings for GPT Image 1, configurable via "IMAGES_OPENAI_API_PARAMS" environment variable or through the admin interface, enabling cost-effective image generation with low, medium, or high quality options. #19228
  • 🖼️ Image editing can now be independently enabled or disabled via admin settings, allowing administrators to control whether sequential image prompts trigger image editing or new image generation, configurable via "ENABLE_IMAGE_EDIT" environment variable. #19284
  • 🔐 SSRF protection was implemented with a configurable URL blocklist that prevents access to cloud metadata endpoints and private networks, with default protections for AWS, Google Cloud, Azure, and Alibaba Cloud metadata services, customizable via "WEB_FETCH_FILTER_LIST" environment variable. #19201
  • ⚡ Workspace models page now supports server-side pagination dramatically improving load times and usability for instances with large numbers of workspace models.
  • 🔍 Hybrid search now indexes file metadata including filenames, titles, headings, sources, and snippets alongside document content, enabling keyword queries to surface documents where search terms appear only in metadata, configurable via "ENABLE_RAG_HYBRID_SEARCH_ENRICHED_TEXTS" environment variable. #19095
  • 📂 Knowledge base upload page now supports folder drag-and-drop with recursive directory handling, enabling batch uploads of entire directory structures instead of requiring individual file selection. #19320
  • 🤖 Model cloning is now available in admin settings, allowing administrators to quickly create workspace models based on existing base models through a "Clone" option in the model dropdown menu. #17937
  • 🎨 UI scale adjustment is now available in interface settings, allowing users to increase the size of the entire interface from 1.0x to 1.5x for improved accessibility and readability, particularly beneficial for users with visual impairments. #19186
  • 📌 Default pinned models can now be configured by administrators for all new users, mirroring the behavior of default models where admin-configured defaults apply only to users who haven't customized their pinned models, configurable via "DEFAULT_PINNED_MODELS" environment variable. #19273
  • 🎙️ Text-to-Speech and Speech-to-Text services now receive user information headers when "ENABLE_FORWARD_USER_INFO_HEADERS" is enabled, allowing external TTS and STT providers to implement user-specific personalization, rate limiting, and usage tracking. #19323, #19312
  • 🎙️ Voice mode now supports custom system prompts via "VOICE_MODE_PROMPT_TEMPLATE" configuration, allowing administrators to control response style and behavior for voice interactions. #18607
  • 🔧 WebSocket and Redis configuration options are now available including debug logging controls, custom ping timeout and interval settings, and arbitrary Redis connection options via "WEBSOCKET_SERVER_LOGGING", "WEBSOCKET_SERVER_ENGINEIO_LOGGING", "WEBSOCKET_SERVER_PING_TIMEOUT", "WEBSOCKET_SERVER_PING_INTERVAL", and "WEBSOCKET_REDIS_OPTIONS" environment variables. #19091
  • 🔧 MCP OAuth dynamic client registration now automatically detects and uses the appropriate token endpoint authentication method from server-supported options, enabling compatibility with OAuth servers that only support "client_secret_basic" instead of "client_secret_post". #19193
  • 🔧 Custom headers can now be configured for remote MCP and OpenAPI tool server connections, enabling integration with services that require additional authentication headers. #18918
  • 🔍 Perplexity Search now supports custom API endpoints via "PERPLEXITY_SEARCH_API_URL" configuration and automatically forwards user information headers to enable personalized search experiences. #19147
  • 🔍 User information headers can now be optionally forwarded to external web search engines when "ENABLE_FORWARD_USER_INFO_HEADERS" is enabled. #19043
  • 📊 Daily active user metric is now available for monitoring, tracking unique users active since midnight UTC via the "webui.users.active.today" Prometheus gauge. #19236, #19234
  • 📊 Audit log file path is now configurable via "AUDIT_LOGS_FILE_PATH" environment variable, enabling storage in separate volumes or custom locations. #19173
  • 🎨 Sidebar collapse states for model lists and group information are now persistent across page refreshes, remembering user preferences through browser-based storage. #19159
  • 🎨 Background image display was enhanced with semi-transparent overlays for navbar and sidebar, creating a seamless and visually cohesive design across the entire interface. #19157
  • 📋 Tables in chat messages now include a copy button that appears on hover, enabling quick copying of table content alongside the existing CSV export functionality. #19162
  • 📝 Notes can now be created directly via the "/notes/new" URL endpoint with optional title and content query parameters, enabling faster note creation through bookmarks and shortcuts. #19195
  • 🏷️ Tag suggestions are now context-aware, displaying only relevant tags when creating or editing models versus chat conversations, preventing confusion between model and chat tags. #19135
  • ✍️ Prompt autocompletion is now available independently of the rich text input setting, improving accessibility to the feature. #19150
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Translations for Simplified Chinese, Traditional Chinese, Portuguese (Brazil), Catalan, Spanish (Spain), Finnish, Irish, Farsi, Swedish, Danish, German, Korean, and Thai were improved and expanded.

Fixed

  • 🤖 Model update functionality now works correctly, resolving a database parameter binding error that prevented saving changes to model configurations via the Save & Update button. #19335
  • 🖼️ Multiple input images for image editing and generation are now correctly passed as an array using the "image[]" parameter syntax, enabling proper multi-image reference functionality with models like GPT Image 1. #19339
  • 📱 PWA installations on iOS now properly refresh after server container restarts, resolving freezing issues by automatically unregistering service workers when version or deployment changes are detected. #19316
  • 🗄️ S3 Vectors collection detection now correctly handles buckets with more than 2000 indexes by using direct index lookup instead of paginated list scanning, improving performance by approximately 8x and enabling RAG queries to work reliably at scale. #19238, #19233
  • 📈 Feedback retrieval performance was optimized by eliminating N+1 query patterns through database joins, adding server-side pagination and sorting, significantly reducing database load for instances with large feedback datasets. #17976
  • 🔍 Chat search now works correctly with PostgreSQL when chat data contains null bytes, with comprehensive sanitization preventing null bytes during data writes, cleaning existing data on read, and stripping null bytes during search queries to ensure reliable search functionality. #15616
  • 🔍 Hybrid search with reranking now correctly handles attribute validation, preventing errors when collection results lack expected structure. #19025, #17046
  • 🔎 Reranking functionality now works correctly after recent refactoring, resolving crashes caused by incorrect function argument handling. #19270
  • 🤖 Azure OpenAI models now support the "reasoning_effort" parameter, enabling proper configuration of reasoning capabilities for models like GPT-5.1 which default to no reasoning without this setting. #19290
  • 🤖 Models with very long IDs can now be deleted correctly, resolving URL length limitations that previously prevented management operations on such models. #18230
  • 🤖 Model-level streaming settings now correctly apply to API requests, ensuring "Stream Chat Response" toggle properly controls the streaming parameter. #19154
  • 🖼️ Image editing configuration now correctly preserves independent OpenAI API endpoints and keys, preventing them from being overwritten by image generation settings. #19003
  • 🎨 Gemini image edit settings now display correctly in the admin panel, fixing an incorrect configuration key reference that prevented proper rendering of edit options. #19200
  • 🖌️ Image generation settings menu now loads correctly, resolving validation errors with AUTOMATIC1111 API authentication parameters. #19187, #19246
  • 📅 Date formatting in chat search and admin user chat search now correctly respects the "DEFAULT_LOCALE" environment variable, displaying dates according to the configured locale instead of always using MM/DD/YYYY format. #19305, #19020
  • 📝 RAG template query placeholder escaping logic was corrected to prevent unintended replacements of context values when query placeholders appear in retrieved content. #19102, #19101
  • 📄 RAG template prompt duplication was eliminated by removing redundant user query section from the default template. #19099, #19098
  • 📋 MinerU local mode configuration no longer incorrectly requires an API key, allowing proper use of local content extraction without external API credentials. #19258
  • 📊 Excel file uploads now work correctly with the addition of the missing msoffcrypto-tool dependency, resolving import errors introduced by the unstructured package upgrade. #19153
  • 📑 Docling parameters now properly handle JSON serialization, preventing exceptions and ensuring configuration changes are saved correctly. #19072
  • 🛠️ UserValves configuration now correctly isolates settings per tool, preventing configuration contamination when multiple tools with UserValves are used simultaneously. #19185, #15569
  • 🔧 Tool selection prompt now correctly handles user messages without duplication, removing redundant query prefixes and improving prompt clarity. #19122, #19121
  • 📝 Notes chat feature now correctly submits messages to the completions endpoint, resolving errors that prevented AI model interactions. #19079
  • 📝 Note PDF downloads now sanitize HTML content using DOMPurify before rendering, preventing potential DOM-based XSS attacks from malicious content in notes. Commit
  • 📁 Archived chats now have their folder associations automatically removed to prevent unintended deletion when their previous folder is deleted. #14578
  • 🔐 ElevenLabs API key is now properly obfuscated in the admin settings page, preventing plain text exposure of sensitive credentials. #19262, #19260
  • 🔧 MCP OAuth server metadata discovery now follows the correct specification order, ensuring proper authentication flow compliance. #19244
  • 🔒 API key endpoint restrictions now properly enforce access controls for all endpoints including SCIM, preventing unintended access when "API_KEY_ALLOWED_ENDPOINTS" is configured. #19168
  • 🔓 OAuth role claim parsing now supports both flat and nested claim structures, enabling compatibility with OAuth providers that deliver claims as direct properties on the user object rather than nested structures. #19286
  • 🔑 OAuth MCP server verification now correctly extracts the access token value for authorization headers instead of sending the entire token dictionary. #19149, #19148
  • ⚙️ OAuth dynamic client registration now correctly converts empty strings to None for optional fields, preventing validation failures in MCP package integration. #19144, #19129
  • 🔐 OIDC authentication now correctly passes client credentials in access token requests, ensuring compatibility with providers that require these parameters per RFC 6749. #19132, #19131
  • 🔗 OAuth client creation now respects configured token endpoint authentication methods instead of defaulting to basic authentication, preventing failures with servers that don't support basic auth. #19165
  • 📋 Text copied from chat responses in Chrome now pastes without background formatting, improving readability when pasting into word processors. #19083

Changed

  • 🗄️ Group membership data storage was refactored from JSON arrays to a dedicated relational database table, significantly improving query performance and scalability for instances with large numbers of users and groups, while API responses now return member counts instead of full user ID arrays. #19239
  • 📄 MinerU parameter handling was refactored to pass parameters directly to the API, improving flexibility and fixing VLM backend configuration. #19105, #18446
  • 🔐 API key creation is now controlled by granular user and group permissions, with the "ENABLE_API_KEY" environment variable renamed to "ENABLE_API_KEYS" and disabled by default, requiring explicit configuration at both the global and user permission levels, while related environment variables "ENABLE_API_KEY_ENDPOINT_RESTRICTIONS" and "API_KEY_ALLOWED_ENDPOINTS" were renamed to "ENABLE_API_KEYS_ENDPOINT_RESTRICTIONS" and "API_KEYS_ALLOWED_ENDPOINTS" respectively. #18336
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @Davixk, @podden, @ShirasawaSama, @jekuaitk, @sanglt, @shargyle, @aindriu80, @krishna-medapati, @lazariv, @FlorentMair80, @mikkeschiren, @joaoback, @Cyp9715, @aleixdorca, @silentoplayz, @gerhardj-b, @siwadon-jay, @jmleksan, @dannyl1u, @rgaricano, @Kylapaallikko, @Classic298, @expruc, @tomhaynes, @diwakar-s-maurya, @xqqp, @logan-hcg, @BlakeTnr, @siavashvj, @Oleg52, @sihyeonn, @davecrab, @matiboux, @adam-skalicky

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) @amd, @roosi-gmbh, @rndmcnlly, @feddersen-group, @SRKConsulting, @mushmax, @icanbwell, @agency-agency, @Classic298, @loitragg, @haka4githu6, @silenceroom, @GenieDev101, @CubicleGangster, @TOWaB, @comet-ml, @FominVO, @catalyst-net-nz, @JrdnHans, @hkosm, @VeroFess, @joaoback, @walsermedia, @LuxTronic
v0.6.36 [Nov 6, 2025] details → github →

[0.6.36] - 2025-11-07

Added

  • 🔐 OAuth group parsing now supports configurable separators via the "OAUTH_GROUPS_SEPARATOR" environment variable, enabling proper handling of semicolon-separated group claims from providers like CILogon. #18987, #18979

Fixed

  • 🛠️ Tool calling functionality is restored by correcting asynchronous function handling in tool parameter updates. #18981
  • 🖼️ The ComfyUI image edit workflow editor modal now opens correctly when clicking the Edit button. #18978
  • 🔥 Firecrawl import errors are resolved by implementing lazy loading and using the correct class name. #18973
  • 🔌 Socket.IO CORS warning is resolved by properly configuring CORS origins for Socket.IO connections. Commit
v0.6.35 [Nov 6, 2025] details → github →

[0.6.35] - 2025-11-06

Added

  • 🖼️ Image generation system received a comprehensive overhaul with major new capabilities including full image editing support allowing users to modify existing images using text prompts with OpenAI, Gemini, or ComfyUI engines, adding Gemini 2.5 Flash Image (Nano Banana) support, Qwen Image Edit integration, resolution of base64-encoded image display issues, streamlined AUTOMATIC1111 configuration by consolidating parameters into a flexible JSON parameters field, and enhanced UI with a code editor modal for ComfyUI workflow management. #17434, #16976, Commit, Commit, Commit, Commit
  • 🔒 CORS origin validation was added to WebSocket connections as a defense-in-depth security measure against cross-site WebSocket hijacking attacks. #18411, #18410
  • 🔄 Automatic page refresh now occurs when a version update is detected via WebSocket connection, ensuring users always run the latest version without cache issues. Commit
  • 🐍 Experimental initial preparations for Python 3.13 compatibility by updating dependencies with security enhancements and cryptographic improvements. #18430, #18424
  • ⚡ Image compression now preserves the original image format instead of converting to PNG, significantly reducing file sizes and improving chat loading performance. #18506
  • 🎤 Mistral Voxtral model support was added for text-to-speech, including voxtral-small and voxtral-mini models with both transcription and chat completion API support. #18934
  • 🔊 Text-to-speech now uses a global audio queue system to prevent overlapping playback, ensuring only one TTS instance plays at a time with proper stop/start controls and automatic cleanup when switching between messages. #16152, #18744, #16150
  • 🔊 ELEVENLABS_API_BASE_URL environment variable now allows configuration of custom ElevenLabs API endpoints, enabling support for EU residency API requirements. #18402
  • 🔐 OAUTH_ROLES_SEPARATOR environment variable now allows custom role separators for OAuth roles that contain commas, useful for roles specified in LDAP syntax. #18572
  • 📄 External document loaders can now optionally forward user information headers when ENABLE_FORWARD_USER_INFO_HEADERS is enabled, enabling cost tracking, audit logs, and usage analytics for external services. #18731
  • 📄 MISTRAL_OCR_API_BASE_URL environment variable now allows configuration of custom Mistral OCR API endpoints for flexible deployment options. Commit
  • ⌨️ Keyboard shortcut hints are now displayed on sidebar buttons with a refactored shortcuts modal that accurately reflects all available hotkeys across different keyboard layouts. #18473
  • 🛠️ Tooltips now display tool descriptions when hovering over tool names on the model edit page, improving usability and providing immediate context. #18707
  • 📝 "Create a new note" from the search modal now immediately creates a new private note and opens it in the editor instead of navigating to the generic notes page. #18255
  • 🖨️ Code block output now preserves whitespace formatting with monospace font to accurately reflect terminal behavior. #18352
  • ✏️ Edit button is now available in the three-dot menu of models in the workspace section for quick access to model editing, with the menu reorganized for better user experience and Edit, Clone, Copy Link, and Share options logically grouped. #18574
  • 📌 Sidebar models section is now collapsible, allowing users to expand and collapse the pinned models list for better sidebar organization. Commit
  • 🌙 Dark mode styles for select elements were added using Tailwind CSS classes, improving consistency across the interface. #18636
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Translations for Portuguese (Brazil), Greek, German, Traditional Chinese, Simplified Chinese, Spanish, Georgian, Danish, and Estonian were enhanced and expanded.

Fixed

  • 🔒 Server-Sent Event (SSE) code injection vulnerability in Direct Connections is resolved by blocking event emission from untrusted external model servers; event emitters from direct connected model servers are no longer supported, preventing arbitrary JavaScript execution in user browsers. Commit
  • 🛡️ DOM XSS vulnerability in "Insert Prompt as Rich Text" is resolved by sanitizing HTML content with DOMPurify before rendering. Commit
  • ⚙️ MCP server cancellation scope corruption is prevented by reversing disconnection order to follow LIFO and properly handling exceptions, resolving 100% CPU usage when resuming chats with expired tokens or using multiple streamable MCP servers. #18537
  • 🔧 UI freeze when querying models with knowledge bases containing inconsistent distance metrics is resolved by properly initializing the distances array in citations. #18585
  • 🤖 Duplicate model IDs from multiple OpenAI endpoints are now automatically deduplicated server-side, preventing frontend crashes for users with unified gateway proxies that aggregate multiple providers. Commit
  • 🔐 Login failures with passwords longer than 72 bytes are resolved by safely truncating oversized passwords for bcrypt compatibility. #18157
  • 🔐 OAuth 2.1 MCP tool connections now automatically re-register clients when stored client IDs become stale, preventing unauthorized_client errors after editing tool endpoints and providing detailed error messages for callback failures. #18415, #18309
  • 🔓 OAuth 2.1 discovery, metadata fetching, and dynamic client registration now correctly use HTTP proxy environment variables when trust_env is enabled. Commit
  • 🔌 MCP server connection failures now display clear error messages in the chat interface instead of silently failing. #18892, #18889
  • 💬 Chat titles are now properly generated even when title auto-generation is disabled in interface settings, fixing an issue where chats would remain labeled as "New chat". #18761, #18717, #6478
  • 🔍 Chat query errors are prevented by properly validating and handling the "order_by" parameter to ensure requested columns exist. #18400, #18452
  • 🔧 Root-level max_tokens parameter is no longer dropped when proxying to Ollama, properly converting to num_predict to limit output token length as intended. #18618
  • 🔑 Self-hosted Marker instances can now be used without requiring an API key, while keeping it optional for datalab Marker service users. #18617
  • 🔧 OpenAPI specification endpoint conflict between "/api/v1/models" and "/api/v1/models/" is resolved by changing the models router endpoint to "/list", preventing duplicate operationId errors when generating TypeScript API clients. #18758
  • 🏷️ Model tags are now de-duplicated case-insensitively in both the model selector and workspace models page, preventing duplicate entries with different capitalization from appearing in filter dropdowns. #18716, #18711
  • 📄 Docling RAG parameter configuration is now correctly saved in the admin UI by fixing the typo in the "DOCLING_PARAMS" parameter name. #18390
  • 📃 Tika document processing now automatically detects content types instead of relying on potentially incorrect browser-provided mime-types, improving file handling accuracy for formats like RTF. #18765, #18683
  • 🖼️ Image and video uploads to knowledge bases now display proper error messages instead of showing an infinite spinner when the content extraction engine does not support these file types. #18514
  • 📝 Notes PDF export now properly detects and applies dark mode styling consistently across both the notes list and individual note pages, with a shared utility function to eliminate code duplication. #18526
  • 💭 Details tags for reasoning content are now correctly identified and rendered even when the same tag is present in user messages. #18840, #18294
  • 📊 Mermaid and Vega rendering errors now display inline with the code instead of showing repetitive toast notifications, improving user experience when models generate invalid diagram syntax. Commit
  • 📈 Mermaid diagram rendering errors no longer cause UI unavailability or display error messages below the input box. #18493, #18340
  • 🔗 Web search SSL verification is now asynchronous, preventing the website from hanging during web search operations. #18714, #18699
  • 🌍 Web search results now correctly use HTTP proxy environment variables when WEB_SEARCH_TRUST_ENV is enabled. #18667, #7008
  • 🔍 Google Programmable Search Engine now properly includes referer headers, enabling API keys with HTTP referrer restrictions configured in Google Cloud Console. #18871, #18870
  • ⚡ YouTube video transcript fetching now works correctly when using a proxy connection. #18419
  • 🎙️ Speech-to-text transcription no longer deletes or replaces existing text in the prompt input field, properly preserving any previously entered content. #18540
  • 🎙️ The "Instant Auto-Send After Voice Transcription" setting now functions correctly and automatically sends transcribed text when enabled. #18466
  • ⚙️ Chat settings now load properly when reopening a tab or starting a new session by initializing defaults when sessionStorage is empty. #18438
  • 🔎 Folder tag search in the sidebar now correctly handles folder names with multiple spaces by replacing all spaces with underscores. Commit
  • 🛠️ Functions page now updates immediately after deleting a function, removing the need for a manual page reload. #18912, #18908
  • 🛠️ Native tool calling now properly supports sequential tool calls with shared context, allowing tools to access images and data from previous tool executions in the same conversation. #18664
  • 🎯 Globally enabled actions in the model editor now correctly apply as global instead of being treated as disabled. #18577
  • 📋 Clipboard images pasted via the "{{CLIPBOARD}}" prompt variable are now correctly converted to base64 format before being sent to the backend, resolving base64 encoding errors. #18432, #18425
  • 📋 File list is now cleared when switching to models that do not support file uploads, preventing files from being sent to incompatible models. #18496
  • 📂 Move menu no longer displays when folders are empty. #18484
  • 📁 Folder and channel creation now validates that names are not empty, preventing creation of folders or channels with no name and showing an error toast if attempted. #18564
  • 🖊️ Rich text input no longer removes text between equals signs when pasting code with comparison operators. #18551
  • ⌨️ Keyboard shortcuts now display the correct keys for international and non-QWERTY keyboard layouts by detecting the user's layout using the Keyboard API. #18533
  • 🌐 "Attach Webpage" button now displays with correct disabled styling when a model does not support file uploads. #18483
  • 🎚️ Divider no longer displays in the integrations menu when no integrations are enabled. #18487
  • 📱 Chat controls button is now properly hidden on mobile for users without admin or explicit chat control permissions. #18641
  • 📍 User menu, download submenu, and move submenu are now repositioned to prevent overlap with the Chat Controls sidebar when it is open. Commit
  • 🎯 Artifacts button no longer appears in the chat menu when there are no artifacts to display. Commit
  • 🎨 Artifacts view now automatically displays when opening an existing conversation containing artifacts, improving user experience. #18215
  • 🖌️ Formatting toolbar is no longer hidden under images or code blocks in chat and now displays correctly above all message content.
  • 🎨 Layout shift near system instructions is prevented by properly rendering the chat component when system prompts are empty. #18594
  • 📐 Modal layout shift caused by scrollbar appearance is prevented by adding a stable scrollbar gutter. #18591
  • ✨ Spacing between icon and label in the user menu dropdown items is now consistent. #18595
  • 💬 Duplicate prompt suggestions no longer cause the webpage to freeze or throw JavaScript errors by implementing proper key management with composite keys. #18841, #18566
  • 🔍 Chat preview loading in the search modal now works correctly for all search results by fixing an index boundary check that previously caused out-of-bounds errors. #18911
  • ♿ Screen reader support was enhanced by wrapping messages in semantic elements with descriptive aria-labels, adding "Assistant is typing" and "Response complete" announcements for improved accessibility. #18735
  • 🔒 Incorrect await call in the OAuth 2.1 flow is removed, eliminating a logged exception during authentication. #18236
  • 🛡️ Duplicate crossorigin attribute in the manifest file was removed. #18413

Changed

  • 🔄 Firecrawl integration was refactored to use the official Firecrawl SDK instead of direct HTTP requests and langchain_community FireCrawlLoader, improving reliability and performance with batch scraping support and enhanced error handling. #18635
  • 📄 MinerU content extraction engine now only supports PDF files following the upstream removal of LibreOffice document conversion in version 2.0.0; users needing to process office documents should convert them to PDF format first. #18448
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @joaoback, @kaiwinut, @taylorwilsdon, @Classic298, @duncansmart, @silentoplayz, @sinejespersen, @acomarcho, @Davixk, @Ithanil, @zhsh-12, @athoik, @acomarcho, @wangweixuan, @ShirasawaSama, @acwoo97, @IllimarR, @rgaricano, @OAburub, @iPagar, @mkhludnev, @jmleksan, @attilaolah, @htulipe, @ricdikulous, @andrewbbaek, @Tsafaras, @Classic298, @ivanostanin, @wei840222

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) @amd, @roosi-gmbh, @rndmcnlly, @feddersen-group, @SRKConsulting, @mushmax, @icanbwell, @agency-agency, @Classic298, @loitragg, @haka4githu6, @GenieDev101, @CubicleGangster, @TOWaB, @comet-ml, @FominVO, @catalyst-net-nz, @JrdnHans, @hkosm, @VeroFess, @joaoback
v0.6.34 [Oct 16, 2025] details → github →

[0.6.34] - 2025-10-16

Added

  • 📄 MinerU is now supported as a document parser backend, with support for both local and managed API deployments. #18306
  • 🔒 JWT token expiration default is now set to 4 weeks instead of never expiring, with security warnings displayed in backend logs and admin UI when set to unlimited. #18261, #18262
  • ⚡ Page loading performance is improved by preventing unnecessary API requests when sidebar folders are not expanded. #18179, #17476
  • 📁 File hash values are now included in the knowledge endpoint response, enabling efficient file synchronization through hash comparison. #18284, #18283
  • 🎨 Chat dialog scrollbar visibility is improved by increasing its width, making it easier to use for navigation. #18369, #11782
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Translations for Catalan, Chinese, Czech, Finnish, German, Kabyle, Korean, Portuguese (Brazil), Spanish, Thai, and Turkish were enhanced and expanded.

Fixed

  • 📚 Focused retrieval mode now works correctly, preventing the system from forcing full context mode and loading all documents in a knowledge base regardless of settings. #18133
  • 🔧 Filter inlet functions now correctly execute on tool call continuations, ensuring parameter persistence throughout tool interactions. #18222
  • 🛠️ External tool servers now properly support DELETE requests with body data. #18289, #18287
  • 🗄️ Oracle23ai vector database client now correctly handles variable initialization, resolving UnboundLocalError when retrieving items from collections. #18356
  • 🔧 Model auto-pull functionality now works correctly even when user settings remain unmodified. #18324
  • 🎨 Duplicate HTML content in artifacts is now prevented by improving code block detection logic. #18195, #6154
  • 💬 Pinned chats now appear in the Reference Chats list and can be referenced in conversations. #18288
  • 📝 Misleading knowledge base warning text in documents settings is clarified to correctly instruct users about reindexing vectors. #18263
  • 🔔 Toast notifications can now be dismissed even when a modal is open. #18260
  • 🔘 The "Chats" button in the sidebar now correctly toggles chat list visibility without navigating away from the current page. #18232
  • 🎯 The Integrations menu no longer closes prematurely when clicking outside the Valves modal. #18310
  • 🛠️ Tool ID display issues where "undefined" was incorrectly shown in the interface are now resolved. #18178
  • 🛠️ Model management issues caused by excessively long model IDs are now prevented through validation that limits model IDs to 256 characters. #18125
v0.6.33 [Oct 7, 2025] details → github →

[0.6.33] - 2025-10-08

Added

  • 🎨 Workspace interface received a comprehensive redesign across Models, Knowledge, Prompts, and Tools sections, featuring reorganized controls, view filters for created vs shared items, tag selectors, improved visual hierarchy, and streamlined import/export functionality. Commit, Commit, Commit, Commit, Commit, Commit
  • 🛠️ Functions admin interface received a comprehensive redesign with creator attribution display, ownership filters for created vs shared items, improved organization, and refined styling. Commit
  • ⚡ Page initialization performance is significantly improved through parallel data loading and optimized folder API calls, reducing initial page load time. #17559, #17889
  • ⚡ Chat overview component is now dynamically loaded on demand, reducing initial page bundle size by approximately 470KB and improving first-screen loading speed. #17595
  • 📁 Folders can now be attached to chats using the "#" command, automatically expanding to include all files within the folder for streamlined knowledge base integration. Commit
  • 📱 Progressive Web App now supports Android share target functionality, allowing users to share web pages, YouTube videos, and text directly to Open WebUI from the system share menu. #17633, #17125
  • 🗄️ Redis session storage is now available as an experimental option for OAuth authentication flows via the ENABLE_STAR_SESSIONS_MIDDLEWARE environment variable, providing shared session state across multi-replica deployments to address CSRF errors, though currently only basic Redis setups are supported. #17223, #15373, Docs:Commit
  • 📊 Vega and Vega-Lite chart visualization renderers are now supported in code blocks, enabling inline rendering of data visualizations with automatic compilation of Vega-Lite specifications. #18033, #18040, #18022
  • 🔗 OpenAI connections now support custom HTTP headers, enabling users to configure authentication and routing headers for specific deployment requirements. #18021, #9732
  • 🔐 OpenID Connect authentication now supports OIDC providers without email scope via the ENABLE_OAUTH_WITHOUT_EMAIL environment variable, enabling compatibility with identity providers that don't expose email addresses. #18047, #18045
  • 🤖 Ollama model management modal now features individual model update cancellation, comprehensive tooltips for all buttons, and streamlined notification behavior to reduce toast spam. #16863
  • ☁️ OneDrive file picker now includes search functionality and "My Organization" pivot for business accounts, enabling easier file discovery across organizational content. #17930, #17929
  • 📊 Chat overview flow diagram now supports toggling between vertical and horizontal layout orientations for improved visualization flexibility. #17941
  • 🔊 OpenAI Text-to-Speech engine now supports additional parameters, allowing users to customize TTS behavior with provider-specific options via JSON configuration. #17985, #17188
  • 🛠️ Tool server list now displays server name, URL, and type (OpenAPI or MCP) for easier identification and management. #18062
  • 📁 Folders now remember the last selected model, automatically applying it when starting new chats within that folder. #17836
  • 🔢 Ollama embedding endpoint now supports the optional dimensions parameter for controlling embedding output size, compatible with Ollama v0.11.11 and later. #17942
  • ⚡ Workspace knowledge page load time is improved by removing redundant API calls, enhancing overall responsiveness. #18057
  • ⚡ File metadata query performance is enhanced by selecting only relevant columns instead of retrieving entire records, reducing database overhead. #18013
  • 📄 Note PDF exports now include titles and properly render in dark mode with appropriate background colors. Commit
  • 📄 Docling document extraction now supports additional parameters for VLM pipeline configuration, enabling customized vision model settings. #17363
  • ⚙️ Server startup script now supports passing arbitrary arguments to uvicorn, enabling custom server configuration options. #17919, #17918
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Translations for German, Danish, Spanish, Korean, Portuguese (Brazil), Simplified Chinese, and Traditional Chinese were enhanced and expanded.

Fixed

  • 💬 System prompts are no longer duplicated in chat requests, eliminating confusion and excessive token usage caused by repeated instructions being sent to models. #17198, #16855
  • 🔐 MCP OAuth 2.1 authentication now complies with the standard by implementing PKCE with S256 code challenge method and explicitly passing client credentials during token authorization, resolving "code_challenge: Field required" and "client_id: Field required" errors when connecting to OAuth-secured MCP servers. Commit, #18010, #18087
  • 🔐 OAuth signup flow now handles password hashing correctly by migrating from passlib to native bcrypt, preventing failures when passwords exceed 72 bytes. #17917
  • 🔐 OAuth token refresh errors are resolved by properly registering and storing OAuth clients, fixing "Constructor parameter should be str" exceptions for Google, Microsoft, and OIDC providers. #17829
  • 🔐 OAuth server metadata URL is now correctly accessed via the proper attribute, fixing automatic token refresh and logout functionality for Microsoft OAuth provider when OPENID_PROVIDER_URL is not set. #18065
  • 🔐 OAuth credential decryption failures now allow the application to start gracefully with clear error messages instead of crashing, preventing complete service outages when WEBUI_SECRET_KEY mismatches occur during database migrations or environment changes. #18094, #18092
  • 🔐 OAuth 2.1 server discovery now correctly attempts all configured discovery URLs in sequence instead of only trying the first URL. #17906, #17904, #18026
  • 🔐 Login redirect now correctly honors the redirect query parameter after authentication, ensuring users are returned to their intended destination with query parameters intact instead of defaulting to the homepage. #18071
  • ☁️ OneDrive Business integration authentication regression is resolved, ensuring the popup now properly triggers when connecting to OneDrive accounts. #17902, #17825, #17816
  • 👥 Default group settings now persist correctly after page navigation, ensuring configuration changes are properly saved and retained. #17899, #18003
  • 📁 Folder data integrity is now verified on retrieval, automatically fixing orphaned folders with invalid parent references and ensuring proper cascading deletion of nested folder structures. Commit
  • 🗄️ Redis Sentinel and Redis Cluster configurations with the experimental ENABLE_STAR_SESSIONS_MIDDLEWARE feature are now properly isolated by making the feature opt-in only, preventing ReadOnlyError failures when connecting to read replicas in multi-node Redis deployments. #18073
  • 📊 Mermaid and Vega diagram rendering now displays error toast notifications when syntax errors are detected, helping users identify and fix diagram issues instead of silently failing. #18068
  • 🤖 Reasoning models that return reasoning_content instead of content no longer cause NoneType errors during chat title generation, follow-up suggestions, and tag generation. #18080
  • 📚 Citation rendering now correctly handles multiple source references in a single bracket, parsing formats like [1,2] and [1, 2] into separate clickable citation links. #18120
  • 🔍 Web search now handles individual source failures gracefully, continuing to process remaining sources instead of failing entirely when a single URL is unreachable or returns an error. Commit, Commit
  • 🔍 Hybrid search with reranking now handles empty result sets gracefully instead of crashing with ValueError when all results are filtered out due to relevance thresholds. #18096
  • 🔍 Reranking models without defined padding tokens now work correctly by automatically falling back to eos_token_id as pad_token_id, fixing "Cannot handle batch sizes > 1" errors for models like Qwen3-Reranker. #18108, #16027
  • 🔍 Model selector search now correctly returns results for non-admin users by dynamically updating the search index when the model list changes, fixing a race condition that caused empty search results. #17996, #17960
  • ⚡ Task model function calling performance is improved by excluding base64 image data from payloads, significantly reducing token count and memory usage when images are present in conversations. #17897
  • 🤖 Text selection "Ask" action now correctly recognizes and uses local models configured via direct connections instead of only showing external provider models. #17896
  • 🛑 Task cancellation API now returns accurate response status, correctly reporting successful cancellations instead of incorrectly indicating failures. #17920
  • 💬 Follow-up query suggestions are now generated and displayed in temporary chats, matching the behavior of saved chats. #14987
  • 🔊 Azure Text-to-Speech now properly escapes special characters like ampersands in SSML, preventing HTTP 400 errors and ensuring audio generation succeeds for all text content. #17962
  • 🛠️ OpenAPI tool server calls with optional parameters now execute successfully even when no arguments are provided, removing the incorrect requirement for a request body. #18036
  • 🛠️ MCP mode tool server connections no longer incorrectly validate the OpenAPI path field, allowing seamless switching between OpenAPI and MCP connection types. #17989, #17988
  • 🛠️ Third-party tool responses containing non-UTF8 or invalid byte sequences are now handled gracefully without causing request failures. #17882
  • 🎨 Workspace filter dropdown now correctly renders model tags as strings instead of displaying individual characters, fixing broken filtering interface when models have multiple tags. #18034
  • ⌨️ Ctrl+Enter keyboard shortcut now correctly sends messages in mobile and narrow browser views on Chrome instead of inserting newlines. #17975
  • ⌨️ Tab characters are now preserved when pasting code or formatted text into the chat input box in plain text mode. #17958
  • 📋 Text selection copying from the chat input box now correctly copies only the selected text instead of the entire textbox content. #17911
  • 🔍 Web search query logging now uses debug level instead of info level, preventing user search queries from appearing in production logs. #17888
  • 📝 Debug print statements in middleware were removed to prevent excessive log pollution and respect configured logging levels. #17943

Changed

  • 🗄️ Milvus vector database dependency is updated from pymilvus 2.5.0 to 2.6.2, ensuring compatibility with newer Milvus versions but requiring users on older Milvus instances to either upgrade their database or manually downgrade the pymilvus package. #18066
v0.6.32 [Sep 29, 2025] details → github →

[0.6.32] - 2025-09-29

Added

  • 🗝️ Permission toggle for public sharing of notes was added, allowing note owners to quickly enable or disable public access from the note settings interface.
  • ⚠️ A warning is now displayed in the user edit modal if conflicting group permissions are detected, helping administrators resolve access control ambiguities before saving changes.

Fixed

  • 🧰 Fixed regression where External Tool servers (OpenAPI) were nonfunctional after the 0.6.31 update; external tools integration is now restored and reliable.
  • 🚑 Resolved a critical bug causing Streamable HTTP OAuth 2.1 (MCP server) integrations to throw a 500 error on first invocation due to missing 'SessionMiddleware'. OAuth 2.1 registration now succeeds and works on subsequent requests as expected.
  • 🐛 The "Set as default" option is now reliably clickable in model and filter selection menus, fixing cases where the interface appeared unresponsive.
  • 🛠️ Embed UI now works seamlessly with both default and native function calling flows, ensuring the tool embedding experience is consistent regardless of invocation method.
  • 🧹 Addressed various minor UI bugs and inconsistencies for a cleaner user experience.

Changed

  • 🧬 MCP tool result handling code was refactored for improved parsing and robustness of tool outputs.
  • 🧩 The user edit modal was overhauled for clarity and usability, improving the organization of group, permission, and public sharing controls.
v0.6.31 [Sep 25, 2025] details → github →

[0.6.31] - 2025-09-25

Added

  • 🔌 MCP (streamable HTTP) server support was added alongside existing OpenAPI server integration, allowing users to connect both server types through an improved server configuration interface. #15932 #16651, Commit, Commit, Commit, Commit, Commit, Commit
  • 🔐 To enable MCP server authentication, OAuth 2.1 dynamic client registration was implemented with secure automatic client registration, encrypted session management, and seamless authentication flows. Commit, Commit, Commit, Commit, Docs:#709
  • 🛠️ External & Built-In Tools can now support rich UI element embedding (Docs), allowing tools to return HTML content and interactive iframes that display directly within chat conversations with configurable security settings. Commit, Commit, Commit, Commit
  • 📝 Note editor now supports drag-and-drop reordering of list items with visual drag handles, making list organization more intuitive and efficient. Commit, Commit
  • 🔍 Search modal was enhanced with quick action buttons for starting new conversations and creating notes, with intelligent content pre-population from search queries. Commit, Commit, Commit
  • 🛠️ Tool user valve configuration interface was added to the integrations menu, displaying clickable gear icon buttons with tooltips for tools that support user-specific settings, making personal tool configurations easily accessible. Commit
  • 👥 Channel access control was enhanced to require write permissions for posting, editing, and deleting messages, while read-only users can view content but cannot contribute. #17543
  • 💬 Channel models now support image processing, allowing AI assistants to view and analyze images shared in conversation threads. Commit
  • 🌐 Attach Webpage button was added to the message input menu, providing a user-friendly modal interface for attaching web content and YouTube videos as an alternative to the existing URL syntax. #17534
  • 🔐 Redis session storage support was added for OAuth redirects, providing better state handling in multi-pod Kubernetes deployments and resolving CSRF mismatch errors. #17223, #15373
  • 🔍 Ollama Cloud web search integration was added as a new search engine option, providing access to web search functionality through Ollama's cloud infrastructure. Commit, Commit, Commit, Commit, Docs:#708
  • 🔍 Perplexity Websearch API integration was added as a new search engine option, providing access to the new websearch functionality provided by Perplexity. #17756, Commit
  • ☁️ OneDrive integration was improved to support separate client IDs for personal and business authentication, enabling both integrations to work simultaneously. #17619, Docs, Docs
  • 📝 Pending user overlay content now supports markdown formatting, enabling rich text display for custom messages similar to banner functionality. #17681
  • 🎨 Image generation model selection was centralized to enable dynamic model override in function calls, allowing pipes and tools to specify different models than the global default while maintaining backward compatibility. #17689
  • 🎨 Interface design was modernized with updated visual styling, improved spacing, and refined component layouts across modals, sidebar, settings, and navigation elements. Commit, Commit, Commit
  • 📊 Notes query performance was optimized through database-level filtering and separated access control logic, reducing memory usage and eliminating N+1 query problems for better scalability. #17607 Commit
  • ⚡ Page loading performance was optimized by deferring API requests until components are actually opened, including ChangelogModal, ModelSelector, RecursiveFolder, ArchivedChatsModal, and SearchModal. #17542, #17555, #17557, #17541, #17640
  • ⚡ Bundle size was reduced by 1.58MB through optimized highlight.js language support, improving page loading speed and reducing bandwidth usage. #17645
  • ⚡ Editor collaboration functionality was refactored to reduce package size by 390KB and minimize compilation errors, improving build performance and reliability. #17593
  • ♿ Enhanced user interface accessibility through the addition of unique element IDs, improving targeting for testing, styling, and assistive technologies while providing better semantic markup for screen readers and accessibility tools. #17746
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Translations for Portuguese (Brazil), Chinese (Simplified and Traditional), Korean, Irish, Spanish, Finnish, French, Kabyle, Russian, and Catalan were enhanced and improved.

Fixed

  • 🛡️ SVG content security was enhanced by implementing DOMPurify sanitization to prevent XSS attacks through malicious SVG elements, ensuring safe rendering of user-generated SVG content. Commit
  • ☁️ OneDrive attachment menu rendering issues were resolved by restructuring the submenu interface from dropdown to tabbed navigation, preventing menu items from being hidden or clipped due to overflow constraints. #17554, Commit
  • 💬 Attached conversation references now persist throughout the entire chat session, ensuring models can continue querying referenced conversations after multiple conversation turns. #17750
  • 🔍 Search modal text box focus issues after pinning or unpinning chats were resolved, allowing users to properly exit the search interface by clicking outside the text box. #17743
  • 🔍 Search function chat list is now properly updated in real-time when chats are created or deleted, eliminating stale search results and preview loading failures. #17741
  • 💬 Chat jitter and delayed code block expansion in multi-model sessions were resolved by reverting dynamic CodeEditor loading, restoring stable rendering behavior. #17715, #17684
  • 📎 File upload handling was improved to properly recognize uploaded files even when no accompanying text message is provided, resolving issues where attachments were ignored in custom prompts. #17492
  • 💬 Chat conversation referencing within projects was restored by including foldered chats in the reference menu, allowing users to properly quote conversations from within their project scope. #17530
  • 🔍 RAG query generation is now skipped when all attached files are set to full context mode, preventing unnecessary retrieval operations and improving system efficiency. #17744
  • 💾 Memory leaks in file handling and HTTP connections are prevented through proper resource cleanup, ensuring stable memory usage during large file downloads and processing operations. #17608
  • 🔐 OAuth access token refresh errors are resolved by properly implementing async/await patterns, preventing "coroutine object has no attribute get" failures during token expiry. #17585, #17678
  • ⚙️ Valve behavior was improved to properly handle default values and array types, ensuring only explicitly set values are persisted while maintaining consistent distinction between custom and default valve states. #17664
  • 🔍 Hybrid search functionality was enhanced to handle inconsistent parameter types and prevent failures when collection results are None, empty, or in unexpected formats. #17617
  • 📁 Empty folder deletion is now allowed regardless of chat deletion permission restrictions, resolving cases where users couldn't remove folders after deleting all contained chats. #17683
  • 📝 Rich text editor console errors were resolved by adding proper error handling when the TipTap editor view is not available or not yet mounted. #17697
  • 🗒️ Hidden models are now properly excluded from the notes section dropdown and default model selection, preventing users from accessing models they shouldn't see. #17722
  • 🖼️ AI-generated image download filenames now use a clean, translatable "Generated Image" format instead of potentially problematic response text, improving file management and compatibility. #17721
  • 🎨 Toggle switch display issues in the Integrations interface are fixed, preventing background highlighting and obscuring on hover. #17564

Changed

  • 👥 Channel permissions now require write access for message posting, editing, and deletion, with existing user groups defaulting to read-only access requiring manual admin migration to write permissions for full participation.
  • ☁️ OneDrive environment variable configuration was updated to use separate ONEDRIVE_CLIENT_ID_PERSONAL and ONEDRIVE_CLIENT_ID_BUSINESS variables for better client ID separation, while maintaining backward compatibility with the legacy ONEDRIVE_CLIENT_ID variable. Docs, Docs
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @Classic298, @Cyp9715, @helax28, @aindriu80, @aleixdorca, @rgaricano, @ShirasawaSama, @cableman, @joaoback, @Kylapaallikko, @BoFFire, @jmleksan, @andrewbbaek, @taylorwilsdon, @elabbarw

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) #### Emerald
  • Tailscale <a href="https://tailscale.com/blog/self-host-a-local-ai-stack/?utm_source=OpenWebUI&utm_medium=paid-ad-placement&utm_campaign=OpenWebUI-Docs" target="_blank">
<img src="https://docs.openwebui.com/sponsors/banners/tailscale-banner.png" alt="tailscale" style="width: 8rem; height: 8rem; border-radius: .75rem;" /> </a>
  • Warp <a href="https://warp.dev/open-webui" target="_blank">
<img src="https://docs.openwebui.com/sponsors/banners/warp-banner.png" alt="warp" style="width: 8rem; height: 8rem; border-radius: .75rem;" /> </a> @amd, @agency-agency, @roosi-gmbh, @feddersen-group, @SRKConsulting, @mushmax, @rndmcnlly, @icanbwell, @Krambu-Travis, @loitragg, @haka4githu6, @GenieDev101, @CubicleGangster, @GitDatamind, @TOWaB, @TheZigGroup, @Classic298, @comet-ml, @FominVO, @catalyst-net-nz, @JrdnHans, @hkosm, @VeroFess, @joaoback
v0.6.30 [Sep 17, 2025] details → github →

[0.6.30] - 2025-09-17

Added

  • 🔑 Microsoft Entra ID authentication type support was added for Azure OpenAI connections, enabling enhanced security and streamlined authentication workflows.

Fixed

  • ☁️ OneDrive integration was fixed after recent breakage, restoring reliable account connectivity and file access.
v0.6.29 [Sep 17, 2025] details → github →

[0.6.29] - 2025-09-17

Added

  • 🎨 The chat input menu has been completely overhauled with a revolutionary new design, consolidating attachments under a unified '+' button, organizing integrations into a streamlined options menu, and introducing powerful, interactive selectors for attaching chats, notes, and knowledge base items. Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit
  • 🤖 AI models can now be mentioned in channels to automatically generate responses, enabling multi-model conversations where mentioned models participate directly in threaded discussions with full context awareness. Commit
  • 💬 The Channels feature now utilizes the modern rich text editor, including support for '/', '@', and '#' command suggestions. Commit, Commit
  • 📎 Channel message input now supports direct paste functionality for images and files from the clipboard, streamlining content sharing workflows. Commit
  • ⚙️ Models can now be configured with default features (Web Search, Image Generation) and filters that automatically activate when a user selects the model. Commit, Commit, Commit, Commit
  • 🎨 The command suggestion UI for prompts ('/'), models ('@'), and knowledge ('#') was completely overhauled with a more responsive and keyboard-navigable interface. Commit, Commit, Commit, Commit
  • 👥 User and channel suggestions were added to the mention system, enabling '@' mentions for users and models, and '#' mentions for channels with searchable user lookup and clickable navigation. Commit, Commit, Commit
  • 📁 Folder functionality was enhanced with custom background image support, improved drag-and-drop capabilities for moving folders to root level, and better menu interactions. Commit, Commit, Commit, Commit
  • ☁️ OneDrive integration configuration now supports selecting between personal and work/school account types via ENABLE_ONEDRIVE_PERSONAL and ENABLE_ONEDRIVE_BUSINESS environment variables. #17354, Commit, Docs:#697
  • ⚡ Mermaid.js is now dynamically loaded on demand, significantly reducing first-screen loading time and improving initial page performance. #17476, #17477
  • ⚡ Azure MSAL browser library is now dynamically loaded on demand, reducing initial bundle size by 730KB and improving first-screen loading speed. #17479
  • ⚡ CodeEditor component is now dynamically loaded on demand, reducing initial bundle size by 1MB and improving first-screen loading speed. #17498
  • ⚡ Hugging Face Transformers library is now dynamically loaded on demand, reducing initial bundle size by 1.9MB and improving first-screen loading speed. #17499
  • ⚡ jsPDF and html2canvas-pro libraries are now dynamically loaded on demand, reducing initial bundle size by 980KB and improving first-screen loading speed. #17502
  • ⚡ Leaflet mapping library is now dynamically loaded on demand, reducing initial bundle size by 454KB and improving first-screen loading speed. #17503
  • 📊 OpenTelemetry metrics collection was enhanced to properly handle HTTP 500 errors and ensure metrics are recorded even during exceptions. Commit
  • 🔒 OAuth token retrieval logic was refactored, improving the reliability and consistency of authentication handling across the backend. Commit
  • 💻 Code block output processing was improved to handle Python execution results more reliably, along with refined visual styling and button layouts. Commit
  • ⚡ Message input processing was optimized to skip unnecessary text variable handling when input is empty, improving performance. Commit
  • 📄 Individual chat PDF export was added to the sidebar chat menu, allowing users to export single conversations as PDF documents with both stylized and plain text options. Commit
  • 🛠️ Function validation was enhanced with improved valve validation and better error handling during function loading and synchronization. Commit, Commit
  • 🔔 Notification toast interaction was enhanced with drag detection to prevent accidental clicks and added keyboard support for accessibility. Commit
  • 🗓️ Improved date and time formatting dynamically adapts to the selected language, ensuring consistent localization across the UI. #17409, Commit
  • 🔒 Feishu SSO integration was added, allowing users to authenticate via Feishu. #17284, Docs:#685
  • 🔠 Toggle filters in the chat input options menu are now sorted alphabetically for easier navigation. Commit
  • 🎨 Long chat titles in the sidebar are now truncated to prevent text overflow and maintain a clean layout. #17356
  • 🎨 Temporary chat interface design was refined with improved layout and visual consistency. Commit, Commit, Commit
  • 🎨 Download icon consistency was improved across the entire interface by standardizing the icon component used in menus, functions, tools, and export features. Commit
  • 🎨 Settings interface was enhanced with improved iconography and reorganized the 'Chats' section into 'Data Controls' for better clarity. Commit
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Translations for Finnish, German, Kabyle, Portuguese (Brazil), Simplified Chinese, Spanish (Spain), and Traditional Chinese (Taiwan) were enhanced and expanded.

Fixed

  • 📚 Knowledge base permission logic was corrected to ensure private collection owners can access their own content when embedding bypass is enabled. #17432, Commit
  • ⚙️ Connection URL editing in Admin Settings now properly saves changes instead of reverting to original values, fixing issues with both Ollama and OpenAI-compatible endpoints. #17435, Commit
  • 📊 Usage information collection from Google models was corrected to handle providers that send usage data alongside content chunks instead of separately. #17421, Commit
  • ⚙️ Settings modal scrolling issue was resolved by moving image compression controls to a dedicated modal, preventing the main settings from becoming scrollable out of view. #17474, Commit
  • 📁 Folder click behavior was improved to prevent accidental actions by implementing proper double-click detection and timing delays for folder expansion and selection. Commit
  • 🔐 Access control component reliability was improved with better null checking and error handling for group permissions and private access scenarios. Commit, Commit
  • 🔗 The citation modal now correctly displays and links to external web page sources in addition to internal documents. Commit
  • 🔗 Web and YouTube attachment handling was fixed, ensuring their content is now reliably processed and included in the chat context for retrieval. Commit
  • 📂 Large file upload failures are resolved by correcting the processing logic for scenarios where document embedding is bypassed. Commit
  • 🌐 Rich text input placeholder text now correctly updates when the interface language is switched, ensuring proper localization. #17473, Commit
  • 📊 Llama.cpp server timing metrics are now correctly parsed and displayed by fixing a typo in the response handling. #17350, Commit
  • 🛠️ Filter functions with file_handler configuration now properly handle messages without file attachments, preventing runtime errors. #17423
  • 🔔 Channel notification delivery was fixed to properly handle background task execution and user access checking. Commit

Changed

  • 📝 Prompt template variables are now optional by default instead of being forced as required, allowing flexible workflows with optional metadata fields. #17447, Commit, Docs:#696
  • 🛠️ Direct external tool servers now require explicit user selection from the input interface instead of being automatically included in conversations, providing better control over tool usage. Commit, Commit
  • 📺 Widescreen mode option was removed from Channels interface, with all channel layouts now using full-width display. Commit
  • 🎛️ The plain textarea input option was deprecated, and the custom text editor is now the standard for all chat inputs. Commit
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @silentoplayz, @Kylapaallikko, @xyb, @joaoback, @selenecodes, @Ithanil, @Classic298, @alexandreoliveiravis, @rgaricano, @ShirasawaSama, @BoFFire

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) #### Emerald
  • Tailscale <a href="https://tailscale.com/blog/self-host-a-local-ai-stack/?utm_source=OpenWebUI&utm_medium=paid-ad-placement&utm_campaign=OpenWebUI-Docs" target="_blank">
<img src="https://docs.openwebui.com/sponsors/banners/tailscale-banner.png" alt="tailscale" style="width: 8rem; height: 8rem; border-radius: .75rem;" /> </a>
  • Warp <a href="https://warp.dev/open-webui" target="_blank">
<img src="https://docs.openwebui.com/sponsors/banners/warp-banner.png" alt="warp" style="width: 8rem; height: 8rem; border-radius: .75rem;" /> </a> @amd, @agency-agency, @roosi-gmbh, @feddersen-group, @SRKConsulting, @mushmax, @rndmcnlly, @icanbwell, @Krambu-Travis, @loitragg, @haka4githu6, @GenieDev101, @CubicleGangster, @GitDatamind, @TOWaB, @TheZigGroup, @Classic298, @comet-ml, @FominVO, @catalyst-net-nz, @JrdnHans, @hkosm, @VeroFess, @joaoback
v0.6.28 [Sep 10, 2025] details → github →

[0.6.28] - 2025-09-10

Added

  • 🔍 The "@" command for model selection now supports real-time search and filtering, improving usability and aligning its behavior with other input commands. #17307, Commit
  • 🛠️ External tool server data handling is now more robust, automatically attempting to parse specifications as JSON before falling back to YAML, regardless of the URL extension. Commit
  • 🎯 The "Title" field is now automatically focused when creating a new chat folder, streamlining the folder creation process. #17315, Commit
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Brazilian Portuguese and Simplified Chinese translations were expanded and refined.

Fixed

  • 🔊 A regression affecting Text-to-Speech for local providers using the OpenAI engine was fixed by reverting a URL joining change. #17316, Commit
  • 🪧 A regression was fixed where the input modal for prompts with placeholders would not open, causing the raw prompt text to be pasted into the chat input field instead. #17325, Commit
  • 🔑 An issue was resolved where modified connection keys in the OpenAIConnection component did not take effect. #17324
v0.6.27 [Sep 9, 2025] details → github →

[0.6.27] - 2025-09-09

Added

  • 📁 Emoji folder icons were added, allowing users to personalize workspace organization with visual cues, including improved chevron display. Commit, Commit, Commit, Commit
  • 📁 The 'Search Collection' input field now dynamically displays the total number of files within the knowledge base. Commit
  • ☁️ A provider toggle in connection settings now allows users to manually specify Azure OpenAI deployments. Commit
  • ⚡ Model list caching performance was optimized by fixing cache key generation to reduce redundant API calls. #17158
  • 🎨 Azure OpenAI image generation is now supported, with configurations for IMAGES_OPENAI_API_VERSION via environment variable and admin UI. #17147, #16274, Docs:#679
  • ⚡ Comprehensive N+1 query performance is optimized by reducing database queries from 1+N to 1+1 patterns across major listing endpoints. #17165, #17160, #17161, #17162, #17159, #17166
  • ⚡ The PDF.js library is now dynamically loaded, significantly reducing initial page load size and improving responsiveness. #17222
  • ⚡ The heic2any library is now dynamically loaded across various message input components, including channels, for faster page loads. #17225, #17229
  • 📚 The knowledge API now supports a "delete_file" query parameter, allowing configurable file deletion behavior. Commit
  • 📊 Llama.cpp timing statistics are now integrated into the usage field for comprehensive model performance metrics. Commit
  • 🗄️ The PGVECTOR_CREATE_EXTENSION environment variable now allows control over automatic pgvector extension creation. Commit, Commit, Docs:#672
  • 🔒 Comprehensive server-side OAuth token management was implemented, securely storing encrypted tokens in a new database table and introducing an automatic refresh mechanism, enabling seamless and secure forwarding of valid user-specific OAuth tokens to downstream services, including OpenAI-compatible endpoints and external tool servers via the new "system_oauth" authentication type, resolving long-standing issues such as large token size limitations, stale/expired tokens, and reliable token propagation, and enhancing overall security by minimizing client-side token exposure, configurable via "ENABLE_OAUTH_ID_TOKEN_COOKIE" and "OAUTH_SESSION_TOKEN_ENCRYPTION_KEY" environment variables. Docs:#683, #17210, #8957, #11029, #17178, #17183, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit
  • 🔒 Conditional Permission Hardening for OpenShift Deployments: Added a build argument to enable optional permission hardening for OpenShift and container environments. Commit
  • 👥 Regex pattern support is added for OAuth blocked groups, allowing more flexible group filtering rules. Commit
  • 💬 A new setting was added to control whether clicking a suggested prompt automatically sends the message or only inserts the text. #17192, Commit
  • 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
  • 🌐 Translations for Portuguese (Brazil), Simplified Chinese, Catalan, and Spanish were enhanced and expanded.

Fixed

  • 🔍 Hybrid search functionality now correctly handles lexical-semantic weight labels and avoids errors when BM25 weight is zero. #17049, #17046
  • 🛑 Task stopping errors are prevented by gracefully handling multiple stop requests for the same task. #17195
  • 🐍 Code execution package detection precision is improved in Pyodide to prevent unnecessary package inclusions. Commit
  • 🛠️ Tool message format API compliance is fixed by ensuring content fields in tool call responses contain valid string values instead of null. Commit
  • 📱 Mobile app config API authentication now supports Authorization header token verification with cookie fallback for iOS and Android requests. #17175
  • 💾 Knowledge file save race conditions are prevented by serializing API calls and adding an "isSaving" guard. #17137, Commit
  • 🔐 The SSO login button visibility is restored for OIDC PKCE authentication without a client secret. #17012
  • 🔊 Text-to-Speech (TTS) API requests now use proper URL joining methods, ensuring reliable functionality regardless of trailing slashes in the base URL. #17061
  • 🛡️ Admin account creation on Hugging Face Spaces now correctly detects the configured port, resolving issues with custom port deployments. #17064
  • 📁 Unicode filename support is improved for external document loaders by properly URL-encoding filenames in HTTP headers. #17013, #17000
  • 🔗 Web page and YouTube attachments are now correctly processed by setting their type as "text" and using collection names for accurate content retrieval. Commit
  • ✍️ Message input composition event handling is fixed to properly manage text input for multilingual users using Input Method Editors (IME). #17085
  • 💬 Follow-up tooltip duplication is removed, streamlining the user interface and preventing visual clutter. #17186
  • 🎨 Chat button text display is corrected by preventing clipping of descending characters and removing unnecessary capitalization. #17191
  • 🧠 RAG Loop/Error with Gemma 3.1 2B Instruct is fixed by correctly unwrapping unexpected single-item list responses from models. Commit, #17213
  • 🖼️ HEIC conversion failures are resolved, improving robustness of image handling. #17225
  • 📦 The slim Docker image size regression has been fixed by refining the build process to correctly exclude components when USE_SLIM=true. #16997, Commit, Commit
  • 📁 Knowledge base update validation errors are resolved, ensuring seamless management via UI or API. #17244, Commit
  • 🔐 Resolved a security issue where a global web search setting overrode model-specific restrictions, ensuring model-level settings are now correctly prioritized. #17151, Commit
  • 🔐 OAuth redirect reliability is improved by robustly preserving the intended redirect path using session storage. #17235, Commit, #15575, Commit
  • 🔐 Fixed a security vulnerability where knowledge base access within chat folders persisted after permissions were revoked. #17182, Commit
  • 🔒 OIDC access denied errors are now displayed as user-friendly toast notifications instead of raw JSON. #17208, Commit
  • 💬 Chat exception handling is enhanced to prevent system instability during message generation and ensure graceful error recovery. Commit
  • 🔒 Static asset authentication is improved by adding crossorigin="use-credentials" attributes to all link elements, enabling proper cookie forwarding for proxy environments and authenticated requests to favicon, manifest, and stylesheet resources. #17280, Commit

Changed

  • 🛠️ Renamed "Tools" to "External Tools" across the UI for clearer distinction between built-in and external functionalities. Commit
  • 🛡️ Default permission validation for message regeneration and deletion actions is enhanced to provide more restrictive access controls, improving chat security and user data protection. #17285
> [!TIP] > Looking for an Enterprise Plan?Speak with Our Sales Team Today! > > Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more! 👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible: @athoik, @rgaricano, @Classic298, @Elettrotecnica, @thomascooper, @garylab, @Ithanil, @dependabot[bot], @acwoo97, @aleixdorca, @aREversez, @AdamJohnSwan, @hadadrjt, @Viruzaum, @joaoback, @ShirasawaSama

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!) #### Emerald
  • Tailscale <a href="https://tailscale.com/blog/self-host-a-local-ai-stack/?utm_source=OpenWebUI&utm_medium=paid-ad-placement&utm_campaign=OpenWebUI-Docs" target="_blank">
<img src="https://docs.openwebui.com/sponsors/banners/tailscale-banner.png" alt="tailscale" style="width: 8rem; height: 8rem; border-radius: .75rem;" /> </a>
  • Warp <a href="https://warp.dev/open-webui" target="_blank">
<img src="https://docs.openwebui.com/sponsors/banners/warp-banner.png" alt="warp" style="width: 8rem; height: 8rem; border-radius: .75rem;" /> </a> @amd, @agency-agency, @roosi-gmbh, @feddersen-group, @SRKConsulting, @mushmax, @rndmcnlly, @icanbwell, @Krambu-Travis, @loitragg, @GenieDev101, @CubicleGangster, @GitDatamind, @TOWaB, @TheZigGroup, @Classic298, @comet-ml, @FominVO, @catalyst-net-nz, @JrdnHans, @hkosm, @VeroFess, @joaoback
v0.6.26 [Aug 28, 2025] details → github →

[0.6.26] - 2025-08-28

Added

  • 🛂 Granular Chat Interaction Permissions: Added fine-grained permission controls for individual chat actions including "Continue Response", "Regenerate Response", "Rate Response", and "Delete Messages". Administrators can now configure these permissions per user group or set system defaults via environment variables, providing enhanced security and governance by preventing potential system prompt leakage through response continuation and enabling precise control over user interactions with AI responses.
  • 🧠 Custom Reasoning Tags Configuration: Added configurable reasoning tag detection for AI model responses, allowing administrators and users to customize how the system identifies and processes reasoning content. Users can now define custom reasoning tag pairs, use default tags like "think" and "reasoning", or disable reasoning detection entirely through the Advanced Parameters interface, providing enhanced control over AI thought process visibility.
  • 📱 Pull-to-Refresh Support: Added pull-to-refresh functionality allowing user to easily refresh the interface by pulling down on the navbar area. This resolves timeout issues that occurred when temporarily switching away from the app during long AI response generations, eliminating the need to close and relaunch the PWA.
  • 📁 Configurable File Upload Processing Mode: Added "process_in_background" query parameter to the file upload API endpoint, allowing clients to choose between asynchronous (default) and synchronous file processing. Setting "process_in_background=false" forces the upload request to wait until extraction and embedding complete, returning immediately usable files and simplifying integration for backend API consumers that prefer blocking calls over polling workflows.
  • 🔐 Azure Document Intelligence DefaultAzureCredential Support: Added support for authenticating with Azure Document Intelligence using DefaultAzureCredential in addition to API key authentication, enabling seamless integration with Azure Entra ID and managed identity authentication for enterprise Azure environments.
  • 🔐 Authentication Bootstrapping Enhancements: Added "ENABLE_INITIAL_ADMIN_SIGNUP" environment variable and "?form=true" URL parameter to enable initial admin user creation and forced login form display in SSO-only deployments. This resolves bootstrap issues where administrators couldn't create the first user when login forms were disabled, allowing proper initialization of SSO-configured deployments without requiring temporary configuration changes.
  • Query Generation Caching: Added "ENABLE_QUERIES_CACHE" environment variable to enable request-scoped caching of generated search queries. When both web search and file retrieval are active, queries generated for web search are automatically reused for file retrieval, eliminating duplicate LLM API calls and reducing token usage and costs while maintaining search quality.
  • 🔧 Configurable Tool Call Retry Limit: Added "CHAT_RESPONSE_MAX_TOOL_CALL_RETRIES" environment variable to control the maximum number of sequential tool calls allowed before safety stopping a chat session. This replaces the previous hardcoded limit of 10, enabling administrators to configure higher limits for complex workflows requiring extensive tool interactions.
  • 📦 Slim Docker Image Variant: Added new slim Docker image option via "USE_SLIM" build argument that excludes embedded AI models and Ollama installation, reducing image size by approximately 1GB. This variant enables faster image pulls and deployments for environments where AI models are managed externally, particularly beneficial for auto-scaling clusters and distributed deployments.
  • 🗂️ Shift-to-Delete Functionality for Workspace Prompts: Added keyboard shortcut support for quick prompt deletion on the Workspace Prompts page. Hold Shift and hover over any prompt to reveal a trash icon for instant deletion, bringing consistent interaction patterns across all workspace sections (Models, Tools, Functions, and now Prompts) and streamlining prompt management workflows.
  • Accessibility Enhancements: Enhanced user interface accessibility with improved keyboard navigation, ARIA labels, and screen reader compatibility across key platform components.
  • 📄 Optimized PDF Export for Smaller File Size: PDF exports are now significantly optimized, producing much smaller files for faster downloads and easier sharing or archiving of your chats and documents.
  • 📦 Slimmed Default Install with Optional Full Dependencies: Installing Open WebUI via pip now defaults to a slimmer package; PostgreSQL support is no longer included by default—simply use 'pip install open-webui[all]' to include all optional dependencies for full feature compatibility.
  • 🔄 General Backend Refactoring: Implemented various backend improvements to enhance performance, stability, and security, ensuring a more resilient and reliable platform for all users.
  • 🌐 Localization & Internationalization Improvements: Enhanced and expanded translations for Finnish, Spanish, Japanese, Polish, Portuguese (Brazil), and Chinese, including missing translations and typo corrections, providing a more natural and professional user experience for speakers of these languages across the entire interface.

Fixed

  • ⚠️ Chat Error Feedback Restored: Fixed an issue where various backend errors (tool server failures, API connection issues, malformed responses) would cause chats to load indefinitely without providing user feedback. The system now properly displays error messages when failures occur during chat generation, allowing users to understand issues and retry as needed instead of waiting indefinitely.
  • 🖼️ Image Generation Steps Setting Visibility Fixed: Fixed a UI issue where the "Set Steps" configuration option was incorrectly displayed for OpenAI and Gemini image generation engines that don't support this parameter. The setting is now only visible for compatible engines like ComfyUI and Automatic1111, eliminating user confusion about non-functional configuration options.
  • 📄 Datalab Marker API Document Loader Fixed: Fixed broken Datalab Marker API document loader functionality by correcting URL path handling for both hosted Datalab services and self-hosted Marker servers. Removed hardcoded "/marker" paths from the loader code and restored proper default URL structure, ensuring PDF and document processing works correctly with both deployment types.
  • 📋 Citation Error Handling Improved: Fixed an issue where malformed citation or source objects from external tools, pipes, or filters would cause JavaScript errors and make the chat interface completely unresponsive. The system now gracefully handles missing or undefined citation properties, allowing conversations to load properly even when tools generate defective citation events.
  • 👥 Group User Add API Endpoint Fixed: Fixed an issue where the "/api/v1/groups/id/{group_id}/users/add" API endpoint would accept requests without errors but fail to actually add users to groups. The system now properly initializes and deduplicates user ID lists, ensuring users are correctly added to and removed from groups via API calls.
  • 🛠️ External Tool Server Error Handling Improved: Fixed an issue where unreachable or misconfigured external tool servers would cause JavaScript errors and prevent the interface from loading properly. The system now gracefully handles connection failures, displays appropriate error messages, and filters out inaccessible servers while maintaining full functionality for working connections.
  • 📋 Code Block Copy Button Content Fixed: Fixed an issue where the copy button in code blocks would copy the original AI-generated code instead of any user-edited content, ensuring the copy function always captures the currently displayed code as modified by users.
  • 📄 PDF Export Content Mismatch Fixed: Resolved an issue where exporting a PDF of one chat while viewing another chat would incorrectly generate the PDF using the currently viewed chat's content instead of the intended chat's content. Additionally optimized the PDF generation algorithm with improved canvas slicing, better memory management, and enhanced image quality, while removing the problematic PDF export option from individual chat menus to prevent further confusion.
  • 🖱️ Windows Sidebar Cursor Icon Corrected: Fixed confusing cursor icons on Windows systems where sidebar toggle buttons displayed resize cursors (ew-resize) instead of appropriate pointer cursors. The sidebar buttons now show standard pointer cursors on Windows, eliminating user confusion about whether the buttons expand/collapse the sidebar or resize it.
  • 📝 Safari IME Composition Bug Fixed: Resolved an issue where pressing Enter while composing Chinese text using Input Method Editors (IMEs) on Safari would prematurely send messages instead of completing text composition. The system now properly detects composition states and ignores keydown events that occur immediately after composition ends, ensuring smooth multilingual text input across all browsers.
  • 🔍 Hybrid Search Parameter Handling Fixed: Fixed an issue where the "hybrid" parameter in collection query requests was not being properly evaluated, causing the system to ignore user-specified hybrid search preferences and only check global configuration. Additionally resolved a division by zero error that occurred in hybrid search when BM25Retriever was called with empty document lists, ensuring robust search functionality across all collection states.
  • 💬 RTL Text Orientation in Messages Fixed: Fixed text alignment issues in user messages and AI responses for Right-to-Left languages, ensuring proper text direction based on user language settings. Code blocks now consistently use Left-to-Right orientation regardless of the user's language preference, maintaining code readability across all supported languages.
  • 📁 File Content Preview in Modal Restored: Fixed an issue where clicking on uploaded files would display an empty preview modal, even when the files were successfully processed and available for AI context. File content now displays correctly in the preview modal, ensuring users can verify and review their uploaded documents as intended.
  • 🌐 Playwright Timeout Configuration Corrected: Fixed an issue where Playwright timeout values were incorrectly converted from milliseconds to seconds with an additional 1000x multiplier, causing excessively long web loading timeouts. The timeout parameter now correctly uses the configured millisecond values as intended, ensuring responsive web search and document loading operations.

Changed

  • 🔄 Follow-Up Question Language Constraint Removed: Follow-up question suggestions no longer strictly adhere to the chat's primary language setting, allowing for more flexible and diverse suggestion generation that may include questions in different languages based on conversation context and relevance rather than enforced language matching.
v0.6.25 [Aug 22, 2025] details → github →

[0.6.25] - 2025-08-22

Fixed

  • 🖼️ Image Generation Reliability Restored: Fixed a key issue causing image generation failures.
  • 🏆 Reranking Functionality Restored: Resolved errors with rerank feature.