OpenWebUI - Package Updates

Reply to OpenWebUI - Package Updates on Thu, 02 Jul 2026 13:35:22 GMT

Package Updates — Thu, 02 Jul 2026 13:35:22 GMT

[3.4.2]

Update open-webui to 0.10.2
Full Changelog
Streamed reasoning display. Models that emit thinking or reasoning now show that content as it streams, and it renders correctly in the chat overview and in exported conversations. Commit, Commit, Commit, Commit
Folder uploads to knowledge bases. Dragging a folder into a knowledge base, or syncing one, now recreates its subfolder structure instead of flattening everything into loose files. #26130, Commit
API configs via environment. Administrators can now set per-connection Ollama and OpenAI API configurations through the "OLLAMA_API_CONFIGS" and "OPENAI_API_CONFIGS" environment variables. Commit
Security Advisory: This release includes security and access-control fixes. We recommend updating production deployments at your earliest convenience. Not all security fixes in this version may be enumerated in the fixed section some may be withheld for a short time to give administrators time to upgrade. Advisories
Fewer unexpected logouts. A single request returning an authorization error no longer signs you out while your session is still valid, since the app now confirms the session status before redirecting to login. Commit
Safer database upgrades. Upgrading an existing SQLite database no longer crashes during the user-table migration or corrupts saved user settings, resolving failures that could block startup or break login after an upgrade. #26403, Commit
Saving settings as a non-admin. Non-admin users can once again save their interface settings, such as the default model and theme, which previously failed with a server error while the interface incorrectly reported success. #26627, Commit
Reliable code execution loading. Running Python code in chat now loads its runtime reliably, fixing sandbox startup failures that broke code execution and the Pyodide file viewer in recent releases. #26625, #26390
Banner and config startup. Setting configuration such as "WEBUI_BANNERS" no longer causes a startup failure, since admin configuration values are now stored correctly regardless of their data type. #26431, Commit
Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility.

Reply to OpenWebUI - Package Updates on Mon, 29 Jun 2026 21:14:20 GMT

Package Updates — Mon, 29 Jun 2026 21:14:20 GMT

[3.4.0]

Update open-webui to 0.10.1
Full Changelog
Shared folder read-only chats no longer sign users out. Opening or reading chats from shared folders now keeps the current session active when a resource-level access error is returned, instead of incorrectly showing "Session expired. Please sign in again."
Share folders with your team. You can now share a folder and the chats inside it with specific users, groups, or everyone, with read or write access; people you share with see shared folders in their sidebar and open the chats in a read-only view when they are not the owner, and administrators control who is allowed to share folders with a new "Folders Sharing" permission that is off by default. Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit
Security Advisory: This release includes security and access-control fixes. We recommend updating production deployments at your earliest convenience. Not all security fixes in this version may be enumerated in the fixed section some may be withheld for a short time to give administrators time to upgrade. Advisories
Database Migrations: This update contains database migrations. Please be sure to back up your database before updating, as downgrading after the migration is not supported.
Native tool calling is now the default. Every chat and model that had not explicitly chosen a tool-calling mode now runs Native, which relies on a model's built-in tool support, while the old behavior has been renamed "Legacy" and made the explicit opt-out; if your models depend on the previous approach you must switch them back to "Legacy" per chat, per model, or globally in your default model parameters to preserve their behavior. Commit
Client-side Python now runs sandboxed. Client-side Python (Pyodide) now runs in a sandboxed, opaque-origin iframe by default, isolating executed code from your session, cookies, local storage, and the app's own endpoints, while full Python, JavaScript, and external network access keep working. Code that relied on reaching same-origin Open WebUI endpoints from Pyodide will no longer be able to, and Pyodide is now marked legacy in the admin Code Execution settings. Commit, Commit, Commit, Commit, Commit
Reworked memory system. Memory has been overhauled with distinct memory types long-lived personal memories and per-conversation context managed through a structured add, update, and delete flow, giving models a more reliable way to remember and apply what they've learned about you. Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit
Saving a chat no longer drops messages. Chat updates are now merged with the existing history on the server, with explicit tracking of deleted messages, instead of overwriting it, preventing message loss from concurrent or partial saves. Commit, Commit, Commit, #25657
Settings no longer lost after a restart. Admin configuration is now stored more reliably, fixing cases where external connections and model parameters could be lost after restarting the server. Commit, Commit, Commit, [#24743](https://github.com/open-webui

Reply to OpenWebUI - Package Updates on Tue, 02 Jun 2026 12:04:02 GMT

Package Updates — Tue, 02 Jun 2026 12:04:02 GMT

[3.3.5]

Update open-webui to 0.9.6
Full Changelog
Security Advisory: This release includes security and access-control fixes. We recommend updating production deployments at your earliest convenience. Not all security fixes in this version may be enumerated in the fixed section some may be withheld for a short time to give administrators time to upgrade. Advisories
Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility.
"WEBUI_SECRET_KEY" is now a hard requirement even for unsupported deployments. Deployments that start the backend in an explicitly unsupported way (such as invoking uvicorn directly) without setting "WEBUI_SECRET_KEY" will now refuse to start instead of falling back to an empty key; the supported start methods (start.sh, start_windows.bat, and "open-webui serve") still set or auto-generate it automatically, so standard deployments are unaffected. Direct Uvicorn startup is not supported. #25218
Official knowledge base sync tool. A new companion tool from Open WebUI, oikb, keeps a knowledge base in sync with a local directory, GitHub repo, S3 bucket, Confluence space, or any of more than 40 other sources, uploading only new and changed files using the incremental sync support added in this release. oikb
Knowledge base folders. Files inside a knowledge base can now be organized into nested folders, with breadcrumb navigation that makes it much easier to manage and find content in large collections.
Filesystem tool for knowledge bases. A new built-in tool, enabled via the "ENABLE_KB_EXEC" environment variable, lets AI models browse and search knowledge base contents using familiar filesystem commands such as 'ls', 'cat', 'grep', 'find', 'head', 'tail', and 'sed', including pipes between them.
Tool server permission enforcement. The per-user permission for inline tool servers is now enforced on chat-completion requests, so users without that permission can no longer bypass the admin setting by supplying tool servers directly in their requests.
Cross-user access to retrieval collections. Resolving the documents used for retrieval now verifies the caller's access to each referenced file and rejects client-supplied collection names, preventing a crafted request from pulling another user's files or vector collections into its context.
Unscoped retrieval collections denied by default. Retrieval requests for collection names that don't correspond to a known file, memory, web-search, or knowledge base are now denied for non-admins by default, with a new "ENABLE_RETRIEVAL_UNSCOPED_COLLECTIONS" setting to restore the previous behavior if needed.
Tool-call iteration cap renamed and raised. The environment variable that limits how many tool calls a single chat response may make is now "CHAT_RESPONSE_MAX_TOOL_CALL_ITERATIONS", with its default raised from 30 to 256 and a new "-1" value for unlimited; the previous "CHAT_RESPONSE_MAX_TOOL_CALL_RETRIES" name continues to work as a fallback, and chats that hit the cap now show a clear error in-chat instead of stopping silently. #24918

Reply to OpenWebUI - Package Updates on Mon, 11 May 2026 06:58:58 GMT

Package Updates — Mon, 11 May 2026 06:58:58 GMT

[3.3.4]

Update open-webui to 0.9.5
Full Changelog
Redirect-based SSRF protection. All outbound HTTP requests now block 3xx redirects by default via a new AIOHTTP_CLIENT_ALLOW_REDIRECTS environment variable, preventing redirect-based SSRF where a public URL silently redirects to internal addresses (RFC 1918, loopback, cloud-metadata endpoints). Affected call sites include web fetch, image loading, OAuth discovery, tool server execution, and code interpreter login. #24491
Iframe content security policy. Administrators can now configure a Content-Security-Policy for all srcdoc iframes (Artifacts, tool embeds, file previews, citation modals) via the IFRAME_CSP environment variable, restricting what LLM-generated or user-uploaded HTML can load and execute inside previews. Commit
Granular markdown rendering controls. Users can now independently disable Markdown rendering for user messages and assistant responses from Interface settings, preventing unintended formatting when pasting text that contains Markdown-sensitive characters. Commit
Channel streaming and tool support. Mentioning a model in a Channel now streams responses in real time and supports the full chat completion pipeline, including native and default function calling, built-in tools (web search, image generation), user tools, MCP tools, filters, and RAG knowledge injection the same capabilities available in standard chats.
Notes create and open reliability. Creating new notes and opening existing notes no longer fails with a TypeError caused by is_pinned being passed to the SQLAlchemy model on create, and passed twice to NoteResponse on read. #24484, #24486
Feedback user attribution spoofing. Submitting evaluation feedback can no longer forge the user_id field through mass-assignment, preventing authenticated users from attributing ratings to other users and corrupting Elo leaderboard rankings and admin feedback exports. #24508
URL parser SSRF bypass. URL validation now rejects backslash, tab, CR, and LF characters that cause urllib and requests/aiohttp to disagree on the target host, closing a parser-confusion SSRF bypass. #24534
Profile image MIME-type allowlist. Serving profile images from data URIs now enforces a strict MIME-type allowlist (PNG, JPEG, GIF, WEBP by default, configurable via PROFILE_IMAGE_ALLOWED_MIME_TYPES) and sets X-Content-Type-Options: nosniff, preventing stored-XSS through SVG or other executable content types. Commit
Legacy chat history self-healing. Loading legacy conversations now automatically detects broken parent-link graphs in migrated message records, merges missing messages from the embedded JSON history, and backfills them to the normalized table so future loads use the fast path without data loss. Commit
Removed unauthenticated retrieval status endpoint. The unauthenticated GET /api/v1/retrieval/ status endpoint has been removed as dead code retrieval configuration is already available through authenticated admin endpoints. #24497

Reply to OpenWebUI - Package Updates on Sat, 09 May 2026 09:54:02 GMT

Package Updates — Sat, 09 May 2026 09:54:02 GMT

[3.3.3]

Update open-webui to 0.9.4
Full Changelog
Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility.
Signout request method. The signout endpoint now requires POST instead of GET, so custom clients and integrations must update logout calls accordingly. #24420
Chat scroll position on load. Opening a chat conversation now reliably scrolls to the bottom of the message history, fixing a regression caused by content-visibility: auto where estimated element sizes prevented the initial scroll from reaching the true bottom.
Voice Mode mute control. Voice Mode now includes a dedicated mute toggle with an "M" shortcut and auto-unmute after assistant playback, so you can prevent accidental interruptions from background noise without leaving the call overlay. Commit, #23832
Faster prompt list loading. Prompt and prompt-tag pages now load much faster for non-admin users, even with large prompt libraries, because accessible prompts are filtered efficiently in a single database query. #24288, #24258
Brave LLM Context web search. Administrators can now choose Brave LLM Context as a web search provider to retrieve richer grounded passages with a configurable context token budget. Commit, #24120
Background code execution reliability. Code execution no longer hangs indefinitely when you switch conversations or browser tabs during a run, and disconnected or inactive sessions now fail with a clear timeout error instead of endless processing. Commit, #24089
Chat settings persistence. System prompts and other chat-level settings now persist correctly after creating a new chat and reloading, preventing prompt loss in affected conversations. Commit, #24193, #24270
Safer image URL handling. Untrusted external image URLs are now blocked in profile and rich-text image rendering paths, preventing unintended client-side requests to attacker-controlled domains. #24420
Windows PostgreSQL startup compatibility. Windows pip installs using PostgreSQL now start reliably with psycopg async by using a compatible event loop policy instead of the default Proactor loop. Commit, #24152

Reply to OpenWebUI - Package Updates on Fri, 24 Apr 2026 15:13:25 GMT

Package Updates — Fri, 24 Apr 2026 15:13:25 GMT

[3.3.2]

Update open-webui to 0.9.2
Full Changelog
PaddleOCR-vl document extraction. Administrators can now use PaddleOCR-vl as a content extraction engine for document processing, with configurable API URL and token settings in document retrieval configuration. #23945
Firecrawl v2 API. Firecrawl web loading now uses the v2 API directly with proper retry logic, exponential backoff on rate limits, and configurable timeout handling, improving reliability for both cloud and self-hosted Firecrawl setups. #23934
Custom API key header. Administrators can now configure a custom header name for API key authentication via the CUSTOM_API_KEY_HEADER environment variable, enabling compatibility with reverse proxies that use the Authorization header for their own authentication.
Source overflow indicator. The Sources button now shows a +N badge when more than three sources are available, so hidden sources are clearly indicated in chat responses. #23918
Async database driver migration. The async database backend now uses psycopg (v3) instead of asyncpg, eliminating brittle SSL parameter translation and supporting native libpq connection strings including sslmode, options, and target_session_attrs without any stripping or conversion.
Throttle request handling. Request handling no longer fails when user activity status updates are throttled with a non-zero interval. #23979
Rich text extension conflicts. Rich text editing no longer triggers duplicate extension conflicts for lists and code blocks, improving editor stability. #24009
Browser-native message virtualization. The custom JavaScript-based message culling system (spacers, height caching, scroll listeners) was replaced with CSS content-visibility: auto, letting the browser natively skip rendering of off-screen messages without destroying component trees. This eliminates scroll jump artifacts and mount/destroy thrashing while preserving memory efficiency in long conversations.
psycopg v3 async driver. The async database driver has been migrated from asyncpg to psycopg (v3). This is a transparent change for most deployments, but custom connection strings with asyncpg-specific parameters may need adjustment.
Brotli dependency update. Brotli has been updated to address CVE-2025-6176.

Reply to OpenWebUI - Package Updates on Tue, 21 Apr 2026 15:15:54 GMT

Package Updates — Tue, 21 Apr 2026 15:15:54 GMT

[3.3.1]

Update open-webui to 0.9.1
Full Changelog
Missing aiosqlite dependency. Fixed a startup crash (ModuleNotFoundError: No module named 'aiosqlite') when installing Open WebUI via pip or uv by adding the missing aiosqlite package to pyproject.toml. The dependency was listed in requirements.txt but not in the published package metadata, so it was not installed automatically. #23916
Missing asyncpg dependency. Added the missing asyncpg package to pyproject.toml to prevent the same startup crash for PostgreSQL users. Like aiosqlite, it was present in requirements.txt but absent from the published package dependencies.

Reply to OpenWebUI - Package Updates on Tue, 21 Apr 2026 10:24:07 GMT

Package Updates — Tue, 21 Apr 2026 10:24:07 GMT

[3.3.0]

Update open-webui to 0.9.0
Full Changelog
Official Open WebUI Desktop App. Open WebUI is now available as a native desktop app for Mac, Windows, and Linux. No Docker, no terminal, no setup. Runs Open WebUI locally without any server setup, or connects to your existing remote Open WebUI instances. Switch between multiple servers instantly from the sidebar. Comes with a system-wide floating chat bar (Shift+Cmd+I on macOS, Shift+Ctrl+I on Windows/Linux), system-wide push-to-talk, offline support after first launch, automatic updates, and zero telemetry. #8262, Desktop
Scheduled chat automations. You can now schedule the AI to run tasks automatically on a recurring basis: daily digests, periodic reports, anything you'd otherwise need to remember to ask for. Create and manage automations from the Automations page or directly in chat, with full run history and manual trigger controls. #23303
Calendar workspace and event management. Open WebUI now has a full Calendar workspace. Create and manage events, set up recurring schedules, get reminders via in-app toasts or browser notifications, and see your scheduled automations alongside your calendar. #23880
Model description XSS protection. Model descriptions shown in chat placeholders are now sanitized before rendering, preventing malicious links from executing scripts and helping protect user sessions from takeover. #23621
LDAP empty-password rejection. LDAP login now rejects empty or whitespace-only passwords before bind attempts, preventing unauthenticated simple-bind behavior from granting access on permissive LDAP server configurations. #23633
IPv6 SSRF address blocking. URL validation now uses standard IP address checks for both IPv4 and IPv6, preventing private, loopback, link-local, reserved, and mapped-address SSRF bypasses through IPv6 hostname resolution. #23453
Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility.
Plugin async migration required. Custom plugins for Tools, Functions, and Pipelines may require migration to the new async backend signatures after upgrading, so plugin maintainers should update handlers and database call patterns for compatibility and follow the 0.9.0 plugin migration guide. Migration Guide
OpenAI passthrough now opt-in. Direct OpenAI catch-all proxy requests are now disabled by default and require enabling "ENABLE_OPENAI_API_PASSTHROUGH", so deployments relying on passthrough must explicitly turn it on after upgrading. #23640
Async performance and responsiveness improvements. The core backend database and request paths now run asynchronously across the application, massively improving responsiveness and performance under concurrent load and reducing request blocking during heavy activity.

Reply to OpenWebUI - Package Updates on Thu, 26 Mar 2026 05:38:52 GMT

Package Updates — Thu, 26 Mar 2026 05:38:52 GMT

[3.2.10]

Update open-webui to 0.8.11
Full Changelog
Responses API streaming improvements. The OpenAI proxy now properly handles tool call streaming and re-invocations in the Responses API, preventing duplicate tool calls and preserving output during model re-invocations. Commit, Commit, Commit, Commit
Responses API stateful sessions. Administrators can now enable experimental stateful session support via the ENABLE_RESPONSES_API_STATEFUL environment variable, allowing compatible backends to store responses server-side with previous_response_id anchoring for improved multi-turn conversations. Commit
File viewing pagination. The view_file and view_knowledge_file tools now support pagination with offset and max_chars parameters, allowing models to read large files in chunks. Commit
Knowledge search scoping. The search_knowledge_files tool now respects model-attached knowledge, searching only within attached knowledge bases and files when available. Commit
Tool HTML embed context. Tools can now return custom context alongside HTML embeds by using a tuple format, providing the LLM with actionable information instead of a generic message. #22691
Trusted role header configuration. Administrators can now configure the WEBUI_AUTH_TRUSTED_ROLE_HEADER environment variable to set user roles (admin, user, or pending) via a trusted header from their identity provider or reverse proxy. #22523
OIDC authorization parameter injection. Administrators can now inject extra parameters into the OIDC authorization redirect URL via the OAUTH_AUTHORIZE_PARAMS environment variable, enabling IdP pre-selection for brokers like CILogon and Keycloak. #22863, Commit
Google OAuth session persistence. Administrators can now configure Google OAuth to issue refresh tokens via the GOOGLE_OAUTH_AUTHORIZE_PARAMS environment variable, preventing OAuth sessions from expiring after one hour and ensuring tools and integrations that rely on OAuth tokens remain functional. #22652
Embed prompt confirmation. Interactive tool embeds can now submit prompts to the chat without requiring same-origin access, showing a confirmation dialog for cross-origin requests to prevent abuse. #22908
Tool binary response handling. Tool servers can now return binary data such as images, which are properly processed and displayed in chat for both multimodal and non-multimodal models. Commit, Commit

Reply to OpenWebUI - Package Updates on Sun, 08 Mar 2026 08:44:16 GMT

Package Updates — Sun, 08 Mar 2026 08:44:16 GMT

[3.2.8]

Update open-webui to 0.8.9
Full Changelog
Open Terminal notebook cell execution. Users can now run Jupyter Notebook code cells directly in the Open Terminal file navigator, execute entire notebooks with a single click, edit and modify cells before running, and control the kernel - bringing full interactive notebook execution to the browser. Commit
Open Terminal SQLite browser. Users can now browse SQLite database files directly in the Open Terminal file navigator, viewing tables and running queries without downloading them first. Commit
Open Terminal Mermaid diagram rendering. Markdown files with Mermaid code blocks are now rendered as diagrams directly in the Open Terminal file navigator, making it easier to visualize flowcharts and other diagrams. Commit
Open Terminal Jupyter Notebook previews. Users can now preview Jupyter Notebook files directly in the Open Terminal file navigator, making it easier to view notebook content without downloading them first. Commit
Open Terminal auto-refresh. The Open Terminal file navigator now automatically refreshes when the model writes or modifies files, keeping the view in sync without manual refresh. Commit
Open Terminal file copy button. Users can now copy file contents directly to clipboard in the Open Terminal file navigator with a single click, making it easier to quickly grab file content without downloading. Commit
Code syntax highlighting and XLSX improvements in Open Terminal. Code files now display with syntax highlighting in the Open Terminal file navigator, and XLSX spreadsheets now show column headers and row numbers for easier navigation. Commit
Open Terminal JSON tree view. JSON, JSONC, JSONL, and JSON5 files now display as interactive collapsible tree views in the Open Terminal file navigator, and SVG files render as preview images with syntax highlighting support. Commit
Open Terminal port viewing. Users can now view listening ports in the Open Terminal file navigator and open proxy connections to them directly from the UI. Commit
Open Terminal video previews. Users can now preview video and audio files directly in the Open Terminal file navigator, making it easier to view media without downloading them first. Commit

Reply to OpenWebUI - Package Updates on Tue, 03 Mar 2026 07:27:51 GMT

Package Updates — Tue, 03 Mar 2026 07:27:51 GMT

[3.2.7]

Update open-webui to 0.8.8
Full Changelog
Open Terminal file moving. Users can now move files and folders between directories in the Open Terminal file browser by dragging and dropping them. Commit, Commit, Commit, Commit
Open Terminal HTML file preview. Users can now preview HTML files directly in the Open Terminal file browser, with a rendered iframe view and source toggle, enabling iterative AI editing of HTML files. Commit, Commit
Open Terminal WebSocket proxy. Added a new WebSocket proxy endpoint for interactive terminal sessions, enabling real-time bidirectional terminal communication with the terminal server. Commit
Open Terminal feature toggle. Administrators can now enable or disable the Interactive Terminal feature for Open Terminal via configuration on the terminal server, controlling access to terminal routes. Commit
General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
Translations for Simplified Chinese, Traditional Chinese, Irish, and Catalan were enhanced and expanded.
Middleware variable shadowing. Fixed a variable shadowing issue in the middleware that could cause incorrect tool output processing during chat. #22145
ChatControls reactivity fix. Fixed a Svelte reactivity issue where the active tab state in the ChatControls panel was not properly saved when switching between chats. #22127
ChatControls TypeScript fix. Fixed a TypeScript syntax error in ChatControls.svelte where the module script block was missing lang="ts", causing esbuild to fail during vite dev. #22131
Open Terminal tools for direct connections. Fixed an issue where Open Terminal tools were not available to the model when the terminal was configured via direct connection settings, ensuring users can now interact with terminal files and operations through the AI. #22137

Reply to OpenWebUI - Package Updates on Mon, 02 Mar 2026 04:17:57 GMT

Package Updates — Mon, 02 Mar 2026 04:17:57 GMT

[3.2.6]

Update open-webui to 0.8.7
Full Changelog
Connection access control privacy. Tool server and terminal connections without explicit access grants are now private (admin-only) by default, fixing a bug where connections configured with no access grants were visible to all users instead of being restricted. Commit
ChatControls memory leak. The ChatControls panel no longer leaks event listeners, ResizeObserver instances, and media query handlers when navigating between chats, fixing memory accumulation that could degrade performance during extended use. #22112
Temporary chat params preservation. Model parameters are now correctly saved when creating a temporary chat, ensuring custom settings like temperature and top_p persist across the session. Commit
Faster artifact content updates. Artifact content extraction during streaming is now debounced via requestAnimationFrame, reducing redundant DOM reads and improving CPU efficiency when tokens arrive faster than the browser can paint. Commit
Open Terminal integration. Users can now connect to Open Terminal instances to browse, read, and upload files directly in chat, with the terminal acting as an always-on tool. File navigation includes folder browsing, image and PDF previews, drag-and-drop uploads, directory creation, and file deletion. The current working directory is automatically injected into tool descriptions for context-aware commands. Commit, Commit, Commit
Terminal file creation. Users can now create new empty files directly in the Open Terminal file browser, in addition to the existing folder creation functionality. Commit
Terminal file editing. Users can now edit text files directly in the Open Terminal file browser, with the ability to save changes back to the terminal. Commit
Terminal file preview toolbar. The Open Terminal file browser now displays contextual toolbar buttons based on file type, including preview/source toggle for Markdown and CSV files, reset view for images, and improved editing controls for text files. Commit
Terminal file write refresh. The file browser now automatically refreshes when files are written or modified via the write_file or replace_file_content tools, eliminating the need to manually refresh. Commit
Docker image SBOM attestation. Docker images now include a Software Bill of Materials (SBOM) for vulnerability scanning and supply chain security compliance. #21779, Commit

Reply to OpenWebUI - Package Updates on Tue, 24 Feb 2026 08:43:19 GMT

Package Updates — Tue, 24 Feb 2026 08:43:19 GMT

[3.2.5]

Update open-webui to 0.8.5
Full Changelog
Voice dictation shortcut. Users can now toggle voice dictation using Cmd+Shift+L (or Ctrl+Shift+L on Windows/Linux), making it faster to start and stop dictation without clicking the microphone button.
Model access KeyError fix. The /api/models endpoint no longer crashes with a 500 error when models have incomplete info metadata missing the user_id field (e.g. models using global default metadata).
Frontend initialization resilience. The app layout now gracefully handles individual API failures during initialization (getModels, getBanners, getTools, getUserSettings, setToolServers) instead of blocking the entire page load when any single call fails.
Backend config null safety. Language detection during app initialization no longer crashes when the backend config fetch fails, preventing a secondary cause of infinite loading.

Reply to OpenWebUI - Package Updates on Mon, 23 Feb 2026 14:22:00 GMT

Package Updates — Mon, 23 Feb 2026 14:22:00 GMT

[3.2.4]

Update open-webui to 0.8.4
Full Changelog
Provider URL suggestions. The connection form now displays a dropdown with suggested URLs for popular AI providers, making it easier to configure connections. Commit
Anthropic model fetching. The system now properly fetches available models from the Anthropic API, ensuring all Anthropic models are accessible. Commit
No models prompt. When no models are available, a helpful prompt now guides users to manage their provider connections. Commit
Connection enable/disable toggles. Individual provider connections can now be enabled or disabled from both admin and user settings. Commit
Prompt enable/disable toggle. Users can now enable or disable prompts directly from the prompts list using a toggle switch, without needing to delete and recreate them. Inactive prompts display an "Inactive" badge and are still visible in the list. Commit
Memory deletion. Agents can now delete specific memories that are no longer relevant, duplicated, or incorrect, giving better control over stored memory content. Commit
Memory listing. Agents can now list all stored memories, enabling them to identify which memories to manage or delete based on the complete memory inventory. Commit
Auto pip install toggle. Administrators can now disable automatic pip package installation from function frontmatter requirements using the ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS environment variable, providing more control over function dependency management. Commit
Anthropic Messages API proxy. A new API endpoint now supports the Anthropic Messages API format, allowing tools like Claude Code to authenticate through Open WebUI and access configured models. Tool calls are now properly supported in streaming responses with correct multi-block indexing, and error status from tools is propagated correctly. The endpoint converts requests to OpenAI format internally, routes them through the existing chat pipeline, and returns responses in Anthropic format. #21390, Commit, Commit
Multi-device OAuth sessions. Users can now stay logged in on multiple devices simultaneously with OAuth, as re-logging in no longer terminates existing sessions. The oldest sessions are automatically pruned when the session limit is exceeded. #21647, Commit

Reply to OpenWebUI - Package Updates on Tue, 17 Feb 2026 10:17:27 GMT

Package Updates — Tue, 17 Feb 2026 10:17:27 GMT

[3.2.3]

Update open-webui to 0.8.3
Full Changelog
Model edit shortcut. Users can now edit models directly from the model selector dropdown menu, making it faster to modify model settings without navigating to separate admin or workspace pages. Commit
Image edit API background support. The image edit API now supports the background parameter for OpenAI's gpt-image-1 model, enabling background transparency control ("transparent", "opaque", "auto") when the feature is exposed in the UI. #21459
Faster model filtering. Model access control filtering no longer makes a redundant database query to re-fetch model info that is already available in memory, reducing latency when loading model lists for non-admin users. Commit
Tool call display improvements. Tool call results now display arguments in a cleaner key-value format instead of raw JSON, with a responsive layout that shows only the tool name on narrow screens and the full label on wider screens, preventing text wrapping to multiple lines. Commit
General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
Translations for Portuguese (Brazil), Simplified Chinese, and Traditional Chinese were enhanced and expanded.
USER_EMAIL variable fix. The {{USER_EMAIL}} template variable now correctly returns the user's email address instead of "Unknown" in prompts. #21479, #21465
Image and file attachment handling fixes. Uploaded images are now correctly sent to vision-enabled models, and file attachments now work even when no user text is entered alongside a system prompt. This fixes two issues where the backend was not properly processing file attachments: images weren't converted to the expected format for API requests, and file context was dropped when the user sent only a file without accompanying text. Commit, #21477, #21457
Missing function error handling. Models that reference deleted functions no longer cause the entire /api/models endpoint to crash; instead, the missing functions are skipped and logged, allowing the rest of the models to load successfully. #21476, #21464
Startup model pre-fetch error handling. If model pre-fetching fails during app startup, the application now logs a warning and continues instead of crashing entirely. Commit

Reply to OpenWebUI - Package Updates on Mon, 16 Feb 2026 20:27:44 GMT

Package Updates — Mon, 16 Feb 2026 20:27:44 GMT

[3.2.2]

Update open-webui to 0.8.2
Full Changelog
Skill content handling. User-selected skills now have their full content injected into the chat, while model-attached skills only display name and description in the available skills list. This allows users to override skill behavior while model-attached skills remain flexible. Commit
Chat toggles now control built-in tools. Users can now disable web search, image generation, and code execution on a per-conversation basis, even when those tools are enabled as builtin tools on the model. #20641, #21318, Commit, Commit
Image preview in file modal. Images uploaded to chats can now be previewed directly in the file management modal, making it easier to identify and manage image files. #21413, Commit
Batch tag operations. Tag creation, deletion, and orphan cleanup for chats now use batch database queries instead of per-tag loops, significantly reducing database round trips when updating, archiving, or deleting chats with multiple tags. Commit
Faster group list loading. Group lists and search results now load with a single database query that joins member counts, replacing the previous pattern of fetching groups first and then counting members in a separate batch query. Commit
Skills sharing permissions. Administrators can now control skills sharing and public sharing permissions per-group, matching the existing capabilities for tools, knowledge, and prompts. Commit
Long content truncation in preview modals. Citation and file content modals now truncate markdown-rendered content at 10,000 characters with a "Show all" expansion button, preventing UI jank when previewing very large documents.
Translation updates. Translations for Spanish and German were enhanced and expanded.
OAuth session error handling. Corrupted OAuth sessions are now gracefully handled and automatically cleaned up instead of causing errors. Commit
Task model selector validation. The task model selector in admin settings now correctly accepts models based on the new access grants system instead of rejecting all models with an incorrect error. Commit

Reply to OpenWebUI - Package Updates on Sat, 14 Feb 2026 10:01:00 GMT

Package Updates — Sat, 14 Feb 2026 10:01:00 GMT

[3.2.1]

Update open-webui to 0.8.1
Full Changelog
Channel user active status. Checking user active status in channels is now faster thanks to optimized database queries. Commit
Responses API endpoint with model routing. The OpenAI API proxy now supports a /responses endpoint that routes requests to the correct backend based on the model field in the request, instead of always using the first configured endpoint. This enables support for backends like vLLM that provide /skills and /v1/responses endpoints. Commit, Commit
Model and prompt list optimization. Improved performance when loading models and prompts by pre-fetching user group IDs once instead of making multiple database queries. Commit
Batch access control queries. Improved performance when loading models, prompts, and knowledge bases by replacing multiple individual access checks with single batch queries, significantly reducing database load for large deployments. Commit
Faster user list loading. User lists now load significantly faster by deferring profile image loading; images are fetched separately in parallel by the browser, improving caching and reducing database load. Commit
Web search result count. The built-in search_web tool now respects the admin-configured "Search Result Count" setting instead of always returning 5 results when using Native Function Calling mode. #21373, #21371
SCIM externalId support. SCIM-enabled deployments can now store and manage externalId for user provisioning, enabling better integration with identity providers like Microsoft Entra ID and Okta. #21099, #21280, Commit
Translation updates. Portuguese (Brazil) translations were updated.
Public sharing security fix. Fixed a security issue where users with write access could see the Public sharing option regardless of their actual public sharing permission, and direct API calls could bypass frontend sharing restrictions. #21358, #21356
Direct model access control fix. Model access control changes now persist correctly for direct Ollama and OpenAI models that don't have database entries, and error messages display properly instead of showing "[object Object]". Commit, #21377

Reply to OpenWebUI - Package Updates on Fri, 13 Feb 2026 10:34:10 GMT

Package Updates — Fri, 13 Feb 2026 10:34:10 GMT

[3.2.0]

Update open-webui to 0.8.0
Full Changelog
Analytics dashboard. Administrators now have access to an Analytics dashboard showing model usage statistics, token consumption by model and user, user activity rankings, and time-series charts with hourly or daily granularity; clicking any model opens a detail view with feedback history, associated tags, and chat browser, and results can be filtered by user group. #21106, Commit, Commit
Experimental support for Skills. Open WebUI now supports the Skill standard allowing users to create and manage reusable AI skills with detailed instructions, reference them in chats using the "$" command, or attach them to specific models for automatic context in conversations. #21312
Experimental support for Open Responses protocol. Connections can now be configured to use the experimental Open Responses protocol instead of Chat Completions, enabling native support for extended thinking, streaming reasoning tokens, and richer tool call handling for compatible providers. Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit, Commit
Redesigned access control UI. The access control UI was redesigned with a more intuitive interface that makes it easier to add multiple groups at once. #21277
Per-user resource sharing. Resources including knowledge bases, prompts, models, tools, channels, and base models can now be shared directly to individual users alongside the existing per-group sharing capability. #21277
Message queuing. Messages can now be queued while a response is generating rather than being blocked, allowing you to continue your train of thought; queued messages are automatically combined and sent when generation completes, and can be edited, deleted, or sent immediately from the input area. Commit, Commit
Active task sidebar indicator. Users can now see which chats have active tasks running directly in the sidebar. Commit
Prompt version control. Prompts now include version control with full history tracking, allowing users to commit changes with messages, view past versions, compare differences between versions, and roll back to previous versions when needed. #20945
Prompt tags. Prompts can now be organized with tags, and users can filter the prompt workspace by tag to quickly find related prompts across large collections. #20945
Native function calling code execution. Code execution now works with Native function calling mode, allowing models to autonomously run Python code for calculations, data analysis, and visualizations without requiring Default mode. #20592, Docs:#998

Reply to OpenWebUI - Package Updates on Sun, 11 Jan 2026 16:01:09 GMT

Package Updates — Sun, 11 Jan 2026 16:01:09 GMT

[3.1.1]

Update open-webui to 0.7.2
Full Changelog
Users no longer experience database connection timeouts under high concurrency due to connections being held during LLM calls, telemetry collection, and file status streaming. #20545, #20542, #20547
Users can now create and save prompts in the workspace prompts editor without encountering errors. Commit
Users can now use local Whisper for speech-to-text when STT_ENGINE is left empty (the default for local mode). #20534
The Evaluations page now loads faster by eliminating duplicate API calls to the leaderboard and feedbacks endpoints. Commit
Fixed missing Settings tab i18n label keys. #20526

Reply to OpenWebUI - Package Updates on Sat, 10 Jan 2026 09:36:41 GMT

Package Updates — Sat, 10 Jan 2026 09:36:41 GMT

[3.1.0]

Update open-webui to 0.7.1
Full Changelog
Improved reliability for low-spec and SQLite deployments. Fixed page timeouts by disabling database session sharing by default, improving stability for resource-constrained environments. Users can re-enable via 'DATABASE_ENABLE_SESSION_SHARING=true' if needed. #20520
Native Function Calling with Built-in Tools. Users can now ask models to perform multi-step tasks that combine web research, knowledge base queries, note-taking, and image generation in a single conversationfor example, "research the latest on X, save key findings to a note, and generate an infographic." Requires models with native function calling support and function calling mode set to "Native" in Chat Controls. #19397, Commit
Users can now ask the model to find relevant context from their notes, past chats, and channel messagesfor example, "what did I discuss about project X last week?" or "find the conversation where I brainstormed ideas for Y." Commit
Users can now ask the model to search their knowledge bases and retrieve documents without manually attaching filesfor example, "find the section about authentication in our API docs" or "what do our internal guidelines say about X?" Commit
Users with models that support interleaved thinking now get more refined results from multi-step workflows, as the model can analyze each tool's output before deciding what to do next.
When models invoke web search, search results appear as clickable citations in real-time for full source verification. Commit
Users can selectively disable specific built-in tools (timestamps, memory, chat history, notes, web search, knowledge bases) per model via the model editor's capabilities settings. Commit
Pending tool calls are now displayed during response generation, so users know which tools are being invoked. Commit
Administrators can now limit the number of files that can be uploaded to folders using the "FOLDER_MAX_FILE_COUNT" setting, preventing resource exhaustion from bulk uploads. #19810, Commit, Commit
Users experience transformative speed improvements across the entire application through completely reengineered database connection handling, delivering noticeably faster page loads, butter-smooth interactions, and rock-solid stability during intensive operations like user management and bulk data processing. Commit, Commit, Commit, Commit, Commit, Commit

Reply to OpenWebUI - Package Updates on Mon, 22 Dec 2025 17:44:26 GMT

Package Updates — Mon, 22 Dec 2025 17:44:26 GMT

[3.0.6]

Update open-webui to 0.6.43
Full Changelog
Python dependency installation issues were resolved by correcting pip dependency handling, preventing installation failures in certain environments and improving setup reliability. Commit
Speech-to-Text default content type handling was fixed and refactored to ensure correct MIME type usage, improving compatibility across STT providers and preventing transcription errors caused by incorrect defaults. Commit
Temporary chat image handling was fixed and refactored, ensuring images generated or edited in temporary chats are correctly processed, stored, and displayed without inconsistencies or missing references. Commit
Image action button fixed, restoring the ability to trigger image generation, editing, and related image actions from the chat UI. Commit

Reply to OpenWebUI - Package Updates on Mon, 22 Dec 2025 09:24:23 GMT

Package Updates — Mon, 22 Dec 2025 09:24:23 GMT

[3.0.5]

chore(deps): update dependency open-webui/open-webui to v0.6.42

Reply to OpenWebUI - Package Updates on Wed, 03 Dec 2025 08:56:25 GMT

Package Updates — Wed, 03 Dec 2025 08:56:25 GMT

[3.0.4]

Update open-webui to 0.6.41
Full Changelog
Sign-in rate limiting was implemented to protect against brute force attacks, limiting login attempts to 15 per 3-minute window per email address using Redis with automatic fallback to in-memory storage when Redis is unavailable. Commit
Administrators can now globally disable the folders feature and control user-level folder permissions through the admin panel, enabling minimalist interface configurations for deployments that don't require workspace organization features. #19529, #19210, #18459, #18299
Group channels were introduced as a new channel type enabling membership-based collaboration spaces where users explicitly join as members rather than accessing through permissions, with support for public or private visibility, automatic member inclusion from specified user groups, member role tracking with invitation metadata, and post-creation member management allowing channel managers to add or remove members through the channel info modal. Commit, Commit
Direct Message channels were introduced with a dedicated channel type selector and multi-user member selection interface, enabling private conversations between specific users without requiring full channel visibility. Commit
Direct Message channels now support a complete user-to-user messaging system with member-based access control, automatic deduplication for one-on-one conversations, optional channel naming, and distinct visual presentation using participant avatars instead of channel icons. Commit
Users can now hide Direct Message channels from their sidebar while preserving message history, with automatic reactivation when new messages arrive from other participants, providing a cleaner interface for managing active conversations. Commit
A comprehensive user selection component was added to the channel creation modal, featuring search functionality, sortable user lists, pagination support, and multi-select checkboxes for building Direct Message participant lists. Commit
Channel unread message count tracking was implemented with visual badge indicators in the sidebar, automatically updating counts in real-time and marking messages as read when users view channels, with join/leave functionality to manage membership status. Commit
Message pinning functionality was added to channels, allowing users to pin important messages for easy reference with visual highlighting, a dedicated pinned messages modal accessible from the navbar, and complete backend support for tracking pinned status, pin timestamp, and the user who pinned each message. Commit, Commit
Direct Message channels now display an active status indicator for one-on-one conversations, showing a green dot when the other participant is currently online or a gray dot when offline. Commit, Commit

Reply to OpenWebUI - Package Updates on Wed, 26 Nov 2025 07:50:52 GMT

Package Updates — Wed, 26 Nov 2025 07:50:52 GMT

[3.0.3]

Update open-webui to 0.6.40
Full Changelog
A critical PostgreSQL user listing performance issue was resolved by removing a redundant count operation that caused severe database slowdowns and potential timeouts when viewing user lists in admin panels.
A user list modal was added to channels, displaying all users with access and featuring search, sorting, and pagination capabilities. Commit
Channel navigation now displays the total number of users with access to the channel. Commit
Tool servers and MCP connections now support function name filtering, allowing administrators to selectively enable or block specific functions using allow/block lists. Commit
A toggle to disable parallel embedding processing was added via "ENABLE_ASYNC_EMBEDDING", allowing sequential processing for rate-limited or resource-constrained local embedding setups. #19444
Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
Localization improvements were made for German (de-DE) and Portuguese (Brazil) translations.
Inline citations now render correctly within markdown lists and nested elements instead of displaying as "undefined" values. #19452
Group member selection now works correctly without randomly selecting other users or causing the user list to jump around. #19426
Admin panel user list now displays the correct total user count and properly paginates 30 items per page after fixing database query issues with group member joins. #19429