OpenWebUI - Package Updates
-
[2.17.4]
- Update open-webui to 0.6.32
- Full Changelog
- JSON model import moved to backend processing for significant performance improvements when importing large model files. #17871
- Visual warnings for group permissions that display when a permission is disabled in a group but remains enabled in the default user role, clarifying inheritance behavior for administrators. #17848
- Milvus multi-tenancy mode using shared collections with resource ID filtering for improved scalability, mirroring the existing Qdrant implementation and configurable via ENABLE_MILVUS_MULTITENANCY_MODE environment variable. #17837
- Enhanced tool result processing with improved error handling, better MCP tool result handling, and performance improvements for embedded UI components. Commit
- New user groups now automatically inherit default group permissions, streamlining the admin setup process by eliminating manual permission configuration. #17843
- Bulk unarchive functionality for all chats, providing a single backend endpoint to efficiently restore all archived chats at once. #17857
- Browser tab title toggle setting allows users to control whether chat titles appear in the browser tab or display only "Open WebUI". #17851
- Reply-to-message functionality in channels, allowing users to reply directly to specific messages with visual threading and context display. Commit
- Tool server import and export functionality, allowing direct upload of openapi.json and openapi.yaml files as an alternative to URL-based configuration. #14446
- User valve configuration for Functions is now available in the integration menu, providing consistent management alongside Tools. #17784
-
[2.17.5]
- Update open-webui to 0.6.33
- Full Changelog
- Workspace interface received a comprehensive redesign across Models, Knowledge, Prompts, and Tools sections, featuring reorganized controls, view filters for created vs shared items, tag selectors, improved visual hierarchy, and streamlined import/export functionality. Commit, Commit, Commit, Commit, Commit, Commit
- Functions admin interface received a comprehensive redesign with creator attribution display, ownership filters for created vs shared items, improved organization, and refined styling. Commit
- Page initialization performance is significantly improved through parallel data loading and optimized folder API calls, reducing initial page load time. #17559, #17889
- Chat overview component is now dynamically loaded on demand, reducing initial page bundle size by approximately 470KB and improving first-screen loading speed. #17595
- Folders can now be attached to chats using the "#" command, automatically expanding to include all files within the folder for streamlined knowledge base integration. Commit
- Progressive Web App now supports Android share target functionality, allowing users to share web pages, YouTube videos, and text directly to Open WebUI from the system share menu. #17633, #17125
- Redis session storage is now available as an experimental option for OAuth authentication flows via the ENABLE_STAR_SESSIONS_MIDDLEWARE environment variable, providing shared session state across multi-replica deployments to address CSRF errors, though currently only basic Redis setups are supported. #17223, #15373, Docs:Commit
- Vega and Vega-Lite chart visualization renderers are now supported in code blocks, enabling inline rendering of data visualizations with automatic compilation of Vega-Lite specifications. #18033, #18040, #18022
- OpenAI connections now support custom HTTP headers, enabling users to configure authentication and routing headers for specific deployment requirements. #18021, #9732
- OpenID Connect authentication now supports OIDC providers without email scope via the ENABLE_OAUTH_WITHOUT_EMAIL environment variable, enabling compatibility with identity providers that don't expose email addresses. #18047, #18045
-
[2.17.6]
- Update ollama to 0.12.5
-
[2.17.7]
- Update ollama to 0.12.6
-
[2.17.8]
- Update open-webui to 0.6.34
- Full Changelog
- MinerU is now supported as a document parser backend, with support for both local and managed API deployments. #18306
- JWT token expiration default is now set to 4 weeks instead of never expiring, with security warnings displayed in backend logs and admin UI when set to unlimited. #18261, #18262
- Page loading performance is improved by preventing unnecessary API requests when sidebar folders are not expanded. #18179, #17476
- File hash values are now included in the knowledge endpoint response, enabling efficient file synchronization through hash comparison. #18284, #18283
- Chat dialog scrollbar visibility is improved by increasing its width, making it easier to use for navigation. #18369, #11782
- Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
- Translations for Catalan, Chinese, Czech, Finnish, German, Kabyle, Korean, Portuguese (Brazil), Spanish, Thai, and Turkish were enhanced and expanded.
- Focused retrieval mode now works correctly, preventing the system from forcing full context mode and loading all documents in a knowledge base regardless of settings. #18133
- Filter inlet functions now correctly execute on tool call continuations, ensuring parameter persistence throughout tool interactions. #18222
- External tool servers now properly support DELETE requests with body data. #18289, #18287
-
[2.17.9]
- Update ollama to 0.12.7
-
[2.17.10]
- Update ollama to 0.12.9
-
[3.0.0]
- Remove local ollama in favor of the standalone ollama Cloudron app
- Major package as the ollama integration needs to be reconfigured if used
-
[3.0.1]
- Update open-webui to 0.6.36
- Full Changelog
- Tool calling functionality is restored by correcting asynchronous function handling in tool parameter updates. #18981
- The ComfyUI image edit workflow editor modal now opens correctly when clicking the Edit button. #18978
- Firecrawl import errors are resolved by implementing lazy loading and using the correct class name. #18973
- Socket.IO CORS warning is resolved by properly configuring CORS origins for Socket.IO connections. Commit
- Image generation system received a comprehensive overhaul with major new capabilities including full image editing support allowing users to modify existing images using text prompts with OpenAI, Gemini, or ComfyUI engines, adding Gemini 2.5 Flash Image (Nano Banana) support, Qwen Image Edit integration, resolution of base64-encoded image display issues, streamlined AUTOMATIC1111 configuration by consolidating parameters into a flexible JSON parameters field, and enhanced UI with a code editor modal for ComfyUI workflow management. #17434, #16976, Commit, Commit, Commit, Commit
- CORS origin validation was added to WebSocket connections as a defense-in-depth security measure against cross-site WebSocket hijacking attacks. #18411, #18410
- Automatic page refresh now occurs when a version update is detected via WebSocket connection, ensuring users always run the latest version without cache issues. Commit
- Experimental initial preparations for Python 3.13 compatibility by updating dependencies with security enhancements and cryptographic improvements. #18430, #18424
- Image compression now preserves the original image format instead of converting to PNG, significantly reducing file sizes and improving chat loading performance. #18506
-
[3.0.2]
- Update open-webui to 0.6.38
- Full Changelog
- Hybrid search now works reliably after recent changes.
- Tool server saving now handles errors gracefully, preventing failed saves from impacting the UI.
- SSO/OIDC code fixed to improve login reliability and better handle edge cases.
- Granular sharing permissions are now available with two-tiered control separating group sharing from public sharing, allowing administrators to independently configure whether users can share workspace items with groups or make them publicly accessible, with separate permission toggles for models, knowledge bases, prompts, tools, and notes, configurable via "USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_SHARING", "USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_PUBLIC_SHARING", and corresponding environment variables for other workspace item types, while groups can now be configured to opt-out of sharing via the "Allow Group Sharing" setting. Commit, Commit
- Password policy enforcement is now available with configurable validation rules, allowing administrators to require specific password complexity requirements via "ENABLE_PASSWORD_VALIDATION" and "PASSWORD_VALIDATION_REGEX_PATTERN" environment variables, with default pattern requiring minimum 8 characters including uppercase, lowercase, digit, and special character. #17794
- Granular import and export permissions are now available for workspace items, introducing six separate permission toggles for models, prompts, and tools that are disabled by default for enhanced security. #19242
- Default group assignment is now available for new users, allowing administrators to automatically assign newly registered users to a specified group for streamlined access control to models, prompts, and tools, particularly useful for organizations with group-based model access policies. #19325, #17842
- Password-based authentication can now be fully disabled via "ENABLE_PASSWORD_AUTH" environment variable, enforcing SSO-only authentication and preventing password login fallback when SSO is configured. #19113
- Large stream chunk handling was implemented to support models that generate images directly in their output responses, with configurable buffer size via "CHAT_STREAM_RESPONSE_CHUNK_MAX_BUFFER_SIZE" environment variable, resolving compatibility issues with models like Gemini 2.5 Flash Image. #18884, #17626
- Streaming response middleware now handles images in delta updates with automatic base64 conversion, enabling proper display of images from models using the "choices[0].delta.images.image_url" format such as Gemini 2.5 Flash Image Preview on OpenRouter. #19073, #19019
