OpenWebUI - Package Updates
-
[2.17.6]
- Update ollama to 0.12.5
-
[2.17.7]
- Update ollama to 0.12.6
-
[2.17.8]
- Update open-webui to 0.6.34
- Full Changelog
- MinerU is now supported as a document parser backend, with support for both local and managed API deployments. #18306
- JWT token expiration default is now set to 4 weeks instead of never expiring, with security warnings displayed in backend logs and admin UI when set to unlimited. #18261, #18262
- Page loading performance is improved by preventing unnecessary API requests when sidebar folders are not expanded. #18179, #17476
- File hash values are now included in the knowledge endpoint response, enabling efficient file synchronization through hash comparison. #18284, #18283
- Chat dialog scrollbar visibility is improved by increasing its width, making it easier to use for navigation. #18369, #11782
- Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
- Translations for Catalan, Chinese, Czech, Finnish, German, Kabyle, Korean, Portuguese (Brazil), Spanish, Thai, and Turkish were enhanced and expanded.
- Focused retrieval mode now works correctly, preventing the system from forcing full context mode and loading all documents in a knowledge base regardless of settings. #18133
- Filter inlet functions now correctly execute on tool call continuations, ensuring parameter persistence throughout tool interactions. #18222
- External tool servers now properly support DELETE requests with body data. #18289, #18287
-
[2.17.9]
- Update ollama to 0.12.7
-
[2.17.10]
- Update ollama to 0.12.9
-
[3.0.0]
- Remove local ollama in favor of the standalone ollama Cloudron app
- Major package as the ollama integration needs to be reconfigured if used
-
[3.0.1]
- Update open-webui to 0.6.36
- Full Changelog
- Tool calling functionality is restored by correcting asynchronous function handling in tool parameter updates. #18981
- The ComfyUI image edit workflow editor modal now opens correctly when clicking the Edit button. #18978
- Firecrawl import errors are resolved by implementing lazy loading and using the correct class name. #18973
- Socket.IO CORS warning is resolved by properly configuring CORS origins for Socket.IO connections. Commit
- Image generation system received a comprehensive overhaul with major new capabilities including full image editing support allowing users to modify existing images using text prompts with OpenAI, Gemini, or ComfyUI engines, adding Gemini 2.5 Flash Image (Nano Banana) support, Qwen Image Edit integration, resolution of base64-encoded image display issues, streamlined AUTOMATIC1111 configuration by consolidating parameters into a flexible JSON parameters field, and enhanced UI with a code editor modal for ComfyUI workflow management. #17434, #16976, Commit, Commit, Commit, Commit
- CORS origin validation was added to WebSocket connections as a defense-in-depth security measure against cross-site WebSocket hijacking attacks. #18411, #18410
- Automatic page refresh now occurs when a version update is detected via WebSocket connection, ensuring users always run the latest version without cache issues. Commit
- Experimental initial preparations for Python 3.13 compatibility by updating dependencies with security enhancements and cryptographic improvements. #18430, #18424
- Image compression now preserves the original image format instead of converting to PNG, significantly reducing file sizes and improving chat loading performance. #18506
-
[3.0.2]
- Update open-webui to 0.6.38
- Full Changelog
- Hybrid search now works reliably after recent changes.
- Tool server saving now handles errors gracefully, preventing failed saves from impacting the UI.
- SSO/OIDC code fixed to improve login reliability and better handle edge cases.
- Granular sharing permissions are now available with two-tiered control separating group sharing from public sharing, allowing administrators to independently configure whether users can share workspace items with groups or make them publicly accessible, with separate permission toggles for models, knowledge bases, prompts, tools, and notes, configurable via "USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_SHARING", "USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_PUBLIC_SHARING", and corresponding environment variables for other workspace item types, while groups can now be configured to opt-out of sharing via the "Allow Group Sharing" setting. Commit, Commit
- Password policy enforcement is now available with configurable validation rules, allowing administrators to require specific password complexity requirements via "ENABLE_PASSWORD_VALIDATION" and "PASSWORD_VALIDATION_REGEX_PATTERN" environment variables, with default pattern requiring minimum 8 characters including uppercase, lowercase, digit, and special character. #17794
- Granular import and export permissions are now available for workspace items, introducing six separate permission toggles for models, prompts, and tools that are disabled by default for enhanced security. #19242
- Default group assignment is now available for new users, allowing administrators to automatically assign newly registered users to a specified group for streamlined access control to models, prompts, and tools, particularly useful for organizations with group-based model access policies. #19325, #17842
- Password-based authentication can now be fully disabled via "ENABLE_PASSWORD_AUTH" environment variable, enforcing SSO-only authentication and preventing password login fallback when SSO is configured. #19113
- Large stream chunk handling was implemented to support models that generate images directly in their output responses, with configurable buffer size via "CHAT_STREAM_RESPONSE_CHUNK_MAX_BUFFER_SIZE" environment variable, resolving compatibility issues with models like Gemini 2.5 Flash Image. #18884, #17626
- Streaming response middleware now handles images in delta updates with automatic base64 conversion, enabling proper display of images from models using the "choices[0].delta.images.image_url" format such as Gemini 2.5 Flash Image Preview on OpenRouter. #19073, #19019
-
[3.0.3]
- Update open-webui to 0.6.40
- Full Changelog
- A critical PostgreSQL user listing performance issue was resolved by removing a redundant count operation that caused severe database slowdowns and potential timeouts when viewing user lists in admin panels.
- A user list modal was added to channels, displaying all users with access and featuring search, sorting, and pagination capabilities. Commit
- Channel navigation now displays the total number of users with access to the channel. Commit
- Tool servers and MCP connections now support function name filtering, allowing administrators to selectively enable or block specific functions using allow/block lists. Commit
- A toggle to disable parallel embedding processing was added via "ENABLE_ASYNC_EMBEDDING", allowing sequential processing for rate-limited or resource-constrained local embedding setups. #19444
- Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
- Localization improvements were made for German (de-DE) and Portuguese (Brazil) translations.
- Inline citations now render correctly within markdown lists and nested elements instead of displaying as "undefined" values. #19452
- Group member selection now works correctly without randomly selecting other users or causing the user list to jump around. #19426
- Admin panel user list now displays the correct total user count and properly paginates 30 items per page after fixing database query issues with group member joins. #19429
-
[3.0.4]
- Update open-webui to 0.6.41
- Full Changelog
- Sign-in rate limiting was implemented to protect against brute force attacks, limiting login attempts to 15 per 3-minute window per email address using Redis with automatic fallback to in-memory storage when Redis is unavailable. Commit
- Administrators can now globally disable the folders feature and control user-level folder permissions through the admin panel, enabling minimalist interface configurations for deployments that don't require workspace organization features. #19529, #19210, #18459, #18299
- Group channels were introduced as a new channel type enabling membership-based collaboration spaces where users explicitly join as members rather than accessing through permissions, with support for public or private visibility, automatic member inclusion from specified user groups, member role tracking with invitation metadata, and post-creation member management allowing channel managers to add or remove members through the channel info modal. Commit, Commit
- Direct Message channels were introduced with a dedicated channel type selector and multi-user member selection interface, enabling private conversations between specific users without requiring full channel visibility. Commit
- Direct Message channels now support a complete user-to-user messaging system with member-based access control, automatic deduplication for one-on-one conversations, optional channel naming, and distinct visual presentation using participant avatars instead of channel icons. Commit
- Users can now hide Direct Message channels from their sidebar while preserving message history, with automatic reactivation when new messages arrive from other participants, providing a cleaner interface for managing active conversations. Commit
- A comprehensive user selection component was added to the channel creation modal, featuring search functionality, sortable user lists, pagination support, and multi-select checkboxes for building Direct Message participant lists. Commit
- Channel unread message count tracking was implemented with visual badge indicators in the sidebar, automatically updating counts in real-time and marking messages as read when users view channels, with join/leave functionality to manage membership status. Commit
- Message pinning functionality was added to channels, allowing users to pin important messages for easy reference with visual highlighting, a dedicated pinned messages modal accessible from the navbar, and complete backend support for tracking pinned status, pin timestamp, and the user who pinned each message. Commit, Commit
- Direct Message channels now display an active status indicator for one-on-one conversations, showing a green dot when the other participant is currently online or a gray dot when offline. Commit, Commit
