OpenWebUI - Package Updates

[Package Updates]

[3.7.1]

• Update open-webui to 0.12.2
• Full Changelog
• MinerU 4.x servers. The MinerU document engine now works with self-hosted MinerU 4.x servers, where every document failed with a 404 because 4.x removed the old parsing interface; 3.x servers work as before, 4.x servers take a tier (flash, basic, standard or advanced) and enable_ocr in the MinerU parameters while language and model_version stay 3.x only, and images that 4.x returns inside the document text are left out of the indexed content. #32422, Commit, #31516
• Channel message metadata kept server side. Channel messages posted or edited through the API no longer take their metadata from the request, so a user can no longer make a message appear to come from a channel webhook or a model. #32421, Commit
• SCIM cannot delete admins. An identity provider can no longer delete administrator accounts, including the first admin, through a SCIM delete request, which now answers with 403 and leaves the account in place, so a sync that prunes unassigned users can no longer leave the instance without an administrator; admins are removed in the admin panel. #32415, Commit, #27662
• Valkey connections tagged as Open WebUI. Open WebUI's Valkey vector store connections now report their library name as GlidePySync(open-webui), so operators of a shared Valkey or ElastiCache can tell its traffic apart; this needs valkey-glide-sync 2.5.2 or newer, so installs that use VECTOR_DB=valkey with an older manually installed version must upgrade it, or startup fails. #32428, Commit, #31654
• Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility.
• External apps in channels. Administrators can now turn on Apps in Admin Settings > General, or with "ENABLE_APPS", and connect external apps in the new Apps tab of Admin Settings by their HTTPS address, reviewing the permissions each app asks for, such as reading its mentions, reading channel messages or posting messages, and choosing who may use it; channel managers then add an app to a channel with Add Members in the channel info, where it is listed with the members and its own profile picture, and mentioning it with @ lets it answer in the channel with replies that can be shown only to the person who asked, show cards with a title, fields and a thumbnail, offer buttons or links, follow up with a later message for longer tasks or provide a Markdown file to download. Commit
• SSO sign in for SCIM users. Users created through SCIM can sign in with SSO again, where they got "401 Invalid authentication request" since 0.12.0 because no sign-in record was created for them; a database migration adds the missing record for existing accounts without giving them a usable password, SCIM email changes now also update the sign-in email and deleting a user through SCIM removes the sign-in record as well. Commit, #32347
• No reconnect loop after sign-in. A tab where you signed in without reloading the page now reconnects signed in after a connection drop, such as sleep, a network change or a server restart, where since 0.12.0 it reconnected several times per second until the page was reloaded and put heavy load on the server. #32341, #32338
• Deleting a message mid-chat. Deleting a message in the middle of a chat no longer makes the model forget every earlier message while the chat still shows them. #32332, Commit, #32331
• Azure OpenAI Realtime calls. Realtime voice calls can now use Azure OpenAI: in the Voice calls section of Audio settings, administrators pick Azure OpenAI as the Provider, enter the Azure endpoint and the deployment name and sign in with an API key or with Microsoft Entra ID, and clearer errors now point to wrong credentials or a wrong URL or deployment, with the "AUDIO_REALTIME_PROVIDER" and "AUDIO_REALTIME_AUTH_TYPE" environment variables for the new settings. Commit, #32343

[Package Updates]

[3.7.2]

• Update uv to 0.13.1

[Package Updates]

[3.7.3]

• Update open-webui to 0.12.3
• Full Changelog
• End-to-end encrypted chats. Direct messages and private group channels can now hold a temporary end-to-end encrypted chat: a member picks Encrypted Chat in the channel menu, the other members see "Encrypted chat in progress" with a Join link, messages of up to 16 KiB are encrypted in the browser with MLS and only passed through the server without being saved, participants can verify each other by comparing codes and see when others are typing, and the chat is cleared when you leave or reload and ends when channel membership or access changes. Administrators turn it on under Admin Settings > General > Encrypted channels or with "ENABLE_ENCRYPTED_CHANNELS" and grant it with the new Encrypted Channels permission, off by default or set with "USER_PERMISSIONS_FEATURES_ENCRYPTED_CHANNELS", and it needs websocket connections with websocket server logging off and HTTPS in production. Commit, Commit, Commit, Commit
• Model skills now load their full instructions. With the Skills builtin tool on, skills attached to a model in the model editor, which every new chat pre-selects, and skills picked from the chat input menu now send their full instructions with each message, where they were only listed by name and description for the model to load with view_skill; deployments that attached skills to models only to make them available should remove them from the model to avoid the extra prompt length, since every skill the user can read is listed for the model anyway. Commit
• Redis permissions for room channels. With "WEBSOCKET_REDIS_ROOM_CHANNELS" on, the Redis user now needs the PUBLISH, SUBSCRIBE, UNSUBSCRIBE and PING permissions and access to the "&socketio" and "&socketio#*" channels, while PSUBSCRIBE is no longer used; a missing permission is logged with how to fix it. Commit
• Much lighter streaming with Redis. With Redis, a streaming reply is now stored under its own key and new text is appended to it instead of rewriting the whole reply into a shared hash on every update, and replies started on older instances are still read during an upgrade; with room channels on, each instance now only subscribes to the rooms of people connected to it, so Redis no longer sends it live updates for chats it does not serve. Commit Commit #32478
• Workspace search. The search window now searches your chats, chats in folders shared with you, chats shared with you, channel and direct messages and notes in one place, with filters for content type, a folder or channel, and whether something was created by you or shared with you, highlighted matches, a preview of each result with Ctrl/Cmd + Enter, Copy link, and channel results that open the thread scrolled to the matching message. Commit, Commit, Commit
• Knowledge sharing kept on rename. A collaborator with write access who edits a shared knowledge base's name or description no longer turns off sharing they could not set themselves, such as Public. #32450, Commit, #32449
• PDF export of long notes and chats. Long notes and chats now download as PDF, where Firefox failed with "Canvas exceeds max size" and Chrome saved a black PDF. #32459, Commit, #18334, #26373, #19583
• OAuth token refresh with client_secret_basic. When "OAUTH_TOKEN_ENDPOINT_AUTH_METHOD" is client_secret_basic, token refresh now sends the client credentials in the Basic header like sign-in does, where providers that accept only Basic rejected the refresh and Open WebUI deleted the user's OAuth tokens, breaking model connections and tool servers that use them until the next sign-in. #32507, Commit, #32506
• Tool servers back after an outage. With Redis, tools from OpenAPI tool servers now come back once the servers are reachable again, where an empty list cached while every server was down kept them missing until a restart or a save in the tool server settings. #32533 Commit #29573
• Built-in tools with a custom tools parameter. A model with a custom parameter named tools, such as one that turns on a provider's native web search, now keeps its built-in tools, attached tools and file context, and its custom tools are sent alongside them. #32530 Commit #32528

[Package Updates]

[3.7.4]

• Update uv to 0.13.3

[Package Updates]

[3.7.5]

• Update uv to 0.13.4
• Full Changelog
• Validate PEP 825 variant metadata and treat package versions with invalid metadata as unavailable under wheel-variants (#22512)
• Update the bundled Mozilla root certificates via webpki-root-certs 1.0.10 (#22760)

[Package Updates]

[3.7.6]

• Update uv to 0.13.5

[Package Updates]

[3.7.7]

• Update open-webui to 0.12.4
• Full Changelog
• Security Advisory: This release contains security fixes. We strongly recommend updating all deployments as soon as possible to have the latest security fixes in place. These fixes are not listed in this changelog; we will publish the security advisories for them immediately following CVE assignment. Advisories
• Direct Integrations off disables connections. While Direct Integrations is off, as it is by default, the tool servers and Open Terminal connections that users and admins saved in their Integrations settings are no longer used in chats, where turning it off only hid the settings tab, so instances that never turned it on lose those connections until an admin turns on Direct Integrations in Admin Settings > Connections or sets "ENABLE_DIRECT_INTEGRATIONS". #32996, Commit
• Python 3.12 Docker image. The Docker image now runs Python 3.12 on Debian 13 instead of Python 3.11 on Debian 12, so custom functions, tools and packages installed with pip inside the container need versions that support Python 3.12. #32861, Commit
• Shared chat pages load once. Chats opened under /s/, through a share link or by an administrator viewing another user's chat, no longer reload over and over and jump back to the bottom, which since 0.12.3 made scrolling up impossible. #32725, Commit, #32657
• No hangs after closed pages. Closing a page while it was still loading, such as a chat export or a file's processing status, no longer loses database connections on SQLite, where later requests could hang or fail with 503 once enough were lost. #32617, Commit, #32609, #32741
• Websockets after Redis reconnects. With the Redis websocket manager and "retry_on_timeout" in "WEBSOCKET_REDIS_OPTIONS", an instance now accepts new browser connections again once Redis is back after its connection dropped, where since 0.12.3 every new connection could hang until the instance was restarted. #33009, Commit, #33008
• No stray formatting spaces. Chat messages no longer show an extra space at the start of each paragraph and before italic, bold, struck-through or linked text, which appeared in 0.12.3 and left a gap after an em dash. #32743, Commit, #32739
• Archived chats survive folders. Archive All Chats now takes the chats out of their folders, so deleting a folder afterwards no longer deletes those archived chats for good. #32647, Commit, #32646
• Load selected skills on demand. Administrators can turn on "Load selected skills on demand" under Admin Settings > General or set "ENABLE_SKILL_LAZY_LOADING", so skills selected in the chat or attached to a model are only listed for the model to load when it needs them instead of sending their full instructions with every message, while skills mentioned in the message still load right away, and it is off by default and needs the built-in Skills tool. Commit
• Analytics by tokens. The Admin Analytics dashboard now ranks models and users by tokens by default with a switch back to messages, and its usage chart adds volume and activity views, a single model view, a comparison with the previous period, a choice of time steps and Year to date and Last 12 months ranges. Commit, Commit, Commit, Commit, Commit, Commit
• Sharing changed only in Access. Saving a model, prompt, tool, skill, knowledge base, note, channel or calendar no longer changes who it is shared with, which is now changed only in the item's Access settings, saved right away in the model editor, channel settings and external knowledge sources, or through the access endpoints that channels and calendars now also have. Commit, Commit

[Package Updates]

[3.7.8]

• Update uv to 0.13.6

[Package Updates]

[3.7.9]

• Update open-webui to 0.12.5
• Full Changelog
• Security Advisory: This release contains security fixes. We strongly recommend updating all deployments as soon as possible to have the latest security fixes in place. These fixes are not listed in this changelog; we will publish the security advisories for them immediately following CVE assignment. Advisories
• Analytics session explorer. Administrators can now open a Sessions tab in Admin Analytics that lists each chat with its tokens, responses, errors and time span, filters them by search, model, token range or sub-agents, and shows a chat's saved replies and tool calls with their timing and outcome, as long as "ENABLE_ADMIN_CHAT_ACCESS" is on. Commit
• Pages in notes. Notes can now hold several pages and subpages, which you can add, rename, reorder, move under another page, download, link to and delete from the page tabs, and search results and the model now work with notes page by page. Commit
• Knowledge base API responses trimmed. Adding, updating or removing knowledge base files and renaming or sharing a knowledge base through the API now return only the affected files or an empty list, so these calls no longer slow down as the knowledge base grows, and the full list stays available from the paginated files endpoint. #33335, #31397, Commit
• Inflated streamed token counts. Token counts for a reply are no longer inflated when the provider reports its usage again on every streamed chunk, where every report was added up, so the usage shown for the reply and in Admin Analytics now matches the provider's final count. #32052, #29064, #28528, Commit
• IME typing with Backspace. Pressing Backspace while composing text with a Japanese or other input method in the chat input no longer ends the composition or makes the text appear twice, which started in 0.12.4. #33245, #33223, Commit
• MCP failures keep the chat. A tool call to an MCP server that cannot be reached, for example after a restart or a dropped connection, now fails on its own and the reply still finishes, where the whole chat stopped as if you had pressed stop. #33272, #33268, Commit
• Model switch keeps your picks. Switching models in a chat now applies the new model's default tools, skills, filters and features while keeping the ones you turned on or off yourself, where every switch cleared your picks, and chats with several models now get the default tools and skills of every selected model. Commit, Commit
• Playground Controls applied. Settings chosen under Controls in the Playground, such as Temperature and Seed, now reach Ollama models, where they were dropped and every run gave a different reply. #33286, #33285, Commit
• Faster knowledge base commands. Knowledge base commands such as ls, cat and grep and the knowledge base sync check now list files without loading every file's full text, so on large knowledge bases each call is up to ten times faster and uses far less memory. #33332, #33322, Commit

[Package Updates]

[3.7.10]

• Update uv to 0.13.7

[Package Updates]

[3.8.0]

• Update open-webui to 0.13.0
• Full Changelog
• Security Advisory: This release contains security fixes. We strongly recommend updating all deployments as soon as possible to have the latest security fixes in place. These fixes are not listed in this changelog; we will publish the security advisories for them immediately following CVE assignment. Advisories
• Database Migrations: This release includes database schema changes; we strongly recommend backing up your database and all associated data before upgrading in production environments. If you are running a multi-worker, multi-server, or load-balanced deployment, all instances must be updated simultaneously, rolling updates are not supported and will cause application failures due to schema incompatibility.
• Tabbed workspace. The Tabs button at the top of a chat now opens a workspace for files, multiple terminal sessions, artifacts, previews, voice calls and comments. Add tabs from the + menu, drag to reorder them, and create and save new files directly into the selected terminal. Keep the conversation and its working files together while coding, analyzing data or reviewing generated documents. Commit, Commit, Commit, Commit
• Comment threads. Administrators can now turn on Comments in Admin Settings > General or with "ENABLE_COMMENTS", which lets users leave comments with replies, reactions and mentions on the chats, notes, models, knowledge bases, prompts, skills and tools they can open, including on a selected passage of a chat message, which then stays highlighted in the reply, or of a note page, shown in a Comments tab in the chat's side panel, which "/comments" opens, and with comment counts in the workspace lists. Commit, Commit, Commit, Commit
• Notification inbox. A new Inbox in the sidebar collects comments on your items, replies to your comments, mentions in comments and channels, replies in channels, failed automation runs and upcoming calendar events with an unread count, and administrators can turn it off in Admin Settings > General or with "ENABLE_NOTIFICATIONS". Commit, Commit, #19539
• New chats stay in sync. A chat started from the home page keeps syncing with the server again after it is created, so files removed from the chat's Controls no longer come back after a reload and the owner of a chat shared with Allow replies gets Regenerate on other people's replies again. #33377, #33376
• Controls in the model menu. The chat files, valves, system prompt and advanced parameters moved from the Controls panel at the top of the chat to Controls in the model controls menu next to the message input, and the button at the top now opens the tabbed side panel. Commit, Commit
• Higher tool-call limit. A single response with native function calling can now run up to 1024 rounds of tool calls before it stops with "Tool-call limit reached", up from 256, and setting "CHAT_RESPONSE_MAX_TOOL_CALL_ITERATIONS" to 256 keeps the old limit. #33384
• Saved OAuth provider settings. OAuth providers now load their saved connection settings when Open WebUI starts. Admin Settings also explains that changes to provider connections require restarting every Open WebUI instance. Commit
• No sub-agent limits by default. The sub-agent limits in Admin Settings and through "SUBAGENTS_MAX_CONCURRENT", "SUBAGENTS_MAX_ASYNC", "SUBAGENTS_MAX_ITERATIONS" and "SUBAGENTS_MAX_OUTPUT" now default to no limit, and leaving one empty means no limit, where they defaulted to 20 at once, 20 in the background, 30 tool loops each and 30000 characters of output. Commit