Catalog / Open WebUI

0.12.4

todaysecurityaddedfixedOriginal notes

Added

  • ๐ŸŽฏ Load selected skills on demand. Administrators can turn on "Load selected skills on demand" under Admin Settings > General or set "ENABLE_SKILL_LAZY_LOADING", so skills selected in the chat or attached to a model are only listed for the model to load when it needs them instead of sending their full instructions with every message, while skills mentioned in the message still load right away, and it is off by default and needs the built-in Skills tool. Commit
  • ๐Ÿ“ Compaction shown in chats. A "Context compacted" line now marks the message where older messages were summarized, opens to show the summary and also appears inside a reply when compaction ran between its tool calls, Chat Controls > Overview tags that message, and compaction progress and errors now show in the chat instead of as pop-up notices. Commit, Commit, Commit, Commit, #31324
  • ๐Ÿ—œ๏ธ Compaction in more chats. Context compaction now also runs in temporary chats and in short chats that are already over the threshold, such as one question with a reply full of tool output, so the follow-up and any regenerate or edit of it no longer fail with a context length error. #32794, Commit, #32781, Commit, #32600
  • ๐Ÿ•ถ๏ธ Hide controls for users. Administrators can now hide single controls from users under Visible controls in Admin Settings > Interface or with "UI_VISIBILITY", such as model capabilities, default features and built-in tools in the model editor, Capture, Compare text, Attach Webpage, Attach Files, Attach Notes, Attach Knowledge and Reference Chats in the + menu, the /status, /model and /settings commands, the usage info, Fork, Merge Responses, Preview, Artifacts, Archive and Tags in chats, Set as default and Keep in Sidebar for models and settings such as the Usage tab and the speech engines, while hidden controls keep their values and the features behind them stay usable, hiding Archive also hides Unarchive, and administrators still see every control. Commit, #32830
  • ๐Ÿซ™ Unavailable options hidden. Options that cannot take effect are now hidden, such as Capture in the + menu without a Vision model, Attach Notes for users without the Notes permission, the Valves pickers in Chat Controls for disabled tools and functions, the Context Compaction Threshold while context compaction is off, the title, follow-up and tag generation switches in Settings > Interface while the admin has turned them off, Compress Images in Channels for users who cannot use channels, the Web Search in Chat setting while web search is not available to the user, the Voice section of Settings > Interface for users who cannot make calls, group and default permission toggles for features the admin has turned off, the Terminal capability and default terminal in the model editor while no terminal server or direct integration is available, the New Temporary Chat and Delete Chat shortcuts for users who may not use them, the Web Search, Image Generation, Code Interpreter and Memory capabilities and Default Features in the model editor while that feature is off for the instance, built-in tools in the model editor that the model's capabilities rule out or whose feature is off, the engine settings in Admin Settings > Web Search and Admin Settings > Images while web search or image generation is off, the Web Search Query Generation switch in Admin Settings > Interface while web search is off, the Regenerate Menu and terminal settings in Settings > Interface while they cannot apply, "/skills:create" for models that cannot create skills, the Call button while speech-to-text is unavailable, the Audio settings tab for users allowed no speech or calls, the multi-factor authentication section while MFA does not apply to the user and the openwebui.com author link on a new chat while community sharing is off, while saved values are kept for when they apply again. #32969, #32967, #32959, Commit, Commit, Commit, #32962, #32973, #32976, #32977, #32980, #32961, Commit, Commit, Commit, Commit, Commit, Commit, #32972, Commit, #32975, Commit, #32983, Commit, #32966, Commit, #32978, Commit, #32963, Commit, #32965, Commit, #32984, Commit, #32985, Commit, #32986, Commit, #32974, Commit, #32981, Commit, #32971, Commit, #32970, Commit, #32964, Commit, #32830
  • ๐Ÿ” Access button respects sharing. The Access button and menu entry of models, prompts, tools, knowledge, skills and notes and the Access button in folder settings are now hidden from users without the matching sharing permission, who had nothing they could change in its dialog. #32979, Commit, #32830
  • ๐Ÿ–‡๏ธ Attach entries without uploads. When files cannot be attached, because of a missing permission or a selected model without File Upload, the greyed Attach Knowledge, Reference Chats and Attach Notes entries in the + menu no longer open and the # and @ lists leave out what cannot be attached, including pasted links for users without the web upload permission, so a picked item no longer vanishes from the input without a message. #32968, Commit, #32830
  • โฑ๏ธ Exact last active time. Hovering the last active time in the admin user list and in a group's member list now shows the exact date and time. Commit
  • ๐Ÿ—จ๏ธ New chat from folders. A folder's menu in the sidebar now has a New Chat item that starts a chat in that folder. Commit
  • ๐Ÿชช Profile cards across the workspace. Hovering an owner's name in the workspace lists of models, knowledge, prompts, skills and tools and in admin Functions now opens their profile card instead of an email tooltip, with their profile picture next to the name, profile pictures in access settings, version history and the Analytics user list open the card too and the Notes list shows each owner's profile picture. Commit, Commit, Commit, Commit, Commit, Commit
  • ๐Ÿ”ข Turn count in chat previews. The preview shown when hovering a chat in the sidebar now shows how many user and assistant turns its current branch has. Commit
  • ๐ŸŽš๏ธ Chat Controls saved per setting. A change in a chat's Controls, such as its system prompt or a parameter, now saves only that setting, so a copy of the chat open in another tab or on another device no longer wipes it with older settings. Commit, #32755
  • ๐Ÿชƒ Questions survive reconnects. When the page reloads or loses its connection while Ask User, a tool approval, an MCP server's input request or a function's confirmation or input dialog waits for you, the question now comes back once you reopen that chat within a minute, so the request no longer waits without an answer. Commit
  • โœ๏ธ Note edits by text. The model can now edit a note by finding and replacing exact text instead of only by character offsets, picking one match or all of them and getting the positions and surrounding text back when a match is ambiguous. Commit, #32752
  • ๐Ÿ” Compare view stays aligned. Matching rows in the two panes of the Compare view now stay lined up and in place while scrolling, resizing or editing, and a colored bar now marks changed lines also while whitespace or emphasis markers are ignored. Commit, Commit, Commit, Commit
  • ๐Ÿ–ฑ๏ธ Clickable setting labels. Clicking the label of a setting across user and admin settings, including advanced parameters and connections, now toggles its switch, focuses its field or presses its button, and the label highlights while the row is hovered or focused, so the right control is easier to find. Commit, Commit, Commit, #32768, #32900
  • โ˜‘๏ธ Select several sidebar chats. Shift-clicking a chat in the sidebar starts a selection that more clicks or a shift-click range extend, and the selected chats can then be archived or, with the delete permission, deleted together, while Escape clears the selection. Commit, #32543
  • ๐Ÿซฒ Swipe open Chat Controls. On a phone, swiping left across a chat now pulls in the Chat Controls panel, which follows your finger like the sidebar does and closes again with a swipe to the right. Commit
  • ๐Ÿ—ƒ๏ธ Bulk file management. Manage Files in Settings > Data Controls can now download a single file and lets you select several files or all files matching a search to delete them or download them together as one zip archive, with progress and a stop button. Commit
  • ๐Ÿ“ฅ Accurate upload status. A file uploaded to a knowledge base now only shows as done once it is indexed and linked to the knowledge base, so it no longer shows as done and then goes missing from the list until a reload. Commit, #32803
  • โณ Knowledge files show Processing. A file added to a knowledge base now switches from Uploading to Processing once it reaches the server, and the list keeps itself up to date until the file is ready, so it no longer says Uploading until you reopen the knowledge base. #32982, Commit
  • ๐Ÿงฎ Knowledge uploads listed at once. Files selected or dropped together into a knowledge base now all appear as Uploading right away in upload order, so each one no longer waits to appear until the file before it has finished processing. #32992, Commit
  • ๐Ÿ“ˆ Analytics by tokens. The Admin Analytics dashboard now ranks models and users by tokens by default with a switch back to messages, and its usage chart adds volume and activity views, a single model view, a comparison with the previous period, a choice of time steps and Year to date and Last 12 months ranges. Commit, Commit, Commit, Commit, Commit, Commit
  • ๐Ÿ—‚๏ธ File browser grid view. The terminal file browser can now switch between a list and a grid view from its menu, folders show how many items they hold, and on larger screens hovering a file shows a preview, up to 1 MB for text files and 20 MB for images, audio, video and documents. Commit, Commit, Commit
  • ๐Ÿ“ File browser folder menu. A folder's menu in the terminal file browser now has New File and New Folder items that create the file or folder inside that folder. Commit, Commit
  • ๐Ÿ“ฌ First-message terminal uploads. With Chat Uploads set to Filesystem on a Per chat terminal, a file attached to the first message of a new chat now waits and uploads into that chat's own terminal when the message is sent, so it no longer lands in the shared workspace. Commit, #30245
  • ๐Ÿชง Folder descriptions. Folders can now have a description in their settings, shown under the folder title on the folder's page. Commit, Commit
  • ๐Ÿšš Organize chats in shared folders. The owner of a shared folder can now rename chats other people started in it and drag them to another folder within the same shared folder. Commit
  • ๐Ÿ›ฐ๏ธ MCP protocol 2026-07-28. MCP connections now also work with servers that speak the stateless 2026-07-28 protocol version, while older servers still connect through the earlier handshake. #33087, Commit, #29778
  • ๐Ÿ“ง LDAP default email domain. Administrators can now set a default email domain in the LDAP settings or with "LDAP_DEFAULT_EMAIL_DOMAIN", so LDAP users without a mail attribute sign in with their username at that domain as their email address and into any existing account with that address, which is why the domain should be one you control. Commit, #33001
  • ๐Ÿ” OAuth connections over the API. Connections set to OAuth authentication now also send the user's OAuth token when the user calls the API with an API key or bearer token, like tool servers already did. #32826, Commit, #32820
  • ๐Ÿซฃ Hidden base models for groups. Administrators can now turn on the Hidden Models permission under Models Access in the user and group permissions, or set "USER_PERMISSIONS_WORKSPACE_MODELS_HIDDEN", so those users can pick hidden models as the base model of a workspace model while the hidden models stay out of their model picker. Commit, #29806, #29639
  • ๐Ÿงพ Model usage in audit logs. With audit logging on and "/chat" removed from "AUDIT_EXCLUDED_PATHS", where it is excluded by default, each chat reply and tool call round now writes its own audit log entry with the model and the input, output and total tokens the provider reported, linked to the request that started it. Commit, #30098
  • ๐Ÿ“จ Voice call user headers. With "ENABLE_FORWARD_USER_INFO_HEADERS" on, Realtime voice calls now also send the user info headers, or the signed user JWT when configured, to the realtime provider, like chat requests do. #32733, Commit
  • ๐ŸŽ๏ธ Faster action buttons. An action button now only saves the chat again when the action changed a message, so actions on large chats finish sooner. Commit, #32658, Commit
  • ๐Ÿ‘ช Faster group saves. Saving, deleting or changing the members or permissions of a group now finishes in well under a second with thousands of users online, where it took several seconds and reloaded the open chat of everyone online. #32883, Commit, #32882, Commit
  • ๐Ÿงณ Faster folder changes. Renaming, sharing, moving or deleting a folder and deleting all chats now finish quickly with thousands of users online, where each took several seconds and reloaded the open chat of everyone online. #32888, Commit
  • ๐Ÿ“ฃ Faster channel posts. Posting a message in a channel with many members online now returns in a fraction of a second, where it waited for every online member's login to be checked again first. #32889, Commit
  • ๐Ÿ“Š Faster analytics dashboard. The Admin Analytics dashboard now gets its totals, model and user lists and daily charts from fewer and lighter database queries, so it opens faster on instances with many messages. Commit
  • โ™ป๏ธ Prompt cache survives restarts. Tools from tool servers, Open Terminal included, now reach the model in the same form after every restart, so the provider's prompt cache keeps working and long chats are no longer processed again from scratch. #33000, Commit
  • ๐Ÿ‘๏ธ PDF image OCR stays light. With PDF Extract Images (OCR) on, reading text from images in PDFs now uses one processor thread per upload by default, so uploads no longer start a thread pool the size of the server's cores that could slow the whole server down, and administrators can pass their own RapidOCR settings with "RAPIDOCR_PARAMS". Commit, #32844
  • โ™ฟ Improved UI accessibility. Screen reader users now hear the Send button, the sidebar's user menu button by the name it shows, Playground's role button by the word it shows, the model editor's Description, Tools, Skills, Filters and Actions rows by what they show, a sidebar folder's options button, the sidebar button on Calendar, Notes, Channels and Home on phones, the on/off switches on Skills, Functions and Automations rows, the suggested prompts on a new chat as buttons, Archived Chats as a table, the sort order on the column headers of Archived Chats and the Evaluations leaderboard, chat input pills and menus, copy, export, merge and artifact buttons, clear search and Cancel buttons, the note editor's Undo, Redo, Record and Note Menu buttons, Playground's System Instructions button and model selects, the code box in the tool and function editors, switches, icon buttons, selects and number inputs in Admin Settings, the Create knowledge base, Create Prompt and Clone Prompt dialogs and the close button of 22 dialogs by name, together with a source's number, the number on a channel's member count button, the choice a Visibility button shows, a resizable panel's width, how long ago each sidebar chat was updated, the info button under a reply with its usage figures, a model's description, notifications such as copy confirmations (copying a prompt in Workspace included), when a reply starts and finishes, call mode's Listening and Thinking status, menu buttons as menus with their open state, the selected search content type, how many archived chats a search found, how many models match a search in the model picker, the Settings window by name, the sidebar folder toggle by name with its open state, the chosen option in Select dropdowns, the search window's list by its visible caption, a heading on each Workspace page, the sidebar section titles and chat date groups as headings, the sidebar's models, folders and chats as lists, the Settings tabs as Personal and Admin tab lists that point to their panels, the items of the input, integrations, user and chat menus as menu items, the Keyboard tab's shortcut categories as headings with a list under each, the chat input as a text field, the sidebar logo link as New Chat, the onboarding logo by the instance name with other branding images hidden as decoration, the model logos on a new chat by model name (hidden when only one model is selected), the model the arrow keys are on in the model picker, the model name and the Suggested label on a new chat as headings, the suggestion list by name and the chat title as the page heading, and no longer hear an open or closed state on the area around the sidebar button in Channels on phones; keyboard users get the model picker's More and Eject buttons that show on focus, filter lists that move focus to their options when opened, tooltips that show on focus and close with Escape, Escape in the model picker's More menu or filter list that closes only that list, focus that returns to the model picker button when the picker closes with Accessibility Mode on, an outline on the model picker row the arrow keys are on, focus that moves to the other sidebar button when the sidebar opens or closes, arrow keys that move through the input, integrations, user, chat and Terminal menus, a Terminal menu that opens on its first terminal, a Tab key that reaches the note editor's Record and Note Menu buttons, Evaluations leaderboard columns they can sort and models they can open from it, focus that stays on a Workspace section link after choosing it, focus that stays in the Archived Chats list after unarchiving a chat, focus on the recording bar when dictation starts and a Skip to main content link that now moves focus to the page content; notification text in the light theme and the chat dates in Archived Chats now meet the 4.5:1 contrast minimum; buttons in the collapsed sidebar, on sidebar folders, on Prompts, Skills, Functions and Automations rows, on Workspace and Notes list rows, on attached files and in the Integrations menu are no longer nested inside other buttons; the Archived Chats and Keyboard lists stay usable at 400% zoom; and with Accessibility Mode on, pinch zoom works on phones, the active Workspace section is underlined, code editor placeholders, the model editor's JSON Preview row and Calendar's days from other months and today's date meet the contrast minimum, and the More and Eject buttons and Set as default in the model picker, the version link and See what's new in Settings > About, the sidebar's Chat Menu button, the Note Menu and Delete buttons in Notes, the More button on file rows, the Create button's menu arrow, Calendar's previous and next month buttons and the name, ID and command fields in the model and prompt editors are at least 24 pixels in size.
  • ๐Ÿ”„ General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
  • ๐ŸŒ Translation updates. Translations for Korean, Cebuano, Thai, German, Japanese, Vietnamese, Urdu, Bengali, Hungarian, Tibetan, Turkmen, Lithuanian, Danish, Basque, Irish, Slovenian, Estonian, Croatian, Faroese, Georgian, Portuguese (Brazil), Spanish (Spain), Hindi, Finnish, Kabyle, Galician, Uyghur, Slovak, Norwegian Bokmรฅl, Serbian, Ukrainian, Polish, Turkish, Bosnian, Dutch, Czech, Bulgarian, Hebrew, Punjabi, Swedish, Romanian, Persian, Greek, Malay, Latvian, Azerbaijani, Indonesian, Tamil, Filipino and Russian were enhanced and expanded.

Fixed

  • ๐Ÿ›ก๏ธ Security Advisory: This release contains security fixes. We strongly recommend updating all deployments as soon as possible to have the latest security fixes in place. These fixes are not listed in this changelog; we will publish the security advisories for them immediately following CVE assignment. Advisories
  • ๐Ÿ“ค Chat export permission respected. The Export item of a folder in the sidebar, the Export option in Archived Chats and the Copy option in the chat menu are now hidden from users without the Allow Chat Export permission, like the export options of single chats. #32703, Commit, #32702, #32684, Commit, #32683, #32960, Commit
  • ๐ŸŽ›๏ธ Pipe Valves permission respected. The Valves button of a pipe model in the chat input is now hidden from users without the Allow Chat Valves permission. #32772, Commit, #32771
  • ๐Ÿ‘ฅ One model without Multiple Models. A new chat now starts with a single model for users without the Multiple Models permission, where a default or a link with several models kept them all selected. #32668, Commit, #32667
  • ๐Ÿ–Š๏ธ Chat Edit permission respected. The Edit button of a user's own messages is now hidden from users without the Allow Chat Edit permission, where only the Edit button of replies was hidden. #32841, Commit, #32832
  • ๐Ÿ“… Calendar page respects access. Opening the Calendar page with Calendar turned off or without the Calendar permission now returns to the home page, where it showed an empty calendar and an error. #32837, Commit, #32834
  • ๐Ÿ”’ Live access after archiving. People who see a chat through a shared folder now stop receiving its live updates when the owner archives it or archives all chats, and people with a share link stop when the owner unshares all chats, as they already did when a single chat was unshared or deleted. #32887, Commit
  • ๐Ÿงต Thread replies deleted too. Deleting a channel message now also deletes its thread replies, which stayed behind and could still be found in search. #32666, Commit, #32665
  • ๐Ÿ”— Shared chat pages load once. Chats opened under /s/, through a share link or by an administrator viewing another user's chat, no longer reload over and over and jump back to the bottom, which since 0.12.3 made scrolling up impossible. #32725, Commit, #32657
  • ๐Ÿงน Deleting the open chat. Deleting the chat you are viewing from the sidebar now opens an empty new chat, where the deleted chat's messages stayed on screen and the next message failed, in Safari with "The string did not match the expected pattern." #33069, Commit, #33068
  • ๐Ÿชก More Concise and Add Details. Choosing More Concise or Add Details or typing a suggestion under a reply now rewrites that reply, where the model got the instruction without the reply and answered it on its own, for example with "OK, I'll keep answers shorter". #33084, Commit, #33083
  • ๐Ÿ“ฑ Sign-in page on small screens. The sign-in page can now be scrolled when it is taller than the screen, such as on phones with the keyboard open, where parts of the form could be out of reach. Commit
  • ๐Ÿ–ผ๏ธ Note menu image uploads. Images picked with Upload files in a note's menu now appear in the not

These notes run past the length kept in the archive. The rest is on the publisherโ€™s page.