feat(container): update image ghcr.io/open-webui/open-webui ( 0.7.2 ➔ v0.8.7 )

[mortyops]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
ghcr.io/open-webui/open-webui	minor	0.7.2 → v0.8.7

---

Release Notes

open-webui/open-webui (ghcr.io/open-webui/open-webui)

v0.8.7

Compare Source

[0.8.7] - 2026-03-01

Fixed

• 🔒 Connection access control privacy. Tool server and terminal connections without explicit access grants are now private (admin-only) by default, fixing a bug where connections configured with no access grants were visible to all users instead of being restricted. Commit
• 🧠 ChatControls memory leak. The ChatControls panel no longer leaks event listeners, ResizeObserver instances, and media query handlers when navigating between chats, fixing memory accumulation that could degrade performance during extended use. #​22112
• 💾 Temporary chat params preservation. Model parameters are now correctly saved when creating a temporary chat, ensuring custom settings like temperature and top_p persist across the session. Commit
• ⚡ Faster artifact content updates. Artifact content extraction during streaming is now debounced via requestAnimationFrame, reducing redundant DOM reads and improving CPU efficiency when tokens arrive faster than the browser can paint. Commit

v0.8.7

Compare Source

Fixed

• 🔒 Connection access control privacy. Tool server and terminal connections without explicit access grants are now private (admin-only) by default, fixing a bug where connections configured with no access grants were visible to all users instead of being restricted. Commit
• 🧠 ChatControls memory leak. The ChatControls panel no longer leaks event listeners, ResizeObserver instances, and media query handlers when navigating between chats, fixing memory accumulation that could degrade performance during extended use. #​22112
• 💾 Temporary chat params preservation. Model parameters are now correctly saved when creating a temporary chat, ensuring custom settings like temperature and top_p persist across the session. Commit
• ⚡ Faster artifact content updates. Artifact content extraction during streaming is now debounced via requestAnimationFrame, reducing redundant DOM reads and improving CPU efficiency when tokens arrive faster than the browser can paint. Commit

v0.8.6

Compare Source

[0.8.6] - 2026-03-01

Added

• 🖥️ Open Terminal integration. Users can now connect to Open Terminal instances to browse, read, and upload files directly in chat, with the terminal acting as an always-on tool. File navigation includes folder browsing, image and PDF previews, drag-and-drop uploads, directory creation, and file deletion. The current working directory is automatically injected into tool descriptions for context-aware commands. Commit, Commit, Commit
• 📄 Terminal file creation. Users can now create new empty files directly in the Open Terminal file browser, in addition to the existing folder creation functionality. Commit
• ✏️ Terminal file editing. Users can now edit text files directly in the Open Terminal file browser, with the ability to save changes back to the terminal. Commit
• 🛠️ Terminal file preview toolbar. The Open Terminal file browser now displays contextual toolbar buttons based on file type, including preview/source toggle for Markdown and CSV files, reset view for images, and improved editing controls for text files. Commit
• 🔄 Terminal file write refresh. The file browser now automatically refreshes when files are written or modified via the write_file or replace_file_content tools, eliminating the need to manually refresh. Commit
• 🛡️ Docker image SBOM attestation. Docker images now include a Software Bill of Materials (SBOM) for vulnerability scanning and supply chain security compliance. #​21779, Commit
• 📡 Reporting-Endpoints security header. Administrators can now configure a Reporting-Endpoints header via the REPORTING_ENDPOINTS environment variable to receive CSP violation reports directly, aiding in security policy debugging and hardening. #​21830
• 🎯 Action button priority sorting. Action buttons under assistant messages now appear in a consistent order based on the priority field from function Valves, allowing developers to control button placement. #​21790
• 🏷️ Public/Private model filtering. The Admin Settings Model listing now displays Public/Private badges and includes filter options to easily view public or private models. #​21732, #​21797
• 👁️ Show/Hide all models bulk action. Administrators can now show or hide all models at once from the Admin Settings Models page Actions menu, making it faster to manage model visibility. Bulk actions now display a single toast notification on success for better user feedback. #​21838, #​21958
• 🔐 Individual user sharing control. Administrators can now disable individual user sharing via the USER_PERMISSIONS_ACCESS_GRANTS_ALLOW_USERS environment variable, allowing only group-based sharing when set to false. #​21793, Commit, Commit
• 🔄 OAuth profile sync on login. Administrators can now enable automatic synchronization of user profile name and email from OAuth providers on login via the OAUTH_UPDATE_NAME_ON_LOGIN and OAUTH_UPDATE_EMAIL_ON_LOGIN environment variables. #​21787, Commit
• 👥 Default group share permission. Administrators can now configure the default sharing permission for new groups via the DEFAULT_GROUP_SHARE_PERMISSION environment variable, controlling whether anyone, no one, or only members can share to new groups. Commit
• 💨 Streaming performance. Chat responses now render more efficiently during streaming, reducing CPU usage and improving responsiveness. Commit
• 🧮 Streaming message comparison. Chat message updates during streaming are now faster thanks to an optimization that skips expensive comparisons when content changes. #​21884
• 🚀 Streaming scroll optimization. Chat auto-scroll during streaming is now more efficient by batching scroll operations via requestAnimationFrame, reducing unnecessary layout reflows when tokens arrive faster than the browser can paint. #​21946
• 📋 Message cloning performance. Chat message cloning during streaming is now more efficient thanks to the use of structuredClone() instead of JSON.parse(JSON.stringify(...)). #​21948
• 🎯 Faster code block rendering. Chat message updates during streaming are now faster. #​22101
• 📊 Faster status history display. Chat message updates during streaming are now faster. #​22103
• 🛠️ Faster tool result handling. Tool execution results are now handled more efficiently, improving streaming performance. #​22104
• 💾 Faster model and file operations. Model selection, file preparation, and history saving are now faster. #​22102
• 🛠️ Tool server advanced options toggle. Advanced OpenAPI configuration options in the tool server modal are now hidden by default behind a toggle, simplifying the interface for basic setups. The admin settings tab was also renamed from "Tools" to "Integrations" for clearer organization. Commit, Commit
• 🔧 Faster tool loading. Tool access control now skips an unnecessary database query when no tools are attached to the request, slightly improving performance. #​21873
• ➗ Faster math rendering. Mathematical notation now renders more efficiently, improving responsiveness when displaying equations in chat. #​21880
• 🏎️ Faster message list updates. The chat message list now rebuilds at most once per animation frame during streaming, reducing CPU overhead. #​21885
• 📋 Faster message rendering. Chat message rendering is now more efficient during streaming. #​22086
• 🗄️ Faster real-time chat updates. Chat responses now process faster with improved handling for concurrent users. #​22087
• 📝 Faster status persistence. Only final status updates are now saved to the database during streaming, reducing unnecessary writes. #​22085
• 🔄 Faster event matching. Event handling in the socket handler is now more efficient. Commit
• 🔀 General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
• 🌐 Translation updates. Translations for German, Portuguese (Brazil), Simplified Chinese, Traditional Chinese, Catalan, and Spanish were enhanced and expanded.

Fixed

• 🗄️ Database migration execution. Database migrations now run correctly on startup, fixing a circular import issue that caused schema updates to fail silently. #​21848, Commit
• 🔔 Notification HTML escaping. Notification messages now properly escape HTML content, matching the behavior in chat messages and ensuring consistent rendering across the interface. #​21860, Commit
• 🛠️ Tool call JSON error handling. Chat no longer crashes when models generate malformed JSON in tool call arguments; instead, a descriptive error message is returned to the model for retry. #​21984, Commit
• 🧠 Reasoning model KV cache preservation. Reasoning model thinking tags are no longer stored as HTML in the database, preserving KV cache efficiency for backends like llama.cpp and ensuring faster subsequent conversation turns. #​21815, Commit
• ⚡ Duplicate model execution prevention. Models are no longer called twice when no tools are configured, eliminating unnecessary API requests and reducing latency. #​21802, Commit
• 🔐 OAuth session database error. OAuth login no longer fails with a database error when creating sessions, fixing the "'NoneType' object has no attribute 'id'" and "can't adapt type 'dict'" errors that occurred during OAuth group creation. #​21788
• 👤 User sharing permission enforcement. The user sharing option now correctly respects the USER_PERMISSIONS_ACCESS_GRANTS_ALLOW_USERS setting, fixing an issue where sharing to individual users was incorrectly allowed even when disabled. #​21856, Commit, Commit
• 🔑 Password manager autofill. Password manager autofill (like iCloud Passwords, 1Password, Bitwarden) now correctly captures filled-in passwords, fixing login failures where the password appeared filled but was sent as empty. #​21869, Commit
• 📝 RAG template duplication. RAG templates are no longer duplicated in chat messages when models make multiple tool calls, preventing hallucinations and incorrect tool usage. #​21780, Commit
• 📋 Audit log stdout. Audit logs now correctly appear on stdout when the ENABLE_AUDIT_STDOUT environment variable is set to true, aligning runtime behavior with the intended configuration. #​21777
• 🎯 Function valve priority resolution. Function priorities defined in code are now correctly applied when no custom value has been saved in the database, ensuring consistent action button and filter ordering. #​21841
• 📄 Web content knowledge base append. Processing web URLs with overwrite=false now correctly appends content to existing knowledge bases instead of silently doing nothing, fixing a regression where no content was being added. #​21786, Commit
• 🔍 Web search domain filter config. The WEB_SEARCH_DOMAIN_FILTER_LIST environment variable is now correctly read and applied, fixing an issue where domain filtering for web searches always used an empty default value. #​21964, #​20186
• 🧹 Tooltip memory leak. Tooltip instances are now properly destroyed when elements change, fixing a memory leak that could cause performance issues over time. #​21969
• ⌨️ MessageInput memory leak. Event listeners in the message input component are now properly cleaned up, preventing a memory leak that could cause page crashes during extended use. #​21968
• 📝 Notes memory leak. Event listeners in the Notes component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #​21963
• 🏗️ Model create memory leak. Event listeners in the model creation page are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #​21966
• 💬 MentionList memory leak. Event listeners in the MentionList component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #​21965
• 📐 Sidebar memory leak. Event listeners in the Sidebar component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #​22082
• 🎨 Sidebar user menu positioning. The sidebar user menu no longer drifts rightward when the sidebar is resized, keeping the menu properly aligned with its trigger. #​21853
• 💻 Code block UI. Code block headers are now sticky and properly positioned, with language labels now showing tooltips for truncated text. Commit
• 📊 Multi-model responses horizontal scroll. The model list in multi-model responses tabs now has horizontal scroll support, making all models accessible on desktop screens. #​21800, Commit
• 🎭 TailwindCSS gray color theme. Custom gray color palette is now correctly applied to the CSS root theme layer, fixing an issue where --color-gray-x variables were missing. #​21900, #​21899
• 📎 Broken documentation links. Fixed broken links in the backend config and admin settings that pointed to outdated documentation locations. #​21904
• 🔓 OAuth session token decryption. OAuth sessions are now properly detached from the database context before token decryption, preventing potential database session conflicts when reading encrypted tokens. #​21794
• 🕐 Chat timestamp i18n fix. Chat timestamps in the sidebar now display correctly, fixing an issue where the time ago format (e.g., "5m", "2h", "3d") was not being localized properly due to incorrect variable casing in the translation function. Commit
• 🍞 Model toast notification fix. Hiding or showing a single model now displays only one toast notification instead of two, removing the redundant generic "model updated" message when a specific action toast is shown. #​22079
• 📡 Offline mode embedding model fix. Open WebUI no longer attempts to download embedding models when in offline mode, fixing error logs that occurred when trying to fetch models that weren't cached locally. #​22106, #​21405

v0.8.6

Compare Source

Added

• 🖥️ Open Terminal integration. Users can now connect to Open Terminal instances to browse, read, and upload files directly in chat, with the terminal acting as an always-on tool. File navigation includes folder browsing, image and PDF previews, drag-and-drop uploads, directory creation, and file deletion. The current working directory is automatically injected into tool descriptions for context-aware commands. Commit, Commit, Commit
• 📄 Terminal file creation. Users can now create new empty files directly in the Open Terminal file browser, in addition to the existing folder creation functionality. Commit
• ✏️ Terminal file editing. Users can now edit text files directly in the Open Terminal file browser, with the ability to save changes back to the terminal. Commit
• 🛠️ Terminal file preview toolbar. The Open Terminal file browser now displays contextual toolbar buttons based on file type, including preview/source toggle for Markdown and CSV files, reset view for images, and improved editing controls for text files. Commit
• 🔄 Terminal file write refresh. The file browser now automatically refreshes when files are written or modified via the write_file or replace_file_content tools, eliminating the need to manually refresh. Commit
• 🛡️ Docker image SBOM attestation. Docker images now include a Software Bill of Materials (SBOM) for vulnerability scanning and supply chain security compliance. #​21779, Commit
• 📡 Reporting-Endpoints security header. Administrators can now configure a Reporting-Endpoints header via the REPORTING_ENDPOINTS environment variable to receive CSP violation reports directly, aiding in security policy debugging and hardening. #​21830
• 🎯 Action button priority sorting. Action buttons under assistant messages now appear in a consistent order based on the priority field from function Valves, allowing developers to control button placement. #​21790
• 🏷️ Public/Private model filtering. The Admin Settings Model listing now displays Public/Private badges and includes filter options to easily view public or private models. #​21732, #​21797
• 👁️ Show/Hide all models bulk action. Administrators can now show or hide all models at once from the Admin Settings Models page Actions menu, making it faster to manage model visibility. Bulk actions now display a single toast notification on success for better user feedback. #​21838, #​21958
• 🔐 Individual user sharing control. Administrators can now disable individual user sharing via the USER_PERMISSIONS_ACCESS_GRANTS_ALLOW_USERS environment variable, allowing only group-based sharing when set to false. #​21793, Commit, Commit
• 🔄 OAuth profile sync on login. Administrators can now enable automatic synchronization of user profile name and email from OAuth providers on login via the OAUTH_UPDATE_NAME_ON_LOGIN and OAUTH_UPDATE_EMAIL_ON_LOGIN environment variables. #​21787, Commit
• 👥 Default group share permission. Administrators can now configure the default sharing permission for new groups via the DEFAULT_GROUP_SHARE_PERMISSION environment variable, controlling whether anyone, no one, or only members can share to new groups. Commit
• 💨 Streaming performance. Chat responses now render more efficiently during streaming, reducing CPU usage and improving responsiveness. Commit
• 🧮 Streaming message comparison. Chat message updates during streaming are now faster thanks to an optimization that skips expensive comparisons when content changes. #​21884
• 🚀 Streaming scroll optimization. Chat auto-scroll during streaming is now more efficient by batching scroll operations via requestAnimationFrame, reducing unnecessary layout reflows when tokens arrive faster than the browser can paint. #​21946
• 📋 Message cloning performance. Chat message cloning during streaming is now more efficient thanks to the use of structuredClone() instead of JSON.parse(JSON.stringify(...)). #​21948
• 🎯 Faster code block rendering. Chat message updates during streaming are now faster. #​22101
• 📊 Faster status history display. Chat message updates during streaming are now faster. #​22103
• 🛠️ Faster tool result handling. Tool execution results are now handled more efficiently, improving streaming performance. #​22104
• 💾 Faster model and file operations. Model selection, file preparation, and history saving are now faster. #​22102
• 🛠️ Tool server advanced options toggle. Advanced OpenAPI configuration options in the tool server modal are now hidden by default behind a toggle, simplifying the interface for basic setups. The admin settings tab was also renamed from "Tools" to "Integrations" for clearer organization. Commit, Commit
• 🔧 Faster tool loading. Tool access control now skips an unnecessary database query when no tools are attached to the request, slightly improving performance. #​21873
• ➗ Faster math rendering. Mathematical notation now renders more efficiently, improving responsiveness when displaying equations in chat. #​21880
• 🏎️ Faster message list updates. The chat message list now rebuilds at most once per animation frame during streaming, reducing CPU overhead. #​21885
• 📋 Faster message rendering. Chat message rendering is now more efficient during streaming. #​22086
• 🗄️ Faster real-time chat updates. Chat responses now process faster with improved handling for concurrent users. #​22087
• 📝 Faster status persistence. Only final status updates are now saved to the database during streaming, reducing unnecessary writes. #​22085
• 🔄 Faster event matching. Event handling in the socket handler is now more efficient. Commit
• 🔀 General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
• 🌐 Translation updates. Translations for German, Portuguese (Brazil), Simplified Chinese, Traditional Chinese, Catalan, and Spanish were enhanced and expanded.

Fixed

• 🗄️ Database migration execution. Database migrations now run correctly on startup, fixing a circular import issue that caused schema updates to fail silently. #​21848, Commit
• 🔔 Notification HTML escaping. Notification messages now properly escape HTML content, matching the behavior in chat messages and ensuring consistent rendering across the interface. #​21860, Commit
• 🛠️ Tool call JSON error handling. Chat no longer crashes when models generate malformed JSON in tool call arguments; instead, a descriptive error message is returned to the model for retry. #​21984, Commit
• 🧠 Reasoning model KV cache preservation. Reasoning model thinking tags are no longer stored as HTML in the database, preserving KV cache efficiency for backends like llama.cpp and ensuring faster subsequent conversation turns. #​21815, Commit
• ⚡ Duplicate model execution prevention. Models are no longer called twice when no tools are configured, eliminating unnecessary API requests and reducing latency. #​21802, Commit
• 🔐 OAuth session database error. OAuth login no longer fails with a database error when creating sessions, fixing the "'NoneType' object has no attribute 'id'" and "can't adapt type 'dict'" errors that occurred during OAuth group creation. #​21788
• 👤 User sharing permission enforcement. The user sharing option now correctly respects the USER_PERMISSIONS_ACCESS_GRANTS_ALLOW_USERS setting, fixing an issue where sharing to individual users was incorrectly allowed even when disabled. #​21856, Commit, Commit
• 🔑 Password manager autofill. Password manager autofill (like iCloud Passwords, 1Password, Bitwarden) now correctly captures filled-in passwords, fixing login failures where the password appeared filled but was sent as empty. #​21869, Commit
• 📝 RAG template duplication. RAG templates are no longer duplicated in chat messages when models make multiple tool calls, preventing hallucinations and incorrect tool usage. #​21780, Commit
• 📋 Audit log stdout. Audit logs now correctly appear on stdout when the ENABLE_AUDIT_STDOUT environment variable is set to true, aligning runtime behavior with the intended configuration. #​21777
• 🎯 Function valve priority resolution. Function priorities defined in code are now correctly applied when no custom value has been saved in the database, ensuring consistent action button and filter ordering. #​21841
• 📄 Web content knowledge base append. Processing web URLs with overwrite=false now correctly appends content to existing knowledge bases instead of silently doing nothing, fixing a regression where no content was being added. #​21786, Commit
• 🔍 Web search domain filter config. The WEB_SEARCH_DOMAIN_FILTER_LIST environment variable is now correctly read and applied, fixing an issue where domain filtering for web searches always used an empty default value. #​21964, #​20186
• 🧹 Tooltip memory leak. Tooltip instances are now properly destroyed when elements change, fixing a memory leak that could cause performance issues over time. #​21969
• ⌨️ MessageInput memory leak. Event listeners in the message input component are now properly cleaned up, preventing a memory leak that could cause page crashes during extended use. #​21968
• 📝 Notes memory leak. Event listeners in the Notes component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #​21963
• 🏗️ Model create memory leak. Event listeners in the model creation page are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #​21966
• 💬 MentionList memory leak. Event listeners in the MentionList component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #​21965
• 📐 Sidebar memory leak. Event listeners in the Sidebar component are now properly cleaned up, fixing a memory leak that could cause page crashes during extended use. #​22082
• 🎨 Sidebar user menu positioning. The sidebar user menu no longer drifts rightward when the sidebar is resized, keeping the menu properly aligned with its trigger. #​21853
• 💻 Code block UI. Code block headers are now sticky and properly positioned, with language labels now showing tooltips for truncated text. Commit
• 📊 Multi-model responses horizontal scroll. The model list in multi-model responses tabs now has horizontal scroll support, making all models accessible on desktop screens. #​21800, Commit
• 🎭 TailwindCSS gray color theme. Custom gray color palette is now correctly applied to the CSS root theme layer, fixing an issue where --color-gray-x variables were missing. #​21900, #​21899
• 📎 Broken documentation links. Fixed broken links in the backend config and admin settings that pointed to outdated documentation locations. #​21904
• 🔓 OAuth session token decryption. OAuth sessions are now properly detached from the database context before token decryption, preventing potential database session conflicts when reading encrypted tokens. #​21794
• 🕐 Chat timestamp i18n fix. Chat timestamps in the sidebar now display correctly, fixing an issue where the time ago format (e.g., "5m", "2h", "3d") was not being localized properly due to incorrect variable casing in the translation function. Commit
• 🍞 Model toast notification fix. Hiding or showing a single model now displays only one toast notification instead of two, removing the redundant generic "model updated" message when a specific action toast is shown. #​22079
• 📡 Offline mode embedding model fix. Open WebUI no longer attempts to download embedding models when in offline mode, fixing error logs that occurred when trying to fetch models that weren't cached locally. #​22106, #​21405

v0.8.5

Compare Source

[0.8.5] - 2026-02-23

Added

• ⌨️ Voice dictation shortcut. Users can now toggle voice dictation using Cmd+Shift+L (or Ctrl+Shift+L on Windows/Linux), making it faster to start and stop dictation without clicking the microphone button.

Fixed

• 🚫 Model access KeyError fix. The /api/models endpoint no longer crashes with a 500 error when models have incomplete info metadata missing the user_id field (e.g. models using global default metadata).
• 🔄 Frontend initialization resilience. The app layout now gracefully handles individual API failures during initialization (getModels, getBanners, getTools, getUserSettings, setToolServers) instead of blocking the entire page load when any single call fails.
• 🛡️ Backend config null safety. Language detection during app initialization no longer crashes when the backend config fetch fails, preventing a secondary cause of infinite loading.

v0.8.5

Compare Source

Added

• ⌨️ Voice dictation shortcut. Users can now toggle voice dictation using Cmd+Shift+L (or Ctrl+Shift+L on Windows/Linux), making it faster to start and stop dictation without clicking the microphone button.

Fixed

• 🚫 Model access KeyError fix. The /api/models endpoint no longer crashes with a 500 error when models have incomplete info metadata missing the user_id field (e.g. models using global default metadata).
• 🔄 Frontend initialization resilience. The app layout now gracefully handles individual API failures during initialization (getModels, getBanners, getTools, getUserSettings, setToolServers) instead of blocking the entire page load when any single call fails.
• 🛡️ Backend config null safety. Language detection during app initialization no longer crashes when the backend config fetch fails, preventing a secondary cause of infinite loading.

v0.8.4

Compare Source

[0.8.4] - 2026-02-23

Added

• 🛜 Provider URL suggestions. The connection form now displays a dropdown with suggested URLs for popular AI providers, making it easier to configure connections. Commit
• ☁️ Anthropic model fetching. The system now properly fetches available models from the Anthropic API, ensuring all Anthropic models are accessible. Commit
• 💡 No models prompt. When no models are available, a helpful prompt now guides users to manage their provider connections. Commit
• ⚙️ Connection enable/disable toggles. Individual provider connections can now be enabled or disabled from both admin and user settings. Commit
• ⏸️ Prompt enable/disable toggle. Users can now enable or disable prompts directly from the prompts list using a toggle switch, without needing to delete and recreate them. Inactive prompts display an "Inactive" badge and are still visible in the list. Commit
• 🗑️ Memory deletion. Agents can now delete specific memories that are no longer relevant, duplicated, or incorrect, giving better control over stored memory content. Commit
• 📋 Memory listing. Agents can now list all stored memories, enabling them to identify which memories to manage or delete based on the complete memory inventory. Commit
• 📦 Auto pip install toggle. Administrators can now disable automatic pip package installation from function frontmatter requirements using the ENABLE_PIP_INSTALL_FRONTMATTER_REQUIREMENTS environment variable, providing more control over function dependency management. Commit
• 🔗 Anthropic Messages API proxy. A new API endpoint now supports the Anthropic Messages API format, allowing tools like Claude Code to authenticate through Open WebUI and access configured models. Tool calls are now properly supported in streaming responses with correct multi-block indexing, and error status from tools is propagated correctly. The endpoint converts requests to OpenAI format internally, routes them through the existing chat pipeline, and returns responses in Anthropic format. #​21390, Commit, Commit
• 👥 Multi-device OAuth sessions. Users can now stay logged in on multiple devices simultaneously with OAuth, as re-logging in no longer terminates existing sessions. The oldest sessions are automatically pruned when the session limit is exceeded. #​21647, Commit
• 🔐 OAuth group default share setting. Administrators can now configure the default sharing setting for OAuth-created groups using the OAUTH_GROUP_DEFAULT_SHARE environment variable, allowing control over whether new groups default to private or shared with members. #​21679, Commit
• 🔧 Knowledge base import behavior. The web content import endpoint now supports a configurable overwrite flag, allowing users to add multiple URLs to the same knowledge base instead of replacing existing content. #​21613, #​21336, Commit
• 🧩 Skill JSON import support. Skills can now be imported from both JSON and Markdown files. #​21511
• 🔍 You.com web search provider. A new web search provider option for You.com is now available, giving users another search engine choice for web-enabled models. The You.com provider enriches search results by including both descriptions and snippets for better context. #​21599
• 🚀 Message list performance. Loading conversation history when sending messages is now significantly faster, improving response latency before the model starts generating. This also speeds up chat search and RAG context building. #​21588
• 🎯 Concurrent embedding request control. Administrators can now control the maximum number of concurrent embedding API requests using the RAG_EMBEDDING_CONCURRENT_REQUESTS environment variable, helping manage API rate limits while maintaining embedding performance. #​21662, Commit
• ⚡ Message upsert optimization. Loading chat data during message saving is now significantly faster by eliminating a redundant database call that occurred on every message upsert, which happens many times during streaming responses. #​21592
• ⚡ Message send optimization. Loading chat data during message sending is now significantly faster by eliminating unnecessary full conversation history loads. The system now uses targeted queries that fetch only the needed data instead of loading entire chat objects with all message history. #​21596
• 🚀 Tag filtering optimization. Chat search with tag filtering now uses more efficient database queries, making filtered searches significantly faster. Commit
• ⚡ Shared chat loading optimization. The shared chats endpoint now loads only the needed columns instead of the full conversation history, making shared chat listings significantly faster. #​21614
• 🗂️ Archived and pinned chat loading. Loading archived and pinned chat lists is now significantly faster by loading only the needed columns instead of full conversation data. #​21591
• 💨 Chat title query optimization. Retrieving chat titles now queries only the title column instead of the entire conversation history, making title lookups significantly faster and reducing database load. #​21590
• 🗄️ Batch access grants for multiple resources. Loading channels, knowledge bases, models, notes, prompts, skills, and tools now uses batch database queries for access grants instead of individual queries per item, significantly reducing database load. For 30 items, this reduces approximately 31 queries to just 3. #​21616
• 📋 Notes list payload optimization. Notes list and search endpoints now return only a 200-character preview instead of the full note content, reducing response payload from ~167 MB to ~10 KB for 60 notes and eliminating N+1 queries for access grants. The Notes tab now loads in seconds instead of tens of seconds. #​21549
• ⚡ Tools list performance. Loading the tools list is now significantly faster by deferring content and specs fields from database queries, and using cached tool modules instead of reloading them for each request. Commit
• 📝 Group description display. The admin groups list now shows each group's description, making it easier for administrators to identify groups at a glance.
• 🏷️ Sort by dropdown. Administrators can now sort groups using a dropdown menu with options for Name or Members, replacing the previous clickable column headers.
• 📶 Admin groups list sorting. The Group and Users columns in the admin groups list are now clickable for sorting, allowing administrators to sort groups alphabetically by name or numerically by member count. #​21692
• 🔽 Rich UI auto-scroll. The view now automatically scrolls to action-generated Rich UI content once it renders, ensuring users can see the results without manually scrolling. #​21698, #​21482
• 📊 Admin analytics toggle. Administrators can now enable or disable the analytics feature using the ENABLE_ADMIN_ANALYTICS environment variable, giving more control over available admin features. #​21651, Commit
• 📊 Analytics sorting enhancement. The Analytics dashboard now supports sorting by Tokens column for both Model Usage and User Usage tables, and the Share/Percentage columns are now clickable for sorting. Administrators can more easily identify the most token-consuming models and users. Commit
• 📑 Fetch URL citation sources. When models fetch URLs during tool calling, the fetched URLs now appear as clickable citation sources in the UI with content previews, matching the existing behavior of web search and knowledge file tools. #​21669
• 🔗 Admin settings tab navigation. The admin settings sidebar now supports native browser tab opening, allowing users to middle-click or right-click to open settings pages in new tabs. The navigation was converted from button-based to anchor-based elements. #​21721
• 🏷️ Model visibility badges. The Admin Settings Models page now displays Public or Private badges directly on each model, making it easy to identify model access levels at a glance without opening the edit screen. #​21732, Commit
• 🛠️ Global model defaults. Administrators can now configure default metadata and parameters that automatically apply to all models, reducing manual configuration for newly discovered models. Default capabilities (like vision, web search, code interpreter) and parameters (like temperature, max_tokens) can be set globally in Admin Settings, with per-model overrides still available. #​20658, Commit
• 💬 Plaintext tool output display. Tool outputs that are plain strings now display naturally in a monospace block instead of quoted/escaped format, making multi-line string outputs easier to read. #​21553, Commit
• 🔐 Event call input masking. Functions can now request masked password input in confirmation dialogs, allowing sensitive data entry to be hidden from view. This extends the existing masking feature from user valves to event calls. #​21540, Commit
• 🗂️ JSON logging support. Administrators can now enable JSON-formatted logging by setting the LOG_FORMAT environment variable to "json", making logs suitable for log aggregators like Loki, Fluentd, CloudWatch, and Datadog. #​21747
• ♿ UI accessibility improvements. Screen reader users can now navigate the interface more easily with improved keyboard navigation in dialogs and proper ARIA labels on all interactive elements. Added aria-labels to close, back, and action buttons across various components, and improved semantic HTML and screen reader support across auth, sidebar, chat, and notification components, addressing WCAG compliance. Added aria-labels to search inputs, select fields, and modals in admin and user settings, and improved accessibility for text inputs, rating components, citations, and web search results. Added aria-labels to workspace components including Knowledge, Models, Prompts, Skills, and Tools pages for improved screen reader support. [#​217

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mortyops]

--- HelmRelease: ai/open-webui Deployment: ai/open-webui

+++ HelmRelease: ai/open-webui Deployment: ai/open-webui

@@ -72,13 +72,13 @@

           value: redis
         - name: WEBSOCKET_REDIS_URL
           value: redis://open-webui-dragonfly:6379
         envFrom:
         - secretRef:
             name: open-webui
-        image: ghcr.io/open-webui/open-webui:0.7.2@sha256:16d9a3615b45f14a0c89f7ad7a3bf151f923ed32c2e68f9204eb17d1ce40774b
+        image: ghcr.io/open-webui/open-webui:v0.8.7@sha256:8d74f073c7bfa494e374705e0aed326bc9dbb737e3ce0160533529a97957c19a
         name: app
         resources:
           limits:
             memory: 2Gi
           requests:
             cpu: 250m

[mortyops]

--- kubernetes/apps/ai/open-webui/app Kustomization: ai/open-webui HelmRelease: ai/open-webui

+++ kubernetes/apps/ai/open-webui/app Kustomization: ai/open-webui HelmRelease: ai/open-webui

@@ -53,13 +53,13 @@

               WEBSOCKET_REDIS_URL: redis://open-webui-dragonfly:6379
             envFrom:
             - secretRef:
                 name: open-webui
             image:
               repository: ghcr.io/open-webui/open-webui
-              tag: 0.7.2@sha256:16d9a3615b45f14a0c89f7ad7a3bf151f923ed32c2e68f9204eb17d1ce40774b
+              tag: v0.8.7@sha256:8d74f073c7bfa494e374705e0aed326bc9dbb737e3ce0160533529a97957c19a
             resources:
               limits:
                 memory: 2Gi
               requests:
                 cpu: 250m
                 memory: 1Gi