Registro de alterações

• Copy the backend workspace's production node_modules tree into the final Docker image alongside the root dependency tree, and add regression coverage for non-hoisted backend packages.

• Knowledge collections. Create reusable document collections in Settings, assign existing or newly uploaded documents to them, and attach an entire collection to a conversation as one context source.
• Standalone notes. A dedicated Notes page supports creating, editing, deleting, searching, and previewing encrypted-at-rest Markdown notes.
• Chat folders. Create, rename, collapse, and delete sidebar folders; move conversations between them or return a conversation to the unfiled list.
• Per-chat controls. Override the system prompt, temperature, top-p, top-k, min-p, maximum tokens, repeat penalty, seed, and context length for an individual conversation, with reset controls and persisted session state.
• Expanded attachment menu. Reuse an existing document, upload a new file, attach a knowledge collection, or fetch a public webpage into chat context.
• Voice dictation. Browsers with the Web Speech API can transcribe speech directly into the message composer while preserving already typed text.
• Follow-up suggestions. After a completed assistant response, Libre WebUI can generate short, clickable suggestions for the user's next message.
• Editable conversations and ratings. Edit and resend a previous user message from that point in the conversation, and record a positive or negative rating on assistant responses.
• Richer code blocks. Long code blocks start collapsed and can be expanded, downloaded with a language-aware filename, or opened in the artifact preview when the language supports it.
• Artifact history. Navigate earlier and later versions of an artifact from the slide-out panel without leaving the conversation.
• Reasoning duration. Thinking blocks show elapsed reasoning time during generation and retain the final duration with the saved response.
• Conversation navigation. The sidebar groups chats by date, adds archiving, and shows conversation previews on hover; settings navigation is searchable.
• What's New dialog. A version-aware modal summarizes newly installed features once after an upgrade and records the version locally when dismissed.
• OpenCode and Pi agents. The Agents group detects opencode and pi alongside Claude Code and Codex. Pi runs statelessly with tools disabled and a neutral system prompt so chats do not use the server user's Pi configuration.
• Explicit agent model selection. Claude Code offers its default, Sonnet, Opus, and Haiku choices; Codex exposes its documented ChatGPT-sign-in models; OpenCode discovers provider models and requires an explicit selection instead of inheriting a possibly unreachable CLI default.
• Codex through ChatGPT sign-in. The bundled administrator-only Codex provider reuses the server's codex login session for chat and sandboxed Work tasks. The CLI's OAuth client refreshes tokens, credentials never enter task containers, and administrators can disable the integration with CODEX_OAUTH_MODELS_ENABLED=false.
• Full-year usage activity. The administrator Usage page adds a responsive contribution-style calendar for the trailing year, per-day tooltips and call totals, top-model coloring, an intensity scale, and a ranked model legend designed to remain distinguishable in both themes.
• Ollama and agent metering. Local Ollama calls now contribute prompt and completion token counts, while agent CLI turns contribute usage events, so the activity calendar and model tables cover local, plugin, and agent chats.

• New interface strings for notes, folders, controls, attachments, dictation, usage, and related states are included across all 25 shipped locales.
• Added database indexes for per-user notes and session folders and enforced clear storage policies: at most 100 notes and 100 folders per user, 200 characters per note title, 200,000 characters per note, and 120 characters per folder name.
• Upgraded both application workspaces to TypeScript 7 while keeping ESLint on an isolated compatible TypeScript compiler; expanded toolchain regression tests prevent the two compiler paths from drifting.
• Added focused regression suites for webpage fetching, HTML artifacts, OAuth, registration, password handling, public deployment defaults, content limits, agent chats, Codex OAuth, and usage analytics.
• Refined the project and Helm descriptions and keywords around Libre WebUI's local-first chat, private knowledge, artifact, agent, and Work capabilities.

• Agent chat selection now retains provider identity. Starting a chat with an agent, or switching an existing chat to one, no longer fails after the model selector drops the agent provider metadata.
• Work model selection excludes agent CLI entries. Agent pseudo-models stay in chat's Agents group instead of appearing as unusable Work provider models.
• Codex streaming handles every supported caller path. Responses streams without a content-type are recognized, non-streaming callers receive an aggregated result, and accumulated output is retained when a terminal event carries no final text.
• Refactored What's New initialization and document-list loading so the frontend passes the current React effect and Fast Refresh lint rules without warnings.

• Registration is closed by default after bootstrap. A fresh database still permits exactly one local administrator, while every later local or OAuth registration requires ENABLE_SIGNUP=true and still enters the existing approval flow.
• Password policy is enforced server-side and in the UI. New passwords must contain at least 12 characters with uppercase, lowercase, and numeric characters, and cannot exceed bcrypt's 72 UTF-8-byte input boundary.
• OAuth callbacks no longer expose bearer tokens. GitHub and Hugging Face flows bind cryptographically random state to short-lived HttpOnly, SameSite cookies. The resulting JWT crosses through a 60-second Secure, HttpOnly exchange cookie that is cleared immediately instead of appearing in URLs, browser history, referrers, or reverse-proxy logs.
• Safer Compose defaults. The WebUI binds to loopback by default; bundled Ollama is no longer published to the host unless the new opt-in override is used; signup defaults to disabled; and the private deployment separates the root-equivalent Work Docker socket and Watchtower into explicit overrides.
• SSRF-resistant webpage attachments. Only HTTP(S) URLs without embedded credentials are accepted. Every resolved IPv4/IPv6 address and every redirect hop must remain public, DNS is pinned for the connection, redirects are bounded, fetches time out after 15 seconds, and response bodies are limited to 2 MB.
• Parser-based HTML extraction. Webpage text now uses an HTML parser instead of filtering regular expressions, ignores script/style/template content, and decodes entities once. This fixes CodeQL alerts #119, #120, and #121 without introducing double-unescaping or malformed-markup bypasses.
• Isolated artifact previews. HTML previews open inside an opaque-origin sandboxed iframe without same-origin or sandbox-escape privileges. SVG artifacts also render in a script-free sandbox with a restrictive content security policy instead of using direct HTML injection.
• Protected server Codex credentials. User-writable plugins cannot reserve the bundled Codex provider ID or receive the server user's OAuth access token; only the bundled definition matching its trust anchor can use that route.
• CodeQL cookie fixes. The OAuth transfer cookie is always Secure and HttpOnly, resolving alerts #117 and #118 for clear-text transmission and client-side exposure of a sensitive server cookie.
• Added a public security policy with private GitHub/email reporting, coordinated-disclosure expectations, documented trust boundaries, supported versions, and a good-faith research safe harbor.

• Refreshed 31 direct and transitive dependencies. Notable upgrades include better-sqlite3 13, TypeScript 7, Xterm 6, Vite 8.2, KaTeX 0.18, Playwright 1.62, Electron 41.10.3, electron-builder 26.15.7, React type definitions, i18next, Framer Motion, Lucide, PostCSS, and TanStack Query.
• Raised the brace-expansion override from 5.0.8 to 5.0.9 to close the remaining denial-of-service CVE bypass path; npm audit reports no known vulnerabilities at release time.

• Updated quick-start, authentication, Docker, external Ollama, local GPU, environment-variable, development-branch, agent CLI, provider connection, and private remote deployment guides for the new registration and network defaults.
• Added Docker Hub publishing metadata with installation paths, image-tag semantics, architecture support, security notes, and canonical project links.
• Replaced certification-style compliance claims with precise regulated- deployment guidance: Libre WebUI can support local, private, or air-gapped controls, but the complete deployment and organizational process determine compliance.
• Clarified the project charter's no-relicensing examples, added the canonical security-policy link, removed the obsolete Hetzner GPU tutorial, and fixed the private Compose documentation link so it works outside the repository.

• Registration approval queue. Public signups now wait for an administrator. New accounts land in a pending state, are told so at sign-in, and appear in a Pending approvals card in user management to approve or remove. Existing accounts are unaffected, and the first account on a fresh install still becomes the active administrator.
• Public registration can be disabled entirely with ENABLE_SIGNUP=false. The sign-up link disappears, direct registration and OAuth account creation are refused, and the setting is absolute: it also blocks first-administrator creation on an empty database, so a private install sets it to true once, behind its outer identity boundary, to bootstrap.
• Cloudflare Turnstile on password sign-in. When configured, the login form requires a solved challenge and the server rejects tokens whose hostname or action do not match what it expects.
• System diagnostics. An administrator-only System page reports host, runtime, memory, storage, network interfaces, and — when the Docker socket is available — engine details and container states, refreshing every 30 seconds.
• Provider usage analytics. Every outbound provider call is metered — model, status, token counts, duration — and charted on an administrator-only Usage page with per-model and per-plugin breakdowns over 7 to 90 days. Prompts, responses, endpoints, and credentials are never stored.
• Video and audio generation. OpenRouter models with media capabilities can generate video and audio jobs alongside images, tracked through a job lifecycle and collected in a unified media gallery with kind filters.
• Default vision model. A configured vision model takes over automatically when a conversation turn includes images, selectable under Settings → Models.
• Guarded local Git panel in Work. A Git tab in the workspace offers init, status with ahead/behind, bounded diffs, explicit staging, commits, and local branch switching — all inside the task sandbox. There is deliberately no clone, fetch, pull, push, remote, or credential surface.
• Tab context menu. Right-click a tab for close, close others, and close to the right; the + menu gains Incognito Chat and, for administrators, direct Users, System, and Usage entries.
• Private remote deployment kit. deploy/private/ ships a hardened Compose file (no published ports, read-only rootfs, dropped capabilities, resource limits, Cloudflare Tunnel), sysctl and fail2ban configs, and a backup script with a systemd timer, documented end to end.

• Compact admin and media surfaces. The density pass that reshaped chat in 0.17.0 now covers the System, Usage, and media surfaces: tighter panels, denser tables, and a smaller stat scale.
• Dark mode is the default for new installs. A pre-hydration script applies the theme before first paint, so there is no light flash. A saved light preference is respected.
• Work surfaces show your wallpaper. The Work page and its panes are translucent instead of opaque.
• Documents are owned per user and carry their type, size, and session across restarts. Every document route requires authentication.
• OpenRouter requests identify the app through attribution headers, sent only to OpenRouter's own endpoint.
• Removed the model install access setting. Model install, delete, copy, and push now require an administrator regardless of settings, so the toggle no longer did anything; the interface no longer shows install affordances to non-administrators, and its endpoint was removed.
• New toasts introduced this cycle are translated across all 25 locales instead of appearing in English everywhere.

• Work previews now work for remote browsers and behind HTTPS. Previews are proxied through the app origin as signed, revocable URLs instead of pointing the browser at a loopback port. Stopping a preview revokes its URL, and upstream cookies and credentials never reach the embedded page. Custom reverse proxies must forward HTTP and WebSocket traffic for /api/work/previews/; WORK_PREVIEW_HOST is no longer needed and was removed.
• Settings, keyboard shortcuts, the command palette, and the artifact panel are no longer reachable from the sign-in screen, and are closed when a session ends.
• The Agents surface is administrator-only in the interface, matching the backend.
• An explicit saved-session link can now leave incognito mode instead of being trapped in a private chat.

• The remaining unauthenticated API surface is closed. Provider, document, persona, TTS, embedding, Hugging Face, and agent CLI routes all require authentication; model install, delete, copy, push, and unload require an administrator.
• The chat WebSocket requires a valid token and an allowed origin on connect, re-verifies both on every message, and enforces payload and rate limits (CHAT_WS_MAX_PAYLOAD_BYTES, CHAT_WS_MAX_MESSAGES_PER_MINUTE).
• Identity is re-read from the database on every request, so a deleted account is rejected and a role change applies without waiting for token expiry.
• Generated encryption keys are no longer written to logs, and key files are created with owner-only permissions.
• Work's Git integration runs fixed argument lists as an unprivileged user with hooks, prompts, credential helpers, external diff drivers, and network protocols disabled, and refuses repositories that escape the workspace.

• A private remote deployment guide covering Cloudflare Access and Tunnel, bootstrap order, and the security model.
• Documented ENABLE_SIGNUP, the Turnstile hostname and action binding, chat WebSocket limits, and the Work production hardening checklist.
• A system monitoring guide covering the System and Usage pages: what each reports, what usage metering never stores, and the Docker socket trust caveat.
• A media generation guide covering plugin capability blocks, the video job lifecycle, the unified gallery, storage encryption, and rate limits.
• Documented the registration approval flow, the default vision model, incognito chat, the tab context menu, and the dark-by-default theme in the authentication, models, and tips guides.

• Tabbed workspace. Chats, Work sessions, and pages open as tabs in a browser-style strip. The + menu creates each kind and shows its shortcut, tabs survive a reload, and closing a session closes its tab.
• Home launcher. A new Home tab greets you, offers what to start, and lists recent chats and Work sessions to continue, with a live badge for Work runtimes that are currently active.
• Command palette. Cmd/Ctrl + K searches chats, Work sessions, and app actions from anywhere, including while a message composer has focus, so a draft is never lost to navigation. Cmd/Ctrl + Shift + O starts a chat and Cmd/Ctrl + Shift + U starts a Work session.
• Installed agent CLIs as chat models. When claude or codex is on the server's PATH, administrators see an Agents group in the model selector and can hold a normal conversation using the subscription that CLI is already signed in with. The CLI runs as the Libre WebUI server user and inherits its agent credentials, so it is admin-only and can be disabled entirely with AGENT_CLI_MODELS_ENABLED=false.
• Work terminal. A real interactive shell attaches to the task's sandboxed container under the identical container policy as the model's own tools, so it is a human-facing view of the sandbox rather than a way around it.
• Host folder workspaces for Work (opt-in). A task can be bound to a real directory instead of its Docker volume. Requested paths are resolved through symlinks, checked against an allowlist of roots, and credential directories are refused. Off by default behind WORK_HOST_WORKSPACES_ENABLED, because it deliberately narrows the sandbox.
• Concurrent Work runtimes with complete file tools, plus a workspace diff view showing what the model changed in its last turn.

• Denser interface. A compact pass across chat, the composer, and the sidebar: slimmer message bubbles with hover-revealed actions, a tighter type scale, and a narrower reading column.
• Redesigned chat history rail with a dense tick timeline and a compact hover preview of each turn.
• Reorganized settings. Nine flat tabs became four labelled groups — General, Chat, Speech & images, and Connections — with quieter navigation.
• Compact sidebar. Models, Personas, Imagine, and Agents collapsed from four stacked rows into a single icon row, giving the space back to the conversation list. All four remain reachable from Home, the tab menu, and the palette.
• Renamed the Libre Claw surface to Agents in the interface and translated it across all 25 locales. The daemon keeps its own name where the daemon itself is meant.
• Redesigned sign-in page with a brand pane that states what the project is, and social sign-in that no longer renders an empty divider when no OAuth provider is configured.
• Stronger Work container isolation, including a policy fingerprint that is re-verified before a container is reused so one predating a hardening change is recreated rather than reused.
• Removed the duplicate Chat and Work entries from the sidebar navigation.

• The sign-in form no longer shows an "or" divider when neither GitHub nor Hugging Face OAuth is configured.
• Deleting a chat or Work session now also closes its tab instead of leaving a tab pointing at a missing session.
• Resolved React set-state-in-effect and fast-refresh warnings in the new tab bar and command palette.

• Restructured the README around what the project is, how to run it, and then depth, with a documentation index and deduplicated deployment guidance.
• Added a guide for using an installed coding agent as a chat model.
• Documented host folder workspaces, the browser terminal, the tabbed interface, and the new keyboard shortcuts.
• Documented the workspace Changes diff view.

• Work now runs when Libre WebUI itself runs in Docker. The image ships the Docker CLI and every repository Compose file mounts the host Docker socket with its group, so docker compose up -d provides a working Work runtime. Task containers run as siblings of the Libre WebUI container on the same daemon. This gives every Libre WebUI administrator root-equivalent control of the Docker host; remove the /var/run/docker.sock mount from the Compose file to disable Work.
• Added DOCKER_GID and DOCKER_SOCKET Compose variables for hosts whose Docker socket is not owned by group 0, and WORK_PREVIEW_BIND and WORK_PREVIEW_HOST for deployments where the browser reaches the Docker host at another address.

• Plugin model catalogs now refresh on their own. A catalog that is missing or older than the refresh interval is rediscovered when the plugin list is read, so reloading the app reflects the provider's current models. A per-plugin backoff avoids probing an unreachable provider on every request, and a deadline keeps a slow provider from stalling the response.
• Refresh models now reports its outcome: whether the catalog was updated, was already current, could not be loaded, or was never fetched because no usable API key was configured. A key set only in the environment is ignored for a provider that runs an installed definition instead of the bundled one, and the message now says so.
• An unreachable Docker daemon now names the deployment change to make — a missing Docker CLI, an unmounted socket, or a socket group the backend user does not belong to — instead of reporting only that Docker is unavailable.
• Speech, image, and embedding models discovered from a provider's catalog no longer appear in the chat model picker. They remain available to the pickers that use them.

• Fixed discovered model catalogs never expiring. Models were fetched once at activation and then reused indefinitely, so a provider's newer models never appeared after a reload.
• Fixed a model catalog refresh reporting success when it never reached the provider. A missing API key, an unreachable endpoint, or an empty response silently returned the previous catalog and still showed a confirmation.

• Added a Provider connections guide for the workspace introduced in 0.16.0.
• Documented running Work when Libre WebUI is itself in Docker, including the socket requirement, its security consequence, how to read the socket group id, and how to disable Work, across the README, quick start, Docker, external Ollama, GPU, dev branch, Kubernetes, troubleshooting, environment variable, and Work guides.

• Added a searchable Provider connections workspace under Settings → Plugins, with a provider list, selected-provider details, activation state, a read-only capability-aware model catalog, and explicit per-user Refresh models discovery. (#173)
• Added selectable Chat Completions and Responses API modes for OpenAI-compatible providers in Chat and Work. Completed and streamed Responses output now covers text, reasoning, refusals, tool calls, usage, and incomplete results. (#168)
• Added OpenAI Image API support with GPT Image models, provider-qualified image selection, an independent image endpoint, and authenticated generation and gallery flows. (#167)

• Kept provider configuration and advanced generation controls collapsed by default. Inherited values now appear as blank provider defaults, only changed overrides are saved, clearing an override restores inheritance, and in-flight saves or model refreshes no longer overwrite newer edits. (#171)
• Allowed absolute HTTP endpoints for self-hosted gateways on trusted networks, including container and service hostnames, while warning that credentials and traffic are unencrypted and continuing to prefer HTTPS. (#172)
• Expanded pull-request gates to cover formatting, linting, TypeScript, package regressions, Playwright, cross-platform Electron packaging, and non-publishing amd64/arm64 Docker builds, including stacked pull requests. (#170)

• Fixed custom endpoint and Base URL overrides so the selected route is honored consistently across Chat, Work, model discovery, image generation, embeddings, and text-to-speech. Invalid explicit routes now fail instead of silently falling back to a bundled provider endpoint. (#165, #168)
• Made discovered model catalogs persistent and per-user, derived /models routes from the effective provider endpoint, and waited for activation-time discovery so the first refreshed catalog is current. (#165)
• Preserved exact provider identity in Chat when Ollama or multiple plugins expose the same model ID. Missing or inactive providers now remain visibly unavailable instead of silently routing to a different provider with the same model name. (#165)
• Bound Responses replay state to the same provider, model, endpoint, and credential, and stopped active Work runs before replaying tool state after a provider route or credential change. (#168)

• Isolated provider endpoints, credentials, discovered catalogs, and capability routes by user; custom routes cannot borrow a bundled environment credential, image and gallery routes require authentication, redirects are not followed, and malformed or non-HTTP(S) routes remain rejected. (#165, #167, #168)

• Expanded the model, plugin architecture, troubleshooting, environment, migration, self-hosted gateway, and Kimi Code guidance for provider configuration, URL precedence, Responses mode, image generation, model discovery, inherited settings, and container networking.

• Special thanks to ZhengJin (@fangzhengjin) for the detailed third-party-provider feedback and AI-assisted UX concept shared in #163. That feedback directly shaped Responses API support, reliable custom Base URL routing and model discovery, OpenAI image generation, simpler collapsed provider settings, hostname-based HTTP gateways for trusted self-hosted networks, and the new Provider connections workspace inside Settings → Plugins.

• Added a bundled MLX LM plugin path for local Apple Silicon inference, including an OpenAI-compatible example server, plugin manifest, validation, settings integration, Work routing, tests, and setup documentation.

• Reworked the Work landing page and composer around the shared Chat model selector. Work now retains provider-scoped model identities, presents the selected model consistently on desktop and mobile, restores keyboard focus correctly, and keeps remote-provider disclosure integrated with the composer.
• Unified Work conversation identities with Chat. User messages now use the authenticated account avatar with an initials fallback, while worker messages use the Libre WebUI assistant avatar and matching conversation spacing.
• Added verified GitHub-to-Forgejo release mirroring with tag-parity checks, idempotent single-release and backfill commands, dry-run support, GitHub-backed release assets, tests, and updated release documentation.

• Fixed non-stream plugin calls, including generated titles, accidentally inheriting a saved stream: true preference and then appearing empty or invalid to the JSON response parser.
• Fixed Work providers returning truncated or malformed tool arguments. Invalid arguments are now preserved as provider metadata, validated before any tool in the same batch executes, and returned to the worker as an actionable retry instead of risking partial tool execution. Worker guidance also keeps individual file writes below 8,000 characters.
• Restored the complete live Ollama catalogue after ollama.com changed its model-card markup. Libre WebUI now loads and deduplicates every available page, decodes descriptions and metadata, recognizes capability badges such as thinking, vision, and embedding, removes the 50-model display cap, and falls back to the curated catalogue only when the live response is unreadable.

• Added a complete MLX LM guide for Apple Silicon and usage instructions for the bundled example server.
• Updated plugin architecture and release automation documentation for MLX LM and the dual-remote Forgejo release workflow.

• Added distinct Chat and Work actions in the primary sidebar, with the active mode visibly selected. Work tasks appear in the normal task list and retain their title, provider, status, conversation, run history, and files when reopened.
• Added a durable workspace for every Work task: ownership, messages, runs, errors, provider routing, and activity are stored in Libre WebUI's database, while project files live in a task-specific Docker named volume mounted at /workspace.
• Added a managed, disposable Docker container identity for each task. Containers are created, started, stopped, or recreated on demand while the named volume survives run cancellation, preview shutdown, container replacement, and Libre WebUI restarts.
• Added a native autonomous tool loop with list_files, read_file, write_file, search_files, run_command, start_preview, and stop_preview. Server-owned workspace skills guide project discovery, focused editing, verification, recovery, and preview use without writing an AGENTS.md or another control file into the project.
• Added explicit model routing for tool-capable local Ollama and Ollama Cloud models plus configured completion/chat plugins through OpenAI-compatible, Anthropic, and Gemini tool adapters. Provider type and plugin identity are persisted with both the task and each run so equal model names cannot silently switch routes.
• Added an authenticated, resumable server-sent event stream for live run state, assistant response deltas, provider-exposed reasoning, tool calls and results, usage data, loaded skills, errors, and completion. The interface shows active rounds, elapsed time, expandable tool details, generated-token usage or an approximation when provider usage is unavailable, and reconnection state.
• Added a complete Work interface with Conversation, Files, Activity, and Preview surfaces; a pointer- and keyboard-resizable desktop split; compact mobile surface controls; editable task titles; cancellation; paginated history; and direct task deletion.
• Added a theme-aware workspace code editor with light and dark syntax highlighting, LTR code inside RTL layouts, supported-file formatting, Cmd/Ctrl+S, optimistic save-conflict detection, per-file browser drafts, navigation protection, and responsive fallbacks for large files.
• Added managed browser previews that can be embedded or opened separately. With no custom command, Work detects root or nested package.json development scripts, handles Next.js host arguments, or serves a plain index.html through a bundled zero-dependency static server.

• Raised the default provider-agnostic Work budget to 48 model rounds and derived a larger bounded tool-call budget. Exhausted runs now request a final no-tools progress handoff and finish as Needs input, allowing a later run to continue in the same workspace instead of exposing a raw provider-specific round-limit error or claiming false completion.
• Added a dismissible, per-user disclosure for plugin-backed and Ollama Cloud routes. It explains that autonomous work can make multiple billable requests and can send conversation context and requested tool results, including file contents, to the selected service.
• Added consistent Idle, Thinking, Complete, Needs input, and Error states across the Work page and sidebar, while keeping task positions stable as activity and timestamps change. Status colors are now white rgb(255, 255, 255), blue rgb(48, 121, 255), green rgb(76, 212, 117), yellow rgb(255, 204, 0), and pink rgb(255, 61, 129), respectively.
• Removed the misleading Work network toggle and standardized UI-created tasks on Docker bridge networking. Runtime readiness now describes Docker and available model routes without implying that Ollama is always required.
• Replaced yellow and amber warning surfaces with the #ff7b52 coral palette, retained compatibility with existing saved accent preferences, and aligned code rendering with the active light or dark theme.
• Localized the complete Work experience across all 25 supported locales. Arabic now uses a genuinely mirrored RTL layout for navigation, pane order, tabs, and resize behavior while code, paths, commands, model identifiers, and tool output remain LTR.
• Added configurable runtime image, Docker command, command timeout, output, memory, CPU, PID, preview-port, model-round, active-runtime, and task admission limits.

• Fixed static Work projects failing preview startup with ENOENT: /workspace/package.json. Empty preview commands now detect plain static sites and single nested applications instead of always attempting npm run dev from the workspace root.
• Fixed ambiguous or unsupported preview layouts returning misleading npm failures. Work now returns actionable errors and preserves explicit custom commands for other project structures.
• Fixed Kimi Code and Moonshot Work requests by omitting sampling fields that Kimi fixes internally, removing obsolete temperature and penalty controls from migrated provider definitions, adding k3-256k, and preserving provider reasoning metadata across tool-call turns. Upstream quota throttling may still return HTTP 429.
• Fixed selected Work tasks being difficult to delete, task rows changing position during runs, stale polling restoring deleted tasks, and Work/Chat navigation selecting the wrong mode.
• Made plugin settings surface structured provider error details instead of reducing responses such as quota failures to a generic HTTP status message.
• Fixed stale file reads and saves replacing the active file, edits typed during an in-flight save being lost, failed saves discarding drafts, and older editor revisions overwriting files changed by the model or another browser action.
• Corrected Work layout, code highlighting, formatting, resizing, status indicators, and keyboard behavior across desktop, compact, dark, light, and Arabic RTL modes.

• Required current administrator authorization for every Work endpoint and enforced task ownership across tasks, runs, event streams, files, previews, and cancellation. Administrator demotion blocks further Work access immediately, and account deletion cleans up owned Work resources before removing ownership metadata.
• Hardened task containers with a pinned Node runtime image, non-root UID/GID, read-only root filesystem, bounded temporary storage, dropped Linux capabilities, no-new-privileges, CPU, memory, PID, command-time, output, and concurrency limits, and only the task-owned volume mounted at /workspace.
• Added managed-resource and task-ownership labels, path and symlink containment, atomic writes, optimistic file versions, lifecycle locks, startup reconciliation, graceful shutdown, and fail-closed cleanup retries so resources with conflicting ownership are not reused or silently deleted.
• Published previews only to a Docker-assigned loopback host port and embedded them in a separate-origin sandboxed frame without Libre WebUI authentication credentials.
• Added authenticated per-user and guest-IP rate limiting to plugin discovery routes, stricter mutation limits, and a pre-authentication burst guard. Hardened Work preview lease cleanup against unvalidated dynamic callback invocation reported by CodeQL.
• Restricted Electron preview navigation to valid HTTP and HTTPS destinations.
• Documented the remaining security boundary: Work containers share the Docker host kernel, UI-created tasks have bridge egress, volumes have no independent quota, and neither the Docker socket nor provider credentials are mounted into a task.

• Work requires Docker to be installed, running, and callable by the Libre WebUI backend user. Running Libre WebUI through npx does not install Docker; when it is unavailable, Work reports the runtime as unavailable and never falls back to running model commands on the host. Chat continues to work without Docker.
• The standard Docker Compose and Helm/Kubernetes configurations do not currently expose a compatible nested Work runtime. Electron uses its separately managed backend, while source, npx, bare-metal, and VM deployments can use Work when their backend has Docker access.
• Embedded previews are published on the backend's loopback interface. They are suitable for a local browser but are not currently forwarded to remote browsers when Libre WebUI runs on another server.
• Complete Work backup and recovery requires both Libre WebUI's SQLite/data storage and its labeled Docker workspace volumes.

• Added a comprehensive Work guide covering architecture, tools, providers, data disclosure, live activity, worker skills, container lifecycle, persistence, backups, previews, security boundaries, configuration, deployment support, localization, and troubleshooting.
• Updated the README, quick start, model, shortcuts, authentication, storage, Docker, Kubernetes, Electron, hardware, environment-variable, Libre Claw, plugin, Kimi Code, and troubleshooting documentation for the Work release, and refreshed the Work screenshot.
• Removed obsolete tracked AGENT.md and AGENTS.md instruction files and ignored the repository-root AGENTS.md so private workspace guidance is not committed accidentally.

• Migrated the browser SPA from react-router-dom 7.18.1 to react-router 8.3.0, updated all routing imports and Vite chunking, and aligned the frontend with React and React DOM 19.2.8 plus matching type packages.
• Raised the supported Node.js baseline to 22.22 across package metadata, Docker images, GitHub Actions, and installation and desktop documentation.
• Consolidated the React runtime and type dependency graph at the workspace root to prevent duplicate React installations and keep lockfile resolution deterministic.

• Replaced Qwen TTS's permissive emoji regular expression with explicit Unicode code-point checks that remove the intended emoji sequences without consuming CJK, Arabic, Indic, mathematical, or other astral text.
• Reworked Qwen and Kyutai Markdown-link and stage-direction sanitization as bounded forward scanners so malformed or adversarial input is handled without repeated rescanning or polynomial regular-expression behavior.
• Rejected local filesystem paths in Kyutai TTS voice references while preserving built-in voices and explicitly allowed remote references.

• Upgraded React Router to 8.3.0 and brace-expansion to 5.0.8, refreshed ESLint and minimatch to patched lockfile versions, and removed the obsolete react-router-dom package.
• Removed the temporary router advisory exception and custom audit wrapper; npm audit --audit-level=moderate now fails directly on every applicable advisory.
• Added regression coverage for exact Unicode interval boundaries, multilingual preservation, multi-code-point emoji sequences, local-path rejection, nested or malformed markup, and inputs exceeding 100,000 characters across the Qwen and Kyutai TTS examples.

• Added a bundled Kimi Code provider for Moonshot AI's OpenAI-compatible API, with Kimi K3, Kimi K2.7 Code, and Kimi K2.7 Code HighSpeed model profiles, streaming, configurable generation valves, and per-user or environment-based credentials.
• Added Claude Opus 5 to the bundled Anthropic provider catalog.

• Aligned the Anthropic catalog and controls with the current Claude API: retained supported public model snapshots, removed the retiring Claude Opus 4.1 entry and unsupported penalty controls, corrected the legacy temperature range, and expanded the default token budget for adaptive thinking.
• Aligned Helm chart, application, and Docker image versions with each release; pinned the 0.14.1 transition to its verified multi-architecture digest while preserving explicit tag overrides; made subsequent Kubernetes deployments use the chart appVersion; and limited chart publication to releases whose default Docker image exists.
• Made the local release command run the complete format, lint, security, package, build, and npm publish dry-run gate before it creates a release commit or tag, and added regression coverage for release status, Docker tags, Helm rendering, Homebrew metadata, macOS artifacts, and packaged npm contents.

• Fixed Anthropic requests for Opus 5 and other current Claude models by omitting rejected sampling parameters, using the native Messages payload and version header while streaming, parsing Anthropic text and tool-use events, and discovering models from the correct /v1/models endpoint.
• Fixed the macOS DMG installation canvas so Finder exposes only Libre WebUI and Applications, embeds the Retina background inside the app, preserves its Finder alias, and uses correctly scaled artwork and icon positions.
• Repaired Homebrew packaging by installing the CLI formula from the published npm tarball, matching the cask to the actual arm64 DMG and application bundle, separating the libre-webui formula from the libre-webui-frontend cask, and clarifying explicit formula installation.

• Updated body-parser to 2.3.0, fast-uri to 3.1.4, PostCSS to 8.5.23, and tar to 7.5.22, and enforced patched transitive versions of brace-expansion 5.0.7, js-yaml 4.3.0, and shell-quote 1.10.0.
• Pinned React Router to 7.18.1 and added a time-bounded, fail-closed audit exception for an unstable-RSC-only advisory that does not apply to Libre WebUI's declarative browser SPA; the gate rejects version drift, RSC usage, malformed reports, additional advisories, and registry failures.

• Added Kimi Code setup, membership-aware model guidance, privacy boundaries, troubleshooting, and the KIMI_API_KEY environment variable to the provider documentation.
• Simplified the public project stewardship language, removed an unnecessary third-party comparison from the Hetzner deployment tutorial, and documented version-pinned Kubernetes releases.

• Added native Retina DMG artwork with a 760×500 72-DPI representation and a 1520×1000 144-DPI representation for a sharp, correctly sized installer on standard and high-density displays.
• Strengthened macOS artifact verification to mount the finished DMG and validate its checksum, background format, dimensions, density, Applications shortcut, visible item count, Finder metadata, application identifier, and ad-hoc signature before CI uploads it.

• Fixed Finder enlarging and cropping the branded installer background because the generated PNG was encoded at 25 DPI instead of the expected 72 DPI.
• Marked the background, volume icon, and disk-image metadata as Finder-invisible so the installation window exposes only Libre WebUI and the Applications shortcut.
• Regenerated the DMG blockmap and release checksum metadata after Finder finalization so differential updates and latest-mac.yml continue to describe the published artifact exactly.

• Added a desktop conversation history rail that maps each user turn beside the chat, lets readers jump directly to any turn, and previews the matching prompt and active assistant response on hover or keyboard focus.
• Added keyboard navigation for the history rail with arrow, Home, End, Enter, and Escape behavior, localized accessible labels across all supported languages, reduced-motion support, and mirrored placement for right-to-left layouts.
• Redesigned the macOS arm64 DMG as a 760×500 branded installation canvas with original artwork, the “Make whatever comes next.” identity, a clear Applications drag target, and the same editorial visual language as the website and documentation.

• Made the history rail follow the reader dynamically while scrolling in either direction, keep the active marker visible inside long rails, resolve regenerated branches to the active response, and preserve the selected position while a newer response streams.
• Kept the rail available in compact desktop windows while intentionally removing it from mobile chat layouts where it would compete with the conversation.
• Standardized constrained scrolling across application pages, sidebar history, Settings, model selectors, plugin and Hugging Face browsers, image generation, persona switching, keyboard shortcuts, and user menus.
• Switched the application shell to dynamic viewport sizing, tightened nested flex layouts, added stable scroll regions, and increased Electron scrollbar width for easier pointer interaction.
• Expanded end-to-end coverage for rail navigation, manual scroll synchronization, branching, live streaming, Arabic RTL placement, compact desktop behavior, mobile visibility, and Electron-sized wheel scrolling at the minimum 800×600 window size.

• Removed the Electron preload rule that made the entire document draggable and could intercept page or menu scroll gestures; window dragging is now limited to the explicit title-bar surfaces.
• Fixed clipped or difficult-to-scroll Electron pages and dialogs by giving their actual content regions bounded height and native overflow behavior.
• Made unsigned macOS distribution builds structurally valid by applying an explicit ad-hoc signature with hardened runtime entitlements instead of producing an unverified application bundle.
• Added macOS artifact verification that checks the DMG checksum, mounted application bundle, identifier, and ad-hoc code signature before CI uploads the package.

• Updated the Electron desktop guide with the ad-hoc signing model, packaged-app verification command, safe Gatekeeper approval steps, quarantine removal for verified downloads, and the future Developer ID/notarization path.

• Unified streaming and completed code behind the same accessible code-block component, with localized copy feedback, stable styling, and consistent dimensions as responses finish.
• Expanded syntax highlighting for C#, Go, Kotlin, PHP, Ruby, Rust, SQL, Swift, and YAML, including common language aliases.
• Made long streaming code blocks follow the newest output until the reader intentionally scrolls away.
• Added end-to-end coverage for live code rendering, CommonMark fence parsing, bare HTML documents, reader-controlled scrolling, code-safe LaTeX preprocessing, and title-generation request behavior.

• Fixed reasoning-capable Ollama models consuming the entire automatic-title token budget before producing visible text by disabling reasoning for title utility requests.
• Restored specialized code blocks as soon as generated code begins streaming instead of temporarily displaying code as plain text or exposing Markdown fence markers.
• Improved streaming parsing for incomplete and multiple CommonMark code fences, backtick and tilde fences, indented fences, variable-length fences, CRLF input, and unfenced HTML documents.
• Prevented LaTeX preprocessing from modifying fenced or inline generated code and removed the visual layout jump when a streaming code block completes.

• Added an IP-based limit of 200 requests per 15 minutes to /api/plugins, applied before optional authentication to protect authentication, filesystem, credential-store, and plugin-enumeration work.
• Upgraded electron-builder to 26.15.6 and modernized its Electron packaging dependencies, removing the deprecated inflight, glob 7, and boolean packages that produced installation warnings.
• Added a package-lock regression test that fails when any dependency is marked deprecated.
• Raised the supported Node.js minimum to 22.12 to match the modern Electron packaging toolchain.

• Updated the README, Quick Start, troubleshooting guide, and Electron desktop build guide to document the Node.js 22.12 minimum.

• Strengthened the opt-in accent-adapted light palette so the selected color is clearer across the canvas, settings, composer, chat surfaces, and supporting interface states without becoming overpowering.
• Preserved the existing adaptive dark palette and readable text contrast for preset and custom accent colors.
• Expanded end-to-end regression coverage for generated-title updates, fallback behavior, adaptive theme visibility, persistence, and contrast.

• Fixed automatically generated chat titles remaining stuck on the original user-message preview by applying the already-persisted title response directly to the sidebar's local session state.
• Removed the redundant second title-update request, kept generation status active until the sidebar updates, and made notifications accurately distinguish generated summaries from fallback previews.
• Improved generated-title cleanup by stripping common wrappers and Title: prefixes, truncating long valid summaries at a readable word boundary, and reliably identifying empty provider responses as fallbacks.
• Replaced fixed white surfaces in key light-theme chat and settings views with adaptive semantic surface colors so the chosen accent is reflected throughout the interface.

• Reworked the README around Libre WebUI's local-first model, provider flexibility, Apache 2.0 licensing, inspectable project commitments, inclusive participation, deployment choices, and clearly stated privacy and security boundaries.
• Updated the design guide to document the clearer light-mode accent treatment and unchanged dark-mode behavior.
• Added project-scoped release instructions covering dual-remote verification, main-before-tag CI gates, release artifact checks, and the final main-to-dev synchronization.

• Added an opt-in Adapt to accent appearance style that tints the canvas, surfaces, borders, text hierarchy, and neutral scales from a preset or custom accent in both light and dark mode, while preserving the existing neutral palettes as the default style.
• Added localized controls for choosing the default or accent-adapted appearance across all 25 supported locales.

• Improved Arabic and other right-to-left layouts across the desktop and mobile shell, sidebar, chat, settings, model selector, artifact panel, dialogs, and notifications by using direction-aware logical positioning.
• Applied the saved language and text direction before the first React render, localized relative timestamps, isolated Latin usernames inside Arabic greetings, allowed message text to choose its natural direction, and kept code and model identifiers left-to-right.
• Added end-to-end and packaged-runtime regression coverage for theme persistence, adaptive palettes and contrast, RTL desktop/mobile behavior, shared TTS model aliases, per-user valves, and packed npx launches.

• Fixed light/dark mode and accent preferences reverting after a refresh by persisting theme changes locally and to the backend, retrying failed saves, reconciling stale responses, and preserving hydrated preferences for the same signed-in user.
• Fixed TTS provider selection when multiple plugins expose the same model alias by preserving the plugin ID through settings, test playback, read-aloud, sentence streaming, and autoplay, while using the selected provider's default voice and audio format.
• Fixed authenticated plugin credentials and valve values so they are stored and resolved per user, allowing TTS requests to reach the configured endpoint such as Kyutai's /v1/audio/speech address.
• Fixed bundled plugin discovery in packed npx libre-webui installs launched from an arbitrary working directory, while continuing to support writable custom plugin directories.
• Removed duplicate TTS model entries and made no-authentication TTS providers available to the model and plugin selectors.

• Updated DESIGN.md to document the default neutral appearance and the opt-in accent-adapted light and dark palettes.

• Updated the project screenshot to reflect the current UI.

• Fixed npx libre-webui on Windows by replacing the POSIX-only postinstall command with a cross-platform Node.js script.
• Ensured the npm package retains both the libre-webui CLI entry point and its required postinstall script.
• Copied the postinstall script into every Docker dependency stage so Buildx can complete npm ci --omit=dev on amd64 and arm64.
• Made release npm commands run correctly on Windows and preserved complete paths when parsing Git porcelain status output.
• Added regression tests for npm package contents, release status parsing, and Docker dependency-stage layout.

• Added 11 creator-oriented welcome prompts that rotate as users start new chats, alongside the existing personalized time-of-day greeting.
• Persisted welcome-prompt rotation for the current session, with an in-memory fallback when browser storage is unavailable.

• Reworked the application around a cohesive warm-neutral visual system with editorial typography, quieter surfaces, hairline separators, neutral primary actions, and restrained motion in both light and dark modes.
• Refreshed the chat experience, including the welcome canvas, composer, messages, branch controls, model selection, sidebar, and image-generation workflow.
• Standardized Gallery, Models, Personas, User Management, and Libre Claw with shared PageShell and PageHeader layouts, while aligning settings, authentication, onboarding, and management surfaces with the same component language.
• Expanded the new-chat prompt library across all 25 supported locales and added end-to-end coverage for prompt rotation.
• Removed third-party font downloads in favor of privacy-friendly system font stacks, and improved reduced-motion and mobile input behavior.

• Updated DESIGN.md with the warm-neutral palette, semantic surface and ink roles, editorial typography, responsive layout guidance, and motion principles used by the new interface.

• Introduced a new Libre WebUI wordmark logo featuring bold "Libre" and regular "WebUI" text in white on black, with updated favicons, logos, and the Electron application icon.

• Updated the project screenshot to reflect the current interface.
• Refactored and improved the release changelog generation pipeline with new shared library modules and dedicated tests.
• Removed obsolete local helper scripts, stale maintenance shell scripts, deprecated type stubs (@types/express-rate-limit and @types/uuid), and outdated documentation to clean up the repository.

• Added explicit spacing between "Libre" and "WebUI" in the logo for better readability.
• Refreshed verified provider plugin catalogs and provider models from verified sources across multiple providers, including Anthropic, Gemini, GitHub, Groq, Hugging Face, Mistral, OpenAI, and OpenRouter.

• Refreshed 14 dependencies, including @typescript-eslint/eslint-plugin, @typescript-eslint/parser, electron, png-to-ico, prettier, sharp, framer-motion, i18next, lucide-react, react-router-dom, @types/node, @types/multer, tsx, and vite.

• Added a first-class Libre Claw agent surface in the app, available from the sidebar as Libre Claw, with daemon connection status, dashboard access, and a dedicated /agents route.
• Added admin-only backend proxy routes under /api/libre-claw for daemon status, health, dashboard URL, model routing, fallback routing, theme updates, runs, run events, permissions, usage, and automations.
• Added Libre Claw run management from WebUI: start chat or goal-mode runs, pass optional provider/model overrides, inspect durable run history, stream incremental run events, and cancel active runs.
• Added WebUI approval handling for Libre Claw tool calls, including allow_once, deny, and always_allow_tool permission resolutions.
• Added Libre Claw automation controls for scheduled report/Telegram routes, including create, update, run now, pause, resume, and delete actions.
• Added Libre Claw usage and fallback visibility so admins can inspect provider usage records and fallback route state from the same agent page.
• Added backend environment configuration for Libre Claw daemon connectivity via LIBRE_CLAW_BASE_URL and LIBRE_CLAW_TIMEOUT_MS.

• Reworked the run timeline UI so assistant deltas are grouped into readable responses while tool calls, tool results, permission requests, usage events, errors, and run lifecycle events remain inspectable.
• Added demo-safe frontend API responses for the Libre Claw page so demo mode can render the agent surface without requiring a running daemon.
• Completed Libre Claw translations across all supported locales. English and French define the source copy, and the remaining locale files now carry the full Libre Claw key set instead of falling back to English.
• Updated the README product overview with Libre Claw agent support, including memory, tools, approvals, run timelines, automations, usage, and the default local daemon URL.
• Removed stale OpenClaw plugin validation hooks and the old bundled OpenClaw plugin entry now that Libre Claw is the supported agent integration.

• Fixed demo-mode system info so the UI reports the current built application version instead of the old hardcoded 0.1.0 value.
• Hardened artifact title sanitization by decoding basic HTML entities and stripping malformed or quoted HTML tags without eating safe plain-text title content.

• Refreshed 17 dependencies through Dependabot, including axios, pdfjs-dist, tar, electron, vite, i18next, lucide-react, @tanstack/react-query, framer-motion, @playwright/test, TypeScript ESLint packages, prettier, postcss, and autoprefixer.

• Added docs/31-LIBRE_CLAW_INTEGRATION.md with setup, architecture, route mapping, run modes, approval behavior, automations, memory/tool notes, and troubleshooting guidance.
• Replaced the old OpenClaw integration documentation with the Libre Claw integration guide.

• The old OpenClaw integration path has been removed and replaced by Libre Claw. Users who relied on the previous OpenClaw plugin/config should run the Libre Claw daemon and configure Libre WebUI with LIBRE_CLAW_BASE_URL when the daemon is not on http://127.0.0.1:8766.

• Added optional Cloudflare Turnstile protection for public account creation, configured from backend environment variables and rendered only when enabled.
• Added Tailscale-friendly development hosting/origin support so Libre WebUI can be reached from another device during local development.
• Added Playwright e2e coverage for demo login, one-user mode, artifact detection/rendering, artifact resize behavior, cloud-model regression coverage, mobile sidebar behavior, and async locale loading.

• Set blue as the default accent color and polished the remaining auth, artifact demo, badge, icon, logo, and model-flow surfaces to follow the current design system.
• Improved artifact reliability for multi-file HTML, filename-qualified bundles, standalone full HTML documents, local file reference cleanup, and themed empty/fallback preview states.
• Made artifact pane resizing release pointer state correctly so the pane no longer feels stuck to the mouse after resize.
• Made code-block streaming smoother with requestAnimationFrame-coalesced updates, a lightweight streaming code renderer, lazy rich markdown rendering, and split markdown/math/highlighting chunks.
• Reworked title generation so it honors the existing toggle, resolves the current running model correctly, supports plugin-backed title generation, falls back to Ollama, and sanitizes generated titles.
• Split major backend chat orchestration into focused services for WebSocket handling, shared chat context, assistant completion persistence, plugin streaming, Ollama streaming, title generation, and request preparation.
• Split plugin capabilities into smaller adapters/services for chat, streaming, embeddings, image generation, TTS, validation, uploads, variables, and provider response conversion.
• Slimmed large frontend surfaces by extracting Settings tabs, Model Manager sections, Model Selector tabs, Persona Form tabs, Sidebar sections, API domain clients, and chat store helpers.
• Added gated frontend/backend loggers and routed noisy development diagnostics through explicit debug controls.
• Updated release tooling with a security preflight and kept the production build free of the previous large chunk warnings.

• Fixed toggled session title generation so titles are generated only when the option is enabled.
• Fixed demo mode persona avatars so bundled/local demo images render correctly.
• Fixed chat routing and settings state edge cases after the shared generation refactor.
• Fixed dark-mode artifact demo surfaces so generated previews no longer fall back to the old default blue styling.
• Added regression coverage around cloud model suffix handling without re-documenting the 0.10.0 cloud model feature itself.

• Remediated npm security advisories and refreshed dependency locks after 0.10.0, including updates around multer, undici, ws, ip-address, brace-expansion, tmp, and qs.
• Added npm audit to the release preflight path and verified the package lock reports zero vulnerabilities after the release update.
• Updated GitHub Actions dependencies, including actions/checkout, and hardened the release workflow checks before publishing.

• Refreshed the README to describe the current Libre WebUI product, model/provider story, install paths, and project positioning.
• Audited and rewrote the project docs so the model examples, setup guidance, plugin docs, auth docs, artifacts docs, environment variables, and deployment guides match the current application.
• Updated DESIGN.md with the current blue-accent direction and UI guidance without repeating the 0.10.0 custom-accent release notes.

• No known user-facing breaking changes. The plugin and chat internals were heavily refactored, but existing plugin configuration and normal app workflows remain compatible.

• Added a bundled llama.cpp completion provider profile for qwen3-35b-a3b, including configurable endpoint, sampling, token, penalty, and streaming defaults
• Added an Ollama Cloud category in the Models library and model selector, backed by Ollama's dedicated cloud listing
• Added custom accent selection in Appearance with violet, blue, cyan, teal, emerald, amber, rose, slate, and custom color options
• Added runtime-generated accent shade scales so custom accents can drive buttons, links, focus rings, sliders, progress bars, selected states, and glow shadows

• Reworked Tailwind theme tokens to use CSS variables for primary and accent, with generated custom palettes meeting white-text contrast targets
• Refined light and dark neutral palettes to reduce glare while preserving contrast across app backgrounds, panels, inputs, and message surfaces
• Persisted accent preferences through frontend state, backend preferences, import/export defaults, local rehydration, logout cleanup, and demo mode
• Added accent translation keys across all supported locales and verified locale key parity against English
• Expanded demo-mode preference APIs so Appearance, generation, embedding, system-message, and default-model settings can be exercised without a backend connection
• Standardized the Libre WebUI wordmark through a shared Logo component across loading, login, setup, sidebar, and settings surfaces
• Replaced fixed violet styling in persona adaptive-learning controls with active-accent tokens
• Recolored Ollama library and Cloud badges from cyan to the design-system info-blue treatment
• Reduced noisy debug logging across optional auth, chat, document search, plugin lookup, plugin deletion, TTS, image generation, and WebSocket auth paths
• Returned package version in auth system info for UI/version display
• Updated Dependabot targeting to main and ignored incompatible Electron and ESLint major bumps until their upstream compatibility gaps are resolved

• Fixed a critical app-wide Too many re-renders crash in SettingsModal by memoizing image-generation model/plugin arrays
• Fixed Ollama Cloud model pulls by tagging cloud library results with :cloud before install/run actions
• Fixed Ollama Cloud generation failures by stripping unsupported non-positive num_predict values before cloud requests
• Fixed cloud model pull functionality
• Fixed auto-title generation for persona/current-model workflows by resolving the real running model before sending title prompts
• Quietly handles expired or invalid JWTs in auth and WebSocket flows without dumping routine stack traces
• Kept the lint toolchain on ESLint 9 for compatibility with the current React plugin stack

• Expanded DESIGN.md with custom accent presets, generated shade-scale behavior, token usage rules, light/dark neutral guidance, and contrast requirements

• Bumped package versions to 0.10.0
• Updated Electron to 41.7.1 and Electron Builder to 26.15.2
• Bumped frontend/backend dependencies including React Query, i18next, KaTeX, lucide-react, React Router, Vite, pdfjs-dist, TypeScript tooling, Tailwind Merge, Zustand, Express, Multer, Better SQLite3, and related lockfile entries
• Remediated npm security advisories through dependency and lockfile updates, including qs, tmp, ip-address, brace-expansion, ws, and related transitive packages

• New indigo-based design system with violet accents and refined range sliders
• Deeper, near-black dark-mode neutrals for less glare on OLED panels

• Migrated all server-state loading to TanStack Query across personas, users, models (Ollama + HuggingFace), image gallery, settings, and auth — gives shared caching, request deduplication, and consistent loading/error handling
• Image gallery's "load more" now uses useInfiniteQuery with cursor-based pagination instead of manual offset bookkeeping
• Mutations (create / update / delete in Persona and User managers) now invalidate queries instead of locally splicing arrays, so concurrent edits from another tab stay in sync
• Embedding model discovery rate-limits requests so providers don't get hammered when the embedding picker is opened repeatedly
• Retired the legacy ophelia theme in favor of the unified indigo system

• Restored the build after a Dependabot batch broke compatibility with dev dependencies
• Stopped CodeQL from scanning Homebrew formula templates as Ruby, eliminating spurious analysis failures

• Added @tanstack/react-query (~14 KB gzipped) for the data-layer migration
• Multiple Dependabot-driven bumps across production and dev dependency groups

• Users can now choose real embedding-capable models from Ollama and OpenAI-compatible providers instead of being stuck with a hardcoded default
• Auto title generation can now follow the current running chat model when you do not want to maintain a separate task model just for titles

• Added packaged release smoke tests that build the real npm tarball, boot the packaged backend, and verify both asset lookup and provider-backed embedding flows
• Reworked Homebrew publishing so the tap files are rendered from release templates using the actual release version and computed hashes
• Upgraded Electron to 40.8.5 for the desktop build to pick up upstream security fixes

• Fixed npx libre-webui path resolution so packaged installs can reliably find the app package.json, backend metadata, and frontend build output
• Fixed embedding model discovery so it uses the logged-in user's configured provider credentials and endpoint layout instead of assuming one hardcoded path
• Fixed title generation for plugin-backed and persona-backed chats by resolving the effective active model before generating titles

• Bumped electron 40.0.0 → 40.8.4 — patches CVE-2026-34767, CVE-2026-34773, CVE-2026-34775, CVE-2026-34776, CVE-2026-34777, CVE-2026-34778
• Bumped lodash → 4.18.1 — patches CVE-2026-4800 (high) and CVE-2026-2950 (moderate), prototype pollution via _.unset/_.omit
• Bumped path-to-regexp → 8.4.2 — patches CVE-2026-4926 (high) and CVE-2026-4923 (moderate)
• Bumped @xmldom/xmldom → 0.8.12 — patches CVE-2026-34601 (high)
• Bumped brace-expansion → 5.0.5 — patches CVE-2026-33750 (moderate)
• Bumped picomatch → 4.0.4 — patches CVE-2026-33671 and CVE-2026-33672
• Bumped flatted → 3.3.3 — patches prototype pollution via parse()

• Downgraded ESLint from v10 to v9 to restore compatibility with eslint-plugin-react (contextOrFilename.getFilename is not a function)
• Bumped CI actions: docker/setup-buildx-action v3 → v4, docker/login-action v3 → v4, docker/build-push-action v6 → v7

• Updated multer to version 2.1.1 to address CVE-2026-3520 security vulnerability
• Upgraded tar package to version 7.5.10 to resolve GHSA-qffp security advisory

• Added TRUST_PROXY environment variable for running behind reverse proxies (Nginx, Caddy, etc.) — supports numeric, boolean, and string values

• Bumped actions/upload-artifact from v6 to v7 and actions/download-artifact from v7 to v8 across all CI workflows
• Dockerfile now copies .npmrc into build stages for consistent dependency resolution
• Added legacy-peer-deps=true to .npmrc to resolve peer dependency conflicts during install
• Release script now works on Windows by enabling shell mode in spawnSync

• Downgraded ESLint from v10 to v9 to fix eslint-plugin-react incompatibility (getFilename is not a function)
• Added missing @eslint/js devDependency
• Resolved high-severity vulnerabilities in rollup, minimatch, and multer via dependency updates and overrides
• Fixed minimatch ReDoS vulnerability (GHSA-3ppc-4f35-3m26)

• Bumped multiple frontend and backend dependencies via Dependabot

• Updated development dependencies across frontend and backend components for better security and performance
• Resolved npm peer dependency conflicts in ESLint configuration
• Removed incompatible brace-expansion package override to prevent build issues

• Fixed CI pipeline failures caused by conflicting ESLint peer dependencies
• Resolved npm install errors during continuous integration builds

• Tool Activity Indicators: Real-time visual feedback showing when AI tools are running, with actual tool names displayed during execution
• Admin Model Control: New toggle allowing administrators to restrict non-admin users from installing models
• Enhanced Internationalization: Added comprehensive translations across 25 languages including Arabic, Japanese, Korean, and European languages

• Better Tool Feedback: Improved activity labels and removed debug logging for cleaner tool execution displays
• Plugin Error Handling: Enhanced error handling with proper internationalization key support and controlled input validation
• Documentation Updates: Added AI agent support section and updated project badges with dynamic versioning

• Security Patches: Updated axios to version 1.13.5 and resolved qs denial of service vulnerability
• ESLint Compatibility: Fixed ESLint 10 incompatibility issues with eslint-plugin-react and typescript-eslint
• Tool Indicators: Eliminated duplicate tool activity indicators, ensuring single clean display per tool
• WebSocket Cleanup: Removed unused tool-events capability from WebSocket connections

• Revamped README documentation for better clarity and user experience
• Expanded OpenClaw integration documentation with comprehensive setup guides
• Reduced excessive console logging in chat components and WebSocket connections for cleaner debug output
• Improved TypeScript error handling by replacing explicit any types with unknown in catch clauses

• Patched CodeQL security vulnerabilities in the plugin service
• Prevented duplicate i18next initialization that could cause localization conflicts

• OpenClaw Agent Integration: Complete plugin system for AI agent workflows with session routing and WebSocket support
• Enhanced Plugin System: Real-time Server-Sent Events (SSE) streaming for plugin responses
• Image Content Support: Plugins can now handle and render image content in responses
• Automatic Model Discovery: Models are automatically detected from plugin API endpoints
• Structured Tool Calls: Tool call responses are now rendered as structured content in assistant messages
• Identity Passthrough: User identity can be passed through plugins via system prompt prefix and username
• Documentation Links: Added GitLab mirror and documentation links in settings

• Internationalization: Comprehensive translation coverage for ModelSelector, ImageUpload, avatar components, and User Management across 19 languages
• Model State Validation: Enhanced selectedModel validation after loading to prevent stale state issues
• Generic Plugin Support: OpenClaw plugin now supports all users instead of being user-specific
• Provider/Model Format: Improved OpenClaw plugin integration with standardized provider/model format

• Fixed OpenClaw session routing to use HTTP session-key header instead of WebSocket
• Removed conflicting stream option from OpenClaw plugin
• Corrected avatar translation key paths
• Fixed model pull progress status message translations

• Auto-Unload Models: Automatically unload running Ollama models before switching to a new one, preventing VRAM exhaustion on Windows (where GPU memory cannot spill to system RAM like on Linux)

• Code Quality: Remove unused eslint-disable directive after eslint-plugin-react-refresh 0.5.0 upgrade

• Security: Patch @isaacs/brace-expansion ReDoS vulnerability (CVE) via npm override
• TTS Stability: Add thread lock for audio generation concurrency to prevent race conditions

• Bump pdfjs-dist, eslint-plugin-react-refresh, @types/node
• Bump the all-dependencies group with 3 updates

• Plugin Variables (Valves): Configure plugin settings dynamically with database persistence, input validation, and configurable endpoint overrides
• GGUF Model Downloads: Download GGUF models directly from HuggingFace through the model browser interface
• Development Version Display: Show commit hash in version string for development builds
• Enhanced Documentation: New local GPU stack guide, Hetzner GPU deployment tutorial, plugin system architecture docs, and GitLab mirror link

• Plugin Variables Performance: Added 5-second TTL cache for resolved plugin variables to improve response times
• Model Selection: Filter embedding models from chat model selector for cleaner interface
• Dark Theme Consistency: Plugin variables input styling now matches dark theme design
• Internationalization: Comprehensive translation updates across all 21 supported languages with missing keys added
• Settings Interface: Plugin variables editor now properly displays in settings modal

• Security: Added input validation and SSRF protection for plugin variables to prevent sensitive data exposure
• Model Manager: Fixed missing loadData dependency in ModelManager useCallback hook
• UI Components: Resolved hardcoded strings in multiple components that weren't using translation keys
• HuggingFace Integration: Fixed GGUF pull functionality in model manager's HuggingFace section

• Desktop Applications: Native Windows and Linux Electron builds now available
• Enhanced Persona Controls: Keyboard input support for precise parameter value entry in persona configuration

• Better User Experience: Model selector now displays persona names instead of technical IDs
• Expanded Localization: Added missing translations for persona settings, Hugging Face Hub integration, and prompt length indicators across all supported languages
• Improved Build Pipeline: Enhanced CI/CD workflows with better artifact naming and cross-platform development builds

• Security: Patched node-tar CVE-2026-24842 vulnerability through npm override
• Linux Desktop: Fixed Electron builds with proper icon support and hash-based routing for file:// protocol
• Package Consistency: Standardized Debian package naming for Linux distributions

• Windows Electron App: Native Windows installer (.exe) and portable builds
• Linux Electron App: AppImage and .deb packages for Linux distributions
• Cross-Platform Dev Builds: New CI workflow builds dev artifacts for all platforms on every push

• Linux Icon Support: Fixed missing app icon in Linux builds by properly extracting icons to extraResources
• File Protocol Routing: Fixed "Not allowed to load local resource: file:///login" error by switching to hash-based navigation for Electron's file:// protocol
• Linux About Dialog: Fixed empty About dialog on Linux with proper icon path detection

• Added electron-dev.yml workflow to build dev versions on all platforms when pushing to dev/main
• Renamed artifact uploads to include -frontend suffix to clarify these are frontend-only builds
• Added ELECTRON_BUILD=true environment variable to Linux build script

• CSP: Allow data and blob URIs for media-src to enable TTS audio playback
• CORS: Allow network IPs in Docker environment for LAN access
• UI: Pure dark theme tab visibility and remove TTS speed slider
• Storage: Auto-cleanup corrupted preferences to prevent app crashes
• TTS: Add Python 3.12 support and audio format detection
• Ollama: Support HuggingFace model names with slashes in API routes
  • Change routes to avoid path params with slashes (path-to-regexp limitation)
  • DELETE /models/:name -> DELETE /models?name=
  • GET /models/:name -> GET /models/show?name=
  • POST /models/:name/pull -> POST /models/pull with { name } body
  • POST /models/:name/push -> POST /models/push with { name } body
  • Updated frontend API calls to match new endpoint signatures

• HuggingFace Hub Integration: Browse and pull models directly from HuggingFace with automatic GGUF detection
• Kyutai TTS 1.6B Model: Added GPU-accelerated TTS with expanded voice library and sentence-by-sentence streaming
• Enhanced Model Browser: New HuggingFace model browser component with improved UI and filtering
• Comprehensive Documentation: Added detailed guides for Kyutai TTS and HuggingFace Hub integration

• UI Enhancements: Renamed AMOLED theme to "Pure Black" with improved borders and styling
• Image Generation: Expanded textarea from 3 to 5 rows with client-side prompt length validation
• Code Rendering: Improved code block display in chat messages
• Settings Reorganization: Moved System tab to Manage Models page for better organization
• Plugin Management: Allow dots in plugin IDs for more flexible naming

• Critical Security: Fixed SSRF vulnerabilities and sensitive data logging issues
• TTS Audio Quality: Resolved audio crackling, improved normalization, and fixed tensor processing errors
• Voice Downloads: Implemented auto-retry for corrupted voice downloads with force re-download capability
• Internationalization: Added missing translation keys across all 23 supported languages

• Added Qwen3-TTS server with complete setup documentation and examples
• Implemented text chunking for reliable generation of long audio content

• Enhanced text sanitization with more aggressive filtering for cleaner TTS input
• Optimized memory handling by moving tensors to CPU before concatenation

• Fixed multi-GPU tensor mismatches by forcing single GPU usage
• Resolved server hangs with improved text sanitization and timeout handling

• Fixed incorrect Qwen-TTS version requirement in example server dependencies

• Qwen3-TTS Integration: Added full support for Qwen3 text-to-speech model with dedicated plugin
• TTS Server Example: Included complete server implementation with setup instructions and dependencies
• Plugin Service Enhancement: Expanded plugin service to support TTS functionality and improved plugin management

• Updated Electron build tools to latest versions (electron-builder 26.5.0, @electron/rebuild 4.0.2) for better compatibility and performance
• Scoped tar v6 override specifically to electron-builder to improve ESM module compatibility

• Security: Updated lodash to version 4.17.23 to resolve prototype pollution vulnerability
• Fixed ESM compatibility issues in the Electron build process

• Updated Electron build tools to latest versions for better compatibility and performance
• Refreshed development dependencies to ensure optimal build processes

• Resolved prototype pollution vulnerability by updating lodash to version 4.17.23

• ARM64 Performance: Switched to native ARM64 runners to eliminate QEMU emulation overhead
• CI/CD Updates: Upgraded GitHub Actions checkout from v4 to v6 and enhanced workflow permissions

• Security Patches: Updated node-tar to version 7.5.4+ to resolve CVE-2026-23950 and CVE-2026-23745
• Dependency Updates: Bumped all dependency groups with 3 critical updates

• Multi-language support: Added translations for 24 languages including Arabic (with RTL support), Chinese, French, German, Spanish, Italian, Japanese, Korean, Russian, Hindi, Bengali, Thai, Vietnamese, Indonesian, Dutch, Polish, Czech, Ukrainian, Danish, Swedish, Portuguese, Icelandic, Malay, and Turkish
• Language switcher component: New interface element allowing users to easily change the application language
• Right-to-left text support: Proper RTL rendering for Arabic and other RTL languages

• Enhanced type safety across backend routes with improved type assertions
• Updated workflow permissions configuration for better security compliance

• Private Chat Sessions: Start private conversations with in-memory storage and clear UI indicators to distinguish from regular chats
• macOS Installation: Native Homebrew formula and cask support for easy installation on macOS systems
• Enhanced WebSocket Communication: Message history now included in private chat sessions for better context preservation

• New Branding: Updated to "Libre" wordmark with refreshed logos and favicons across the application
• Typography Update: Switched to 'Roboto Slab' font for consistent branding throughout the interface
• Better Error Handling: Global 401 Unauthorized error handling in API response interceptor
• Enhanced Chat Layout: Improved ChatMessage component styling and updated LoginPage branding
• Documentation Expansion: Added comprehensive guides for Docker, Kubernetes, hardware requirements, and environment variables

• Fixed Helm package version synchronization in CI pipeline

• Kubernetes Support: Added comprehensive Helm chart for Kubernetes deployments with configurable services, ingress, autoscaling, and Ollama integration
• Development Docker Images: Introduced dedicated -dev tagged Docker images for development builds
• Enhanced Docker Compose: Added GPU-enabled and external Ollama configurations for both development and production environments

• CI/CD Pipeline: Automated Docker image building and Helm chart publishing workflows
• Documentation: Expanded README with comprehensive Docker and Kubernetes deployment guides
• Development Experience: Added development-specific Docker Compose configurations for various use cases
• Version Display: Settings modal now clearly shows -dev tag for development builds

• Updated React Router to version 7.12.0 for enhanced security and performance

• Fixed plugin service to properly respect no_auth_required setting when filtering plugins by capability

• Image Generation Plugin System: Full plugin architecture supporting image generation with ComfyUI integration
• Image Gallery: Dedicated gallery page with lightbox viewer and organized image management
• Enhanced Model Selector: Improved model selection interface with expanded options
• Plugin Credentials Service: Secure credential management for plugin authentication

• Imagine Workflow: Image generation now redirects to gallery page with additional options
• Chat Input: Removed auto-send behavior when generating images for better user control
• Theme Consistency: Primary theme colors now applied to Imagine page
• Plugin Network Access: HTTP connections now allowed for private network IPs

• Security: Added rate limiting and resolved format string vulnerabilities
• Artifact Navigation: Fixed navigation issues within iframe components
• AMOLED Theme: Drag handle now correctly uses purple accent color

• Artifacts slide-out panel: View artifacts in a dedicated resizable panel with drag handle for better content inspection
• Per-user plugin API keys: Store and manage API keys securely on a per-user basis for enhanced plugin functionality

• Enhanced input field styling consistency across dark and light themes
• Updated plugin interface with improved button alignment and status indicators

• Fixed artifact expand button visibility when titles are too long
• Prevented inline artifact height overflow by adding proper constraints
• Resolved package version synchronization issues
• Corrected plugin status dot visibility problems

• Fixed crash when running via npx libre-webui - the backend couldn't find package.json to read the version number because the file path structure is different when installed via npm vs development. The server would start but immediately crash with "Cannot find module '../package.json'".

• Fixed data persistence when running via npx (data now stored in ~/.libre-webui/)
• Fixed first-time setup not showing encryption key to user

• Changed default port to 8080 in production
• Added startup message with version and URL
• Browser now opens automatically on startup

• Fixed __dirname is not defined error in ESM modules (encryptionService)
• Fixed Express 5 wildcard route syntax ( → {splat})
• Fixed CORS blocking API requests when frontend is served from same port
• Fixed frontend not serving on root path in production
• Fixed frontend connecting to wrong API port in production builds
• Fixed route registration order (routes now register before error handlers)
• Fixed missing packages error when installing via npx

• Live LaTeX formatting - Scientific formulas now render automatically in chat messages
• Code-aware text input - Enhanced text area with syntax highlighting and code-specific features
• Copy button for messages - Quickly copy any chat message content
• Scroll-to-bottom button - Easy navigation in long chat conversations
• Media upload component - New interface for uploading files and media

• Enhanced persona memory system - Improved context retention and recall capabilities
• Redesigned persona display - Cleaner sidebar layout for persona and TTS controls
• Better persona management - Streamlined persona cards and quick-switch functionality
• Code signing support - Electron app builds now include code signing with fallback options
• Updated dependencies - Latest versions of development tools and GitHub Actions

• Fixed background image state conflicts between system and persona themes
• Resolved persona button z-index layering issues
• Improved sidebar display consistency for persona and TTS elements

• Conversation Branching: Create and navigate different response paths within conversations with persistent branching support
• Response Regeneration: Regenerate AI responses while preserving conversation branches
• Desktop Application: Added official desktop app support
• Cosmic Space Theme: New purple AMOLED theme with custom syntax highlighting

• Updated title generation prompts for better conversation naming
• Enhanced syntax highlighter with optimized performance
• Improved settings interface with cleaner organization
• Updated documentation with new screenshots and v0.2.0 features

• Fixed text-to-speech chunking for large messages to prevent audio cutoffs
• Resolved background chat image display issues
• Fixed database saving to skip undefined values and prevent data corruption

• Desktop App: Native Electron app for macOS Silicon with DMG installer and proper macOS integration
• Text-to-Speech: Complete TTS system with voice selection, settings panel, and one-click message playback
• Model Discovery: Browse Library section with Ollama model discovery and installation
• Auto-Title Generation: Automatic chat session titles for better organization
• Chain-of-Thought: Support for <thinking> tag in AI responses
• New Theme: Purple/AMOLED theme option

• Enhanced first-time setup wizard now displays encryption key
• Improved new session styling and user experience
• Better plugin support for images across Anthropic, Gemini, and OpenAI
• Updated model provider configurations
• Darkened background view for better readability

• Fixed background image persistence and user data isolation
• Resolved TTS voice settings not being saved or loaded properly
• Fixed macOS desktop app click issues and traffic light button overlap
• Corrected API URL handling in Electron file:// protocol
• Auto-retry backend connection when starting desktop app
• Fixed environment file path detection for encryption key generation

• Fixed High-Severity Vulnerabilities: Resolved 3 critical security issues identified by Dependabot
  • HIGH: glob CLI command injection via -c/--cmd (GHSA-5j98-mcp5-4vw2)
  • HIGH: auth0/node-jws improperly verifies HMAC signature
  • MODERATE: mdast-util-to-hast unsanitized class attribute (GHSA-4fh9-h7wg-q85m)
  • MODERATE: body-parser denial of service vulnerability
  • MODERATE: js-yaml prototype pollution in merge (GHSA-mh29-5h37-fv8m)
  • MODERATE: vite server.fs.deny bypass on Windows
• Zero Vulnerabilities: All security issues resolved via npm audit fix

• Fixed React linting errors for OAuth components (useEffect dependencies)
• Replaced Math.random() with React.useId() hook in form components for proper ID generation
• Resolved setState-in-effect warnings in useChat hook

• Updated 47+ dependencies for improved stability and security
• CI pipeline enhancements: actions/checkout (5→6), actions/setup-node (5→6)
• Code quality improvements to pass stricter React linting rules

• Fixed SettingsModal Corner Rendering: Resolved visual bug where header border overlapped with container's rounded corners, creating an imperfect border appearance in the upper corners
• Enhanced Keyboard Shortcuts Indicator: Repositioned the KeyboardShortcutsIndicator to the top-right corner for better visual hierarchy and accessibility
• Improved SettingsModal Layout: Enhanced responsive behavior and layout consistency across different screen sizes

• Enhanced Update Script: Added environment variable loading support to the update script tool, enabling dynamic configuration during plugin updates and system maintenance
• Plugin System Improvements: Streamlined the plugin update process with better environment configuration handling

• Dependency Security Updates: Comprehensive dependency updates including 47+ package updates across development and production dependencies
• CI Pipeline Enhancements: Updated GitHub Actions workflow dependencies (actions/setup-node v4→v5, actions/checkout v4→v5) for improved build reliability
• Package Management: Optimized package-lock.json for better dependency resolution and security

• Responsive Sidebar System: Completely redesigned mobile sidebar behavior with intelligent layout switching - compact sidebar pushes content on mobile while expanded sidebar overlays, ensuring optimal space usage
• Unified Chat Input Design: Transformed the chat input into a modern, integrated interface similar to ChatGPT/Claude with all controls (attachment, model selector, send button) seamlessly embedded within a single rounded container
• Mobile-First Artifact Display: Redesigned artifact preview components with responsive dimensions (256px on mobile, 320px on tablet, 384px on desktop) and intelligent vertical stacking to prevent content overflow
• Smart Model Name Truncation: Long model names now truncate gracefully with responsive width limits (128px mobile, 192px desktop) and hover tooltips showing full names

• Vertical Artifact Headers on Mobile: Artifact headers now stack title above buttons on mobile for better space utilization and touch accessibility
• Perfect Icon Alignment: Fixed all button icon centering issues in chat input and artifact components for pixel-perfect visual consistency
• Compact Mobile Controls: Ultra-compact artifact controls (20px buttons) on mobile with icon-only interface, expanding to full-sized buttons with labels on desktop
• Seamless Textarea Integration: Chat input textarea now blends invisibly into the input container with transparent background and perfect text alignment

• Live System Message Updates: Dynamic system message updating capability for real-time configuration changes
• Responsive Breakpoint System: Comprehensive responsive design with mobile (< 640px), tablet (640px-1024px), and desktop (≥ 1024px) specific layouts
• Touch-Optimized Interactions: Enhanced touch manipulation and proper tap targets for all mobile controls

• Mobile-Responsive Component Architecture: Complete refactoring of layout components to support dual desktop/mobile layouts with intelligent switching
• Flexbox Layout Optimization: Advanced flexbox implementations for perfect alignment and responsive behavior across all screen sizes
• CSS Class Hierarchy: Implemented comprehensive responsive class system with mobile-first approach and desktop enhancements
• Container Overflow Management: Added proper overflow handling and width constraints to prevent horizontal scrolling issues

• Mobile Content Overflow: Fixed artifact content appearing beside preview windows instead of below on mobile screens
• Sidebar Overlay Issues: Resolved sidebar positioning conflicts where content would be pushed off-screen or overlap incorrectly
• Icon Alignment Problems: Corrected vertical centering issues across all button icons in chat interface and artifact controls
• Model Name Display: Fixed long model names breaking layout and overlapping with other UI elements
• Container Spacing: Resolved inconsistent spacing and padding issues across mobile and desktop layouts

• Reduced Mobile Bundle: Optimized mobile interfaces with conditional rendering and smaller component sizes
• Smooth Animations: Enhanced transitions and hover effects for better user feedback
• Touch Performance: Improved touch responsiveness with proper touch-action CSS properties

• Consistent Cross-Device Experience: Seamless functionality whether using mobile phone, tablet, or desktop
• Modern Chat Interface: Contemporary design matching leading AI chat applications
• Improved Accessibility: Better touch targets, readable text sizes, and intuitive navigation patterns
• Professional Visual Polish: Pixel-perfect alignment and consistent spacing throughout the interface

• None. All changes are backward compatible and enhance existing functionality.

• Responsive Design Patterns: Established reusable patterns for mobile-first responsive components
• Component Architecture: Modular approach to layout components supporting multiple screen sizes
• CSS Utility System: Comprehensive responsive utility classes for consistent styling

• Critical Persona Privacy Fix: Fixed major security vulnerability where personas were accessible across users due to missing authentication middleware and fallback to 'default' user
• Proper User Isolation: Added authentication middleware (optionalAuth) to all user-context API routes ensuring complete user data isolation
• Memory Privacy: Fixed persona memory system to properly scope to the creating user, preventing cross-user memory access

• Enhanced Mobile Sidebar UX: Redesigned mobile sidebar behavior - removed close button and replaced with smart compact/expand functionality
• Improved Mobile Navigation: Mobile users can now easily switch between chats without getting stuck - sidebar compacts instead of closing
• Mobile Content Animation: Fixed mobile content animation to slide right instead of compressing, preserving readability and maintaining proper proportions
• Click-Away Support: Added intelligent click-away detection that compacts expanded sidebar on mobile for better UX
• Touch-Optimized Interactions: Enhanced touch manipulation and improved button targets for better mobile usability

• Single Sign-On (SSO): Complete GitHub and Hugging Face OAuth2 integration with secure token handling and enhanced user experience
• Model Selector Enhancements: Repositioned and added compact mode to ModelSelector component with improved UI/UX
• AI-Powered Development Tools: Integrated AI-powered changelog generation and development analysis tools for better project maintenance

• Authentication Architecture: Implemented proper authentication middleware across all API routes requiring user context
• Memory System Refactoring: Fixed parameter ordering and improved memory retrieval for persona-specific data
• Code Quality: Removed unused dependencies, fixed linting warnings, and optimized component performance with proper useCallback usage
• OAuth Security: Enhanced OAuth callback handling with better error handling and prevention of multiple executions
• Docker Configuration: Updated Docker files with improved OAuth environment variable support

• Persona Visibility Bug: Resolved issue where personas created by one user were visible to other users
• Memory Parameter Fix: Corrected getMemories() parameter order that was causing memory lookup failures
• Authentication Context: Fixed missing user context in API calls that was causing fallback to 'default' user
• Mobile Sidebar State: Fixed mobile sidebar getting stuck in closed state without recovery options
• useCallback Dependencies: Resolved React Hook dependency warnings in PersonaCard component

• Enhanced Changelog Generation: Improved AI-powered changelog generation with better categorization and clarity
• OAuth Documentation: Added comprehensive OAuth setup and configuration documentation
• Mobile UX Guidelines: Documented mobile-first design principles and touch interaction patterns

• Personas created before this version may need to be reassigned to the correct user if they were incorrectly stored under 'default' user
• API routes now properly enforce user authentication - unauthenticated requests will no longer fall back to 'default' user context

• Enhanced Privacy: Your personas and memories are now truly private and cannot be accessed by other users
• Better Mobile Experience: Significantly improved mobile navigation with intuitive sidebar behavior and proper content layout
• Improved Security: Enhanced user data isolation and proper authentication across all user-specific features
• Smoother Interactions: Better touch support and optimized animations create a more responsive mobile experience

• Single Sign-On (SSO): Added support for GitHub and Hugging Face OAuth2, allowing users to easily log in with their existing accounts.
• AI Development Analysis: Introduced AI-powered tools to assist with development and provide insights into project health.
• AI-Powered Changelog Generation: Implemented automated changelog generation to improve release note accuracy and efficiency.

• OAuth Configuration: Enhanced OAuth configuration handling for both GitHub and Hugging Face, providing clearer error messages and a more streamlined setup process.
• Performance: Optimized token management functions for improved application responsiveness.
• Docker Support: Updated Dockerfile and provided example environment variables for GitHub OAuth configuration in Docker Compose.

• OAuth Handling: Resolved issues with OAuth callback handling to prevent multiple executions and improve user feedback.
• Emoji Display: Corrected emoji display in documentation and improved overall formatting.
• API URL Consistency: Refactored API base URL handling for consistency across the application.

• Expanded documentation for AI Development Analysis and Changelog Regeneration scripts.
• Improved documentation formatting and clarity throughout the project.

• View Mode Toggle: Introduced a toggle to switch between different viewing modes for artifact rendering, providing greater control over how outputs are displayed.
• OpenRouter Support: Expanded multi-AI support to include OpenRouter, offering users more flexibility in choosing their preferred AI providers.
• Debugging Tools for Streaming: Added initial debugging tools to assist in diagnosing and resolving issues with streaming performance.

• Streaming Performance: Significantly enhanced streaming performance through batching of messages, resulting in faster and more responsive chat interactions.
• Chat Message Scrolling: Improved scrolling behavior within the ChatMessages component, making it easier to follow conversations, especially during active streaming.
• Model Update Instructions: Enhanced instructions for updating models in the README, providing clearer guidance for users.
• Release Process: Streamlined the release process by incorporating code formatting _before_ committing changes, ensuring consistent code style across releases.

• README Typo: Corrected a typographical error in the README front matter.
• Release Script Error Handling: Improved error handling and validation within the release script, making it more robust and reliable.

• Documentation Layout: Added necessary imports for Tabs and TabItem components to enhance the layout and organization of documentation pages.
• Updated Documentation: General documentation updates across multiple files (00-README.md, 01-QUICK_START.md, 02-WORKING_WITH_MODELS.md, 03-PRO_TIPS.md, 04-KEYBOARD_SHORTCUTS.md, 05-DEMO_MODE.md) to reflect the latest features and improvements.

• No security-related changes in this release.

• No breaking changes in this release.

• Streaming Optimization: Implemented message batching during streaming to reduce network overhead and improve perceived responsiveness. This involved refactoring the message handling logic within the streaming component.
• Release Process Automation: The release process now includes a pre-commit hook that automatically formats code using a configured formatter (e.g., Prettier). This ensures consistent code style and reduces the risk of style-related merge conflicts.
• Documentation Updates: Documentation updates primarily focused on clarifying existing instructions and adding details about new features. The addition of Tabs and TabItem imports allows for more structured and organized documentation layouts.
• Error Handling: Improved error handling in the release script now includes more specific error messages and validation checks to identify and address potential issues during the release process.

• Faster Chat Experience: The streaming performance improvements result in a noticeably faster and more responsive chat experience, especially when interacting with AI models.
• Improved Usability: The enhanced scrolling behavior makes it easier to follow conversations and review past messages.
• Clearer Guidance: Updated documentation provides clearer instructions and guidance for using Libre WebUI, making it easier for new users to get started.
• More Flexible AI Choices: Support for OpenRouter expands the range of AI providers users can choose from.

• OpenRouter Support: Integrated support for the OpenRouter API, allowing users to leverage a wider range of models and providers through the plugin system.
• Persistent Storage for Encryption Keys: Added support for Docker persistent storage for encryption keys, ensuring key security and availability across container restarts.

• User Email Handling: Updated user email handling to allow null values instead of requiring empty strings, providing greater flexibility in user data management.
• JWT and Encryption Handling: Enhanced JWT and encryption handling for improved security and reliability.
• Docker Build Process: Updated the Dockerfile to include additional dependencies for SQLite and OpenSSL, streamlining the local build process and improving compatibility.

• Changelog Generation: Improved the changelog generation process in the release script to filter noise and better categorize commits, resulting in a cleaner and more informative changelog.
• Linting Issues: Addressed various linting issues throughout the codebase, improving code quality and maintainability.

• Extensive Documentation Updates: Significantly expanded documentation with new sections covering:
  • Plugin Architecture
  • RAG (Retrieval Augmented Generation) Feature
  • SQLite Migration
  • Authentication & Security
  • Artifacts Feature
  • Release Automation
  • Docker External Ollama Setup
  • Persona Development Framework
  • Community Charter
• Development Branch Guide: Added a guide for contributing to the development branch.
• Outdated Database Encryption Removal: Removed the outdated Database Encryption implementation, streamlining the codebase and focusing on the new, improved key management system.

• Enhanced Key Management: Implemented support for Docker persistent storage for encryption keys, providing a more secure and reliable method for storing sensitive data.
• JWT & Encryption Improvements: Strengthened JWT and encryption handling to mitigate potential security vulnerabilities.
• Security Documentation: Expanded security documentation to provide users with a comprehensive understanding of the security features and best practices.

• None in this release.

• SQLite & OpenSSL Dependencies: The Dockerfile now explicitly includes SQLite and OpenSSL, ensuring consistent build environments and resolving potential dependency issues.
• Encryption Key Storage: Encryption keys are now designed to be stored persistently outside the container, preventing data loss on container restarts. This is achieved through volume mounting in Docker.
• OpenRouter Integration: The OpenRouter integration connects Libre WebUI to the OpenRouter API and its provider-backed model catalog.
• JWT Handling: JWTs are now generated and validated with enhanced security measures, including stronger algorithms and key rotation considerations.

This release provides a more robust and secure experience for all Libre WebUI users. The addition of OpenRouter expands model options, while improved documentation empowers users to customize and extend the platform. The enhanced security features protect user data and ensure a reliable and trustworthy experience. The streamlined build process and improved changelog make development and contribution easier for the community.

• Automatic Encryption Key Generation: Libre WebUI now automatically generates and stores an encryption key in the .env file during initial setup, simplifying the configuration process.
• Database Encryption Service: Implemented a robust database encryption service utilizing AES-256-GCM to protect sensitive user data at rest.

• API Rate Limiting: Enhanced rate limiting for the /api/personas route, allowing up to 500 requests per window. This prevents abuse and ensures service stability. Rate limiting logic has been refined across persona operations for better performance.
• Error Handling: Improved error handling in database migration and encryption processes, providing more informative error messages and preventing unexpected failures.
• Preference Decryption: Refactored the preference decryption logic for improved clarity and maintainability.

• Dependency Updates: Updated @napi-rs/canvas and other core dependencies to the latest versions, resolving potential vulnerabilities and improving performance.
• Header Component Dependencies: Cleaned up unnecessary dependencies within the Header component, reducing bundle size and improving load times.

• Changelog Updates: Added an "Unreleased" section to the changelog to facilitate smoother release automation and tracking of upcoming changes.
• README Updates: Updated the README.md file with relevant information about the latest features and improvements.

• AES-256-GCM Encryption: Implemented AES-256-GCM encryption for the entire database, protecting user data from unauthorized access. The encryption key is securely stored and managed.
• Dependency Updates: Updated dependencies to address potential security vulnerabilities.

• None. This release does not introduce any breaking changes.

• Encryption Implementation: The database encryption service utilizes AES-256-GCM with a randomly generated key stored in the .env file. This key should be treated as highly sensitive and protected accordingly.
• Rate Limiting: Rate limiting is implemented using a sliding window algorithm to provide a balance between performance and protection against abuse.
• Dependency Management: package-lock.json has been updated to ensure consistent dependency versions across all environments.
• .env Configuration: The .env file now includes a variable for the encryption key. Users should ensure this file is not committed to version control.

• Enhanced Security: Database encryption protects your personal data from unauthorized access, providing peace of mind.
• Improved Reliability: Enhanced error handling and dependency updates contribute to a more stable and reliable experience.
• Faster Performance: Dependency cleanup and optimized rate limiting contribute to improved performance and responsiveness.
• Simplified Setup: Automatic encryption key generation simplifies the initial setup process.

• Persona Management: Implemented avatar and background image upload components within the PersonaForm for richer persona customization.
• Memory & Mutation Engine Services: Added core services for Memory and Mutation engines, paving the way for more dynamic and intelligent chatbot behavior.
• Gemini Plugin Support: Added support for the Gemini plugin, including specific payload formatting and response conversion.
• Contributor Recognition: Added a CONTRIBUTORS.md file to publicly acknowledge and thank project maintainers and community contributors.
• Provider Plugin Enhancements: Expanded provider plugin support for new services and models, increasing flexibility and choice.

• Persona Export/Import: Enhanced Persona export/import functionality to include embedding model, memory, and mutation settings, enabling complete persona backups and sharing.
• Persona Interface: Improved the Persona page layout and styles for a more intuitive user experience. Streamlined memory status display in the PersonaCard component.
• Chat Input: Updated the ChatInput component to display the version number and a warning message.
• Embedding Model Selection: Enhanced the Persona Development Framework section with dynamic embedding model selection and advanced memory systems documentation. The PersonaForm now supports dynamic model selection.
• File Uploads: Simplified API calls for file uploads by removing redundant headers, improving efficiency.
• Dependency Management: Updated dependencies across the project, ensuring compatibility and stability.

• Persona Download: Improved error handling in the persona download function for more robust operation.
• Network Access (Development): Enabled network access for the development server using the --host flag, facilitating easier local testing.
• Import Resolution: Refactored imports to use file extensions, resolving potential import issues.

• Persona Development Framework: Expanded documentation to cover dynamic embedding model selection and advanced memory systems.
• Contribution Guidelines: Updated contribution guidelines to direct pull requests to the dev branch instead of main.

• SSRF Vulnerability: Fixed a Server-Side Request Forgery (SSRF) vulnerability in pluginService.ts.
• Format String Injection: Fixed a format string injection vulnerability in chatService.ts.
• JWT Secret Handling: Updated JWT_SECRET handling for both production and development environments to improve security.
• Rate Limiting: Implemented rate limiting for persona operations to prevent abuse and ensure service availability. Reordered middleware and updated configuration for the /api/personas route to optimize rate limiting effectiveness. CodeQL analysis was performed to identify and address potential vulnerabilities.

• None identified in this release.

• Docker Updates: Updated the Dockerfile and package.json to ensure a consistent and reproducible build environment. Added a missing dependency (lowlight) to the Dockerfile.
• CI/CD: Updated the Docker build action to version 6.
• Refactoring: Removed unused components and cleaned up the codebase for improved maintainability. Simplified API calls and streamlined component rendering.
• Rate Limiting Implementation: Rate limiting is implemented using a token bucket algorithm with configurable limits per IP address.
• Gemini Plugin Integration: The Gemini plugin integration utilizes a specific payload format and response conversion logic to ensure compatibility with the Libre WebUI API.

• Persona Development Framework: Introduced a comprehensive framework for creating, managing, and utilizing custom personas within the chat interface. Users can now define unique personalities and backgrounds for their AI interactions.
• Persona Import/Export: Added functionality to export personas as JSON files, allowing for easy sharing and backup. Users can also import personas from existing JSON files.
• Model Pulling with Streaming Progress: Implemented a new model pulling mechanism with streaming progress updates and cancellation support, providing a more responsive and user-friendly experience when downloading models.
• Conditional Keyboard Shortcuts Indicator: Added a visual indicator to the chat interface to display available keyboard shortcuts, improving usability.
• Loading Screen Branding: Enhanced the loading screen during authentication with a logo and branding elements for a more polished user experience.

• Chat Functionality with Persona Support: Enhanced the chat functionality to seamlessly integrate with the Persona Development Framework. Users can now select and apply personas to their chat sessions.
• Persona Management in Chat Sessions: Improved chat session management to include persona selection and background application, ensuring consistent personality throughout the conversation.
• User Management & CORS: Enhanced user management features with optional password updates and improved CORS handling for multi-user environments.
• Background Image Handling: Improved background image handling for a more visually appealing and customizable interface.
• Chat Input Enhancements: Enhanced the ChatInput component with advanced features toggle and improved button layout for better usability.
• Helmet Configuration: Updated Helmet configuration with a production-ready Content Security Policy (CSP) for enhanced security.

• Persona Table Initialization: Resolved an issue with the initialization of the persona table in the database.
• Session Handling Redirection: Corrected session handling to properly include the location pathname for redirection logic.
• Raw JSON Response for Persona Download: Fixed an issue where persona downloads were returning an API response wrapper instead of raw JSON.
• Multi-User CORS Origin: Resolved a CORS issue affecting multi-user environments.
• Shell Command Injection Vulnerabilities: Addressed and mitigated potential shell command injection vulnerabilities in release scripts.

• Persona Development Framework Documentation: Added comprehensive documentation detailing the Persona Development Framework, including instructions on creating, managing, and utilizing personas.

• Enhanced Security Headers & CSP: Updated security headers and implemented a robust Content Security Policy (CSP) for improved protection against various attacks, especially for Docker deployments.
• CSP Configuration for Production: Fine-tuned the CSP configuration for production environments to maximize security without impacting functionality.

• None identified in this release.

• Database Schema Update: The persona table has been added to the database schema. Developers should ensure their database migrations are up-to-date.
• API Endpoints: New API endpoints have been added for persona management (creation, editing, deletion, import/export). Refer to the updated API documentation for details.
• CORS Configuration: The CORS configuration has been updated to allow for more flexible origin handling. Developers should review the configuration to ensure it meets their specific requirements.
• CSP Configuration: The CSP configuration has been significantly updated. Developers should review the configuration to ensure it aligns with their security policies and application requirements.
• Chat Service Refactor: The chat service has been refactored to integrate with the Persona Development Framework. Developers extending the chat service should be aware of these changes.
• PersonaRow Interface: The PersonaRow interface has been simplified by removing unused fields to improve code clarity and maintainability.

• Automated Release System: Implemented a fully automated release pipeline using conventional commits, enabling faster and more reliable releases. The release script now supports --patch, --minor, and --major flags for version bumping.
• External Ollama Support (Docker): The Docker setup now supports connecting to an external, pre-existing Ollama instance, providing greater flexibility in deployment scenarios.
• Dynamic Version Display: The application now dynamically displays the version number from package.json within the SettingsModal, ensuring users always have access to the current version information.
• Configurable Data Directory: Added the DATA_DIR environment variable, allowing users to specify the database path for persistent data storage.

• Docker Deployment: Major improvements to the Dockerfile and related files for multi-service startup, flexible frontend port configuration, and environment variable handling. WebSocket connection logic has been updated for improved stability.
• Timeout Configurations: Enhanced timeout configurations for both the Ollama service and API calls, improving responsiveness and reliability under varying network conditions.
• Code Readability & Consistency: Significant improvements to code formatting and consistency across the codebase, particularly within Docker-related files, enhancing maintainability and collaboration.

• Docker Configuration Issues: Resolved several issues related to Docker deployment, including incorrect configurations and potential startup failures.
• WebSocket Connection Stability: Addressed issues with WebSocket connections within the Docker environment, improving the overall stability of the application.

• Docker Documentation: Updated the README with comprehensive documentation for Docker configurations, including instructions for external Ollama setup and environment variable usage. Improved table formatting for better readability.
• General README Updates: Clarified various sections of the README for improved user understanding.

• No specific security changes in this release.

• No breaking changes are introduced in this release.

• Conventional Commits: The release process now leverages conventional commits for automated versioning and changelog generation.
• Dockerfile Optimization: The Dockerfile has been restructured to support multi-service startup and improved resource utilization.
• Environment Variable Configuration: The addition of DATA_DIR and improved handling of other environment variables provide greater control over application behavior.
• WebSocket Updates: WebSocket connection logic has been updated to handle potential connection issues and improve stability.

• Easier Deployment: The improved Docker configuration and external Ollama support make it significantly easier to deploy Libre WebUI in various environments.
• Increased Customization: The DATA_DIR environment variable allows users to customize data storage locations.
• Enhanced Reliability: Improved timeout configurations and WebSocket stability contribute to a more reliable and responsive user experience.
• Automatic Updates: The automated release system ensures users receive timely updates with new features and bug fixes.