Added

• 💭 Streamed reasoning display. Models that emit thinking or reasoning now show that content as it streams, and it renders correctly in the chat overview and in exported conversations. Commit, Commit, Commit, Commit
• 🗂️ Folder uploads to knowledge bases. Dragging a folder into a knowledge base, or syncing one, now recreates its subfolder structure instead of flattening everything into loose files. #26130, Commit
• 🧠 Memory system context toggle. Administrators can now keep memory tools available while choosing not to add stored memories to the system context, using the new 'Memory System Context' toggle in admin settings. Commit
• 🧹 Tidier automatic memories. Automatically saved memories now focus on enduring details like preferences and goals and skip one-off things like meals, routine events, or passing mood unless you ask to remember them. Commit
• 🎙️ Speech-to-text request format. OpenAI-compatible speech-to-text can now send audio as either a multipart upload or base64 JSON, selectable in admin audio settings. Commit
• 🧰 API configs via environment. Administrators can now set per-connection Ollama and OpenAI API configurations through the "OLLAMA_API_CONFIGS" and "OPENAI_API_CONFIGS" environment variables. Commit
• 📡 Provider failure events. Failed Ollama and OpenAI-compatible provider requests now emit a structured event describing the error type, provider, and status, giving administrators clearer visibility into upstream failures. Commit
• 🏟️ Arena models via environment. Administrators can now define evaluation arena models through the "EVALUATION_ARENA_MODELS" environment variable. #26174
• ♿ Clearer high-contrast sidebar selection. With high-contrast mode enabled, the currently selected chat in the sidebar now stands out with stronger colors, making it easier to tell which chat is active. #26469, Commit
• 🔄 General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
• 🌐 Translation updates. Translations for Thai, Portuguese (Brazil), Catalan, and Spanish were enhanced and expanded.

Fixed

• 🛡️ Security Advisory: This release includes security and access-control fixes. We recommend updating production deployments at your earliest convenience. Not all security fixes in this version may be enumerated in the fixed section — some may be withheld for a short time to give administrators time to upgrade. Advisories
• 🔐 Fewer unexpected logouts. A single request returning an authorization error no longer signs you out while your session is still valid, since the app now confirms the session status before redirecting to login. Commit
• 🔒 Web search domain filtering. Domain allow and block rules for web search results are now matched against the host, closing a gap where some URLs could slip past the filter. Commit
• 🕵️ Image prompt log privacy. Image generation workflows are no longer written to server logs at the default log level, keeping user-authored prompt content out of operator-visible logs. #26400, Commit
• 🗄️ Safer database upgrades. Upgrading an existing SQLite database no longer crashes during the user-table migration or corrupts saved user settings, resolving failures that could block startup or break login after an upgrade. #26403, Commit
• ⚙️ Saving settings as a non-admin. Non-admin users can once again save their interface settings, such as the default model and theme, which previously failed with a server error while the interface incorrectly reported success. #26627, Commit
• 🕒 Sidebar chat timestamps. Chats in the sidebar now show when they were last active instead of when they were created, so the time label matches their position in the list and refreshes after each new message. #26454, #26451
• 🎯 Default model after refresh. Your selected model is no longer cleared when you reload the page, as model selection now waits for the model list to finish loading. Commit
• ⏳ Tool dialogs no longer hang. Dismissing a tool or function input dialog by clicking outside it now cancels the pending request instead of leaving the chat spinning indefinitely. #26417, Commit
• 🐍 Reliable code execution loading. Running Python code in chat now loads its runtime reliably, fixing sandbox startup failures that broke code execution and the Pyodide file viewer in recent releases. #26625, #26390
• 🤖 Models with null capabilities. Chatting with a model whose capabilities are unset no longer fails with an error when the memory feature or automations are involved. #26412, Commit, Commit
• 🔎 Searchable responses. Chat search again finds assistant messages whose text is stored as structured output, which were previously skipped. #26405
• 🔔 Chat notification previews. Background chat completion notifications and toasts now show a clean response preview instead of appearing blank for messages stored as structured output. Commit
• 💾 Banner and config startup. Setting configuration such as "WEBUI_BANNERS" no longer causes a startup failure, since admin configuration values are now stored correctly regardless of their data type. #26431, Commit
• 📑 RAG Template visibility. The RAG Template editor now stays visible in admin document settings even when Bypass Embedding and Retrieval is enabled, since the template still applies to document content in that mode. #26126, Commit
• 🧬 Editing derived models. Editing a workspace model no longer clears its base model, including when that base is a preset or the model itself. Commit, Commit