This release includes breaking changes for platform teams planning a safe upgrade.
Published 20d
AI Agents & Assistants
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
agent
ai
astrbot
llm
chatgpt
discord
+9 more
docker
gemini
llama
mcp
openai
python
qq
qqbot
telegram
Affected surfaces
auth
breaking_upgrade
Summary
AI summaryBroad release touches 4.26.5] - 2026-07-07, Commits, fix, and feat.
Full changelog
4.26.5 - 2026-07-07
Added
- Added support for setting a custom bot ID while creating a platform by scanning a QR code. (#9067)
- Added ChatUI project workspaces. (#9066)
- Added improved ChatUI attachment display. (#9134)
- Added malformed tool-call name sanitation in
ToolLoopAgentRunner. (#9144) - Added model metadata in selectors and a chat token usage indicator. (#9161)
- Added event-loop diagnostics and expanded diagnostics documentation. (#9168)
- Added documentation for cross-platform compatibility and Python version support.
- Added test coverage for POSIX file URI root preservation. (#8906)
Changed
- Log event-loop watchdog startup at the info level.
- Keep model metadata separate from providers. (#9161)
- Polish snackbar styling in the WebUI. (#9173)
Fixed
- Enabled only synced ModelScope MCP servers. (#9084)
- Improved MCP client startup and shutdown handling to avoid idle spinning and clean up on errors, timeouts, and cancellation. (#9070)
- Replaced fragile knowledge-base duplicate-name error matching with a pre-check. (#9121)
- Improved knowledge-base retrieval resilience on per-knowledge-base failures and rerank selection. (#9122)
- Cleaned up
KBMediarecords on document deletion and fixed knowledge-base stats updates. (#9120) - Aligned the knowledge-base CRUD API contract with
kb_name, canonical payload fields, and OpenAPI types. (#9000) - Constrained custom workspace paths and preserved absolute custom workspace paths.
- Improved web search API key failover.
- Enforced ownership when reading ChatUI sessions. (#9141)
- Secured project update temporary staging. (#9083)
- Improved QQ Official retry behavior when websocket send returns
None. (#8977) - Preserved QQ Official quoted message context. (#9164)
- Removed QQ Official reply IDs on proactive fallback so oversized passive replies can succeed via proactive sending. (#9169)
- Adapted MiMo STT to V2.5 models and rejected non-WAV audio payloads. (#9118)
- Serialized webchat history timestamps as UTC-aware ISO strings. (#9159)
- Synced plugin activation status on enable in the WebUI. (#9156)
- Exited MCP
anyiocontexts in the lifecycle task on disable. (#9132) - Fixed leaked SSE exit stack handling that could cause MCP epoll busy-wait. (#8307)
Commits
- feat(platform): 支持扫码创建时自定义机器人ID by @NayukiChiba in https://github.com/AstrBotDevs/AstrBot/pull/9067
- fix: enable only synced ModelScope MCP servers by @VectorPeak in https://github.com/AstrBotDevs/AstrBot/pull/9084
- feat: add ChatUI project workspaces by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9066
- fix: Improve MCP client startup and shutdown handling to prevent idle spinning when a server is disabled and ensure proper cleanup on errors, timeouts, and cancellation by @GlowingBrick in https://github.com/AstrBotDevs/AstrBot/pull/9070
- fix(kb): replace fragile error string matching with pre-check for duplicate kb_name by @lxfight in https://github.com/AstrBotDevs/AstrBot/pull/9121
- fix(kb): improve retrieval resilience on per-KB failure and rerank selection by @lxfight in https://github.com/AstrBotDevs/AstrBot/pull/9122
- fix(kb): clean up KBMedia records on document delete, fix update_kb_stats by @lxfight in https://github.com/AstrBotDevs/AstrBot/pull/9120
- fix: align knowledge base CRUD API contract with kb_name, canonical payload fields, and matching OpenAPI types by @lxfight in https://github.com/AstrBotDevs/AstrBot/pull/9000
- fix(core): 修复 Tavily 其他5种search方法 API Key 和轮询失败未自动切换的问题 by @NayukiChiba in https://github.com/AstrBotDevs/AstrBot/pull/8896
- feat: improve ChatUI attachment display by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9134
- fix: enforce ownership when reading ChatUI sessions by @VectorPeak in https://github.com/AstrBotDevs/AstrBot/pull/9141
- fix: secure project update temp staging by @LIghtJUNction in https://github.com/AstrBotDevs/AstrBot/pull/9083
- fix: Add retry handling to QQ Official websocket adapter when the send-message API returns None to mitigate transient failures by @shuiping233 in https://github.com/AstrBotDevs/AstrBot/pull/8979
- fix: adapt MiMo STT to V2.5 models and reject non-WAV audio payloads by @tangtaizong666 in https://github.com/AstrBotDevs/AstrBot/pull/9118
- test: cover POSIX file URI root preservation by @casama233 in https://github.com/AstrBotDevs/AstrBot/pull/8906
- feat: add sanitation for malformed tool call names in ToolLoopAgentRunner by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9144
- feat: show model metadata in selectors by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9160
- fix: keep model metadata separate from providers by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9161
- fix: serialize webchat history timestamps as UTC-aware ISO strings by @leafliber in https://github.com/AstrBotDevs/AstrBot/pull/9159
- feat: add chat token usage indicator by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9162
- fix(webui): sync plugin activation status on enable by @Koishi0425 in https://github.com/AstrBotDevs/AstrBot/pull/9156
- fix: preserve qq official quoted message context by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9164
- fix: exit MCP anyio contexts in the lifecycle task on disable by @kldsjfas in https://github.com/AstrBotDevs/AstrBot/pull/9132
- fix(mcp): attempt to fix epoll busy-wait caused by leaked SSE exit stack by @lingyun14beta in https://github.com/AstrBotDevs/AstrBot/pull/8307
- fix: remove qq official reply id on proactive fallback by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9169
- feat: add event loop diagnostics by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9168
- style: polish snackbar appearance by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9173
- chore: bump version to 4.26.5 by @Soulter in https://github.com/AstrBotDevs/AstrBot/pull/9174
New Contributors
- @GlowingBrick made their first contribution in https://github.com/AstrBotDevs/AstrBot/pull/9070
- @tangtaizong666 made their first contribution in https://github.com/AstrBotDevs/AstrBot/pull/9118
- @casama233 made their first contribution in https://github.com/AstrBotDevs/AstrBot/pull/8906
- @Koishi0425 made their first contribution in https://github.com/AstrBotDevs/AstrBot/pull/9156
- @kldsjfas made their first contribution in https://github.com/AstrBotDevs/AstrBot/pull/9132
Full Changelog: https://github.com/AstrBotDevs/AstrBot/compare/v4.26.4...v4.26.5
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About AstrBot
All releases →Related context
Related tools
Earlier breaking changes
- v4.25.3 Upgrades MiniMax Token Plan default model to M3.
Beta — feedback welcome: [email protected]