Skip to content

Onyx Community Edition

v3.1.10 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 14d LLM Frameworks
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

ai ai-chat chatgpt chatui enterprise-search gen-ai
+7 more
information-retrieval llm llm-ui nextjs python self-hosted vector-db

Affected surfaces

auth crypto_tls

ReleasePort's take

Moderate signal
editorial:auto 14d

File upload sizes are now enforced with configurable limits and frontend prechecks. OpenSearch is enabled by default for search functionality.

Why it matters: Configure file upload limits for your deployment. Test OpenSearch integration and validate dependency updates in development before upgrading production environments.

Summary

AI summary

Touched modules include fe, opensearch, admin UI, file uploads, security fixes and dependency bumps.

Changes in this release

Feature Medium

Added rotate encryption key utility.

Added rotate encryption key utility.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Implemented Tool call arg streaming.

Implemented Tool call arg streaming.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Added `LineItemButton` component.

Added `LineItemButton` component.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Added `Storybook` infrastructure - 1/3.

Added `Storybook` infrastructure - 1/3.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Enabled OpenSearch by default.

Enabled OpenSearch by default.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Increased preview file type support and replaced `TextViewModal` with `PreviewModal` variant.

Increased preview file type support and replaced `TextViewModal` with `PreviewModal` variant.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Added `UserAvatar` component.

Added `UserAvatar` component.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Added `LineItemButton` component (duplicate, already listed).

Added `LineItemButton` component (duplicate, already listed).

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Added `SvgStarOff` icon.

Added `SvgStarOff` icon.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Migrated root layout from SSR to CSR with SWR data fetching.

Migrated root layout from SSR to CSR with SWR data fetching.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Feature Medium

Added `UserAvatar` component (duplicate, already listed).

Added `UserAvatar` component (duplicate, already listed).

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Dependency Medium

Bumped astral-sh/setup-uv from 7.2.0 to 7.3.1.

Bumped astral-sh/setup-uv from 7.2.0 to 7.3.1.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Dependency Medium

Bumped actions/download-artifact from 7.0.0 to 8.0.0.

Bumped actions/download-artifact from 7.0.0 to 8.0.0.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Dependency Medium

Bumped hashicorp/setup-terraform from 3.1.2 to 4.0.0.

Bumped hashicorp/setup-terraform from 3.1.2 to 4.0.0.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Dependency Medium

Bumped docker/bake-action from 6.10.0 to 7.0.0.

Bumped docker/bake-action from 6.10.0 to 7.0.0.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Performance Medium

Replaced glibc with jemalloc for memory allocating in API memory.

Replaced glibc with jemalloc for memory allocating in API memory.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Added configurable user file max upload size setting.

Added configurable user file max upload size setting.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Enforced user upload file size limit in projects/chat upload path.

Enforced user upload file size limit in projects/chat upload path.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Added frontend precheck for oversized user uploads.

Added frontend precheck for oversized user uploads.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Fallback doc access when drive item is externally owned.

Fallback doc access when drive item is externally owned.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Removed unnecessary multitenant check in migration.

Removed unnecessary multitenant check in migration.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Fixed ph ssl upgrade on redirect for local development.

Fixed ph ssl upgrade on redirect for local development.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Moved available context tokens to useChatController and removed arbitrary 50% cap.

Moved available context tokens to useChatController and removed arbitrary 50% cap.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Set event hook for wrapping values into SensitiveValue.

Set event hook for wrapping values into SensitiveValue.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Fixed improper kv store strings.

Fixed improper kv store strings.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Fixed chat content padding.

Fixed chat content padding.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Made CSV inline display responsive.

Made CSV inline display responsive.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Bugfix Medium

Fixed windows installer.

Fixed windows installer.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Refactor Medium

Updated decryption utility.

Updated decryption utility.

Source: granite4.1:8b-q6_K@2026-05-20

Confidence: high

Full changelog

See the assets to download this version and install.

What's Changed

  • feat: rotate encryption key utility by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9162
  • feat: Tool call arg streaming by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/9095
  • fix(user files): Add configurable user file max upload size setting 1/3 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9157
  • fix(user files): Enforce user upload file size limit in projects/chat upload path 2/3 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9158
  • fix(user files): Add frontend precheck for oversized user uploads 3/3 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9159
  • chore(llm): Adding Integration test for Model state cache 2/2 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9142
  • fix(fe): fix broken slack bot admin pages by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9168
  • fix: remove unnecessary multitenant check in migration by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9172
  • fix: ph ssl upgrade on redirect for local development by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9175
  • chore: update decryption utility by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9176
  • fix: move available context tokens to useChatController and remove arbitrary 50% cap by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9174
  • fix: set event hook for wrapping values into SensitiveValue by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9177
  • feat: add LineItemButton component by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9137
  • fix: fallback doc access when drive item is externally owned by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9053
  • chore(deps): bump astral-sh/setup-uv from 7.2.0 to 7.3.1 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9200
  • chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9199
  • chore(deps): bump hashicorp/setup-terraform from 3.1.2 to 4.0.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9198
  • fix(mcp): use CE-compatible chat endpoint for search_indexed_documents by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9193
  • refactor: default width from w-autow-fit by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9146
  • fix(fe): move app padding inside overflow container by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9206
  • fix: don't fetch mcp tools when no llms are configured by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9173
  • fix: discord connector async resource cleanup by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9203
  • fix(safari): Search results dont shrink by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9126
  • feat(storybook): add Storybook infrastructure - 1/3 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9195
  • fix: impropoer kv store strings by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9213
  • fix(api memory): replace glibc with jemalloc for memory allocating by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9196
  • feat(opensearch): Enable by default by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9211
  • fix(fe): fix chat content padding by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9216
  • fix(code-interpreter): set default CODE_INTERPRETER_BASE_URL w/ docke… by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9215
  • chore(auth): backend cleanup by @jessicasingh7 in https://github.com/onyx-dot-app/onyx/pull/8558
  • fix: use detail instead of message in OnyxError response shape by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9214
  • feat(storybook): add stories for all components - 2/3 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9194
  • ci: add Storybook deploy workflow - 3/3 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9205
  • feat(fe): increase preview file type support & replace TextViewModal with PreviewModal variant by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9212
  • fix(fe): preview modal fade matches code bg color by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9221
  • fix: assistant file transfer by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9163
  • feat: prune hierarchynodes by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9066
  • fix: Prevent the removal and hiding of default model by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/9131
  • feat(custom-tools): enhance custom tool error handling and timeline UI by @Subash-Mohan in https://github.com/onyx-dot-app/onyx/pull/9189
  • chore(release): run playwright on release pushes by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9233
  • chore(auth): deployment docker cleanup by @jessicasingh7 in https://github.com/onyx-dot-app/onyx/pull/8587
  • chore(tests): fix nightly model-server tests by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9236
  • fix(opensearch): Allow configuring the page size of chunks we get from Vespa during migration by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9239
  • chore(opensearch): Allow configuring num hits from hybrid subquery from env var by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9243
  • fix(fe): make CSV inline display responsive by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9242
  • fix: update jira group sync endpoint by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9241
  • fix(storybook): case-sensitivity, icon rename, and story fixes by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9244
  • fix(fe): correctly parse comma literals in CSVs by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9245
  • chore(opensearch): Followup for #9243 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9247
  • fix(fe): increase responsive breakpoint for centering modals by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9250
  • fix(opensearch): Update should clear projects and personas when they are empty by @acaprau in https://github.com/onyx-dot-app/onyx/pull/8845
  • chore: add cache_okay to EncryptedJson by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9252
  • chore: sharepoint dedupe by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9254
  • chore: redeclare cache_okay for EncryptedBase children by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9253
  • feat(llm-provider): fetch litellm models by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/8418
  • fix: Consolidate search state-machine by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9234
  • chore(release): upgrade release-tag by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9257
  • chore(deps): bump hono from 4.12.5 to 4.12.7 in /backend/onyx/server/features/build/sandbox/kubernetes/docker/templates/outputs/web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9263
  • feat(opal): add foldable support to OpenButton + fix MessageToolbar by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9265
  • feat(litellm): Adding FE Provider workflow by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9264
  • feat(admin): add Users page shell with stats bar and SCIM card - 1/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9079
  • feat(opal): add Card and EmptyMessageCard components by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9271
  • fix(tests): remove deprecated o1-preview and o1-mini model tests by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9280
  • fix(indexing): Stop deep-copy during indexing by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/9275
  • chore(opensearch): unset container ulimits in dev by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9277
  • chore(deps): bump pypdf from 6.7.5 to 6.8.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9260
  • feat(ods): use release-tag to print highest stable semver that should receive the latest tag by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9278
  • fix(craft): rename webapp download endpoint to avoid route conflict by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/9283
  • fix(fe): InputComboBox resets filter value on open by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9287
  • chore(deps): bump tornado from 6.5.2 to 6.5.5 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9290
  • feat(admin): add user timestamps and enrich FullUserSnapshot - 2/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9183
  • chore(models): rm claude-3-5-sonnet-v2 metadata by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9285
  • fix(slackbot): resolve channel references and filter search by channel tags by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9256
  • chore(devtools): ods backend api by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9295
  • feat(admin): add Users table with DataTable and server-side pagination - 3/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9178
  • chore(devtools): upgrade ods: 0.6.3->0.7.0 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9297
  • feat(admin): add role, group, and status filters to Users table - 4/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9179
  • fix(db): avoid SQLAlchemy sentinel mismatch in batch user insert by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9300
  • fix(fe): prevent clicking InputSelect from selecting text by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9292
  • refactor: use ods latest-stable-tag to tag images in Docker Hub by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9281
  • feat(admin): add row actions with confirmation modals - 5/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9180
  • refactor: sync craft latest builds with latest stable by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9279
  • fix(favicon): prefer relative path to favicon by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9307
  • chore: sharepoint error logs by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9309
  • feat(admin): add invite users modal - 6/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9181
  • feat(chat): support attaching more file types to chats by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9299
  • chore(auth): deployment helm cleanup by @jessicasingh7 in https://github.com/onyx-dot-app/onyx/pull/8588
  • feat(admin): add inline role editing in Users table - 7/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9184
  • chore(deps): bump orjson from 3.11.4 to 3.11.6 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9315
  • chore(fe): polish file previews more by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9259
  • feat(oidc): Adding PKCE for OIDC by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9128
  • fix(cherry-pick): Improving workflows by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9316
  • chore(greptile): Improving the Custom Context by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9319
  • fix(craft): stop proxied webapp asset and HMR reload leaks by @rohoswagger in https://github.com/onyx-dot-app/onyx/pull/9255
  • fix: skip classic site pages by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9318
  • feat(admin): add edit group membership modal - 8/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9185
  • feat(admin): switch to new Users page and remove v2 route - 9/9 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9223
  • feat(voice mode): stt and tts by @jessicasingh7 in https://github.com/onyx-dot-app/onyx/pull/8715
  • fix(helm): User Auth Secret off by Default by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9325
  • chore(cherry-pick): CODEOWNERS for cherry-pick by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9329
  • fix: sharepoint pages 400 list expand by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9321
  • chore(cherry-pick): Whitelist for Users who can CP by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9330
  • chore(deps): upgrade katex: v0.16.17->v0.16.38 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9327
  • chore(playwright): remove .only typo by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9336
  • fix(voice): sanitized error and fix replay voice on revisit chat by @jessicasingh7 in https://github.com/onyx-dot-app/onyx/pull/9326
  • feat(cherry-pick): notify Slack on successful PR creation by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9331
  • chore: refactor ph events for typing and consolidation and add event on llm configuration by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9328
  • feat(llm-modal-consolidation): Update components by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9334
  • chore(format): format files where ruff and black agree by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9339
  • feat: add more user icons by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9343
  • chore(deps): bump pyjwt from 2.11.0 to 2.12.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9341
  • fix(litellm): filter embedding models by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/9347
  • feat: add progress-bars opal icon by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9349
  • feat: refresh admin sidebar with new sections, search, and disabled EE tabs by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9344
  • fix(fe): bump flatted to patch CVE-2026-32141 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9350
  • feat(ci): add Slack @-mention support to slack-notify action by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9359
  • fix(admin): users page UI/UX polish by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9366
  • chore(posthog): allow no-op client in DEV_MODE by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9357
  • chore(deps): bump authlib from 1.6.7 to 1.6.9 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9370
  • chore(hook): Add feature control by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9320
  • chore(voice): support non-default FE ports for IS_DEV by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9356
  • fix: use uuid as ph unique id from BE by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9371
  • test(ui): Add visual regression test for project files with long filenames by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9062
  • chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9373
  • chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9375
  • chore(deps): bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9374
  • chore(tests): fix flaky test_run_with_timeout_raises_on_timeout by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9377
  • fix(celery): Limiting connector_hierarchy_fetching jobs by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9381
  • chore(ws): ignore port when determining origin in dev by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9382
  • chore: update install script by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9068
  • test(admin): add E2E Playwright tests for Users page by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9266
  • chore: run identify from backend by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9392
  • refactor: refreshed Pagination component by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9380
  • chore(fe): make sidebar scrollbar flush with edge by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9383
  • fix(search-ui): center pagination in SearchUI by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9396
  • chore(fe): admin navigation always goes to LLM config page by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9395
  • chore(playwright): make project name human-readable by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9394
  • chore(hook): DB changes by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9337
  • fix(vespa): use weightedSet for ACL filters to prevent query failures by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9403
  • feat(llm-config): replace AdvancedOptions with unified ModelsAccessField by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9270
  • fix: make ConnectorCredentialPair name required by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9408
  • chore(fe): rm dead stackTraceModalContent by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9412
  • chore(deps): bump next from 16.1.5 to 16.1.7 in /backend/onyx/server/features/build/sandbox/kubernetes/docker/templates/outputs/web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9420
  • chore(devtools): ods backend scans for available ports by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9418
  • fix(llm): surface masked OpenAI quota failures by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9308
  • chore(fe): prefer INTERNAL_URL by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9419
  • feat(opensearch): Configure hybrid search subquery groups and pipelines via env var by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9407
  • chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9417
  • chore(opensearch): Make Password Default Empty by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9415
  • refactor: update size variant and dimension names in opal components by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9416
  • chore(docker): configurable api_server resource limits by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9424
  • chore: Scripts for search quality eval by @yuhongsun96 in https://github.com/onyx-dot-app/onyx/pull/9421
  • chore(devtools): upgrade ods: 0.7.0->0.7.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9429
  • chore(hooks): Add db CRUD by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9411
  • fix(opensearch): Fix env var mismatch issue with configuring subquery results; set default to 100 by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9428
  • fix(fe): replace users table buttons with LineItems by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9435
  • chore(opensearch): Disable test_update_single_can_clear_user_projects_and_personas by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9434
  • chore(playwright): projects screenshot is main container only by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9440
  • fix(file upload): Allow zip file upload via query param by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/9432
  • fix(fe): display name on attachment file card hover by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9446
  • chore: bump next to 16.1.7 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9423
  • chore(deps): bump next from 16.1.5 to 16.1.7 in /examples/widget by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9425
  • chore(ruff): fix and enable S324 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9451
  • chore(deps): bump pypdf from 6.8.0 to 6.9.1 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9450
  • chore(tests): unit tests for pdf processing by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9452
  • fix(fe): update connector indexing error modal by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9426
  • fix(fe): truncate project name in sidebar button by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9462
  • fix(opensearch): Exclude retrieving vectors during hybrid and random search by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9430
  • feat(opensearch): Can override number of shards and replicas via env var by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9431
  • fix(fe): truncate connector names in table by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9459
  • chore(hooks): Add Celery task to remove hook running records older than 30 days by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9433
  • feat(fe): "Full Exception Trace" modal uses CodePreview rendering by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9464
  • fix(image): stop dumping base64 image data into error logs by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9457
  • fix(fe): make indexing attempt error rows click to show trace by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9463
  • fix(image): add diagnostic logging to vision model selection by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9460
  • fix(celery): add task expiry to upload API send_task call by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9456
  • fix(celery): add dedup guardrails to user file delete queue by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9454
  • fix(logging): extract LiteLLM error details in image summarization failures by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9458
  • chore(hooks): Define Hook Point in the backend by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9391
  • fix(agents): Agents are Private by Default by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9465
  • chore(opensearch): Allow disabling match highlights via env var; default to disabled by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9436
  • chore(fe): remove opal-button* class names by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9471
  • refactor(fe): move table to opal, update size API by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9438
  • feat(admin): groups page - list page and group cards by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9453
  • chore(fe): reduce padding on elements at the bottom of modal headers by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9488
  • fix(code interpreter): Caching files by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9484
  • fix(fe): fix memories immediately losing focus on click by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9493
  • chore: move Hoverable story by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9495
  • feat: windows installer and install improvements by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9476
  • fix(llm): don't send tool_choice when no tools are provided by @Fizza-Mukhtar in https://github.com/onyx-dot-app/onyx/pull/9224
  • fix: drive rate limit retry by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9498
  • feat(ods): Rerun run-ci workflow by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9501
  • feat(backend): Adding procps by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9509
  • feat(opensearch): Add functions for keyword and semantic retrieval by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9479
  • chore: edit AGENTS.md and CLAUDE.md files by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9486
  • fix(fe): dim project name in sidebar color by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9519
  • feat(tf): Port over WAF updates by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9520
  • fix(fe): clicking outside chat area keeps chat input focused by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9521
  • feat(hook): improve on hook point definition by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9522
  • chore(hook): Hook executor. by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9467
  • fix: windows installer by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9507
  • feat(hook): Add hook management API by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9513
  • fix: deadlock in multitenant test by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9530
  • fix(chat): Cache plaintext file results by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/9511
  • chore(fe): update memories dropdown padding by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9526
  • feat: installer invocable from other bash script by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9531
  • fix: csv test with newlines by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9534
  • feat: UserAvatar by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9527
  • fix(mt): Tenant Provisioning Fixes by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9541
  • chore(fe): auto-focus clicked memory, improve action hover style by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9532
  • fix: windows install improvements by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9542
  • chore(fe): clean up table qualifier API and internals by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9528
  • chore(deps-dev): bump flatted from 3.4.1 to 3.4.2 in /web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9539
  • chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /examples/widget by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9550
  • fix(opal): remove table-layout fixed, right-align actions column by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9551
  • fix(opal): reduce table qualifier icon sizes by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9552
  • fix: last index time consistency by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9546
  • chore: [mirror of #9267] pass OAuthClientProvider to call_mcp_tool for automatic token refresh by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9414
  • feat(opal): add SvgStarOff icon by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9555
  • feat(fe): migrate root layout from SSR to CSR with SWR data fetching by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9529
  • chore(deps): bump docker/bake-action from 6.10.0 to 7.0.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9559
  • chore(deps): bump astral-sh/setup-uv from 7.3.1 to 7.6.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9562
  • chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9561
  • chore: web connector wait for page networkidle before continuing by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9556
  • chore: don't allow periods in gmail signup on cloud by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9564
  • chore(fe): remove Inter font by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9566
  • chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /backend/onyx/server/features/build/sandbox/kubernetes/docker/templates/outputs/web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9535
  • refactor: update auth paths to use onyx error and correctly pass error detail to auth error page by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9565
  • fix(ux): give a tooltip with reason agent edit cannot save by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9571
  • fix: alias anonymous ph users with registered users by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9570
  • refactor: update names in Persona table by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9569
  • chore(fe): action popover item UX by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/8831
  • fix(migration): Fix duplicate Null Users issue by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9568
  • feat(tf): Introduce Opensearch Terraform for AWS by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9523
  • fix(ux): display invalid agent fields on load by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9582
  • chore(opensearch, devtools): Benchmarking script by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9579
  • chore(opensearch, devtools): Generate embedding script by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9580
  • chore(playwright): mask date switcher in screenshots by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9584
  • chore: use efficient persona id query path by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9573
  • refactor: filter fields by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9574
  • chore(indexing): Add tests for DocumentIndex index function by @Danelegend in https://github.com/onyx-dot-app/onyx/pull/9477
  • chore(fe): memories save after pressing enter by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9553
  • chore(fe): position memories modal at the top by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9554
  • chore(fe): always load an empty memory card by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9560
  • feat(admin): refresh agents page with DataTable and opal components by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9376
  • fix(a11y): hidden buttons appear on tabbing by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9518
  • feat(ux): handle when chat session id cannot be found by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9524
  • chore(fe): memory input defaults to 1 row with max of 3 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9563
  • fix(fe): stop SWR retry spam and spurious logout on auth pages by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9587
  • fix(fe): editing an LLM provider uses the global default model by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9502
  • chore(blame): ignore ruff formatting change by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9345
  • fix(fe): properly style "Sign In" button by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9480
  • chore(gha): basic test selection for external deps and connector tests by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9596
  • fix(fe): map snake_case auth type API response to camelCase by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9586
  • fix(fe): settings page layout shift on load by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9594
  • fix(voice): add WebSocket upgrade headers to nginx configs by @jessicasingh7 in https://github.com/onyx-dot-app/onyx/pull/9558
  • fix: eager load chat session persona by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9577
  • refactor(opal): opalify FilterButton + migrate all instances away from old one by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9597
  • fix(mt): Preprovision all tenants at once by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9576
  • feat(helm): Adding pginto specific host by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9600
  • feat(hook): integrate query processing hook point by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9533
  • refactor(opal): cleanup button types in Opal by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9598
  • feat(admin): inline group renaming by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9491
  • feat(groups): add create group page by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9515
  • fix(ui): Text focused paste from PowerPoint by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9603
  • fix: update values.yaml comment for opensearch admin password secretKeyRef by @ciaransweet in https://github.com/onyx-dot-app/onyx/pull/9595
  • refactor(opal): restructure Onyx logo icons into composable parts by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9606
  • fix(ux): disable MCP Tools toggle if needs authenticated by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9607
  • refactor: fix sidebar layout by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9601
  • feat(groups): add shared resources and token limit sections by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9538
  • fix(width): UI update model width definition. by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9613
  • feat(hook): Add frontend feature control and admin hook page by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9575
  • fix: Fix tag widths by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9618
  • feat(groups): add edit group page by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9543
  • fix: no more lazy queries per search call by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9578
  • feat(metrics): add reusable Prometheus metrics server for celery workers by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9589
  • fix: confluence client retries by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9605
  • feat(metrics): add queue depth and connector health Prometheus collectors by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9590
  • feat(groups): polish edit page table and delete UX by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9544
  • feat(metrics): add task lifecycle and per-connector Prometheus metrics by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9602
  • feat: Group-based permissions — Phase 1 schema (AccountType, Permission, PermissionGrant) by @Subash-Mohan in https://github.com/onyx-dot-app/onyx/pull/9547
  • feat(groups): switchover to /admin/groups and rewrite e2e tests by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9545
  • fix: use persisted source functions when toggling search tool by @Subash-Mohan in https://github.com/onyx-dot-app/onyx/pull/9548
  • fix(sidebar): fix icon alignment for user-avatar-popover by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9615
  • fix(fe): redirect to status page after deleting connector by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9620
  • fix(chat): dont clear input message after errors submitting by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9624
  • fix(notion): upgrade API version + logical changes by @jessicasingh7 in https://github.com/onyx-dot-app/onyx/pull/9609
  • chore(voice): align fe with other admin pages by @jessicasingh7 in https://github.com/onyx-dot-app/onyx/pull/9505
  • feat(hook): Frontend hook infrastructure by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9634
  • chore(agents): Match Mocks & Add Date Validation by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9632
  • feat: sharepoint shareable links non-public by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9636
  • chore(deps): bump pypdf from 6.9.1 to 6.9.2 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9637
  • feat(opal): add Text component with inline markdown support by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9623
  • chore(deps): bump picomatch in /examples/widget by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9651
  • fix: clarify service account API key upgrade message for trial accounts by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9581
  • chore(playwright): rework admin navigation tests by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9650
  • chore(deps-dev): bump picomatch from 4.0.3 to 4.0.4 in /widget by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9659
  • feat(opensearch): Search UI search flow can be configured to use pure keyword search by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9500
  • chore(deps): bump requests from 2.32.5 to 2.33.0 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9652
  • chore(deps): bump yaml from 1.10.2 to 1.10.3 in /web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9655
  • feat(opensearch): Add Prometheus metrics for OpenSearch retrieval by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9654
  • fix(ci): tag web-server and model-server with craft-latest by @wenxi-onyx in https://github.com/onyx-dot-app/onyx/pull/9661
  • chore(opensearch): Optimize terms filters; add type aliases by @acaprau in https://github.com/onyx-dot-app/onyx/pull/9619
  • chore(deps): bump picomatch in /backend/onyx/server/features/build/sandbox/kubernetes/docker/templates/outputs/web by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9662
  • chore(deps): bump nltk from 3.9.3 to 3.9.4 by @dependabot[bot] in https://github.com/onyx-dot-app/onyx/pull/9663
  • feat: sharepoint filters (denylist) by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9649
  • feat(chat): add DB schema and Pydantic models for multi-model answers by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9646
  • fix(opal): remove gap between title and description in ContentMd by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9666
  • refactor(opal): accept string | RichStr in all Opal text-rendering components, modals, and input-layouts by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9656
  • fix(metrics): replace inspect.ping() with event-based worker health monitoring by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9633
  • feat(llm): add Bifrost gateway as LLM provider (backend) by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9616
  • fix(admin): wrap system prompt modal in Formik with markdown subDescription by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9667
  • feat(canvas): add API client, data models, and connector scaffold 1/4 by @benwu408 in https://github.com/onyx-dot-app/onyx/pull/9385
  • refactor: migrate legacy components/Text by @raunakab in https://github.com/onyx-dot-app/onyx/pull/9628
  • chore(greptile): split greptile.json into .greptile/ directory by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9668
  • feat(hook): Hook connect/manage modal by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9645
  • fix(api-key): clarify upgrade message for trial accounts by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9678
  • fix(jira): large batches fail json decode by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/9677
  • fix(voice): dont soft-delete providers by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9679
  • feat(llm): add Bifrost gateway frontend modal and provider registration by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9617
  • fix(billing): retry claimLicense up to 3x after Stripe checkout return by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9669
  • feat(hook): Hook Form Modal Polish. by @Bo-Onyx in https://github.com/onyx-dot-app/onyx/pull/9683
  • feat(providers): allow deleting all types of providers by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9625
  • fix(fe): Popover content doesnt overflow on small screens (#9612) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9700
  • chore(playwright): deflake settings_pages.spec.ts (#9684) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9702
  • fix: Anthropic litellm thinking workaround (#9713) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9724
  • feat(voice): VAD auto-stop only when auto-send is enabled (#9809) to release v3.1 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9819
  • fix(perf): optimize chat sessions query to prevent DB cascading failures (#9802) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9822
  • fix(celery): use broker connection pool to prevent Redis connection leak (#9682) to release v3.1 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/9821
  • fix(db): remove unnecessary selectinload(User.memories) from auth paths (#9838) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9845
  • chore(deps): bump litellm from 1.81.6 to 1.83.0 (#9898) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9902
  • Revert "chore(deps): bump litellm from 1.81.6 to 1.83.0 (#9898) to release v3.1" by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9910
  • fix(federated): prevent masked credentials from corrupting stored secrets (#9868) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9928
  • fix: stop falsely rejecting owner-password-only PDFs as protected (#9953) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9962
  • fix: set correct ee mode for mcp server (#9933) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9938
  • fix(groups): Global Curator Permissions (#9974) to release v3.1 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/9980
  • fix(indexing, powerpoint files): Patch markitdown _convert_chart_to_markdown to no-op (#9970) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9979
  • feat: generic OpenAI Compatible LLM Provider setup (#9968) to release v3.1 by @github-actions[bot] in https://github.com/onyx-dot-app/onyx/pull/9975
  • fix: onboarding LLM Provider configuration fixes (#9972) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9989
  • fix: LM Studio API key field mismatch (#9991) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/9992
  • fix: Custom LLM Provider requires a Provider Name by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10000
  • fix(llm): Azure custom model support + Mistral tool call message ordering (#9729) to release v3.1 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/10037
  • feat(federated): full thread replies + direct URL fetch in Slack search (#9940) to release v3.1 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/10051
  • fix(scim): add advisory lock to prevent seat limit race condition (#10048) to release v3.1 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/10067
  • fix(image): Cap Uploaded File Image Count (#10298) to release v3.1 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/10307
  • fix(LLM config): resolve API Key before fetching models (#10056) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10318
  • feat(anthropic): include Opus 4.7 in recommended models (#10273) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10319
  • fix(deps): install transitive vertexai dependency (#10328) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10333
  • feat: filestore delete missing error (#9878) to release v3.1 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/10372
  • fix(files): harden authorization on chat file downloads (#10380) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10392
  • fix(security): enforce chat session ownership on stop endpoint (#10413) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10416
  • fix(files): Add img generated files to user accessible (#10434) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10448
  • fix(files): Img generated files blocked during chat (#10465) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10511
  • fix(files): allow connector file previews through /chat/file (#10498) to release v3.1 by @jmelahman in https://github.com/onyx-dot-app/onyx/pull/10572
  • fix: sharepoint members recursion (#10505) to release v3.1 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/10606
  • fix: mcp oauth token handling (#11238) to release v3.1 by @evan-onyx in https://github.com/onyx-dot-app/onyx/pull/11243

New Contributors

  • @Fizza-Mukhtar made their first contribution in https://github.com/onyx-dot-app/onyx/pull/9224

Full Changelog: https://github.com/onyx-dot-app/onyx/compare/v3.0.13...v3.1.10

Security Fixes

  • fix(fe): bump flatted to patch CVE-2026-32141
  • fix(security): enforce chat session ownership on stop endpoint

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Onyx Community Edition

Get notified when new releases ship.

Sign up free

About Onyx Community Edition

Chat UI that works with any LLM. It comes loaded with advanced features like agents, web search, RAG, MCP, deep research, Connectors to 40+ knowledge sources, and more.

All releases →

Related context

Earlier breaking changes

  • v4.0.2 Requires running the OpenSearch document index migration before upgrading to v4.0.
  • v3.3.7 Environment variable DANSWER_RUNNING_IN_DOCKER renamed to ONYX_RUNNING_IN_DOCKER.
  • v3.0.13 OpenSearch enabled as default search backend replacing Vespa
  • v3.0.13 License enforcement enabled by default in EE mode

Beta — feedback welcome: [email protected]