Onyx Community Edition

v4.2.5 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 17d LLM Frameworks

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai ai-chat chatgpt chatui enterprise-search gen-ai

+7 more

information-retrieval llm llm-ui nextjs python self-hosted vector-db

Affected surfaces

breaking_upgrade auth

Summary

AI summary

Fixed desktop webview ACLs, voice silent‑audio handling, and chat multi‑model comparison rendering.

Changes in this release

Type	Severity	Summary	CVE
Bugfix
Bugfix	Medium	grant webview ACL permissions for shell-open and titlebar drag in desktop grant webview ACL permissions for shell-open and titlebar drag in desktop Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	gate silent audio out of chunked STT to stop hallucinated transcripts in voice gate silent audio out of chunked STT to stop hallucinated transcripts in voice Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	render full multi-model comparison in shared chats for chat feature render full multi-model comparison in shared chats for chat feature Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	omit sampling params and use adaptive thinking for claude-sonnet-5 in LLM processing omit sampling params and use adaptive thinking for claude-sonnet-5 in LLM processing Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	sync in-memory oidc_expiry after OAuth refresh for auth module sync in-memory oidc_expiry after OAuth refresh for auth module Source: llm_adapter@2026-07-16 Confidence: low	—

Full changelog

Warning

Do not upgrade to this release if you want to preserve your existing indexed documents but have not yet run the document index migration, which can be done from any version v3.x. See additional documentation here.

See the assets to download this version and install.

What's Changed

fix(desktop): grant webview ACL permissions for shell-open and titlebar drag (#12719) to release v4.2 by @onyx-cherry-pick[bot] in https://github.com/onyx-dot-app/onyx/pull/12721
fix(voice): gate silent audio out of chunked STT to stop hallucinated transcripts (#12713) to release v4.2 by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/12726
fix(chat): render full multi-model comparison in shared chats (#12792) to release v4.2 by @nmgarza5 in https://github.com/onyx-dot-app/onyx/pull/12795
fix(auth): sync in-memory oidc_expiry after OAuth refresh [v4.2] by @raunakab in https://github.com/onyx-dot-app/onyx/pull/12802
fix(llm): omit sampling params and use adaptive thinking for claude-sonnet-5 (#12735) [v4.2] by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/12817

Full Changelog: https://github.com/onyx-dot-app/onyx/compare/v4.2.4...v4.2.5

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Onyx Community Edition

Get notified when new releases ship.

About Onyx Community Edition

Chat UI that works with any LLM. It comes loaded with advanced features like agents, web search, RAG, MCP, deep research, Connectors to 40+ knowledge sources, and more.

All releases →

Related context

Related tools

Earlier breaking changes

v4.3.5 Requires running the OpenSearch document index migration before upgrading.
v4.0.2 Requires running the OpenSearch document index migration before upgrading to v4.0.
v3.3.7 Environment variable DANSWER_RUNNING_IN_DOCKER renamed to ONYX_RUNNING_IN_DOCKER.
v3.0.13 OpenSearch enabled as default search backend replacing Vespa
v3.0.13 License enforcement enabled by default in EE mode