🤖 GitHub AI 热门报告

## 🌟 Summary

🚀 **v8.4.127 makes exported YOLO models reliably load with the correct task and model family, while improving deployment stability, training recovery, and dataset documentation.**

## 📊 Key Changes

- **Correct task detection for exported models across all 20 formats** by @artest08
  - Model loading now reads the task and architecture information embedded in export metadata instead of guessing from the filename or directory path.
  - Fixes segmentation exports being loaded as detection models, which previously caused masks to disappear.
  - Fixes pose exports losing keypoint outputs when weights are moved outside their training directory.
  - Correctly routes RT-DETR exports to the appropriate predictor, avoiding incorrect interpretation of its output format.
  - Applies consistently through both the Python API and CLI, making exported models safer to copy, deploy, and rename. 🎯

- **Improved OpenVINO inference reliability**
  - Uses the appropriate throughput setting for single-device dynamic batching.
  - Adds a targeted fix for INT8 dynamic-shape segmentation faults on Intel AMX CPUs.
  - Reduces the risk of crashes in affected CPU inference and CI environments.

- **Safer training resume behavior**
  - Resuming a run no longer replaces checkpoint weights with a custom `pretrained` model.

# Highlights

* **Ray Serve LLM:** In this release we've completed KV cache and token aware request routing, which was previewed in 2.57. Tokenization now happens in-process on the `LLMRouter` ingress replica, the routing decision is made there, tokens are transmitted out-of-band so the engine does not re-tokenize, KV lifecycle events are broadcast to every ingress replica (\#64642, \#64920, \#64949, \#65010, \#65095). KV cache and token aware routing is also aware of CPU KV caches, so offloaded KV cache blocks count toward a replica's cache hit (\#65063).  
* **Ray Core:** We enabled the capability to offload task events from. With `RAY_enable_task_events_to_dashboard_head` on, the task event buffer is replaced by the ray event recorder, events are exported from the aggregator agent to a task events head that keeps an in-memory store, and the state APIs and `ray.timeline` read from it (\#64835, \#65028, \#65123, \#65160, \#65218). Enabling the feature removes task event ingestion and serving from the GCS hot path.   
* **Ray Data:** We’ve added Databricks integrations for writing to DeltaLake, with Catalog support. We’ve also shipped a new shuffle v2 backend, featuring improved performance for joins and aggregations.  
* **Sandboxing:** We've also added experimental Ray Sandbox, which runs task and actor code under gVisor and can run Docker-built images directly (\#64964, \#65570).  
* **TPU Support:** Ray Train adds support for TorchTPU backend (\#64796), and Ray Core adds `SubslicePlacementGroup` for gang scheduling on TPU subslices, single-host TPU support in `SlicePlacementGroup`, and resource accounting for `tpu7x` and multi-core chips (\#64578, \#64079, \#64058). This lets TPU slices and subslices be reserved and trained on without external gang-scheduling glue.

# Ray Data

### 🎉 New Features

* Add `Dataset.with_columns` for multi-column expression projection (\#63858)  
* Add `write_delta` for Delta Lake, with catalog support (\#64923, \#65079)  
* Add Torch inference API (\#65157)  
* Promote hash shuffle v2 to a selectable shuffle strategy, with aggregation support, vectorized aggregation, and block splitting during aggregation (\#64953, \#64652, \#64956, \#65329, \#64897)  
* Add `ignore_missing_paths` and `skip_paths` to `read_parquet` on DatasourceV2 (\#65118)  
* Add `delta_timestamps` (temporal windows) to `read_lerobot` (\#64877)  
* Collect cluster usage metrics by sampling in background threads during execution (\#64686)  
* Tolerate actor deaths during init via `DataContext.max_consecutive_actor_init_deaths` (\#64846)  

## Verify Docker Image Signature

All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](https://github.com/BerriAI/litellm/commit/0112e53046018d726492c814b3644b7d376029d0).

**Verify using the pinned commit hash (recommended):**

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

```bash
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.98.0
```

**Verify using the release tag (convenience):**

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

```bash
cosign verify \

## 🔥 What's New?

### New Features

- **#14021** - AI-voice narrative in morning briefing (by @Abhi1992002)
- **#14022** - Per-expert spend tracking on home team cards (by @Abhi1992002)
- **#14030** - Launch roster with real workflow bundles (by @Abhi1992002)
- **#14027** - Writing-style capture in hire flow (by @Abhi1992002)
- **#14036** - Sidebar team members with presence + create menu (by @Abhi1992002)
- **#14039** - Day-one kickoff after hire (by @Abhi1992002)
- **#14031** - Isolate expert memory (by @ntindle)
- **#14032** - Expert memory admin viewer (by @ntindle)
- **#14045** - Team What runs zone and adopt action (by @Abhi1992002)
- **#14041** - Raise your own expert v1 (by @Abhi1992002)
- **#14043** - Expert work surface v1 — work cards + work tab (by @Abhi1992002)
- **#14042** - Pods v1 — named expert groups (by @Abhi1992002)
- **#14054** - Microsoft Teams bot adapter (by @Bentlybro)
- **#14071** - User-facing memory settings page (by @ntindle)
- **#14062** - Device code OAuth flow + Stripe Link wallet blocks (by @ntindle)
- **#13773** - Copilot tool chain UI (by @Abhi1992002)

## 1.0.0 (2026-08-20)

Full Changelog: [v0.125.0...v1.0.0](https://github.com/anthropics/anthropic-sdk-python/compare/v0.125.0...v1.0.0)

### ⚠ BREAKING CHANGES

* **client:** upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details

### Features

* **client:** upgrade to httpx2 and some minor breaking changes. See MIGRATION.md for details ([33e2967](https://github.com/anthropics/anthropic-sdk-python/commit/33e296749dda59c3b9af85d9bee37ae241b92a28))


### Bug Fixes

* **beta:** stop warning about `output_format=` on the parse/stream/tool_runner helpers ([59bf261](https://github.com/anthropics/anthropic-sdk-python/commit/59bf26106d3d66cef54b926aeae4268846bf13f2))


### Chores

> [!TIP]
> This release features several new pipelines, including LTX2.5, MiniMax H3, and Wan Animate 2. We're also graduating Modular Diffusers out of the experimental phase and announcing its stable support. Additionally, this release includes minimal support for tensor-parallel. There's a lot more that went down in this release. So, please consult the notes for details. 

## New Pipelines

### MiniMax-H3

[**MiniMax-H3**](https://huggingface.co/docs/diffusers/main/api/pipelines/minimax_h3) generates video and its soundtrack together. A single transformer denoises one packed sequence containing the text conditioning, the conditioning media, and the target video *and* audio latents — there is no separate vocoder and no post-hoc audio pass. Its conditioner is a `Qwen3VLForConditionalGeneration` whose unnormalized 50th-decoder-layer hidden state is read instead of the last one.

MiniMax-H3 is integrated as [Modular Diffusers](https://huggingface.co/docs/diffusers/main/modular_diffusers/overview) blocks only — `MiniMaxH3Blocks` and their `MiniMaxH3ModularPipeline` are the whole integration. The conversion ships both checkpoint partitions in one repository and exposes three workflows (`t2va`, `fl2va`, `ref2va`) that can be pruned at `from_pretrained` time so only that task's components are declared and downloaded.

### MiniMax Music 3

[**MiniMax Music 3**](https://huggingface.co/docs/diffusers/main/api/pipelines/minimax_music3) produces complete songs up to five minutes long from lyrics and a music description, with expressive vocals and long-range structure. It is a hybrid of an autoregressive and a diffusion stage: an 8B Qwen3-based global language model predicts one semantic audio token per frame while a small depth decoder fills in seven residual RVQ codebooks, and their fused hidden states condition a 2.4B flow-matching transformer that produces Flow-VAE latents in overlapping chunks. A DAC-style decoder turns the latents into 44.1 kHz stereo audio.

### Stable Audio 3

[**Stable Audio 3**](https://huggingface.co/docs/diffusers/main/api/pipelines/stable_audio_3) is a text-to-audio model from Stability AI that generates high-quality stereo audio at 44.1 kHz. It uses a rectified-flow DiT conditioned on a frozen T5Gemma text encoder (via cross-attention) and on duration (a float embedded by `StableAudio3DurationEmbedder` and used for adaptive layer norm), and decodes with the SAME (Semantically-Aligned Music Encoder) autoencoder, `AutoencoderSAME`.

Three pipelines ship: `StableAudio3Pipeline`, `StableAudio3AudioToAudioPipeline`, and `StableAudio3InpaintPipeline`.

# Version 3.12.0 (August 20, 2026)

## General

1. [3f8db4c1](https://github.com/google-deepmind/mujoco/commit/3f8db4c1) The MJCF grammar is now defined in a single source of truth schema file, [`src/xml/mjcf.schema`](https://github.com/google-deepmind/mujoco/tree/main/src/xml/mjcf.schema). The parser's grammar table, presence constraints, keyword maps, typed attribute bindings and save policies are generated from it and gated by tests, as are the schema's enum keywords and declared defaults against the C headers and default-constructors.

> [!WARNING]
> **Breaking API changes**
> 2. [6fe04aa8](https://github.com/google-deepmind/mujoco/commit/6fe04aa8) Removed the custom binary texture format (`image/vnd.mujoco.texture`) and the automatic fallback to custom textures when loading files with unrecognized extensions. Textures can now only be loaded from PNG (`image/png`) and KTX (`image/ktx`) files.

## Actuation

3. [279df98c](https://github.com/google-deepmind/mujoco/commit/279df98c) Added the [`pid`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-pid) actuator: a PID controller with real position and velocity setpoint inputs, optional integral action ([`ki`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-pid-ki), integrating the position error with [`imax`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-pid-imax) anti-windup), setpoint rate limiting ([`slewmax`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-pid-slewmax)), and an optional feedforward input. This subsumes the functionality of the `mujoco.pid` plugin with proper activation state: correct under all integrators and visible to keyframes and sensors. With a zero velocity setpoint it is identical to [`position`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-position). The input signature is any subset of `[pos, vel, ff]`, selected by [`input`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-pid-input); absent setpoint inputs are fixed at zero, so the control vector contains no inert entries.
4. [2f1843f4](https://github.com/google-deepmind/mujoco/commit/2f1843f4) The [`dcmotor`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-dcmotor) on-board controller is redesigned: the [`input`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-dcmotor-input) attribute selects any subset of `[pos, vel, ff, voltage]`, where `pos` and `vel` are setpoints for the controller, `ff` is a torque feedforward, and `voltage` is the raw terminal voltage (the default, a plain voltage-commanded motor). Controller gains are in torque space, as for [`pid`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-pid), and the drive voltage compensates back-EMF as in a current-controlled driver: commanded torque is delivered exactly until a limit is reached. The keyword `input="none"` selects the empty signature: the actuator has no control inputs and is purely passive, so friction, cogging and back-EMF braking can be used as passive joint forces.

> [!WARNING]
> **Breaking API changes**
> 5. [2f1843f4](https://github.com/google-deepmind/mujoco/commit/2f1843f4) The mode-flag semantics of [`dcmotor/input`](https://mujoco.readthedocs.io/en/stable/XMLreference.html#actuator-dcmotor-input) ("voltage", "position", "velocity", selecting the interpretation of a single control) are replaced by input signatures, and the controller gains changed from voltage space to torque space. The old velocity mode's integral term (integrated-velocity tracking) is retired without replacement; the integrator always accumulates position error.
>
>    **Migration:** Voltage-commanded motors (the default) are unchanged. Replace `input="position"` with `input="pos"` and `input="velocity"` with `input="vel"`, and multiply the controller gains by $K/R$ (torque per volt). The motor's back-EMF damping, previously felt in addition to the controller's damping, is now compensated: to preserve behavior when the velocity setpoint is zero, add $K^2/R$ to the converted `kd`.

### Features

-   [#13747](https://github.com/gradio-app/gradio/pull/13747) [`612abdf`](https://github.com/gradio-app/gradio/commit/612abdff732ddb68b1dc5e9f32b1b42e02eb8e78) - workflow: forward x-ip-token so zerogpu spaces bill the caller.  Thanks @hannahblair!
-   [#13754](https://github.com/gradio-app/gradio/pull/13754) [`a79d94a`](https://github.com/gradio-app/gradio/commit/a79d94a031ac08fed050582f3a12b20a0f092453) - workflow: fix oauth logic check.  Thanks @hannahblair!
-   [#13753](https://github.com/gradio-app/gradio/pull/13753) [`b7ed7cf`](https://github.com/gradio-app/gradio/commit/b7ed7cf7e86382532d88c345118c12f72a31a377) - workflow: fix checkbox visibility.  Thanks @hannahblair!
-   [#13715](https://github.com/gradio-app/gradio/pull/13715) [`e9dabaa`](https://github.com/gradio-app/gradio/commit/e9dabaa18afea53329cc99282f28c69c70e237c5) - Allow saving Workflow to the Space itself.  Thanks @hannahblair!

### Fixes

-   [#13765](https://github.com/gradio-app/gradio/pull/13765) [`c6b9cc3`](https://github.com/gradio-app/gradio/commit/c6b9cc33c9f3932014f51467f7219bb1c4ac7a4b) - Fix nested reactive render contexts.  Thanks @abidlabs!
-   [#13745](https://github.com/gradio-app/gradio/pull/13745) [`3706565`](https://github.com/gradio-app/gradio/commit/3706565c713e6959d5078305712b5c1a4f87dda5) - Render the PLY and OBJ files `gr.Model3D` showed as a blank canvas.  Thanks @hysts!
-   [#13742](https://github.com/gradio-app/gradio/pull/13742) [`3f52f17`](https://github.com/gradio-app/gradio/commit/3f52f1737f1d68f6e1cda7bb8b498da9e4111799) - Fix two chat-history bugs in `gr.ChatInterface` and `gr.load_chat`.  Thanks @abidlabs!
-   [#13741](https://github.com/gradio-app/gradio/pull/13741) [`1e24f6e`](https://github.com/gradio-app/gradio/commit/1e24f6ee916b8b7df08ba45ab4998ca4165da20c) - Respect a user-configured `CORSMiddleware` on mounted Gradio apps.  Thanks @abidlabs!
-   [#13767](https://github.com/gradio-app/gradio/pull/13767) [`b6beeac`](https://github.com/gradio-app/gradio/commit/b6beeac899c0783303a974491fe4d3c3a26bfe60) - Return 413 instead of 500 when a multipart upload's headers exceed the maximum allowed size.  Thanks @abidlabs!
-   [#13767](https://github.com/gradio-app/gradio/pull/13767) [`b6beeac`](https://github.com/gradio-app/gradio/commit/b6beeac899c0783303a974491fe4d3c3a26bfe60) - workflow: warn when a Space's OAuth app is missing the scopes the canvas needs.  Thanks @abidlabs!
-   [#13756](https://github.com/gradio-app/gradio/pull/13756) [`dbfa0c1`](https://github.com/gradio-app/gradio/commit/dbfa0c189264371d3f67469e675b998f490b02bc) - Stop the server from accumulating per-request and per-session state.  Thanks @abidlabs!
-   [#13764](https://github.com/gradio-app/gradio/pull/13764) [`fb02661`](https://github.com/gradio-app/gradio/commit/fb0266119af98eae52e8abcab735d643254ad0d4) - Fix mobile image-related issues.  Thanks @abidlabs!
-   [#13759](https://github.com/gradio-app/gradio/pull/13759) [`6919dd4`](https://github.com/gradio-app/gradio/commit/6919dd4f663d1c590a5e248887956b3a2b08a95e) - Resolve the `/config` username through the auth dependency.  Thanks @abidlabs!
-   [#13744](https://github.com/gradio-app/gradio/pull/13744) [`ca9dec0`](https://github.com/gradio-app/gradio/commit/ca9dec0e2e07d33cf3551f5062ff35ab9acf3026) - Re-read the Dataframe virtual window whenever the row count changes.  Thanks @abidlabs!

<!-- Release notes generated using configuration in .github/release.yml at 1.62.0 -->

## What's Changed
### Breaking Changes 🛠
* [chore] Remove deprecated st.cache API by @lukasmasuch in https://github.com/streamlit/streamlit/pull/15787
* [chore] Deprecate savefig kwargs on st.pyplot by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16450
* [chore] Remove global-figure support in `st.pyplot` by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16464
### New Features 🎉
* [feature] Provide fully-typed selection state return values by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16275
* [feature] Add client-side validation to st.text_input by @lukasmasuch in https://github.com/streamlit/streamlit/pull/15714
* [feature] Add public streamlit.typing namespace by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16295
* [feature] Add `wrap` parameter to button-like elements to control label wrapping by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16325
* [feature] Expose DataEditorState in streamlit.typing by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16351
* Add support for `50` step font weights in theme configs by @mayagbarnes in https://github.com/streamlit/streamlit/pull/16396
* Expand chart theme config support for light/dark/sidebar by @mayagbarnes in https://github.com/streamlit/streamlit/pull/16357
* [feature] Add email / url / phone / search types to `st.text_input` by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16385
* Remove `BaseWeb` for `DateInput` by @mayagbarnes in https://github.com/streamlit/streamlit/pull/16460
* [feature] Add wrap control to horizontal st.container by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16484
* Remove `BaseWeb` for `DateTimeInput` by @mayagbarnes in https://github.com/streamlit/streamlit/pull/16501
* [feature] Add wrap parameter to st.checkbox and st.toggle by @lukasmasuch in https://github.com/streamlit/streamlit/pull/16470

Changes since sdk==0.4.2

* release(sdk-py): 0.4.3 (#8657)
* feat(sdk-py): add decrypt replacement result (#8598)
* release(langgraph): 1.2.11 (#8595)
* chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#8532)
* release(checkpoint): 4.2.0 (#8563)
* chore: enforce PLC0415 in tests for the remaining packages (#8547)
* release(langgraph): 1.2.10 (#8462)
* chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/sdk-py in the major group (#8253)
* fix(sdk-py): support clearing cron end_time via update(end_time=None) (#8334)
* release(langgraph): 1.2.9 (#8316)
* release(langgraph): 1.2.8 (#8292)
* chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/langgraph in the major group (#8256)
* chore(deps): bump the minor-and-patch group in /libs/sdk-py with 9 updates (#8252)
* release(langgraph): 1.2.7 (#8223)
* chore(deps-dev): bump starlette from 1.0.1 to 1.3.1 in /libs/sdk-py (#8104)
* chore(deps): bump langsmith from 0.8.0 to 0.8.18 in /libs/sdk-py (#8174)
* release(langgraph): 1.2.6 (#8139)
* docs: standardize package `README.md` structure (#8064)

## What's Changed
* New desktop onboarding flow on first launch
* Caches resolved model metadata between requests, cutting time-to-first-token by roughly half (TTFT dropped from ~995 ms to ~524 ms in benchmarks)
* Fixes a bug where chat and generate could wedge after a mid-stream parser error
* **Qwen 3.8** system messages are now normalized so non-leading system messages are handled consistently
* MLX and llama.cpp dependency updates

## New Contributors
* @gaugarg-nv made their first contribution in https://github.com/ollama/ollama/pull/17752

**Full Changelog**: https://github.com/ollama/ollama/compare/v0.32.14...v0.32.15

## [3.3.1](https://github.com/openai/openai-python/compare/v3.3.0...v3.3.1) (2026-08-19)


### Bug Fixes

* **deps:** update dependencies with published security fixes ([#3680](https://github.com/openai/openai-python/issues/3680)) ([53aa4fc](https://github.com/openai/openai-python/commit/53aa4fc68b65f42456cafaaa5ff4b0d317184752))


### Chores

* **build:** migrate to uv ([#3653](https://github.com/openai/openai-python/issues/3653)) ([b37e85d](https://github.com/openai/openai-python/commit/b37e85d8fe9cd2b23862dbc62716d38e2cacaf92))
* **deps:** remove jsonschema and unused fixture-validation dependencies ([0dfdfdd](https://github.com/openai/openai-python/commit/0dfdfdddfbeb591a1bb5b3b4aa62e4a9870fcaa6))
* lock the repository Pyright toolchain ([#3678](https://github.com/openai/openai-python/issues/3678)) ([3079be2](https://github.com/openai/openai-python/commit/3079be224c05479b6cf8aa329480c249f66f0599))
* run the mock server from locked local tooling ([#3679](https://github.com/openai/openai-python/issues/3679)) ([370fcc6](https://github.com/openai/openai-python/commit/370fcc60ce9006db5a75dcd0333790dfe71a907c))


### Refactors

* **deps:** use the standard library for platform detection ([d5b0065](https://github.com/openai/openai-python/commit/d5b00659d6659c5def665cb04e6563bdf683ea03))

Changes since langchain-core==1.5.6

release(core): 1.6.0 (#39760)
fix(core): resolve postponed annotations in `StructuredTool._injected_args_keys` (#39602)
feat(core): add standard model exception types (#39538)
fix(core): allow deserializing `RunnablePick` (#39753)
fix(core): make `convert_to_openai_function` handle callables and non-dict mappings (#39750)
fix(core): make subprocess and temporary file tests portable on Windows (#39664)
fix(core): fail fast when tool schemas can't resolve forward refs during serialization (#39570)
test(core): avoid version-dependent runnable snapshots (#39705)
fix(core): require all nested properties for strict tool schemas (#39306)
fix(core): remove stale sync-stream `xfail` [closes #39720] (#39723)
perf(core): Lazily import transformers (#38037)
fix(core): accept non-dict Mapping values in mustache templates (#39680)
docs(core): clarify `Runnable` pipe coercion [closes #39075] (#39707)
fix(core): finalize chain-group runs on `BaseException` (#39699)

# Patch release v5.15.1

This patch most notably solves a few issues with DFlash and MTP candidate generators, as well as an issue where images could sometimes not be processed on accelerator if using Lanczos filter.

It contains the following commits:

- Fix DFlash candidate token device mismatch with device_map="auto" (#47877) by @sywangyi and @Cyrilvallez
- Align logit distributions for CandidateGenerators using sampling  (#48007) by @Cyrilvallez
- Fix MTP config when mlp_layer_types is absent (#48015) by @Cyrilvallez 
- Fallback from 'lanczos' to 'bicubic' when on cuda (#48026) by @zucchini-nlp
- Fix gemma4 video to device (#47896) by @guarin

* New features
  * Added an error check for trying to deserialize JAX exports that are older
    than the backwards compatibility window. Without this check the
    deserialization of expired artifacts may succeed and then result in
    obscure downstream errors.
    Added a configuration flag `--jax_export_deserialize_expired_versions` to
    temporarily bypass the error check.
    See https://docs.jax.dev/en/latest/export/export.html#compatibility-guarantees.
  * Added `jax.numpy.top_k`, which implements `numpy.top_k`, added in
    in NumPy v2.6.0 (#39729).

* Breaking changes
  * The `exec_time_optimization_effort` and `memory_fitting_effort` flags have been
    removed in favor of the `EffortLevel` enum.
  * JAX does not support anymore deserialization of Exported modules from
    before January 15th, 2026 because they are beyond the backwards compatibility
    window. On that date we added support to serialize shardings as NamedSharding,
    and now that is the only sharding serialization that is supported.
  * jnp.take_along_axis now always defaults wrap_negative_indices to True.
    It used to default to False for mode=promise_in_bounds and True otherwise.

Version 3.10.3 2026-08-12

* docs: wrap Chat-80 HOWTO output
* Sandbox Stanford JAR execution to nltk_data directories
* Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
* Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
* Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
* fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
* fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
* fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
* fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
* Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.



## What's Changed
* Sandbox Stanford JAR execution to nltk_data directories by @ekaf in https://github.com/nltk/nltk/pull/3743
* docs: wrap Chat-80 HOWTO output by @medisean in https://github.com/nltk/nltk/pull/3741

# Change log

## Features :point_up:

* https://github.com/qdrant/qdrant/milestone/50 - TurboQuant 4-bit as a datatype of primary vector storage. Only store 4-bit quantized vectors and spare disk space on original vectors. [[docs](https://qdrant.tech/documentation/manage-data/vectors/#turbo4)]
* https://github.com/qdrant/qdrant/pull/9669, https://github.com/qdrant/qdrant/pull/9684, https://github.com/qdrant/qdrant/pull/9950 - Unify definition of memory usage strategy for collection components. Use `"memory": "cold" / "cached" / "pinned"` to define memory behavior for each individual collection component. Allows for more fine-grained control over memory usage and performance. [[docs](https://qdrant.tech/documentation/ops-configuration/memory-tiers/)]
* https://github.com/qdrant/qdrant/pull/9683 - Allow `"match": {"prefix": "..."}` in `filter` to match keywords by prefix, must be enabled in keyword index. [[docs](https://qdrant.tech/documentation/search/filtering/#prefix-match)]
* https://github.com/qdrant/qdrant/pull/9661 - Per-query IDF corpus for sparse vector search [[docs](https://qdrant.tech/documentation/search/text-search/full-text-search/#per-tenant-idf-statistics)]
* https://github.com/qdrant/qdrant/pull/9899 - Slice filtering condition: sliced scroll / deterministic sampling [[docs](https://qdrant.tech/documentation/search/filtering/#slice)]
* https://github.com/qdrant/qdrant/pull/10035 - Global quota API [[docs](https://qdrant.tech/documentation/ops-configuration/quotas/)]
* https://github.com/qdrant/qdrant/pull/9338 - Add routing token for deterministic read routes [[docs](https://qdrant.tech/documentation/scaling/consistency-guarantees/#read-affinity)]

## Improvements :point_left:

* https://github.com/qdrant/qdrant/pull/9113 - Use batched reads in vector and payload storage
* https://github.com/qdrant/qdrant/pull/9409 - Utilize `io_uring` for payload storage
* https://github.com/qdrant/qdrant/pull/9448 - Lower default update queue length, reduce from 1M to 200
* https://github.com/qdrant/qdrant/pull/9500 - Use Entry API to avoid redundant map double-lookups, improving performance
* https://github.com/qdrant/qdrant/pull/9332 - Enable single file mmap vector storage by default for immutable segments
* https://github.com/qdrant/qdrant/pull/9376 - Add option to explicitly disable BM25 stemmer; deprecate "none" hack

MLflow 3.15.1 is a patch release that includes bug fixes and documentation updates.

### Bug fixes:

- [Model Registry] Skip `env_pack` on ARM client images (#24762, @qyc)
- [Scoring / Tracking] Harden version parsing against missing/non-PEP440 versions on Databricks Serverless (#24799, @PattaraS)

### Documentation updates:

- [Docs] Clarify scorer versioning documentation (#24769, @nihalmenon)

# Keras 3.12.4

Keras 3.12.4 is a security patch release that hardens dataset loading and model file handling against insecure deserialization and decompression-bomb attacks.

## Security Fixes

* **Restrict unpickling when loading IMDB and Reuters datasets** — Replaces `np.load(allow_pickle=True)` with a restricted unpickler that only permits numpy array reconstruction, preventing arbitrary code execution via crafted `.npz` files (CWE-502). ([#23047](https://github.com/keras-team/keras/pull/23047)) by @LinZiyuu
* **Verify all intermediary H5 groups when navigating H5 files** — Manually resolves nested H5 group paths to verify group types at each step, preventing potential path traversal. ([#23168](https://github.com/keras-team/keras/pull/23168)) by @hertschuh
* **Reject decompression-bomb members on the `.keras` asset extraction path** — Adds per-member decompression-ratio checks before extracting `.keras` archives to disk, preventing disk-exhaustion attacks via crafted archives. ([#23101](https://github.com/keras-team/keras/pull/23101)) by @LinZiyuu
* **Restrict unpickling when loading CIFAR datasets** — Replaces bare `cPickle.load` in CIFAR-10/100 batch loading with the numpy-only `RestrictedUnpickler`, blocking arbitrary code execution via pickle gadgets. ([#23252](https://github.com/keras-team/keras/pull/23252)) by @SABITHSAHEB

---

## Contributors

Thank you to all the contributors who made this release possible! 🎉

* @LinZiyuu — Security hardening for IMDB, Reuters, and `.keras` asset extraction ([#23047](https://github.com/keras-team/keras/pull/23047), [#23101](https://github.com/keras-team/keras/pull/23101))
* @hertschuh — H5 group verification ([#23168](https://github.com/keras-team/keras/pull/23168))
* @SABITHSAHEB — CIFAR dataset pickle restriction ([#23252](https://github.com/keras-team/keras/pull/23252))

## v3.0.0

Release date: July 29, 2026

| Milvus Version | Python SDK Version | Node.js SDK Version | Java SDK Version | Go SDK Version |
| -------------- | ------------------ | ------------------- | ---------------- | -------------- |
| 3.0.0          | 3.0.1              | 3.0.3               | 3.0.5            | 3.0.0          |

Milvus 3.0.0 is officially released! Building on the lake-native architecture introduced in [3.0-beta](https://milvus.io/docs/release_notes.md#v30-beta), this release completes what the beta started: External Collection covers more lakehouse workflows; schema supports online add / backfill / drop; the sparse index is rebuilt around SINDI; StructArray and faceted search round out the retrieval engine; FAISS passthrough, and TEXT extend index and modality choices; and Woodpecker runs as a standalone service.

If you are new to the 3.0 line, the Core 3.0 features recall section below summarizes the capabilities introduced in 3.0-beta; the [3.0-beta release notes](https://milvus.io/docs/release_notes.md#v30-beta) have the full write-ups.

### What's new in 3.0.0 (since 3.0-beta)

#### External Collection: more complete lakehouse workflows

3.0-beta introduced External Collection: reference lake files in place, build indexes, and search them without copying data into Milvus. This release extends it toward complete lakehouse retrieval workflows. External fields can now feed function output fields such as BM25 sparse vectors, MinHash signatures, and text embeddings, so text and model-derived retrieval fields are built inside Milvus without copying the source table. Refresh also supports additive schema evolution: when the external table gains new columns, Milvus patches the affected segments instead of rebuilding the collection.

This release also adds a `milvus-table` external format that treats Milvus Snapshot metadata and Storage V3 manifests as an external source, so a collection snapshot can itself be served as an external table — batch and serving systems get a shared, manifest-backed view of the same data.

# Highlights

<img width="1250" height="560" alt="peft-v0 20 0" src="https://github.com/user-attachments/assets/6194fae9-f3c3-48ca-b43b-40c774bfe6eb" />

This release adds no less than nine new PEFT methods and puts a lot of work into the surrounding infrastructure, for example adding a new image generation benchmark for the method comparison suite and greatly improving the documentation structure.

## New Methods

### HiRA

@hqsiswiliam added ["HiRA: Parameter-Efficient Hadamard High-Rank Adaptation for Large Language Models"](https://openreview.net/forum?id=TwJrTz9cRS) to PEFT (#2668). Instead of adding the low-rank product `BA` to the base weight, HiRA multiplies it elementwise (Hadamard product) with the frozen base weight. Because the base weight itself is full rank, the resulting update is no longer constrained to be low rank, while the trainable parameter count stays the same as LoRA's.

### GLoRA

@not-lain contributed GLoRA: ["One-for-All: Generalized LoRA for Parameter-Efficient Fine-Tuning"](https://arxiv.org/abs/2306.07967) in #3098. It is a flexible PEFT method that extends LoRA with configurable weight, activation, and bias adaptation, delivering richer fine-tuning with no extra inference cost. Use it when you need per-layer flexibility or stronger adaptation than vanilla LoRA. Skip it for non-Linear layers (e.g. Conv/Embedding) or when standard LoRA is already sufficient and simplicity matters.

### BEFT

@whubaichuan added ["BEFT: Bias-Efficient Fine-Tuning of Language Models"](https://arxiv.org/abs/2509.15974v2) in #3195. BEFT builds on the observation that fine-tuning bias terms alone can be competitive in low-data regimes, but goes further: rather than training *all* biases, it targets the value projection by default, as the authors found this to be most efficient. This brings the trainable parameter count down to roughly 0.01% of the total parameters.

### Added

- 🎨 **Redesigned interface.** Open WebUI has been visually rebuilt from the ground up. All aspects of the User Interface, from the chat view to the admin panel. Now with a narrower conversation column, lighter typography, tidier spacing, consistent menus and dropdowns, clearly outlined text boxes, and settings rearranged. [Commit](https://github.com/open-webui/open-webui/commit/aedb6bef4e2eb12234c02085a545ff395d96db18), [Commit](https://github.com/open-webui/open-webui/commit/b3255a36569f295766271b8a2b0bd969b4083b9f), [Commit](https://github.com/open-webui/open-webui/commit/ba067258dea2229a9956077b3b0d7b1c68b56f66), [Commit](https://github.com/open-webui/open-webui/commit/8dd862d3383978f21111e63fb2d6029711abed9a), [Commit](https://github.com/open-webui/open-webui/commit/263bbc77d803e83b9af4b04c0cae29705af5f072), [Commit](https://github.com/open-webui/open-webui/commit/f8ea15b84a274712dca33daa970f63ed7368043e), [Commit](https://github.com/open-webui/open-webui/commit/9f17c5960a0e47a09773da4bba12997a31222fc8), [Commit](https://github.com/open-webui/open-webui/commit/6772b1cb4f4e0d3dc166956014e6e7b9bddc721a), [Commit](https://github.com/open-webui/open-webui/commit/d3fd860c131846a9458888f9c256a9a29f3767f2), [Commit](https://github.com/open-webui/open-webui/commit/f1584b5a3764f72de2de6caad507e7c39ad19c23), [Commit](https://github.com/open-webui/open-webui/commit/2e8d92c7b1a9bb8d35f4a27ba3c73368d735c480), [Commit](https://github.com/open-webui/open-webui/commit/e58a4633b15ae53d33fc3b46cb97c76d86be325f), [Commit](https://github.com/open-webui/open-webui/commit/04b146f2cec7e6a01e9d3590eb83655c128fa3c7), [Commit](https://github.com/open-webui/open-webui/commit/e5e2cd78769639b2df83776f1b991966f922f8b4), [Commit](https://github.com/open-webui/open-webui/commit/3316ba76aabe5429596ffd130fd36be4d5c3aa6c), [Commit](https://github.com/open-webui/open-webui/commit/6fcb38fe2e0aded9b85f655cd8f3279e9f4e765e), [Commit](https://github.com/open-webui/open-webui/commit/421da674468f638f72cc5266c5a3874aa3bca3b7), [Commit](https://github.com/open-webui/open-webui/commit/d0bea60581eaa07d41f92ad8f86007e83247e061), [Commit](https://github.com/open-webui/open-webui/commit/21e180182a5096481d4cbb1a8f94212c0a515a40), [Commit](https://github.com/open-webui/open-webui/commit/d027a32ed134ae104f2f142ba45ff38e56215c5f), [Commit](https://github.com/open-webui/open-webui/commit/437c06c4795a72700295d7690d5fd65d1153372c), [Commit](https://github.com/open-webui/open-webui/commit/1bf05ebc7d135d74969438824778c9f73243ba8d), [Commit](https://github.com/open-webui/open-webui/commit/fd07e3a8e3e619f3712067765b416f0925fa80d3), [Commit](https://github.com/open-webui/open-webui/commit/d3ea51fd466a8741afc4dfd4f0d0f2f77fb6467f), [Commit](https://github.com/open-webui/open-webui/commit/4da2ff2655d9abb851805da127cf60b4d9ad1aa7), [Commit](https://github.com/open-webui/open-webui/commit/2fcb36267f034f2b83f936bfacedc20b680a2710), [Commit](https://github.com/open-webui/open-webui/commit/1428a4ddce4998cb3664a5ce37e176442dd426fa), [Commit](https://github.com/open-webui/open-webui/commit/bc8d24c951e9a2c973fc2dd1f2832a2b0855bc0e), [Commit](https://github.com/open-webui/open-webui/commit/704d07e9a20a830aad7bfc5131b0d92621cf0691), [Commit](https://github.com/open-webui/open-webui/commit/e88d2e053c2a63cce3823c9b6006f4a184c4fef2), [Commit](https://github.com/open-webui/open-webui/commit/6940297486d4a5de127efd1a5148b0adcebe87e3), [Commit](https://github.com/open-webui/open-webui/commit/9ca8cf528af1c49da3f0a2bc3c6ca95c1dedbcf5), [Commit](https://github.com/open-webui/open-webui/commit/c4efa81d08c425678c810c51b4d62716e1e57117), [Commit](https://github.com/open-webui/open-webui/commit/bb12b1a18b77d80829cedb2d5bf965808222415b), [Commit](https://github.com/open-webui/open-webui/commit/49abfbdd155dc22882fdcb09989e4f4964db16ee), [#27178](https://github.com/open-webui/open-webui/pull/27178), [Commit](https://github.com/open-webui/open-webui/commit/dcc7fb1e8ef144205531829f8a56e52171c4d63d), [Commit](https://github.com/open-webui/open-webui/commit/5c505c1119fec6170c1bc092ed162f86262a887e)
- 🤖 **Sub-agents.** Administrators can now enable sub-agents, which let a model hand parts of a task to background helper agents that run their own tool-driven conversations and report results back into the chat, tuned through new "ENABLE_SUBAGENTS", concurrency, iteration, and system-prompt settings. [Commit](https://github.com/open-webui/open-webui/commit/7088d245bb45fc69c0b22748563b9f3c6f0daa73), [Commit](https://github.com/open-webui/open-webui/commit/2f37e853d1259a901f736a823bad29dcc2c3b130), [Commit](https://github.com/open-webui/open-webui/commit/959558fd82eb2a3c980231acd500b73ba4b698b3), [Commit](https://github.com/open-webui/open-webui/commit/3005b7bc71fcbd5abc6e73c3e4caa4ea781cdb76)
- 📂 **Folder pages.** Opening a folder now takes you to its own page, where its chats load a page at a time, can be sorted by title or last updated, and you can start a new chat straight from the folder. [Commit](https://github.com/open-webui/open-webui/commit/409fb39717be9ab7becd9e8c01801a08c5bae318)
- ⏲️ **Chat timers.** The assistant can now set a timer that brings a prompt back into the conversation later, after a delay or at a set time, and can drop it automatically if you read the chat or reply before it fires. [Commit](https://github.com/open-webui/open-webui/commit/b23ddeb2800098c6352203ec8fbe9fca40ba415c)
- 🔔 **Notification targets.** Notifications now have their own settings tab where you can send them to several webhook destinations, each picking which events it wants, from chats finishing or failing to channel messages and calendar alerts, with a test button and a choice between always notifying or only when you are away, and any webhook you already had is carried over for you. [Commit](https://github.com/open-webui/open-webui/commit/c55e373b994d3a14c99a97f44261422012f63266), [Commit](https://github.com/open-webui/open-webui/commit/cf235738f5a44db415012b3b0ebc1f6e752f5439), [Commit](https://github.com/open-webui/open-webui/commit/200d447f6289faca42f2a666bbabae2c7f3ebadf), [#24750](https://github.com/open-webui/open-webui/issues/24750)
- ��️ **Full replies in channels.** A reply from the assistant in a channel is now saved and shown in full, with its reasoning, tool calls and other structured parts, where it previously came through blank. [Commit](https://github.com/open-webui/open-webui/commit/498cdab9a548d7d2fd19c389204ee26236fc7efe), [#26720](https://github.com/open-webui/open-webui/pull/26720), [#27409](https://github.com/open-webui/open-webui/pull/27409), [#26707](https://github.com/open-webui/open-webui/issues/26707), [#26656](https://github.com/open-webui/open-webui/issues/26656)
- 📣 **Notifications from the assistant.** The assistant can now send you a notification itself when something is worth your attention, so a long task can reach you after you have moved on to something else. [Commit](https://github.com/open-webui/open-webui/commit/c55e373b994d3a14c99a97f44261422012f63266), [Commit](https://github.com/open-webui/open-webui/commit/200d447f6289faca42f2a666bbabae2c7f3ebadf)
- 🌎 **Share a chat with anyone holding the link.** A shared chat can now be set to Open so it opens without signing in, with visitors no longer bounced to the sign-in page on their way to it, which administrators must first allow through a new "Chats Open Sharing" permission that stays off by default, and such pages ask search engines not to index them. [Commit](https://github.com/open-webui/open-webui/commit/1f0dc90abe879a55f654f2333e29fb0f630831c7), [Commit](https://github.com/open-webui/open-webui/commit/0e0d08382ac0d05b1ad98c47e8a2e37df2a185bb)
- 🔖 **Chat variables.** A model's system prompt can now declare fields such as text boxes and dropdown lists that you fill in for a conversation, with the values saved alongside the chat and carried over when it is forked or cloned. [Commit](https://github.com/open-webui/open-webui/commit/bef8ae4b2f05ca49ed88a02ab7a3cdc11b62c4f1), [Commit](https://github.com/open-webui/open-webui/commit/4e869011cd5040b5d6a197fc83d5f50d2425dbc2), [Commit](https://github.com/open-webui/open-webui/commit/1e88367cc837b39c0e9958fefbe053803336dce2), [Commit](https://github.com/open-webui/open-webui/commit/8cbb7f765cfc9c9b3237a6c5593cd93f849033f0), [Commit](https://github.com/open-webui/open-webui/commit/b35e2d265a4e4a2f2a075b31917d48be1dd9ef19), [Commit](https://github.com/open-webui/open-webui/commit/239cb740077a14e452ad002a1e671a09ab558e40), [#26915](https://github.com/open-webui/open-webui/discussions/26915)
- 🗄️ **LDAP group synchronization.** Administrators can now map LDAP groups to Open WebUI groups from the authentication settings, with optional automatic creation of missing groups, so a user's group memberships are kept in step with the directory each time they sign in. [#27263](https://github.com/open-webui/open-webui/pull/27263), [#18015](https://github.com/open-webui/open-webui/issues/18015)
- 👥 **Restrict sharing with groups.** Admins can now stop resources from being shared with entire groups through a new "USER_PERMISSIONS_ACCESS_GRANTS_ALLOW_GROUPS" permission, which stays enabled by default so existing group sharing keeps working untouched. [Commit](https://github.com/open-webui/open-webui/commit/4ed19d504bd30c0fc801e9228d9816669ec1c09c), [Commit](https://github.com/open-webui/open-webui/commit/f84dabe3d97ff701c097055023f28f3f2f7ebd07), [Commit](https://github.com/open-webui/open-webui/commit/77da3d8c81b9a6fda4354619de94f5d433328d8e), [Commit](https://github.com/open-webui/open-webui/commit/84e4d6ef8277f4b4f3ac4d355b3219e9b5a37268), [#27124](https://github.com/open-webui/open-webui/pull/27124)
- 🤝 **Shared folder collaboration.** People with access to a shared folder can now use its files and system prompt as knowledge in chat and, with write access, rename and manage the folder, all according to their read or write permission. [Commit](https://github.com/open-webui/open-webui/commit/797293c74957bd79e42262d1dc0fd637a45d0357), [Commit](https://github.com/open-webui/open-webui/commit/caa2457c17e592587b804f21054cc000944af75c), [Commit](https://github.com/open-webui/open-webui/commit/009715cd63d1c8b5320aba68e9a70afcde519016), [Commit](https://github.com/open-webui/open-webui/commit/53ccd718a53de25bb6d61476a6617bfb3f130a44)
- 👁️ **Chat previews in the sidebar.** Hovering a chat in the sidebar now shows a compact preview of its recent messages, so you can find the conversation you want without opening it. [Commit](https://github.com/open-webui/open-webui/commit/d0f7da4f45b8831b09b2ab3ec8f91aa354d90ba3), [Commit](https://github.com/open-webui/open-webui/commit/aaf2834db758bfec69408ab4cabcf324965c221c), [Commit](https://github.com/open-webui/open-webui/commit/1513ddaf58fe18029086880461d7cad0649a699c), [Commit](https://github.com/open-webui/open-webui/commit/93bd05271c07c249978d69abf3297fd2841900f9)
- 🕗 **Local message timestamps.** Message timestamps now appear on hover in your device's local date and time format, with the full weekday and date shown in a tooltip. [Commit](https://github.com/open-webui/open-webui/commit/797293c74957bd79e42262d1dc0fd637a45d0357), [Commit](https://github.com/open-webui/open-webui/commit/f84dabe3d97ff701c097055023f28f3f2f7ebd07)
- 📇 **User variables.** You can now store your own values in account settings, such as your role or how you like answers written, and a model's system prompt can insert them wherever they are needed. [Commit](https://github.com/open-webui/open-webui/commit/bd5d7b2e879511882429075d804d9222956f4a1a), [Commit](https://github.com/open-webui/open-webui/commit/212eec408ca320edfa2271e604d10e14b6a9bc1a), [Commit](https://github.com/open-webui/open-webui/commit/793a43d9c48225925929eb312fe2b70d5914d1da)
- 🧺 **Automations that file their chats away.** An automation can now be pointed at one of your folders, from the dialog, the editor or by asking the assistant, so each run lands there instead of loose in your chat list, and the folder is cleared automatically if it is later deleted. [Commit](https://github.com/open-webui/open-webui/commit/f798d05586a140f1a6b51f1e51b2b2a63d079d45), [Commit](https://github.com/open-webui/open-webui/commit/bab71ed08b5af6f4a8ff2daa02792baae9edab03), [Commit](https://github.com/open-webui/open-webui/commit/db5c092299471444c356216d5ef39b382ba1aa1e)
- 🔵 **See what you have not read yet.** Folders in the sidebar now carry a count of chats with something new in them, a folder's own page marks unread chats with a dot, shows a spinner on any still generating, clears the dot as you open one, and keeps itself up to date as replies finish elsewhere, unread chats sort to the top of a folder, and you can mark a single chat unread again mark everything in a folder read, or mark every chat read at once from the sidebar. [Commit](https://github.com/open-webui/open-webui/commit/f798d05586a140f1a6b51f1e51b2b2a63d079d45), [Commit](https://github.com/open-webui/open-webui/commit/f867825bf3b7699bc2bd967ef46b2bb63e48b098), [Commit](https://github.com/open-webui/open-webui/commit/1de36d600f7191c28a98bf4b347b44cf8f1bef43), [Commit](https://github.com/open-webui/open-webui/commit/85c47fb467177ed811ba77dfe62461dfbe8e2548), [Commit](https://github.com/open-webui/open-webui/commit/b7489bbc6c4e376c017edffd8da3c2eb4e6c1c8e), [Commit](https://github.com/open-webui/open-webui/commit/3cd72ee6a8e93dc39a4d4c173117056e25326c8a), [Commit](https://github.com/open-webui/open-webui/commit/6f93ecd4fd77b0d51a5fbbd2fc3fd6d151036a55), [Commit](https://github.com/open-webui/open-webui/commit/e5a08d52208e8b1ed07ff94906e27d174146b1ca), [Commit](https://github.com/open-webui/open-webui/commit/8ddf119570b3c0b04b673d41cb2363370c23939b)

## Migration

**Settings and credentials now live in a backend-managed store.**

Provider settings and credentials previously persisted in the webview's `localStorage`. In 0.8.4, Jan reads and writes them from a backend-managed store instead (secrets go to the OS keyring). Your existing settings and API keys are copied over automatically on first launch - no manual action is needed, and from this version on all new changes are saved to the backend store.

Your old `localStorage` data is **not deleted** - it's kept as a snapshot so you can downgrade to a pre-0.8.4 build and still have your previous settings. Any changes you make in 0.8.4+ live only in the backend store, so a downgrade sees the older snapshot, not your latest settings.

---

## What's Changed
* chore(flatpak): add 0.8.3 release notes to appdata by @qnixsynapse in https://github.com/janhq/jan/pull/8343
* docs: update changelogs for v0.8.3 and update documentation by @qnixsynapse in https://github.com/janhq/jan/pull/8336
* Merge release/v0.8.3 to main by @qnixsynapse in https://github.com/janhq/jan/pull/8344
* i18n(ja): update Japanese translations (#8264) by @mahirhir in https://github.com/janhq/jan/pull/8348
* i18n(ja): complete common.json translations and fix terminology (#8264) by @mahirhir in https://github.com/janhq/jan/pull/8349
* i18n(ja): complete settings.json translations (#8264) by @mahirhir in https://github.com/janhq/jan/pull/8352
* fix(markdown): force code blocks LTR in RTL language context by @qnixsynapse in https://github.com/janhq/jan/pull/8350
* feat(chat): add toggle for folding interim text into reasoning trace by @qnixsynapse in https://github.com/janhq/jan/pull/8363
* fix(rag): repair embeddings, stop chat-model reloads, and parse more PDFs by @qnixsynapse in https://github.com/janhq/jan/pull/8360

# PyTorch 2.13.0 Release Notes

- [Highlights](#highlights)
- [Backwards Incompatible Changes](#backwards-incompatible-changes)
- [Deprecations](#deprecations)
- [New Features](#new-features)
- [Improvements](#improvements)
- [Bug fixes](#bug-fixes)
- [Performance](#performance)
- [Documentation](#documentation)
- [Developers](#developers)

# Highlights

<table>
  <tr><td><strong>FlexAttention</strong> lands on Apple Silicon (MPS), with up to ~12x speedup over SDPA on sparse patterns, and gains a deterministic backward path on CUDA for reproducible gradient computation.</td></tr>
  <tr><td><strong>CuTeDSL "Native DSL" backend</strong> gives Inductor a second high-performance code path (alongside Triton) for key GPU operations, with faster compilation. [Prototype]</td></tr>
  <tr><td><strong><code>nn.LinearCrossEntropyLoss</code></strong> combines the final prediction and loss computation to cut peak GPU memory by up to 4x for large-vocabulary language model training.</td></tr>
  <tr><td><strong>torchcomms</strong>, a new communications backend for PyTorch Distributed, improves fault tolerance, scalability, and debuggability for large-cluster training.</td></tr>
  <tr><td><strong>FSDP2</strong> now overlaps reduce-scatter and all-gather communications via a dedicated process group (opt-in), increasing distributed training throughput.</td></tr>

### Breaking Changes:
- Relaxed Gymnasium version range (from `"gymnasium>=0.29.1,<1.3.0"` to `"gymnasium>=0.29.1,<2.0"`)
- `pandas` and `matplotlib` are no longer core dependencies; they are now optional and only required for loading results and plotting (moved to `stable-baselines3[extra]`).
- Moved `read_json` and `read_csv` helper functions to test files
- Raised `torch` minimum version from 2.3 to 2.8 to mitigate https://github.com/advisories/GHSA-887c-mr87-cxwp

### Bug Fixes:
- Fixed deprecated error Taxi-v3 from gymnasium v1.3.0 in tests

### [SB3-Contrib]
- Optimized tests (faster to run)
- Fixed dead link for `RecurrentPPO`.

### [RL Zoo]


### [SBX] (SB3 + Jax)

- Added support for `rollout_buffer_class` and `rollout_buffer_kwargs` arguments in `PPO` and `OnPolicyAlgorithmJax` constructors, as in Stable Baselines3. (@Trenza1ore)
- Updated Jax dependency

## FSDP2 Improvements

This release brings a large batch of FSDP2 fixes and quality-of-life improvements: correct dtype handling on load, sharding of embeddings/norms, QLoRA crash prevention, and a more robust auto-wrap policy.

  - Fsdp2 fully_shard embedding and norm by @SunMarc in #4015
  - Fix fsdp2 load full state dict dtype mismatch by @SunMarc in #4021
  - Fix region compilation fsdpv2 by @SunMarc in #4022
  - [FSDP2] Cast model to uniform dtype before fully_shard to fix mixed-dtype AssertionError by @roycho96 in #3985
  - [FSDP2] Auto-exclude non-floating frozen Params4bit from fully_shard to prevent QLoRA crash by @roycho96 in #3987
  - fix(FSDP2): auto-wrap policy ignoring _no_split_modules fallback by @JohnGiorgi in #3999
  - fix: use key-based matching in fsdp2_load_full_state_dict by @roycho96 in #3982
  - fix: add missing model_has_params4bit guard to fsdp2_load_full_state_dict call by @roycho96 in #3981
  - Fix to-fsdp2: drop REMOVED / NOT_YET_IMPLEMENTED FSDP1 keys instead of leaking them by @lollinng in #4065
  - Prevent double-wrapping models in prepare_model() by @joshuaswanson in #3977

## AMD ROCm support

Accelerate now works end-to-end on AMD ROCm devices. Thanks @Abdennacer-Badaoui!

- Make accelerate work end-to-end on AMD ROCm by @Abdennacer-Badaoui in #4025

- Fix `dialog` dependency requirement to be `>= 1.1.0`.

Version: `1.5.9`
Git ref: `refs/tags/1.5.9`
Build Date: `2026-05-05T05:55`
PIP Package: `chroma-1.5.9.tar.gz`
Github Container Registry Image: `:1.5.9`
DockerHub Image: `:1.5.9`

## What's Changed
* [ENH](frontend): block functions on topology dbs by @rescrv in https://github.com/chroma-core/chroma/pull/6836
* [ENH](faults): Add Tilt fault injection CLI by @rescrv in https://github.com/chroma-core/chroma/pull/6881
* [CHORE]  Debug TimeoutError in test_add.py by @rescrv in https://github.com/chroma-core/chroma/pull/6905
* [ENH]: Enable rebuilds for sharded collections by @tanujnay112 in https://github.com/chroma-core/chroma/pull/6916
* [ENH]: Group by support with sharding by @sanketkedia in https://github.com/chroma-core/chroma/pull/6909
* [CHORE]: Denormalize tenant and database into collection_compaction_cursors table by @tanujnay112 in https://github.com/chroma-core/chroma/pull/6940
* [CHORE]  Use normalized record sets for test add by @rescrv in https://github.com/chroma-core/chroma/pull/6935
* [ENH]: Add workflow to build and publish service container images by @jasonvigil in https://github.com/chroma-core/chroma/pull/6944
* [ENH] - Updates language around Chroma Cloud to be more representative. by @tjkrusinskichroma in https://github.com/chroma-core/chroma/pull/6952
* [ENH]: Add change stream to collection compaction cursors by @tanujnay112 in https://github.com/chroma-core/chroma/pull/6955
* [BUG] Switch to storing DOCKERHUB_USERNAME as var by @jasonvigil in https://github.com/chroma-core/chroma/pull/6962
* [CHORE]: Standardize Tilt CI image build on root docker-bake.hcl by @jasonvigil in https://github.com/chroma-core/chroma/pull/6958

# Release 2.21.0

## TensorFlow

### Breaking Changes

* Support for Python 3.9 has been removed starting with TF 2.21.
* The TensorBoard (TB) dependency has been removed starting with TF 2.21.

### Major Features and Improvements

* `tf.lite`
    * Adds int8 and int16x8 support for SQRT operator.
    * Adds int16x8 support for EQUAL and NOT_EQUAL operators.
    * Adds support for int2 type.
    * Adds support for int2/int4 in tfl.cast .
    * Adds support for SRQ int2 in tfl.fully_connected.
    * Adds support for int4 in tfl.slice.
    * Adds support for uint4 type.

## What's Changed
* misc(gha): expose action cache url and runtime as secrets by @mfuntowicz in https://github.com/huggingface/text-generation-inference/pull/2964
* feat: support max_image_fetch_size to limit by @drbh in https://github.com/huggingface/text-generation-inference/pull/3339
* Maintenance mode by @LysandreJik in https://github.com/huggingface/text-generation-inference/pull/3344
* Maintenance mode by @LysandreJik in https://github.com/huggingface/text-generation-inference/pull/3345
* fix(num_devices): fix num_shard/num device auto compute when NVIDIA_VISIBLE_DEVICES == "all" or "void" by @oOraph in https://github.com/huggingface/text-generation-inference/pull/3346


**Full Changelog**: https://github.com/huggingface/text-generation-inference/compare/v3.3.6...v3.3.7

## What's Changed
* Fix docs dotnet core typo by @lach-g in https://github.com/microsoft/autogen/pull/6950
* Fix loading streaming Bedrock response with tool usage with empty argument by @pawel-dabro in https://github.com/microsoft/autogen/pull/6979
* Support linear memory in RedisMemory by @justin-cechmanek in https://github.com/microsoft/autogen/pull/6972
* Fix message ID for correlation between streaming chunks and final mes… by @smalltalkman in https://github.com/microsoft/autogen/pull/6969
* fix: extra args not work to disable thinking by @liuyunrui123 in https://github.com/microsoft/autogen/pull/7006
* Add thinking mode support for anthropic client by @SrikarMannepalli in https://github.com/microsoft/autogen/pull/7002
* Fix spurious </think> tags caused by empty string reasoning_content in streaming by @Copilot in https://github.com/microsoft/autogen/pull/7025
* Fix GraphFlow cycle detection to properly clean up recursion state by @Copilot in https://github.com/microsoft/autogen/pull/7026
* Add comprehensive GitHub Copilot instructions for AutoGen development by @Copilot in https://github.com/microsoft/autogen/pull/7029
* Fix Redis caching always returning False due to unhandled string values by @Copilot in https://github.com/microsoft/autogen/pull/7022
* Fix OllamaChatCompletionClient load_component() error by adding to WELL_KNOWN_PROVIDERS by @Copilot in https://github.com/microsoft/autogen/pull/7030
* Fix finish_reason logic in Azure AI client streaming response by @litterzhang in https://github.com/microsoft/autogen/pull/6963
* Add security warnings and default to DockerCommandLineCodeExecutor by @ekzhu in https://github.com/microsoft/autogen/pull/7035
* Fix: Handle nested objects in array items for JSON schema conversion by @kkutrowski in https://github.com/microsoft/autogen/pull/6993
* Fix not supported field warnings in count_tokens_openai by @seunggil1 in https://github.com/microsoft/autogen/pull/6987
* Fix(mcp): drain pending command futures on McpSessionActor failure by @withsmilo in https://github.com/microsoft/autogen/pull/7045
* Add missing reasoning_effort parameter support for OpenAI GPT-5 models by @Copilot in https://github.com/microsoft/autogen/pull/7054
* Update version to 0.7.5 by @ekzhu in https://github.com/microsoft/autogen/pull/7058

- Added support for all GPT-5 models.
- Added support for Grok-4 via `xai/grok-4` and `openrouter/x-ai/grok-4` model names.
- Added support for `gemini/gemini-2.5-flash-lite-preview-06-17` model, by Tamir Zahavi-Brunner.
- `/clear` now prints “All chat history cleared.” so you know it worked, by Zexin Yuan.
- `/undo` output now shows only the first line of each commit message, making it easier to read.
- Added support for `openrouter/moonshotai/kimi-k2` model, by Jack Harrington.
- Display model announcements with no-arg `/model` command.
- Fixed an issue where new settings for an existing model didn't replace the old ones, by Andrew Grigorev.
- Fixed analytics to support the latest PostHog SDK event-capture API.
- Bumped dependencies to pick up latest litellm==1.75.0.

- Aider wrote 88% of the code in this release.

## 1.10.1

### Bug Fixes:
* fix image upscale on cpu ([#16275](https://github.com/AUTOMATIC1111/stable-diffusion-webui/pull/16275))

## What's Changed
* fix: resolve colab unsupported image type issue by @mashb1t in https://github.com/lllyasviel/Fooocus/pull/3506

**Full Changelog**: https://github.com/lllyasviel/Fooocus/compare/v2.5.4...v2.5.5

## Highlights
- Added SGLang worker for vision language models, lower latency and higher throughput https://github.com/lm-sys/FastChat/pull/2928
- Vision langauge WebUI https://github.com/lm-sys/FastChat/pull/2960
- OpenAI-compatible API server now supports image input https://github.com/lm-sys/FastChat/pull/2928
- Added LightLLM worker for higher throughput https://github.com/lm-sys/FastChat/blob/main/docs/lightllm_integration.md
- Added Apple MLX worker https://github.com/lm-sys/FastChat/pull/2940

## What's Changed
* fix specify local path issue use model from www.modelscope.cn by @liuyhwangyh in https://github.com/lm-sys/FastChat/pull/2934
* support openai embedding for topic clustering by @CodingWithTim in https://github.com/lm-sys/FastChat/pull/2729
* Remove duplicate API endpoint by @surak in https://github.com/lm-sys/FastChat/pull/2949
* Update Hermes Mixtral by @teknium1 in https://github.com/lm-sys/FastChat/pull/2938
* Enablement of REST API Usage within Google Colab Free Tier by @ggcr in https://github.com/lm-sys/FastChat/pull/2940
* Create a new worker implementation for Apple MLX by @aliasaria in https://github.com/lm-sys/FastChat/pull/2937
* feat: support Model Yuan2.0, a new generation Fundamental Large Language Model developed by IEIT System by @cauwulixuan in https://github.com/lm-sys/FastChat/pull/2936
* Fix the pooling method of BGE embedding model by @staoxiao in https://github.com/lm-sys/FastChat/pull/2926
* SGLang Worker by @BabyChouSr in https://github.com/lm-sys/FastChat/pull/2928
* Update mlx_worker to be async by @aliasaria in https://github.com/lm-sys/FastChat/pull/2958
* Integrate LightLLM into serve worker by @zeyugao in https://github.com/lm-sys/FastChat/pull/2888
* Copy button by @surak in https://github.com/lm-sys/FastChat/pull/2963