发布日期: 2026-07-01
版本号: v0.10.2

这是Open WebUI的最新版本更新。新增功能包括：支持在聊天中实时流式显示模型的推理过程；上传文件夹到知识库时能保留原始子目录结构；管理员可通过开关决定是否将记忆内容加入系统上下文；系统现在会自动记忆用户的长期偏好而忽略临时性信息；更新了语音转文字的请求格式；支持通过环境变量配置API连接和评估模型；增强了高对比度模式下的界面可读性；并进行了多项性能与安全改进及翻译更新。修复方面，重点解决了安全性问题，减少了意外登出，完善了网页搜索的域名过滤规则，保护了图片生成提示词的日志隐私，确保了数据库升级的安全性，恢复了非管理员用户保存设置的功能，修正了侧边栏聊天时间戳显示、页面刷新后默认模型选择、工具对话框关闭后挂起、Python代码执行可靠性、模型能力为空时的错误、聊天搜索功能、通知预览以及配置项设置启动等问题。

更新内容 （中文）

新增功能

  • 💭 流式推理显示。 会输出思考或推理过程的模型现在会在生成时展示相应内容，并在聊天概览和导出的对话中正确渲染。 提交记录, 提交记录, 提交记录, 提交记录
  • 🗂️ 向知识库上传文件夹。 将文件夹拖入知识库或同步文件夹时，现在会保留其子文件夹结构，而不是将所有内容打平为散文件。 #26130, 提交记录
  • 🧠 记忆系统上下文开关。 管理员现在可以在保留记忆工具的同时，选择不将存储的记忆添加到系统上下文，方法是在管理员设置中使用新的“记忆系统上下文”开关。 提交记录
  • 🧹 更精炼的自动记忆。 自动保存的记忆现在专注于持久性细节，如偏好和目标，并跳过一次性事务，如用餐、日常事件或短暂情绪，除非你要求记忆它们。 提交记录
  • 🎙️ 语音转文本请求格式。 兼容 OpenAI 的语音转文本功能现在可以将音频作为多部分上传或 base64 JSON 发送，可在管理员音频设置中选择。 提交记录
  • 🧰 通过环境变量设置 API 配置。 管理员现在可以通过 “OLLAMA_API_CONFIGS” 和 “OPENAI_API_CONFIGS” 环境变量设置每个连接的 Ollama 和 OpenAI API 配置。 提交记录
  • 📡 提供商失败事件。 失败的 Ollama 和 OpenAI 兼容提供商请求现在会发出结构化事件，描述错误类型、提供商和状态，让管理员更清楚地了解上游故障。 提交记录
  • 🏟️ 通过环境变量设置竞技场模型。 管理员现在可以通过 “EVALUATION_ARENA_MODELS” 环境变量定义评估竞技场模型。 #26174
  • ♿ 更清晰的高对比度侧边栏选择。 启用高对比度模式时，侧边栏中当前选中的聊天现在会使用更强的颜色突出显示，从而更容易分辨哪个聊天处于活动状态。 #26469, 提交记录
  • 🔄 通用改进。 在应用程序中实施了各种改进以增强性能、稳定性和安全性。
  • 🌐 翻译更新。 泰语、葡萄牙语（巴西）、加泰罗尼亚语和西班牙语的翻译得到了增强和扩展。

修复内容

  • 🛡️ 安全公告：此版本包含安全和访问控制修复。我们建议您尽快更新生产部署。此版本中的所有安全修复可能不会在修复部分列出——有些可能会暂时保留，以便给管理员升级时间。 公告
  • 🔐 减少意外登出。 单个请求返回授权错误不再会注销你，而你的会话仍然有效，因为应用现在会在重定向到登录页面之前确认会话状态。 提交记录
  • 🔒 网页搜索域名过滤。 网页搜索结果的域名允许和阻止规则现在会针对主机名进行匹配，堵住了一些 URL 可能绕过过滤器的漏洞。 提交记录
  • 🕵️ 图像提示日志隐私。 图像生成工作流现在不会在默认日志级别下写入服务器日志，从而将用户编写的提示内容排除在运维人员可见的日志之外。 #26400, 提交记录
  • 🗄️ 更安全的数据库升级。 升级现有的 SQLite 数据库不再会在用户表迁移期间崩溃或损坏已保存的用户设置，解决了升级后可能阻止启动或破坏登录的故障。 #26403, 提交记录
  • ⚙️ 非管理员保存设置。 非管理员用户现在可以再次保存其界面设置，例如默认模型和主题，此前这些设置保存时会遇到服务器错误，而界面错误地报告成功。 #26627, 提交记录
  • 🕒 侧边栏聊天时间戳。 侧边栏中的聊天现在显示其最后活跃时间而不是创建时间，因此时间标签与其在列表中的位置匹配，并在每条新消息后刷新。 #26454, #26451
  • 🎯 刷新后的默认模型。 重新加载页面时，你选择的模型不再被清除，因为模型选择现在会等待模型列表加载完成。 提交记录
  • ⏳ 工具对话框不再挂起。 通过点击对话框外部来关闭工具或功能输入对话框，现在会取消待处理的请求，而不是让聊天无限期地持续加载。 #26417, 提交记录
  • 🐍 可靠的代码执行加载。 在聊天中运行 Python 代码现在可以可靠地加载其运行时，修复了近期版本中破坏代码执行和 Pyodide 文件查看器的沙箱启动失败问题。 #26625, #26390
  • 🤖 具有空能力的模型。 与能力未设置的模型聊天时，如果涉及记忆功能或自动化操作，不再会因错误而失败。 #26412, 提交记录, 提交记录
  • 🔎 可搜索的响应。 聊天搜索再次能找到文本以结构化输出存储的助手消息，此前这些消息会被跳过。 #26405
  • 🔔 聊天通知预览。 后台聊天完成通知和提示现在会显示清晰的响应预览，而不是为以结构化输出存储的消息显示空白。 提交记录
  • 💾 横幅和配置启动。 设置如 “WEBUI_BANNERS” 等配置现在不再导致启动失败，因为管理员配置值现在无论其数据类型如何都能正确存储。 #26431, 提交记录
  • 📑 RAG 模板可见性。 即使启用 “绕过嵌入和检索”，RAG 模板编辑器现在也会在管理员文档设置中保持可见，因为该模式下模板仍然适用于文档内容。 #26126, 提交记录
  • 🧬 编辑派生模型。 编辑工作区模型现在不再清除其基础模型，包括当该基础模型是预设或模型本身时。 提交记录, 提交记录

更新内容 （原始）

Added

  • 💭 Streamed reasoning display. Models that emit thinking or reasoning now show that content as it streams, and it renders correctly in the chat overview and in exported conversations. Commit, Commit, Commit, Commit
  • 🗂️ Folder uploads to knowledge bases. Dragging a folder into a knowledge base, or syncing one, now recreates its subfolder structure instead of flattening everything into loose files. #26130, Commit
  • 🧠 Memory system context toggle. Administrators can now keep memory tools available while choosing not to add stored memories to the system context, using the new ‘Memory System Context’ toggle in admin settings. Commit
  • 🧹 Tidier automatic memories. Automatically saved memories now focus on enduring details like preferences and goals and skip one-off things like meals, routine events, or passing mood unless you ask to remember them. Commit
  • 🎙️ Speech-to-text request format. OpenAI-compatible speech-to-text can now send audio as either a multipart upload or base64 JSON, selectable in admin audio settings. Commit
  • 🧰 API configs via environment. Administrators can now set per-connection Ollama and OpenAI API configurations through the “OLLAMA_API_CONFIGS” and “OPENAI_API_CONFIGS” environment variables. Commit
  • 📡 Provider failure events. Failed Ollama and OpenAI-compatible provider requests now emit a structured event describing the error type, provider, and status, giving administrators clearer visibility into upstream failures. Commit
  • 🏟️ Arena models via environment. Administrators can now define evaluation arena models through the “EVALUATION_ARENA_MODELS” environment variable. #26174
  • ♿ Clearer high-contrast sidebar selection. With high-contrast mode enabled, the currently selected chat in the sidebar now stands out with stronger colors, making it easier to tell which chat is active. #26469, Commit
  • 🔄 General improvements. Various improvements were implemented across the application to enhance performance, stability, and security.
  • 🌐 Translation updates. Translations for Thai, Portuguese (Brazil), Catalan, and Spanish were enhanced and expanded.

Fixed

  • 🛡️ Security Advisory: This release includes security and access-control fixes. We recommend updating production deployments at your earliest convenience. Not all security fixes in this version may be enumerated in the fixed section — some may be withheld for a short time to give administrators time to upgrade. Advisories
  • 🔐 Fewer unexpected logouts. A single request returning an authorization error no longer signs you out while your session is still valid, since the app now confirms the session status before redirecting to login. Commit
  • 🔒 Web search domain filtering. Domain allow and block rules for web search results are now matched against the host, closing a gap where some URLs could slip past the filter. Commit
  • 🕵️ Image prompt log privacy. Image generation workflows are no longer written to server logs at the default log level, keeping user-authored prompt content out of operator-visible logs. #26400, Commit
  • 🗄️ Safer database upgrades. Upgrading an existing SQLite database no longer crashes during the user-table migration or corrupts saved user settings, resolving failures that could block startup or break login after an upgrade. #26403, Commit
  • ⚙️ Saving settings as a non-admin. Non-admin users can once again save their interface settings, such as the default model and theme, which previously failed with a server error while the interface incorrectly reported success. #26627, Commit
  • 🕒 Sidebar chat timestamps. Chats in the sidebar now show when they were last active instead of when they were created, so the time label matches their position in the list and refreshes after each new message. #26454, #26451
  • 🎯 Default model after refresh. Your selected model is no longer cleared when you reload the page, as model selection now waits for the model list to finish loading. Commit
  • ⏳ Tool dialogs no longer hang. Dismissing a tool or function input dialog by clicking outside it now cancels the pending request instead of leaving the chat spinning indefinitely. #26417, Commit
  • 🐍 Reliable code execution loading. Running Python code in chat now loads its runtime reliably, fixing sandbox startup failures that broke code execution and the Pyodide file viewer in recent releases. #26625, #26390
  • 🤖 Models with null capabilities. Chatting with a model whose capabilities are unset no longer fails with an error when the memory feature or automations are involved. #26412, Commit, Commit
  • 🔎 Searchable responses. Chat search again finds assistant messages whose text is stored as structured output, which were previously skipped. #26405
  • 🔔 Chat notification previews. Background chat completion notifications and toasts now show a clean response preview instead of appearing blank for messages stored as structured output. Commit
  • 💾 Banner and config startup. Setting configuration such as “WEBUI_BANNERS” no longer causes a startup failure, since admin configuration values are now stored correctly regardless of their data type. #26431, Commit
  • 📑 RAG Template visibility. The RAG Template editor now stays visible in admin document settings even when Bypass Embedding and Retrieval is enabled, since the template still applies to document content in that mode. #26126, Commit
  • 🧬 Editing derived models. Editing a workspace model no longer clears its base model, including when that base is a preset or the model itself. Commit, Commit

下载链接