docs: continue 0.12.4 changelog (#33157)

* docs: highlight the key points of the security advisory notice

* docs: move per-setting Chat Controls saving to Added

* docs: move accurate upload status to Added

* docs: drop dependency bump entries from Changed

* docs: changelog for faster analytics dashboard

CHANGELOG.md

@@ -16,11 +16,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - 🗨️ **New chat from folders.** A folder's menu in the sidebar now has a New Chat item that starts a chat in that folder. [Commit](https://github.com/open-webui/open-webui/commit/0512f1b3763ea4e15b5adc25d087c96f728fa25e)
 - 🪪 **Profile cards across the workspace.** Owner names in the workspace lists of models, knowledge, prompts, skills and tools and in admin Functions, people in access settings and member pickers, authors in version history and people in the Analytics user list now open the person's profile card on hover instead of an email tooltip, and the workspace lists show the owner's profile picture next to the name. [Commit](https://github.com/open-webui/open-webui/commit/02974f41e9b7c9d34f2cd7c664c2a04fd6ac12ae), [Commit](https://github.com/open-webui/open-webui/commit/72cc79b8f336a753b6e75e0f3415630601b14759), [Commit](https://github.com/open-webui/open-webui/commit/ba34b1c47c1d054d2f9c498d0aed862ec06da41a), [Commit](https://github.com/open-webui/open-webui/commit/4491e60a296c89b11f22a43f416ea04770fd687f), [Commit](https://github.com/open-webui/open-webui/commit/0de8d03c625739ed3fe5e5f2a33de79a760238bd)
 - 🔢 **Turn count in chat previews.** The preview shown when hovering a chat in the sidebar now shows how many user and assistant turns its current branch has. [Commit](https://github.com/open-webui/open-webui/commit/b5046f9d8686e18450a200dccda181f2ac7f97c9)
+- 🎚️ **Chat Controls saved per setting.** Each change in a chat's Controls, such as its system prompt or a parameter, is now saved on its own, so the same chat open in another tab or on another device no longer overwrites it with an older copy. [Commit](https://github.com/open-webui/open-webui/commit/b4a58be193031827f2fc19b943646136d1e43575), [#32755](https://github.com/open-webui/open-webui/issues/32755)
 - ✍️ **Note edits by text.** The model can now edit a note by finding and replacing exact text instead of only by character offsets, picking one match or all of them and getting the positions and surrounding text back when a match is ambiguous. [Commit](https://github.com/open-webui/open-webui/commit/243ef36c496714d9dd855de9fd261daa43caddb9), [#32752](https://github.com/open-webui/open-webui/issues/32752)
 - 🖱️ **Clickable setting labels.** Clicking the label of a switch or other control across user and admin settings, including advanced parameters, connections and notifications, now toggles or focuses it, and the label highlights while the row is hovered or focused, so the right switch is easier to find. [Commit](https://github.com/open-webui/open-webui/commit/33e4c5f514d57ca8f654c1015dfb32774b833db6), [Commit](https://github.com/open-webui/open-webui/commit/131ddc32ecaeb06f9aa8740ff004710bacef72e0), [Commit](https://github.com/open-webui/open-webui/commit/b93b81246817b651bb47bb1f5e453503649d30d0), [#32768](https://github.com/open-webui/open-webui/issues/32768), [#32900](https://github.com/open-webui/open-webui/issues/32900)
 - ☑️ **Select several sidebar chats.** Shift-clicking a chat in the sidebar starts a selection that more clicks or a shift-click range extend, and the selected chats can then be archived or, with the delete permission, deleted together, while Escape clears the selection. [Commit](https://github.com/open-webui/open-webui/commit/acc231774d00d8856feefd2e7a3ef4b503a8224e), [#32543](https://github.com/open-webui/open-webui/issues/32543)
 - 🫲 **Swipe open Chat Controls.** On a phone, swiping left across a chat now pulls in the Chat Controls panel, which follows your finger like the sidebar does and closes again with a swipe to the right. [Commit](https://github.com/open-webui/open-webui/commit/f83f9f40b3513acc82f53696aaf78a2c5d251e70)
 - 🗃️ **Bulk file management.** Manage Files now lets you select several files or all files matching a search, delete them with progress and a stop button or download them together as one zip archive. [Commit](https://github.com/open-webui/open-webui/commit/2a86805648f45c36c479c6f9a0127cae799ee14f)
+- 📥 **Accurate upload status.** A file uploaded to a knowledge base or a chat now only shows as processed once its content is indexed and, for a knowledge base, linked to it, so it no longer shows as done while that work is still running. [Commit](https://github.com/open-webui/open-webui/commit/f5e8f84e69d0f4224cc27cabd4f8d2c441d4d58c), [#32803](https://github.com/open-webui/open-webui/issues/32803)
 - 📈 **Analytics by tokens.** The Admin Analytics dashboard now charts and ranks models and users by tokens by default with a switch back to messages, its usage chart offers a volume view, an activity heatmap, a single model view and a comparison with the previous period, and it uses finer time steps for shorter ranges and adds Year to date and Last 12 months ranges. [Commit](https://github.com/open-webui/open-webui/commit/131ddc32ecaeb06f9aa8740ff004710bacef72e0), [Commit](https://github.com/open-webui/open-webui/commit/06c17834ee3168b922f1b8a935b9dd76884b8fda), [Commit](https://github.com/open-webui/open-webui/commit/dc2ac86060e583f7374dd86f32f374a0b956bb8b), [Commit](https://github.com/open-webui/open-webui/commit/3539ad63213d13865a87a4db64a9829fd7d3b1b4), [Commit](https://github.com/open-webui/open-webui/commit/08bfaa4be67f6f87878b2209d568a648818506a7), [Commit](https://github.com/open-webui/open-webui/commit/06c382e5d223ba1b35dc0b1306c71da489c632b0)
 - 🗂️ **File browser grid view.** The terminal file browser can now switch between a list and a grid view from its menu, and hovering a file or folder shows a preview of the file or of the folder's contents, for files up to 20 MB. [Commit](https://github.com/open-webui/open-webui/commit/a76c02e58ec81621cf3c6ca38eb0d09eccee694f)
 - 📁 **Create inside folders.** A folder's menu in the terminal file browser now has New File and New Folder items that create the file or folder inside that folder. [Commit](https://github.com/open-webui/open-webui/commit/b6b0fff5d6af2fefb84f8858244adeef50462aac), [Commit](https://github.com/open-webui/open-webui/commit/fbeee59e99f47c9ff4fb0f114f78eb9dc85f2967)
@@ -34,13 +36,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - 👪 **Faster group saves.** Saving a group, changing its members or changing its permissions now finishes in well under a second with thousands of users online, where it took several seconds. [#32883](https://github.com/open-webui/open-webui/pull/32883), [#32882](https://github.com/open-webui/open-webui/pull/32882), [Commit](https://github.com/open-webui/open-webui/commit/b7d1de05ab91150726d83ae427f320a014ddeeec), [Commit](https://github.com/open-webui/open-webui/commit/bae611e785df5feabf712ab8c8684a78bf90ec96)
 - 🧳 **Faster folder changes.** Renaming, sharing, moving or deleting a folder and deleting all chats now finish quickly with thousands of users online, where each took several seconds and reloaded the open chat of everyone online. [#32888](https://github.com/open-webui/open-webui/pull/32888), [Commit](https://github.com/open-webui/open-webui/commit/e1e31973f0bfd04dc4195c896eff3476678d2005)
 - 📣 **Faster channel posts.** Posting a message in a channel with many members online now returns in a fraction of a second, where it waited for every online member's login to be checked again first. [#32889](https://github.com/open-webui/open-webui/pull/32889), [Commit](https://github.com/open-webui/open-webui/commit/a9adb2b78ebccdd51543a47c285309e9b016a71c)
+- 📊 **Faster analytics dashboard.** The Admin Analytics dashboard now gets its totals, model and user lists and daily charts from fewer and lighter database queries, so it opens faster on instances with many messages. [Commit](https://github.com/open-webui/open-webui/commit/97650bbbea43b98c1c403bf74b08736e9ad522d7)
 - ♿ **Improved UI accessibility.** Screen reader users now hear the Send button, the sidebar's user menu button by the name it shows, Playground's role button by the word it shows, the model editor's Description, Tools, Skills, Filters and Actions rows by what they show, a sidebar folder's options button, the sidebar button on Calendar, Notes, Channels and Home, the on/off switches on Skills, Functions and Automations rows, the suggested prompts on a new chat as buttons, Archived Chats and the Evaluations leaderboard as tables with the sort order on their column headers, chat input pills and menus, copy, export, merge and artifact buttons, clear search and Cancel buttons, the note editor's Undo, Redo, Record and Note Menu buttons, Playground's System Instructions button and model selects, the code box in the tool and function editors, switches, icon buttons, selects and number inputs in Admin Settings, the Create knowledge base, Create Prompt and Clone Prompt dialogs and the close button of 22 dialogs by name, together with a source's number, the number on a channel's member count button, the choice a Visibility button shows, a resizable panel's width, how long ago each sidebar chat was updated, the info button under a reply with its usage figures, a model's description, notifications such as copy confirmations (copying a prompt in Workspace included), when a reply starts and finishes, call mode's Listening and Thinking status, menu buttons as menus with their open state, the selected search content type, how many archived chats a search found, how many models match a search in the model picker, the Settings window by name, the sidebar folder toggle by name with its open state, the chosen option in Select dropdowns, the search window's list by its visible caption, a heading on each Workspace page, the sidebar section titles and chat date groups as headings, the sidebar's models, folders and chats as lists, the Settings tabs as Personal and Admin tab lists that point to their panels, the items of the input and integrations menus as menu items, the Keyboard tab's shortcut categories as headings with a list under each, the chat input as a text field, branding images by the instance name, the model logos on a new chat by model name (hidden when only one model is selected), the model the arrow keys are on in the model picker, the model name and the Suggested label on a new chat as headings, the suggestion list by name and the chat title as the page heading, and no longer hear an open or closed state on the area around the sidebar button on phones, while keyboard users get model selector buttons that show on focus, filter lists that move focus to their options when opened, tooltips that show on focus and close with Escape, Escape in the model picker's More menu or filter list that closes only that list, focus that returns to the model picker button when the picker closes with Accessibility Mode on, an outline on the model picker row the arrow keys are on, focus that moves to the other sidebar button when the sidebar opens or closes, arrow keys that move through the input, integrations, user, chat and Terminal menus, a Terminal menu that opens on its first terminal instead of the Add Terminal button, a Tab key that reaches the note editor's Record and Note Menu buttons, Evaluations leaderboard columns they can sort and models they can open from it, focus that stays on a Workspace section link after choosing it, focus that stays in the Archived Chats list after unarchiving a chat, focus on the recording bar when dictation starts and a Skip to main content link that moves focus into the chat, notification text in the light theme and the text in Archived Chats now meet the 4.5:1 contrast minimum, buttons in the collapsed sidebar, on sidebar folders, on Prompts, Skills, Functions and Automations rows, on Workspace and Notes list rows, on attached files and in the Integrations menu are no longer nested inside other buttons, the Archived Chats and Keyboard lists stay usable at 400% zoom, the model picker no longer gets empty space below its list from model descriptions meant for screen readers, and with Accessibility Mode on pinch zoom works on phones, the active Workspace section is underlined, code editor placeholders, the model editor's JSON Preview row and Calendar's days from other months and today's date meet the contrast minimum, and the More and Eject buttons and Set as default in the model picker, the version link and See what's new in Settings > About, the sidebar's Chat Menu button, the Note Menu and Delete buttons in Notes, the More button on file rows, the Create button's menu arrow, Calendar's previous and next month buttons and the name, ID and command fields in the model and prompt editors are at least 24 pixels in size.
 - 🔄 **General improvements.** Various improvements were implemented across the application to enhance performance, stability, and security.
 - 🌐 **Translation updates.** Translations for Korean, Cebuano, Thai, German, Japanese, Vietnamese, Urdu, Bengali, Hungarian, Tibetan, Turkmen, Lithuanian, Danish, Basque, Irish, Slovenian, Estonian, Croatian, Faroese, Georgian, Portuguese (Brazil), Spanish (Spain), Hindi, Finnish, Kabyle, Galician, Uyghur, Slovak, Norwegian Bokmål, Serbian, Ukrainian, Polish, Turkish, Bosnian, Dutch, Czech, Bulgarian, Hebrew, Punjabi, Swedish, Romanian, Persian, Greek, Malay, Latvian, Azerbaijani, Indonesian, Tamil, Filipino, French (France), French (Canada) and Russian were enhanced and expanded.
 
 ### Fixed
 
-- 🛡️ **Security Advisory**: This release contains security fixes. We strongly recommend updating all deployments as soon as possible to have the latest security fixes in place. These fixes are not listed in this changelog; we will publish the security advisories for them immediately following CVE assignment. [Advisories](https://github.com/open-webui/open-webui/security)
+- 🛡️ **Security Advisory**: This release contains **security fixes**. We **strongly recommend updating** all deployments **as soon as possible** to have the latest security fixes in place. These fixes are **not listed in this changelog**; we will publish the security advisories for them immediately following CVE assignment. [Advisories](https://github.com/open-webui/open-webui/security)
 - 📤 **Chat export permission respected.** The Export item of a folder in the sidebar, the Export option in Archived Chats and the Copy option in the chat menu are now hidden from users without the Allow Chat Export permission, like the export options of single chats. [#32703](https://github.com/open-webui/open-webui/pull/32703), [Commit](https://github.com/open-webui/open-webui/commit/a21335bdd44892a804d74614567b2c64a19e0a11), [#32702](https://github.com/open-webui/open-webui/issues/32702), [#32684](https://github.com/open-webui/open-webui/pull/32684), [Commit](https://github.com/open-webui/open-webui/commit/c9936e81ecb8d50187a9c31d2952353da2b538c8), [#32683](https://github.com/open-webui/open-webui/issues/32683), [#32960](https://github.com/open-webui/open-webui/pull/32960), [Commit](https://github.com/open-webui/open-webui/commit/b17ee7d83925c87688f308e4599dbd320a017fe4)
 - 🔏 **Access button respects sharing.** The Access button and menu entry of models, prompts, tools, knowledge, skills and notes and the Access button in folder settings are now hidden from users without the matching sharing permission, where the dialog had nothing they could change. [#32979](https://github.com/open-webui/open-webui/pull/32979), [Commit](https://github.com/open-webui/open-webui/commit/ac12b04aada033117f9f7e8ee4fb9562c7d5a417), [#32830](https://github.com/open-webui/open-webui/issues/32830)
 - 🎛️ **Pipe Valves permission respected.** The Valves button of a pipe model in the chat input is now hidden from users without the Allow Chat Valves permission. [#32772](https://github.com/open-webui/open-webui/pull/32772), [Commit](https://github.com/open-webui/open-webui/commit/46cdd70d7be82bbc25952a37fd6f647d7ea627cc), [#32771](https://github.com/open-webui/open-webui/issues/32771)
@@ -97,10 +100,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - 🩺 **Readable MCP tool errors.** When an MCP tool returns an error, the model now gets the server's error text as written instead of an unreadable dump of the whole result, so it can correct the call where it tended to retry the same broken one. [#32942](https://github.com/open-webui/open-webui/pull/32942), [Commit](https://github.com/open-webui/open-webui/commit/37af63b6496d545f6f2d4e8067ea01de209e218b), [#32918](https://github.com/open-webui/open-webui/issues/32918)
 - 📞 **Ended Realtime calls named correctly.** When the voice provider ends a Realtime call, the call now shows "Voice provider connection closed" instead of sometimes showing "Voice connection failed". [#32730](https://github.com/open-webui/open-webui/pull/32730), [Commit](https://github.com/open-webui/open-webui/commit/cd74e6d1266c5a623f9c143d7efa6cb4d6f3f0c9), [#32729](https://github.com/open-webui/open-webui/issues/32729)
 - 🗜️ **Compaction in more chats.** Context compaction now also runs in temporary chats and on a chat with only a few messages that is over the threshold, such as one question with a reply full of tool output, where the follow-up and any regenerate or edit of it failed with a context length error. [#32794](https://github.com/open-webui/open-webui/pull/32794), [Commit](https://github.com/open-webui/open-webui/commit/56eca192ab7d98dd9d1a9811e4452dc32145848d), [#32781](https://github.com/open-webui/open-webui/issues/32781), [Commit](https://github.com/open-webui/open-webui/commit/d5cd7f4907f9a6832dc5b52520a1381ef50a663c), [#32600](https://github.com/open-webui/open-webui/issues/32600)
-- 🎚️ **Chat Controls saves.** A change in a chat's Controls, such as its system prompt or a parameter, is now saved on its own, so it no longer overwrites settings changed elsewhere with an older copy. [Commit](https://github.com/open-webui/open-webui/commit/b4a58be193031827f2fc19b943646136d1e43575), [#32755](https://github.com/open-webui/open-webui/issues/32755)
 - 🧭 **Scrolling while a reply streams.** A streaming reply now keeps the view at the bottom as its content grows, and scrolling up while it streams is no longer pulled back down. [Commit](https://github.com/open-webui/open-webui/commit/5a46aad0f0702536c98c9a26ae7d04482cdac784), [#32728](https://github.com/open-webui/open-webui/issues/32728)
 - ⚡ **Early updates in new chats.** Updates that reach a new chat's first reply before the chat is fully created, and live updates that arrive while a chat is still loading, are no longer lost, and a message queued during the first reply of a new chat is sent once that reply finishes. [Commit](https://github.com/open-webui/open-webui/commit/cbd06d2aad0d64c2a50b4989c4290762de2cd3f0), [Commit](https://github.com/open-webui/open-webui/commit/d5038fec44d2f37e81798a6c7f4340a8d1a62f10), [#32550](https://github.com/open-webui/open-webui/issues/32550), [#32761](https://github.com/open-webui/open-webui/issues/32761)
-- 📥 **Accurate upload status.** A file uploaded to a knowledge base or a chat is now only shown as processed once its content is indexed and, for a knowledge base, linked to it, where it could show as done while that work was still running. [Commit](https://github.com/open-webui/open-webui/commit/f5e8f84e69d0f4224cc27cabd4f8d2c441d4d58c), [#32803](https://github.com/open-webui/open-webui/issues/32803)
 - 🧮 **Knowledge uploads listed at once.** Files selected or dropped together into a knowledge base now all show as Uploading right away in upload order, where only the first one had a row and the others stayed hidden until the one before them had finished processing. [#32992](https://github.com/open-webui/open-webui/pull/32992), [Commit](https://github.com/open-webui/open-webui/commit/0c684208bbc6e28e31995c0c4788429b38048db0)
 - ⏳ **Knowledge files show Processing.** A file added to a knowledge base now switches from Uploading to Processing once it reaches the server, and the list updates on its own until the file is ready, where it said Uploading during the whole text extraction until you left and reopened the knowledge base. [#32982](https://github.com/open-webui/open-webui/pull/32982), [Commit](https://github.com/open-webui/open-webui/commit/0a568f6a813d49ca6e7797c7940647782e44ad48)
 - 🧠 **Reasoning replay with Azure.** Follow-up requests to reasoning models through the Responses API now leave out the fields Azure rejects on earlier reasoning steps, such as their status. [Commit](https://github.com/open-webui/open-webui/commit/d1705c10788242b4d1a49042318a577877042469), [#32805](https://github.com/open-webui/open-webui/issues/32805)
@@ -132,12 +133,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - 🤝 **Sharing permissions enforced everywhere.** Sharing permissions such as Models Sharing, Knowledge Sharing and Folders Sharing now also apply to sharing through the API, and a sharing change a user is not allowed to make is now refused with an error instead of being quietly left out. [Commit](https://github.com/open-webui/open-webui/commit/5f95008abdfbbbfbe5c080de0347deb70eb507b6)
 - 🔀 **Sharing changed only in Access.** Saving a model, prompt, tool, skill, knowledge base, note, channel or calendar no longer changes who it is shared with, which is now changed only in the item's Access settings, saved right away in the model editor, channel settings and external knowledge sources, or through the access endpoints that channels and calendars now also have. [Commit](https://github.com/open-webui/open-webui/commit/5f95008abdfbbbfbe5c080de0347deb70eb507b6), [Commit](https://github.com/open-webui/open-webui/commit/c7e34e0fa9bdd34f798ab197e1e21aca2234ed2b)
 - 🐳 **Python 3.12 Docker image.** The Docker image now runs Python 3.12 on Debian 13 instead of Python 3.11 on Debian 12, so custom functions, tools and packages installed with pip inside the container need versions that support Python 3.12. [#32861](https://github.com/open-webui/open-webui/pull/32861), [Commit](https://github.com/open-webui/open-webui/commit/a915df8ce12b32109b7b929cb2cad6046293aef6)
-- 📦 **DOMPurify updated to 3.4.17.** The DOMPurify library that removes unsafe HTML before content is shown was updated from 3.4.11 to 3.4.17. [#32863](https://github.com/open-webui/open-webui/pull/32863), [Commit](https://github.com/open-webui/open-webui/commit/61653e9697e667ebf4443bf7451b49306fd9fb18)
-- 📦 **Uvicorn updated to 0.54.0.** The Uvicorn web server was updated from 0.51.0 to 0.54.0, whose new features are all opt-in, so Open WebUI starts it with the same settings and admins need no action. [#33006](https://github.com/open-webui/open-webui/pull/33006), [Commit](https://github.com/open-webui/open-webui/commit/1a0628a84162f19750f580ebb8a4dd2cf13e653c)
-- 📶 **aiohttp updated to 3.14.5.** The aiohttp library Open WebUI uses for outgoing connections was updated to 3.14.5, which no longer sends Secure cookies over plain HTTP, no longer reuses a connection after a cancelled upload and fixes a memory leak on websocket connections to upstream servers. [#33074](https://github.com/open-webui/open-webui/pull/33074), [Commit](https://github.com/open-webui/open-webui/commit/a6cf0b23abb197440e599235611ea31e571c5e6d)
-- 🖼️ **Pillow updated to 13.** The Pillow image library behind image uploads, image editing and PDF image reading was updated to 13.0.0 with fixes for crafted image files, and images are handled the same as before. [#33077](https://github.com/open-webui/open-webui/pull/33077), [Commit](https://github.com/open-webui/open-webui/commit/4bf37fd66132757902bcb02891661988324640a9)
-- 📄 **pypdf updated to 6.21.2.** The pypdf library was updated from 6.7.5 to 6.21.2 with fixes for malformed PDFs that could hang the server or use up its memory during upload, and because some line breaks inside text now come out as spaces, a re-uploaded PDF can be split into slightly different chunks with the same words. [#33078](https://github.com/open-webui/open-webui/pull/33078), [Commit](https://github.com/open-webui/open-webui/commit/7d488073ea6c51d359623a4c04194c555adb5fd1)
-- 🧯 **Brotli updated to 1.2.1.** The Brotli libraries that unpack compressed responses from model providers, tool servers and web pages were updated to Brotli 1.2.1 and brotlicffi 1.2.1.0, which fix a flaw in the decoder that a crafted response could trigger. [#33073](https://github.com/open-webui/open-webui/pull/33073), [Commit](https://github.com/open-webui/open-webui/commit/12585a3851610b47b85b18b729c66172ef25e2ce)
 - 🔧 **Direct Integrations off disables connections.** While Direct Integrations is turned off, the tool servers and Open Terminal connections that users and admins saved in their Integrations settings are no longer used in chats, where turning it off only hid the settings tab, and the saved connections apply again once it is turned back on. [#32996](https://github.com/open-webui/open-webui/pull/32996), [Commit](https://github.com/open-webui/open-webui/commit/3e9d6cb9508a1ba4ec18017b3c80afaf6ac59a89)
 
 ## [0.12.3] - 2026-10-16