0.6.0

OpenGateLLM 0.6.0 completes the RAG split (removal of leftover Postgres tables) and adds SSO authentication via OAuth2 Proxy for the Playground.

Breaking changes

• Remove leftover RAG Postgres tables (collection, document, role.storage_limit) — Alembic migration included; run only after migrating data to OpenGateRAG (#1007). We define the migration process in the dedicated ADR.

Features

• SSO (Single Sign-On) — OIDC login/logout via OAuth2 Proxy in the Playground, automatic user creation on first login, email/role/org sync on each login, POST /v1/auth/sso/login and logout endpoints (#986, #1006). Documentation: https://docs.opengatellm.org/features/users_management/sso/

Refactoring

• Replace ModelProviderGateway with ProviderCapabilitiesRepository in the provider domain — simplifies provider capability probing (#972).
• Migrate POST /v1/ocr to clean architecture (aligned with /v1/rerank and /v1/embeddings), factor shared use case base for the three forwarding endpoints (#984).

Bug fix

• Fix Langfuse logging for non-streamed requests; add missing metadata on the root observation on failure (#987).
• Prefer 0.0 over None for environmental impact metrics (kWh, kgCO2eq) — consistent API and usage table reads (#990).
• Fix adding an Albert provider with an alias (#991).

Playground

• Migrate auth form to a Reflex form component — fixes password manager autocomplete (KeePass, etc.) filling fields without submitting the form (#981).

Full Changelog: 0.5.0...0.6.0

• refacto(admin): Remove ModelProviderGateway by @bakr-a in #972
• fix(monitoring): Log non-stream requests in langfuse by @cyrillay in #987
• fix: prefer 0.0 over None for environmental impacts by @leoguillaume in #990
• chore(deps): bump postcss from 8.5.12 to 8.5.25 in /docs by @dependabot[bot] in #992
• fix: albert provider can be add with alias by @leoguillaume in #991
• fix(playground): use Reflex form for auth form in playground by @kevin-tournie in #981
• refacto(models): refacto post /v1/ocr endpoint toward clean architecture by @benjaminpilia in #984
• chore(deps): bump js-yaml from 4.1.1 to 4.3.1 in /docs by @dependabot[bot] in #1004
• chore(deps): bump undici from 7.27.2 to 7.29.0 in /docs by @dependabot[bot] in #1002
• feat(auth): support SSO login / logout with oauth2-proxy by @leoguillaume in #986
• feat: change playground access denied url and convert sso client secr… by @leoguillaume in #1006
• feat: remove RAG postgres tables by @leoguillaume in #1007

New Contributors

• @kevin-tournie made their first contribution in #981