Release 0.7.0

What's Changed

✨ New Features

• feat: docling ingest vlms by @edwinjosechittilappilly in #1841
• feat: Migrate CPD to Universal Token by @edwinjosechittilappilly in #2113
• feat: bulk loader by @phact in #2128
• feat: add skill to run local setup by @mfortman11 in #2082
• feat: add identity call by @mfortman11 in #2151
• feat: langflow 1.11.1 upgrade by @lucaseduoli in #2131
• feat: Improve SDK integration test coverage (Python + TypeScript) by @edwinjosechittilappilly in #2153
• feat: add upgrade flows functionality by @lucaseduoli in #2149
• feat: Knowledge table optimization (#2202) by @jason-dong03 in #2203
• feat: make functional and up to date models available in the list by @Wallgau in #2164
• feat: ship ingest review UI with settings, Docling preview, and chunk search by @Wallgau in #2115
• feat: New multi chat deletion feature by @Vchen7629 in #2208
• feat: expose GET /v1/files on public API surface with SDK support and case-insensitive filename search fix by @jason-dong03 in #2215
• feat: v2 public facing endpoint by @jason-dong03 in #2223
• feat: public file listing on v2 endpoint with SDK and MCP support by @jason-dong03 in #2251
• feat: Knowledge table filtering by @jason-dong03 in #2242
• feat: openrag status page by @hunterxtang in #2219
• feat: Support FE Prometheus metrics by @mfortman11 in #2249

🐛 Bug Fixes

• fix: upgrade go version by @gnPy in #2129
• fix: add ppc64le build and dev server support for frontend by @ethanchoe-2 in #2101
• fix: Unable to access Frontend app on Ubuntu Linux (x86_64) by @mpawlow in #2141
• fix: fixed tui service status to now properly show container status instead of missing by @Vchen7629 in #2139
• fix: remove tenant id from docling component by @lucaseduoli in #2135
• fix: surface provider errors in chat instead of generic connection failures by @Wallgau in #2127
• fix: removed invalid docker/podman exec flag causing make health to not work for backend container by @Vchen7629 in #2154
• fix: replaced deprecated regex with pattern in Query field by @Vchen7629 in #2116
• fix: add clickable citations in onboarding by @lucaseduoli in #2156
• fix: Unable to access Frontend app on Ubuntu Linux (x86_64) by @mpawlow in #2162
• fix: pin fastapi to version without errors by @lucaseduoli in #2163
• fix: provide real error for onboarding apiKey setup and settings by @Wallgau in #2152
• fix: pin fastapi-pagination version by @mfortman11 in #2169
• fix: support images in non langflow ingestion by @mfortman11 in #2172
• fix: security: fence retrieved/uploaded text as untrusted data (VULN-13906 1/4) by @edwinjosechittilappilly in #2144
• fix: overflows setup apiKey in settings by @Wallgau in #2175
• fix: gate fetch latest docs by permission by @edwinjosechittilappilly in #2185
• fix: resolve embedding-model fallbacks from deployment env, never guess (backport of #2191) by @edwinjosechittilappilly in #2192
• fix: properly redirect after oauth signin by @mfortman11 in #2194
• fix: updated pdf password protected docling parsing error message with more actionable message by @Vchen7629 in #2200
• fix: cli no longer reports all services started even if docling-serve fails to start by @Vchen7629 in #2173
• fix: disable custom components in Langflow by @lucaseduoli in #1564
• fix: removed node ID tweaks in favor of display name tweaks by @lucaseduoli in #2211
• fix: add better citation prompt, add upgrade prompt functionality by @lucaseduoli in #2216
• fix: light text input color and buttons in dialog by @Wallgau in #2227
• fix: onboarding progress bar is centered again by @Vchen7629 in #2238
• fix: add env to set opensearch pool maxsize by @lucaseduoli in #2218
• fix: upgrade node image by @mfortman11 in #2243
• fix: add openai retry and check by @lucaseduoli in #2247
• fix: openAI provider alignement by @Wallgau in #2240
• fix: confirmation dialog by @Wallgau in #2255
• fix: align buttons padding color by @Wallgau in #2257
• fix: CORS misconfiguration: replace wildcard Access-Control-Allow-Origin with explicit origin allowlist by @mfortman11 in #2253
• fix: patch CVEs by @gnPy in #2269
• fix: Code review for status page (#2276) by @Wallgau in #2288
• fix: bump mcp to fix CVE-2026-52869, CVE-2026-52870, CVE-2026-59950 (… by @VisveshJ in #2296
• fix: ensure openrag version on cli by @lucaseduoli in #2298
• fix: remove setting the documents path on startup, set default langflow superuser by @lucaseduoli in #2299

📝 Documentation Updates

• docs: document container image and registry configuration by @kamrynschock in #2186

🛠 Maintenance Tasks

• refactor: Connector sync improvements by @mfortman11 in #2103
• refactor: update design for vlm advanced settings by @mfortman11 in #2159
• refactor: Filter panel improvements by @mfortman11 in #2167
• refactor: add run mode enum controls by @mfortman11 in #2204

Others

• chore: Remove platform authentication by @edwinjosechittilappilly in #2136
• Update next,postcss and sharp in frontend/package.json to address CVEs by @jcho02 in #2158
• chore: Update CONTRIBUTING.md by @edwinjosechittilappilly in #2226
• chore: Check required envs for make dev cmds by @mfortman11 in #2221
• chore: Add SDK tests for filename search filtering by @edwinjosechittilappilly in #2256
• chore(sdk): bump openrag-sdk version to 0.7.0.dev1 for PyPI prerelease by @VisveshJ in #2297

New Contributors

• @ethanchoe-2 made their first contribution in #2101
• @jcho02 made their first contribution in #2158
• @kamrynschock made their first contribution in #2186

Full Changelog: v0.6.0...v0.7.0