Release 0.7.1

What's Changed

✨ New Features

• feat: create Carbonesque theme for SaaS by @mfortman11 in #1076
• feat: Hide ollama components in cloud by @mfortman11 in #1084
• feat: IBM ams proxy based login by @edwinjosechittilappilly in #1169
• feat: communicate file not supported in folder error to the user by @Wallgau in #1278
• feat: Saas redirect for Langflow and logout by @mfortman11 in #1293
• feat: Add logging and async/timeout handling for Drive by @edwinjosechittilappilly in #1295
• feat: Enable Postgres deployment and switch to Env defined in .env file by @rodageve in #1251
• feat: Add Carbon esque theme by @mfortman11 in #1227
• feat: toggle off api key generation for mcp in SaaS by @mfortman11 in #1324
• feat: upgraded Langflow version to 1.9.0, upgraded Docling version by @lucaseduoli in #1355
• feat: Update sdk for SaaS env handling by @mfortman11 in #1364
• feat: MCP SaaS updates for new headers by @mfortman11 in #1365
• feat: Display version in the UI by @mfortman11 in #1386
• feat(backend): Re-implement support for the JWT_SIGNING_KEY environment variable for auth... by @mpawlow in #1385
• feat: add smoke tests for onboarding by @lucaseduoli in #1110
• feat: Integrate FastMCP streamable HTTP server by @edwinjosechittilappilly in #1396
• feat: updated langflow to 1.9 by @lucaseduoli in #1405
• feat: Release branch parity by @mfortman11 in #1433
• feat: Add tenacity retry and streamable HTTP conversion for lanngflow MCP by @edwinjosechittilappilly in #1421
• feat: kubernetes operator by @zzzming in #1448
• feat: operator docker image build by @zzzming in #1452
• feat: Unify logging and add request middleware by @edwinjosechittilappilly in #1455
• feat: Agent skills for OpenRAG installation and SDK support by @mfortman11 in #1427
• feat: Add Segment Tracking by @mfortman11 in #1506
• feat: Operator config and new domain name by @zzzming in #1509
• feat: operator pvc mount by @zzzming in #1513
• feat: operator env source order by @zzzming in #1515
• feat: operator langflow and openrag secret management by @zzzming in #1517
• feat: sort env to avoid unneccesary hash generation by @zzzming in #1522
• feat: Integrate CodeRabbit AI tooling into the Pull Request code revi… by @mpawlow in #1525
• feat: operator pod security context and openshift fsgroup by @zzzming in #1530
• feat: operator helm by @zzzming in #1535
• feat: operator dockhub publish by @zzzming in #1537
• feat: Integrate CodeRabbit AI tooling into the Pull Request code revi… by @mpawlow in #1541
• feat: component and pod level annotation and labels by @zzzming in #1546
• feat: process documents directly on Backend and passing task id to Langflow by @lucaseduoli in #1526
• feat: Revert "feat: operator dockhub publish" by @zzzming in #1549
• feat: Disable use of private / public keys when IBM_AUTH_ENABLED is true by @mpawlow in #1410
• feat: RBAC + database migration layer by @edwinjosechittilappilly in #1538
• feat: CRD updates by @zzzming in #1555
• feat: auto fix FE biome linting with gh actions by @mfortman11 in #1559
• feat: secret protection by @zzzming in #1569
• feat: Use autofix.ci to apply Ruff formatting by @edwinjosechittilappilly in #1568
• feat: Add check before filter creation during onboarding by @mfortman11 in #1404
• feat: Add error handling for failed file entries in TaskNotificationMenu by @ricofurtado in #1512
• feat(operator): add docling components support by @rodageve in #1573
• feat: support file level ingestion and files listing search by @ricofurtado in #1536
• feat: added docling authentication when ibm auth is enabled by @lucaseduoli in #1551
• feat: operator cr status by @zzzming in #1583
• feat: operator namespace watch by @zzzming in #1590
• feat: Include openrag-documents in backend image by @edwinjosechittilappilly in #1585
• feat: reconcile pod security context from the CR by @zzzming in #1591
• feat: Enable issue enrichment and auto-planning by @edwinjosechittilappilly in #1596
• feat: add feedback tracking for assistant messages by @mfortman11 in #1597
• feat: add more finalizer removal logic by @zzzming in #1601
• feat: Implement two-phase ingestion flow with Docling polling by @ricofurtado in #1572
• feat: Add default LangFlow flow IDs by @edwinjosechittilappilly in #1608
• feat: Add flag to skip OpenSearch security setup by @edwinjosechittilappilly in #1603
• feat: backend pod status update operator by @zzzming in #1619
• feat: settings saas tabs menu by @Wallgau in #1637
• feat: Show google_drive connector for cloud brand by @edwinjosechittilappilly in #1650
• feat: operator ubi base build by @zzzming in #1652
• feat: Implement in-process JWT claims caching with TTL and LRU eviction by @ricofurtado in #1625
• feat: update style for oss of the failed task in the task panel by @Wallgau in #1647
• feat: Collective health endpoint for frontend pod by @ajithreji in #1662
• feat: generated client for kubernetes crd by @zzzming in #1673
• feat: Collapse function calls by @mfortman11 in #1669
• feat: Openrag improved tasks logs backend by @ricofurtado in #1671
• feat: Add JWT role sync and RBAC UI feature flag by @edwinjosechittilappilly in #1631
• feat: add support for custom field parameter in chunk deletion and indexing by @ricofurtado in #1694
• feat: task ingest dialog by @Wallgau in #1685
• feat: task ingest dialog by @Wallgau in #1696
• feat: Add lifespan OpenSearch bootstrap via service JWT by @edwinjosechittilappilly in #1626
• feat: Sync dialog redesign by @mfortman11 in #1703
• feat: task ingest dialog and retry flow by @Wallgau in #1700
• feat: disable langflow ingestion via UI by @lucaseduoli in #1623
• feat: retry broke after #1623 started deleting staged temp files by @Wallgau in #1709
• feat: group acls by @phact in #1611
• feat: Add optional backend ingest router by @edwinjosechittilappilly in #1720
• feat: add support for specifying labels and annotations on resources create… by @rodageve in #1748
• feat: active task dialog by @Wallgau in #1739
• feat: Make providers admin-only and enforce RBAC by @edwinjosechittilappilly in #1736
• feat: restyling active task in task panel by @Wallgau in #1752
• feat: add support for skipped tasks and warnings in task processing by @ricofurtado in #1769
• feat: Update routing to Langflow by @mfortman11 in #1774
• feat: crd supports multiple openrag instance in the same namespace by @zzzming in #1791
• feat: Migrate to UBI 9 base images for enterprise compliance and security improvements by @lucaseduoli in #1738
• feat: crd explicit instance name field support by @zzzming in #1799
• feat: add connectors permissions for Saas by @Wallgau in #1782
• feat: set Router enabled by default in Saas by @edwinjosechittilappilly in #1831
• feat: crd report scaleddown phase status by @zzzming in #1846
• feat: sdk scripts by @edwinjosechittilappilly in #1848
• feat: periodic webhook subscription renewal + full delete-event coverage by @edwinjosechittilappilly in #1852
• feat: update openai models by @mfortman11 in #1860
• feat: Update anthropic models by @mfortman11 in #1866
• feat: improve ingest tracking events by @mfortman11 in #1933
• feat: configurable OpenSearch shards/replicas + startup replica reconciliation by @edwinjosechittilappilly in #1964
• feat: add react doctor to the ci by @mfortman11 in #1984
• feat: shared documents ingestion mode for IBM COS connectors by @ricofurtado in #1954
• feat: Implement support for a new Azure Blob connector by @mpawlow in #1974
• feat: added external ports for every service, tweaked development makefile by @lucaseduoli in #1986
• feat: add chunk level page source by @lucaseduoli in #2015
• feat: add new design for messages and add inline references by @lucaseduoli in #2020
• feat: Add feature flag to gate the Azure Blob storage connector by @mpawlow in #2029
• feat: add more e2e tests to frontend by @lucaseduoli in #1458
• feat: apply selected files to filter by @mfortman11 in #2058
• feat: Azure Blog Connector - "Ingested" status badge is missing by @mpawlow in #2099
• feat: add dedicated OPENRAG_SHOW_SHARED_UPLOAD_TOGGLE flag for COS "share all" toggle (backport of #2025) by @edwinjosechittilappilly in #2092
• feat: add preview-mode ingest backend with live index proof (OSS + SaaS) by @Wallgau in #2051
• feat: Scope document chunk IDs by owner for isolation and updates by @edwinjosechittilappilly in #2109
• feat: Workspace OAuth connector overrides + UI by @edwinjosechittilappilly in #2040
• feat: docling ingest vlms by @edwinjosechittilappilly in #1841
• feat: Migrate CPD to Universal Token by @edwinjosechittilappilly in #2113
• feat: bulk loader by @phact in #2128
• feat: add skill to run local setup by @mfortman11 in #2082
• feat: add identity call by @mfortman11 in #2151
• feat: langflow 1.11.1 upgrade by @lucaseduoli in #2131
• feat: Improve SDK integration test coverage (Python + TypeScript) by @edwinjosechittilappilly in #2153
• feat: add upgrade flows functionality by @lucaseduoli in #2149
• feat: Knowledge table optimization (#2202) by @jason-dong03 and @VisveshJ in #2203
• feat: make functional and up to date models available in the list by @Wallgau in #2164
• feat: ship ingest review UI with settings, Docling preview, and chunk search by @Wallgau in #2115
• feat: New multi chat deletion feature by @Vchen7629 in #2208
• feat: expose GET /v1/files on public API surface with SDK support and case-insensitive filename search fix by @jason-dong03 in #2215
• feat: v2 public facing endpoint by @jason-dong03 in #2223
• feat: public file listing on v2 endpoint with SDK and MCP support by @jason-dong03 in #2251
• feat: Knowledge table filtering by @jason-dong03 and @VisveshJ in #2242
• feat: openrag status page by @hunterxtang in #2219
• feat: Support FE Prometheus metrics by @mfortman11 in #2249

🐛 Bug Fixes

• fix: resolved Langflow data directory permission error on macOS with … by @mpawlow in #1237
• fix: make onboarding not loop when error occurs in ingestion, fix double tasks for OpenRAG docs by @lucaseduoli in #1248
• fix: Improves light mode colors in task sidebar in lightmode by @mfortman11 in #1255
• fix: don't show dialog after delete error by @mfortman11 in #1260
• fix: Filter dorpdown sources by @Wallgau in #1269
• fix: Uploaded document is not retrievable/searchable using its unique content. by @Wallgau in #1271
• fix: truncate selected chat filter chip label by @Wallgau in #1272
• fix: .txt and .md filenames should treated as duplicates by @Wallgau in #1274
• fix: Performance: Adding, removing, updating model providers and changing language or embedding models is slow after upgrade to Langflow 1.8.0 by @Wallgau in #1275
• fix: sortable column table by @Wallgau in #1276
• fix: update type files supported by @Wallgau in #1277
• fix: change navigation to be blocked when switching tabs by @lucaseduoli in #1268
• fix: refresh knowledge items and don't show processing items on filtered files by @lucaseduoli in #1282
• fix: delete dialog not closing main for bulk dialog by @mfortman11 in #1261
• fix: Use 'username' claim for user_id in IBM JWT by @edwinjosechittilappilly in #1284
• fix: removed ibm secrets manager, environment variables and tests by @lucaseduoli in #1285
• fix: chat filter by @Wallgau in #1280
• fix: Switch to BROKER_URL and remove public_return_url by @edwinjosechittilappilly in #1283
• fix: add return url and connection id to oauth url state by @lucaseduoli in #1160
• fix: added basic credentials to encryption keys by @lucaseduoli in #1290
• fix: Unable to resolve Docling URL via Langflow on Linux by @mpawlow in #1299
• fix: added encryption key to docker compose and helm charts by @lucaseduoli in #1302
• fix: added langflow_opensearch_host as env variable by @lucaseduoli in #1294
• fix: Integration tests are failing: test_chat_with_sources, test_full_rag_pipeline by @mpawlow in #1308
• fix: Integration tests are failing: test_chat_with_sources, test_full_rag_pipeline by @mpawlow in #1317
• fix: added number_of_replicas as 0 to not create unused nodes in OpenSearch by @lucaseduoli in #1304
• fix: Forward Set-Cookie and strip Bearer token by @edwinjosechittilappilly in #1289
• fix: changed opensearch startup to turn opensearch into main process by @lucaseduoli in #1326
• fix(security): Containerized Frontend application is running as root by @mpawlow in #1321
• fix: centralize backend paths and accept env var to define them, change deployments to centralize read only and writable volumes by @lucaseduoli in #1353
• fix(security): Containerized Backend application is running as root by @mpawlow in #1329
• fix: change factory-reset functions to delete named volume for opensearch-data by @lucaseduoli in #1363
• fix: updated langflow version by @lucaseduoli in #1379
• fix: httpx resolution error in mcp by @edwinjosechittilappilly in #1397
• fix: re-add litellm, fix ingestion without langflow for all providers, fix search functionality for all providers by @lucaseduoli in #1368
• fix: Store raw JWT in auth cookie (strip 'Bearer ') by @edwinjosechittilappilly in #1376
• fix: Fix tooltip visibility in saas by @mfortman11 in #1420
• fix: update knowledge-dropdown with pptx and xlsx file type support by @edwinjosechittilappilly in #1437
• fix: update models api and langflow models setting by @lucaseduoli in #1425
• fix: frontend cve fixes by @AgNess-G in #1415
• fix: Backend CVE fixes by @AgNess-G in #1413
• fix: Ingest document from chat is not working (OSS) by @mpawlow in #1463
• fix: ensure model selections are reflected in LF by @mfortman11 in #1475
• fix: changed frontend checks to pass correct embedding model to backend by @lucaseduoli in #1478
• fix: sync ingest embedding from settings and persist ingest UI by @Wallgau in #1492
• fix: Knowledge search fails with embedding model error (OSS) by @mpawlow in #1499
• fix: avoid using user controlled data in run block by @AgNess-G in #1491
• fix: pass parameters as global variable headers to MCP server on agent flow by @lucaseduoli in #1479
• fix: Unable to overwrite documents in Knowledge (OSS) by @mpawlow in #1508
• fix: version conflicts and remove duplicate entry by @lucaseduoli in #1518
• fix: operator langflow secret by @zzzming in #1529
• fix: operator pods env variables by @zzzming in #1531
• fix: operator helm values health port by @zzzming in #1539
• fix: make watsonx work in chat by @lucaseduoli in #1534
• fix: remove hack dir from the operator image build by @zzzming in #1542
• fix: Working default repo/tag by @prasanthcaibmcom in #1543
• fix: add more default envs for or and lf pods by @zzzming in #1567
• fix: Add autofix.ci workflow; remove autofix steps by @edwinjosechittilappilly in #1574
• fix: JWT_SIGNING_KEY by @zzzming in #1584
• fix: get all file info at the same time displayed in the table by @Wallgau in #1576
• fix: [RBAC Migration]Hydrate workspace config at startup by @edwinjosechittilappilly in #1575
• fix: Address sharepoint folder handling by @mfortman11 in #1557
• fix: remove four flow ids by @zzzming in #1610
• fix: Add Trash2 icon and fix Tabs import by @edwinjosechittilappilly in #1615
• fix: add endpoint to browse connection files for connectors by @ricofurtado in #1579
• fix: next js vulernability fixed by bumping version by @mfortman11 in #1612
• fix: Handle user insert races and add test timeout by @edwinjosechittilappilly in #1618
• fix: display file names and fix ingestion for onedrive by @lucaseduoli in #1609
• fix: Skip deleted connector files; return orphan IDs by @edwinjosechittilappilly in #1592
• fix: add reset db on command, expose error on e2e tests by @lucaseduoli in #1627
• fix: Redirect on logout by @mfortman11 in #1636
• fix: Copy flows directory into Docker image by @edwinjosechittilappilly in #1632
• fix: Enum IDs and delete OpenSearch docs by _id by @edwinjosechittilappilly in #1638
• fix: make probes more robust in operator by @zzzming in #1642
• fix: remove flow download initContainer when flowRef is removed by @zzzming in #1653
• fix: cr deletion by @zzzming in #1656
• fix: Encode IBM API key as Basic auth header by @edwinjosechittilappilly in #1664
• fix: restart deployment if env changes by @zzzming in #1665
• fix: Ensure Langflow .env variable definitions from LANGFLOW_VARIABLES_TO_GET_FROM_ENVIRONMENT by @rodageve in #1667
• fix: connector sync and override feature by @edwinjosechittilappilly in #1663
• fix: update OAuth prompt to consent for connector mutation by @ricofurtado in #1657
• fix: static scan issues in helm chart by @rodageve in #1655
• fix: make google drive ingestion work by @lucaseduoli in #1672
• fix: add replace_duplicates option for Google Drive sync by @ricofurtado in #1674
• fix: Centralize .txt->.md workaround for Langflow by @edwinjosechittilappilly in #1651
• fix: Remove indexed chunks when connector file deleted by @edwinjosechittilappilly in #1677
• fix: change docling manager to use updated docling, change docling component to raise errors by @lucaseduoli in #1686
• fix: pass correct jwts to refresh docs by @lucaseduoli in #1687
• fix: Avoid email UNIQUE race by omitting email by @edwinjosechittilappilly in #1693
• fix: unify connector ingestion pipelines and consolidate service layer by @lucaseduoli in #1695
• fix: Add forwarded JWT header auth and issuer utils for api users by @edwinjosechittilappilly in #1697
• fix: Detect and handle watsonx.ai model provider rate limit exceptions by @mpawlow in #1600
• fix: Prefer header JWT when RBAC role-sync enabled by @edwinjosechittilappilly in #1705
• fix: make connectors folder ingestion throw errors and check for duplicates by @lucaseduoli in #1706
• fix: add session_token field to S3ConfigureBody model by @ricofurtado in #1708
• fix: Verify IBM JWT in _get_ibm_user by @edwinjosechittilappilly in #1711
• fix: sec finding - make default curl behaviour to validate server cert by @rodageve in #1701
• fix: Add OpenSearch basic-auth for on-prem deployments, improve onboarding flow, and support asymmetric JWT signing by @edwinjosechittilappilly in #1713
• fix: Update ingestion flow configuration to support group acl by @edwinjosechittilappilly in #1717
• fix: upgrade Langflow to 1.9.6 by @lucaseduoli in #1621
• fix: make sure feedback state doesn't remain accross chats by @mfortman11 in #1726
• fix: handle orphan files and return appropriate responses when syncing connectors by @ricofurtado in #1715
• fix: Add filter_id support and v1 filter resolution by @edwinjosechittilappilly in #1666
• fix: update current version, remove auto dispatch from workflows, update langflow version by @lucaseduoli in #1544
• fix: polish UI saas oss by @Wallgau in #1724
• fix: field indentation / enable-disable auto-mounting of service account K8S token by @rodageve in #1741
• fix: Address LGPL License concerns by @mfortman11 in #1725
• fix: more filter_id issues by @phact in #1730
• fix: stubs fix for Dockerfile.frontend by @mfortman11 in #1746
• fix: fix cves on npm packages by @mfortman11 in #1750
• fix: Make JWT issuer TLS verification configurable via environment variable by @edwinjosechittilappilly in #1747
• fix: [CVE-2026-42561] Bump python-multipart to 0.0.30 by @edwinjosechittilappilly in #1731
• fix: [CVE-2026-44432] Add urllib3 dependency and bump to 2.7.0 by @edwinjosechittilappilly in #1732
• fix: [CVE-2026-0994] Add protobuf dependency (>=7.35.0) by @edwinjosechittilappilly in #1733
• fix: sonarcube static sec findings / openrag operator token automounti… by @rodageve in #1755
• fix: script injection vulnerability in operator-release workflow by @rodageve in #1764
• fix: bump pyjwt, authlib, idna to resolve image scan CVEs by @edwinjosechittilappilly in #1761
• fix: picomatch cve fix by @mfortman11 in #1775
• fix: add ephemeral storage limits to backend and langflow deployments by @rodageve in #1776
• fix: cancel case not retryable by @Wallgau in #1771
• fix: update flows to latest version, update url ingestion by @lucaseduoli in #1742
• fix: bump aiohttp, starlette to resolve backend image scan CVEs (CVE-2026-34993, CVE-2026-47265, CVE-2026-48710) by @edwinjosechittilappilly in #1778
• fix: Switch client to admin client to restricted operations by @edwinjosechittilappilly in #1772
• fix: honor langflow command and args from CR spec by @rodageve in #1788
• fix: operator only contain env variables in dot env by @zzzming in #1753
• fix: remediated security issues in openrag-oss-operator for SaaS by @gnPy in #1787
• fix: to respect value from cr env by @zzzming in #1793
• fix: pass jwt to docling polling calls by @lucaseduoli in #1797
• fix: disable service account token automounting at pod spec level by @rodageve in #1803
• fix: Port of the fixes from PR #1795 (cpd-sq-fix) to main. by @edwinjosechittilappilly in #1807
• fix: forward Authorization/IBM credentials headers in server-side fetchFromBackend by @edwinjosechittilappilly in #1811
• fix: remove dangerouslySetInnerHtml by @mfortman11 in #1806
• fix: use run-mode-aware admin client for init_index instead of the end-user JWT client by @edwinjosechittilappilly in #1818
• fix: update ssl verification for docling by @lucaseduoli in #1813
• fix: change browsers fetch to get 401s and redirect by @lucaseduoli in #1826
• fix: hide OneDrive if not OSS by @Wallgau in #1830
• fix: upgrade shell quote version on docs by @lucaseduoli in #1834
• fix: put correct file type in langflow-less ingestion by @lucaseduoli in #1842
• fix: google to support WEBHOOK_BASE_URL by @edwinjosechittilappilly in #1849
• fix: handle document processing errors and update task statuses accordingly by @ricofurtado in #1851
• fix: uninstall ragstack ai by @lucaseduoli in #1856
• fix: post-ingestion verification must not fail files on OpenSearch 0utages by @edwinjosechittilappilly in #1868
• fix: make connector webhooks work end-to-end (Drive routing, Graph subscriptions, change discovery) by @edwinjosechittilappilly in #1867
• fix: resolve lakehouse credentials on the /v1 JWT auth path and gate knowledge-filter reads by @edwinjosechittilappilly in #1861
• fix: fix ingestion without page number by @lucaseduoli in #1857
• fix: remove clickhouse connect from Langflow image by @lucaseduoli in #1802
• fix: add owner info in the url ingestion by @lucaseduoli in #1876
• fix: forward end-user JWT to MCP/API callers via gateway-placed X-OpenRAG-API-JWT header by @edwinjosechittilappilly in #1874
• fix: deleting a source file now removes it from OpenRAG instead of failing as “incompatible type by @edwinjosechittilappilly in #1879
• fix: icon display in table for connectors and url by @Wallgau in #1887
• fix: make connector webhook → sync reliable and correctly scoped (SharePoint/OneDrive/Drive) by @edwinjosechittilappilly in #1888
• fix: change picture description model by @lucaseduoli in #1882
• fix: auth user UI by @edwinjosechittilappilly in #1891
• fix: overwite duplicate files for connectors by @Wallgau in #1892
• fix: logout race condition fix by @mfortman11 in #1895
• fix: use provider ingest settings by @mfortman11 in #1896
• fix: Set Model after Provider is deleted by @mfortman11 in #1935
• fix: adds safety guard to ag grid by @mfortman11 in #1946
• fix: a11y fixes by @mfortman11 in #1824
• fix: forward allowed_principals through connector Langflow ingestion by @edwinjosechittilappilly in #1958
• fix: changed workflows to build images for both tests at the same time by @lucaseduoli in #1962
• fix: switch the images to ubi10 by @lucaseduoli in #1961
• fix: Standardize OpenSearch node-count readiness flag on OPENSEARCH_NODE_COUNT_CHECK_ENABLED by @edwinjosechittilappilly in #1975
• fix: onboarding timeout cleanup issue by @mfortman11 in #1977
• fix: support big csv files on langflow-less ingestion by @lucaseduoli in #1968
• fix: upgrade OpenSearch to 3.6.0 by @lucaseduoli in #1972
• fix: added ibm-watsonx-ai and langchain-ibm packages to Langflow image to fix WatsonX ingestion by @lucaseduoli in #1989
• fix: universal file names by @edwinjosechittilappilly in #1982
• fix: improve nudges messages by getting more context from messages by @lucaseduoli in #1617
• fix: remove os data as part of reset by @edwinjosechittilappilly in #1983
• fix: changed integration tests to save logs instead of dumping them by @lucaseduoli in #1991
• fix: admin consent screen appears again for user after admin approval by @edwinjosechittilappilly in #1997
• fix: remediate image_scan CVEs in backend, frontend, and langflow images by @gnPy in #2000
• fix: light color text catergory chips in light mode by @Wallgau in #2013
• fix: upgraded version of docling by @lucaseduoli in #1995
• fix: error in skip duplicates functionality for folder ingest for connectors (backport of #1941) by @ricofurtado in #2018
• fix: Ingestion of buckets not working right after connection is tested (backport of #1942) by @ricofurtado in #2019
• fix: handle orphan files and return appropriate responses when syncing connectors (backport of #1785) by @ricofurtado in #2016
• fix: enhance error handling for document processing and add OCR requirement check for image files (backport of #1859) by @ricofurtado in #2017
• fix: bump golang.org/x/net to v0.55.0 by @gnPy in #2014
• fix: apply new settings on retry by @mfortman11 in #2010
• fix: preserve HTTPException status in update_docling_preset (#1586) by @hunterxtang in #2004
• fix: report actual synced connection count in connector_sync (#1547) by @hunterxtang in #2006
• fix: restore LLM model values in reapply_all_settings fallback (#1587) by @hunterxtang in #2008
• fix: prevent partial matches for exact token searches by @NishadA05 in #2003
• fix: target agent component when updating chat flow system prompt by @Vchen7629 in #2001
• fix: Podman compatibility by adding environment configurable repository prefix to Docker Compose image references by @Vchen7629 in #2002
• fix: resolve Pydantic delta serialization warnings in agent streaming by @Vchen7629 in #2005
• fix: prevent exception details from leaking in API error responses by @Vchen7629 in #2007
• fix: improve unstable context provider by @mfortman11 in #2026
• fix: Remove right gradient in nudges by @mfortman11 in #2038
• fix: Stale api keys no longer display on the page once revoked by @Vchen7629 in #1925
• fix: check backend health inside container (#1921) by @NishadA05 in #2030
• fix: added visual loading spinner and success/error toast when restoring default langflow flows by @Vchen7629 in #1931
• fix: OAuth connector callback redirect fix by @mfortman11 in #2052
• fix: updated packages to resolve cves by @lucaseduoli in #2056
• fix: issue #1210 — Langflow ingestion failing with AuthorizationException(403, 'security_exception', 'no permissions for [indices:data/read/search] ...'). by @richardz403 in #2022
• fix: Document deletion now properly updates the stale knowledge filter source count by @Vchen7629 in #1929
• fix: add warning logs for 10k aggregation limit by @yogichipalkatti in #2067
• fix: removed exception interpolation for 500 level errors by @Vchen7629 in #2074
• fix: ingesting single files in azure blob now properly navigates to knowledge page by @Vchen7629 in #2057
• fix: replaced deprecated datetime.utc() with datetime.now(timezone.utc) by @Vchen7629 in #2075
• fix: change all langflow self hosted runners to github ubuntu-latest by @lucaseduoli in #2081
• fix: cache images with architecture and check architecture in startup scripts by @lucaseduoli in #2087
• fix: issue #70873 jwt token signature validation by @rodageve in #2076
• fix: reset dialog state and abort in-flight test on cancel (#2048) by @hunterxtang in #2072
• fix: add fixes to make e2e shard 8 be less prone to failures by @lucaseduoli in #2091
• fix: cos share all (backport of #2050) by @edwinjosechittilappilly in #2094
• fix: missing ingest settings for individual files (backport of #2066) by @edwinjosechittilappilly in #2095
• fix: OAuth connector callback redirect fix (backport of #2054) by @edwinjosechittilappilly in #2097
• fix: japanese file names (backport of #2053) by @edwinjosechittilappilly in #2098
• fix: add build images in matrix and push to ghcr by @lucaseduoli in #2102
• fix: restrict ingestion to containers section shows up correctly and error message isn't duplicated by @Vchen7629 in #2071
• fix: speed up CI image builds with BuildKit layer caching and a shared cross-PR cache by @Wallgau in #2106
• fix: issue 2043, revising connector cards display and ui for better user understanding. by @richardz403 in #2105
• fix: removed unecessary comment by @Wallgau in #2107
• fix: user-facing duplicate handling workflow for bucket-based connectors (backport of #2077) by @edwinjosechittilappilly in #2096
• fix: show confirmation dialog before disconnecting a connector by @yogichipalkatti in #2078
• fix: leak of keys on logs during exception (backport of #2100) by @edwinjosechittilappilly in #2108
• fix: keep default docs title the same for every type of ingestion by @lucaseduoli in #2118
• fix: pass index name at runtime to langflow by @lucaseduoli in #2120
• fix: add limit for max tokens in a batch for watsonx by @lucaseduoli in #2119
• fix: remove tenant id and also move to run mode utils by @edwinjosechittilappilly in #2122
• fix: tenant ID and remove unused components by @edwinjosechittilappilly in #2123
• fix: OCR-aware supported file types by @Wallgau in #2055
• fix: upgrade go version by @gnPy in #2129
• fix: add ppc64le build and dev server support for frontend by @ethanchoe-2 in #2101
• fix: Unable to access Frontend app on Ubuntu Linux (x86_64) by @mpawlow in #2141
• fix: fixed tui service status to now properly show container status instead of missing by @Vchen7629 in #2139
• fix: remove tenant id from docling component by @lucaseduoli in #2135
• fix: surface provider errors in chat instead of generic connection failures by @Wallgau in #2127
• fix: removed invalid docker/podman exec flag causing make health to not work for backend container by @Vchen7629 in #2154
• fix: replaced deprecated regex with pattern in Query field by @Vchen7629 in #2116
• fix: add clickable citations in onboarding by @lucaseduoli in #2156
• fix: Unable to access Frontend app on Ubuntu Linux (x86_64) by @mpawlow in #2162
• fix: pin fastapi to version without errors by @lucaseduoli in #2163
• fix: provide real error for onboarding apiKey setup and settings by @Wallgau in #2152
• fix: pin fastapi-pagination version by @mfortman11 in #2169
• fix: support images in non langflow ingestion by @mfortman11 in #2172
• fix: security: fence retrieved/uploaded text as untrusted data (VULN-13906 1/4) by @edwinjosechittilappilly in #2144
• fix: overflows setup apiKey in settings by @Wallgau in #2175
• fix: gate fetch latest docs by permission by @edwinjosechittilappilly in #2185
• fix: resolve embedding-model fallbacks from deployment env, never guess (backport of #2191) by @edwinjosechittilappilly in #2192
• fix: properly redirect after oauth signin by @mfortman11 in #2194
• fix: updated pdf password protected docling parsing error message with more actionable message by @Vchen7629 in #2200
• fix: cli no longer reports all services started even if docling-serve fails to start by @Vchen7629 in #2173
• fix: disable custom components in Langflow by @lucaseduoli in #1564
• fix: removed node ID tweaks in favor of display name tweaks by @lucaseduoli in #2211
• fix: add better citation prompt, add upgrade prompt functionality by @lucaseduoli in #2216
• fix: light text input color and buttons in dialog by @Wallgau in #2227
• fix: onboarding progress bar is centered again by @Vchen7629 in #2238
• fix: add env to set opensearch pool maxsize by @lucaseduoli in #2218
• fix: upgrade node image by @mfortman11 in #2243
• fix: add openai retry and check by @lucaseduoli in #2247
• fix: openAI provider alignement by @Wallgau in #2240
• fix: confirmation dialog by @Wallgau in #2255
• fix: align buttons padding color by @Wallgau in #2257
• fix: CORS misconfiguration: replace wildcard Access-Control-Allow-Origin with explicit origin allowlist by @mfortman11 in #2253
• fix: patch CVEs by @gnPy in #2269
• fix: Code review for status page (#2276) by @Wallgau in #2288
• fix: bump mcp to fix CVE-2026-52869, CVE-2026-52870, CVE-2026-59950 (… by @VisveshJ in #2296
• fix: ensure openrag version on cli by @lucaseduoli in #2298
• fix: remove setting the documents path on startup, set default langflow superuser by @lucaseduoli in #2299
• fix: pin astral-sh/setup-uv to v10.0.1 by @VisveshJ in #2315
• fix: frontend lockfile 0.7.1 by @VisveshJ in #2317

📝 Documentation Updates

• docs: Add IBM Elite Support page by @aimurphy in #1316
• docs: Update export flows partial because the backup option is only for upgrades. by @aimurphy in #1348
• docs: Add troubleshooting for reducing chunk size by @aimurphy in #1461
• docs: Troubleshoot incompatible docling-serve version by @aimurphy in #1511
• docs: Add langflow_opensearch environment variables by @aimurphy in #1710
• docs: MCP streamable HTTP endpoint instead of PyPI package by @edwinjosechittilappilly in #1712
• docs: document container image and registry configuration by @kamrynschock in #2186

🛠 Maintenance Tasks

• refactor: Improve SaaS styles by @mfortman11 in #1356
• refactor(knn): consolidate knn_vector field mapping into shared helper by @zznate in #1392
• refactor: dynamically load large library imports by @mfortman11 in #1520
• refactor: prefetch for settings page by @mfortman11 in #1533
• refactor: Cleanup envs examples and unused envs by @mfortman11 in #1556
• refactor: Cleanup useChatStreaming logic by @mfortman11 in #1558
• refactor: main into app modules and route registrars by @edwinjosechittilappilly in #1561
• refactor: Refactor settings to use a tab structure by @mfortman11 in #1563
• refactor: Split settings into package and refactor by @edwinjosechittilappilly in #1570
• refactor: remove recent tasks section by @mfortman11 in #1577
• refactor: refactor upload utils replacing customevent by @mfortman11 in #1578
• refactor: remove loadingStore and move the state into chat context by @mfortman11 in #1593
• refactor: Create and use onboarding state hook by @mfortman11 in #1606
• refactor: handler for file upload for context by @mfortman11 in #1624
• refactor: Simplify Google Drive OAuth scopes management and add test for missing optional group scopes by @ricofurtado in #1744
• refactor: Move cos by @mfortman11 in #1654
• refactor: remove role from user header by @mfortman11 in #1843
• refactor: new logout route by @mfortman11 in #1871
• refactor: Ingest settings hidden by @mfortman11 in #1920
• refactor: Fix ui flashes from on prop changes by @mfortman11 in #1812
• refactor: remove over precise svg decimals by @mfortman11 in #1822
• refactor: Don't return full tanstack query result by @mfortman11 in #1827
• refactor: fix button types by @mfortman11 in #1875
• refactor: dead code cleanup by @mfortman11 in #1873
• refactor: effect cleanup for timeouts by @mfortman11 in #1823
• refactor: no derived state by @mfortman11 in #1886
• refactor: Async await fixes by @mfortman11 in #2033
• refactor: Deepen request identity handling behind a dedicated auth module by @edwinjosechittilappilly in #2032
• refactor: Remove deprecated react api usage by @mfortman11 in #2034
• refactor: update button click tracking events (backport of #2104) by @edwinjosechittilappilly in #2110
• refactor: Connector sync improvements by @mfortman11 in #2103
• refactor: update design for vlm advanced settings by @mfortman11 in #2159
• refactor: Filter panel improvements by @mfortman11 in #2167
• refactor: add run mode enum controls by @mfortman11 in #2204

Others

• Feature/knowledge redesign by @mrunal2021 in #1191
• chore: Update ARM64 self-hosted runner labels by @edwinjosechittilappilly in #1256
• Adding header changes by @mrunal2021 in #1264
• chore: merge Saas features to main by @edwinjosechittilappilly in #1359
• chore: mcp allow pre release dependencies by @edwinjosechittilappilly in #1395
• chore: sdk release 0.3.0 by @edwinjosechittilappilly in #1400
• chore: fix main by @edwinjosechittilappilly in #1613
• chore: Add TypeScript typecheck CI job by @edwinjosechittilappilly in #1616
• chore: add operator make commands by @edwinjosechittilappilly in #1628
• chore: Add ruff autofix step to CI workflows by @edwinjosechittilappilly in #1640
• chore: Retire openrag-mcp; switch docs to streamable HTTP by @edwinjosechittilappilly in #1668
• chore: add logs by @edwinjosechittilappilly in #1743
• chore: Update langflow_file_service logs by @edwinjosechittilappilly in #1756
• chore: RBAC test scripts and sync roles by @edwinjosechittilappilly in #1757
• chore: Update test-e2e.yml by @edwinjosechittilappilly in #1758
• chore: release 0.4.0.dev0 of sdks by @edwinjosechittilappilly in #1847
• chore: add npm tag by @mfortman11 in #1862
• chore: update dependencies across docs, frontend, SDK, operator and Docker images by @lucaseduoli in #1947
• chore: add node/manager/coordinating count checks to OpenSearch readiness probe by @edwinjosechittilappilly in #1959
• chore: Segment improvements by @mfortman11 in #1971
• chore: upgrade dependencies to latest stable go & js by @lucaseduoli in #1998
• chore: default OPENRAG_SHOW_SHARED_UPLOAD_TOGGLE to true (backport of #2035) by @edwinjosechittilappilly in #2093
• chore: Remove platform authentication by @edwinjosechittilappilly in #2136
• Update next,postcss and sharp in frontend/package.json to address CVEs by @jcho02 in #2158
• chore: Update CONTRIBUTING.md by @edwinjosechittilappilly in #2226
• chore: Check required envs for make dev cmds by @mfortman11 in #2221
• chore: Add SDK tests for filename search filtering by @edwinjosechittilappilly in #2256
• chore(sdk): bump openrag-sdk version to 0.7.0.dev1 for PyPI prerelease by @VisveshJ in #2297
• chore: bump docker actions versions by @mfortman11 in #2314

New Contributors

• @mrunal2021 made their first contribution in #1191
• @prasanthcaibmcom made their first contribution in #1543
• @ethanchoe-2 made their first contribution in #2101
• @jcho02 made their first contribution in #2158
• @kamrynschock made their first contribution in #2186

Full Changelog: v0.3.3...v0.7.1