Headline
- The Lemonade Router is complete: name a
collection.routermodel and requests are steered by rule, classifier, semantic-similarity, or LLM-as-router policies, with per-candidate decision traces, a GUI for authoring and editing routers, and aPOST /v1/classifytext-classification endpoint backed by a new onnxruntime backend. - ModelScope is now searchable alongside Hugging Face in the Model Manager, with source-aware model discovery, download, and registration.
- A server-side job engine lets clients post multi-step recipes and manage them through
/jobsendpoints, with pause, interrupt, resume, and delete lifecycle control. lemondcan act as an MCP client host, connecting to external stdio MCP servers and discovering their tools through admin-gated/internal/mcp/*endpoints.- The
lemonadeCLI now supports HTTPS/TLS connections to secure remote endpoints, honoringhttp(s)://schemes inLEMONADE_HOST.
Breaking Changes
- The server no longer sends
Access-Control-Allow-Origin: *by default: non-loopback browser origins are now rejected with 403 unless listed inLEMONADE_ALLOWED_ORIGINS, and the WebSocket same-origin fallback has been removed. Remote or LAN browser clients must setLEMONADE_ALLOWED_ORIGINS.
Lemonade Server
| Operating System | Downloads |
|---|---|
| Windows | lemonade.msi |
| Ubuntu 24.04+ | Launchpad PPA |
| Debian 13 (x86_64) | lemonade-server_11.5.0-debian13_amd64.deb |
| Debian 13 (ARM64) | lemonade-server_11.5.0-debian13_arm64.deb |
| Fedora 43 (x86_64) | lemonade-server-11.5.0-fc43.x86_64.rpm |
| Fedora 43 (ARM64) | lemonade-server-11.5.0-fc43.aarch64.rpm |
| Fedora 44 (x86_64) | lemonade-server-11.5.0-fc44.x86_64.rpm |
| Fedora 44 (ARM64) | lemonade-server-11.5.0-fc44.aarch64.rpm |
| macOS | Lemonade-11.5.0-Darwin.pkg |
Other platforms? See our Installation Options for Docker, Snap, Arch, Debian, and more.
Embeddable Lemonade
Portable binaries for bundling into your own installer. Run lemond ./ as a subprocess.
| Platform | Download |
|---|---|
| Ubuntu x64 | lemonade-embeddable-11.5.0-ubuntu-x64.tar.gz |
| Ubuntu arm64 | lemonade-embeddable-11.5.0-ubuntu-arm64.tar.gz |
| Windows x64 | lemonade-embeddable-11.5.0-windows-x64.zip |
| macOS arm64 | lemonade-embeddable-11.5.0-macos-arm64.tar.gz |
What's Changed
Thanks @OussamaBATOUCHE, @QuManu, @SlawomirNowaczyk, @abn, @ckopanos, @ekkoitac, @fl0rianr, @jon-hotaisle, @kenvandine, @kyuubyN, @meghsat, @midu16, @pwilkin, @radhaksri, @ramkrishna2910, @superm1, @therealjuanmartinez for your awesome contributions to this release!
Click to expand changelog
- Update version to prepare for release by @superm1 in #2702
- fix(security): pin SHA-256 checksums for contributor-hosted backend assets by @superm1 in #2710
- fix(ci): always run macOS C++ unit tests regardless of signing by @superm1 in #2712
- docs (fix): typo in readme by @jon-hotaisle in #2701
- feat(router): onnxruntime classification backend + /v1/classify (capability for #2592; policy wiring in #2384) by @ramkrishna2910 in #2626
- Fix: re-pulling a
collection.routermodel fails with "unknown key 'source'" by @SlawomirNowaczyk in #2703 - feat: add Modelscope search by @fl0rianr in #2716
- fix(websocket): allow Windows Tauri WebView2 origin for upgrades by @superm1 in #2721
- fix: quote /MANIFESTINPUT path and detect RX 7600 as gfx110X by @kyuubyN in #2678
- Add server-side MCP client host foundation by @fl0rianr in #2605
- fix(docker): Add libreadline8 to Dockerfile dependencies by @ckopanos in #2733
- fix(security): apply HTTP trust policies to POST request paths by @fl0rianr in #2741
- feat: job engine by @pwilkin in #2718
- Keep sd-cpp validation images out of auto-update PRs by @fl0rianr in #2502
- feat(server): support PNA CORS, custom allowed origins, and custom headers by @abn in #2660
- feat(cli): add native HTTPS/TLS and URL scheme parsing support by @abn in #2373
- feat(trellis): per-request UV atlas method, bump trellis to v0.4.3 by @pwilkin in #2667
- fix(docker): include build-essential in runtime stage for vLLM Triton… by @midu16 in #2749
- Wire collection.router classifiers to Router::classify + validate model capability at parse time by @QuManu in #2727
- [Router] llm router classifier + routing.router desugaring (#2405) by @OussamaBATOUCHE in #2698
- Support gfx950, using the same path as gfx942 by @SlawomirNowaczyk in #2687
- feat(telemetry): honor incoming W3C traceparent (opt-in) by @radhaksri in #2734
- [Router] [UI] Author collection.router in the custom-collection panel (#2406) by @meghsat in #2693
- Router end-to-end demo, integration test, and docs (#2388) by @ramkrishna2910 in #2732
- fix(router): isolate routing helpers from standard model LRU slots by @fl0rianr in #2729
- Update version to 11.5.0 by @ramkrishna2910 in #2772
- fix: detect Arch ggml HIP plugin paths by @ekkoitac in #2760
- api: expose is_busy and is_streaming flags in /health response by @therealjuanmartinez in #2720
- Fix arm64 PPA packages missing bundled web UI by @kenvandine in #2770
- fix: resolve CORS blockage on MCP Gateway Endpoint by @abn in #2771
New Contributors
- @jon-hotaisle made their first contribution in #2701
- @ckopanos made their first contribution in #2733
- @midu16 made their first contribution in #2749
- @QuManu made their first contribution in #2727
- @OussamaBATOUCHE made their first contribution in #2698
- @radhaksri made their first contribution in #2734
- @ekkoitac made their first contribution in #2760
- @therealjuanmartinez made their first contribution in #2720
Full Changelog: v11.0.0...v11.5.0
Windows installers are signed. Free code signing provided by SignPath.io, certificate by SignPath Foundation. See our Code Signing Policy.
Router Milestone Contributors
The Lemonade Router shipped across v11.0.0 and v11.5.0 (17 PRs). PR authors: @eddierichter-amd, @SlawomirNowaczyk, @ramkrishna2910, @OussamaBATOUCHE, @QuManu, @meghsat, @fl0rianr, @coolduderules. Reviewers: @fl0rianr, @SlawomirNowaczyk, @eddierichter-amd, @ramkrishna2910, @meghsat, @superm1, @bong-water-water-bong.