v1.8.0

What's Changed

• Add account usage budgets by @miurla in #1027
• fix(privacy): serve source favicons from our own origin by @miurla in #1029
• docs: document what a self-hosted instance sends outbound by @miurla in #1028
• fix(streaming): keep a recovered tool failure off the turn's root span by @miurla in #1031
• fix(search): project results onto their declared shape for the model by @miurla in #1032
• fix(search): handle paths in Tavily site-only queries by @miurla in #1034
• fix(ui): give the message save action the same weight as its siblings by @miurla in #1036
• fix(search): stop passing Tavily's unused result fields to the model by @miurla in #1037
• Upgrade cloud models to GPT-6 Luna by @miurla in #1040
• Collapse single tool results when answer streaming starts by @miurla in #1041
• fix(streaming): replay cited source context outside the assistant answer by @miurla in #1042
• fix(citation): give fetch results citation labels by @miurla in #1045
• fix(models): allow newer model generations in dynamic model list by @miurla in #1047
• fix(attachments): enforce the 3-file limit on every attach path by @miurla in #1048
• fix: validate guest chat message structure by @sushanttiwari-14 in #1050
• chore(deps): add Dependabot config for GitHub Actions and bun by @miurla in #1053
• refactor(auth): introduce pluggable auth provider interface by @nathanpride in #1052
• chore(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #1056
• chore(deps): limit bun Dependabot updates to security fixes by @miurla in #1060
• chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #1054
• chore(deps): bump docker/build-push-action from 5 to 7 by @dependabot[bot] in #1055
• chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1061
• perf(chat): cap pasted content replayed from earlier turns by @miurla in #1064
• feat(auth): add Better Auth provider for self-hosted multi-user instances by @nathanpride in #1063
• fix(auth): harden Better Auth rate limiting and token scrubbing by @miurla in #1069
• perf(analytics): proxy /relay straight to PostHog outside Better Auth by @miurla in #1070
• docs: lead self-hosting auth docs with Better Auth by @miurla in #1068
• chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #1062
• docs: keep README installation minimal by @miurla in #1071
• Feat/local fetch by @relic664 in #1067
• chore(fetch): tidy the crawl4ai backend after #1067 by @miurla in #1072
• fix(auth): forward visitor IPs to Supabase Auth from server actions by @miurla in #1073
• fix(auth): sign users in when they confirm their sign-up email by @miurla in #1074
• chore: bump version to 1.8.0 by @miurla in #1075

New Contributors

• @nathanpride made their first contribution in #1052
• @dependabot[bot] made their first contribution in #1056
• @relic664 made their first contribution in #1067

Full Changelog: v1.7.0...v1.8.0