Merge pull request open-webui#19416 from open-webui/dev

0.6.38

Author: tjbck

.github/workflows/docker-build.yaml

@@ -141,6 +141,9 @@ jobs:
           platform=${{ matrix.platform }}
           echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
 
+      - name: Delete huge unnecessary tools folder
+        run: rm -rf /opt/hostedtoolcache
+
       - name: Checkout repository
         uses: actions/checkout@v5
 
@@ -243,6 +246,9 @@ jobs:
           platform=${{ matrix.platform }}
           echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
 
+      - name: Delete huge unnecessary tools folder
+        run: rm -rf /opt/hostedtoolcache
+
       - name: Checkout repository
         uses: actions/checkout@v5
 

CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.38] - 2025-11-24
+
+### Fixed
+
+- 🔍 Hybrid search now works reliably after recent changes.
+- 🛠️ Tool server saving now handles errors gracefully, preventing failed saves from impacting the UI.
+- 🔐 SSO/OIDC code fixed to improve login reliability and better handle edge cases.
+
 ## [0.6.37] - 2025-11-24
 
 ### Added

backend/open_webui/config.py

@@ -620,6 +620,11 @@ def __getattr__(self, key):
     os.environ.get("OAUTH_UPDATE_PICTURE_ON_LOGIN", "False").lower() == "true",
 )
 
+OAUTH_ACCESS_TOKEN_REQUEST_INCLUDE_CLIENT_ID = (
+    os.environ.get("OAUTH_ACCESS_TOKEN_REQUEST_INCLUDE_CLIENT_ID", "False").lower()
+    == "true"
+)
+
 
 def load_oauth_providers():
     OAUTH_PROVIDERS.clear()

backend/open_webui/retrieval/utils.py

@@ -90,6 +90,20 @@ class VectorSearchRetriever(BaseRetriever):
     embedding_function: Any
     top_k: int
 
+    def _get_relevant_documents(
+        self, query: str, *, run_manager: CallbackManagerForRetrieverRun
+    ) -> list[Document]:
+        """Get documents relevant to a query.
+
+        Args:
+            query: String to find relevant documents for.
+            run_manager: The callback handler to use.
+
+        Returns:
+            List of relevant documents.
+        """
+        return []
+
     async def _aget_relevant_documents(
         self,
         query: str,
@@ -1231,6 +1245,25 @@ class Config:
         extra = "forbid"
         arbitrary_types_allowed = True
 
+    def compress_documents(
+        self,
+        documents: Sequence[Document],
+        query: str,
+        callbacks: Optional[Callbacks] = None,
+    ) -> Sequence[Document]:
+        """Compress retrieved documents given the query context.
+
+        Args:
+            documents: The retrieved documents.
+            query: The query context.
+            callbacks: Optional callbacks to run during compression.
+
+        Returns:
+            The compressed documents.
+
+        """
+        return []
+
     async def acompress_documents(
         self,
         documents: Sequence[Document],
@@ -1241,9 +1274,7 @@ async def acompress_documents(
 
         scores = None
         if reranking:
-            scores = self.reranking_function(
-                [(query, doc.page_content) for doc in documents]
-            )
+            scores = self.reranking_function(query, documents)
         else:
             from sentence_transformers import util
 

backend/open_webui/utils/oauth.py

@@ -53,6 +53,7 @@
     OAUTH_ADMIN_ROLES,
     OAUTH_ALLOWED_DOMAINS,
     OAUTH_UPDATE_PICTURE_ON_LOGIN,
+    OAUTH_ACCESS_TOKEN_REQUEST_INCLUDE_CLIENT_ID,
     WEBHOOK_URL,
     JWT_EXPIRES_IN,
     AppConfig,
@@ -1273,11 +1274,13 @@ async def handle_callback(self, request, provider, response):
             client = self.get_client(provider)
 
             auth_params = {}
+
             if client:
-                if hasattr(client, "client_id"):
+                if (
+                    hasattr(client, "client_id")
+                    and OAUTH_ACCESS_TOKEN_REQUEST_INCLUDE_CLIENT_ID
+                ):
                     auth_params["client_id"] = client.client_id
-                if hasattr(client, "client_secret"):
-                    auth_params["client_secret"] = client.client_secret
 
             try:
                 token = await client.authorize_access_token(request, **auth_params)

package-lock.json

@@ -1,6 +1,6 @@
 {
 	"name": "open-webui",
-	"version": "0.6.37",
+	"version": "0.6.38",
 	"private": true,
 	"scripts": {
 		"dev": "npm run pyodide:fetch && vite dev --host",

package.json

@@ -284,6 +284,7 @@
 				headers = JSON.stringify(_headers, null, 2);
 			} catch (error) {
 				toast.error($i18n.t('Headers must be a valid JSON object'));
+				loading = false;
 				return;
 			}
 		}

src/lib/components/AddToolServerModal.svelte

@@ -269,7 +269,7 @@
 	"Click on the user role button to change a user's role.": "Clicca sul pulsante del ruolo utente per modificare il ruolo di un utente.",
 	"Clipboard write permission denied. Please check your browser settings to grant the necessary access.": "Autorizzazione di scrittura negli appunti negata. Controlla le impostazioni del browser per concedere l'accesso necessario.",
 	"Clone": "Clone",
-	"Clone Chat": "CLona Chat",
+	"Clone Chat": "Clona Chat",
 	"Clone of {{TITLE}}": "Clone di {{TITLE}}",
 	"Close": "Chiudi",
 	"Close Banner": "",

src/lib/i18n/locales/it-IT/translation.json

@@ -145,7 +145,7 @@
 	"Archived Chats": "已归档对话",
 	"archived-chat-export": "导出已归档对话",
 	"Are you sure you want to clear all memories? This action cannot be undone.": "您确认要清除所有记忆吗？清除后无法还原。",
-	"Are you sure you want to delete \"{{NAME}}\"?": "",
+	"Are you sure you want to delete \"{{NAME}}\"?": "您确认要删除“{{NAME}}”吗？",
 	"Are you sure you want to delete this channel?": "您确认要删除此频道吗？",
 	"Are you sure you want to delete this message?": "您确认要删除此消息吗？",
 	"Are you sure you want to unarchive all archived chats?": "您确认要取消所有已归档的对话吗？",
@@ -406,7 +406,7 @@
 	"Delete": "删除",
 	"Delete a model": "删除模型",
 	"Delete All Chats": "删除所有对话记录",
-	"Delete all contents inside this folder": "",
+	"Delete all contents inside this folder": "删除此分组内的所有内容",
 	"Delete All Models": "删除所有模型",
 	"Delete Chat": "删除对话记录",
 	"Delete chat?": "要删除此对话记录吗？",
@@ -1015,7 +1015,7 @@
 	"Max Upload Size": "最大上传大小",
 	"Maximum of 3 models can be downloaded simultaneously. Please try again later.": "最多可同时下载 3 个模型，请稍后重试。",
 	"May": "五月",
-	"MBR": "",
+	"MBR": "成员",
 	"MCP": "MCP",
 	"MCP support is experimental and its specification changes often, which can lead to incompatibilities. OpenAPI specification support is directly maintained by the Open WebUI team, making it the more reliable option for compatibility.": "MCP 支持仍处于实验阶段，因其规范变化频繁，可能会出现不兼容的情况。而 OpenAPI 规范由 Open WebUI 团队维护，在兼容性方面更加可靠。",
 	"Medium": "中",