open-webui

ci: stop running the test suite automatically on release pull requests (#34037 )

While a release pull request is open, every commit to dev restarted the full test suite and cancelled the run that was in progress, so runs rarely finished and they kept taking runners from the builds here. The suite is now started by hand from the tests repo against the commit we want checked. A run started there is not cancelled by new commits, so it finishes, and nothing starts a new one on every commit.

Classic298 · 2026-11-11 10:11:39 +09:00

27b82831a4

Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Tim Baek · 2026-11-09 21:53:50 +09:00

beefec62b8

feat: build the Docker image from locked, hash-verified dependencies (#33981 )

The image used to install only the directly pinned packages and resolved everything below them fresh from PyPI on every build, so the same commit could produce different images. The standard and slim images now install from lock files that pin every package with hashes, except PyTorch and its few own dependencies, which still come from the PyTorch index so the CPU and CUDA variants keep working. A new CI check fails when a requirements file changes without regenerating its lock, and the script that regenerates them sits next to the requirements.

Fixes #33979

Classic298 · 2026-11-09 21:42:59 +09:00

1c58242b4f

fix: Docker, frontend CI and pip builds fail when the ONNX runtime GPU download times out (#33917 )

Installing the frontend dependencies makes the onnxruntime-node package download its GPU binaries from GitHub releases, and the whole install fails whenever that download times out. Neither the frontend build nor the Docker image uses those binaries (the image only ships the built frontend), so the Docker build, the frontend CI and building the Python package now skip that download with ONNXRUNTIME_NODE_INSTALL_CUDA=skip. The regular CPU binaries are part of the npm package and are not affected.

Classic298 · 2026-11-08 20:00:07 +09:00

d67c707027

ci: lock the exact versions of the GitHub Actions our workflows use (#33679 )

Our workflows refer to actions by tag, and a tag can be moved to different code after we reviewed it. This adds GitHub's workflow lockfile, which records the exact commit behind each action version, and the workflows now name exact releases (v5.1.0 instead of v5, for example) as the lockfile tool requires. Dependabot already tracks these actions. The regression workflow that follows the tests repo's main branch is not covered.

Classic298 · 2026-11-04 05:06:30 +09:00

40b1c561a5

chore: Python 3.12 and Debian 13 base image (#32861 )

The Docker image now runs Python 3.12 on Debian 13 (trixie) instead of Python 3.11 on Debian 12, and the pip install docs recommend 3.12. Image size stays about the same: the slim image is 1 MB smaller and the standard image is about 50 MB larger, mostly from the newer ffmpeg and pandoc that Debian 13 ships. Admins should know that custom functions, tools and anything installed with pip inside the container now run on Python 3.12, so a package that only has builds for 3.11 needs a newer version. Installing with pip still works on both Python 3.11 and 3.12.

Classic298 · 2026-10-22 04:51:57 +09:00

a915df8ce1

chore: cicd

Timothy Jaeryang Baek · 2026-10-11 01:09:41 +04:00

0b49167ae0

refac

Timothy Jaeryang Baek · 2026-10-05 09:24:43 +04:00

51f0e01258

ci: run the external regression suite on release pull requests (#29313 ) (#29678 )

* ci: run the external regression suite on release pull requests

Adds a workflow that runs the open-webui/tests unit suite against release
candidates, so a release that reintroduces a fixed bug is caught before it is cut
rather than after users report it. The suite is roughly 4500 source-level tests
pinned to specific past issues and PRs, and takes about three minutes; the
dependency install dominates the run and is cached.

It runs only on pull requests into main whose title starts with a version, which
is how releases are titled here, or which touch package.json. Everything else
into main, and every pull request into dev, skips it and reports green.

Two settings are needed for this to block anything, both outside the diff:
require the Regression / Result check on main, and require branches to be up to
date before merging so the suite covers what actually lands.

The reusable workflow is referenced at @main so a release always runs the current
tests. Pinning it to a tag instead is a reasonable call to make here.

* ci: cancel superseded regression runs

A queued run on a release PR meant a stale commit's suite kept blocking
the required check after newer commits shipped, wasting a runner slot
and the author's time waiting on a result nobody needed. Cancel it
instead so the suite always runs against the latest push.

* ci: rename the Regression workflow to Tests

* Update regression.yaml

* ci: gate the test suite with a job condition instead of a gate job

Replaces the gate job with a condition on the suite job itself. The job existed
to look for a version title or a change to package.json, and the package.json
check is redundant: a release bumps the version in that file and carries it in
the title, so the title alone identifies one. That removes a runner, an API call
and the pull-requests read permission.

The suite now runs on version-titled pull requests from dev into main, and on
version-titled pull requests into dev so it can be exercised outside a release.
An edit only re-runs it when the title itself changed, and an edit no longer
cancels a suite that is already running, which would otherwise leave the check
green with nothing behind it.

* ci: match only the version prefixes releases actually use

Release pull requests are titled 0.11.3, not v0.11.3, so the leading v never
matched. The remaining digits are dropped with it and the dot is kept, so a
title that merely starts with a digit does not run the suite.

Signed-off-by: Adam Tao <tcx4c70@gmail.com>
Signed-off-by: Riley Des <riley.desserre@improving.com>
Signed-off-by: James Liounis <james.liounis@perplexity.ai>
Co-authored-by: joaoback <156559121+joaoback@users.noreply.github.com>
Co-authored-by: Algorithm5838 <108630393+Algorithm5838@users.noreply.github.com>
Co-authored-by: Kylapaallikko <Kylapaallikko@users.noreply.github.com>
Co-authored-by: Teay <pythontogoplease@gmail.com>
Co-authored-by: tcx4c70 <tcx4c70@gmail.com>
Co-authored-by: goodbey857 <76645482+goodbey857@users.noreply.github.com>
Co-authored-by: Jacob Leksan <63938553+jmleksan@users.noreply.github.com>
Co-authored-by: RomualdYT <romuald@gameurnews.fr>
Co-authored-by: Lucas <lucas@vanosenbruggen.com>
Co-authored-by: Classic298 <27028174+Classic298@users.noreply.github.com>
Co-authored-by: Constantine <Runixer@gmail.com>
Co-authored-by: Athanasios Oikonomou <athoik@gmail.com>
Co-authored-by: Shirasawa <764798966@qq.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Aleix Dorca <aleixdorca@mac.com>
Co-authored-by: Vincent Agra <agravj007@gmail.com>
Co-authored-by: Shamil <ashm.tech@proton.me>
Co-authored-by: Cyp <cypher9715@naver.com>
Co-authored-by: looselyhuman <fieldian@gmail.com>
Co-authored-by: Circe (Claude Code Sonnet 4.6) <circe@athena-council.org>
Co-authored-by: _00_ <131402327+rgaricano@users.noreply.github.com>
Co-authored-by: Daniel Nylander <po@danielnylander.se>
Co-authored-by: Daniel Nylander <daniel@danielnylander.se>
Co-authored-by: Asbjørn Dyhrberg Thegler <asbjoern@dyhrbergthegler.dk>
Co-authored-by: ShigekiTsuchiyama <ShigekiTsuchiyama@users.noreply.github.com>
Co-authored-by: berkant-koc <berkant-koc@users.noreply.github.com>
Co-authored-by: mayamsin <58122670+mayamsin@users.noreply.github.com>
Co-authored-by: G30 <50341825+silentoplayz@users.noreply.github.com>
Co-authored-by: Aindriú Mac Giolla Eoin <aindriu80@gmail.com>
Co-authored-by: POV9en <POV9en@users.noreply.github.com>
Co-authored-by: oxsignal <oxsignal@users.noreply.github.com>
Co-authored-by: Dara Adib <dara@quietapple.org>
Co-authored-by: Sergey Zinchenko <sergey.zinchenko.rnd@gmail.com>
Co-authored-by: maco <gosarmarcel7@gmail.com>
Co-authored-by: Sakıp Han Dursun <100518315+sakiphan@users.noreply.github.com>
Co-authored-by: anishgirianish <161533316+anishgirianish@users.noreply.github.com>
Co-authored-by: Mateusz Hajder <6783135+mhajder@users.noreply.github.com>
Co-authored-by: Amir Subhi <amirsubhi@hotmail.com>
Co-authored-by: sermikr0 <230672901+sermikr0@users.noreply.github.com>
Co-authored-by: bannert <58707896+bannert1337@users.noreply.github.com>
Co-authored-by: Boris Rybalkin <ribalkin@gmail.com>
Co-authored-by: HW <hwinkler@first-it-consulting.de>
Co-authored-by: sfwani <sfwani@users.noreply.github.com>
Co-authored-by: rileydes-improving <riley.desserre@improving.com>
Co-authored-by: Zixin Yu <183055163+ivvi0927@users.noreply.github.com>
Co-authored-by: Lukáš Kucharczyk <lukas@kucharczyk.xyz>
Co-authored-by: russelg <russelg@users.noreply.github.com>
Co-authored-by: Mr. Meowgi <ovehbe@gmail.com>
Co-authored-by: Zaid Marji <91486926+zaid-marji@users.noreply.github.com>
Co-authored-by: Craig <66838006+TipKnuckle@users.noreply.github.com>
Co-authored-by: James Liounis <james.liounis@perplexity.ai>
Co-authored-by: Chane Lu <2522992009@qq.com>
Co-authored-by: Justin Williams <justinjohnwilliams@gmail.com>
Co-authored-by: Syed Mustafa Quadri <175467872+code-quad3@users.noreply.github.com>
Co-authored-by: hungryBird <pantazis.marina@gmail.com>
Co-authored-by: Marina Pantazis <marina.pantazis@bit.admin.ch>
Co-authored-by: cwanglab <cwanglab@users.noreply.github.com>
Co-authored-by: Sicknine <156204309+SNaytiP@users.noreply.github.com>
Co-authored-by: JuanMa Diaz <torgus@gmail.com>
Co-authored-by: Syed Osama Ali Shah <86572800+osamaali313@users.noreply.github.com>

Tim Baek · 2026-09-04 19:44:21 -04:00

8652227eab

refac

Co-Authored-By: G30 <50341825+silentoplayz@users.noreply.github.com>

Timothy Jaeryang Baek · 2026-08-28 12:18:23 -04:00

62e5eab60b

ci: auto-label feature requests with the enhancement label (#28531 )

G30 · 2026-08-13 12:55:03 -06:00

5c8d9e69c4

ci: relabel bug reports when the title is corrected after opening (#28333 )

The labeler only listened for issues.opened, so it judged a title exactly
once. Reporters who omit the prefix are asked by the triage bot to add one,
and the title they then fix is never looked at again, leaving a genuine bug
report unlabelled until somebody notices it by hand.

It now also runs on issues.edited. Body only edits return immediately, so
the extra runs are limited to titles actually changing, and a bug label a
maintainer has already removed is not restored: on an edit the issue events
are checked for a previous removal first. The opened path is unchanged and
makes no additional API call.

The title pattern also required a delimiter after the bracket, so the
bracketed form the comment advertises, "[Bug] something is broken", never
matched unless it happened to be written "[Bug]: something is broken".
Both forms match now, while "[bug/perf]" keeps matching and titles that
merely mention the word, such as "[UI Bug]" or "fixed a typo", still do not.

G30 · 2026-08-10 20:45:02 -06:00

d661fb49b8

ci: auto-label bug reports created outside the issue form (#27256 )

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

G30 · 2026-07-23 23:07:25 -04:00

866e8582d1

refac

Timothy Jaeryang Baek · 2026-07-23 14:29:30 -04:00

132a29fd1c

refac

Timothy Jaeryang Baek · 2026-07-23 13:49:49 -04:00

0f82f40b70

refac

Timothy Jaeryang Baek · 2026-06-29 11:46:08 -05:00

c6ec1a3484

refac

Timothy Jaeryang Baek · 2026-06-28 21:59:19 -05:00

7c3802a55e

refac

Timothy Jaeryang Baek · 2026-06-25 14:19:21 +01:00

47a1bfdd15

refac

Timothy Jaeryang Baek · 2026-06-01 19:09:44 -07:00

1a97751e37

refac

Timothy Jaeryang Baek · 2026-06-01 19:01:14 -07:00

dc4dab7a07

refac

Timothy Jaeryang Baek · 2026-06-01 15:01:01 -07:00

4be25c4fdd

refac

Timothy Jaeryang Baek · 2026-06-01 14:38:49 -07:00

8862210139

refac

Timothy Jaeryang Baek · 2026-05-13 22:39:51 +09:00

d6dae36da0

chore: remove unused cypress tests

Timothy Jaeryang Baek · 2026-05-12 03:31:57 +09:00

9c18e707ce

refac: reorganize scripts and ci workflows

Timothy Jaeryang Baek · 2026-05-12 03:26:18 +09:00

070ab26501

chore: ci

Timothy Jaeryang Baek · 2026-03-25 17:33:46 -05:00

f5f128620a

chore: ci

Timothy Jaeryang Baek · 2026-03-25 17:14:13 -05:00

0ded0b7069

refac

Timothy Jaeryang Baek · 2026-03-25 16:58:02 -05:00

8cb47aebae

feat: add ruff linter & formatter (#22576 )

* chore: add ruff linter with base config

* ci: add ruff pre-commit hook

* ci: add ruff github actions workflow

* ci: run ruff only on changed files

Shamil · 2026-03-15 17:22:27 -05:00

b73010bb36

refac

Timothy Jaeryang Baek · 2026-03-07 20:56:05 -06:00

124ad948fe

refac

Timothy Jaeryang Baek · 2026-03-07 20:36:54 -06:00

e24299e66d

enh: sbom docker gh action

Timothy Jaeryang Baek · 2026-02-23 12:03:56 -06:00

febc66ef2b

refac

Timothy Jaeryang Baek · 2026-02-23 01:53:58 -06:00

1792f668f2

refac

Timothy Jaeryang Baek · 2026-02-22 16:18:32 -06:00

32aabe6bae

refac

Timothy Jaeryang Baek · 2025-12-22 01:02:50 +04:00

f0a04427e2

refac: hf github action

Timothy Jaeryang Baek · 2025-12-22 01:00:52 +04:00

088f62f1e1

Update docker-build.yaml

Timothy Jaeryang Baek · 2025-11-24 06:27:52 -05:00

7ad549b4fb

Merge pull request #17297 from open-webui/dependabot/github_actions/dev/actions/setup-node-5

build(deps): bump actions/setup-node from 4 to 5

Tim Jaeryang Baek · 2025-09-09 18:43:58 +04:00

8bc6a30c7b

Merge pull request #17298 from open-webui/dependabot/github_actions/dev/actions/setup-python-6

build(deps): bump actions/setup-python from 5 to 6

Tim Jaeryang Baek · 2025-09-09 18:43:51 +04:00

b7243e6efc

build(deps): bump actions/github-script from 7 to 8

Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot[bot] · 2025-09-09 14:35:13 +00:00

d863fd3626

build(deps): bump actions/setup-python from 5 to 6

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot[bot] · 2025-09-09 14:35:10 +00:00

3ff8deeea8

build(deps): bump actions/setup-node from 4 to 5

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot[bot] · 2025-09-09 14:35:06 +00:00

041a89ef5c

Merge pull request #17098 from open-webui/dependabot/github_actions/dev/actions/download-artifact-5

build(deps): bump actions/download-artifact from 4 to 5

Tim Jaeryang Baek · 2025-09-01 22:51:34 +04:00

3a38173c66

build(deps): bump actions/checkout from 4 to 5

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot[bot] · 2025-09-01 06:03:14 +00:00

4dd9484b48

build(deps): bump actions/download-artifact from 4 to 5

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot[bot] · 2025-09-01 06:02:57 +00:00

dbe36e841a

Add build-slim-image job to Docker workflow

Everett Wilber · 2025-08-27 18:27:16 -04:00

db4adc0e89

chore

Timothy Jaeryang Baek · 2025-07-19 19:20:14 +04:00

44a23a5c99

chore

Timothy Jaeryang Baek · 2025-07-17 17:53:36 +04:00

86e46ebe6a

chore: make usage of matrix more ideomatic

guenhter · 2025-06-05 06:55:10 +02:00

0fe82d119f

Add cuda126 image in docker-build.yaml

add USE_CUDA_VER=cu126 version to support cuda capability 7.0 and below

ER-EPR · 2025-06-02 17:44:17 +08:00

d649db4ef7

157 Commits