Web-search allow and block rules were matched against the whole URL, so some links slipped past them. 0.10.2 matches against the host instead. If you lean on domain filtering to keep a self-hosted deployment scoped, that gap was real until this release.
Image-generation workflows were written to server logs at the default log level, putting user-authored prompt text in front of anyone who reads operator logs. This release stops logging them by default.
A single request returning an authorization error used to sign the user out. The app now confirms the session is actually dead before redirecting to login, so one failed call no longer ends a valid session.
Upgrading an older SQLite install could crash during the user-table migration or corrupt saved user settings, leaving an instance that will not start or will not log in. The migration path is fixed here — snapshot the database before upgrading anyway.
Per-connection Ollama and OpenAI settings can now come from the OLLAMA_API_CONFIGS and OPENAI_API_CONFIGS environment variables, so multi-backend deployments are configurable at deploy time rather than by clicking through admin settings.
Terms in this piece · Glossary
RAG — Retrieval-augmented generation — fetching relevant documents first and pasting them into the model's context so it answers from your data instead of memory.
Why it matters
Open WebUI's v0.10.2 adds streamed reasoning rendering, folder-preserving knowledge base uploads, and finer-grained memory controls — useful if you run a self-hosted chat frontend over Ollama/OpenAI-compatible backends and want RAGRetrieval-augmented generation — fetching relevant documents first and pasting them into the model's context so it answers from your data instead of memory.Full definition → structure and reasoning visibility without building your own UI.
Key quotes
“Models that emit thinking or reasoning now show that content as it streams, and it renders correctly in the chat overview and in exported conversations.”
github-actions[bot]
“Administrators can now keep memory tools available while choosing not to add stored memories to the system context, using the new 'Memory System Context' toggle in admin settings.”
github-actions[bot]
“Automatically saved memories now focus on enduring details like preferences and goals and skip one-off things like meals, routine events, or passing mood unless you ask to remember them.”
github-actions[bot]
“This release includes security and access-control fixes. We recommend updating production deployments at your earliest convenience. Not all security fixes in this version may be enumerated in the fixed section — some may be withheld for a short time to give administrators time to upgrade.”
github-actions[bot]
“Domain allow and block rules for web search results are now matched against the host, closing a gap where some URLs could slip past the filter.”
