fix(container): update image ghcr.io/open-webui/open-webui ( v0.6.30 ➔ v0.6.31 )

[unsc-oni-ancilla]

This PR contains the following updates:

Package	Update	Change
ghcr.io/open-webui/open-webui	patch	v0.6.30 -> v0.6.31

---

Release Notes

open-webui/open-webui (ghcr.io/open-webui/open-webui)

v0.6.31

Compare Source

[0.6.31] - 2025-09-25

Added

• 🔌 MCP (streamable HTTP) server support was added alongside existing OpenAPI server integration, allowing users to connect both server types through an improved server configuration interface. #​15932 #​16651, Commit, Commit, Commit, Commit, Commit, Commit
• 🔐 To enable MCP server authentication, OAuth 2.1 dynamic client registration was implemented with secure automatic client registration, encrypted session management, and seamless authentication flows. Commit, Commit, Commit, Commit, Docs:#​709
• 🛠️ External & Built-In Tools can now support rich UI element embedding (Docs), allowing tools to return HTML content and interactive iframes that display directly within chat conversations with configurable security settings. Commit, Commit, Commit, Commit
• 📝 Note editor now supports drag-and-drop reordering of list items with visual drag handles, making list organization more intuitive and efficient. Commit, Commit
• 🔍 Search modal was enhanced with quick action buttons for starting new conversations and creating notes, with intelligent content pre-population from search queries. Commit, Commit, Commit
• 🛠️ Tool user valve configuration interface was added to the integrations menu, displaying clickable gear icon buttons with tooltips for tools that support user-specific settings, making personal tool configurations easily accessible. Commit
• 👥 Channel access control was enhanced to require write permissions for posting, editing, and deleting messages, while read-only users can view content but cannot contribute. #​17543
• 💬 Channel models now support image processing, allowing AI assistants to view and analyze images shared in conversation threads. Commit
• 🌐 Attach Webpage button was added to the message input menu, providing a user-friendly modal interface for attaching web content and YouTube videos as an alternative to the existing URL syntax. #​17534
• 🔐 Redis session storage support was added for OAuth redirects, providing better state handling in multi-pod Kubernetes deployments and resolving CSRF mismatch errors. #​17223, #​15373
• 🔍 Ollama Cloud web search integration was added as a new search engine option, providing access to web search functionality through Ollama's cloud infrastructure. Commit, Commit, Commit, Commit, Docs:#​708
• 🔍 Perplexity Websearch API integration was added as a new search engine option, providing access to the new websearch functionality provided by Perplexity. #​17756, Commit
• ☁️ OneDrive integration was improved to support separate client IDs for personal and business authentication, enabling both integrations to work simultaneously. #​17619, Docs, Docs
• 📝 Pending user overlay content now supports markdown formatting, enabling rich text display for custom messages similar to banner functionality. #​17681
• 🎨 Image generation model selection was centralized to enable dynamic model override in function calls, allowing pipes and tools to specify different models than the global default while maintaining backward compatibility. #​17689
• 🎨 Interface design was modernized with updated visual styling, improved spacing, and refined component layouts across modals, sidebar, settings, and navigation elements. Commit, Commit, Commit
• 📊 Notes query performance was optimized through database-level filtering and separated access control logic, reducing memory usage and eliminating N+1 query problems for better scalability. #​17607 Commit
• ⚡ Page loading performance was optimized by deferring API requests until components are actually opened, including ChangelogModal, ModelSelector, RecursiveFolder, ArchivedChatsModal, and SearchModal. #​17542, #​17555, #​17557, #​17541, #​17640
• ⚡ Bundle size was reduced by 1.58MB through optimized highlight.js language support, improving page loading speed and reducing bandwidth usage. #​17645
• ⚡ Editor collaboration functionality was refactored to reduce package size by 390KB and minimize compilation errors, improving build performance and reliability. #​17593
• ♿ Enhanced user interface accessibility through the addition of unique element IDs, improving targeting for testing, styling, and assistive technologies while providing better semantic markup for screen readers and accessibility tools. #​17746
• 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
• 🌐 Translations for Portuguese (Brazil), Chinese (Simplified and Traditional), Korean, Irish, Spanish, Finnish, French, Kabyle, Russian, and Catalan were enhanced and improved.

Fixed

• 🛡️ SVG content security was enhanced by implementing DOMPurify sanitization to prevent XSS attacks through malicious SVG elements, ensuring safe rendering of user-generated SVG content. Commit
• ☁️ OneDrive attachment menu rendering issues were resolved by restructuring the submenu interface from dropdown to tabbed navigation, preventing menu items from being hidden or clipped due to overflow constraints. #​17554, Commit
• 💬 Attached conversation references now persist throughout the entire chat session, ensuring models can continue querying referenced conversations after multiple conversation turns. #​17750
• 🔍 Search modal text box focus issues after pinning or unpinning chats were resolved, allowing users to properly exit the search interface by clicking outside the text box. #​17743
• 🔍 Search function chat list is now properly updated in real-time when chats are created or deleted, eliminating stale search results and preview loading failures. #​17741
• 💬 Chat jitter and delayed code block expansion in multi-model sessions were resolved by reverting dynamic CodeEditor loading, restoring stable rendering behavior. #​17715, #​17684
• 📎 File upload handling was improved to properly recognize uploaded files even when no accompanying text message is provided, resolving issues where attachments were ignored in custom prompts. #​17492
• 💬 Chat conversation referencing within projects was restored by including foldered chats in the reference menu, allowing users to properly quote conversations from within their project scope. #​17530
• 🔍 RAG query generation is now skipped when all attached files are set to full context mode, preventing unnecessary retrieval operations and improving system efficiency. #​17744
• 💾 Memory leaks in file handling and HTTP connections are prevented through proper resource cleanup, ensuring stable memory usage during large file downloads and processing operations. #​17608
• 🔐 OAuth access token refresh errors are resolved by properly implementing async/await patterns, preventing "coroutine object has no attribute get" failures during token expiry. #​17585, #​17678
• ⚙️ Valve behavior was improved to properly handle default values and array types, ensuring only explicitly set values are persisted while maintaining consistent distinction between custom and default valve states. #​17664
• 🔍 Hybrid search functionality was enhanced to handle inconsistent parameter types and prevent failures when collection results are None, empty, or in unexpected formats. #​17617
• 📁 Empty folder deletion is now allowed regardless of chat deletion permission restrictions, resolving cases where users couldn't remove folders after deleting all contained chats. #​17683
• 📝 Rich text editor console errors were resolved by adding proper error handling when the TipTap editor view is not available or not yet mounted. #​17697
• 🗒️ Hidden models are now properly excluded from the notes section dropdown and default model selection, preventing users from accessing models they shouldn't see. #​17722
• 🖼️ AI-generated image download filenames now use a clean, translatable "Generated Image" format instead of potentially problematic response text, improving file management and compatibility. #​17721
• 🎨 Toggle switch display issues in the Integrations interface are fixed, preventing background highlighting and obscuring on hover. #​17564

Changed

• 👥 Channel permissions now require write access for message posting, editing, and deletion, with existing user groups defaulting to read-only access requiring manual admin migration to write permissions for full participation.
• ☁️ OneDrive environment variable configuration was updated to use separate ONEDRIVE_CLIENT_ID_PERSONAL and ONEDRIVE_CLIENT_ID_BUSINESS variables for better client ID separation, while maintaining backward compatibility with the legacy ONEDRIVE_CLIENT_ID variable. Docs, Docs

[!TIP]
Looking for an Enterprise Plan? – Speak with Our Sales Team Today!

Get enhanced capabilities, including custom theming and branding, Service Level Agreement (SLA) support, and more!

👏 Massive thanks to our incredible contributors for their hard work and dedication to making this release possible:
@​Classic298, @​Cyp9715, @​helax28, @​aindriu80, @​aleixdorca, @​rgaricano, @​ShirasawaSama, @​cableman, @​joaoback, @​Kylapaallikko, @​BoFFire, @​jmleksan, @​andrewbbaek, @​taylorwilsdon, @​elabbarw

Sponsors 🙌

🚀 We'd like to extend a heartfelt thank you to our amazing sponsors for their generous support (Note: We've excluded private sponsors from this list. If you'd like to get featured here, feel free to reach out to us!)

Emerald

• Tailscale
• Warp

@​amd, @​agency-agency, @​roosi-gmbh, @​feddersen-group, @​SRKConsulting, @​mushmax, @​rndmcnlly, @​icanbwell, @​Krambu-Travis, @​loitragg, @​haka4githu6, @​GenieDev101, @​CubicleGangster, @​GitDatamind, @​TOWaB, @​TheZigGroup, @​Classic298, @​comet-ml, @​FominVO, @​catalyst-net-nz, @​JrdnHans, @​hkosm, @​VeroFess, @​joaoback

v0.6.31

Compare Source

Added

• 🔌 MCP (streamable HTTP) server support was added alongside existing OpenAPI server integration, allowing users to connect both server types through an improved server configuration interface. #​15932 #​16651, Commit, Commit, Commit, Commit, Commit, Commit
• 🔐 To enable MCP server authentication, OAuth 2.1 dynamic client registration was implemented with secure automatic client registration, encrypted session management, and seamless authentication flows. Commit, Commit, Commit, Commit, Docs:#​709
• 🛠️ External & Built-In Tools can now support rich UI element embedding (Docs), allowing tools to return HTML content and interactive iframes that display directly within chat conversations with configurable security settings. Commit, Commit, Commit, Commit
• 📝 Note editor now supports drag-and-drop reordering of list items with visual drag handles, making list organization more intuitive and efficient. Commit, Commit
• 🔍 Search modal was enhanced with quick action buttons for starting new conversations and creating notes, with intelligent content pre-population from search queries. Commit, Commit, Commit
• 🛠️ Tool user valve configuration interface was added to the integrations menu, displaying clickable gear icon buttons with tooltips for tools that support user-specific settings, making personal tool configurations easily accessible. Commit
• 👥 Channel access control was enhanced to require write permissions for posting, editing, and deleting messages, while read-only users can view content but cannot contribute. #​17543
• 💬 Channel models now support image processing, allowing AI assistants to view and analyze images shared in conversation threads. Commit
• 🌐 Attach Webpage button was added to the message input menu, providing a user-friendly modal interface for attaching web content and YouTube videos as an alternative to the existing URL syntax. #​17534
• 🔐 Redis session storage support was added for OAuth redirects, providing better state handling in multi-pod Kubernetes deployments and resolving CSRF mismatch errors. #​17223, #​15373
• 🔍 Ollama Cloud web search integration was added as a new search engine option, providing access to web search functionality through Ollama's cloud infrastructure. Commit, Commit, Commit, Commit, Docs:#​708
• 🔍 Perplexity Websearch API integration was added as a new search engine option, providing access to the new websearch functionality provided by Perplexity. #​17756, Commit
• ☁️ OneDrive integration was improved to support separate client IDs for personal and business authentication, enabling both integrations to work simultaneously. #​17619, Docs, Docs
• 📝 Pending user overlay content now supports markdown formatting, enabling rich text display for custom messages similar to banner functionality. #​17681
• 🎨 Image generation model selection was centralized to enable dynamic model override in function calls, allowing pipes and tools to specify different models than the global default while maintaining backward compatibility. #​17689
• 🎨 Interface design was modernized with updated visual styling, improved spacing, and refined component layouts across modals, sidebar, settings, and navigation elements. Commit, Commit, Commit
• 📊 Notes query performance was optimized through database-level filtering and separated access control logic, reducing memory usage and eliminating N+1 query problems for better scalability. #​17607 Commit
• ⚡ Page loading performance was optimized by deferring API requests until components are actually opened, including ChangelogModal, ModelSelector, RecursiveFolder, ArchivedChatsModal, and SearchModal. #​17542, #​17555, #​17557, #​17541, #​17640
• ⚡ Bundle size was reduced by 1.58MB through optimized highlight.js language support, improving page loading speed and reducing bandwidth usage. #​17645
• ⚡ Editor collaboration functionality was refactored to reduce package size by 390KB and minimize compilation errors, improving build performance and reliability. #​17593
• ♿ Enhanced user interface accessibility through the addition of unique element IDs, improving targeting for testing, styling, and assistive technologies while providing better semantic markup for screen readers and accessibility tools. #​17746
• 🔄 Various improvements were implemented across the frontend and backend to enhance performance, stability, and security.
• 🌐 Translations for Portuguese (Brazil), Chinese (Simplified and Traditional), Korean, Irish, Spanish, Finnish, French, Kabyle, Russian, and Catalan were enhanced and improved.

Fixed

• 🛡️ SVG content security was enhanced by implementing DOMPurify sanitization to prevent XSS attacks through malicious SVG elements, ensuring safe rendering of user-generated SVG content. Commit
• ☁️ OneDrive attachment menu rendering issues were resolved by restructuring the submenu interface from dropdown to tabbed navigation, preventing menu items from being hidden or clipped due to overflow constraints. #​17554, Commit
• 💬 Attached conversation references now persist throughout the entire chat session, ensuring models can continue querying referenced conversations after multiple conversation turns. #​17750
• 🔍 Search modal text box focus issues after pinning or unpinning chats were resolved, allowing users to properly exit the search interface by clicking outside the text box. #​17743
• 🔍 Search function chat list is now properly updated in real-time when chats are created or deleted, eliminating stale search results and preview loading failures. #​17741
• 💬 Chat jitter and delayed code block expansion in multi-model sessions were resolved by reverting dynamic CodeEditor loading, restoring stable rendering behavior. #​17715, #​17684
• 📎 File upload handling was improved to properly recognize uploaded files even when no accompanying text message is provided, resolving issues where attachments were ignored in custom prompts. #​17492
• 💬 Chat conversation referencing within projects was restored by including foldered chats in the reference menu, allowing users to properly quote conversations from within their project scope. #​17530
• 🔍 RAG query generation is now skipped when all attached files are set to full context mode, preventing unnecessary retrieval operations and improving system efficiency. #​17744
• 💾 Memory leaks in file handling and HTTP connections are prevented through proper resource cleanup, ensuring stable memory usage during large file downloads and processing operations. #​17608
• 🔐 OAuth access token refresh errors are resolved by properly implementing async/await patterns, preventing "coroutine object has no attribute get" failures during token expiry. #​17585, #​17678
• ⚙️ Valve behavior was improved to properly handle default values and array types, ensuring only explicitly set values are persisted while maintaining consistent distinction between custom and default valve states. #​17664
• 🔍 Hybrid search functionality was enhanced to handle inconsistent parameter types and prevent failures when collection results are None, empty, or in unexpected formats. #​17617
• 📁 Empty folder deletion is now allowed regardless of chat deletion permission restrictions, resolving cases where users couldn't remove folders after deleting all contained chats. #​17683
• 📝 Rich text editor console errors were resolved by adding proper error handling when the TipTap editor view is not available or not yet mounted. #​17697
• 🗒️ Hidden models are now properly excluded from the notes section dropdown and default model selection, preventing users from accessing models they shouldn't see. #​17722
• 🖼️ AI-generated image download filenames now use a clean, translatable "Generated Image" format instead of potentially problematic response text, improving file management and compatibility. #​17721
• 🎨 Toggle switch display issues in the Integrations interface are fixed, preventing background highlighting and obscuring on hover. #​17564

Changed

• 👥 Channel permissions now require write access for message posting, editing, and deletion, with existing user groups defaulting to read-only access requiring manual admin migration to write permissions for full participation.
• ☁️ OneDrive environment variable configuration was updated to use separate ONEDRIVE_CLIENT_ID_PERSONAL and ONEDRIVE_CLIENT_ID_BUSINESS variables for better client ID separation, while maintaining backward compatibility with the legacy ONEDRIVE_CLIENT_ID variable. Docs, Docs

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[unsc-oni-ancilla]

--- kubernetes/apps/flux-system/flux-operator/app Kustomization: flux-system/flux-operator OCIRepository: flux-system/flux-operator

+++ kubernetes/apps/flux-system/flux-operator/app Kustomization: flux-system/flux-operator OCIRepository: flux-system/flux-operator

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 0.29.0
+    tag: 0.28.0
   url: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-operator
 
--- kubernetes/apps/flux-system/flux-instance/app Kustomization: flux-system/flux-instance OCIRepository: flux-system/flux-instance

+++ kubernetes/apps/flux-system/flux-instance/app Kustomization: flux-system/flux-instance OCIRepository: flux-system/flux-instance

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 0.29.0
+    tag: 0.28.0
   url: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-instance
 
--- kubernetes/apps/default/open-webui/app Kustomization: default/open-webui HelmRelease: default/open-webui

+++ kubernetes/apps/default/open-webui/app Kustomization: default/open-webui HelmRelease: default/open-webui

@@ -29,13 +29,13 @@

           app:
             env:
               OLLAMA_BASE_URL: http://10.0.30.6:11434
               TZ: America/New_York
             image:
               repository: ghcr.io/open-webui/open-webui
-              tag: v0.6.30
+              tag: v0.6.31
             resources:
               limits:
                 memory: 1500Mi
               requests:
                 cpu: 200m
                 memory: 1000Mi

[unsc-oni-ancilla]

--- HelmRelease: flux-system/flux-operator Deployment: flux-system/flux-operator

+++ HelmRelease: flux-system/flux-operator Deployment: flux-system/flux-operator

@@ -42,13 +42,13 @@

             drop:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/controlplaneio-fluxcd/flux-operator:v0.29.0
+        image: ghcr.io/controlplaneio-fluxcd/flux-operator:v0.28.0
         imagePullPolicy: IfNotPresent
         ports:
         - name: http-metrics
           containerPort: 8080
           protocol: TCP
         - name: http
--- HelmRelease: default/open-webui Deployment: default/open-webui

+++ HelmRelease: default/open-webui Deployment: default/open-webui

@@ -38,13 +38,13 @@

       containers:
       - env:
         - name: OLLAMA_BASE_URL
           value: http://10.0.30.6:11434
         - name: TZ
           value: America/New_York
-        image: ghcr.io/open-webui/open-webui:v0.6.30
+        image: ghcr.io/open-webui/open-webui:v0.6.31
         name: app
         resources:
           limits:
             memory: 1500Mi
           requests:
             cpu: 200m