RepoJournal
Open WebUI @open-webui
73 wires and counting

$ follow Open WebUI

Keep up with Open WebUI in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-01
stories 39
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

orjson SSE frame split and lazy debug logs land in Open WebUI

By RepoJournal · Filed · About Open WebUI

Classic298 joaoback
2 people shipped this
Classic298 @Classic298 4 cited joaoback @joaoback 1 cited

Two performance patches and a correctness fix land in Open WebUI, including a latent SSE corruption bug when ENABLE_ORJSON is set.

A correctness fix for the Valkey/orjson backend addresses a silent data-loss bug in streaming responses. orjson emits U+2028, U+2029, and U+0085 raw, and Python treats those as line boundaries, so a model output containing one can split a `data: {...}` SSE frame mid-stream. `utils/middleware.py` reassembles frames with `splitlines()`, so the delta is dropped with no error. This is a breaking change in behavior only for setups with `ENABLE_ORJSON` set; those setups should update to get the escaping fix. [1]

Performance work on the Valkey vector store and the logging path both target wasted work. The Valkey backend now serializes chunk metadata through `JSONCodec`, which selects orjson when `ENABLE_ORJSON` is set, instead of the stdlib path on every insert and parse. Since `metadata_json` is never matched as text, switching codecs is safe and faster. Meanwhile, `GLOBAL_LOG_LEVEL` defaults to INFO, so every `log.debug(...)` call builds its f-string message before being discarded. That happens at 187 call sites on every request, with the worst offender in `process_chat_payload`, which stringifies the whole request body including full conversation history once per chat completion. Debug log messages are now built lazily, so disabled debug logs cost nothing. [2][3]

Two small cleanups round out the set. A stray unused `json` import was removed from `models/chats.py`; the module only referenced SQL function names like `json_each` inside `text()` strings. And new pt-BR translations cover UI items added in recent releases, with a consistency pass over existing strings for grammar, tone, capitalization, and pluralization, preserving placeholders and hotkeys. No logic changes in the i18n effort. [4][5]

Action items

References

  1. [1] fix: escape line separators in orjson output (#27819) ↗ open-webui/open-webui
  2. [2] perf: use the orjson codec for Valkey vector metadata (#27805) ↗ open-webui/open-webui
  3. [3] perf: build debug log messages lazily so disabled debug logs cost nothing ↗ open-webui/open-webui
  4. [4] chore: remove unused json import in models/chats.py (#27796) ↗ open-webui/open-webui
  5. [5] i18n: add pt-BR translations for newly added UI items and consistency pass ↗ open-webui/open-webui

$ ls open-webui/reviews/ # the step-back reads

the week in review Open WebUI 0.11.2 ships as nine security advisories land the month in review Open WebUI 0.11.1 adds tool approval, 0.11.2 fixes
Topics: Local LLMs AI / ML Full archive →

Quick answers

What shipped in Open WebUI on August 1, 2026?
Two performance patches and a correctness fix land in Open WebUI, including a latent SSE corruption bug when ENABLE_ORJSON is set. In total, 22 commits and 17 pull requests landed.
Who contributed to Open WebUI on August 1, 2026?
2 developers shipped this update, including joaoback and Classic298.
What were the notable Open WebUI updates?
fix: escape line separators in orjson output (#27819), perf: use the orjson codec for Valkey vector metadata (#27805), and perf: build debug log messages lazily so disabled debug logs cost nothing.
♥

$ log @open-webui --recent

Open WebUI ships five security fixes for auth and request handling 8 shipped Four breaking security advisories expose data and enable account takeover in Open WebUI 17 shipped Open WebUI 0.11.2 ships with tool parsing fix 90 shipped Fixes Redis Cluster stop, German catalog drift 8 shipped

$ log --all # elsewhere on the wire

@golang Fast-path receive buffer cleared on stream reset Meta React Native adds Stable API guards to renderer attributed string

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.