Tencent/WeKnora v0.2.5

on GitHub

[0.2.5] - 2025-12-22

🚀 New Features

• NEW: In-Input Knowledge Base and File Selection

  • Support selecting knowledge bases and files directly within the input box
  • Display @mentioned knowledge bases and files in message stream
  • Dynamic placeholder text based on knowledge base and web search status

• NEW: API Key Authentication Support

  • Added API Key authentication mechanism
  • Optimized Swagger documentation security configuration
  • Disabled Swagger documentation access in non-production environments by default

• NEW: User Registration Control

  • Added DISABLE_REGISTRATION environment variable to control user registration

• NEW: User Conversation Model Selection

  • Added user conversation model selection state management with store two-way binding

🔒 Security Enhancements

• ENHANCED: MCP stdio transport security validation to prevent command injection attacks
• ENHANCED: SQL security validation rebuilt using PostgreSQL official parser for enhanced query protection
• ENHANCED: Security policy updated with vulnerability reporting guidelines

⚡ Improvements

• IMPROVED: Streaming rendering mechanism optimized for token-by-token Markdown content parsing
• IMPROVED: FAQ import progress refactored to use Redis for task state storage
• IMPROVED: Enhanced knowledge base and search functionality logic

🐛 Bug Fixes

• FIXED: Corrected knowledge ID retrieval in FAQ import tasks
• FIXED: Force removal of legacy vlm_model_id field from knowledge_bases table
• FIXED: Disabled Ollama option for ReRank models in model management with tooltip