github lemonade-sdk/lemonade v11.5.0

11 hours ago

Headline

  • The Lemonade Router is complete: name a collection.router model and requests are steered by rule, classifier, semantic-similarity, or LLM-as-router policies, with per-candidate decision traces, a GUI for authoring and editing routers, and a POST /v1/classify text-classification endpoint backed by a new onnxruntime backend.
  • ModelScope is now searchable alongside Hugging Face in the Model Manager, with source-aware model discovery, download, and registration.
  • A server-side job engine lets clients post multi-step recipes and manage them through /jobs endpoints, with pause, interrupt, resume, and delete lifecycle control.
  • lemond can act as an MCP client host, connecting to external stdio MCP servers and discovering their tools through admin-gated /internal/mcp/* endpoints.
  • The lemonade CLI now supports HTTPS/TLS connections to secure remote endpoints, honoring http(s):// schemes in LEMONADE_HOST.

Breaking Changes

  • The server no longer sends Access-Control-Allow-Origin: * by default: non-loopback browser origins are now rejected with 403 unless listed in LEMONADE_ALLOWED_ORIGINS, and the WebSocket same-origin fallback has been removed. Remote or LAN browser clients must set LEMONADE_ALLOWED_ORIGINS.

Lemonade Server

Operating System Downloads
Windows lemonade.msi
Ubuntu 24.04+ Launchpad PPA
Debian 13 (x86_64) lemonade-server_11.5.0-debian13_amd64.deb
Debian 13 (ARM64) lemonade-server_11.5.0-debian13_arm64.deb
Fedora 43 (x86_64) lemonade-server-11.5.0-fc43.x86_64.rpm
Fedora 43 (ARM64) lemonade-server-11.5.0-fc43.aarch64.rpm
Fedora 44 (x86_64) lemonade-server-11.5.0-fc44.x86_64.rpm
Fedora 44 (ARM64) lemonade-server-11.5.0-fc44.aarch64.rpm
macOS Lemonade-11.5.0-Darwin.pkg

Other platforms? See our Installation Options for Docker, Snap, Arch, Debian, and more.

Embeddable Lemonade

Portable binaries for bundling into your own installer. Run lemond ./ as a subprocess.

Platform Download
Ubuntu x64 lemonade-embeddable-11.5.0-ubuntu-x64.tar.gz
Ubuntu arm64 lemonade-embeddable-11.5.0-ubuntu-arm64.tar.gz
Windows x64 lemonade-embeddable-11.5.0-windows-x64.zip
macOS arm64 lemonade-embeddable-11.5.0-macos-arm64.tar.gz

What's Changed

Thanks @OussamaBATOUCHE, @QuManu, @SlawomirNowaczyk, @abn, @ckopanos, @ekkoitac, @fl0rianr, @jon-hotaisle, @kenvandine, @kyuubyN, @meghsat, @midu16, @pwilkin, @radhaksri, @ramkrishna2910, @superm1, @therealjuanmartinez for your awesome contributions to this release!

Click to expand changelog
  • Update version to prepare for release by @superm1 in #2702
  • fix(security): pin SHA-256 checksums for contributor-hosted backend assets by @superm1 in #2710
  • fix(ci): always run macOS C++ unit tests regardless of signing by @superm1 in #2712
  • docs (fix): typo in readme by @jon-hotaisle in #2701
  • feat(router): onnxruntime classification backend + /v1/classify (capability for #2592; policy wiring in #2384) by @ramkrishna2910 in #2626
  • Fix: re-pulling a collection.router model fails with "unknown key 'source'" by @SlawomirNowaczyk in #2703
  • feat: add Modelscope search by @fl0rianr in #2716
  • fix(websocket): allow Windows Tauri WebView2 origin for upgrades by @superm1 in #2721
  • fix: quote /MANIFESTINPUT path and detect RX 7600 as gfx110X by @kyuubyN in #2678
  • Add server-side MCP client host foundation by @fl0rianr in #2605
  • fix(docker): Add libreadline8 to Dockerfile dependencies by @ckopanos in #2733
  • fix(security): apply HTTP trust policies to POST request paths by @fl0rianr in #2741
  • feat: job engine by @pwilkin in #2718
  • Keep sd-cpp validation images out of auto-update PRs by @fl0rianr in #2502
  • feat(server): support PNA CORS, custom allowed origins, and custom headers by @abn in #2660
  • feat(cli): add native HTTPS/TLS and URL scheme parsing support by @abn in #2373
  • feat(trellis): per-request UV atlas method, bump trellis to v0.4.3 by @pwilkin in #2667
  • fix(docker): include build-essential in runtime stage for vLLM Triton… by @midu16 in #2749
  • Wire collection.router classifiers to Router::classify + validate model capability at parse time by @QuManu in #2727
  • [Router] llm router classifier + routing.router desugaring (#2405) by @OussamaBATOUCHE in #2698
  • Support gfx950, using the same path as gfx942 by @SlawomirNowaczyk in #2687
  • feat(telemetry): honor incoming W3C traceparent (opt-in) by @radhaksri in #2734
  • [Router] [UI] Author collection.router in the custom-collection panel (#2406) by @meghsat in #2693
  • Router end-to-end demo, integration test, and docs (#2388) by @ramkrishna2910 in #2732
  • fix(router): isolate routing helpers from standard model LRU slots by @fl0rianr in #2729
  • Update version to 11.5.0 by @ramkrishna2910 in #2772
  • fix: detect Arch ggml HIP plugin paths by @ekkoitac in #2760
  • api: expose is_busy and is_streaming flags in /health response by @therealjuanmartinez in #2720
  • Fix arm64 PPA packages missing bundled web UI by @kenvandine in #2770
  • fix: resolve CORS blockage on MCP Gateway Endpoint by @abn in #2771

New Contributors

Full Changelog: v11.0.0...v11.5.0


Windows installers are signed. Free code signing provided by SignPath.io, certificate by SignPath Foundation. See our Code Signing Policy.

Router Milestone Contributors

The Lemonade Router shipped across v11.0.0 and v11.5.0 (17 PRs). PR authors: @eddierichter-amd, @SlawomirNowaczyk, @ramkrishna2910, @OussamaBATOUCHE, @QuManu, @meghsat, @fl0rianr, @coolduderules. Reviewers: @fl0rianr, @SlawomirNowaczyk, @eddierichter-amd, @ramkrishna2910, @meghsat, @superm1, @bong-water-water-bong.

Don't miss a new lemonade release

NewReleases is sending notifications on new releases.