What's Changed
- fix(celery): resolve the broker client through Sentinel when Sentinel is on (#16313) to release v5.0 by @onyx-cherry-pick[bot] in #16315
- fix(deps): pin certifi to 2026.10.19 everywhere to release v5.0 by @onyx-cherry-pick[bot] in #16341
- fix(deps): bump pillow to 13.0.0 for GHSA-8g5g-8vmr-9782 (#16342) to release v5.0 by @claude[bot] in #16350
- fix(web): call OpenAPI plugins plugins, not actions, in the Plugins flow (#16366) to release v5.0 by @onyx-cherry-pick[bot] in #16378
- fix(web): show the OpenAPI schema validation error once (#16367) to release v5.0 by @devin-ai-integration[bot] in #16382
- fix(chat): show blocked and redirected custom tool calls as failed (#16368) to release v5.0 by @devin-ai-integration[bot] in #16383
- fix(web): list every connector source in Chat Preferences and explain the section (#16369) to release v5.0 by @devin-ai-integration[bot] in #16384
- fix(web): align plugin rows and the Plugins entry in the tools menu (#16370) to release v5.0 by @devin-ai-integration[bot] in #16385
- fix(web): close tool menus before opening the tool credentials dialog (#16371) to release v5.0 by @devin-ai-integration[bot] in #16386
- fix(connectors): route Google OAuth callbacks by connector path (#16379) to release v5.0 by @onyx-cherry-pick[bot] in #16390
- fix(craft): restore progress and pending connections after refresh (#16380) to release v5.0 by @onyx-cherry-pick[bot] in #16407
- fix(deps): pin storybook to 10.6.2 everywhere to release v5.0 by @onyx-cherry-pick[bot] in #16396
- fix(deployment): warn when a hand-run Compose upgrade leaves files in MinIO (#16375) to release v5.0 by @onyx-cherry-pick[bot] in #16411
- fix(craft): preserve session drafts and support new-tab navigation (#16410) to release v5.0 by @onyx-cherry-pick[bot] in #16421
- fix(indexing): exact run durations, 24h/7d/all-time windows, pinned status page history (#16381) to release v5.0 by @onyx-cherry-pick[bot] in #16415
- fix(plugins): simplify connection status before sign-in (#16412) to release v5.0 by @onyx-cherry-pick[bot] in #16422
- feat(craft): simplify scheduled task details and plugin controls (#16408) to release v5.0 by @onyx-cherry-pick[bot] in #16423
- fix(indexing): show queued runs as queued and a failed latest run as failed (#16416) to release v5.0 by @onyx-cherry-pick[bot] in #16425
- docs(deployment): downgrade the schema before rolling back from v5 (#16424) to release v5.0 by @onyx-cherry-pick[bot] in #16426
- fix: serialize default assistant tool updates (v5.0 backport) by @wenxi-onyx in #16450
- fix(plugins): improve MCP setup and configuration (v5.0 backport) by @wenxi-onyx in #16451
- feat(mcp): add temporary OAuth setup state (v5.0 backport) by @wenxi-onyx in #16452
- fix(mcp): validate connection changes before publishing (v5.0 backport) by @wenxi-onyx in #16453
- fix(plugins): retain MCP drafts until connection succeeds (v5.0 backport) by @wenxi-onyx in #16454
- fix(plugins): open Tools after MCP setup completes (v5.0 backport) by @wenxi-onyx in #16455
- fix(plugins): restore MCP token entry (v5.0 backport) by @wenxi-onyx in #16462
- fix(license): refuse a Community downgrade unless the license gates access (#16439) to release v5.0 by @onyx-cherry-pick[bot] in #16442
- fix(helm): wait for the object store at startup and keep the MinIO PVC on retire (#16431) to release v5.0 by @nmgarza5 in #16468
- fix(web): lock the SCIM and service-account pages without a license (#16470) to release v5.0 by @onyx-cherry-pick[bot] in #16474
- chore(hotfix): cherry-pick 3 commits to release v5.0 by @onyx-cherry-pick[bot] in #16475
- fix(deps): pin dompurify to 3.4.17 everywhere to release v5.0 by @onyx-cherry-pick[bot] in #16517
- fix(deps): pin next to 16.4.1 everywhere to release v5.0 by @onyx-cherry-pick[bot] in #16519
- fix(deps): pin @sentry/nextjs to 10.75.2 to release v5.0 by @claude[bot] in #16528
- chore(deps): update node base image digests (#16505) to release v5.0 by @onyx-cherry-pick[bot] in #16521
- chore(hotfix): cherry-pick 2 commits to release v5.0 by @nmgarza5 in #16533
- fix(deps): override nested dompurify to 3.4.17 (#16524) to release v5.0 by @onyx-cherry-pick[bot] in #16540
- fix(ci): stop the CVE Alerts loop and give triage its search tools (#16537) to release v5.0 by @onyx-cherry-pick[bot] in #16544
- fix(chat): show the session-ended modal when a chat send is rejected (#16448) to release v5.0 by @onyx-cherry-pick[bot] in #16545
- fix(embedding): show configured bring-your-own embedding models (#16446) to release v5.0 by @onyx-cherry-pick[bot] in #16549
- fix(i18n): German uses Sie and one term per concept (#16457) to release v5.0 by @nmgarza5 in #16550
- fix(helm): name the legacy MinIO copy Job and MIGRATION.md in NOTES (#16562) to release v5.0 by @onyx-cherry-pick[bot] in #16566
- fix(tools): clarify custom tool private-network policy and hide raw timeout errors (#16447) to release v5.0 by @onyx-cherry-pick[bot] in #16570
- fix(auth): revoke personal access tokens when a password is reset (#16449) to release v5.0 by @onyx-cherry-pick[bot] in #16575
- fix(slack): make connection checks configurable actions (#16576) to release v5.0 by @onyx-cherry-pick[bot] in #16582
- feat(perm-sync): resume Google Drive permission sync from a checkpoint (#16539) to release v5.0 by @onyx-cherry-pick[bot] in #16583
- fix(connectors): sample several Jira projects before skipping permission checks (#16445) to release v5.0 by @onyx-cherry-pick[bot] in #16587
- feat(search-settings): turn Contextual Retrieval on without a re-index (#16579) to release v5.0 by @onyx-cherry-pick[bot] in #16595
- fix(indexing): list a run's failed drives and channels, not only its failed documents (#16563) to release v5.0 by @onyx-cherry-pick[bot] in #16588
- fix(deletion): queue connector deletion cleanup in bounded batches (#16560) to release v5.0 by @onyx-cherry-pick[bot] in #16612
- chore(hotfix): cherry-pick 3 commits to release v5.0 by @onyx-cherry-pick[bot] in #16613
- fix(outlook): keep each mailbox listing on disk instead of capping it (#16578) to release v5.0 by @onyx-cherry-pick[bot] in #16614
Full Changelog: v5.0.0-beta.2...v5.0.0-beta.3