Releases: AstrBotDevs/AstrBot
Releases · AstrBotDevs/AstrBot
Release list
v4.26.0-beta.11
v4.26.0-beta.9
What's Changed
- 为 OpenAI、Gemini、Anthropic 等模型请求加入可配置的重试机制，并新增请求最大重试次数配置，提升临时网络错误与 5xx 服务端错误下的稳定性。(#8893)
- 新增托管 Core 包下载能力，并加强 Core 与 Dashboard 包下载归档校验。(#8888)
- 支持在请求中加载 workspace skills，并加固 workspace skill 发现流程。(#8884)
- 修复 OpenAPI 文件上传能力，恢复
/api/v1/fileOpenAPI 暴露、文件范围 API Key 与相关文档/客户端产物。 - 修复新版 MCP 中 Streamable HTTP client 重命名导致的兼容问题，并保持
mcp依赖小于 2。 - 加固人格工具边界，确保人格限定的工具范围在主 Agent 请求中正确生效。(#8786)
- 加强 Future Task 所有者校验，避免越权访问定时任务。(#8881)
- 在受限本地文件系统工具中拒绝 hardlink 文件，避免通过工作区 hardlink 别名读写允许目录外的文件。
- 新增
scripts/prepare_release.py，统一 release 分支、版本号、changelog 与校验流程。(#8891) - 明确 OpenAPI Chat 中
username字段的身份含义。(#8880)
What's Changed (EN)
Highlights
- Added configurable retry handling for OpenAI, Gemini, Anthropic, and related provider requests, including a maximum request retry setting to improve stability for transient network failures and 5xx server errors. (#8893)
- Added hosted Core package downloads and strengthened archive validation for hosted Core and Dashboard packages. (#8888)
- Added workspace skills support in requests and hardened workspace skill discovery. (#8884)
Bug Fixes
- Restored OpenAPI file uploads by exposing
/api/v1/file, enabling file-scoped API keys, and regenerating docs/client artifacts. - Fixed compatibility with the renamed MCP Streamable HTTP client while keeping the
mcpdependency below 2. - Hardened persona tool boundaries so persona-restricted tool scopes are enforced correctly in main Agent requests. (#8786)
- Enforced Future Task owner checks to prevent unauthorized scheduled-task access. (#8881)
- Rejected hardlinked files in restricted local filesystem tools to prevent workspace hardlink aliases from reading or overwriting files outside allowed directories.
Release Process
- Added
scripts/prepare_release.pyto standardize release branches, version bumps, changelog generation, and validation. (#8891)
Docs
- Clarified the identity semantics of the
usernamefield in OpenAPI Chat. (#8880)
v4.26.0-beta.10
What's Changed
修复
- 恢复 WebUI 在接口返回 401 时跳转登录页，避免会话失效后停留在异常状态。(#8903)
- 保持 Core 版本与 WebUI 静态资源版本同步，修复打包或升级后可能加载旧 dist、资源版本错配的问题。(#8901)
- 将知识库上下文作为临时 user 内容注入，提高缓存命中率。(#8904)
What's Changed (EN)
Bug Fixes
- Restored the WebUI login redirect when API requests return 401, preventing expired sessions from staying in a broken state. (#8903)
- Kept Core and WebUI static asset versions in sync, fixing stale dist loading and asset version mismatches after packaging or upgrades. (#8901)
- Injected knowledge base context as temporary user content, increase kv cache rate(#8904)
v4.26.0-beta.8
What's Changed
重点更新
- 优化 WebUI 升级流程：Core 更新改为后台任务，并在检测到 WebUI 与 Core 版本错配时提供自动恢复重启引导，避免刷新页面后卡在
Missing API key。(#8846) - 增强 QQ 官方机器人群聊能力，支持群消息创建类型，并允许 Webhook 适配器在无缓存
msg_id时主动发送群消息。(#8838, #8841)
修复
其他
- 将
faiss-cpu版本基线从1.12.0调整为1.14.3。(#8837)
What's Changed (EN)
Highlights
- Improved the WebUI upgrade flow by running Core updates as background tasks and adding guided recovery when WebUI/Core version mismatches are detected, preventing refreshes from leaving users stuck at
Missing API key. (#8846) - Enhanced QQ Official Bot group chat support with group message create events and proactive Webhook group sends without requiring a cached
msg_id. (#8838, #8841)
Bug Fixes
- Fixed duplicate-name validation when editing personas. (#8843)
- Hardened sandbox file transfers and CUA health checks to reduce file-operation risk in abnormal environments. (#8840)
Other
- Changed the
faiss-cpuversion baseline from1.12.0to1.14.3. (#8837)
v4.26.0-beta.4
What's Changed
- 修复 Gemini 工具定义没有正确传回模型导致的 Gemini 类模型重复工具调用的问题。(#8833)
- 修复 onboarding 平台配置与备份上传相关问题。(#8834)
- 修复人格设定中将工具和 Skills 从指定列表切回“默认使用全部”后不生效的问题。(#8835)
- 新增启动时重置 WebUI 密码的命令行参数
--reset-password，便于无法登录时恢复访问。(commit)
What's Changed (EN)
- Added a startup flag to reset the WebUI password, making it easier to recover access when login is unavailable. (commit)
- Fixed Gemini Provider tool definitions not being passed back to the model correctly, which could cause repeated tool calls. (#8833)
- Fixed onboarding platform configuration and backup upload issues. (#8834)
- Fixed persona tool and Skill settings not taking effect after switching from selected items back to “use all by default”. (#8835)
v4.26.0-beta.3
What's Changed
- 修复无法上传 skills 的问题。(commit)
- 支持 QQ 官方机器人 WebSocket 适配器扫码绑定。(#8821)
- 修复聊天输入框在非末尾位置使用输入法组合输入时可能丢失字符的问题。(#8811)
What's Changed (EN)
- Added a QR binding flow for the QQ Official Bot WebSocket adapter, allowing WebUI one-click QR setup to fetch and autofill AppID and Secret, and marked the WebSocket template as recommended. (#8821)
- Fixed skills uploads by generating the multipart request body correctly. (commit)
- Fixed possible IME composition character loss when typing at a non-terminal cursor position in the chat input. (#8811)
v4.26.0-beta.2
提醒：WebUI 的“配置 -> 系统配置”已迁移至 WebUI 侧边栏下方的“设置”。
Note: WebUI “Config -> System Config” has moved to “Settings” at the bottom of the WebUI sidebar.
What's Changed
重点更新
- 重组 WebUI 系统配置页面，将系统配置入口迁移到侧边栏下方的设置区域，并优化相关设置项、自动保存和重启提示体验。(#8777)
- 新增平台级
create_event入口，StarTools 创建事件时改为委托给平台适配器，避免工具层绑定具体平台实现，并为各平台补齐专属事件构造逻辑。(#8813)
修复
- 将项目更新流程改为原子化操作，减少更新中断或重启时产生不完整状态的风险。(#8805)
- 修复静态资源缺失时仍显示 WebUI ready banner 的问题。(#8804)
- 使用原子写入方式保存配置文件，降低写入中断导致配置损坏的概率。(#8793)
- 修复本地 Python 工具没有在当前 session workspace 中运行的问题。(#8792)
- 修复 run-based tools 的保护逻辑，避免受保护工具在注册流程中被错误丢失。(#8790)
- 稳定 Dashboard 路由相关测试，兼容最新 FastAPI 行为。(commit)
优化与工程
- 降低核心模块中的 Pyright 类型错误数量，补充类型收窄、声明和边界检查。(#8197)
- 应用 Ruff 格式化整理。(commit)
- 升级 GitHub Actions 中的
pnpm/action-setup。(#8808)
What's Changed (EN)
Highlights
- Reorganized the WebUI system configuration experience, moving the system configuration entry to the Settings area at the bottom of the sidebar and improving related settings, autosave, and restart notices. (#8777)
- Added a platform-level
create_eventhook so StarTools delegates event creation to platform adapters instead of binding to concrete platform implementations, with platform-specific event construction added across adapters. (#8813)
Bug Fixes
- Made the project update flow atomic to reduce incomplete update states during interruptions or restarts. (#8805)
- Avoided showing the WebUI ready banner when static assets are missing. (#8804)
- Wrote configuration files atomically to reduce the chance of corruption during interrupted writes. (#8793)
- Ensured local Python tools run inside the current session workspace. (#8792)
- Preserved guarded run-based tools during registration. (#8790)
- Stabilized Dashboard route tests for the latest FastAPI behavior. (commit)
Improvements and Maintenance
v4.26.0-beta.1
What's Changed
重点更新
- 后端架构从 Quart 迁移至 FastAPI，并统一 AstrBot 内部接口和 OpenAPI 接口格式，新增多个 OpenAPI。(#8688)
- 统一全平台消息媒体文件的处理逻辑，提升图片、音频、文件和引用消息媒体的解析一致性，减少媒体格式带来的报错。(#8764)
- WebUI 新增函数工具的逐工具权限管理，支持在工具面板中查看和切换工具权限。(#8693)
- WebUI 支持主题跟随系统。(#8648)s
- 对腾讯系 Silk 格式的语音文件不再使用 pilk 库。(#8764)
- 新增 ElevenLabs TTS API Provider。(commit)
- 备份功能现在会包含 skills 目录。(#8700)
修复
- 修复生成平台 ID 时可能包含空白字符的问题。(#8768)
- 修复插件 LLM Tools 开关的归属校验问题，避免误操作其他插件的工具配置。(commit)
- 完善插件命名模式校验和边界场景处理。(commit)
- 修复插件重装后仓库来源丢失的问题。(commit)
- 修复子目录工具的
handler_module_path不一致问题。(#8578) - 修复引用图片说明可能重复显示的问题。(#8718)
- 修复 Embedding API version 后缀被错误截断的问题。(#8736)
- 修复 changelog 弹窗中的锚点链接处理。(#8750)
- 修复 Dashboard 创建文件夹时按 Enter 无法提交的问题。(#8597)
- 延迟导入 FAISS C 库，避免部分环境启动时进程卡住。(#8696)
- 关闭时主动释放数据库 engine，减少会话和测试环境中的资源残留。(#8650)
- 修复 CLI 版本来源不正确的问题。(#8692)
- 稳定 FastAPI Dashboard 路由注册测试，兼容 included router 节点。(commit)
优化与工程
- 消息组件日志输出现在会截断过长的 base64 字段，避免日志中出现大体积内联媒体内容。(#8591)
- 对腾讯系 Silk 格式的语音文件不再使用 pilk 库。(#8764)
- 群聊上下文现在会展示被引用消息的内容。(commit)
- 对话上下文新增当前星期信息。(#8669)
- 优化 CLI 插件列表构建的性能与健壮性，并补充关键合并逻辑和边界场景测试。(#8705)
- 新增 GitHub 代理
gh.dpik.top，并移除失效代理gh.llkk.cc。(#8772, #8761) - PR 标题检查允许更多 conventional commit 前缀。(#8665)
- 应用 pyupgrade 代码现代化更新，并升级 Codecov GitHub Action。(#8684, commit)
- 修正文档中的 LM Studio 公网 IP 描述，并更新 OpenAPI 与插件页面相关文档。(#8707, #8688)
What's Changed (EN)
Highlights
- Migrated the backend backbone from Quart to FastAPI, adding the ASGI runtime, Dashboard API routers/services, OpenAPI v1 definitions, and the generated Dashboard API client. (#8688)
- Unified media reference handling across message components, agent runners, providers, and multiple platform adapters for more consistent image, audio, file, and quoted-message media resolution. (#8764)
- Added per-tool permission management for function tools in WebUI, with controls for viewing and toggling tool permissions. (#8693)
- Added WebUI theme modes for light, dark, and system preference, with centralized system theme synchronization. (#8648)
- Added the ElevenLabs TTS API provider. (commit)
- Included the skills directory in backups. (#8700)
Bug Fixes
- Fixed missing
self_idrouting parameters across multiple aiocqhttp platform adapter and message event API calls. (#8779) - Sanitized generated platform IDs to avoid whitespace characters. (#8768)
- Fixed ownership checks when toggling plugin LLM tools, preventing accidental changes to other plugins' tool settings. (commit)
- Improved plugin naming pattern validation and edge-case handling. (commit)
- Preserved repository source information when reinstalling plugins. (commit)
- Fixed inconsistent
handler_module_pathvalues for tools inside subdirectories. (#8578) - Avoided duplicate captions for quoted images. (#8718)
- Preserved Embedding API version suffixes instead of truncating them incorrectly. (#8736)
- Fixed changelog anchor link handling in the Dashboard dialog. (#8750)
- Allowed Dashboard folder creation to be submitted by pressing Enter. (#8597)
- Deferred FAISS C library imports to avoid startup hangs in some environments. (#8696)
- Disposed the database engine on shutdown to reduce resource leftovers in sessions and tests. (#8650)
- Fixed the CLI version source. (#8692)
- Stabilized FastAPI Dashboard route registration tests for included router nodes. (commit)
Improvements and Maintenance
- Message component log output now truncates long base64 fields to avoid large inline media payloads in logs. (#8591)
- Tencent Silk voice files no longer use the pilk library. (#8764)
- Group chat context now includes quoted message content. (commit)
- Added current weekday information to conversation context. (#8669)
- Improved CLI plugin list building performance and robustness, with tests for key merging and edge cases. (#8705)
- Added GitHub proxy
gh.dpik.topand removed the invalidgh.llkk.ccproxy. (#8772, #8761) - Allowed more conventional commit prefixes in PR title checks. (#8665)
- Applied pyupgrade updates and upgraded the Codecov GitHub Action. (#8684, commit)
- Fixed the LM Studio public IP documentation wording and refreshed OpenAPI/plugin-page documentation. (#8707, #8688)
What's Changed
- fix: dispose database engine on shutdown by @KBVsent in #8650
- feat(core): show weekday in datetime prompt by @Sisyphbaous-DT-Project in #8669
- feat(dashboard): add per-tool permission management for function tools by @RC-CHN in #8693
- docs: fix LM Studio public IP typo by @liliiiliili in #8707
- fix: defer faiss C library import to prevent process hang on startup by @Blueteemo in #8696
- fix: preserve repo source on plugin reinstall by @HIUEETR in #8675
- chore(deps): bump codecov/codecov-action from 6 to 7 in the github-actions group by @dependabot[bot] in #8687
- fix(dashboard): allow creating folder by pressing Enter by @micaiguai in #8597
- feat: add ElevenLabs TTS API provider by @jayzen33 in #8680
- style: apply pyupgrade updates by @yzy123908944141 in #8684
- feat: backup skills directory by @lingyun14beta in #8700
- feat: show quoted message content in group chat context by @ScarletPupil in #8634
- fix: handle changelog anchor links by @he-yufeng in #8750
- fix: preserve embedding api version suffixes by @he-yufeng in #8736
- fix: avoid duplicate quoted image captions by @he-yufeng in #8718
- Fix CLI version source by @Rat0323 in #8692
- feat(ci): allow conventional PR title prefixes by @SunmiJJW in #8665
- feat(dashboard): add a configurable theme mode with light, dark, and system options and centralize theme synchronization with system preferences. by @lingyun14beta in https://github.com/AstrBotDevs/AstrBot/pull/...
Contributors
dependabot, Soulter, and 18 other contributors
Assets 3
v4.25.5
What's Changed
修复
- 收紧消息工具对本地文件路径的处理边界，减少非预期路径被用于消息附件的情况。(#8660)
- 修复 Star Context 类型定义，恢复相关 SDK 类型提示与运行兼容性。(#8659)
- 修复 QQ 官方 Webhook 模式无法正常重启的问题。
优化
- 改进 Anthropic 在内容过滤响应中缺失
usage字段时的处理，避免相关请求结果解析异常。(#8647)
What's Changed (EN)
Bug Fixes
- Tightened local file path handling in the message tool to avoid unintended attachment path usage. (#8660)
- Fixed Star Context typing to restore related SDK type hints and runtime compatibility. (#8659)
- Fixed QQ Official Webhook mode not restarting correctly.
Improvements
- Improved Anthropic response parsing when content-filtered responses omit the
usagefield. (#8647)
v4.25.4
What's Changed
修复
- 回滚部分改动，修复偶现的
Database is locked的问题。(#8639) - 修复 Pipeline 异步任务可能因缺少强引用而被垃圾回收的问题，提升事件处理稳定性。(#8618)
- 修复 WebChat 使用 Web 搜索工具时，引用提示词在同一轮对话多次工具调用后被重复追加到系统消息的问题，避免破坏上下文缓存。(#8642)
- 同步 Dashboard
pnpm-lock.yaml中的 overrides 配置，修复锁文件与工作区配置不一致的问题。(#8637)
优化
- 将微信公众号 HTTP API 请求超时时间从 15 秒提升到 120 秒，降低较慢网络或接口响应下下载文件超时失败概率。(#8643)
- Dashboard 登录表单启用完整凭据自动填充，改善浏览器密码管理器的使用体验。(#8631)
What's Changed (EN)
Bug Fixes
- Fixed repeated Web search citation prompt appends in WebChat after multiple tool calls within the same interaction, preventing context cache invalidation. (#8642)
- Fixed Pipeline async tasks potentially being garbage-collected due to missing strong references, improving event processing stability. (#8618)
- Synced Dashboard
pnpm-lock.yamloverrides with the workspace configuration. (#8637) - Reverted the Provider stats SQLite lock retry change to avoid related regressions. (#8639)
- Reverted the macOS SQLAlchemy compatibility changes to avoid regressions in database initialization and vector storage paths. (#8638)