[lia-by-librechat]

Summary

Complete the v0.8.9-rc1 documentation for synchronized LibreChat dev/main commit 8d3da9bbb220a0a96be9330a2e1cbd385fb786d5. Package refresh #17418 is merged. The maintainer now explicitly authorizes merging this PR and publishing the rc1 tag/prerelease after verification.

• Both categorized release-note surfaces cover v0.8.8..8d3da9bb: 626 commits, all 591 subject PR references, 35 direct commits, and eight GitHub integration PRs. Preserve author attribution, contributors, canonical changelog links, and the expandable full-notes format.
• Preserve current upstream docs fixes. Include durable upgrade/config references for tenant and Zod 4 compatibility, admin profiles/secrets, Langfuse prompt catalog, attached upload copies, and bounded browser histories.
• Document final vector cleanup settings, complete ownership proof, safe rollout cutoff, fail-closed legacy retention, and bounded namespace deletion. No backdating or automatic metadata migration is implied.
• Keep translated changes numeric-only, and preserve archives and previous changelogs except the current config_v1.3.18 entry.

Verification

Previous coherent head passed GitHub format/types/lint, E2E, and analysis build. Its Vercel preview failed; the failure reason was not readable without Vercel access. Fresh CI covers 66213138e15f49b68eaa2e2f02e8f7064c8619e8. The specialized reviewer could not create its isolated lane (503 COMMAND_UNAVAILABLE), so that review is incomplete, not clean. The first bounded independent source audit found one P2 wording mismatch about vector-deletion confirmation. It is corrected in 66213138; the follow-up bounded source audit verified it fixed at this exact head with no verified new mismatch in the inspected correction. Its independent exact-delta check was incomplete because immutable compare access was unavailable. Parent Git-object verification independently confirms the only change from 684ba7ba is that one sentence; both release-note blobs are identical. Specialized review remains incomplete, not clean. Final-head CI completed: all four GitHub check runs and the external Vercel deployment passed. No findings are rejected.

Exact final-range PR/direct-commit coverage and notes parity checks pass. All 92 changed MDX bodies compile. Current-head TypeScript, touched-file ESLint, 29 focused tests, MDX generation/body compilation, config/sidebar synchronization, exact notes parity, and whitespace checks passed locally. No app, package, chart, or workflow source is changed by this PR.

Release notes

Publication-ready Markdown is committed at release-notes/v0.8.9-rc1.md. Final tag target is the immutable synchronized app SHA above, not a moving branch or an earlier candidate.

Final publication gates

Head 66213138e15f49b68eaa2e2f02e8f7064c8619e8: four successful checks and successful Vercel deployment; no unresolved threads. VECTOR-DELETE-1 (P2) is fixed in this head; no findings rejected or open. Bounded source audit verified the correction. Specialized review and its independent immutable-delta check remained incomplete; parent Git-object validation confirms the sole one-sentence delta and identical release-note blobs. Merging as explicitly authorized.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
librechat-ai	Ready	Preview	Oct 26, 2026 9:53pm UTC

[lia-by-librechat]

Head: 5cbceeee10f02823c0a1b0c420c5051310748c99. Preparation only. Includes categorized rc1 and config 1.3.18 changelogs, persistent upgrade/reference docs, numeric-only translated example updates, and GitHub-ready Markdown. Both notes surfaces pass the bundled exact-range PR/direct-commit coverage audit. Local MDX, TypeScript, version-sync tests, touched TS lint, and formatting checks passed. Fresh independent review and CI are running. Do not merge or publish.

[lia-by-librechat]

Head: c41302e6cab132c2a9923a923ae4b259bfe05cae. Canonical bot profile links corrected in both notes surfaces. Exact-range coverage still passes. Local MDX generation, TypeScript, numeric-only translation checks, config-version checks/tests, and touched TS lint passed. Fresh independent review and CI cover this head; the prior review was incomplete because its worker fetched the wrong repository. Preparation only: no merge or publication.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Head: a21555d3fa8f93fcb7442ad1164d8ddb064f491e. Adds the six remaining YAML control names to persistent references; lexical inventory now accounts for all 148 added example names and all 25 added environment names. Both notes surfaces still cover the exact frozen release range without omissions. All 293 changed MDX bodies compile. Prior bounded source audit found no verified issues at c41302e; a fresh source audit covers this final head. The specialized PR Reviewer remains unavailable for this repository, not clean. No merge or publication is authorized.

[lia-by-librechat]

Head: c331b74cc56ea36e5e0cfaa5f8bb22f38cb00fce. Corrected the Node version string in all 13 non-English install-card dictionaries. Added a 14-locale unit regression: it reproduced 13 failures before the fix and all 14 pass afterward. The debugger confirmed the German dictionary still returned the old prerequisite before the correction. Existing E2E assertions are unchanged. Fresh source audit and CI cover this head; no merge or publication is authorized.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Audited head: c331b74cc56ea36e5e0cfaa5f8bb22f38cb00fce. Bounded independent source audit completed with no verified findings, none open or rejected. It confirmed the full 312-file scope, numeric-only translated changes, release-note parity, runtime-limit source evidence, and locale regression. Specialized PR Reviewer remains unavailable; no clean approval is claimed from it. Local types, lint, 20 focused tests, all 293 changed MDX bodies, config-version checks, and exact-range notes coverage pass. Final-head E2E/build/preview checks are still running. Both preparation PRs remain open; no tag or publication is authorized.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Verified head: c331b74cc56ea36e5e0cfaa5f8bb22f38cb00fce. Final CI is green: End-to-end tests, Format/types/lint, analysis build, preview comment check, and external Vercel status passed. Bounded independent source audit found no verified findings; specialized PR Reviewer was unavailable, not clean. Local types/lint, 20 focused tests, 293 changed MDX body compilations, numeric-only translation checks, and exact-range notes coverage passed. Preparation complete for the pinned snapshot. This PR stays open: no merge, tag, package publication, or release is authorized.

[lia-by-librechat]

Head: 8fc14d8e718a989eaf88f14386bf0fa147038f3c. Refreshed against docs main 83ce8989, preserving upstream fixes and the paused local work. Both note surfaces cover v0.8.8..c297daaa7a48692d21c9b42580b1400d9070dadb: 620 commits, 584 referenced PRs, and 36 direct commits with no omissions. Added compatibility guidance for Zod 4/custom client controls and strict tenant auth/partitions; corrected Agent Builder, PR discovery, and theme references. Docs review and CI are running. No merge, release, or tag is authorized.

[lia-by-librechat]

Audited head: 8fc14d8e718a989eaf88f14386bf0fa147038f3c. Bounded independent source audit completed with no verified findings, none open or rejected; priority defaults/compatibility/security claims and the 123-path scope checked. Specialized PR Reviewer remains unavailable (503 COMMAND_UNAVAILABLE), not clean. Local MDX generation, docs TypeScript, 29 focused tests, touched TypeScript lint, all 91 changed MDX body compilations, sidebar/config synchronization, exact-range note coverage/parity, and numeric-only translation checks pass. Fresh E2E/build/preview CI is still running. No merge, release, tag, or package publication is authorized.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Head: 684ba7bacd3caac5692c54974667b953f0a57bdd. Final source is synchronized dev/main 8d3da9bbb220a0a96be9330a2e1cbd385fb786d5, including merged package refresh #17418. Notes cover all 626 commits, 591 subject PR references, 35 direct commits, and eight integration PRs. Added the new vector-cleanup controls and explicit rollout/legacy-retention warnings. Both note surfaces pass exact-range coverage; all 92 changed MDX bodies compile. The maintainer now authorizes docs merge and rc1 publication after verification. Fresh exact-head review and CI are running.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Head: 66213138e15f49b68eaa2e2f02e8f7064c8619e8. Source-audit finding VECTOR-DELETE-1 (P2) corrected: a successful DELETE is accepted directly, while a 404 requires a same-namespace inventory check excluding the file. No app source changed. The release notes remain pinned to synchronized app commit 8d3da9bbb220a0a96be9330a2e1cbd385fb786d5. Fresh audit and CI cover this corrected head before the authorized merge and release.

[lia-by-librechat]

Finding ledger: VECTOR-DELETE-1 (P2) is fixed in 66213138e15f49b68eaa2e2f02e8f7064c8619e8, verified by the bounded follow-up source audit. No findings rejected or left open. Independent exact-delta verification was incomplete; parent Git-object checks confirm this is the sole one-sentence change from 684ba7b and both release-note blobs are identical. Specialized PR review remains unavailable/incomplete, not clean. Final app backend/frontend validation passed at 8d3da9bbb220a0a96be9330a2e1cbd385fb786d5. Publication stays pinned to that main commit; later dev additions are outside this release.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Authorized merge head: 66213138e15f49b68eaa2e2f02e8f7064c8619e8. Four GitHub checks and external Vercel deployment passed. VECTOR-DELETE-1 (P2) fixed; no open/rejected findings. Bounded source audit verified the correction; specialized review remained unavailable/incomplete. Parent immutable Git checks confirm the only post-audit change is the corrected sentence and both release-note blobs are identical. Final notes cover stable v0.8.8 through app main 8d3da9bbb220a0a96be9330a2e1cbd385fb786d5. Merging as explicitly authorized.

[lia-by-librechat]

Published: https://github.com/LibreChat-AI/LibreChat/releases/tag/v0.8.9-rc1. Annotated tag resolves to 8d3da9bbb220a0a96be9330a2e1cbd385fb786d5 (confirmed main). Docs merged as 2426cdc72ecd4be92b2545ec56b03cef6d7dea36; published release body matches that merged Markdown byte-for-byte. It is a prerelease, not Latest. Versioned images: https://github.com/LibreChat-AI/LibreChat/actions/runs/40408378832. Separate pre-existing librechat-data-provider@0.8.530 npm publication failed with E404/permission response and was not retried or reported as successful.

[lia-by-librechat]

Release publication verified: https://github.com/LibreChat-AI/LibreChat/releases/tag/v0.8.9-rc1. Image workflow succeeded; both GHCR rc1 image tags expose linux/amd64 and linux/arm64, and each architecture embeds release commit 8d3da9bbb220a0a96be9330a2e1cbd385fb786d5. Docs merge Vercel status, analysis, and cache purge succeeded. Direct live-page checks returned HTTP 403 from this worker, so page content was not independently verified. Post-merge links and translation remain running. Separate data-provider npm E404/permission failure remains unresolved; no publishing credentials or retry policy were changed.