open-terminal run --cftunnel publishes a temporary Cloudflare HTTPS endpoint with a required configured API key. Reuses installed cloudflared or offers a pinned, checksum-verified download; --yes approves unattended downloads. The API and connector shut down together.
Fixed
CLI launches using OPEN_TERMINAL_API_KEY_FILE no longer leave conflicting API-key environment settings. Explicit --api-key overrides environment sources.
Malformed REST and terminal WebSocket credentials are rejected without authentication-handler exceptions.
Optional HTTP keep-alive timeout configuration through OPEN_TERMINAL_UVICORN_TIMEOUT_KEEP_ALIVE or uvicorn_timeout_keep_alive in TOML. Unset by default, preserving Uvicorn's default behavior.
Fixed Docker startup when outbound network restrictions are enabled. Allowed websites can now be reached, and startup preserves the configured API key, settings, and command arguments. Applies to the default, slim, and Alpine images.
Blocked domain names can no longer be looked up by contacting Docker's name lookup service directly, including when all outbound access is disabled.
Docker startup now stops if the requested network restrictions cannot be applied, instead of continuing without those restrictions.
Commands, interactive terminals, and notebooks no longer automatically receive Open Terminal's API key and server settings. This reduces accidental exposure when programs print their environment settings. Other environment settings and values explicitly supplied for a command are preserved.
In multi-user mode, changing folders no longer changes another user's current folder when both users share the same session ID. File operations and commands keep using each user's own selected folder.
Changing to a missing folder or a file in multi-user mode now returns an error and keeps the previous folder selected.
Connected apps must now identify the user when accessing a workspace in multi-user mode. Requests without a user ID are rejected instead of using the server account's workspace. Single-user mode still works without a user ID.
Notebooks now run under the requesting user's account in multi-user mode, with that user's home folder and file permissions. Opening and saving notebooks also follows the same workspace checks as other file operations.
Notebook sessions now belong to the user who started them. Other users cannot run cells, view session details, or stop those sessions through the notebook controls.
Reduced memory use when reading and editing large text files. Reading just a few lines no longer loads every line into memory, which could previously crash the server even for a small response.
Reduced memory use when reading text from documents, uploading and viewing files, downloading folders as ZIP files, and previewing Word and PowerPoint files as PDFs. Temporary files are removed after sending or cancellation.
Reduced memory use when searching large folders or files with many matches, including when loading later pages of results. Matching lines are still returned in full.
Reading command output and removing old output from oversized logs no longer loads the entire log into memory. If saving output fails, such as when the disk is full, commands can still finish and release their resources instead of remaining marked as running and retaining memory.
Apps opened through forwarded ports now deliver live responses as they arrive. Previously, Open Terminal kept collecting the response in memory until it ended, so continuous updates could fail to appear and keep increasing memory use.
Fixed file operations and port checks getting stuck when several commands or terminals were open without producing output on Linux and macOS.
Fixed notebook sessions continuing to consume memory after startup failed or execution was cancelled. Shutting down Open Terminal now also stops its commands, terminals, and notebook sessions.
Fixed closed terminals leaving connections or programs running in the background, and large inputs to background commands being cut short or mixed together when sent at the same time.
Old command logs are now deleted after the configured retention period even when the finished command has already disappeared from the command list. Previously, those logs could remain on disk indefinitely.
Command results now include the folder the command ran in, so assistants can see where each command started without running a separate command to check.
Fixed
Fixed file browsing in Open WebUI when Open Terminal runs directly on Windows. Opening a folder previously failed with a server error while checking whether its files could be edited.
Configuration
📅Schedule: (UTC)
Branch creation
At any time (no schedule defined)
Automerge
At any time (no schedule defined)
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
If you want to rebase/retry this PR, check this box
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/open-webui/open-terminal](https://github.com/open-webui/open-terminal) | patch | `0.14.0` → `0.14.5` |
---
### Release Notes
<details>
<summary>open-webui/open-terminal (ghcr.io/open-webui/open-terminal)</summary>
### [`v0.14.5`](https://github.com/open-webui/open-terminal/blob/HEAD/CHANGELOG.md#0145---2026-10-25)
[Compare Source](https://github.com/open-webui/open-terminal/compare/v0.14.4...v0.14.5)
##### Added
- `open-terminal run --cftunnel` publishes a temporary Cloudflare HTTPS endpoint with a required configured API key. Reuses installed cloudflared or offers a pinned, checksum-verified download; `--yes` approves unattended downloads. The API and connector shut down together.
##### Fixed
- CLI launches using `OPEN_TERMINAL_API_KEY_FILE` no longer leave conflicting API-key environment settings. Explicit `--api-key` overrides environment sources.
- Malformed REST and terminal WebSocket credentials are rejected without authentication-handler exceptions.
### [`v0.14.4`](https://github.com/open-webui/open-terminal/blob/HEAD/CHANGELOG.md#0144---2026-10-24)
[Compare Source](https://github.com/open-webui/open-terminal/compare/v0.14.3...v0.14.4)
##### Added
- Optional HTTP keep-alive timeout configuration through `OPEN_TERMINAL_UVICORN_TIMEOUT_KEEP_ALIVE` or `uvicorn_timeout_keep_alive` in TOML. Unset by default, preserving Uvicorn's default behavior.
### [`v0.14.3`](https://github.com/open-webui/open-terminal/blob/HEAD/CHANGELOG.md#0143---2026-10-24)
[Compare Source](https://github.com/open-webui/open-terminal/compare/v0.14.2...v0.14.3)
##### Fixed
- Fixed Docker startup when outbound network restrictions are enabled. Allowed websites can now be reached, and startup preserves the configured API key, settings, and command arguments. Applies to the default, slim, and Alpine images.
- Blocked domain names can no longer be looked up by contacting Docker's name lookup service directly, including when all outbound access is disabled.
- Docker startup now stops if the requested network restrictions cannot be applied, instead of continuing without those restrictions.
- Commands, interactive terminals, and notebooks no longer automatically receive Open Terminal's API key and server settings. This reduces accidental exposure when programs print their environment settings. Other environment settings and values explicitly supplied for a command are preserved.
- In multi-user mode, changing folders no longer changes another user's current folder when both users share the same session ID. File operations and commands keep using each user's own selected folder.
- Changing to a missing folder or a file in multi-user mode now returns an error and keeps the previous folder selected.
- Connected apps must now identify the user when accessing a workspace in multi-user mode. Requests without a user ID are rejected instead of using the server account's workspace. Single-user mode still works without a user ID.
- Notebooks now run under the requesting user's account in multi-user mode, with that user's home folder and file permissions. Opening and saving notebooks also follows the same workspace checks as other file operations.
- Notebook sessions now belong to the user who started them. Other users cannot run cells, view session details, or stop those sessions through the notebook controls.
### [`v0.14.2`](https://github.com/open-webui/open-terminal/blob/HEAD/CHANGELOG.md#0142---2026-10-19)
[Compare Source](https://github.com/open-webui/open-terminal/compare/v0.14.1...v0.14.2)
##### Fixed
- Reduced memory use when reading and editing large text files. Reading just a few lines no longer loads every line into memory, which could previously crash the server even for a small response.
- Reduced memory use when reading text from documents, uploading and viewing files, downloading folders as ZIP files, and previewing Word and PowerPoint files as PDFs. Temporary files are removed after sending or cancellation.
- Reduced memory use when searching large folders or files with many matches, including when loading later pages of results. Matching lines are still returned in full.
- Reading command output and removing old output from oversized logs no longer loads the entire log into memory. If saving output fails, such as when the disk is full, commands can still finish and release their resources instead of remaining marked as running and retaining memory.
- Apps opened through forwarded ports now deliver live responses as they arrive. Previously, Open Terminal kept collecting the response in memory until it ended, so continuous updates could fail to appear and keep increasing memory use.
- Fixed file operations and port checks getting stuck when several commands or terminals were open without producing output on Linux and macOS.
- Fixed notebook sessions continuing to consume memory after startup failed or execution was cancelled. Shutting down Open Terminal now also stops its commands, terminals, and notebook sessions.
- Fixed closed terminals leaving connections or programs running in the background, and large inputs to background commands being cut short or mixed together when sent at the same time.
- Old command logs are now deleted after the configured retention period even when the finished command has already disappeared from the command list. Previously, those logs could remain on disk indefinitely.
### [`v0.14.1`](https://github.com/open-webui/open-terminal/blob/HEAD/CHANGELOG.md#0141---2026-10-16)
[Compare Source](https://github.com/open-webui/open-terminal/compare/v0.14.0...v0.14.1)
##### Added
- Command results now include the folder the command ran in, so assistants can see where each command started without running a separate command to check.
##### Fixed
- Fixed file browsing in Open WebUI when Open Terminal runs directly on Windows. Opening a folder previously failed with a server error while checking whether its files could be edited.
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODEuNiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MS42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
0.14.0→0.14.5Release Notes
open-webui/open-terminal (ghcr.io/open-webui/open-terminal)
v0.14.5Compare Source
Added
open-terminal run --cftunnelpublishes a temporary Cloudflare HTTPS endpoint with a required configured API key. Reuses installed cloudflared or offers a pinned, checksum-verified download;--yesapproves unattended downloads. The API and connector shut down together.Fixed
OPEN_TERMINAL_API_KEY_FILEno longer leave conflicting API-key environment settings. Explicit--api-keyoverrides environment sources.v0.14.4Compare Source
Added
OPEN_TERMINAL_UVICORN_TIMEOUT_KEEP_ALIVEoruvicorn_timeout_keep_alivein TOML. Unset by default, preserving Uvicorn's default behavior.v0.14.3Compare Source
Fixed
v0.14.2Compare Source
Fixed
v0.14.1Compare Source
Added
Fixed
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
a7f3e72751to4fba04fa95