Security

• Fixed critical vulnerabilities allowing arbitrary file read access (#1326)
• Improved path traversal protection in various endpoints (#1326)

Added

• Hebrew translation JSON (#1322)
• Translation files for Indian languages (#1321)
• Support for displaying function calls as tools in Chain of Thought for LlamaIndexCallbackHandler (#1285)
• Improved feedback UI with refined type handling (#1325)

Changed

• Upgraded cryptography from 43.0.0 to 43.0.1 in backend dependencies (#1298)
• Improved GitHub Actions workflow (#1301)
• Enhanced data layer cleanup for better performance (#1288)
• Factored out callbacks with extensive test coverage (#1292)
• Adopted strict adherence to Semantic Versioning (SemVer)

Fixed

• Websocket connection issues when submounting Chainlit (#1337)
• Show_input functionality on chat resume for SQLAlchemy (#1221)
• Negative feedback class incorrectness (#1332)
• Interaction issues with Chat Profile Description Popover (#1276)
• Centered steps within assistant messages (#1324)
• Minor spelling errors (#1341)

Development

• Added documentation for release engineering process (#1293)
• Implemented testing for FastAPI version matrix (#1306)
• Removed wait statements from E2E tests for improved performance (#1270)
• Bumped dataclasses to latest version (#1291)
• Ensured environment loading before other imports (#1328)

Breaking Changes

• Python Version: This release requires Python 3.9 or higher. Please ensure you're using a compatible Python version before upgrading.
• Containerized Deployments: If you're using containerized deployments, you may need to specify --host 0.0.0.0 for your container to work correctly with the new security changes.

What's Changed

• add css class based on active theme by @haskinsjg in #1201
• Ignore missing type stubs in Azure datalake. by @dokterbob in #1197
• fix: lc callback by @willydouhard in #1203
• Stop ignoring poetry lockfile. #1190 by @dokterbob in #1191
• Black isort as dev deps in pyproject.toml by @dokterbob in #1217
• Unbreak the build by @dokterbob in #1236
• fix: edit_message in correct place in config.toml by @EWouters in #1218
• #1178 Fix AttributeError: 'ChatCompletionChunk' object has no attribute 'get' by @dvquy13 in #1229
• Python unittest structure by @dokterbob in #1245
• Gracefully handle HTTP errors when sending steps by @oshoma in #1248
• Cleanup Python 3.9 by @EWouters in #1250
• modify config.py by @raihanou1 in #861
• Adding CHAINLIT_APP_ROOT to modify APP_ROOT by @MervinPraison in #1259
• fix: resolve #828 by updating websocket's thread id header with currentThreadId to ensure session continuation after backend restart by @qtangs in #996
• Various improvements in tests/CI by @dokterbob in #1271
• Data layer refactor/cleanup by @dokterbob in #1277
• Revert "Data layer refactor/cleanup" by @dokterbob in #1287
• Changelog for version 1.2.0. by @dokterbob in #1289
• Fix publish workflow. by @dokterbob in #1299
• Correct 1.2.0 release date in changelog by @dokterbob in #1297
• Fix publishworkflow again by @dokterbob in #1300
• Update pyproject with correct package version. by @dokterbob in #1302

New Contributors

• @haskinsjg made their first contribution in #1201
• @dokterbob made their first contribution in #1197
• @EWouters made their first contribution in #1218
• @dvquy13 made their first contribution in #1229
• @oshoma made their first contribution in #1248
• @raihanou1 made their first contribution in #861
• @MervinPraison made their first contribution in #1259

Full Changelog: 1.1.402...1.1.404

Fixed

• Langchain Callback handler IndexError
• Attempt to fix websocket issues

Added

• The User class now has a display_name field. It will not be persisted by the data layer.
• The logout button will now reload the page (needed for custom auth providers)

Changed

• Directly log step input args by name instead of wrapping them in "args" for readability.

Fixed

• Langchain Callback handler ValueError('not enough values to unpack (expected 2, got 0)')

Changed

• hide_cot becomes cot and has three possible values: hidden, tool_call, full
• User feedback are now scoring an entire run instead of a specific message
• Slack/Teams/Discord DM threads are now split by day
• Slack DM now also use threads
• Avatars are always displayed at the root level of the conversation

Removed

• disable_feedback has been removed
• root_message has been removed

Fixed

• Feedback is added to the nearest run

Changed

• hide_cot becomes cot and has three possible values: hidden, tool_call, full
• User feedback are now scoring an entire run instead of a specific message
• Slack/Teams/Discord DM threads are now split by day
• Avatars are always displayed at the root level of the conversation

Removed

• disable_feedback has been removed
• root_message has been removed

Added

• Messages are now editable. You can disable this feature with config.features.edit_message = false
• cl.chat_context to help keeping track of the messages of the current thread
• You can now enable debug_mode when mounting Chainlit as a sub app by setting the CHAINLIT_DEBUG to true.

Fixed

• Message are now collapsible if too long
• Only first level tool calls are displayed
• OAuth redirection when mounting Chainlit on a FastAPI app should now work
• The Langchain callback handler should better capture chain runs
• The Llama Index callback handler should now work with other decorators

What's Changed

• feat: add mistral instrumentation by @desaxce in #1100

Full Changelog: 1.1.304...1.1.305