Update dependency llama-stack to v0.4.0

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Change	Age	Confidence
llama-stack	==0.2.22 -> ==0.4.0

---

Release Notes

llamastack/llama-stack (llama-stack)

v0.4.0

Compare Source

llama-stack v0.4.0

🎯 Notable Features in llama-stack v0.4.0

🏗️ Architecture Improvements

• API/Provider Separation: Split API and provider specs into separate llama-stack-api package for better modularity (#​3895)
• FastAPI Migration: Converted multiple APIs to FastAPI router system (Files, Providers, Inspect, Datasets, Benchmarks) for improved performance and maintainability
• Inspect API Update: /v1/inspect now only lists v1 APIs by default (#​3948)

🔍 Vector Store Enhancements

• Query Rewrite Support: Added query rewrite capabilities in vector_store.search (#​4171)
• Qdrant Improvements: Hybrid and keyword search support (#​4006)
• ChromaDB Enhancements: Keyword search and delete_chunk implementation (#​3057)
• Persistence: Vector stores now persist across server restarts (#​3977)
• Metadata & Embeddings: Return embeddings and metadata from vector store methods (#​4046)

🤖 Model & Inference

• Model Discovery: List available models via provider_data header (#​3968, #​3928)
• New Providers:
  • OpenAI-compatible Bedrock provider (#​3748)
  • OCI GenAI service integration (#​3876)
  • OCI embeddings support (#​4300)
• Standardized Configuration: Unified base_url for inference providers (#​4177)

📋 Responses API Improvements

• Parallel tool calls support (#​4124)
• tool_choice parameter (#​4106)
• max_tool_calls parameter (#​4062)
• Logprobs via include parameter (#​4261)

🆕 New APIs

• Read-only Connectors API (#​4258)
• File Processor API skeleton (#​4113)
• Admin API
  • Stack Administration: New /admin API (v1alpha) for administrative operations (#​4401)
  • Endpoints: Provider management, health checks, version info, and route listing
  • Deprecates: Standalone /providers and /inspect APIs (still functional for backward compatibility)

🗑️ Deprecations & Removals

• Deprecated register/unregister resource APIs (#​4099)
• Removed Agents (sessions/turns) API (#​4055)
• Removed SDG Stub API (#​4035)

🔒 Security Fixes

• Fixed RBAC bypass vulnerabilities in model access (#​4270)
• Prevented ABAC bypass in vector store operations (#​4394)
• JWT token redaction in logs (#​4325)

🛠️ Infrastructure & DX

• Multi-architecture builds with ARM compatibility (#​4290)
• OpenTelemetry auto-instrumentation support (#​4281)
• SQLite WAL mode to prevent database locking (#​4048)
• File deletion permission enforcement (#​4275)

⚠️ Breaking Changes + Noteworthy Functional Changes to be Aware of

Configuration Files

• StackRunConfig → StackConfig: Configuration class renamed
• run.yaml → config.yaml: Runtime configuration file renamed
• build.yaml removed: Build configuration consolidated into config.yaml
• New required config sections: vector_stores, safety, and structured storage.stores configuration

Vector Store API

• vector_db_id → vector_store_id: Renamed across all endpoints and data structures (#​3923)
• ChunkMetadata now required: No longer optional in Chunk class (#​4413)
• Embeddings refactored: Removed from base Chunk class, added new EmbeddedChunk class (#​4413)
• Removed chunk_id property: Dropped from Chunk class (#​3954)
• Search response structure changed: Updated return format (#​4080)

API Removals

• Agents API removed: Sessions and turns endpoints deleted—use Responses + Conversations instead (#​4055)
• SDG API Stubs removed: Synthetic data generation endpoints deleted (#​4035)
• /v1/openai/v1/* routes removed: Use /v1/* routes instead (#​4054)
• Deprecated v1 routes with v1alpha equivalents were removed (#​4054)
• Register/unregister resources deprecated: Resource registration APIs deprecated (#​4099)

Provider Configuration

• Bedrock env variable: Token variable renamed to match AWS/boto3 conventions—update your environment (#​4152)
• Inference base_url standardized: Unified configuration format across providers (#​4177)

API Behavior Changes

• Parallel tool calls: New parallel_tool_calls parameter affects execution flow (#​4124)
• Logprobs parameter: Use include parameter instead of direct field (#​4261)
• Telemetry architecture: Complete redesign around OpenTelemetry auto-instrumentation (#​4127)

What's Changed

• feat: Adding Demo script by @​franciscojavierarceo in #​3870
• chore: use --no-cache in Containerfile by @​ehhuang in #​3884
• feat: Add rerank models and rerank API change by @​jiayin-nvidia in #​3831
• fix(conversations)!: update Conversations API definitions (was: bump openai from 1.107.0 to 2.5.0) by @​dependabot[bot] in #​3847
• fix(logging): ensure logs go to stderr, loggers obey levels by @​ashwinb in #​3885
• fix(responses): sync conversation before yielding terminal events in streaming by @​ashwinb in #​3888
• chore: better error messages for moderations API by @​ehhuang in #​3887
• test: suppress expected error logs in SSE test by @​ashwinb in #​3886
• fix(ci): enable responses tests in CI; suppress expected MCP auth error logs by @​ashwinb in #​3889
• chore(misc): update datasets, benchmarks to use alpha, beta prefixes by @​ashwinb in #​3891
• chore(telemetry): add an arguement to select conatiner runtime explicitly by @​ehhuang in #​3896
• chore: support default model in moderations API by @​ehhuang in #​3890
• chore(telemetry): code cleanup by @​ehhuang in #​3897
• feat: Add static file import system for docs by @​franciscojavierarceo in #​3882
• chore: update docs for telemetry api removal by @​ehhuang in #​3900
• chore: update run configs by @​ehhuang in #​3902
• chore(ui-deps): bump @​testing-library/jest-dom from 6.8.0 to 6.9.1 in /llama_stack/ui by @​dependabot[bot] in #​3914
• chore(ui-deps): bump @​types/react-dom from 19.2.1 to 19.2.2 in /llama_stack/ui by @​dependabot[bot] in #​3915
• chore(ui-deps): bump @​tailwindcss/postcss from 4.1.14 to 4.1.16 in /llama_stack/ui by @​dependabot[bot] in #​3913
• chore(ui-deps): bump @​types/node from 24.8.1 to 24.9.1 in /llama_stack/ui by @​dependabot[bot] in #​3912
• chore(github-deps): bump astral-sh/setup-uv from 7.1.0 to 7.1.1 by @​dependabot[bot] in #​3906
• chore(github-deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @​dependabot[bot] in #​3905
• chore: remove duplicate provider definition by @​leseb in #​3917
• fix(tests): limit vector store providers for record mode in CI tests by @​derekhiggins in #​3898
• fix: Avoid BadRequestError due to invalid max_tokens by @​luis5tb in #​3667
• fix!: Enhance response API support to not fail with tool calling by @​luis5tb in #​3385
• feat(prompts): attach prompts to storage stores in run configs by @​r3v5 in #​3893
• chore(package): migrate to src/ layout by @​ashwinb in #​3920
• feat: add provider data keys for Cerebras, Databricks, NVIDIA, and RunPod by @​mattf in #​3734
• fix: add missing shutdown methods to PromptServiceImpl and ConversationServiceImpl by @​nathan-weinberg in #​3925
• chore!: BREAKING CHANGE: vector_db_id -> vector_store_id by @​ehhuang in #​3923
• chore(telemetry): add grafana dashboards by @​ehhuang in #​3921
• chore(telemetry): more cleanup: remove apis.telemetry by @​ehhuang in #​3919
• fix(context): prevent provider data leak between streaming requests by @​ashwinb in #​3924
• chore: bump openai package version by @​leseb in #​3918
• chore: remove leftover llama_stack directory by @​leseb in #​3940
• chore(mypy): add mypy and type stub packages to dev deps by @​ashwinb in #​3930
• feat(responses)!: introduce OpenAI compatible prompts to Responses API by @​r3v5 in #​3942
• fix(mypy): resolve OpenTelemetry typing issues in telemetry.py by @​ashwinb in #​3931
• fix(mypy): resolve OpenTelemetry typing issues in telemetry.py by @​ashwinb in #​3943
• fix(mypy): resolve type issues in MongoDB, batches, and auth providers by @​ashwinb in #​3933
• fix(mypy): resolve model implementation typing issues by @​ashwinb in #​3934
• fix(mypy): resolve provider utility and testing type issues by @​ashwinb in #​3935
• fix(mypy): resolve OpenAI SDK and provider type issues by @​ashwinb in #​3936
• fix(mypy): add type stubs and fix typing issues by @​ashwinb in #​3938
• fix(inference): enable routing of models with provider_data alone by @​ashwinb in #​3928
• docs: add documentation on how to use custom run yaml in docker by @​raghotham in #​3949
• feat: openai files provider by @​ehhuang in #​3946
• test: enable telemetry tests in server mode by @​ehhuang in #​3927
• chore: remove unused methods from InferenceRouter by @​derekhiggins in #​3953
• feat: add backward compatibility tests for run.yaml by @​ashwinb in #​3952
• ci: add pre-commit check ensuring FIPS compliance by @​nathan-weinberg in #​3899
• chore: ignore API docs generation by @​nathan-weinberg in #​3959
• fix(mypy-cleanup): part-01 resolve meta reference agent type issues (126 errors) by @​ashwinb in #​3945
• fix(mypy): part-02 resolve OpenAI compatibility layer type issues by @​ashwinb in #​3947
• fix(mypy): part-03 completely resolve meta reference responses impl typing issues by @​ashwinb in #​3951
• fix: typo in .gitignore by @​nathan-weinberg in #​3960
• fix(docs): remove leftover telemetry sidebar section by @​nathan-weinberg in #​3961
• chore: delete openapi.stainless.yaml for now. not source of truth. by @​ashwinb in #​3967
• docs: A getting started notebook featuring simple agent examples. by @​omaryashraf5 in #​3955
• chore(mypy): part-04 resolve mypy errors in meta_reference agents by @​ashwinb in #​3969
• feat(models): list models available via provider_data header by @​ashwinb in #​3968
• fix: make integration-tests.sh Mac friendly by @​cdoern in #​3971
• fix!: remove chunk_id property from Chunk class by @​cdoern in #​3954
• fix(mypy): add fast and full mypy modes by @​ashwinb in #​3975
• test: Updated test skips that were marked with "inline::vllm" by @​derekhiggins in #​3979
• chore: add batches to openapi schema by @​leseb in #​3980
• fix: remove LLAMA_STACK_TEST_FORCE_SERVER_RESTART setting in fixture by @​ehhuang in #​3982
• fix(ci): add back server:ci-tests to replay tests by @​ashwinb in #​3976
• fix(ci): show pre-commit output easily on failure by @​ashwinb in #​3985
• ci: support release branches and match client branch by @​ashwinb in #​3990
• ci: target release-X.Y.x branches instead of release-X.Y.x-maint by @​ashwinb in #​3995
• feat: support workers in run config by @​ehhuang in #​3992
• fix: relax structured output test assertions to handle whitespace and… by @​derekhiggins in #​3997
• fix: handle missing external_providers_dir by @​rhdedgar in #​3974
• ci: standardize release branch pattern to release-X.Y.x by @​ashwinb in #​3999
• feat: Add rerank API for NVIDIA Inference Provider by @​jiayin-nvidia in #​3329
• fix(ci): replace unused LLAMA_STACK_CLIENT_DIR with direct install by @​ashwinb in #​4000
• fix(ci): install client from release branch before uv sync by @​ashwinb in #​4001
• feat: Adding Prompts to admin UI by @​franciscojavierarceo in #​3987
• fix(ci): remove precommit trigger workflow by @​ashwinb in #​4008
• chore(api)!: /v1/inspect only lists v1 apis by default by @​raghotham in #​3948
• fix(ci): use test.pypi as extra index for RC dependencies by @​ashwinb in #​4009
• fix(ci): unset empty UV index env vars to prevent uv errors by @​ashwinb in #​4012
• feat: llama stack run --providers by @​cdoern in #​3989
• fix(ci): export UV_INDEX_STRATEGY to current shell before running uv sync by @​ashwinb in #​4020
• fix: help mypy & fix precommit on main by @​leseb in #​4037
• chore(github-deps): bump astral-sh/setup-uv from 6.0.1 to 7.1.2 by @​dependabot[bot] in #​4023
• chore: remove HTML generation for openapi spec by @​leseb in #​4039
• chore: bump version to 0.4.0.dev0 by @​ashwinb in #​4018
• fix: generate provider config when using --providers by @​cdoern in #​4044
• fix: allowed_models config did not filter models by @​mattf in #​4030
• ci: test adjustments for Qwen3-0.6B by @​derekhiggins in #​3978
• ci: introduce Mergify bot to notify on PR conflicts by @​leseb in #​4043
• test: always start a new server in integration-tests.sh by @​ehhuang in #​4050
• fix: enable SQLite WAL mode to prevent database locking errors by @​ashwinb in #​4048
• feat: add custom_metadata to OpenAIModel to unify /v1/models with /v1/openai/v1/models by @​ashwinb in #​4051
• chore!: remove SDG API by @​leseb in #​4035
• fix: update tests for OpenAI-style models endpoint by @​ashwinb in #​4053
• fix: return to hardcoded model IDs for Vertex AI by @​nathan-weinberg in #​4041
• chore!: remove all deprecated routes (including /openai/v1/ ones) by @​ashwinb in #​4054
• chore(test): migrate unit tests from unittest to pytest nvidia test eval by @​Elbehery in #​3249
• chore!: remove the agents (sessions and turns) API by @​ashwinb in #​4055
• chore(api)!: remove tool_runtime.rag_tool from the API surface by @​ashwinb in #​4067
• chore: move src/llama_stack/ui to src/llama_stack_ui by @​ehhuang in #​4068
• chore: remove unused classes by @​leseb in #​4077
• chore(ci): remove unused recordings by @​ashwinb in #​4074
• fix: show built-in distributions in llama stack list by @​r-bit-rry in #​4040
• feat(tests): metrics tests by @​iamemilio in #​3966
• fix: Avoid model_limits KeyError by @​Wojciech-Rebisz in #​4060
• fix: print help for list-deps if no args by @​cdoern in #​4078
• fix(ci): use --no-cache instead of --no-cache-dir by @​ashwinb in #​4081
• fix: last_id when listing files in vector store by @​ehhuang in #​4079
• fix!: BREAKING CHANGE: vector_store: search API response fix by @​ehhuang in #​4080
• feat: ability to use postgres as store for starter distro by @​r-bit-rry in #​4076
• fix: actualize chunking strategy in vector store create API by @​ehhuang in #​4086
• refactor(passthrough): use AsyncOpenAI instead of AsyncLlamaStackClient by @​ashwinb in #​4085
• ci: Add vLLM support to integration testing infrastructure (with qwen) by @​derekhiggins in #​3545
• ci: vllm ci job update by @​derekhiggins in #​4088
• ci: Temperarily disable Telemetry during tests by @​derekhiggins in #​4090
• feat: remove core.telemetry as a dependency of llama_stack.apis by @​cdoern in #​4064
• chore: update stainless config by @​leseb in #​4096
• chore(ui): remove the Streamlit UI by @​ashwinb in #​4097
• feat: add OpenAI-compatible Bedrock provider by @​skamenan7 in #​3748
• fix(tests): bring back some responses tests by @​ashwinb in #​4098
• docs: fix typos in some files by @​khanhkhanhlele in #​4101
• chore: Stack server no longer depends on llama-stack-client by @​ashwinb in #​4094
• feat(responses)!: Add web_search_2025_08_26 to the WebSearchToolTypes by @​aakankshaduggal in #​4103
• fix(ci): add recordings for responses suite due to web search type changing by @​ashwinb in #​4104
• chore(ci): setup automated stainless builds by @​dgellow in #​3557
• fix: Vector store persistence across server restarts by @​jperezdealgaba in #​3977
• docs: Add Llama Stack Operator docs by @​VaishnaviHire in #​3983
• fix(vector store)!: fix file content API by @​ehhuang in #​4105
• feat(api)!: deprecate register/unregister resource APIs by @​ashwinb in #​4099
• feat: add oci genai service as chat inference provider by @​dkennetzoracle in #​3876
• feat: Implement the 'max_tool_calls' parameter for the Responses API by @​s-akhtar-baig in #​4062
• refactor: remove dead inference API code and clean up imports by @​cdoern in #​4093
• refactor: inspect routes now shows all non-deprecated APIs by @​nathan-weinberg in #​4116
• docs: use 'uv pip' to avoid pitfalls of using 'pip' in virtual environment by @​paulengineer in #​4122
• chore(ui): add npm package and dockerfile by @​ehhuang in #​4100
• chore: remove dead code by @​cdoern in #​4125
• chore(deps): update pypdf to fix DoS vulnerabilities by @​crackcodecamp in #​4121
• chore(stainless): add config for file header by @​dgellow in #​4126
• fix(tests): add OpenAI client connection cleanup to prevent CI hangs by @​cdoern in #​4119
• feat: allow returning embeddings and metadata from /vector_stores/ methods; disallow changing Provider ID by @​franciscojavierarceo in #​4046
• fix(docs): link to test replay-record docs for discoverability by @​ktdreyer in #​4134
• docs: clarify model identification uses provider_model_id not model_id by @​derekhiggins in #​4128
• fix: harden storage semantics by @​ashwinb in #​4118
• feat(storage): share sql/kv instances and add upsert support by @​ashwinb in #​4140
• docs: Add comprehensive Files API and Vector Store integration doc by @​akram in #​3279
• feat(tests): enable MCP tests in server mode by @​ashwinb in #​4146
• fix: remove_disabled_providers filtering models with None fields by @​derekhiggins in #​4132
• chore: Fix docs so can be deployed by @​franciscojavierarceo in #​4149
• chore: set minimum pre-commit version by @​leseb in #​4148
• feat: split API and provider specs into separate llama-stack-api pkg by @​cdoern in #​3895
• fix(api): ensure openapi spec has deprecated routes by @​ashwinb in #​4156
• fix: Error out when creating vector store with unknown embedding model by @​franciscojavierarceo in #​4154
• fix: failure in responses during construct metrics by @​slekkala1 in #​4157
• fix: rename llama_stack_api dir by @​cdoern in #​4155
• chore: bump starlette version by @​leseb in #​4158
• fix: MCP authorization parameter implementation by @​omaryashraf5 in #​4052
• fix: Propagate the runtime error message to user by @​slekkala1 in #​4150
• test: Restore responses unit tests by @​msager27 in #​4153
• feat(openapi): switch to fastapi-based generator by @​leseb in #​3944
• fix: list-deps command by @​leseb in #​4174
• chore: Remove myself from codeowners by @​terrytangyuan in #​4175
• fix(openapi): restore embedded request wrappers by @​ashwinb in #​4176
• chore: remove pyyaml and starlette duplication in pyproject by @​leseb in #​4172
• fix: Remove authorization from provider data by @​omaryashraf5 in #​4161
• docs: Improvements on provider_codegen for type hints and multi-line yaml descriptions by @​thepetk in #​4033
• feat(openapi): generate stainless config "more" programmatically by @​ashwinb in #​4164
• test(api): pre-commit check to ensure API does not import llama_stack by @​cdoern in #​4160
• chore(docs): Remove Llama 4 support details from README by @​raghotham in #​4178
• feat!: Wire through parallel_tool_calls to Responses API by @​anastasds in #​4124
• refactor(storage): make { kvstore, sqlstore } as llama stack "internal" APIs by @​ashwinb in #​4181
• chore: add storage sane defaults by @​cdoern in #​4182
• feat!: standardize base_url for inference by @​cdoern in #​4177
• feat: Make Safety API an optional dependency for meta-reference agents provider by @​anik120 in #​4169
• feat(tests): add TypeScript client integration test support by @​ashwinb in #​4185
• fix(ci): prefix stainless branches with fork author by @​dgellow in #​4187
• fix: Pydantic validation error with list-type metadata in vector search (#​3797) by @​r-bit-rry in #​4173
• fix: Fix max_tool_calls for openai provider and add integration tests for the max_tool_calls feat by @​s-akhtar-baig in #​4190
• fix(docs): fix glob vulnerability by @​ashwinb in #​4193
• chore: remove dead code from openai_compat utility by @​ashwinb in #​4194
• feat(responses)!: implement support for OpenAI compatible prompts in Responses API by @​r3v5 in #​3965
• chore(ci): make stainless workflow more DRY by @​dgellow in #​4195
• chore: update code owners by @​ashwinb in #​4199
• fix: enforce allowed_models during inference requests by @​ashwinb in #​4197
• feat(ci): add --typescript-only flag to skip Python tests in integration test script by @​ashwinb in #​4201
• feat!: change bedrock bearer token env variable to match AWS docs & boto3 convention by @​ktdreyer in #​4152
• chore: Add @​cdoern as a code owner by @​raghotham in #​4209
• fix: update hard-coded google model names by @​ktdreyer in #​4212
• chore(github-deps): bump actions/setup-node from 4.1.0 to 6.0.0 by @​dependabot[bot] in #​4216
• chore(github-deps): bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in #​4217
• chore(github-deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.4 by @​dependabot[bot] in #​4215
• chore(github-deps): bump stainless-api/upload-openapi-spec-action from 1.6.0 to 1.7.0 by @​dependabot[bot] in #​4214
• chore(github-deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by @​dependabot[bot] in #​4213
• fix: bind to proper default hosts by @​cdoern in #​4232
• chore: rm CHANGELOG.md by @​leseb in #​4240
• docs: fix logging environment variable separator in example by @​derekhiggins in #​4254
• chore(github-deps): bump actions/setup-python from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​4259
• test: Update JWKS tests to properly mock authentication by @​derekhiggins in #​4257
• feat!: Architect Llama Stack Telemetry Around Automatic Open Telemetry Instrumentation by @​iamemilio in #​4127
• fix: remove telemetry_traceable by @​iamemilio in #​4205
• feat: Add metadata field to request and response by @​abhibongale in #​4237
• feat(api)!: deprecate toolgroup and tool_runtime apis by @​jaideepr97 in #​4249
• feat(api): oasdiff OpenAI openAPI spec against ours by @​cdoern in #​3529
• fix: use string annotations for S3Client type hints by @​derekhiggins in #​4242
• fix(docs): Updated the LS documentation to point users to the correct docker container by @​omaryashraf5 in #​4267
• fix(files): Enforce DELETE action permission for file deletion by @​derekhiggins in #​4275
• fix: Add policies to adapters by @​derekhiggins in #​4277
• fix: call setup_logging early to apply category-specific log levels by @​derekhiggins in #​4253
• fix: correct parameter names in error messages by @​derekhiggins in #​4268
• docs: Refine and fix nits in README by @​kelbrown20 in #​4220
• feat: Add opt-in OpenTelemetry auto-instrumentation to Docker images by @​codefromthecrypt in #​4281
• feat: Implement FastAPI router system by @​leseb in #​4191
• fix: RBAC bypass vulnerabilities in model access by @​derekhiggins in #​4270
• chore: bump mcp package version by @​leseb in #​4287
• chore(cve): Update node-forge to 1.3.3 by @​raghotham in #​4289
• fix: set SqlRecord owner to None when owner_principal is empty by @​derekhiggins in #​4284
• feat: Add debug logging for RBAC access control decisions by @​derekhiggins in #​4255
• feat(qdrant): implement hybrid and keyword search support by @​varshaprasad96 in #​4006
• fix: check if distro dirs exist before listing by @​cdoern in #​4301
• chore(ci): unify uv versions used in pre-commit by @​nathan-weinberg in #​4297
• fix(ci): use latest version of setup-uv and remove pin by @​nathan-weinberg in #​4299
• fix(ci): standardize CI on node 22 by @​nathan-weinberg in #​4302
• chore(deps): bump next from 15.5.4 to 15.5.7 in /src/llama_stack_ui by @​dependabot[bot] in #​4305
• fix(tests): handle http URLs as aliases for server mode by @​ashwinb in #​4306
• feat: Implement keyword search and delete_chunk at ChromaDB by @​bwook00 in #​3057
• fix: llama_stack_api inspect API rename by @​cdoern in #​4311
• fix: access control to fail-closed when owner attributes are missing by @​derekhiggins in #​4273
• fix: nvidia provider no longer crashes sans API key by @​nathan-weinberg in #​4317
• fix: runpod provider no longer crashes sans API key by @​nathan-weinberg in #​4316
• fix: Correct broken links in README by @​varad-ahirwadkar in #​4218
• chore: Small Auth CI refactor by @​derekhiggins in #​4322
• fix(security): redact JWT tokens in server logs by @​derekhiggins in #​4325
• fix(ui): Fix model dropdown not displaying models in chat playground by @​varshaprasad96 in #​4329
• chore(github-deps): bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​4331
• chore(github-deps): bump actions/stale from 10.1.0 to 10.1.1 by @​dependabot[bot] in #​4332
• chore(github-deps): bump actions/setup-node from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​4333
• chore(github-deps): bump stainless-api/upload-openapi-spec-action from 1.7.0 to 1.7.1 by @​dependabot[bot] in #​4334
• fix: httpcore deadlock in CI by properly closing streaming responses by @​leseb in #​4335
• feat: Adding OCI Embeddings by @​rriley99-oci in #​4300
• feat(UI):

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}