Pull Requests huggingface/chat-ui

🔒 Pin GitHub Actions to commit SHAs

#2215 opened 2026-04-02 09:27 by paulinebm

chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.13 dependencies javascript

#2207 opened 2026-03-29 17:05 by dependabot[bot]

chore(deps): bump path-to-regexp from 8.3.0 to 8.4.0 dependencies javascript

#2206 opened 2026-03-28 18:53 by dependabot[bot]

chore(deps): bump handlebars from 4.7.8 to 4.7.9 dependencies javascript

#2204 opened 2026-03-27 00:40 by dependabot[bot]

chore(deps-dev): bump yaml from 1.10.2 to 1.10.3 dependencies javascript

#2203 opened 2026-03-26 17:42 by dependabot[bot]

chore(deps): bump picomatch from 2.3.1 to 2.3.2 dependencies javascript

#2198 opened 2026-03-25 23:01 by dependabot[bot]

feat: implement MCP server search functionality and registry integration

#2197 opened 2026-03-21 21:47 by vvnsrzn

chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 dependencies javascript

#2196 opened 2026-03-21 10:50 by dependabot[bot]

fix: add DNS-level SSRF protection to MCP endpoints

#2195 opened 2026-03-19 08:26 by rtrompier

feat: Projects with shared knowledge (mini-RAG)

#2192 opened 2026-03-16 21:38 by tessaherself

feat: add Responses API endpoint type

#2191 opened 2026-03-16 20:58 by tessaherself

feat: native PDF support for OpenAI-compatible endpoints

#2190 opened 2026-03-16 20:58 by tessaherself

feat: add acceptedFileMimetypes to model config

#2189 opened 2026-03-16 20:54 by tessaherself

fix: respect USE_USER_TOKEN config in OpenAI endpoint

#2187 opened 2026-03-16 18:19 by balex42

fix(security): extend SSRF protection with private IP range checks

#2186 opened 2026-03-16 09:29 by tessaherself

fix(security): use timing-safe comparison for admin token

#2185 opened 2026-03-16 09:29 by tessaherself

fix: graceful degradation when API calls fail in root layout

#2184 opened 2026-03-16 09:29 by tessaherself

chore(deps-dev): bump yauzl from 3.2.0 to 3.2.1 dependencies javascript

#2183 opened 2026-03-14 07:08 by dependabot[bot]

chore(deps): bump file-type from 21.3.1 to 21.3.2 dependencies javascript

#2182 opened 2026-03-14 05:45 by dependabot[bot]

fix: forward MCP tool images to LLM context

#2180 opened 2026-03-13 10:10 by gary149

Add Exa search performance defaults injection for MCP tools

#2176 opened 2026-03-12 20:15 by gary149

fix: restore mTLS auth with client cert

#2171 opened 2026-03-10 14:13 by maxim-sermin

Fix MCP tool images not reaching follow-up LLM context

#2167 opened 2026-03-05 17:12 by Rishwanth1323

Add Capacitor support with configurable API base URL

#2163 opened 2026-03-04 19:15 by gary149

Add share redirect page with OG meta tags and thumbnail generation

#2156 opened 2026-02-26 12:44 by gary149

feat: right aligned layout for user messages

#2144 opened 2026-02-20 17:51 by gary149

Add gallery component for displaying multiple media items

#2129 opened 2026-02-17 16:13 by gary149

feat: show nav scrollbar only on hover on desktop

#2124 opened 2026-02-15 16:09 by gary149

Decouple conversation generation flow into shared domain helpers

#2107 opened 2026-02-09 17:19 by gary149

Improve tool usage guidance in LLM system prompt

#2086 opened 2026-01-28 09:53 by gary149