🚀 docs: Prepare v0.8.8 Stable Release

[lia-by-librechat]

Summary

Prepare the v0.8.8 stable changelog from the cumulative rc3 notes, the merged rc4 docs PR #777, and the changes merged after rc4. The entry covers each of the 1,230 LibreChat PRs merged between v0.8.7 and dev at 14f7b2865692d27364c934ecb9912496371018bb, plus four direct commits, with 37 first-time contributors. A closed, unmerged rc3 release draft incorrectly listed by the old changelog is not repeated.

Documentation updates

• Link the published Meet Lia: Building LibreChat with LibreChat announcement from the stable release highlights.

• Extend Config v1.3.17 notes with workspace transitions, request and shutdown budgets, idle recovery caps, Agent selector limits, credential validation, config overrides, and rate-limit fixes. The config version remains 1.3.17.

• Explain saved-chat workspace recovery and opt-in attach/detach, the Code API rollout prerequisite for longer queue admission, and where uploads actually live in attached workspaces.

• Document background task cards and header controls, plus fail-closed tool-approval behavior for headless Agents API calls.

• Correct attached-workspace timeout paths to configSchema.limits, explain linked-worktree lanes, command-admission reserves, tool preparation versus call timing, and MCP OAuth redirect restrictions.

• Cover capability-negotiated tolerant edits and replace_all, GPT-6.1 Sol/family fallback, and Firecrawl/SearXNG credential ownership. The attached edit features require compatible Code API and worker builds implementing Code Interpreter Found broken /docs link. Please fix! Hetzner guide #271; upgrading LibreChat alone does not enable them.

• Document tenant-scoped YAML custom endpoints and destination-bound per-user MCP keys, including all-replica rollout requirements and the existing key re-entry flow.

The v0.8.8 tag is not published yet. These notes are prepared against the pinned dev head above, not the separate canary branch; recheck merged PR coverage, release date, and the compare link when the stable tag is cut. The older v0.8.8 draft #763 predates rc4, so this is a separate PR from current main rather than a merge of its stale branch.

Review ledger

• R1 (P2): The attached-workspace guide incorrectly prohibited workspace-aware Programmatic Bash. Fixed in ae30bf2bd5da7341a4b15937ddfd2f6e39e34c40 after checking the release source capability gate, SDK factory, and selected-workspace regression test. The guide now describes negotiated support and separate file staging.
• The earlier review of dadcf683 was incomplete because its independent verifier was unavailable. Independent review completed for head 31a219b8dc83ae257e5716818c6296f59fa665f4 with no new findings. Its scope was the Lia announcement link and the R1 Programmatic Bash correction, checked against pinned source. It did not independently repeat the complete release-history reconciliation or deployed-worker integration.

Validation

• Complete coverage: 1,230 unique merged PR entries and all four direct commits from v0.8.7 through the pinned LibreChat head above
• Source/schema checks for all post-rc4 configuration controls, including the new tenant scope and mixed-version rollout requirements
• MDX syntax parsing of all 13 changed MDX pages; all 13 pages checked for YAML examples and added internal links (160 YAML samples, 8 routes/anchors)
• Lia announcement title and route verified against the published blog on current docs main; the public announcement URL returns HTTP 200. This new highlight leaves all release-coverage entries unchanged.
• git diff --check passes; docs deliberately exclude hand-authored MDX from automated Prettier reformatting
• Fresh GitHub CI is running on head 31a219b8dc83ae257e5716818c6296f59fa665f4. Earlier-head results are not treated as verification of this head.
• Full docs dependency installation, local pnpm typecheck, local pnpm lint, local pnpm test, local pnpm build, and local Playwright were not run in the sparse audit worktree; the exact-head CI jobs provide those gates

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
librechat-ai	Ready	Preview	Sep 30, 2026 2:23am UTC

[lia-by-librechat]

Review head: b4e43be7dd0f7db3c91eb5818713d0360a6979e3. This commit adds the cumulative v0.8.8 changelog through LibreChat dev 42568a0077bcd13ce00f95261eb34d811db41673 and updates the v1.3.17 operator, attached-workspace, background-task, and Agents API docs. Please review this exact head, particularly the release coverage and opt-in rollout caveats.

[lia-by-librechat]

Review head: 3c9bde1faa7d264cf98ac3172bedacb5ae802963. The cumulative v0.8.8 notes and operator guidance are unchanged; this head clarifies that headless tool approval applies to LibreChat-executed tools, while caller-executed functions remain the API caller's responsibility. Targeted MDX formatting and the merged-PR coverage audit pass.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Review head: d56080fc74e3716bee2aaa1c997c99338fa309aa. The stable v0.8.8 notes now cover all 1,221 merged PRs plus four direct commits through LibreChat release branch 4d33d8c2c71ad497fdfaa2c4334b0a2293bcbd67. This head also corrects the attached-workspace YAML field paths and documents linked-worktree rollout, command admission budgeting, Agent tool timing, and MCP OAuth redirect policy. Canary-only work is intentionally excluded. Please review this exact head for operator accuracy and release scope.

[lia-by-librechat]

Review head: 35854d30aba66bdbbe5959625b8bd2d3fdb3c022. Same complete v0.8.8 audit through LibreChat 4d33d8c2c71ad497fdfaa2c4334b0a2293bcbd67; this follow-up makes the linked-worktree examples exact: file tools route by their target path and Bash routes by its cwd, not by a cd inside a command. Please review this head.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Review head: 715465dd54f59d0d28fb6e2f2caefc10c083ad74. The stable v0.8.8 notes now cover all 1,228 release-branch PRs plus four direct commits through LibreChat 5f4d96c49b0aba99cc1157bc96c10a7e5ddd23b4. This head adds the seven merges since the previous audit, documents tolerant attached edits and their still-required Code API/worker capability negotiation, GPT point-release fallback, and Firecrawl/SearXNG URL/key ownership. Canary remains excluded. Please review this exact head.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Review head: dadcf683eb7f2e7d32146b73ff2887b8f7a3812d. The v0.8.8 changelog now covers all 1,230 merged release-branch PRs and four direct commits through LibreChat 14f7b2865692d27364c934ecb9912496371018bb. This head adds tenant-scoped YAML endpoint documentation and updates per-user MCP credential re-entry guidance. Both describe the all-replica upgrade prerequisite. Please review this exact head.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Review head: ae30bf2bd5da7341a4b15937ddfd2f6e39e34c40. The independent review found one P2 documentation error at the prior head: the guide said Programmatic Bash could not carry the selected attached workspace identity. The pinned release source supports that capability-gated path. This head corrects the guide to explain worker readiness, programmatic Bash support, workspace command permission, and the server-validated workspace selection; upload staging remains separate. R1 is fixed in this commit. Release coverage remains all 1,230 PRs and four direct commits through LibreChat 14f7b2865692d27364c934ecb9912496371018bb. Please review this exact head.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌

[lia-by-librechat]

Review head: 31a219b8dc83ae257e5716818c6296f59fa665f4. Added the published Meet Lia announcement as the first v0.8.8 highlight, linking /blog/2026-09-29_meet-lia-building-librechat-with-librechat. The announcement file and blog route were checked on current docs main. Existing release entries and the Programmatic Bash correction are unchanged. Please review this exact head.

[github-actions]

📦 Next.js Bundle Analysis for librechat.ai

This analysis was generated by the Next.js Bundle Analysis action. 🤖

This PR introduced no changes to the JavaScript bundle! 🙌