Skip to content
Copyright © 2022-2026 basebox GmbH, all rights reserved.
Licensed to be used in conjunction with basebox, only.

basebox Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

See roadmap.

[1.8.x] - 2026-08-19

Added

  • Connectors - basebox can now be connected to the systems your team already works with, such as wikis, mailboxes and ticket systems. Everyone signs in with their own account, so people only ever see what they are allowed to see. Connectors are enabled per app, can be tested with a single click, and show whether the connection is currently healthy. The assistant knows which connectors are available and uses them when they help to answer a question.
  • Web search - An optional web search lets the assistant look things up online. It is switched off by default, asks for the user's agreement before the first search, and can be enabled or disabled for an entire installation.
  • Thinking modes - With models that support it, users can decide how thoroughly the assistant should think before it answers, and follow its train of thought in a panel that can be collapsed at any time. Administrators set the default for individual apps and for the whole installation. Thinking is also available through the OpenAI-compatible API.
  • Sources and citations - Answers that draw on your own documents now name those documents, and a click on a source opens the document itself. The chat also shows how much of the knowledge base was searched and how well each source matched the question.
  • Company-wide and personal instructions - Administrators can define instructions that apply to everyone in the organisation, for example a house style or a required language. In addition, every user can save personal instructions for their own conversations.
  • Audit viewer - A new administration screen shows the audit log with paging, filtering and export to CSV. Both the retention period and the level of detail are configurable: the log can record questions only, or the assistant's answers as well. Whenever conversation content is being recorded, everyone sees a clearly visible notice in the chat.
  • Limits per organisation - Upload and usage limits can now be set separately for each organisation.
  • More file types, better text recognition - Word .doc files, e-mail messages, SVG and EMF graphics are now supported. Scans, photographs and Word files that contain nothing but images are read using text recognition, which uses a graphics card where one is available and falls back to the processor automatically. Entire folders can be added to a knowledge base by drag and drop or from the file dialogue.
  • Translation history - The translator keeps your earlier translations so you can return to them.
  • Longer dictation - Voice input accepts recordings of up to one hour, and audio attachments show their transcript.
  • Everyday conveniences - Conversations can be renamed, the sidebar can be collapsed to give the chat more room, apps can be filtered and searched by author, administrators can edit and delete the supplied default apps, users can delete their own account, and the mail configuration can be tested before it is saved.
  • Usage overview - The dashboard reports usage of the OpenAI-compatible API separately from the web interface, and the About page shows the active model, how much context it can hold, and whether speech recognition and the API are available.

Changed

  • New design - A new look and feel across the whole application, with reworked organisation and profile pages, one Save button per page that warns before unsaved changes are lost, clearer switches in place of drop-down lists, and calmer progress messages while an answer is being written.
  • Faster document processing - The pipeline that reads your documents has been rebuilt from the ground up and is noticeably faster and more accurate, with a new text recognition engine.
  • Every document is searched - A search now considers all files in a knowledge base instead of only the first ten.
  • App store retired - Apps are managed directly in the app list.
  • The OpenAI-compatible API is always available - It no longer has to be switched on; it is part of every installation.
  • Web search starts switched off in every new conversation, so using it is always a deliberate choice.
  • Personal instructions accept up to 1000 characters and show examples of what to put there.
  • A connector's own website opens in a new window.
  • While an answer is being written, the chat shows which connector and which tool are in use, and how long it has been running.

Fixed

  • Uploads - Files with the same name are replaced automatically, a deleted file can be uploaded again straight away, the original file name is kept when uploading folders, files that are too large produce a clear message naming the real limit, and sending is blocked while uploads are still running.
  • Attachments - The preview no longer covers the input area when many files are attached, and files are accepted up to the allowed number with an accurate count of those left out.
  • Chat - Output catches up immediately when you return to a tab you had left, long answers are no longer cut short, the input area and the "AI can make mistakes" note stay visible when announcements are displayed, and messages containing emoji no longer cause errors.
  • Documents - Images and image-only PDFs are processed reliably, citations work in every interface language, and a source link opens the document instead of starting a new conversation.
  • Speech - The language of a recording is now detected automatically instead of following the profile setting, recordings that are not WAV files are transcribed correctly, and recordings that are too large are rejected with a clear message.
  • API - An invalid key returns a precise authentication error, no artificial instructions are added for Anthropic models, and there are clear messages when a model is unknown, a request takes too long, or a question exceeds what the model can hold.
  • On-premise operation - User synchronisation with the identity provider is more robust, failing token requests are logged with the address concerned, database updates can be repeated safely, and the identity provider and web server configuration used when upgrading from 1.6 or 1.7 has been corrected.

Security

  • Connector credentials are stored write-only: they are never sent back to the browser, are hidden in log files, and are never filled in automatically. A badge shows when credentials have been set.
  • Supply-chain scanning was added to the build pipeline, and dependencies were updated to address published security advisories.

1.7.0 - 2026-04-25

Added

  • OpenAI Compatible API - Full OpenAI API compatibility for direct integration with existing tools and applications
  • Group Management - Backend support for user group management and organization
  • Swagger UI Documentation - Interactive API documentation with testing capabilities (optional feature)
  • Tool Support - Enhanced tool calling capabilities with auto-handling for vllm endpoints
  • Message of the Day - Admin configurable system-wide announcements with frontend and backend support
  • Server Readiness Check Script - New operational tooling for checking server health and readiness
  • Pagination Controls - Added 'Items per Page' control to pagination component for better data browsing
  • Integration Test Infrastructure - Comprehensive integration test framework for backend services
  • OpenClaw Integration - Added integration guide and support for OpenClaw
  • Enhanced Audit Logging - Comprehensive audit system with SSE streaming, configurable logging, and partition management

Changed

  • Major Architecture Update - Refactored chat completions and models for better maintainability and single responsibility
  • App sharing: new custom apps are initially not shared; you have to explicitly share them if you want others to be able to use them
  • Improved streaming support and message role handling (tool, function, assistant)
  • Enhanced Vertex AI mode with full tool call support
  • Updated integration tests for both streaming and non-streaming LLM interactions
  • Improved on-premise mode configuration (no longer requires app_id for LLM config)
  • Enhanced price per token calculations and model handling
  • Updated authentication and license handling in integration tests
  • Group Management UI Improvements: Enhanced group creation UX with keyboard shortcuts, better error handling, and improved member management
  • Permission Management: Streamlined permission changes with direct dropdown access and clearer terminology
  • Search Experience: Implemented live search with debounce for user and group lists
  • Mobile UI Enhancements: Improved action button visibility on touch devices and better mobile app editor layout
  • Database Migrations: Enhanced migration system with single transaction support and rollback on failure
  • Audit Infrastructure: Major improvements to audit logging with blocking behavior, better error handling, and automatic partition creation
  • Model Endpoint Exposure: Enhanced vLLM endpoint integration to expose all available models
  • Session Management: Improved Keycloak session handling and logout API behavior
  • Keycloak Upgrade: Updated Keycloak to version 26.5.6 for improved security and features

Fixed

  • Fixed Anthropic API not properly handling "tool" type calls
  • Improved model validation for cloud version deployments
  • Fixed test database configuration and password management
  • Enhanced error handling and logging throughout the system
  • Fixed nginx routing configuration
  • Added /v1 location block to expose /v1/api/docs (Swagger UI), /v1/models, and /v1/chat/completions endpoints
  • Fixed missing /rest location block in TLS nginx configuration
  • Updated nginx Dockerfile to include basebox-application-tls configuration file
  • LLM Response Parsing - Fixed response parsing failures and improved error transparency
  • Database Migration Error Handling - Enhanced migration error reporting with detailed error chains
  • Context Length Errors - Better error messages when prompts exceed model context limits
  • Socket Security CLI - Fixed CLI arguments and Gitea API compatibility issues
  • On-premise OpenAI Configuration - Fixed to use organization-level subdomain instead of host
  • Keycloak User Synchronization - Fixed user synchronization when user already exists in Keycloak
  • User Field Management - Fixed read-only user fields in Keycloak integration
  • Mobile UI Issues - Fixed action buttons not showing on mobile/touch devices and improved chat input scroll behavior
  • STT Configuration - Fixed STT UI display respecting enableSTT configuration variable
  • File Status Management - Improved file status handling and replacement workflows
  • App Menu Options - Added dropdown with app edit and app sharing options for better navigation
  • Audit Export - Fixed audit query and export API functionality

Security

  • Security Scanning - Added Trivy frontend security scanning for vulnerability detection
  • Resolved security workflow compatibility issues

[1.6.x] - 2026-03-07

Added

  • App sharing: specify who can use or edit your custom apps (feedback wanted!)
  • Load more button for chat history in sidebar
  • Show warning if users are being invited without SMTP configured (on-premise)
  • Delete chat from history only after confirmation
  • Reasoning model support
  • Added backend and frontend SBOM links to credits (see main menu -> About -> List of Open Source software used in basebox)
  • Speech to text (STT) - talk to basebox!
  • RAG file list in app editor now supports pagination and searching by name
  • Audio file extraction: you can now drop audio files on the chat
  • Runtime frontend configuration for on-premise installations

Changed

  • Change layout of chat interface (prompt box)
  • Changed inference engine to latest vllm (TGI is in maintenance mode)
  • Invitations are now valid for 14 days (used to be 7)

Fixed

  • Fixed tooltips not reloading after changing the language setting in the user profile
  • Layout improvements (spacings etc.)
  • Fixed wrong login theme for on-premise installations
  • Fixed IndexedDB versioning error
  • Fixed various UI bugs (buttons not being disabled during load etc.)
  • Display on-premise config errors with a nice error message
  • Fixed RAG file list pagination issues
  • Fixed chat state after stopping assistant's answer generation
  • Various fixes and improvements and fixes for using basebox on a mobile device
  • Improved scroll behaviour when editing a chat message
  • Improved security when displaying AI-generated content
  • Fixed language in app list not being updated after user language was changed
  • Fixed various UI bugs and peculiarities
  • Fixed organisation logo editing and saving issues

Security

  • Security related fixes (dependency updates)

[1.5.x] - 2025-12-12

Added

  • License management page in admin area for on-premise installations
  • Technical documentation site now online, https://docs.basebox.ai
  • Split screen UI

Changed

  • Improved error reporting in chat
  • Removed first and last name fields being required so language can be set without entering a name
  • Allow more file types for chat and app uploads
  • Performance improvements
  • Added static file server to aisrv for on-premise installations
  • Reverted app sharing scope to the entire organisation (as in pre 1.0.0 versions); an update with user and/or group scope sharing is currently being tested.

Fixed

  • App editor showed no more than 10 RAG files, even if the app had more
  • Improved error reporting for context-too-large errors
  • Fixed copy/paste for rich text content
  • Improved document extraction retry logic
  • Fixed file counter and limit handling when uploading RAG files
  • Fixed app RAG file deletion issue
  • Fixed display status updates during RAG file processing
  • OCR stability improvements
  • Fixed text entering in split screen apps
  • Fixed various minor UI issues
  • Fixed potential database initialization issue for on-premise (storesrv)
  • Various minor layout/UI fixes and improvements
  • Temperature control in app editor fixed
  • Improved error reporting
  • Fixed case sensitive file type filter in chat (accepted .pdf but not .PDF)

Security

  • Various security related fixes

[1.1.x] - 2025-10-28

First 1.x release, major update :-)

Added

  • OCR support - drop images and image PDFs into the chat

Changed

  • New layout, look & feel
  • Ported the entire frontend from React to Vue.js, all TypeScript
  • New document extraction pipeline with vast improvements (accuracy and speed)
  • Improved app editor
  • A thousand other details

Fixed

  • Many bugs and issues