## danny-avila/LibreChat — v0.8.7-rc1…v0.8.7

_75 commits._

### Features
- **🪙 feat: Add Token Pricing for Devstral, Voxtral, Holo2, and Mistral Medium (#13863)** (dfc1178)
- **🔚 feat: Add Bottom Terminus Node to Message Minimap Navigation (#13853)** (f8aa45d)
- **🕐 feat: Add `promptCacheTtl` model parameter for 1h/5m cache duration (#13835)** (268fcbb)
- **🔖 feat: Add Pinned Conversations (#13492)** (743f57f)

### Fixes
- **🐌 fix: Prevent ReDoS in YouTube URL Extraction for URL Context (#13937)** (c561087)
- **🫥 fix: Hide Quote Popup When Selection Collapses Silently (#13936)** (189cb24)
- **🪤 fix: Guard Prompts Popover Against Empty Result Keyboard Navigation (#13931)** (ef1ee6e)
- **🌵 fix: Align Mention Empty Result Behavior With Skills Command (#13928)** (6934d07)
- **🧹 fix: Order Enabled Guard After Config Expansion in `useGetAgentByIdQuery` (#13927)** (f09a1ad)
- **🧭 fix: Harden User Provided Endpoint URL Protection (#13919)** (0a3448d)
- **🐛 fix: Prevent Infinite Render Loop on Code-Execution File Preview (#13922)** (562bd8e)
- **🖱️ fix: Summon Quote Popup on Double-Click Word Selection (#13923)** (f616a58)
- **🧾 fix: Harden Historical File Authorization (#13918)** (1eb460e)
- **🤐 fix: Withhold Custom Endpoint Headers for User URLs (#13917)** (606292c)
- **🪣 fix: Cap Context Projection Workload Before Tokenization (#13910)** (77854de)
- **💰 fix: Bound MCP tools/list Pagination with Aggregate Budgets (#13909)** (2f800c5)
- **✂️ fix: Cap Audit Chain Verification and Honor Client Cancellation (#13903)** (d9251fc)
- **🍪 fix: Validate Shared-File Cookie Auth Against the Live Refresh Session (#13908)** (ddc7635)
- **🪜 fix: Strip Caller-Supplied Priority from Assign-Only Config Upserts (#13911)** (725a14e)
- **🛂 fix: Re-Check `execute_code` Authorization on Event-Driven Tool Loads (#13912)** (edc0aeb)
- **🔐 fix: Gate Shared Startup Config By Link Access (#13897)** (e807c63)
- **🎯 fix: Narrow Public Share 401 Bypass to the Share Endpoint Only (#12905)** (c9180d1)
- **🚪 fix: Gate Artifacts Toggle on Agent Capability Flag (#13665)** (8824e8f)
- **🪢 fix: Paginate MCP `tools/list` to Load All Tools (#13840)** (229c54c)
- **🏷️ fix: Scope File Search entity_id to Agent Knowledge-Base Files Only (#13693)** (21d98b8)
- **🎒 fix: Apply OCR Context to Responses API Agents and Handoffs (#13707)** (3926fda)
- **♊ fix: Strip remaining unsupported JSON Schema keywords for Gemini MCP tools (#13850)** (8969034)
- **🐛 fix: resolve dayjs plugin ESM imports in data-provider (#13851)** (36ae268)
- **🪞 fix: Match Prompt Cache TTL Control to Region Combobox Styling (#13839)** (2c6db6b)
- **🧷 fix: Preserve Document Priority on Section-Scoped Config Writes (#13772)** (84886c5)
- **🔗 fix: Surface Share Permissions Load Error as Alert Button With Tooltip (#13833)** (2fcba91)
- **🔖 fix: Decrement Bookmark Counts When Deleting Conversations (#13830)** (58647bc)
- **📦 chore: npm audit fix (#13828)** (a6b5343)
- **🔐 fix: Honor Admin-Panel MCP Allowlist Overrides Without Restart (#13814)** (49f4b65)
- **🪃 fix: Restore Raw Spec Fallback for Enforced Presets (#13804)** (6055ad0)
- **🩹 fix: Bill Anthropic Prompt-Cache Tokens Once (#13798)** (4cb3594)
- **🥽 fix: Restrict MCP Server URL Disclosure to Admins, Owners, and Editors (#13784)** (054fa4b)
- **🗜️ fix: Support Windows ZIP MIME Uploads (#13794)** (d0f659f)
- **🎤 fix: Keep Microphone Icon Visible On Initial Chat Render (#13788)** (b91c1c2)

### Backend
- **✨ v0.8.7 (#13907)** (9e74cc0)
- **🧱 ci: Retry Failed Docker Builds (#13935)** (8266244)
- **📺 feat: Google URL Context Param with Native YouTube Video Understanding (#13924)** (1662adc)
- **🧠 feat: Configurable Reasoning Replay for Custom Endpoints (#13921)** (d9a76fc)
- **🪶 refactor: Ground Default Model Spec Selection in Conversation Recency (#13915)** (f14309e)
- **🌍 i18n: Update translation.json with latest translations (#13914)** (33d7b00)
- **🛑 refactor: Demote User Abort Logs (#13904)** (bc6b032)
- **🧂 chore: Require an Operator-Supplied Admin Panel Session Secret (#13902)** (cb2bafb)
- **⌨️ feat: Keyboard Shortcuts (#12425)** (ebb4f15)
- **🐳 feat: Bundle Admin Panel in Docker Compose Stacks (#13876)** (77983db)
- **🌍 i18n: Update translation.json with latest translations (#13892)** (30f9759)
- **🏷️ chore: Bump Individual Package Versions (#13891)** (3945533)
- **🌍 i18n: Update translation.json with latest translations (#13875)** (919c798)
- **👐 a11y: Bump `@ariakit/react`, Improve a11y of Token Usage, Archived Chats, Reduce Table Layout Shifts (#13874)** (465cb6e)
- **📦 chore: Bump `@librechat/agents` to v3.2.44** (1505fd5)
- **🖇️ feat: Reference Selected Chat Text with Multi-Quote Popup (#13868)** (5eb1c2c)
- **🔗 feat: Snapshot Files for Shared-Link Attachments (#13740)** (e515063)
- **🪙 chore: drop redundant voxtral-small token pricing key (#13867)** (ef65f4a)
- **📌 feat: Seed Default Pinned Tools and MCP Dropdown via Interface Config (#13865)** (f76a5fa)
- **🚦 ci: Stop Auto-Indexing PR Branches in GitNexus Index (#13866)** (ff81377)
- **🔑 feat: Surface User-Provided API Keys in Settings, Scoped to Reachable Endpoints (#13864)** (9dd0df9)
- **📦 chore: Bump `@librechat/agents` to v3.2.43 (#13854)** (59637e1)
- **🌍 i18n: Update translation.json with latest translations (#13836)** (e6fc232)
- **📦 chore: bump `@librechat/agents` to v3.2.42 (#13848)** (91f25b8)
- **📒 feat: Audit Log Backend for SystemGrant Assign and Revoke Events (#13087)** (6a63531)
- **🛂 refactor: Accept Targeted `assign:configs` for Config Scope-Lifecycle Endpoints (#13773)** (fa20003)
- **🦜 refactor: Use path for Read/Write/Edit/Create File Tools (#13834)** (68d142d)
- **🔑 feat: Agent API Keys management UI in Settings → Data controls (#13819)** (a468bec)
- **🎛️ feat: Redesign Settings with Registry-Driven Dialog, Search, and Mobile Drill-In (#13722)** (9de3249)
- **🕰️ feat: Resolve Agent Prompt Time Variables in User's Timezone (#13815)** (d847486)
- **📛 feat: Tag Langfuse Traces With Tenant ID (#13808)** (27b0782)
- **📦 chore: Bump `@librechat/agents` to v3.2.37 (#13826)** (8628897)
- **🪵 refactor: Bound Log Traversal And Remove Legacy api/config Logger (#13813)** (c04bddd)
- **🪙 feat: SDK-Aligned Context-Usage Projection (gauge for window-switch & snapshot-less branches) (#13801)** (fdc7e64)
- **🛤️ ci: Limit GitNexus Deploys To Main And Dev Only (#13799)** (c820dfb)
- **🪙 refactor: Reconcile Context Gauge to Actual Provider Tokens (#13780)** (d18d62e)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/danny-avila/LibreChat?utm_source=github-action)._