Starstruk Logo MarkStarstruk

2.8.5

Chainlit/chainlit2.8.5Nov 7, 2025by asvishnyakov

AI Summary

This release addresses a security vulnerability and adds OAuth raw response support, Slack reaction events, and a display name field for ChatProfiles.

Key Highlights

  • Security fix for authorization check
  • OAuth providers now return raw response
  • Slack reaction added events
  • Display name field added to ChatProfile

New Features

  • OAuth raw response
  • Slack reaction events
  • ChatProfile display_name

Full Release Notes

## What's changed
### Added
* feat: add raw response from OAuthProviders by @ADWasHere in https://github.com/Chainlit/chainlit/pull/2608
* feat: add slack reaction added event by @efealioksuz in https://github.com/Chainlit/chainlit/pull/2627
* feat: add display_name field to ChatProfile by @slovx2 in https://github.com/Chainlit/chainlit/pull/2616

### Fixed
* security: add missed authorization check by @asvishnyakov in https://github.com/Chainlit/chainlit/pull/2637

⚠️ This is a **fix for a security vulnerability** in Chainlit. The vulnerability is of low severity, as it requires an attacker to:
* Know the thread ID
* Already be a registered user in the Chainlit app

### Changed
* refactor: remove FastAPI upper version restriction by @s-quinn in https://github.com/Chainlit/chainlit/pull/2618

## New Contributors
* @ADWasHere made their first contribution in https://github.com/Chainlit/chainlit/pull/2608
* @s-quinn made their first contribution in https://github.com/Chainlit/chainlit/pull/2618
* @slovx2 made their first contribution in https://github.com/Chainlit/chainlit/pull/2616

**Full Changelog**: https://github.com/Chainlit/chainlit/compare/2.8.4...2.8.5