v0.8.3

https://www.librechat.ai/changelog/v0.8.3

## 🏞️ Highlights

- **Event-Driven Lazy Tool Loading**
  - MCP tools load on-demand, reducing memory load. Includes programmatic tool calling UI.
- **New Models & Providers**
  - Moonshot provider, Claude Opus 4.6 (1M context, adaptive thinking), Sonnet 4.6, GPT-5.3/5.4, Gemini 3.1
  - Bedrock document uploads and reasoning_effort, Gemini Thinking Level parameter
- **Performance**
  - Optimized message re-renders, image preview caching, delta buffering for SSE, Redis scalability improvements.
- **Local Document Text Extraction**
  - PDF, DOCX, XLS/XLSX, and OpenDocument parsing locally.
- **MCP Server Credential Variables**
  - Secure per-user auth for UI-created MCP servers via credential placeholders.
- **Monaco Code Editor for Artifacts**
  - Now reliably allows artifact editing.
- **Agents**
  - Editors can now duplicate agents. Added `messageId` for transaction tracking.
- **Security**
  - TOCTOU-safe SSRF protection, OIDC improvements (RP-initiated logout, configurable email claim)
  - Hardened API routes, `ALLOW_SHARED_LINKS_PUBLIC` defaults to `false`.
 
<details>
<summary><h2>Click to expand Release Notes</h2></summary>

For detailed changes in each release candidate, see:
- [v0.8.3-rc1](https://www.librechat.ai/changelog/v0.8.3-rc1) - Event-Driven Lazy Tool Loading, Moonshot Provider, Claude Opus/Sonnet 4.6, Delta Buffering
- [v0.8.3-rc2](https://www.librechat.ai/changelog/v0.8.3-rc2) - Local Document Extraction, Bedrock Document Uploads, Credential Variables for MCP, Agent Duplication

---

## Changes Since v0.8.3-rc2

### ✨ Features

* 🤖 GPT-5.4 and GPT-5.4-pro Context + Pricing by [@danny-avila](https://github.com/danny-avila) in [#12099](https://github.com/danny-avila/LibreChat/pull/12099)

### 🐛 Fixes

* 🏆 Longest-or-Exact-Key Match in `findMatchingPattern`, Remove Deprecated Models by [@danny-avila](https://github.com/danny-avila) in [#12073](https://github.com/danny-avila/LibreChat/pull/12073)
* 🧭 Subdirectory Deployment Auth Redirect Path Doubling by [@danny-avila](https://github.com/danny-avila) in [#12077](https://github.com/danny-avila/LibreChat/pull/12077)
* 🕰️ Preserve `updatedAt` Timestamps During Meilisearch Batch Sync by [@danny-avila](https://github.com/danny-avila) in [#12084](https://github.com/danny-avila/LibreChat/pull/12084)
* 🧮 XLSX/XLS Upload-as-Text via Buffer-Based SheetJS Parsing by [@danny-avila](https://github.com/danny-avila) in [#12098](https://github.com/danny-avila/LibreChat/pull/12098)
* 📐 Replace JS Image Scaling with CSS Viewport Constraints by [@CavMCarolina](https://github.com/CavMCarolina) in [#12089](https://github.com/danny-avila/LibreChat/pull/12089)
* 🛡️ Add Permission Guard for Temporary Chat Visibility by [@Airamhh](https://github.com/Airamhh) in [#12107](https://github.com/danny-avila/LibreChat/pull/12107)
* ⛵ Resolve Agent Provider Endpoint Type for File Upload Support by [@danny-avila](https://github.com/danny-avila) in [#12117](https://github.com/danny-avila/LibreChat/pull/12117)
* 🔒 Hex-normalized IPv4-mapped IPv6 in Domain Validation by [@danny-avila](https://github.com/danny-avila) in [#12130](https://github.com/danny-avila/LibreChat/pull/12130)
* 🩹 MCP Server Recovery from Startup Inspection Failures by [@danny-avila](https://github.com/danny-avila) in [#12145](https://github.com/danny-avila/LibreChat/pull/12145)
* 🕵️ `remoteAgents` Field Omitted from Config by [@Airamhh](https://github.com/Airamhh) in [#12150](https://github.com/danny-avila/LibreChat/pull/12150)

### 🔧 Refactoring

* ⚡ Parallelize CI Workflows with Isolated Caching and Fan-Out Test Jobs by [@danny-avila](https://github.com/danny-avila) in [#12088](https://github.com/danny-avila/LibreChat/pull/12088)
* ⚡ Optimize Message Re-renders by [@danny-avila](https://github.com/danny-avila) in [#12097](https://github.com/danny-avila/LibreChat/pull/12097)
* 🏎️ Replace Sandpack Code Editor with Monaco for Artifact Editing by [@danny-avila](https://github.com/danny-avila) in [#12109](https://github.com/danny-avila/LibreChat/pull/12109)
* 🎞️ Image Rendering with Preview Caching and Layout Reservation by [@danny-avila](https://github.com/danny-avila) in [#12114](https://github.com/danny-avila/LibreChat/pull/12114)
* 🔒 Set `ALLOW_SHARED_LINKS_PUBLIC` to `false` by Default by [@ucodia](https://github.com/ucodia) in [#12100](https://github.com/danny-avila/LibreChat/pull/12100)

### 📦 Dependencies & Chores

* 📦 npm audit bump by [@danny-avila](https://github.com/danny-avila) in [#12074](https://github.com/danny-avila/LibreChat/pull/12074)
* 📦 Bump `multer` to v2.1.1 by [@danny-avila](https://github.com/danny-avila)
* 📦 Bump `express-rate-limit` to v8.3.0 by [@danny-avila](https://github.com/danny-avila) in [#12115](https://github.com/danny-avila/LibreChat/pull/12115)
* 🏷️ Remove Docker Images by Named Tag in `deployed-update.js` by [@danny-avila](https://github.com/danny-avila) in [#12138](https://github.com/danny-avila/LibreChat/pull/12138)
* 📦 Bump `mermaid` and `dompurify` by [@danny-avila](https://github.com/danny-avila)

### 🌍 Internationalization

* 🌍 i18n: Update translation.json with latest translations by [@github-actions[bot]](https://github.com/apps/github-actions) in [#12070](https://github.com/danny-avila/LibreChat/pull/12070)

## New Contributors

* [@CavMCarolina](https://github.com/CavMCarolina) made their first contribution in [#12089](https://github.com/danny-avila/LibreChat/pull/12089)
* [@Airamhh](https://github.com/Airamhh) made their first contribution in [#12107](https://github.com/danny-avila/LibreChat/pull/12107)
* [@ucodia](https://github.com/ucodia) made their first contribution in [#12100](https://github.com/danny-avila/LibreChat/pull/12100)

**Full Changelog**: https://github.com/danny-avila/LibreChat/compare/v0.8.2...v0.8.3

</details>