2026.7.1
QwenLM/Qwen-MM-Plugins2026.7.1Jul 15, 2026by devlikepro
Upgrading?
AI Summary
Adds scoped session keys for security, Passkey (WebAuthn) pairing, and fixes WEBJS and GOWS event handling bugs.
Key Highlights
- Introduced scoped session keys to narrow media/control API access
- Added Passkey (WebAuthn) session pairing for UI pairing
- Exposed current account LID in session 'me' info
New Features
- Scoped session keys for API security
- Passkey (WebAuthn) session pairing
- Exposed `me.lid` in WEBJS session info
Full Release Notes
🆕 **New**
- `2026.7.1` - **API** - scoped session keys — narrow media / control keys so you never share the real API key - [**🔒 Keys API**](https://waha.devlike.pro/docs/how-to/security/#scoped-session-keys-media--control) - [#2146](https://github.com/devlikeapro/waha/issues/2146)
- `2026.7.1` - **GOWS** - Passkey (WebAuthn) session pairing — pair sessions from your own UI - [**How to Handle Passkey**](https://waha.devlike.pro/blog/waha-passkey/)
- `2026.7.1` - **WEBJS** - expose the current account LID in session “me” info (`me.lid`)
🛠️ **Fixes**
- `2026.7.1` - **WEBJS** - `waha is not receiving message events` after the `_serialized` id rename - [#2157](https://github.com/devlikeapro/waha/issues/2157), #2162
- `2026.7.1` - **WEBJS** - `Unhandled TypeError: Cannot read properties of undefined (reading 'includes')` - [#2158](https://github.com/devlikeapro/waha/issues/2158)
- `2026.7.1` - **WEBJS** - `GET /api/{session}/groups` returns HTTP 500 - [#2159](https://github.com/devlikeapro/waha/issues/2159)
- `2026.7.1` - **WEBJS** - `Cannot GET /api/{session}/chats` - [#2160](https://github.com/devlikeapro/waha/issues/2160)
- `2026.7.1` - **WEBJS** - sending an image fails with `msg.avParams is not a function` - [#2149](https://github.com/devlikeapro/waha/issues/2149)
- `2026.7.1` - **GOWS** - session silently stops sending webhook events after `<stream:error>` (media ack); status stayed `WORKING` until a manual restart - [#2151](https://github.com/devlikeapro/waha/issues/2151)
- `2026.7.1` - **NOWEB** - timestamp bug that breaks message sorting when fetching chat history - [#2139](https://github.com/devlikeapro/waha/issues/2139)
- `2026.7.1` - **MCP** - do not share the real API key in media and auth (QR / screenshot) tool output - [#2146](https://github.com/devlikeapro/waha/issues/2146)
📊 **Dashboard**
- `2026.7.1` - Passkey UI — extension-assisted pairing with a manual DevTools fallback, driven by `session.status`
- `2026.7.1` - fix image emoji
⚙️ **Updates**
- `2026.7.1` - **WEBJS** - up engine
- `2026.7.1` - **GOWS** - up engine
- `2026.7.1` - **NOWEB** - up engine
- `2026.7.1` - **WPP** - up engine
**Full Changelog**: https://github.com/devlikeapro/waha/compare/2026.6.1...2026.7.1Related Repositories
public-apis/public-apis★ 491,268
A collective list of free APIs
NousResearch/hermes-agent★ 256,134
The agent that grows with you
yt-dlp/yt-dlp★ 200,318
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,598
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,705
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.