v9.2.1 v9.2.2
low risk
vllm-project/vllmAug 23, 2026 → Aug 23, 20260 days between releases
What's New
Restored Basic Auth prompts and scoped OAuth middleware to MCP transport
Improvements
- Scoped OAuth middleware specifically to the /mcp transport
- Added regression coverage for root deployments and custom APP_BASE_PATH
Bug Fixes
- Restored standard Basic Auth challenge for UI, REST API, and favicon requests
- Scoped OAuth middleware to /mcp transport to prevent unrelated route interception
Upgrade Notes
If you have MCP OAuth 2.1 enabled, the browser Basic Auth prompt will now correctly appear for UI and REST API requests. Ensure your OAuth middleware configuration targets the /mcp transport.
The Two Releases
v9.2.1
v9.2.1
Aug 23, 2026· 2 months ago
A patch release improving chat accuracy by cleaning up deleted messages from local storage, fixing message pagination per device, and resolving chat labels from synced contacts.
Full release notesv9.2.2
v9.2.2
Aug 23, 2026· 2 months ago
A patch release that restores browser Basic Auth prompts for the UI and REST API when MCP OAuth 2.1 is enabled, fixing middleware scoping issues.
Full release notes