What's Changed

• feat(PAT): 1/3 PAT backend, crud, shared utils with API key by @wenxi-onyx in #6044
• feat(PAT): 2/3 PAT APIs by @wenxi-onyx in #6045
• feat(PAT): 3/3 PAT frontend by @wenxi-onyx in #6046
• feat(PAT): Final/3 add tests by @wenxi-onyx in #6047
• feat: nextjs upgrade + react compiler by @Weves in #6060
• fix: airgapped by @Weves in #6067
• fix: honor pw min length env var on fe by @wenxi-onyx in #6065
• chore(gha): pin workflow versions by @jmelahman in #6058
• chore(gha): migrate mypy workflow to uv w/ caching by @jmelahman in #6074
• chore(custom): instructions by @rguan72 in #6055
• chore(simplified): tools by @rguan72 in #6064
• fix(gha): Dont wait for vespa server by @jmelahman in #6081
• feat(gha): persist the mypy_cache by @jmelahman in #6079
• fix: preload user settings correctly by @wenxi-onyx in #6063
• fix: infinite render on React 19 by @Weves in #6085
• feat: gmail connector checkpointing by @evan-onyx in #6040
• chore(deps): basic dependabot setup for actions by @jmelahman in #6087
• fix: disable PAT when AUTH_TYPE is disabled by @wenxi-onyx in #6088
• chore(deps): bump actions/github-script from 7.1.0 to 8.0.0 by @dependabot[bot] in #6091
• chore(deps): bump helm/chart-testing-action from 2.7.0 to 2.8.0 by @dependabot[bot] in #6090
• chore(deps): bump aws-actions/configure-aws-credentials from 4.3.1 to 5.1.0 by @dependabot[bot] in #6089
• fix: setDisplayComplete not called for ollama by @Weves in #6092
• chore(gha): migrate external dependency tests to uv by @jmelahman in #6083
• fix: Fix modal dragging issue by @raunakab in #6095
• refactor: Update how disabled actions are rendered by @raunakab in #6094
• refactor: New Opal component library by @raunakab in #6062
• fix(gdrive): Add support for domain link only filtering by @justin-tahara in #6076
• chore(gha): migrate connectors-check to uv w/ caching by @jmelahman in #6102
• fix(bedrock): Add Gov Cloud regions by @justin-tahara in #6105
• chore(prompting): fix default behavior assistant by @rguan72 in #6103
• refactor: Update tooltip colours by @raunakab in #6093
• fix(teams): increase timeout w special char team names by @jessicasingh7 in #6086
• fix: hydration errors by @wenxi-onyx in #6100
• fix(icons): Update Token Rate Limits page by @justin-tahara in #6112
• feat: Sidebar anim by @raunakab in #6111
• fix: Sidebar sizing fix by @raunakab in #6113
• fix: openapi generation required fields by @wenxi-onyx in #6117
• fix(tool): Hide Okta Tool by @justin-tahara in #6120
• fix(gha): fix terraform pre-commit test by @jmelahman in #6124
• chore(gha): reduce size of pr-quality-check instance by @jmelahman in #6123
• fix(upload): File type handling by @justin-tahara in #6126
• fix(chat): Adding buffer for instructions by @justin-tahara in #6125
• fix(vercel): Remove deprecated fields by @justin-tahara in #6130
• feat(azure): Support OpenAI Image models by @justin-tahara in #6107
• fix(ui): Make Private Groups selectable again by @justin-tahara in #6116
• chore(gha): pr-python-checks instance update by @jmelahman in #6129
• fix: package-lock.json by @Weves in #6106
• fix: White labelling by @raunakab in #6133
• fix: infinite render on embedding model page by @Weves #6144
• fix: improve /llm/provider performance by @Weves #6158
• fix(gpt-5): Catch all by @justin-tahara #6162
• fix(embedding): Fix Deletion of Same Name by @justin-tahara #6149

Release Notes: https://docs.onyx.app/changelog#v2-3-0