V4.17.0

Upgrade notes

Before upgrading to V4.17.0, upgrade to V4.16.x and complete all legacy upgrade scripts required by that release. The automatic upgrade system in V4.17.0 only manages tasks registered from this release onward. It does not run historical scripts from earlier releases.

Starting with V4.17.0, you no longer need to run upgrade scripts manually. FastGPT runs them automatically, uses leases to prevent concurrent execution across multiple nodes, and uses heartbeats to check whether each script is still active. You can view each upgrade script's status under Admin > System upgrade.

V4.17.0 first blocks startup while migrating legacy system model settings. Business services become available only after this migration succeeds. FastGPT then backfills model permissions and model references in Datasets, evaluations, Apps, App versions, and App templates in the background. Dangling model permissions that cannot be matched against the current model catalog are removed. A failed non-blocking task does not interrupt business services; review its failed records and retry it under Admin > System upgrade. If the blocking task fails, the FastGPT App instance remains not ready. Fix the reported issue using the instance logs, then restart the App instance.

Model reference migrations process 100 records per batch by default. For larger deployments, set SYSTEM_MIGRATION_BATCH_SIZE to a value from 50 to 1000.

Code Sandbox seccomp compatibility setting (optional)

Code Sandbox continues to enable seccomp by default. If the host kernel does not support application-level seccomp, process pool initialization fails. If you accept the reduced syscall isolation, explicitly configure Code Sandbox with:

SANDBOX_DISABLE_SECCOMP=true

This setting disables only seccomp. chroot, no_new_privs, and UID/GID privilege reduction remain enabled. Without seccomp, the kernel no longer blocks network, process creation, thread creation, or binary execution syscalls. Do not use this setting on hosts that support seccomp.

🚀 New

1. Added LDAP member and organizational structure sync to FastGPT SSO Service, along with separate environment variable templates and configuration guides for each SSO provider.
2. Added DingTalk user and department sync to FastGPT SSO Service.
3. File upload fields in Workflow Tools can now be configured for Agent-generated input. Existing file fields remain manual by default to prevent behavior changes after an upgrade.
4. Added automatic system upgrade task management with status, stage progress, failed-record, and result views, plus retries for failed non-blocking tasks.

⚙️ Improvements

1. Improved chat pausing: the stop request now returns as soon as the Workflow stop marker is saved. After confirmation, the client closes the active response stream instead of waiting up to five seconds.
2. Preserved partial reasoning when a chat is paused before answer text starts, so the reasoning remains available after a refresh.
3. Centered citation markers below an image when the image is followed only by citations. Inline text citations keep their existing layout.
4. Improved generation conflict recovery: when the current chat is still generating on the server, the client detects the conflict and restores the existing response stream instead of adding an empty message or showing an error state.
5. Made collapsed processing previews interactive. You can now select a reasoning or tool-call preview to expand its matching details.

🐛 Fixes

1. Fixed bottom spacing in the account deletion confirmation dialog, allowed long confirmation text to wrap correctly, and improved account deletion email templates.
2. Limited DB_MAX_LINK to the inclusive range 10–1000, preventing low values from limiting concurrency and excessively high values from creating resource pressure. Official deployment templates use 20 by default.
3. Fixed upload, URL installation, and installation confirmation paths that could bypass the team plugin installation feature setting after installation was disabled.
4. Fixed an issue where XLSX XML scanning could continue after the scan was disabled.

🛠️ Code improvements

1. Standardized system models, model permissions, and business settings on stable modelId references, with automatic migrations for legacy model-name references.
2. Added MongoDB leases, run ID fencing, and heartbeats to coordinate automatic migrations across multiple nodes and take over stalled runs. Large migrations support resumable batch processing.