Security

• ⚠️ Prevent unauthenticated memory exhaustion via clients leaked on socket disconnect (GHSA-46f2-xhpw-8vh3 by @evnchn, @falkoschindler)
• ⚠️ Prevent XSS via prop injection in ColorPicker.set_color() and ui.color_input (GHSA-955g-h32v-mvrr by @mingijunggrape, @evnchn, @falkoschindler)

New features and enhancements

• Refactor ui.scene to a modular object system, supporting custom three.js objects and fixing the white axes_helper regression (#4120, #6085, #6246 by @HosseyNJF, @phenolophthaleinum, @evnchn, @SaadZahem, @python-and-novella, @falkoschindler)

  Breaking change: The following patterns are deprecated and will be removed in NiceGUI 4.0 (they still work but emit a one-time warning): importing from nicegui.elements.scene.scene_objects (use nicegui.elements.scene.objects instead), subclassing Object3D without a component= argument, instantiating objects with a leading type string like Object3D('group'), and the Object3D.data and Object3D.type properties.

• Add line-anchor tracking to ui.codemirror, giving you stable references to specific lines that survive edits (#5988, #6282 by @Jepson2k, @evnchn, @falkoschindler)

• Add h2, h3, h4, h5 and h6 HTML elements (#6238 by @SaadZahem, @evnchn, @falkoschindler)

• Sync ui.table's fullscreen state back to the server when toggled from the client (#6181 by @evnchn, @falkoschindler)

• Avoid downloading an unused font subset for the connection-lost popup's warning glyph (#6210 by @evnchn, @falkoschindler)

• Remove dead props from ui.chip, ui.carousel_slide and the ui.date input (#6177, #6184, #6185 by @evnchn, @falkoschindler)

Bugfixes

• Fix error when a repeating ui.timer's client is deleted while waiting for the connection (#6226, #6228, #6229 by @benvc, @AJ-ing, @evnchn, @falkoschindler)
• Fix task leak by resolving awaited ui.dialogs when they are deleted (#6250 by @denniswittich, @evnchn, @falkoschindler)
• Fix On Air reconnect when the relay silently drops the connection while Socket.IO's connected flag is stale (#6212, #6213 by @dennis-agentic, @evnchn, @denniswittich, @falkoschindler)
• Route mouse-button and exact modifiers of generic events correctly and preserve hyphenated key modifiers (#6199, #6206 by @evnchn, @falkoschindler)
• Disconnect resize observers of ui.header and ui.echart and document key listeners of ui.keyboard when the element is unmounted (#6189, #6190, #6196 by @evnchn, @falkoschindler)
• Remove bindings when a ui.scene Object3D is deleted and guard "dragend" events against deleted objects (#6192, #6195 by @evnchn, @falkoschindler)
• Fix Redis storage so key deletions propagate across instances (#6194 by @evnchn, @falkoschindler)
• Fix element.move() orphaning an element when the target slot is invalid and guard against moving an element into its own descendant (#6176, #6180 by @evnchn, @falkoschindler)
• Handle parameter coercion errors in ui.sub_pages builders like builder errors (#6186 by @evnchn, @falkoschindler)
• Fix error reporting when an async ui.sub_pages builder raises after its client has been deleted (#6231, #6270 by @evnchn, @SaadZahem, @falkoschindler)
• Clean up the spilled temporary file when a ui.upload fails mid-transfer (#6187 by @evnchn, @falkoschindler)
• Remove leaked auto-generated route when switching an element's source away from a local file (#6204 by @evnchn, @falkoschindler)
• Fix ui.upload unregistering the application's route instead of its own auto-generated route on delete (#6236, #6256 by @evnchn, @SaadZahem, @falkoschindler)
• Support URL-encoded data-URL favicons (#6191 by @evnchn, @falkoschindler)
• Fix ui.color_input crashing when the value is None with preview enabled (#6201 by @evnchn, @falkoschindler)
• Fix ui.number's out_of_limits raising a TypeError when the value is None (#6179 by @evnchn, @falkoschindler)
• Fix ui.line_plot's push crashing on empty data with automatic limits (#6183 by @evnchn, @falkoschindler)
• Fix lost "done" decoration when navigating a ui.stepper by Step object (#6200 by @evnchn, @falkoschindler)
• Fix Event.emitted() timeout handling on Python 3.10 (#6197 by @evnchn, @falkoschindler)

Documentation

• Document Socket.IO client_id forging as a commonly misreported security pattern and explain which random IDs are secrets (#6239, #6268 by @falkoschindler, @evnchn)
• Never show a fabricated GitHub star count on the website by baking it in at deploy time (#6211, #6218, #6240 by @evnchn, @falkoschindler)
• Fix ChromeDriver install instructions for Linux in tests/README.md (#6266, #6267, #6274 by @evnchn, @SaadZahem, @falkoschindler)
• Prefer behavior tests over tests coupled to implementation details in CONTRIBUTING.md (#6219 by @falkoschindler, @evnchn)
• Fix broken DiscoLike sponsor logo on the website (#6253 by @evnchn, @falkoschindler)
• Add pointer cursor to the ui.popup demo's anchor label (#6207 by @evnchn, @falkoschindler)
• Fix ui.pagination's direction_links docstring (#6203 by @evnchn, @falkoschindler)

Testing

• Add scoped User lookups and a pytest example (#6015 by @ZhuGC-Centogene, @evnchn, @falkoschindler)

Dependencies

• Update echarts-gl to 2.1.0 (#6216 by @falkoschindler, @evnchn)
• Move the lxml security pins to the website dependency group (#6208 by @evnchn, @falkoschindler)

Infrastructure

• Keep JavaScript source maps out of the wheel (#6209 by @evnchn, @falkoschindler)
• Add a Windows CI leg for the storage file-lock tests (#6160 by @evnchn, @Jepson2k, @falkoschindler)

---

Special thanks to our top sponsors DiscoLike Inc., TestMu AI and Lechler GmbH ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Introduce ui.popup, a menu on desktop and a dialog on small screens (#1125, #2149, #5613 by @DelScipio, @adosikas, @evnchn, @phifuh, @falkoschindler)
• Make the start method of the run.cpu_bound process pool configurable via run.process_pool_start_method (#6117 by @evnchn, @NiklasNeugebauer, @falkoschindler)
• Speed up binding cleanup with a reverse index (#6135, #6150 by @ftilde, @jwinpbe, @evnchn, @falkoschindler)
• Speed up observable change handlers by resolving expects_arguments once at registration (#6098, #6108 by @maybites, @evnchn, @falkoschindler)
• Add element identity to the "parent slot has been deleted" error (#6153 by @pascalzauberzeug, @evnchn, @falkoschindler)

Bugfixes

• Fix ObservableCollection leaking change handlers and keeping discarded containers alive (#6139, #6140 by @falkoschindler, @evnchn)

• Raise KeyError from ObservableDict.pop() for a missing key, like dict.pop (#6163, #6164 by @evnchn, @falkoschindler)

  Breaking change: app.storage.general, .user, .tab and .client are ObservableDicts, so storage.pop('missing') now raises a KeyError instead of returning None. Pass an explicit default to keep the previous behavior: storage.pop('missing', None).

• Skip change events for no-op mutations of observable collections (#6169, #6171 by @falkoschindler, @evnchn)

• Fix ui.page_title, ui.add_head_html, ui.add_body_html and ui.add_css being lost in async ui.sub_pages builders (#6058, #6147, #6148, #6168 by @cervelas, @evnchn, @falkoschindler)

• Fix run.cpu_bound hanging with the forkserver start method, e.g. on Python 3.14 + Linux (#6166, #6167 by @evnchn, @falkoschindler)

• Fix PermissionError on Windows when clearing storage while a backup is in flight (#6158, #6159, #6173, #6174 by @Jepson2k, @evnchn, @falkoschindler)

• Fix sporadic HTTP 500 when user storage is pruned during an in-flight request (#6145, #6146 by @evnchn, @falkoschindler)

• Fix TypeError in ui.input's shadow text when the autocomplete list is absent (#6161, #6162 by @Jepson2k, @evnchn, @falkoschindler)

• Fix placement and order of ui.fab_actions under dir="rtl" (#6165, #6172 by @roximn148, @evnchn, @falkoschindler)

• Fix crash when loading an STL model into ui.scene with wireframe=True (#5989, #6118, #6137 by @fabian0702, @Jepson2k, @evnchn, @falkoschindler)

• Close streamed media file handles synchronously on teardown (#6149 by @evnchn, @falkoschindler)

Documentation

• Add an accessibility heading tree to the homepage (#6155 by @evnchn, @falkoschindler)

Testing

• Make CPython-only-semantics tests PyPy-compatible (#6157 by @evnchn, @falkoschindler)

Dependencies

• Update nicegui-highcharts to 3.3, fixing dynamic adding and removing of chart series (#6138 by @falkoschindler, @evnchn)

Infrastructure

• Run examples/pytests in CI so bundled example tests can't silently rot (#6141, #6144 by @falkoschindler, @evnchn)

---

Special thanks to our top sponsors DiscoLike Inc. and Lechler GmbH ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Security

• ⚠️ Harden against X-Forwarded-Prefix reflection and clarify the security documentation (#6124 by @evnchn, @falkoschindler)

New features and enhancements

• Add a custom keybindings API to the ui.codemirror editor (#6000 by @Jepson2k, @evnchn, @falkoschindler)
• Declare the page language via <html lang="..."> when ui.run(language=...) is set, and stop Quasar from forcing en-US otherwise (#5811 by @evnchn, @falkoschindler)
• Introduce ui.markdown.default_extras to configure Markdown extras globally (#5548, #5610 by @tomsquest, @evnchn, @falkoschindler)
• Simplify the multipart spool-size lookup now that Starlette ≥ 1.0.1 is required, and respect an explicit spool_max_size = 0 (#6102 by @falkoschindler, @evnchn)

Bugfixes

• Fix character loss in ui.input (and other value elements) on high-latency connections by preserving client-originated values during element updates (#5185, #6104 by @Xitod, @samuller, @evnchn, @falkoschindler)

• Fall back to polling when the WebSocket cannot connect, fixing the endless reload loop on iOS 26 Safari over plain HTTP (#5802, #6103 by @michaeljandrews, @evnchn, @falkoschindler)

• Fix native window close hanging or failing to shut down the app — on Windows, after a hot reload, and when run.cpu_bound was used (#5443, #5845, #6106, #6111, #6131, #6132 by @MaidScientistIzutsumiMarin, @trivedihoney, @Mick235711, @trivedihoney, @chidoziemanagwu, @evnchn, @falkoschindler)

• Fix ui.sub_pages wildcard routes not re-rendering on client-side navigation, and reject unsupported route patterns (#6090, #6092 by @JoelBender, @falkoschindler, @evnchn)

  Breaking change: Route patterns that previously failed silently (e.g. '/{_:path}', '/{name:path}') now raise a ValueError at ui.sub_pages(...) / .add(...). These never matched anything before, so only already-broken routes are affected; use show_404=False together with PageArguments.remaining_path for wildcard routing instead.

• Fix a selection error when changing ui.select options inside an "input-value" handler (#4420, #6100 by @platinops, @VedantMadane, @falkoschindler, @evnchn)

• Fix ui.select(with_input=True) dropping its html_id, which broke tooltips (#6114, #6116 by @rolfn, @python-and-novella, @evnchn, @falkoschindler)

• Fix ui.skeleton's animation_speed being sent as milliseconds instead of seconds (#6107, #6110 by @python-and-novella, @evnchn, @falkoschindler)

• Fix ui.interactive_image click coordinates when a stream changes its resolution (#6122, #6123 by @LeBoozer, @evnchn, @falkoschindler)

• Fix GLTF models in ui.scene being overwritten with the default material at startup (#6118, #6125 by @fabian0702, @evnchn, @falkoschindler)

• Fix an infinite reload loop when an async page build exceeds response_timeout, showing a terminal error page instead (#6126, #6127 by @evnchn, @falkoschindler)

• Fix the run.cpu_bound/run.io_bound return type to R | None, surfacing the latent None they already return on cancel/shutdown (#5925, #6056 by @calebgregory, @evnchn, @falkoschindler)

  Note: This is a type-level change only; runtime behavior is unchanged. mypy may now flag code that typed the result as non-optional R — these are surfaced latent bugs, not regressions. NiceGUI 4.0 will raise CancelledError instead of returning None.

Documentation

• Improve AI-agent detection in Markdown content negotiation so agents reliably receive Markdown docs (#6109, #6113 by @jwinpbe, @evnchn, @falkoschindler)
• Improve app.storage documentation clarity and fix inconsistencies (#5717, #5719 by @phifuh, @evnchn, @falkoschindler)
• Reserve NOTE: comment markers for drawing special attention (#6101 by @falkoschindler, @evnchn)

Infrastructure

• Add a request check to the startup smoke test so request-time regressions no longer ship green (#6079, #6084 by @evnchn, @SSDWGG, @falkoschindler)
• Remove the redundant CI Gate run on push to main now that the merge queue already validates every commit reaching main, speeding up releases (#6136 by @falkoschindler, @evnchn)
• Bump actions/checkout from 6 to 7 (#6121 by @dependabot, @evnchn)

---

Special thanks to our top sponsors DiscoLike Inc. and Lechler GmbH ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Introduce ui.skip_link for keyboard-accessibility skip links (WCAG 2.4.1 "Bypass Blocks") (#5790 by @evnchn, @falkoschindler)
• Add per-line hover tooltips to ui.codemirror via a new line_tooltips property (with optional line_tooltip_html) (#5992 by @Jepson2k, @falkoschindler, @evnchn)
• Add a ui.plotly run_plot_method() helper (mirroring run_grid_method/run_chart_method) with a Plotly.extendTraces demo for appending data without re-sending the full figure (#2660, #6060 by @evnchn, @falkoschindler)
• Improve the error message when storing a non-JSON-serializable value in app.storage, pointing at the offending key path and the underlying type instead of an internal class name (#6044, #6050 by @NichtJens, @falkoschindler, @evnchn)

Bugfixes

• Fix dropped app.native.window_args, app.native.settings and app.native.start_args when the spawned window process can't re-execute the main module (e.g. console-scripts, python -m, PyInstaller); unpicklable values now emit a one-time warning instead of being silently dropped (#6082, #6093 by @VFLins, @falkoschindler, @evnchn)

• Fix blank ui.aggrid when flex columns use the infinite row model; auto_size_columns becomes a tri-state bool | None defaulting to None (skip autoSizeStrategy when columns use flex) (#5087, #6080 by @davetapley, @evnchn, @falkoschindler)

• Fix Event.emitted() returning None instead of the emitted arguments, adding an opt-in expect_args parameter to Event.subscribe() (#6077, #6078 by @falkoschindler, @evnchn)

• Fix the ui.sub_pages 404 sad-face persisting after client-side navigation when the page is first loaded at an unknown URL (#6069, #6071 by @evnchn, @falkoschindler)

  Note: Apps that relied on the styled sad-face overlay appearing on ui.sub_pages 404s now see only the inline 404: sub page X not found label inside their own chrome. The HTTP 404 status and the show_404=False escape hatch are unchanged.

• Replace the misleading "remove the main guard" reload error for python -m <pkg> with a targeted message naming the package and the working alternatives (#181, #3769, #5280, #5939, #6066, #6068 by @NichtJens, @evnchn, @falkoschindler)

• Fix Client has been deleted warning spam on reload when scene objects are mutated after await (#6058, #6059 by @codingpaula, @evnchn, @falkoschindler)

  Note: Element.update(), run_method() and get_computed_prop() now stay silent only for the disconnect/reload race; using an element after an explicit element.delete() emits a one-shot warning with a stack trace.

Documentation

• Improve the Markdown documentation served to AI agents: serve Markdown to known agent user-agents sending a wildcard Accept, emit heading prefixes while skipping decorative HTML and demo previews, and add aria-label/child-content labels to button Markdown (#6007, #6052, #6053, #6054 by @evnchn, @falkoschindler, @HosseyNJF)
• Fill llms.md gaps in the element surface vs. ui.* exports (#6048, #6051 by @evnchn, @falkoschindler)
• Document how to keep ui.plotly responsive with large datasets by passing NumPy arrays / pandas Series instead of Python lists (#3340, #6095 by @TsaiTung-Chen, @python-and-novella, @mohsenminaei, @krashdifferent, @eddie3ruff, @buiapp, @falkoschindler, @evnchn)
• Fix bad Cumulative Layout Shift (CLS) on the documentation homepage (#6087, #6089 by @evnchn, @falkoschindler)

Testing

• Redo: randomize test ports and directories for parallel pytest sessions, re-applying #5960 with a fix for the #6061 import-time Storage.path regression (#5960, #6061, #6075 by @falkoschindler, @evnchn)

Infrastructure

• Fix Selenium screenshot artifacts not being uploaded on test failure (#6086 by @HosseyNJF, @evnchn, @falkoschindler)

---

Special thanks to our top sponsors DiscoLike Inc. and Lechler GmbH ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfixes

• Fix auto-prune timers being skipped in script mode (#6072, #6074 by @evnchn, @falkoschindler)
• Fix RuntimeError in native mode on Python 3.14+ Linux (#6062, #6065 by @noafilou, @evnchn, @falkoschindler)
• Fix ui.upload routes listed in /docs and /openapi.json (#6063 by @jsb-zz, @falkoschindler, @evnchn)

Documentation

• Add a note on how to fix non-working ui.aggrid events (#2878, #6067 by @BlankAdventure, @KrilleGH, @evnchn, @falkoschindler)

---

Special thanks to our top sponsors DiscoLike Inc., Lechler GmbH and joet-s ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Security

• ⚠️ Prevent local file disclosure in ui.restructured_text via Docutils file insertion directives (GHSA-jfrm-rx66-g536 by @dennyabrahamsinaga, @h3ri0s, @falkoschindler, @evnchn)
• ⚠️ Prevent unauthenticated log-volume denial of service in dynamic resource and ESM module routes (GHSA-pq7c-x8g4-rvp6 by @bitinerant, @evnchn, @falkoschindler)

New features and enhancements

• Make enable(), disable(), set_enabled(), set_visibility() and many more methods chainable (#6014, #6016 by @stragrothsk, @falkoschindler, @evnchn)
• Auto-dedent ui.mermaid content like ui.markdown does (#6011, #6012 by @BasementSociety, @falkoschindler, @evnchn)
• Suppress alarming KeyboardInterrupt traceback from run.cpu_bound workers on Ctrl-C (#6025, #6027 by @justus2510, @falkoschindler, @evnchn)

Bugfixes

• Fix RuntimeError: A SemLock created in a fork context is being shared with a process in a spawn context in ui.run(native=True, reload=True) on CPython ≥ 3.11.5 (#1841, #6045 by @swrpug, @evnchn, @falkoschindler, @rodja, @JensOgorek, @yuanxion, @electronstudio, @knoppmyth, @Qhawaq, @sagarbehere, @frankhuurman, @MrGibus, @BanDroid)
• Fix KeyError: 'error' when calling ValidationElement.validate() after the error prop was removed via props(remove=...) (#5977, #6042 by @manu-ns, @falkoschindler, @evnchn)
• Fix silent window.location.reload() on every WebSocket reconnect (#6018, #6019 by @arodidev, @falkoschindler, @evnchn)
• Resolve ElementFilter.DEFAULT_LOCAL_SCOPE at runtime so changing the class variable actually affects new instances (#6005, #6013 by @gzu300, @DarkRiddle1212, @falkoschindler)
• Fix duplicate app.timer and lifecycle handler (on_connect, on_disconnect, on_delete, on_shutdown, on_exception) registration in script mode (#6003, #6006 by @EchterTimo, @falkoschindler, @evnchn)
• Preserve a meaningful DataFrame index in ui.aggrid.from_pandas and ui.table.from_pandas (#5995, #6002 by @NichtJens, @DarkRiddle1212, @falkoschindler, @evnchn)
  Note: DataFrames with an informative index now produce additional column(s) in the resulting grid/table. To restore the previous "drop the index" behavior, call df.reset_index(drop=True) before passing the DataFrame.
• Bracket IPv6 hosts and omit default ports in printed URLs (#5996 by @bulletmark, @falkoschindler, @evnchn)
• Fix ui.code reporting the wrong language and throwing a ReferenceError in the CodeMirror findLanguage error path (#5982 by @Jepson2k, @falkoschindler)
• Fix material settings not applying to GLTF models in ui.scene (#3515, #5708 by @maria-korosteleva, @evnchn, @falkoschindler, @fabian0702)

Documentation

• Add llms.md — a self-contained LLM reference covering NiceGUI's API surface, mental models, and common anti-patterns for AI-assisted development (#6021, #6049 by @joko-zauberzeug, @falkoschindler, @evnchn, @rodja)
• Restructure CONTRIBUTING.md around the contributor journey, drop rule duplication, and split out a new "For maintainers" section (#6029 by @falkoschindler, @evnchn)
• Restructure AI agent instructions: extract code-review guidance into REVIEW.md, trim AGENTS.md, and tighten Cursor/Copilot prompts (#6030 by @falkoschindler, @evnchn)
• Document packaging with Nuitka (#6009, #6010 by @SHDocter, @falkoschindler, @evnchn)
• Improve authentication example (#6046 by @NichtJens, @evnchn, @falkoschindler)
• Improve Sortable documentation (#6017 by @falkoschindler, @denniswittich)
• Clarify the client_id security model and add an "Examples Are Starting Points" callout (#6004 by @evnchn, @falkoschindler)
• Fix Nested ui.sub_pages doc demo link target and label (#5999, #6008 by @aisartag, @falkoschindler, @evnchn)

Testing

• Fix click handler dispatch in user simulation (#6043 by @Jepson2k, @falkoschindler, @evnchn)
  Note 1: Click handlers on ui.checkbox and ui.switch now receive e.args = None instead of not element.value; read e.sender.value (or use on_value_change) for the post-toggle value.
  Note 2: Also, find(...).click() no longer broadcasts to every matched element — it picks the lowest-ID enabled match and dispatches once. Tests that relied on simultaneous multi-match clicks need to issue separate calls.
• Implement ui.sub_pages navigation in user-simulated tests (#5193 by @rodja, @falkoschindler)

Dependencies

• Bump Mermaid from 11.12.2 to 11.15.0 to consume upstream security patches (#6047 by @falkoschindler, @evnchn)

Infrastructure

• Use uv sync --locked in CI workflows so lockfile drift fails fast with a clear diagnostic (#6036 by @evnchn, @falkoschindler)
• Use uv sync --locked in Copilot setup steps for deterministic agent boot environments (#6040 by @evnchn, @falkoschindler)
• Switch Dependabot from the pip ecosystem to uv (#6037 by @evnchn, @falkoschindler)
• Declare PyPI trove classifiers so NiceGUI appears in PyPI's faceted search (#6041 by @evnchn, @falkoschindler)
• Expand [project.urls] with PEP 753 well-known labels (#6039 by @evnchn, @falkoschindler)

---

Special thanks to our top sponsors TestMu AI, Lechler GmbH and joet-s ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfix

• Fix ui.sub_pages subpaths returning a JSON 404 instead of rendering the page when used inside ui.run_with(root=...) (#5998, #5999 by @egursu, @falkoschindler, @evnchn)

New features and enhancements

• Add lazy imports for the ui module to speed up startup by deferring heavy element imports until first access (#5303 by @evnchn, @falkoschindler)
• Make ValueElement and ValueChangeEventArguments generic for proper type inference of .value and event arguments (#2677, #5785 by @petergaultney, @evnchn, @falkoschindler)
• Add favicon support in native mode on Windows (#1745, #5841 by @falkoschindler, @FabianGoessling, @rodja, @DearRude, @evnchn)
• Add make_sortable() to enable drag-and-drop sorting on container elements like ui.column, ui.row, ui.card, and many more (#932, #4656, #5464, #5855 by @falkoschindler, @evnchn, @EmberLightVFX, @phifuh, @marcrichard22, @nomadfox6, @HansBambel, @sergeyyurkov1, @sukhstanford, @stepheweffie, @TM0088, @weihuan)
• Serve a Markdown representation of any NiceGUI page via Accept: text/markdown content negotiation for AI agents and CLI tools (opt-in via ui.run(markdown=True) or @ui.page(markdown=True)) (#5889 by @evnchn, @falkoschindler, @rodja)
• Raise an error when ui.run_with() is called with nicegui.app itself, preventing a self-mount loop that exhausted CPU and RAM (#5954 by @falkoschindler, @evnchn)
• Add ui.keep_alive to mount children eagerly regardless of visibility, fixing data loss in unmounted ui.xterm and unresponsive ui.aggrid inside hidden tabs or dialogs (#3033, #5839, #5951 by @falkoschindler, @natankeddem, @kyloe, @amks1, @Ha44a, @evnchn)

Bugfixes

• Fix in-page drag-and-drop in native mode being blocked by the document-level dragover handler (#5943, #5962 by @phifuh, @falkoschindler, @evnchn)
• Fix app.on_exception not catching exceptions from async event handlers (#5945, #5946 by @Rollmops, @falkoschindler, @evnchn)
• Fix PermissionError on Windows when clearing file-backed storage during shutdown (#5949, #5973 by @atollk, @rodja, @falkoschindler, @evnchn)
• Clear streaming client cookie jar between On Air range-requests to prevent unbounded memory growth (#5968 by @AAtomical, @falkoschindler, @evnchn, @stephanpalmer)
• Fix scoped CSS parsing for @keyframes and similar nested at-rules, and apply scoped selectors to the component root element via tinycss2 (#5969, #5972, #5976 by @jhjcpishva, @falkoschindler, @evnchn)
• Return JSON from the 404 handler for non-page endpoints so FastAPI routes keep their default error format (#5974 by @falkoschindler, @evnchn, @jsb-zz, @codingpaula)
• Preserve aspect ratio in ui.interactive_image when size is not set, fixing stretched sponsor logos on the website (#5978, #5980 by @lawrenceakka, @falkoschindler, @evnchn)
• Fix ReferenceError from dangling weakref proxies in ui.run_with() (#5979, #5981 by @giunio-prc, @falkoschindler, @evnchn)

Documentation

• Update Trello Cards example with drag-and-drop reordering within a column (#5934 by @entorb, @evnchn, @falkoschindler)
• Improve the xterm example with a configurable command, PTY resize, viewport sizing, and lifecycle hardening (#5959 by @evnchn, @falkoschindler)
• Add ui.aggrid demo for adding rows without losing client-side edits (#5952, #5967 by @peyman-vasegh, @falkoschindler, @evnchn)

Testing

• Fix RuntimeError when a click handler deletes the clicked element during testing (#5935, #5937, #5938 by @samuller, @falkoschindler, @evnchn)

Dependencies

• Bump pytest to v9 to address Dependabot alert 244 (#5953 by @falkoschindler, @evnchn)
• Bump softprops/action-gh-release from 2 to 3 (#5955 by @dependabot, @falkoschindler)

---

Special thanks to our top sponsors TestMu AI and Lechler GmbH ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Security

• ⚠️ Prevent filename sanitization bypass via ui.upload on Windows (GHSA-w8wv-vfpc-hw2w by @offset, @evnchn, @falkoschindler)

New features and enhancements

• Add nested dictionary binding support for deeply nested data structures (#2978, #5738 by @Aues6uen11Z, @evnchn, @falkoschindler)
• Add ui.status_code() to set HTTP status codes from page builders (#5810 by @evnchn, @falkoschindler)
• Add on_resize callback to ui.xterm to communicate terminal size to the PTY (#5847, #5858 by @jacopofar, @evnchn, @falkoschindler)
• Unify awaitable handling across lifecycle hooks and tasks (#5878, #5879 by @AlePiccin, @falkoschindler, @evnchn)
• Upgrade Docker image from Python 3.12 to 3.14 (#5900 by @falkoschindler, @evnchn, @rodja)
• Allow ui.tab to find ui.tabs ancestor through intermediate containers (#5902 by @falkoschindler, @evnchn)
• Warn when native mode runs on a browser engine without ES module support (#5907, #5909 by @drkspace, @evnchn, @iwr-redmond, @falkoschindler)
• Split helpers.py into a package with focused submodules (#5916 by @falkoschindler, @evnchn)

Bugfixes

• Fix client.ip always reporting "127.0.0.1" behind reverse proxies and On Air (#4786, #5906, #5920 by @ffilotto, @evnchn, @falkoschindler, @stephanpalmer)
• Fix ValidationElement.error being ignored when no validation is set (#5895, #5903 by @atollk, @falkoschindler, @evnchn)
• Fix built-in elements breaking when starting with tailwind=False (#5868, #5904 by @platinops, @evnchn, @falkoschindler)
• Fix initialized() adding event listeners on every call (#5898 by @falkoschindler, @evnchn)
• Fix sad face visibility on dark mode error pages (#5899 by @falkoschindler, @evnchn)
• Fix refreshing sub pages from within nested parent elements (#5912, #5914 by @ZeroPoint095, @falkoschindler, @evnchn)
• Fix Cmd/Ctrl-click on sub-page links not opening new tab (#5928 by @falkoschindler, @evnchn)
• Fix ui.timer callback tasks leaking when client disconnects mid-execution (#5930, #5931 by @NiklasNeugebauer, @falkoschindler, @evnchn)

Documentation

• Redesign nicegui.io website (#5910, #5911, #5913, #5923 by @falkoschindler, @ma-le-design, @rodja, @evnchn)
• Fix truncated multi-line parameter descriptions in reference docs (#5808, #5905 by @evnchn, @falkoschindler)
• Add keyboard navigation to website search dialog (#5919 by @falkoschindler, @evnchn)
• Add Technological Foundations documentation page (#5835 by @evnchn, @falkoschindler)
• Surface documentation index for AI tooling and discoverability (#5834 by @evnchn, @falkoschindler, @rodja, @iwr-redmond)

Infrastructure

• Update .gitignore for Claude Code and Playwright MCP local files (#5893 by @rodja, @evnchn, @falkoschindler)
• Add PR template instruction to AGENTS.md (#5894 by @rodja, @evnchn)
• Improve PR template checklist for clarity (#5896 by @falkoschindler, @evnchn)
• Auto-format Markdown files via pre-commit hook (#5897 by @falkoschindler, @evnchn)

---

Special thanks to our top sponsors Lechler GmbH and TestMu AI ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Security

• ⚠️ Prevent memory exhaustion via media streaming routes (GHSA-w5g8-5849-vj76 by @aest3ra, @Khaliun-sw1, @evnchn, @falkoschindler)

New features and enhancements

• Add ui.parallax element based on Quasar Parallax (#4817 by @evnchn, @falkoschindler)
• Add camera controls "trackball" and "map" for ui.scene (#3710, #4820 by @javierlopezrodriguez, @evnchn, @falkoschindler)
• Add native window events like shown, resized and file drop to app.native (#3378, #5866 by @EmberLightVFX, @falkoschindler, @evnchn)
• Allow app.clients() to return all clients when path is None (#5853 by @AlePiccin, @evnchn, @falkoschindler)
• Remove KWONLY_SLOTS constant and inline @dataclass arguments (#5856 by @falkoschindler, @evnchn)

Bugfixes

• Fix broken session storage when attaching to a FastAPI app that already has SessionMiddleware (#2578, #5857 by @denniswittich, @falkoschindler, @evnchn)
• Fix ui.log scroll to bottom on Firefox (#5788, #5842 by @platinops, @falkoschindler, @evnchn)
• Fix sort arrow animation in custom table header cells (#5870, #5871 by @JuliusKoenig, @falkoschindler, @evnchn)
• Fix navigation from root page sub-pages to other @ui.page routes (#5705, #5777, #5886 by @CatamountJack, @falkoschindler, @evnchn)
• Fix syntax highlighting in ui.code by always using DOMPurify (#5877 by @falkoschindler, @evnchn)
• Fix find_spec crashes in compiled environments like PyInstaller (#5747, #5836 by @evnchn, @falkoschindler)
• Fix @ui.refreshable_method refresh only updating last instance (#5888, #5890 by @rodja, @evnchn)

Documentation

• Use IntersectionObserver for the navigation tree to reduce render time on small screens (#5832 by @evnchn, @falkoschindler)
• Add "Client-Side Secrets" section to security documentation (#5838 by @oxqnd, @evnchn, @falkoschindler)
• Improve the SVG clock example (#5854 by @rolfn, @falkoschindler, @evnchn)
• Replace the outdated app.storage.individual API with app.storage.user (#5874 by @KrilleGH)
• Fix invalid Python code shown in SPA demo (#5881 by @jmerle, @evnchn, @falkoschindler)
• Use public API imports in examples, tests, and website (#5884 by @falkoschindler)

Testing

• Fix User.should_see for child elements inside hidden containers (#5873 by @paco-sevilla, @falkoschindler)
• Fix User test simulation for select options with None as value (#5880, #5883 by @atollk, @falkoschindler, @evnchn)
• Support clicking ui.tab in user simulation (#5885, #5887 by @atollk, @falkoschindler, @evnchn)

Dependencies

• Fix Dependabot alerts by upgrading rollup, rimraf and Svelte (#5844 by @falkoschindler, @evnchn)
• Fix Dependabot alerts by upgrading vulnerable npm and pip dependencies (#5850 by @falkoschindler, @evnchn)
• Bump actions/upload-artifact from 6 to 7 (#5846 by @dependabot)
• Bump docker/build-push-action from 6 to 7 (#5861 by @dependabot)
• Bump docker/setup-qemu-action from 3 to 4 (#5862 by @dependabot)
• Bump docker/setup-buildx-action from 3 to 4 (#5863 by @dependabot)
• Bump docker/login-action from 3 to 4 (#5864 by @dependabot)

---

Special thanks to our top sponsors Lechler GmbH and TestMu AI ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Security

• ⚠️ Prevent XSS via unsanitized method names in run_method() (GHSA-78qv-3mpx-9cqq by @anuraagbaishya, @evnchn, @falkoschindler)

  Breaking change: For security reasons, run_method() and run_*_method() no longer accept arbitrary JavaScript expressions as method names. Only actual method names are supported now. If you previously passed JS functions like

  row = await grid.run_grid_method('(g) => g.getDisplayedRowAtIndex(0).data')
  

  use

  row = await run_javascript(f'return getElement({grid.id}).api.getDisplayedRowAtIndex(0).data')
  

  instead.

New features and enhancements

• Preserve cursor position when calling ui.codemirror.set_value (#5775 by @falkoschindler, @evnchn)
• Wake outbox loop on stop() to avoid ~1s shutdown delay (#5804, #5805 by @Denubis, @evnchn, @falkoschindler)
• Prevent prune_user_storage crash when UI elements are created before ui.run_with() (#5480, #5768 by @TulyOpt, @Phloog, @jammerhund, @evnchn, @falkoschindler)
• Expose ui.aggrid.VERSION constant for AG Grid version reference (#5726, #5727 by @taschini, @evnchn, @falkoschindler)

Bugfixes

• Guard innerHTML writes in ui.html, ui.markdown and ui.interactive_image to avoid server-side updates overwriting client-side DOM modifications (#5749, #5761, #5816, #5821, #5823, #5826 by @Denubis, @phifuh, @evnchn, @falkoschindler)
• Fix ui.echart zoom reset on data update by using getOption() API (#5819, #5822 by @rtrrtr, @falkoschindler, @evnchn)
• Fix ui.log background color being tinted by inner scroll-area element (#5828, #5831 by @rolfn, @falkoschindler, @evnchn)
• Cancel connection-wait task when page coroutine completes first to prevent task leak (#5803, #5806 by @Denubis, @evnchn, @falkoschindler)
• Fix jumpy ui.table fullscreen toggle with smooth scrolling enabled (#5789 by @falkoschindler, @evnchn)
• Guard against missing element in beforeUnmount hooks during @ui.refreshable rebuild (#5765, #5766 by @evnchn, @falkoschindler)
• Fix Leaflet Draw circle resize broken by ES module strict mode (#5751, #5756 by @MicaelJarniac, @evnchn, @falkoschindler)
• Exclude Python prefix directory from reload file watcher to prevent spurious reloads (#5750, #5780 by @phifuh, @evnchn)
• Fix WebSocket URL missing host on HTTPS due to JS operator precedence (#5734 by @evnchn)
• Fix race condition: use static DOMPurify import to avoid mid-module yield (#5732, #5799 by @evnchn, @codingpaula, @rodja, @falkoschindler)

Documentation

• Add security best practices section (#5736 by @evnchn, @falkoschindler)
• Add a "Reaktiv Order Calculator" example (#4758, #5783, #5812 by @FabianGoessling, @buiapp, @evnchn, @buiapp, @falkoschindler)
• Add a "Device Control" example with events and logging (#5201, #5737 by @weinibuliu, @rodja, @eddie3ruff, @evnchn, @falkoschindler)
• Add AI co-authorship attribution guidance to CONTRIBUTING.md (#5758 by @evnchn, @falkoschindler)
• Upgrade the "SQLite Database" example to Tortoise ORM 1.0.0 (#5754 by @falkoschindler)
• Improve Plausible's SPA compatibility for website analytics (#5830 by @evnchn, @rodja)
• Make first demo always load immediately for better SEO (#5793, #5800 by @evnchn, @falkoschindler)
• Fix Googlebot homepage screenshot with unbounded h-screen (#5792 by @evnchn)
• Select search text when reopening search dialog (#5744, #5779 by @Aleborg-Finansforbundet, @marcrichard22, @evnchn, @falkoschindler)
• Fix sponsor button border styling with dark mode support (#5778 by @evnchn)
• Use static URL for sponsor images instead of local path (#5733 by @evnchn)

Testing

• Reuse Chrome driver across screen tests for faster execution (#5729 by @evnchn, @falkoschindler)
• Add support for typing numbers in UserInteraction (#5771, #5772 by @atollk, @falkoschindler, @evnchn)
• Reset _page_exception_handler in App.reset() for test isolation (#5809 by @evnchn)
• Fix flaky page test (#5818 by @falkoschindler, @evnchn)

Dependencies

• Update bundled Google Fonts: Material Symbols and Roboto v50 (#5743, #5762 by @VerteinPL, @evnchn, @falkoschindler)
• Bump Mermaid to 11.12.2 (#5755 by @henriknoren, @falkoschindler, @evnchn)

Infrastructure

• Add Copilot coding agent setup (#5770 by @evnchn, @falkoschindler)
• Remove nanasess/setup-chromedriver from CI in favor of runner's preinstalled Chrome (#5740 by @evnchn)
• Add GitHub CLI and pre-commit hooks to devcontainer (#5741 by @evnchn, @falkoschindler)
• Add CLAUDE.md with native @AGENTS.md import (#5730 by @rodja, @evnchn)

---

Special thanks to our top sponsors Lechler GmbH and TestMu AI ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfix

• Fix .mjs files served with wrong MIME type on some Windows machines (#5723, #5724 by @python-and-novella, @evnchn)

Security

• ⚠️ Prevent XSS attacks via unsanitized HTML in ui.markdown() (GHSA-v82v-c5x8-w282 by @falkoschindler, @evnchn)
• ⚠️ Prevent path traversal via unsanitized FileUpload.name enabling arbitrary file write (GHSA-9ffm-fxg3-xrhh by @k14uz, @evnchn, @falkoschindler)

New features and enhancements

• Introduce UnoCSS support (#5485 by @evnchn, @falkoschindler)
• Unify dark mode API and add color-scheme meta tag for browser/extension compatibility (#5471, #5483 by @davetapley, @evnchn, @falkoschindler)
• Set Redis TTL on tab storage keys (#5594 by @quantumdark, @evnchn, @falkoschindler)
• Perform implicit handshake and fix on_connect called before page is ready (#5673 by @evnchn, @falkoschindler)
• Deprecate custom AG Grid checkboxRenderer in favor of built-in agCheckboxCellRenderer (#5681, #5685 by @CatamountJack, @CrystalWindSnake, @falkoschindler, @evnchn)
• Speed up SVG updates for ui.interactive_image with PIL images (#5583, #5653 by @denniswittich, @evnchn, @falkoschindler)

Bugfixes

• Fix vertical stepper animation jitter (#3881, #5721 by @StarDustEins, @evnchn, @falkoschindler)
• Fix REPL detection for Python 3.13's new pyrepl (#5675, #5710 by @KrilleGH, @falkoschindler, @evnchn)
• Fix shutdown handler not called with native mode and reload enabled (#2107, #5702 by @PawelRoman, @rodja, @retsyo, @frankhuurman, @krashdifferent, @python-and-novella, @Ansari-Codes, @evnchn, @falkoschindler)
• Fix app.shutdown for ui.run_with (#3253, #5686 by @MuuXB, @python-and-novella, @falkoschindler, @evnchn, @falkoschindler)
• Fix video loading issues on Windows in native mode (#4970, #5700 by @MaidScientistIzutsumiMarin, @python-and-novella, @evnchn, @falkoschindler)
• Fix NiceGUIJSONResponse to inherit from JSONResponse so response model schema appears in Swagger (#5688, #5689 by @AleDetto, @evnchn, @falkoschindler)
• Avoid ui.expansion stutters during animation (#4918, #5659 by @platinops, @evnchn, @falkoschindler)
• Fix protocol not being set when using SSL in native mode (#4814, #5655 by @nachobacanful, @evnchn, @falkoschindler)
• Fix input elements not being updated when re-opening a ui.dialog (#2149, #5652 by @adosikas, @meslahik, @python-and-novella, @liunux4odoo, @evnchn, @falkoschindler)

Documentation

• Add AG Grid Enterprise demo (#5676 by @falkoschindler, @evnchn)
• Add style principles for exception suppression and optional imports (#5715 by @evnchn, @falkoschindler)

Testing

• Fix test isolation for pages defined in submodules (#5692, #5697 by @kleynjan, @falkoschindler, @evnchn)
• Persist tab_id in User fixture (#5687, #5690 by @5553455237, @evnchn, @falkoschindler)

Dependencies

• Upgrade minimum Python version to 3.10 and modernize type annotations (#5696 by @falkoschindler, @evnchn)
• Update dependencies to fix security vulnerabilities (#5695 by @falkoschindler, @evnchn)
• Update uv.lock to revision 3 (#5707 by @evnchn, @falkoschindler)

Infrastructure

• Let GPU-free Chrome 144 work in CI (#5678 by @evnchn, @falkoschindler)
• Use contextlib.suppress to ignore exceptions (#5714 by @falkoschindler, @evnchn)

---

Special thanks to our top sponsors Lechler GmbH and TestMu AI ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfix

• Fix hot reload and On Air connection by reverting PR #5499 (#5671 by @python-and-novella, @falkoschindler)

Testing

• Preserve value when closing a ui.select popup in User simulation (#4894, #5670 by @briemla, @falkoschindler, @evnchn, @rodja)

---

Special thanks to our top sponsors Lechler GmbH and TestMu AI ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Introduce app.colors for global color configuration (#3787, #5611 by @ghbm-itk, @evnchn, @falkoschindler)
• Introduce color setters and bindings like set_background_color() and bind_text_color() (#5511, #5512 by @borolepratik, @evnchn, @falkoschindler)
• Introduce ui.on_exception for handling exceptions after the page has been sent to the client (#5617, #5618 by @CatamountJack, @evnchn, @falkoschindler)
• Provide an easy way to replace AG Grid Community with Enterprise (#2431, #5623, #5629 by @ducnva, @luongnv275, @xaptronic, @gioxc88, @evnchn, @falkoschindler)
• Let ui.altair accept any Altair chart type like LayerChart or FacetChart (#5649, #5650 by @s-meza, @falkoschindler)
• Allow passing a path to ui.run(show=...) to open a specific page (#5642 by @jsb-zz, @falkoschindler, @evnchn)
• Make ui.tabs and ui.tab_panels always emit change values as string (#5637, #5638 by @jeffective, @evnchn, @falkoschindler)
• Allow the user to click-to-reload when ui.scene loses the WebGL context (#5360, #5656 by @falkoschindler, @evnchn)
• Suppress Vue component registration warnings for native tags (#3179, #5654 by @jojje, @ksikka, @evnchn, @falkoschindler)
• Patch and warn about late event registrations (#4154, #5439, #5663, #5664 by @Alyxion, @xaptronic, @evnchn, @falkoschindler)
• Break up strong reference cycles in slot children for better garbage collection (#5110, #5644 by @thevinchi, @falkoschindler, @evnchn, @phifuh)
• Reduce initial page payload by omitting unused element properties (#5500 by @evnchn, @falkoschindler)
• Speed-up the websocket handshake process (#5499 by @evnchn, @falkoschindler)

Bugfixes

• Fix CSS not being added correctly when calling ui.add_css after client connected (#5624, #5628, #5666, #5667 by @svhb1000, @falkoschindler, @evnchn)
• Fix ui.dialog being hidden when created inside ui.menu (#4116, #5602 by @tgbl-mk, @evnchn, @falkoschindler)
• Fix ui.leaflet tiles not loading when element is unhidden (#2338, #5614 by @kleynjan, @evnchn, @falkoschindler)
• Fix ui.log scroll-to-bottom in ui.tab_panel (#5118, #5632 by @pandabearcodes, @evnchn, @falkoschindler)
• Fix errors when updating elements on hidden tabs (#5333, #5633 by @natankeddem, @evnchn, @falkoschindler)
• Fix AG Grid memory leak on update and unmount (#5635 by @evnchn, @falkoschindler)
• Fix nested updates in ui.anywidget not propagating back to frontend (#5626, #5636 by @s-meza, @evnchn, @falkoschindler)
• Ensure API exceptions return raw error instead of NiceGUI error page (#5508, #5510 by @ghbm-itk, @evnchn, @falkoschindler)
• Forward log messages through On Air relay (#5668 by @falkoschindler)

Documentation

• Add on_path_changed demo and reference for SubPagesRouter (#5487, #5665 by @GinjiJizai, @falkoschindler, @evnchn)
• Fix documentation for native mode settings in packaged apps (#4842, #5651 by @h0uter, @himbeles, @falkoschindler, @evnchn)
• Avoid duplication in methods documentation and use best available docstring (#5630, #5631 by @evnchn, @falkoschindler)
• Fix docs for ui.context.client.connected (#5607 by @jeffective, @falkoschindler, @evnchn)

Testing

• Add a note about limitations for the asyncio_default_fixture_loop_scope setting (#4785 by @gzu300, @evnchn, @rodja, @falkoschindler)

---

Special thanks to our top sponsors Lechler GmbH and TestMu AI ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Security

• ⚠️ Prevent Zero-click XSS attacks via user-defined link fragments (GHSA-mhpg-c27v-6mxr by @evnchn, @falkoschindler)
• ⚠️ Prevent XSS attacks via user-defined links in apps with ui.sub_pages (GHSA-m7j5-rq9j-6jj9 by @evnchn, @falkoschindler, @xx-mikusan-xx)
• ⚠️ Prevent XSS attacks via user-defined URL in ui.navigate.push and ui.navigate.replace (GHSA-7grm-h62g-5m97 by @xx-mikusan-xx, @evnchn, @falkoschindler)
• ⚠️ Prevent service degradation via leaking Redis connections for disconnected clients (GHSA-mp55-g7pj-rvm2, #5616 by @yudelevi, @evnchn, @falkoschindler)

New features and enhancements

• Allow defining table cell slots without string templates (#846, #1138, #2080, #2625, #3148, #3317, #3540, #3662, #3939, #5092, #5591, #5592 by @tofusoul, @kleynjan, @retsyo, @me21, @CrystalWindSnake, @Ottokranz, @williamhCode, @marcuslimdw, @zceemja, @strunov, @Yuerchu, @falkoschindler, @evnchn)
• Introduce ui.anywidget and ui.altair (#657, #5096, #5137 by @murilomm192, @Jerold-S, @azjps, @evnchn, @falkoschindler, @Noghpu, @s-meza)
• Allow disabling or setting a custom GZipMiddleware (#5582 by @falkoschindler, @denniswittich, @evnchn)
• Introduce on_click for ui.echart (#5576, #5578 by @TheOtherRealm, @evnchn, @falkoschindler)
• Add support for scheme validations with AJV formats in ui.json_editor (#4748, #5571 by @phnmn, @evnchn)
• Convert ui.plotly and ui.joystick into JavaScript components for faster loading (#5567, #5568 by @evnchn, @falkoschindler)
• Add prefix and suffix properties to ui.input and ui.number (#5534 by @Yuerchu, @evnchn, @falkoschindler)
• Check dependencies for naming conflicts (#5495 by @evnchn, @falkoschindler)

Bugfixes

• Avoid default parameter values overwriting default props (#4856, #4857, #5505, #5622 by @SHDocter, @falkoschindler, @thetableman, @evnchn) ⚠️ Note: This bugfix changes the name of some undocumented, internally used props. If you happen to have used them in advanced use cases in user code, refer to this list of all renamed props. NiceGUI will warn and auto-convert them. This backward compatibility will be removed in NiceGUI 4.0.
• Fix Docker bind-mount regression after uv migration (#5593, #5600 by @lpellicer, @evnchn) ⚠️ Note: If you adjusted your code/workflows to work around the 3.4.0 regression, you can now undo those workarounds for 3.5.0.
• Fix ui.mermaid sending error events to wrong UI element (#5597, #5599 by @AwMalka, @evnchn, @falkoschindler)
• Fix ui.timer leaking memory when client disconnects immediately (#5595, #5598 by @ftilde, @evnchn, @falkoschindler)

Documentation

• Extend documentation about input validation (#5584, #5620 by @whoamiafterall, @evnchn)
• Make sure example images are always shown (#5604, #5605 by @evnchn)
• Segment direct & inherited properties/methods in reference documentation to enhance readability (#5484 by @himbeles, @evnchn, @falkoschindler)

Testing

• Test .vue components (#5619 by @evnchn, @falkoschindler)

---

Special thanks to our top sponsors Lechler GmbH, LambdaTest and frankhuurman ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Enhancement

• Load Vue faster (#5560 by @evnchn)

Bugfixes

• Fix automatic event unsubscription which could cause a memory leak (#5581 by @ftilde, @falkoschindler, @evnchn)
• Avoid logging HTTP 404 exceptions for root function with ui.sub_pages (#5579, #5580 by @codingpaula, @falkoschindler, @evnchn)
• Avoid confusing point click events with other component clicks in ui.echart (#5576 by @TheOtherRealm, @evnchn, @falkoschindler)

Infrastructure

• Fix speculative loading tests for new Chrome version (#5573 by @evnchn)
• Bump actions/upload-artifact from 5 to 6 (#5586 by @dependabot)

---

Special thanks to our top sponsors Lechler GmbH and LambdaTest ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Security

• ⚠️ Prevent arbitrary file access when using app.add_media_files (GHSA-hxp3-63hc-5366 by @y4rvin, @evnchn, @falkoschindler)
• ⚠️ Prevent XSS attacks via user-defined content for ui.add_css, ui.add_scss, or ui.add_sass (GHSA-72qc-wxch-74mg by @twmoon, @evnchn, @falkoschindler)
• ⚠️ Prevent XSS attacks via user-defined SVG content in ui.interactive_image using a new sanitize parameter (GHSA-2m4f-cg75-76w2 by @twmoon, @evnchn, @falkoschindler)

New features and enhancements

• Let element.clear() return the element (builder pattern) (#5461 by @falkoschindler, @evnchn)
• Support wildcard routing in ui.sub_pages (#5437, #5440, #5529, #5530, #5541 by @davetapley, @evnchn, @falkoschindler, @rodja)
• Lazily start active link refresher task (#5438 by @bulletmark, @evnchn, @falkoschindler)
• Remove orjson dependency for PyPy (#5161 by @evnchn, @falkoschindler)
• Load Vue components faster (#5496 by @evnchn)
• Load codehilite.css faster (#5497 by @evnchn, @falkoschindler)
• Load headwind.css faster (#5513 by @evnchn)
• Allow emitting events from other threads (#4985, #5546 by @MaidScientistIzutsumiMarin, @rodja, @ftilde, @evnchn, @falkoschindler)
• Allow upgrading to pywebview 6 (#5555 by @paco-sevilla, @evnchn, @falkoschindler)
• Drop support for non-ESM support browsers (#5514 by @evnchn)
• Warn about accidental script mode due to missing shared=True in ui.add_head_html (#5472, #5478 by @davetapley, @evnchn, @falkoschindler)
• Forward --clean and --noconfirm to pyinstaller in nicegui-pack (#5469 by @himbeles)
• Raise exception when trying to run script mode in REPL (#5414, #5456 by @defkev, @falkoschindler, @evnchn, @python-and-novella, @plambertgis)
• Compile SASS and SCSS in the browser (#5321, #5449 by @falkoschindler, @evnchn)

Deprecation

• ⚠️ Deprecate ui.add_scss and ui.add_sass in favor of ui.add_css (#5321, #5449 by @falkoschindler, @evnchn)

Bugfixes

• Fix .tooltip() for complex elements like ui.table (#5447, #5482 by @pandabearcodes, @python-and-novella, @evnchn, @himbeles, @falkoschindler)
• Fix sizing problem of ui.interactive_image (#5479, #5517 by @daniel-anderberg, @evnchn, @falkoschindler)
• Fix default values of ui.range (#5467 by @Mick235711)
• Fix padding of horizontal ui.stepper (#5434, #5463 by @Buruxianian, @evnchn, @falkoschindler)

Documentation

• Show a screenshot per example on the website (#4391, #5044 by @kler, @leocjj, @rodja, @falkoschindler, @evnchn)
• Improve loading speed (#5507, #5515 by @evnchn)
• Add a note about native mode on Windows requiring .NET (#5544 by @phifuh, @falkoschindler)
• Add missing link in ui.sub_pages demo (#5498, #5504 by @evnchn, @falkoschindler)
• Remove error message "The type of the None singleton." (#5488, #5489 by @evnchn)

Testing

• Add possibility to perform tests without NiceGUI pytest plugins (#5377, #5380 by @himbeles, @evnchn, @rodja, @falkoschindler)

Dependencies

• Bump actions/checkout from 5 to 6 (#5506 by @dependabot)
• Exclude broken FastAPI version 0.123.5 to avoid "coroutine object not iterable" (#5535 by @frankhuurman, @edouardrolland, @Alyxion, @falkoschindler, @evnchn)

Infrastructure

• Migrate to uv (#5311, #5547 by @falkoschindler, @evnchn, @EmberLightVFX, @pascalzauberzeug, @himbeles, @codingpaula)
• Add codespell support (#5368 by @yarikoptic, @evnchn, @falkoschindler)

---

Special thanks to our top sponsors Lechler GmbH and LambdaTest ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Enhancement

• Do not load headwind.css if Tailwind is disabled (#5448 by @evnchn)

Bugfixes

• Fix event handlers for ui.plotly not being initialized (#5459, #5460 by @mathisschmidt, @falkoschindler, @evnchn)
• Fix spurious ui.table "found list in column" warnings (#5454 by @Mick235711, @falkoschindler)
• Fix ui.leaflet when calling set_center and set_zoom in combination (#4491, #5453 by @amks1, @falkoschindler, @evnchn)
• Fix navigating ui.sub_pages in root page with remaining path (#5442 by @rodja)

Testing

• Use local resources to avoid flaky test (#5441 by @evnchn, @falkoschindler)

---

Special thanks to our top sponsors Lechler GmbH, LambdaTest, and Pierre Gronlier ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Introduce ui.date_input and ui.time_input (#4815 by @evnchn, @falkoschindler)
• Introduce ui.page_scroller (#4816 by @evnchn, @falkoschindler)
• Load Vue as an ES module to support integrating Vue components built with Vite (#4673, #5257, #5328, #5351 by @xaptronic, @frankier, @falkoschindler, @evnchn)
• Introduce Mermaid on_node_click using a no-markdown solution (#4845, #4862, #4871 by @thetableman, @evnchn, @falkoschindler)
• Improve exception when run.cpu_bound fails in script mode (#5382 by @wschoenell, @evnchn, @rodja, @falkoschindler)
• Show an error popup if a socket message was too long for transmission (#3410, #4571 by @Xtreemrus, @me21, @evnchn, @rodja, @falkoschindler)

Bugfixes

• Fix Quasar and Tailwind collision resulting in wrong rotation angle (#5399, #5405, #5444, #5445 by @henriknoren, @evnchn, @Moldeador, @falkoschindler)
• Fix responsive behavior for ui.plotly (#4870, #5369, #5397, #5404 by @lucasimi, @AlePiccin, @evnchn, @falkoschindler)
• Fix fallback for pywebview's storage path (#4882, #5419 by @phifuh, @evnchn, @jochso, @python-and-novella, @falkoschindler)
• Avoid clients being deleted too early (#5090, #5119, #5422 by @alydersen, @sonicno1, @zbxiany, @maria-ems, @rodja, @falkoschindler)
• Add missing HTML IDs to complex Quasar elements (#5417, #5420 by @ghbm-itk, @evnchn, @falkoschindler)
• Use correct lifecycle hooks for Vue 3 (#5373 by @falkoschindler, @evnchn)
• Cleanup resize observers when unmounting a component (#5374 by @falkoschindler, @evnchn)
• Avoid race condition when rendering ui.markdown containing Mermaid diagrams (#5366 by @falkoschindler, @evnchn)

Documentation

• Improve docstrings and demos about updating content elements (#5318, #5446 by @roddy-zhang, @evnchn, @falkoschindler)
• Document and discourage working off the main branch of the fork (#5375 by @evnchn, @falkoschindler)

Testing

• Add pytests for VBuild (#5393 by @falkoschindler, @evnchn)

Infrastructure

• Improve GitHub workflows with parallelization, branch protection and a merge queue (#5307 by @evnchn, @falkoschindler)

---

Special thanks to our top sponsor Dhorz ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Allow awaiting refreshable function updates for coordinated UI operations (#4985, #5358 by @MaidScientistIzutsumiMarin, @gtato, @rodja, @falkoschindler)
• Introduce fps and show_stats parameters for ui.scene (#5344, #5349 by @evnchn, @falkoschindler)
• Allow toggling line wrap in ui.codemirror (#5341, #5342 by @ZeroPoint095, @falkoschindler)

Bugfixes

• Fix possible recursion when updating ui.table rows (#5355 by @steweg, @evnchn, @falkoschindler)
• Prevent browser from freezing when ui.table cells contain lists (#4837, #5290 by @WilliamAughenbaugh, @samuller, @evnchn, @falkoschindler)
• Avoid undefined terminal when mouinting ui.xterm (#5343, #5350 by @falkoschindler, @evnchn)

Documentation

• Add "example to run NiceGUI in a sub-thread" (#5313, #5346 by @jurstu, @falkoschindler, @rodja)
• Add an "API Requests" example (#5301 by @anzarwani, @rodja, @falkoschindler)
• Add "convertEol" parameter to ui.xterm subprocess demo (#5353, #5362 by @jayjensen, @evnchn, @paco-sevilla, @falkoschindler)
• Fix async demos (#5354 by @falkoschindler)
• Fix typo in documentation leading to broken link (#5347, #5348 by @anzarwani, @evnchn)
• Fix code extraction for some documentation demos (#5338 by @rodja, @falkoschindler)
• Document NiceGUI-specific coding patterns and architectural conventions in CONTRIBUTING.md (#5357 by @rodja, @evnchn, @falkoschindler)

Testing

• Allow passing event arguments to trigger() in User tests (#5339 by @rodja, @falkoschindler, @evnchn)
• Clear module cache between pytests for proper isolation (#5300 by @rodja, @evnchn, @falkoschindler)
• Let screen tests fail if there is a JavaScript error (#5225 by @evnchn, @falkoschindler)
• Introduce Screen.CATCH_JS_ERRORS to opt-out from JavaScript errors (#5365 by @falkoschindler, @evnchn)

Dependencies

• Bump actions/upload-artifact from 4 to 5 (#5364 by @dependabot)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Introduce ui.xterm (#4520 by @paco-sevilla, @evnchn, @falkoschindler)
• Support root pages with request parameter (#5263 by @rodja)
• Allow refreshing ui.sub_pages and ui.context.client.sub_pages_router (#5192 by @rodja)
• Allow preventing default handlers for key events (#4924, #5222 by @eulerleibniz, @samuller, @falkoschindler)
• Allow setting session cookie attributes from ui.run() (#4252, #5213 by @AlyShmahell, @rodja, @samuller, @falkoschindler)
• Add --onedir argument to nicegui-pack (#5091, #5114 by @djongepier)
• Run Uvicorn with ws='wsproto' to avoid using a deprecated protocol (#5256 by @evnchn)

Bugfixes

• Fix dark theme for ui.aggrid (#5293, #5306 by @gioxc88, @python-and-novella, @gioxc, @evnchn, @AMorelProjects, @falkoschindler)
• Fix auto-sizing of ui.aggrid (#5244, #5276, #5277, #5296 by @amks1, @guyingbo, @falkoschindler, @PhilippMolitor, @evnchn, @gioxc88)
• Fix NiceGUI rendering a blank page when behind a main guard (#5280, #5305 by @ClementPinard, @evnchn)
• Fix clipboard button in ui.code after content has been changed (#5177, #5298 by @jlmanaloto, @python-and-novella, @falkoschindler, @evnchn)
• Fix missing spacing in ui.code without language specification (#5264, #5266 by @rolfn, @evnchn, @falkoschindler)
• Fix ui.leaflet not being fully functional when draw_control is False (#5279, #5281, #5317, #5319 by @lisa-ems, @evnchn, @falkoschindler, @jacksonhshields)
• Fix width of ui.separator in vertical orientation (#5270, #5271 by @backbord, @python-and-novella, @evnchn, @falkoschindler)

Documentation

• Replace intro demos with more educational code and text (#5275 by @rodja, @evnchn, @falkoschindler)
• Document the script mode (#5299 by @evnchn)
• Add a note about packaging NiceGUI scripts (#5247, #5297 by @romaintailhurat, @Fleckso, @evnchn, @python-and-novella, @bubble-song, @falkoschindler)
• Improve animation of minutes and hour hand in "SVG Clock" example (#5265, #5288 by @rolfn, @evnchn)
• Improve documentation for "ZeroMQ" example (#5283 by @OpenSourceIronman, @rodja)
• Add documentation for upload event arguments (#5278 by @falkoschindler, @evnchn)
• Relax examples' version requirement and update "OpenAI Assistant" example (#5273 by @evnchn, @falkoschindler)
• Remove obsolete advice about calling update methods (#5267 by @helmut-hoffer-von-ankershoffen, @evnchn, @python-and-novella, @falkoschindler)
• Upgrade the "Chat with AI" example for langchain 1.0 (#5304 by @evnchn, @falkoschindler)
• Document CSS layers (#5252 by @amks1, @evnchn, @falkoschindler)
• Suggest user_plugin in demo to avoid Selenium dependency (#5262 by @rodja, @BayerSe)

Testing

• Ensure proper cleanup and error handling in test fixtures (#5287 by @rodja)
• Add support for specifying main file via pytest marker (#5219, #5269 by @BayerSe, @rodja)

Infrastructure

• Add dynamic versioning for Poetry (#5312 by @pascalzauberzeug, @falkoschindler)
• Fix usage of cursor rules by adhering to the proper format (#5310 by @rodja)
• Drop build step "install test startup dependencies" (#5309 by @evnchn)
• Rearrange the dependencies installation steps for the pipeline (#5261 by @evnchn, @falkoschindler)
• Let pytest run first in the pipeline, startups later (#5254 by @evnchn)
• Allow non-AMD64 devcontainers (#5206 by @evnchn)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfixes

• Fix exception handling when emitting or calling events (#5250 by @falkoschindler)
• Fix emitting and calling chained events (#5238 by @falkoschindler)
• Avoid unsubscribing events during reconnect (#5239 by @falkoschindler, @evnchn, @rodja)
• Fix timer exception handlers not being called in UI context (#5218, #5253 by @sopipe, @evnchn, @falkoschindler)

Documentation

• Add a demo for placing buttons in ui.table rows (#5150 by @Mogit21, @evnchn, @falkoschindler)

Infrastructure

• Upload screenshots of failed tests in CI pipeline (#5234, #5251 by @evnchn, @falkoschindler, @rodja)
• Add CPython 3.14 to the CI pipeline (#5243 by @evnchn)
• Move vbuild into our repository (#5255 by @falkoschindler)

Bugfixes

• Fix bugs related to the new Event system (#5216, #5221 by @v479038280, @python-and-novella, @falkoschindler)
  • fix event subscription in script mode
  • fix event subscription outside of page functions
  • fix memory leak
  • provide more meaningful demos
• Fix support for Redis Unix-Domainsocket-connections (#5214 by @senfomat, @falkoschindler, @evnchn)

Documentation

• Fix ui.notify documentation link (#5212 by @samuller)

Infrastructure

• Consolidate AI instructions into AGENTS.md (#5217 by @rodja, @evnchn)

This release fixes the Docker image which failed to build for version 3.0.1.

Bugfixes

• Respect show_404=False in ui.sub_pages navigation (#5199 by @rodja, @falkoschindler)
• Fix docker builds by not excluding dist/ directories from the build context (#5200, #5202 by @Yuerchu, @rodja, @falkoschindler)

Testing

• Check disabled state before clicking or clearing via user simulated interaction (#5191, #5209 by @igro-marczak, @rodja)
• Make user.should_see work with icon and chat message names (#5183, #5184 by @phifuh, @rodja)

Documentation

• Fix menu by disabling the deselection of tree elements (#5207, #5208 by @python-and-novella, @rodja)
• Fix custom toggle button demo (#5203 by @rodja)

Infrastructure

• Re-run poetry lock to fix nicegui-highcharts incompatibility (#5204 by @evnchn)
• Use poetry 2.1.2 in the devcontainer (#5205 by @evnchn)
• Fix fly docker build (#5210 by @rodja)
• Overhaul AI instructions (#5197 by @rodja, @evnchn)

This major release introduces several new features and enhancements, as well as breaking changes. We always try to keep breaking changes to a minimum, guide you through the migration process using deprecation warnings, and provide migration instructions. Please read the following release notes carefully to understand the changes and adapt your code accordingly before upgrading.

New features and enhancements

• Introduce NiceGUI script mode to replace the awkward auto-index page (#5005 by @rodja, @falkoschindler)
• Introduce root page parameter for ui.run to simplify single-page applications (#4964, #5005 by @rodja, @falkoschindler)
• Introduce an Event system to communicate between UI and long-living objects (#5107 by @falkoschindler, @denniswittich)
• Simplify pytests by loading a main file with runpy (#5102 by @rodja, @falkoschindler)
• Make props, classes and style observable to send updates automatically (#4978 by @lawrenceakka, @falkoschindler, @rodja)
• Improve node package management, including a new esm Parameter for custom elements (#4163, #5021 by @simontaurus, @evnchn, @falkoschindler)
• Upgrade to Tailwind 4 (#5057 by @falkoschindler)
• Drop support for Python 3.8 (#4329 by @Solipsistmonkey, @falkoschindler)
• Introduce ValueChangeEventArguments.previous_value (#4410, #4456 by @me21, @falkoschindler, @evnchn)
• Introduce a strict option for binding methods (#5040 by @denniswittich, @codingpaula, @falkoschindler)
• Introduce a sanitize argument for ui.html and ui.chat_message (#5187 by @oxqnd, @falkoschindler, @rodja, @evnchn)
• Improve support for languages with right-to-left text direction (#5045, #5058 by @M6stafa, @falkoschindler)
• Use q-scroll_area for ui.log to preserve a fixed height (#4925, #4935 by @e-nesse, @falkoschindler)
• Let ui.clipboard.read() return None if the clipboard API isn't available (#4236, #4237 by @weinibuliu, @falkoschindler, @evnchn)
• Call lifecycle event handlers more consistently (#5173 by @falkoschindler, @evnchn, @rodja)
• Improve UploadEventArguments and MultiUploadEventArguments to avoid unclosed resources (#5178 by @rodja, @evnchn, @falkoschindler)
• Re-initialize the process pool if it was broken by a bad run.cpu_bound (#4980, #5129 by @jammerhund, @evnchn, @rodja, @falkoschindler)
• Remove deprecated code and APIs (#5037 by @falkoschindler)
• Treat pytest warnings as errors (#5182, #5186 by @evnchn, @rodja, @falkoschindler)

⚠️ Breaking changes and migration guide

1. Shared auto-index pages (not using @ui.page)

   UI elements defined in global scope have been added to a static shared "auto-index client" served at "/". This caused a multitude of problems throughout the code base, so we decided to remove this shared client.

   In version 3.0 you have the following options:

   • Keep putting (all) UI elements in global scope. We call such apps without page functions "NiceGUI scripts". They will automatically re-evaluated inside an implicit page function when visiting "/". This is almost a drop-in replacement for the auto-index client, but:

     • NiceGUI scripts can't contain page functions.
     • The UI isn't shared but re-created on every page visit.

   • Wrap all UI in a singe function and pass it to the new positional root parameter in ui.run. This is especially handy in combination with ui.sub_pages. This way you can create rich single-page applications without worrying about defining the correct routes with @page decorators.

   • Use page functions for all your pages, including the index page at "/".

   Note that we are introducing a new Event class. Together with the binding module this helps to synchronize long-living objects with short-living UI without relying on a long-living shared client.

2. Calling .props(), .classes() or .style() with subsequent .update()

   A subsequent .update() is not necessary anymore because props, classes and style are now observable collections that trigger updates automatically.

   When overwriting the update method in custom elements, infinite recursions can occur. If, e.g., the update methods uses .prop() before calling super().update(), the .prop() call will cause an infinite cycle. Wrap it with with self._props.suspend_updates(): (and similar for classes and style) to pause automatic updates in such cases.

3. Modifying the content of ui.table, ui.aggrid, ui.echart, ui.highchart, ui.json_editor, and ui.tree

   Before NiceGUI 3.0 it was possible create tables or AG Grids like ui.table(columns=columns, rows=rows, ...) or ui.aggrid({'columnDefs': columns, 'rowData': rows, ...) and update it later by modifying the original columns or rows. This is not possible anymore.

   In NiceGUI 3.0 you need to modify table.rows, table.columns or aggrid.options instead. A subsequent table.update() or aggrid.update is not necessary anymore.

   Same holds for ui.echart, ui.highchart, ui.json_editor, and ui.tree.

4. Upgrade to Tailwind 4; dropping the ui.element.tailwind API

   Although very similar, Tailwind 4 comes with some breaking changes. Check your layout carefully after upgrading. We noticed differences especially with line spacing and borders.

   Custom style definitions of Quasar elements might need to be adjusted. Because all Tailwind and Quasar CSS has moved into layers, custom overrides need to move as well. See #5240 for more information.

   For technical reasons updating and maintaining our ui.element.tailwind API became unfeasible. So we decided to remove it. For auto-completing Tailwind classes, we recommend the NiceGUI extension for Visual Studio Code by @DaelonSuzuka.

5. Dropping support for Python 3.8

   Almost one year after Python 3.8 reached its end-of-life, it was time to drop support. This allowed us to update the code to a newer standard and resolve some issues with Python dependencies that already dropped 3.8 a while ago.

6. ValueChangeEventArguments got a new previous_value attribute

   In some situations it might be helpful to have access to both, the current and the previous value. Therefore we added previous_value to the ValueChangeEventArguments.

   Custom elements that emit ValueChangeEventArguments need to provide the previous value.

7. Binding from and to non-existing object properties

   Binding used to fail silently if one of the attributes doesn't exist. In case of dictionaries this was intended, because they are often used to bind to persistent storage which is empty by default. But for object properties this can lead to very subtle bugs, e.g. after renaming properties and not updating the attribue names in binding functions.

   In 3.0 object properties will be checked for existence by default. Missing dictionaries will continue to be ignored.

   You can fine-tune this behavior using the strict: bool | None = None parameter (None: check object properties and ignore dictionaries).

8. Sanitize content for ui.html and ui.chat_message

   To prevent NiceGUI apps from accidentally displaying unsafe user input as HTML, ui.html and ui.chat_message now have a sanitize argument. It can be set to a function like Sanitizer().sanitize from the html-sanitizer module, or False to disable sanitization. While ui.html requires the new argument to be specified, ui.chat_message only requires it if text_html=True.

   Note that the html-sanitizer module is not included in NiceGUI and needs to be installed separately is needed.

9. ui.log with unspecified width can collapse inside containers with unspecified width

   We noticed that the height of ui.log could be affected by its content, which is unexpected. Therefore we decided to use a scroll area for a more robust layout.

   Now the width of ui.log can collapse when placed inside a container with an unspecified width. Either give the container some width or specify the width of ui.log.

10. ui.clipboard.read() returns None if the clipboard API isn't available

    The read() function used to return an empty string if the clipboard API is not available. This was indistinguishable from an empty clipboard.

    Now the read() function returns None if the clipboard API is not available.

11. Lifecycle events are called more consistently

    Handlers registered with on_disconnect used to be called only after the client fails to reconnect and is deleted.

    Now disconnect handlers are immediatelly called when a connection is lost, even if the client reconnects after a short while.

    A new on_delete function can be used to register callbacks for the deletion of a client.

12. UploadEventArguments and MultiUploadEventArguments have changed

    Instead of content: BinaryIO, name: str and type: str the event arguments now contain a single field file: FileUpload, which contains

    • properties name: str and content_type: str as well as
    • methods read, text, json, iterate, save and size to access the content.

13. Remove deprecated code and APIs

    • app.add_static_file and app.add_media_file raises FileNotFoundError instead of ValueError in case of non-existing files. Since FileNotFoundError is NOT a subclass of ValueError, existing code which except ValueError will fail to catch the new FileNotFoundError.
    • ui.aggrid: run_column_method is gone. Use run_grid_method instead.
    • ui.table calling add_rows()/remove_rows() with variable-length arguments no longer works. Pass a list instead or use add_row()/remove_row() for a single row.
    • ui.open is gone. Use ui.navigate.to.
    • nicegui.testing.conftest is gone and you can no longer import it. Use pytest_plugins = ["nicegui.testing.plugin"] instead.
    • element.on parameter js_handler now has type str instead of str | None. You can pass a None and it still works, but your type checker won't be happy, and we can't promise it will work for much longer afterwards.

JavaScript Dependencies

The following JavaScript dependencies have been updated to the latest versions (#5034, #5168, #5190 by @falkoschindler):

• @tailwindcss/browser: 3.4.10 → 4.1.13 (#5057 by @falkoschindler)
• es-module-shims: 1.10.0 → 2.6.2
• quasar: 2.16.9 → 2.18.5 (resolves #4892 by @eddie3ruff, @evnchn, @xaptronic, @falkoschindler)
• socket.io: 4.7.5 → 4.8.1
• vue: 3.4.28 → 3.5.22
• ag-grid-community: 32.1.0 → 34.2.0 (resolves #3854 by @python-and-novella, @mockey, @falkoschindler)
• codemirror: 6.0.1 → 6.0.2
• @codemirror/language-data: 6.5.1 (new)
• @codemirror/theme-one-dark: 6.1.3 (new)
• @uiw/codemirror-themes-all: 4.25.2 (new)
• @babel/runtime: 7.28.4 (new)
• echarts: 5.5.1 → 6.0.0
• echarts-gl: 2.0.9 (unchanged)
• nipplejs: 0.10.2 (unchanged)
• vanilla-jsoneditor: 0.23.8 → 3.10.0
• leaflet: 1.9.4 (unchanged)
• leaflet-draw: 1.0.4 (unchanged)
• mermaid: 11.0.2 → 11.12.0
• plotly.js: 2.35.0 → 3.1.1
• three: 0.168.0 → 0.180.1
• @tweenjs/tween.js: 25.0.0 (unchanged)

The following contributions helped to fix problems during integration:

• Support AG Grid v34 Theme API for ui.aggrid (#5122, #5131 by @egursu, @evnchn, @falkoschindler)
• Segregate Quasar's important rules in Python-side (#5156, #5171 by @python-and-novella, @evnchn, @falkoschindler)
• Support client connection when Chrome performs speculative loading (#5115, #5116 by @python-and-novella, @rodja, @evnchn, @falkoschindler)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Introduce NiceGUI script mode to replace the awkward auto-index page (#5005 by @rodja, @falkoschindler)
• Introduce root page parameter for ui.run to simplify single-page applications (#4964, #5005 by @rodja, @falkoschindler)
• Introduce an Event system to communicate between UI and long-living objects (#5107 by @falkoschindler, @denniswittich)
• Simplify pytests by loading a main file with runpy (#5102 by @rodja, @falkoschindler)
• Make props, classes and style observable to send updates automatically (#4978 by @lawrenceakka, @falkoschindler, @rodja)
• Upgrade to Tailwind 4 (#5057 by @falkoschindler)
• Drop support for Python 3.8 (#4329 by @Solipsistmonkey, @falkoschindler)
• Introduce ValueChangeEventArguments.previous_value (#4410, #4456 by @me21, @falkoschindler, @evnchn)
• Introduce a strict option for binding methods (#5040 by @denniswittich, @codingpaula, @falkoschindler)
• Improve support for languages with right-to-left text direction (#5045, #5058 by @M6stafa, @falkoschindler)
• Use q-scroll_area for ui.log to preserve a fixed height (#4925, #4935 by @e-nesse, @falkoschindler)
• Let ui.clipboard.read() return None if the clipboard API isn't available (#4236, #4237 by @weinibuliu, @falkoschindler, @evnchn)
• Remove deprecated code and APIs (#5037 by @falkoschindler)

⚠️ Breaking changes and migration guide

We always try to keep breaking changes to a minimum, guide you through the migration process using deprecation warnings, and provide migration instructions. Please read the following release notes carefully to understand the changes and adapt your code accordingly before upgrading.

1. Shared auto-index pages (not using @ui.page)

   UI elements defined in global scope have been added to a static shared "auto-index client" served at "/". This caused a multitude of problems throughout the code base, so we decided to remove this shared client.

   In version 3.0 you have the following options:

   • Keep putting (all) UI elements in global scope. We call such apps without page functions "NiceGUI scripts". They will automatically re-evaluated inside an implicit page function when visiting "/". This is almost a drop-in replacement for the auto-index client, but:

     • NiceGUI scripts can't contain page functions.
     • The UI isn't shared but re-created on every page visit.

   • Wrap all UI in a singe function and pass it to the new positional root parameter in ui.run. This is especially handy in combination with ui.sub_pages. This way you can create rich single-page applications without worrying about defining the correct routes with @page decorators.

   • Use page functions for all your pages, including the index page at "/".

   Note that we are introducing a new Event class (see below). Together with the binding module this helps to synchronize long-living objects with short-living UI without relying on a long-living shared client.

2. Calling .props(), .classes() or .style() with subsequent .update()

   A subsequent .update() is not necessary anymore because props, classes and style are now observable collections that trigger updates automatically.

   When overwriting the update method in custom elements, infinite recursions can occur. If, e.g., the update methods uses .prop() before calling super().update(), the .prop() call will cause an infinite cycle. Wrap it with with self._props.suspend_updates(): (and similar for classes and style) to pause automatic updates in such cases.

3. Upgrade to Tailwind 4; dropping the ui.element.tailwind API

   Although very similar, Tailwind 4 comes with some breaking changes. Check your layout carefully after upgrading. We noticed differences especially with line spacing and borders.

   For technical reasons updating and maintaining our ui.element.tailwind API became unfeasible. So we decided to remove it. For auto-completing Tailwind classes, we recommend the NiceGUI extension for Visual Studio Code by @DaelonSuzuka.

4. Dropping support for Python 3.8

   Almost one year after Python 3.8 reached its end-of-life, it was time to drop support. This allowed us to update the code to a newer standard and resolve some issues with Python dependencies that already dropped 3.8 a while ago.

5. ValueChangeEventArguments got a new previous_value attribute

   In some situations it might be helpful to have access to both, the current and the previous value. Therefore we added previous_value to the ValueChangeEventArguments.

   Custom elements that emit ValueChangeEventArguments need to provide the previous value.

6. Binding from and to non-existing object properties

   Binding used to fail silently if one of the attributes doesn't exist. In case of dictionaries this was intended, because they are often used to bind to persistent storage which is empty by default. But for object properties this can lead to very subtle bugs, e.g. after renaming properties and not updating the attribue names in binding functions.

   In 3.0 object properties will be checked for existence by default. Missing dictionaries will continue to be ignored.

   You can fine-tune this behavior using the strict: bool | None = None parameter (None: check object properties and ignore dictionaries).

7. ui.log with unspecified width can collapse inside containers with unspecified width

   We noticed that the height of ui.log could be affected by its content, which is unexpected. Therefore we decided to use a scroll area for a more robust layout.

   Now the width of ui.log can collapse when placed inside a container with an unspecified width. Either give the container some width or specify the width of ui.log.

8. ui.clipboard.read() returns None if the clipboard API isn't available

   The read() function used to return an empty string if the clipboard API is not available. This was indistinguishable from an empty clipboard.

   Now the read() function returns None if the clipboard API is not available.

9. Remove deprecated code and APIs (#5037 by @falkoschindler)

   • app.add_static_file and app.add_media_file raises FileNotFoundError instead of ValueError in case of non-existing files. Since FileNotFoundError is NOT a subclass of ValueError, existing code which except ValueError will fail to catch the new FileNotFoundError.
   • ui.aggrid: run_column_method is gone. Use run_grid_method instead.
   • ui.table calling add_rows()/remove_rows() with variable-length arguments no longer works. Pass a list instead or use add_row()/remove_row() for a single row.
   • ui.open is gone. Use ui.navigate.to.
   • nicegui.testing.conftest is gone and you can no longer import it. Use pytest_plugins = ["nicegui.testing.plugin"] instead.
   • element.on parameter js_handler now has type str instead of str | None. You can pass a None and it still works, but your type checker won't be happy, and we can't promise it will work for much longer afterwards.

JavaScript Dependencies

The infrastructure for managing node packages has been improved significantly (#4163, #5021 by @simontaurus, @evnchn, @falkoschindler). The following JavaScript dependencies have been updated to the latest versions (#5034 by @falkoschindler):

• @tailwindcss/browser: 3.4.10 → 4.1.11 (#5057 by @falkoschindler)
• es-module-shims: 1.10.0 → 2.6.2
• quasar: 2.16.9 → 2.18.2 (resolves #4892 by @eddie3ruff, @evnchn, @xaptronic, @falkoschindler)
• socket.io: 4.7.5 → 4.8.1
• vue: 3.4.28 → 3.5.18
• ag-grid-community: 32.1.0 → 34.1.1 (resolves #3854 by @python-and-novella, @mockey, @falkoschindler)
• codemirror: 6.0.1 → 6.0.2
• @codemirror/language-data: 6.5.1 (new)
• @codemirror/theme-one-dark: 6.1.3 (new)
• @uiw/codemirror-themes-all: 4.24.2 (new)
• @babel/runtime: 7.28.2 (new)
• echarts: 5.5.1 → 6.0.0
• echarts-gl: 2.0.9 (unchanged)
• nipplejs: 0.10.2 (unchanged)
• vanilla-jsoneditor: 0.23.8 → 3.8.0
• leaflet: 1.9.4 (unchanged)
• leaflet-draw: 1.0.4 (unchanged)
• mermaid: 11.0.2 → 11.9.0
• plotly.js: 2.35.0 → 3.1.0
• three: 0.168.0 → 0.179.1
• @tweenjs/tween.js: 25.0.0 (unchanged)

Bugfixes

• Avoid JavaScript error when creating ui.aggrid without custom grid-ready handler (#5141, #5143 by @ZiyadBastaili, @evnchn, @falkoschindler)
• Properly close ui.sub_pages render coroutine on cancellation (#5142, #5145 by @platinops, @evnchn, @python-and-novella, @rodja)

Dependencies

• Bump actions/setup-python from 5 to 6 (#5121 by @dependabot)

Bugfixes

• Let Client.delete() do not cause KeyError if called multiple times (#5119, #5128 by @evnchn, @alydersen, @sonicno1, @rodja)

New features and enhancements

• Improve performance using str.translate instead of repeated str.replace (#5104 by @falkoschindler)
• Support value=None in ui.checkbox and ui.switch for indeterminate state (#5093 by @daya0576, @falkoschindler)

Bugfixes

• Fix event handlers being called multiple times (#5079, #5108 by @ftesser, @falkoschindler)
• Fix direct opening of async nested sub pages (#5085, #5089 by @alexzaech, @rodja, @falkoschindler)
• Strip path prefixes in sub pages router (#5106, #5111 by @SirTaros, @rodja, @falkoschindler)
• Fix browser exception in interactive_image layers (#5103 by @mpmX, @falkoschindler)
• Fix KeyError appearing in the logs (#5090 by @alydersen, @sonicno1, @zbxiany, @evnchn, @maria-ems, @falkoschindler)
• Fix ui.aggrid not calling the "onGridReady" event handler (#5087 by @denis-x, @falkoschindler)
• Fix ui.log not scrolling to bottom when pushing multiple lines at once (#3909, #4830, #5112 by @mattie47, @golgitab, @pandabearcodes, @evnchn, @falkoschindler)

Testing

• Implement user.should_see and click for ui.tree (#5068, #5069 by @davetapley, @rodja, @falkoschindler)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfix

• Only start user storage pruning if a storage secret is set (#5077, #5078 by @pascalzauberzeug, @irham-rasyidi, @rodja)

Bugfix

• Fix update of hidden ui.plotly elements (#5066 by @Elvynzs, @falkoschindler)

Bugfixes

• Close unused user storages (#4998, #5074 by @rodja, @falkoschindler)
• Fix navigate.to with "mailto" URLs in the presence of ui.sub_pages (#5075 by @rodja, @falkoschindler)

Documentation

• Add documentation for URL parameters with ui.sub_pages (#5071, #5072 by @davetapley, @rodja)

New features and enhancements

• Allow props() to take a dict or list without quotes (#706, #4969 by @demo88, @lawrenceakka, @falkoschindler)
• Allow canceling the currently executed invocation of ui.timer (#5011 by @rodja)
• Add dynamic icon color to ui.color_input in preview mode (#4965, #4966 by @gabriblas, @falkoschindler)

Bugfixes

• Fix Tailwind for ui.dark_mode in combination with ui.run(dark=None) (#3753, #4886, #5042 by @petergaultney, @rodja, @jdoiro3, @evnch, @BaccanoMob, @falkoschindler)
• Fix animations in ui.plotly (#5033 by @fdion, @falkoschindler)
• Fix jumping dialogs and ui.select popups on mobile (#5028, #5031, #5050 by @frankhuurman, @falkoschindler, @rodja)
• Use weak references for parent slot to avoid cyclic references (#5052, #5053 by @burnpanck, @falkoschindler, @rodja)
• Handle breaking change of pywebview's dialog type in native mode (#283, #5064 by @jmmlp, @falkoschindler)
• Allow combinations of X-Forwarded-Prefix and root_path (#4930, #5012, #5038, #5063 by @awery, @twsl, @falkoschindler, @rodja)
• Fix ES modules not loading on old webkits (#3935, #5020, #5067 by @juledwar, @mbclarkengineering, @evnchn, @alexc155, @coolynx, @falkoschindler)

Documentation

• Add a Stripe checkout example (#862, #5039 by @tornikeo, @frankvp11)
• Add proper validation to Google OAuth example and Goole One Tap example (#5048 by @rodja, @falkoschindler)
• Improve the NGINX Subpath example (#5065 by @rodja)
• Use fly.io autoscaler for the NiceGUI website (#5027 by @rodja)

Dependencies

• Bump actions/checkout from 4 to 5 (#5032 by @dependabot)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfixes

• Fix bad navigation of relative URLs (#5023, #5025 by @MicaelJarniac, @rodja, @falkoschindler)
• Don't require plotly being installed for using ui.plotly's dictionary interface (#5018, #5019 by @samuller, @falkoschindler)

Documentation

• Fix timing issue os async ui.sub_pages demo (#5010, #5026 by @MicaelJarniac, @rodja, @falkoschindler)
• Fix routing to other FastAPI pages in documentation (#5001, #5004 by @evnchn, @rodja)

Bugfix

• Only use SPA router for relative URLs in ui.navigate.to (#4999, #5002 by @mohankumarelec, @nightwatcher74, @rodja)

Documentation

• Improve documentation page for ui.sub_pages (#5000 by @falkoschindler)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Introduce ui.sub_pages for implementing single-page applications (SPA) (#2811, #4821 by @Alyxion, @evnchn, @rodja, @falkoschindler)
• Introduce ui.input_chips for input elements with chips (#1649, #4940 by @Stefan2016, @BaccanoMob, @falkoschindler)
• Introduce ui.fab and ui.fab_action for floating action buttons (FAB) (#4813 by @evnchn, falkoschindler)
• Add a ui.button_dropdown.on_click method for registering click event handlers (#4984 by @falkoschindler)
• Raise a more meaningful exception when using ui.state() outside of ui.refreshable (#4947 by @Atglobal-ML, @falkoschindler)

Bugfixes

• Reduce Redis data and connections for API requests (#4979, #4982 by @lweighall, @rodja)
• Fix type annotation for WindowProxy.create_file_dialog (#4953, #4955 by @MaidScientistIzutsumiMarin)

Documentation

• Use ui.sub_pages to greatly speed up the documentation (#4902 by @rodja, @falkoschindler)
• Simplify the "FastAPI" example (#4974, #4994 by @arunmp25, @BaccanoMob, @rodja)
• Add rate limits for our hosted website (#4987 by @rodja)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfix

• Fix ui.refreshable causing a RuntimeError on deleted clients (#4948 by @amks1, @evnchn, @chinsaiki, @falkoschindler)

New features and enhancements

• Allow using other UI frameworks than Quasar (#4858, #4859 by @evnchn, @me21, @kleynjan, @rodja, @falkoschindler)
• Take load from garbage collector by removing cyclic references within clients and elements (#4938 by @falkoschindler)
• Make binding transform functions optional (#4910 by @falkoschindler)
• Let ui.header update scrollPaddingTop more nicely with a custom header.js component (#4937 by @falkoschindler)
• Clean up dependencies in pyproject.toml (#4917, #4920 by @lambdaq, @falkoschindler)

Bugfixes

• Fix memory leak and wrong copy button in ui.code (#4912, #4919, #4921 by @henriknoren, @evnchn, @falkoschindler)
• Avoid duplicate values in ui.select with "add-unique" mode (#4896, #4916 by @BaccanoMob, @falkoschindler)
• Fix nested propagation of bindable properties (#4933 by @codingpaula, @NiklasNeugebauer, @falkoschindler, @evnchn)
• Fix app not starting after packaging with nicegui-pack (#4899 by @zbximo, @falkoschindler)
• Fix deselection of table rows when changing row_key later (#4875, #4893 by @thugentobler, @falkoschindler)
• Fix ui.aggrid not firing the "gridReady" event (#4883, #4885 by @pimswr, @falkoschindler)
• Fix KeyboardKey.space to correctly recognize the Space key (#4878, #4879 by @eulerleibniz)

Documentation

• Reduce CPU load on the client by replacing ui.spinner with animated Gifs (#4822 by @evnchn)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Allow creating custom error screens (#4538 by @evnchn, @rodja, @falkoschindler)
• Allow setting cache_control_directives in ui.run() (#4532, #4540 by @evnchn, @falkoschindler)
• Remove the wait_for2 dependency (#4841 by @rodja, @falkoschindler, @evnchn)
• Improve type annotations for ui.codemirror (#4836 by @Yuerchu)

Bugfix

• Fix click events for multiple ui.mermaid elements on a page (#4852, #4853 by @thetableman, @evnchn)

Testing

• Allow clicking ui.radio elements using the User fixture (#4849 by @barrywhart, @falkoschindler)

Infrastructure

• Improve AI coding rules and make them available in CONTRIBUTING.md (#4846 by @rodja)
• Pin versions of JS dependencies (#4478, #4632 by @evnchn, @falkoschindler)
• Fix the development container to keep working with Python 3.8 (#4812 by @ProfessorTom, @evnchn, @falkoschindler)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Speed-up page load by skipping ES module shim for modern browsers (#4761, #4801 by @evnchn)
• Speed-up page load by deferring non-critical JavaScript (#4798 by @evnchn)
• Make ui.aggrid fully configurable (getters, setters, from_pandas(), from_polars()) (#4782, #4784 by @TeeFiX42, @evnchn, @falkoschindler)
• Warn if ui.download.from_url is called with an absolute URL which can cause problems (#4723, #4779 by @morrowrasmus, @evnchn, @falkoschindler)

Bugfixes

• Allow overwriting PyWebView's storage_path and private_mode (#4805, #4811 by @nachobacanful, @evnchn, @falkoschindler)
• Fix syntax highlighting for ui.markdown by including codehilite.css more robustly (#4774, #4778 by @platinops, @evnchn, @falkoschindler)

Documentation

• Ensure every demo subpage is accessible even when hosting on multiple servers (#4728, #4790, #4799 by @evnchn, @rodja, @falkoschindler)
• Update links to the PyWebview documentation (#4829 by @NiklasNeugebauer, @falkoschindler)
• Fix link to JavaScript's History API (#4807 by @Igor-san, @falkoschindler)
• Cache search_index.json more aggressively to reduce bandwidth (#4794, #4795 by @falkoschindler, @evnchn)
• Fix wide sections not wrapping on mobile (#4791 by @Iremlap, @falkoschindler)
• Fix a glitch in the docstring for generic event registrations (#4789 by @Igor-san)

Infrastructure

• Add flake8-quotes information to pyproject.toml (#4783, #4787, #4788 by @EmberLightVFX, @evnchn, @falkoschindler)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Allow combining Python handler with js_handler for filtering event arguments (#4577, #4611, #4618, #4689 by @bin-san, @yihuang, @evnchn, @falkoschindler)
• Allow passing classes, style, and props to ui.log.push (#2508, #4750 by @whoenig, @falkoschindler, @golgitab, @evnchn)
• Improve cache invalidation using last-modified timestamps (#4532, #4539 by @evnchn, @falkoschindler)

Bugfixes

• Let ui.table.from_pandas handle dataframes with lists or intervals (#2697, #2744, #4775 by @rohitsathish, @petergaultney, @burnpanck, @lij55, @evnchn, @xaptronic, @falkoschindler)
• Fix timing issue when initializing ui.leaflet (#4753, #4754 by @evnchn)

Documentation

• Show the documentation hierarchy in the sidebar (#2976, #4732 by @v479038280, @evnchn, @falkoschindler)

Testing

• Document use of user fixture with ui.select, including a bugfix when closing the popup (#4737, #4757 by @barrywhart, @evnchn, @rodja)

Infrastructure

• Remove Prometheus tracking (#4746, #4766 by @paketb0te, @rodja, @falkoschindler)
• Use Plausible Analytics on nicegui.io (#4769 by @rodja, @evnchn)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Allow adding SVG layers to ui.interactive_image (#4712 by @falkoschindler, @evnchn, @codingpaula)
• Introduce image overlays and video overlays for ui.leaflet (#4686, #4707 by @jurstu, @falkoschindler, @evnchn)
• Add HTTPS protocol support to ui.run (#4679 by @thetableman, @evnchn, @falkoschindler)
• Gain basic Android compatibility with a little refactoring (#578, #4683 by @bobwatcherx, @jeff-dh, @evnchn, @rodja)

Bugfixes

• Fix ui.codemirror not applying changes after inserting emojies (#4575, #4678 by @gbrault, @evnchn, @falkoschindler)
• Fix Mermaid diagrams via ui.markdown or ui.mermaid rendering incorrectly within ui.dialog (#4502, #4518, #4692, #4722 by @ntmarkus, @falkoschindler, @evnchn)
• Fix ui.refreshable updating wrong target when using ui.state (#3392, #4690, #4691 by @kleynjan, @python-and-novella, @falkoschindler, @evnchn)
• Avoid KeyErrors caused by late ui.run_javascript responses (#4725 by @falkoschindler)
• Improve On Air reconnect behavior (#4724 by @falkoschindler)

Documentation

• Reduce latency and bandwidth of search function (#4731 by @evnchn)
• Introduce a json containing all documentation for better AI support. (#3412, #4688 by @cleesmith, @ruiheng, @evnchn, @falkoschindler)
• Add demo about transformation functions for binding properties (#4726 by @Youssof-lab, @evnchn, @falkoschindler)
• Add demo about Mermaid diagrams inside ui.markdown (#4170 by @Alyxion, @falkoschindler, @evnchn)
• Add missing version information for download functions (#4727 by @evnchn)

Testing

• Add context manager to the user fixture to allow simpler use of ElementFilter (#4667, #4682 by @barrywhart, @rodja, @evnchn, @falkoschindler)

Infrastructure

• Fix npm.py for Windows (#4656, #4733 by @evnchn, @falkoschindler)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfix

• Fix multi-cursor updates in ui.codemirror (#4701, #4702 by @evnchn, @falkoschindler)

Documentation

• Add demo about ui.context_menu with dynamic content (#4695, #4696 by @Anindya088, @evnchn, @falkoschindler)
• Add demo about styling HTML elements inside ui.markdown (#4403 by @Lester1989, @NiklasNeugebauer, @evnchn, @falkoschindler)

New features and enhancements

• Introduce @background_tasks.await_on_shutdown to allow properly awaiting background tasks on shutdown, fixes app reset and RuntimeWarnings in pytests (#4312, #4592, #4608, #4641 by @evnchn, @ReubenVandezande, @rodja, @falkoschindler)
• Introduce element.html_id property (#4633, #4672 by @evnchn, @falkoschindler)
• Simplify change set processing for ui.codemirror (#4676 by @falkoschindler, @evnchn)

Bugfixes

• Fix ui.codemirror not updating when value changes programmatically (#3337, #4586, #4635 by @zkx06111, @python-and-novella, @zak-45, @cipologic, @evnchn, @falkoschindler)
• Get rid of "leaked semaphore object" warnings (#4129, #4131, #4132, #4653 by @ChipsAHoai, @MaxRev-Dev, @devturner, @TomFreudenberg, @rodja)
• Improve efficiency of binding propagation by correctly keeping track of visited nodes* (#4626, #4628 by @sfeltman, @evnchn, @falkoschindler)
• Fix import and initialization of Mermaid in ui.mardown (#4620, #4623, #4625 by @yihuang, @evnchn, @falkoschindler)
• Fix getElement when called with an HTMLElement (#4674, #4675 by @evnchn)

Documentation

• Added documentation on how native app settings are ignored when using a main guard (#4319, #4627, #4658 by @J3ronimo, @evnchn, @civilwargeeky, @falkoschindler)
• Add demo about HTML in ui.table cells (#4605, #4646 by @rafaelrdealmeida, @evnchn, @falkoschindler)
• Update documentation on ui.upload after a breaking change in Starlette 0.46.0 (#4640 by @yudelevi, @evnchn)
• Use a custom reST element for documentation to fix a layout glitch (#4647, #4648 by @kj4tmp, @evnchn, @falkoschindler)

---

* Note about binding propagation: NiceGUI 2.16.0 improved efficiency of binding propagation by strictly adhering to a Depth-First-Search approach, updating every affected node once and executing the transformation function once. If you are migrating from NiceGUI 2.15.0 or older, there may be extra runs on transformation functions, especially ones in the opposite direction to the current propagation direction, which are no-longer ran in NiceGUI 2.16.0. As a result, you would need to change your code appropriately. We would also like to mention that, for the most stable behaviour across releases, it is best-practice that transform functions have no side-effects and do basic transform operations only. This way, it will not matter how NiceGUI chooses to call them in what order and by how many times.

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Add theme support to ui.echart (#4596 by @thetableman, @evnchn, @falkoschindler)
• Avoid flash of unstyled text (FOUT) for icons and symbols (#4477, #4481 by @evnchn, @falkoschindler)

Bugfixes

• Fix a memory leak and a possible RuntimeError in the binding module (#4419, #4617, #4619 by @chriswi93, @x2a-packet, @evnchn, @polyipseity, @falkoschindler, @rodja)

Testing

• Fix unexpected logs in pytest when working with the user fixture (#4607, #4608 by @pmeising)

Dependencies

• Bump python-engineio to 4.12.0 to avoid pointless messages parsing attempts (#4602 by @rodja, @falkoschindler, @evnchn)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfixes

• Revert PR #4550 (Avoid RuntimeError while iterating over bindable properties) to prevent server from freezing (@rodja)
• Let SVG of ui.matplotlib fill its container (#4595 by @moi90, @falkoschindler, @evnchn)

New features and enhancements

• Preload scripts for faster page load (#4505, #4507 by @daya0576, @falkoschindler, @evnchn)
• Introduce more explicit ui.download functions (#4104, #4564 by @marcuslimdw, @falkoschindler, @evnchn)
• Introduce LabelElement mixin to add bindable label property to various elements (#4529 by @weinibuliu, @evnchn, @falkoschindler)
• Introduce new on_begin_upload event handler for ui.upload (#4541, #4543 by @jpruente92, @falkoschindler, @evnchn)
• Let ui.add_css, ui.add_scss and ui.add_sass set shared=True (#4537 by @evnchn, @falkoschindler)
• Allow simulating ui.run_javascript in pytests using the User fixture (#4508, #4512 by @chriswi93, @rodja, @falkoschindler)
• Provide better warning if On Air service is not reachable (#4582 by @rodja)
• Chunk large HTTP responses when relayed through On Air service (#4555 by @rodja)
• Show On Air connection errors with message from server (#4553 by @rodja)

Bugfixes

• 🚨🚨🚨 WARNING: The bugfix "Avoid RuntimeError while iterating over bindable properties (#4419, #4550 by @chriswi93, @falkoschindler)" lead to possible app freezes. Please Use 2.14.1 instead.
• Avoid ui.echart from initially rendering twice (#4501, #4535, #4584 by @depley, @evnchn, @falkoschindler)
• Fix ui.scene.clear() if it contains group scene objects (#4560 by @NiklasNeugebauer, @evnchn, @falkoschindler)
• Use background_tasks.create to avoid destroying pending tasks (#4500, #4551 by @JudeMcbeath, @evnchn, @zbxiany, @chriswi93, @jpentland-jrw, @falkoschindler)
• Fix typing for ui.refreshable and ui.refreshable_method (#4510 by @drkspace)

Documentation

• Fix bug in interactive styling demo (#4576 by @hwtam, @evnchn, @falkoschindler)
• Fix a demo for ui.aggrid which requires a @ui.page function (#4570, #4572 by @CodeCubeNeo, @evnchn)
• Improve cover image in README.md for dark mode (#4544 by @evnchn)
• Fix tests folder structure in for modular projects (#4522 by @aleksandr-vin)

Dependencies

• Bump typing-extensions from 4.12.2 to 4.13.1 (#4562 by @dependabot)
• Bump ruff from 0.9.9 to 0.11.2 (#4545 by @dependabot)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Improve efficiency of async page functions (#4450, #4461, #4462, #4466 by @evnchn, @falkoschindler)
• Improve efficiency of UI updates (#4457, #4463 by @evnchn, @falkoschindler)
• Introduce ui.navigate.history to update URL in browser (#4382 by @platinops, @rodja, @falkoschindler)
• Add timeout property for ui.notification (#4437, #4444 by @weinibuliu, @falkoschindler)
• Support ui.select with multiple values and dictionaries in user test fixture (#4449 by @Daemo00, @rodja, @falkoschindler)
• Introduce Cursor rules to improve quality of AI code generation (#4445 by @rodja)

Bugfixes

• Avoid duplicate updates of UI elements (#4344, #4470 by @roblight, @falkoschindler)
• Fix parsing of URL parameters in props (#4453 by @pimswr, @falkoschindler)
• Fix potential conflicts of "select" and "change" events in ui.json_editor (#4397, #4458 by @natankeddem, @falkoschindler)
• Avoid overwriting original list when setting ui.table.columns (#4418, #4428 by @weinibuliu, @falkoschindler)
• Ensure valid host when opening native window (#4438, #4443 by @natankeddem, @rodja)
• Fix displayed list of IP addresses on startup (#4425 by @zak-45, @rodja, @falkoschindler)
• Define Starlette version for Python 3.8 to avoid static resources not being found (#4255 by @KimigaiiWuyi, @arlowhite, @guyingbo, @fm-andres-rangel, @AERCR3, @Kludex, @sonman, @falkoschindler)

Documentation

• Add Google OAuth2 example (#4361, #4371 by @frankvp11, @@rodja, @falkoschindler)
• Add Google One Tap authentication example (#3243, #3244 by @bin-san, @rodja, @falkoschindler)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfix

• Fix inconsistency between supported language codes and defined translations (#4417 by @hyoshida-jr, @falkoschindler)

New features and enhancements

• Introduce a ui.slide_item element (#4282, #4358 by @void-gfly, @thetableman, @falkoschindler)
• Introduce a ui.rating element (#4347 by @thetableman, @falkoschindler)
• Derive ui.drawer, ui.left_drawer and ui.right_drawer from ValueElement (#4320, #4334 by @xaptronic, @codingpaula, @falkoschindler)
• Allow to ignore non-existing files when using app.add_static_file and app.add_media_file (#4406, #4411 by @ed2050, @rodja)
• Add support for WMS layers in ui.leaflet (#4360 by @platinops, @falkoschindler)
• Add translations for the connectivity popup (#4324 by @Yuerchu, @falkoschindler)
• Allow copying objects with bindable properties and preserve bindability (#3995, #4251 by @balex89, @falkoschindler)
• Define autopep8 rules in pyproject.toml (#4368 by @EmberLightVFX, @codingpaula, @falkoschindler)

Bugfixes

• Wait for ui.leaflet to load before loading plugins (#4395, #4401 by @anthony-arnold)
• Improve update of notifications (#4373, #4379 by @pedropg898, @falkoschindler)
• Await the delete method when working with a Redis storage (#4339 by @enigmanoid, @rodja)
• Explicitly use UTF-8 encoding where possible (#4364 by @masushin, @falkoschindler)
• Fix initialization of app.storage.general (#4352, #4355, #4374 by @SHDocter, @zobac, @rod7760, @rodja)

Documentation

• Use a query parameter for the redirect path in the "Authentication" example (#4388 by @tonyallan, @falkoschindler)
• Explain why the global scope refreshable demo doesn't work on nicegui.io (#4338 by @me21, @falkoschindler)

Dependencies

• Bump nicegui-highcharts from 2.0.2 to 2.1.0 (#4362 by @dependabot)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfixes

• Fix saving non-serializable data in tab storage (#4313, #4325 by @ReubenVandezande, @falkoschindler, @rodja)
• Fix update mechanism for ui.plotly to prevent random resets (#4186, #4317 by @duane-space, @falkoschindler)
• Fix KeyError in disconnect handler (#4304 by @trivedihoney, @rodja, @chriswi93, @falkoschindler)
• Automatically unregister BindableProperty objects to avoid memory leaks (#4109, #4122 by @andybayer, @falkoschindler)

Build pipeline

• Fix upload to zenodo by using our own built version (#4303 by @codingpaula)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

New features and enhancements

• Introduce ui.fullscreen for controlling fullscreen mode (#4165 by @Alyxion, @falkoschindler)
• Introduce @binding.bindable_dataclass decorator to create bindable dataclasses (#3957, #3987 by @balex89, @falkoschindler)
• Improve support for Leaflet plugins (#2767, #4289 by @tfitzsim, @falkoschindler)
• Introduce selection property for ui.table to allow changing the selection type (#4296 by @DevMax007, @falkoschindler)
• Improve connection parameters for Redis storage (#4299, #4300 by @alydersen)

Bugfixes

• Prevent page content from being deleted when a client reconnects (#4253, #4271, #4285 by @chriswi93, @rodja, @falkoschindler)
• Prevent ui.leaflet from resetting center and zoom when browser resizes (#4182, #4265 by @qutang, @nathanWagenbach, @falkoschindler)
• Fix erroneous keyboard events caused by autocompletion (#2545, #4290, #4291 by @Albert-mah, @natankeddem, @falkoschindler)

Documentation

• Add a Single-File Component to the "Custom Vue Component" example (#4229 by @josephburkhart, @falkoschindler)
• Avoid index page being overwritten by one of the demos (#4270, #4272 by @natankeddem, @falkoschindler, @rodja)

Dependencies

• Bump certifi from 2024.12.14 to 2025.1.31 (#4294 by @dependabot)
• Bump plotly from 5.24.1 to 6.0.0 (#4287 by @dependabot)
• Bump pywebview from 5.3.2 to 5.4 (#4283 by @dependabot)

---

Special thanks to all our sponsors and contributors! ✨

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!

Bugfix

• Fix problems in native mode caused by app.main_window being undefined (#4244 by @raffaellof, @falkoschindler)

Dependency

• Bump abatilo/actions-poetry from 3 to 4 (#4245 by @dependabot)

New features and enhancements

• Introduce redis storage which syncs between multiple instances, sponsored by @alydersen (#1606, #4074 by @rodja, @hany, @juledwar, @Alyxion, @falkoschindler)
• Load dependencies in parallel when updating UI elements (#4235 by @NiklasNeugebauer, @falkoschindler)
• Introduce axis limit parameters for ui.line_plot.push() and fix potential matplotlib warning (#4192 by @drkspace, @falkoschindler)
• Introduce ui.clipboard.read_image() (#4144 by @liunux4odoo, @falkoschindler)

Bugfixes

• Fix ui.input ignoring "keydown.-" events (#4209, #4210 by @ronniebax, @falkoschindler)
• Register middlewares as late as possible (#4155 by @rodja)
• Fix leaked semaphore object warning (#4129, #4131, #4132 by @ChipsAHoai, @rodja)

Documentation

• Introduce a "Map of NiceGUI" (#4128 by @falkoschindler)
• Add version information to documentation (#4137, #4221 by @ed2050, @falkoschindler)
• Add an example to show OpenAI's Assistant API with async/await (#4136 by @rodja)
• Demonstrate dialog event registration (#4153 by @rodja)
• Remove wrong statement about socket IDs in UI events (#4016 by @PeterQuinn396, @falkoschindler)
• Dynamically mirror "Other HTML elements" demo (#4232 by @norlatif, @falkoschindler)

Dependencies

• Bump certifi from 2024.8.30 to 2024.12.14 (#4211 by @dependabot)
• Bump mypy from 1.13.0 to 1.14.1 (#4223 by @dependabot)
• Bump pygments from 2.18.0 to 2.19.1 (#4212 by @dependabot)
• Bump python-socketio from 5.11.4 to 5.12.1 (#4213 by @dependabot)
• Bump ruff from 0.8.1 to 0.9.1 (#4198, #4214 by @dependabot)
• Bump uvicorn from 0.32.1 to 0.33.0 (#4215 by @dependabot)

Bugfixes

• Avoid browser storage being shared across clients when accessing via On Air (GHSA-v6jv-p6r8-j78w by @streamcfd, @rodja)
• Fix closing tag in ui.editor (#4148 by @Alyxion)

Documentation

• Only create subheading if we have class docs (#4126 by @rodja)

Dependency

• Bump mypy from 1.13.0 to 1.14.0 (#4130 by @dependabot)

New features and enhancements

• Retransmit messages after short connection interruptions to keep client in sync (#3143, #3199 by @FeldrinH, @afullerx, @me21, @falkoschindler, @rodja)
• Introduce app.timer (#3187, #3225, #4091 by @adosikas, @falkoschindler, @v479038280, @rodja)
• Introduce getHtmlElement function (#3019, #4087, #4123 by @chrschorn, @Alyxion, @falkoschindler)
• Disallow typing into disabled UI elements when testing with the User fixture (#4080, #4098 by @randy-seng, @rodja)
• Allow to configure the documentation pages via fastapi_docs parameter in ui.run() (#4050 by @Yuerchu, @falkoschindler)

Bugfix

• Prevent ui.leaflet from oscillating between two locations (#4061, #4121 by @hal2000gh, @falkoschindler)

Documentation

• Add reference for ui.menu_item (#4107, #4115 by @ed2050, @falkoschindler)
• Add demo for binding ui.input to ui.date with date range selection (#4077 by @Mte90, @falkoschindler)

Dependencies

• Bump python-socketio from 5.11.4 to 5.12.0 (#4124 by @dependabot)
• Bump certifi from 2024.8.30 to 2024.12.14 (#4113 by @dependabot)
• Bump uvicorn from 0.32.1 to 0.33.0 (#4112 by @dependabot)

---

Special thanks to our top sponsors DigiQuip AS, egs-hub, and Davi Borges ✨

and all our other sponsors and contributors for supporting this project!

🙏 Want to support this project? Check out our GitHub Sponsors page to help us keep building amazing features!