Open WebUI 0.12.4 loads skills on demand, speaks MCP 2026-07-28 and ships unlisted security fixes

Released Oct 25, an opt-in ENABLE_SKILL_LAZY_LOADING setting lists selected skills for the model to load only when needed instead of sending every skill's instructions each message, and MCP connections now work with stateless 2026-07-28 servers. It also carries security fixes the team will detail after CVE assignment, so update soon, and note that saved tool-server and Open Terminal connections now stop working unless an admin turns on ENABLE_DIRECT_INTEGRATIONS.