Skip to main content
Blog/Release

Apache Answer 2.0.2: AI Reasoning, Email Intervals, Safer Login & More

Robin
3 min read

We're pleased to announce Apache Answer 2.0.2, a focused patch release that improves the AI chat experience, adds more flexible email settings, and tightens security across authentication, permissions, and content handling.

You can download the release from the Apache Answer download page or view the full details on the GitHub release page.

✨ Highlights​

AI Reasoning Content Support​

Reasoning models often expose their chain-of-thought before delivering the final answer. Apache Answer now preserves that reasoning content in AI conversation records and the chat UI, so follow-up rounds retain the full context.

  • Add reasoning content support in AI conversation records and chat UI (#1530) by @hgaol

Optional Email Verification​

For deployments that do not require mandatory email confirmation, administrators can now disable email verification directly from site settings, making onboarding smoother for internal or trusted environments.

Configurable New-Question Email Intervals​

New-question email notifications now support interval-based delivery, and the email throttle has been moved to a dedicated worker with a configurable queue.

  • Add interval support for new question email notifications (#1545) by @AsyncAssassin
  • Move new question email throttling to a dedicated worker and make the email queue configurable by @AsyncAssassin

Graceful Panic Recovery​

Unexpected panics are now caught earlier and handled more gracefully, reducing the chance of a single failure tearing down an entire request.

  • Add recovery middleware to handle unexpected panics more gracefully (#1537) by @hhc7

Safer External Login​

Connector sign-in flows are now more robust against incorrect account binding, and API key access is cleaned up when roles or accounts change.

  • Prevent incorrect external login account binding during connector sign-in flows by @LinkinStars
  • Remove stale administrative API key access after role or account changes by @LinkinStars

Build & Packaging Update​

  • Update Docker and CI build flow to use Buildx and Go 1.25 by @LinkinStars

🔒 Reliability and Security Improvements​

Alongside the release note items, the changes between v2.0.1 and v2.0.2 also harden several important areas:

  • Short link fixes: editing questions and accepting answers now work correctly when short links are enabled (#1541, #1554)
  • License compliance: added the missing license entry for mozillazg-go-unidecode (#1552)
  • Header hardening: Accept-Language parsing now rejects malformed oversized headers
  • Revision audit permissions: approve and reject actions now use aligned permission checks
  • Avatar ownership: avatar cleanup now enforces ownership checks when updating profile images
  • Content visibility: deleted or pending answers are restricted in answer and MCP retrieval paths
  • Error handling: JSON 500 rewriting is limited to API routes and avoids rewriting already-flushed responses
  • URL slugs: non-Latin titles now generate pragmatic ASCII slugs instead of falling back to /topic (#1526)

These changes make 2.0.2 a recommended upgrade for teams already running 2.0.0 or 2.0.1.

🙌 Thanks to Our Contributors​

Thank you to everyone who contributed code, fixes, and review to this release:

@ahmedqasid, @AsyncAssassin, @hgaol, @hhc7, @LinkinStars, and @Luffy.

We appreciate your help in making Apache Answer more capable and more reliable with every release.

Share to
Edit this page