# Dify 1.18.0 — Release & Upgrade Intelligence
- **Product:** Dify (https://dify.ai)
- **Version:** 1.18.0
- **Released:** Oct 23, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/dify/updates/1.18.0/

## Executive Summary (TL;DR)
Dify 1.18.0. Source highlight: Dify 1.18.0 brings **Agents that route workflows**, **portable app packages**, **deeper visibility into nested workflow runs**, and the opt-in **Agent Knowledge Base** experience. OpenAPI and the new difyctl expand how you build and manage apps from the command line.

## New Features
- Add the Beta knowledge-space experience with local upload preview, connected-source management, document availability and metadata, retrieval history/research, and quality evaluation. Settings control app, Agent, and Service API access. Classic Knowledge remains supported alongside it. (#44165)
- Agent apps and Workflow Agent v2 nodes can export their Agent, model, and tool execution trees through the existing tracing providers. Monitoring adds shared tracing configuration, delivery status, retry controls, and links to the trace belonging to the selected execution. Agents referenced by a Workflow inherit the caller’s tracing policy. (#44144, #44186)
- **Faster loading:** translations load by feature, workflow configuration panels load on demand, and chart, music, and SVG previews defer heavier work. Chat history no longer loads saved prompts that are not needed for display. (#42812, #42873, #42874, #42877, #42970, #42840, #42951, #44521)
- **Password hashing and plugin permissions:** optional `PASSWORD_PEPPER` adds a server-side secret to account password hashes. Plugin installation defaults to workspace owners and administrators when no explicit policy is stored; existing saved policies remain in effect. **Setting, changing, or removing the pepper invalidates existing password hashes.** See the upgrade guidance. (ed772cfcf7)
- Preserve configured fallback values when Code node outputs are removed, added, or renamed; require confirmation before saving an empty canvas; and retain in-run tool-file access for later nodes. (#42678, #43668, #41300)
- Existing knowledge-base Add file pages retain their Knowledge sidebar in both standard and pipeline flows. (#44552)

## Improvements
- **Knowledge performance:** dataset lists and indexing status use batched queries; segment imports avoid repeated position queries; retrieval and result post-processing reduce repeated lookups. (#42279, #42191, #42233, #42673, #43665)
- **Navigation and accessibility:** improved command discovery, keyboard navigation, focus return, dialog labels, and responsive layouts across Studio, workflow editing, Knowledge, Agent configuration, and workspace settings. Studio filters survive navigation, timezones are searchable, and workflow image export has a dedicated toolbar action. (#43133, #44330, #44429, #43944, #43662, #44220, #44378, #44492, #44535, #44539, #44548, #44564)
- **Localization:** Azerbaijani (`az-AZ`) joins the supported UI languages, with additional translation and right-to-left layout improvements. (#42291, #43808)

## Bug Fixes
- **Published triggers:** the draft-sync fix does not repair subscriptions already removed before upgrading. Rebind missing subscriptions and republish affected workflows as needed. (#44068)
- **Document extraction:** re-import/re-index affected content to apply extraction fixes to existing documents.
- **Error and plugin handling:** API and webhook failures return fixed public messages instead of internal exception text, and plugin daemon requests use pinned package identifiers. (#43049, #44395, #44396)
- Remove unsupported Chatflow memory settings when pasting into a Workflow and when loading/saving Workflow graphs in the editor. Existing published versions or API-only flows are not rewritten by this editor fix. (#43597, #43752)
- Persist task ownership and stop intent so late writes or a concurrent resume cannot revive a stopped workflow. Failed asynchronous trigger dispatches are recorded as failed in trigger logs, and elapsed time remains consistent across resumptions. (#40277, #43009, #44161)
- Scheduled fire-and-forget dispatch no longer creates a Redis result-backend drainer for every task group, preventing accumulating idle result connections. The same correction covers trigger refresh and pipeline dispatch. (#44551)