Bug Fixes

• backend:files: skip adding recents for trashed files (c445196)
• backend:schedulers: resolve scheduled methods being skipped because of Timeout decorator overlap (50f4140)
• frontend:files: enable autoplay for video in media viewer component (20fe25f)
• frontend:files: remove hidden class from buttons for consistent visibility across breakpoints (a60538a)
• frontend:files: update file metadata timestamps on save and align OnlyOffice state change handlers (db768e1)
• frontend:search: improve search input layout and update filter button visibility for responsiveness (09ebce6)
• frontend:spaces: show disabled space message to space managers (f8bcdf7)

Security Fixes

• backend:security: prevent stored XSS by serving files with Content-Disposition: attachment to avoid arbitrary JavaScript execution in the browser (a6276d0)

Bug Fixes

• ci: update Dockerfile to use alpine3.22 to avoid errors with busybox-1.37.0-r29 (ede1bec)
• backend:users: clear whitelist caches when group visibility changes (071c3ae)
• frontend:files: fix DataTransfer usage after async operations and delay overwrite until analysis completes to restore overwrite on dropped files (d9935e5)
• frontend:styles: add min-width on app-auth background class (dffd5e5)

Community Highlights ❤️

We would like to thank @x0root for reporting this vulnerability and helping improve the security of the project.

Highlights 1.9

• 🎨 Visual identity updated — refreshed branding.
• 🖼️ Enhanced image viewer — browse all images in a directory, start slideshows, use fullscreen mode, and view detailed properties.
• ✏️ Native text editor — search, syntax highlighting, undo/redo, and lock/unlock capabilities built directly into the UI.
• 🔐 Improved file lock management — users can request unlocks from lock owners, and file owners can now remove locks themselves.
• ⚠️ Overwrite confirmation dialogs — added confirmation prompts for uploads, renaming, copying, and moving files to prevent accidental overwrites.

➡️ More details

Features

• admin: add server update notification support (fc72430)
• backend:auth: allow cn LDAP attribute and add AD-specific logic (6998b1a)
• backend:auth: Allow the LDAP mail attribute to be used as the login attribute, and allow users to authenticate using either the login attribute or their email address (a683b57)
• backend:files: improve file upload handling with comprehensive overwrite support and directory conflict resolution (e69a687)
• docker:onlyoffice: update DocumentServer image to v9.1 (c64a3ae)
• files: add directory size retrieval with UI and API integration (4528b43)
• files: add overwrite confirmation dialog for file rename and update API to support overwrite behavior (c7c0d96)
• files: add overwrite confirmation dialog for file uploads and adapt API to support overwrite functionality (d39822f)
• files: add unlock request feature and enable force unlock for file owners (7441337)
• files: enable locking and unlocking of edited files with improved handling and UI integration (24ad66b)
• files: improve file handling with edit mode toggle, unsaved changes warning, enhanced modal logic, and updated constants (bcc3ad2)
• frontend:config: enhance notifications with maxOpened and autoDismiss properties (cf850bf)
• frontend:files: add ability to edit basic text files (85b56e2)
• frontend:files: add fulscreen button in image viewer (b834618)
• frontend:files: add new translations and improve text viewer with updated read-only state handling and line wrapping (e90c91e)
• frontend:files: add overwrite confirmation dialog for copy/move actions (fa2d601)
• frontend:files: add undo and redo functionality with i18n updates and improved editor error handling (daccfbc)
• frontend:files: enhance overwrite handling by updating MIME type on rename and improving file model consistency and UI visuals (f68a073)
• frontend:files: enhance text viewer with search panel toggle and keyboard shortcuts handling (5b411f0)
• frontend:files: image viewer slideshow (49bbd4e)
• frontend:files: improve text viewer with line wrapping, saving state, and enhanced search panel handling (e5f0863)
• frontend:files: improve text viewer with save error handling and updated file upload logic (034c7a4)
• frontend:files: start implementing image viewer and folder slideshow (7a65927)
• frontend:links: update navigation to enter spaces and shares directly instead of selecting them (fd64265)
• frontend:modals: improve modal animations, lifecycle handling, and state management (bad0696)

Bug Fixes

• ci: replace static version import with dynamic version loader, update Dockerfile and add utility function (15f4752)
• backend:common: prevent errors on invalid image metadata with failOn: 'none' option in sharp (901fdf8)
• backend:files: avoid copy failures when sample documents are read-only and files are written to a CIFS share by falling back to stream copy (3b734b8)
• backend:files: correct isDir SQL logic to handle external paths without associated file IDs (b3ce7d4)
• backend:files: correct directory flag and ensure consistent file move operation in trash handling (e85ead7)
• backend:files: enable cacheControl to ensure consistent client-side caching behavior (25ab568)
• backend:files: ensure locks are visible on anchored and shared files (6445333)
• backend:files: set maxAge to 0 to enforce immediate cache invalidation (293f34c)
• backend:links: restore access to anchored files from an external location when shared via a link (f61f09f)
• backend:shares: ensure correct file path for root space shares owned by user (f5adb55)
• backend:websocket: prevent server connection from closing on shutdown hooks (8714644)
• frontend:drag: prevent drag-and-drop actions in the shares list and ensure proper drag event handling (f19ab4f)
• frontend:files: sync read-only value with opening mode in the text editor (dfff2dc)

Highlights 1.8

• 🌍 14 languages supported — added 12 new ones: 🇩🇪 🇪🇸 🇵🇹 🇧🇷 🇮🇹 🇨🇳 🇮🇳 🇹🇷 🇯🇵 🇰🇷 🇵🇱 🇷🇺
• ⚡ Better suited for small systems – reduced the default number of backend workers from 2 to 1 to improve memory efficiency on lightweight
  setups (e.g. Raspberry Pi).
• 😈 FreeBSD support – npm distribution is now compatible with FreeBSD
• 🔍 Indexing & search controls — new config to enable/disable indexing, per-space toggles, and full-text search preferences.
• 📊 Quotas — define storage quotas for external shares; storage from anchored external locations now counts toward the space’s total usage.
• 🖼️ Thumbnails — photo thumbnail generation is now 3× faster.
• 🐳 Docker — minimized system dependencies for a lighter and more efficient image (from 562MB to 357MB, saving 205MB!).

➡️ More details

Bug Fixes

• backend:files: lower PDF.js verbosity to reduce logging noise (336fce8)
• backend:users: handle graceful shutdown in WebSocket gateway to prevent new connections during app termination (0f02820)
• backend: update router options access to use options.routerOptions instead of deprecated constraints property (Fastify v6 compatibility) (2d74512)

Features

• backend:cache: update Redis packages to latest versions supporting Redis 7.x and 8.x, adjust code and improve cache
  handling (daaedf3)
• backend:database: implement graceful MySQL client shutdown during application
  termination (e42b843)
• backend:files: add daily cron job to clean up orphaned files and optimize
  table (19b9e6e)
• backend:files: add support for editing doc, xls, and ppt file formats in OnlyOffice constants map (allow implicit
  conversion) (e6523f4)
• backend:spaces: improve trash path resolution for spaces and shares with external
  paths (a37077a)
• backend/frontend: introduce full-text search preference for users and
  spaces (70ee799)
• backend/frontend: support quota definition and usage for shares with external paths, and include storage usage from external-path space roots in
  the total space usage (0b08004)
• files: add config toggles to enable/disable file indexing and full-text
  search (fde7c58)
• frontend:files: add lock indicator to selection panel and align badge styles for
  consistency (18bf5e6)
• frontend:files: display current lock indicator in file
  browser (383e6e1)
• frontend:i18n: add Deutsch, Spanish, Portuguese, Italian, Chinese, and Hindi translations and update language
  configuration (3b35484)
• frontend:i18n: add dynamic translation loading and missing translation
  handler (9f9baab)
• frontend:i18n: add Russian translations and update
  language (b791683)
• frontend:i18n: add support for language display names and enhance select options with localized
  text (f9a68bf)
• i18n: add Brazilian Portuguese (pt-BR), Turkish (tr), Japanese (ja), Korean (ko), and Polish (pl) translations for frontend and
  backend (6d017c1)
• i18n: centralize i18n utilities, refine type safety, and enhance language normalization and storage
  handling (11650a4)
• i18n: enhance locale support by adding new languages, centralizing i18n configuration, improving storage handling, and refining locale-specific
  settings (ccd538c)
• i18n: modularize locale configurations, improve type safety, and optimize language
  loading (3b05b1b)

Bug Fixes

• backend:files: adjust analyzeFile logic to handle space root and shared
  files (48bd843)
• backend:files: update PDF adapter to use standard_fonts directory and disable font face for improved
  compatibility (0fce762)
• backend:spaces,sync: enable whitelist option in ParseArrayPipe for DTO
  validation (13fcce2)
• backend:spaces: update query parameters to prevent runtime errors and add missing comments for
  clarity (d20604a)
• backend:users: extend clearWhitelistCaches to support clearing all entries, and call it after user creation to prevent stale user
  cache (92d78c9)
• backend: standardize error message handling by truncating to the first segment to hide system
  paths (f8e6f24)
• backend: use EXIF metadata for thumbnail
  orientation (bf03bb8)
• frontend:files: add text wrapping for trash dialog
  content (2b38dd1)
• frontend:files: keep aspect ratio for thumbnails with large
  width (facff7f)
• frontend:files: normalize file names in FormData to prevent unicode normalization
  mismatches (a0db60c)
• frontend:files: remove forced black background for transparent images in
  viewer (8ebcace)
• frontend:search: resolve selection issue by tracking index instead of file
  ID (8d2ebd8)
• frontend:spaces: ensure correct file ID assignment for new shares and anchored
  files (023adfb)
• frontend:styles: ensure responsive width for ngx-toastr
  component (2595563)
• frontend: remove unnecessary l10nTranslate directive from badge components in multiple
  views (d38ee5a)
• frontend: switch dayjs imports to esm for better tree-shaking and module
  optimization (9c31cde)

Features

• backend:auth: add adminGroup support and improve LDAP user role assignment (9074145)
• backend:auth: enhance LDAP authentication configuration with upnSuffix and netbiosName parameters (5a5d623)

Bug Fixes

• backend:auth: improve AD/LDAP authentication handling and normalization (db1a9e3)
• frontend:links: fallback to default MIME URL when origin MIME URL is not found (5724f3a)

🔥🚀 Support for Multi-Factor Authentication (MFA) and App Passwords

Features

• feat: mfa and app passwords (5ed579f 431a988 43a8b10 91eda5c)
• backend:sync: handle 2FA during client registration (b0aadde)
• backend:auth: add support for AD-specific LDAP attributes (1b6a8fc)
• backend:infrastructure: allow configuration of ignoreTLS and rejectUnauthorized for SMTP transport (c1b3f5a)
• backend:notifications: add email notifications for two-factor authentication security events (b207f33)
• backend:notifications: include link password in sent emails (1a3ed0a)
• backend:users: add email notifications when account is locked (954bb10)

Bug Fixes

• backend:auth: improve handling of sql errors (f4b78fa)
• backend:users: ensure default value for user secrets when null (090eb6e)

Bug Fixes

• crash on non-AVX CPUs with musl: @napi-rs/canvas >=0.1.7.8 triggers "Illegal Instruction" when AVX is not supported (de2f983)

Features

• files: optimize document opening to avoid extra API calls (bf57d93)
• frontend:files: display count for multiple selected files and open sidebar pasteboard when adding files (39feccd)
• frontend:spaces: enable keyboard navigation when files are selected in list mode (7e38ce2)

Bug Fixes

• backend:links: increment nbAccess even when no limit is set (d6d2e74)
• frontend:spaces: prevent false positives when checking external location (f1fdd0d)
• docker: fix /app ownership for .init file (e43f478)

Performance

• docker: only change application data ownership (6e88991)