Etherpad

This release focuses on bug fixes, security updates for dependencies, pad deletion UX improvements, history mode fixes, and new environment variable overrides for air-gapped installations.

This release addresses a stored-XSS security vulnerability, prevents process crashes during database connection drops, and fixes several UI regressions across the editor and admin panel.

This security-hardening release tightens HTTP API entry points, updates random-id generation to CSPRNG, improves Docker deployment defaults, and includes various editor layout and accessibility fixes.

Introduces first-class reverse-proxy and ingress support, improves admin settings visibility, and optimizes server-side filtering for the admin pad list.

Version 3.0.0 introduces a self-update system, native DOCX export, a JSONC settings editor, and companion apps, while enhancing privacy and accessibility.

Version 2.7.3 introduces GDPR privacy controls, a self-update notification system, pad compaction tools, and new packaging for Snap and Debian, alongside various editor and UI enhancements.

This update improves accessibility, fixes chat UI issues, corrects export revision handling, and enhances editor navigation and focus management.

Fixed locale detection, plugin registry mutation, and non-breaking space preservation.

Replaced Abiword with LibreOffice for document processing and introduced enhancements to the timeslider, pad settings, and various stability fixes.

This release includes dependency upgrades and minor fixes and improvements to the session transfer feature.

Introduces a native feature to transfer Etherpad sessions between browsers and updates the oidc provider to v2.6.0.

Fixed a bug in the release script that prevented releases from being created correctly.

Fixes a theme overlapping issue, adds a setting to disable recent pads on the home screen, and downgrades oidc-provider to version 9.5.1 to prevent startup crashes.

Added a Prometheus metrics scraping endpoint and fixed issues with pad panel loading and admin management URLs.

Updated to Express 5.0.0 and transitioned settings API to ESM, alongside fixes for the no-skin theme.

Fixed a German translation within the English translation file.

Implemented CI/CD pipeline for release generation and re-enabled previously disabled workflows.

Fixed a text display issue in the admin UI.

This release includes dependency updates.

Introduced a new reverse proxy for clustering Etherpads to improve multi-core utilization and added client authorization support for OAuth2 flows.

Migrated important pages to React 19 and React Router v7, along with various dependency updates.

Added an option for pad creators to permanently delete their pads via the settings menu.

Fixed a timeslider scrolling bug and introduced a new Restful API for version 2 available at /api-docs.

Switched to a new SQLite backend and fixed a missing rusty-store-kv module.

This release introduces the rustydb in-process database, adds support for migrating ueberdb databases, restores the window._ shortcut, and includes numerous security fixes.

Improved performance and load speeds by introducing esbuild for bundling frontend JavaScript and CSS files, and added a configurable log layoutType.

Fixed Docker build issues, socket.io fallbacks, pagination bugs, and random websocket disconnects while improving window focus behavior.

Added PWA support and fixed issues with the plugin manager and pad panel pagination, while reintroducing APIKey.txt authentication support.

Updated the live plugin manager and improved documentation for OAuth2 and docker-compose usage.

Added OAuth2.0 support for the Etherpad API and fixed locale loading in the admin panel.

Fixed an issue preventing the successful installation of plugins with scoped dependencies.

Etherpad v2 introduces a TypeScript rewrite, a React-based admin panel, and switches from npm to pnpm for dependency management.

Introduces a Live Plugin Manager for separate plugin installation and improves repairPad.js verbosity and favicon loading.

This release fixes a crash related to the update server, updates the Docker build to use npm@6, and resolves an issue with log level settings.

Etherpad v1.9.5 updates the minimum required NodeJS version to 18 and removes support for the tidy program.

Updated Log4js to the latest version, deprecating the console appender, and fixed a MySQL logger crash related to non-standard encoding.

This release introduces SurrealDB support, improves SQLite performance via better-sqlite3, and fixes MongoDB crashes, alongside an update to express-rate-limit.

Introduces session key rotation, updates JQuery to 3.7 and Elasticsearch connector to 8, and fixes an API bug regarding pad creation.

This update includes security limits on revisions, bug fixes for export and timeslider, new keybindings, and updated Node.js requirements.

This update upgrades the Windows build to Node v16, improves login session management, adds a /health endpoint, and introduces several new hooks and APIs for plugin authors.

Upgraded ueberDB to resolve a regression issue with CouchDB.

Fixed a security vulnerability regarding pad access and improved message processing latency by implementing separate queues per pad.

This release addresses security vulnerabilities related to malformed .etherpad imports and improves import stability and performance.

This release includes security fixes, chat and Docker improvements, and several breaking API changes for plugin authors regarding HTML processing and server-side hooks.

This release addresses a persistent XSS vulnerability and introduces several compatibility changes, including updated Node.js requirements and MySQL connection pooling.

This release includes bug fixes for safeRun.sh and smartphone keyboards, alongside refactored pad loading and improved import/export functionality.

This release includes security patches for pad name crashes, bug fixes for database drivers and plugins, and various enhancements to Docker deployment and translations.

This release fixes server crashes, editor dropdown visibility, resource versioning, and plugin compatibility while improving page load speeds.

This release includes a ReDoS security patch, performance improvements, and removes the JSONP API in favor of OpenAPI.

This release fixes HTTP 400 import errors, resolves a Windows startup crash, and includes dependency updates and code cleanup.

This release includes security patches for EJS, performance improvements, new pad line linking, and updated Node.js requirements and dependency handling.

This release introduces granular user permissions, improved import functionality, and various API enhancements, while removing password protection for group pads and Internet Explorer support.

This update fixes a severe PostgreSQL issue and an authentication bypass vulnerability, updates the API version, and introduces the copyPadWithoutHistory API.

This release introduces ES6 support, several security enhancements, and performance improvements, while dropping support for Internet Explorer.

This maintenance release addresses performance regressions on MySQL, fixes UI and asset visibility issues introduced in 1.8.3, and improves maintenance tools.

This release introduces Colibris as the default skin with Flexbox layout, enhances stability, security, and Docker images, and updates the minimum Node version requirement.

This release introduces async/await migration, environment variable configuration, an official Dockerfile, security enhancements, and increases the minimum Node.js version requirement to 8.9.0 LTS.

This release introduces async/await migration, environment variable configuration, official Docker support, and various security updates and bugfixes.

Introduced support for multiple skins, LibreOffice file import, and security dependency updates, alongside various bug fixes and code simplifications.

This release includes security updates, bug fixes for HTML export and authorship, improved Firefox compatibility, and updated Node.js requirements.

Fixed issues with line number alignment, text saving during reconnection, and diagnostic calls in subdirectories.

This release includes a security fix for plugin listing and several bug fixes for dependencies, CSS, and iOS Safari line wrapping.

This update addresses security vulnerabilities in ejs, window.location.href, and jsonp, while adding SIGTERM handling and improving text formatting and viewport scrolling.

Added pad shortcut disabling, automatic reconnection options, and updated several dependencies including socket.io, l10n, and Node for Windows.

Introduces new Ace hooks, LibreJS support, security improvements, various bug fixes, and dependency updates.

This release introduces various new hooks, APIs, and Node.js version updates, while fixing security vulnerabilities and several bugs across the editor and administration tools.

Added support for intermediate CA certificates and ordered list shortcuts, alongside numerous fixes for UI, accessibility, and general stability.

Fixed an error occurring during installations on Windows.

{"description":"This release includes security

Implemented security fixes to prevent directory traversal during frontend tests.

Introduces accessibility support, new API endpoints, content collector updates, and security fixes for directory traversal.

Adds support for Node 0.12.x, new revision API endpoints, load testing settings, and various bug and security fixes.

Introduces high-resolution icons, HTTPS for plugins, and io.js support, alongside numerous bug fixes and a security patch for installation location disclosure.

Version 1.5.0 introduces performance improvements, new hooks for CSS and pad switching, enhanced export fidelity, and numerous bug fixes across the frontend and backend.

Etherpad 1.4.1 focuses on stability and bug fixes, including corrections to the API, CSS, and various functional glitches.

Etherpad 1.4 introduces a redesigned user interface, improved performance, and new features like a better search function and improved permission management.