Paperless-ngx

paperless-ngx 2.4.1

⚠️ Important

v2.4.0 contained a change to the authentication methods available to the API for “unsafe” requests that could represent a security risk for certain installations behind a reverse-proxy. This change was reverted in v2.4.1 and we recommend that all users upgrade to this version. See #5534

Please note that requests only using GET, HEAD (not POST, PUT, etc) are still allowed directly against the API, as is the previous behavior of Paperless-ngx. See the warnings in the documentation about preventing passing remote user headers unintentionally.

Breaking Changes

• Change: merge workflow permissions assignments instead of overwrite @shamoon (#5496)

Bug Fixes

• Fix: Minor frontend things in 2.4.0 @shamoon (#5514)
• Fix: install script fails on alpine linux @shamoon (#5520)
• Fix: enforce permissions for app config @shamoon (#5516)
• Fix: render images not converted to pdf, refactor doc detail rendering @shamoon (#5475)
• Fix: Dont parse numbers with exponent as integer @shamoon (#5457)

Maintenance

• Chore: Build fix- branches @shamoon (#5501)

Dependencies

• Chore(deps-dev): Bump the development group with 1 update @dependabot (#5503)

All App Changes

7 changes

• Revert “Enhancement: support remote user auth directly against API (DRF)” @shamoon (#5534)
• Fix: Minor frontend things in 2.4.0 @shamoon (#5514)
• Fix: enforce permissions for app config @shamoon (#5516)
• Change: merge workflow permissions assignments instead of overwrite @shamoon (#5496)
• Chore(deps-dev): Bump the development group with 1 update @dependabot (#5503)
• Fix: render images not converted to pdf, refactor doc detail rendering @shamoon (#5475)
• Fix: Dont parse numbers with exponent as integer @shamoon (#5457)