What's Changed

• Added "query" parameter to templates.list API endpoint in #12996
• Deleting failed and expired exports now possible by @47star in #13032

Fixes

• Floating toolbar in template settings no longer overlaps sidebar in #12994
• "Mermaid" no longer appears twice in language picker in #13000
• "Reset theme" control correctly updates input value in #12999
• Errored mermaid diagram no longer zoomable in #13001
• Debounced search query persistence in #13004
• Multiple fixes for comment gutter mark behavior and scroll-to-comment in #13013
• Search queries from MCP are now recorded in #13011
• Consistent usage of configured proxy with auth providers in #13018
• Docker image no longer includes test fixtures in #13021
• MCP can now upload files with local storage method in #13023
• Image dimensions editable in editor again in #13025
• Focusing starred link no longer scrolls to original location in #13029
• Fixed indent of group-shared document children by @zz80900 in #13028
• Full keyspace is now used for email verification codes in #13031
• Option to invite existing user not in doc in #13034
• Fixed 502 on sign-in from oversized id_token cookie using OIDC (#12986) in #12995

New Contributors

• @zz80900 made their first contribution in #13028
• @47star made their first contribution in #13032

Full Changelog: v1.9.1...v1.9.2

Original source

What's Changed

Improvements

• Added importer support for Slab in #12859
• Added support for rgb, hsl swatches in #12972
• New sidebarHidden query option in #12947
• Empty list tool results in MCP now return improved responses by @syf2211 in #12864
• Unfurl previews for heading links are now aware of heading links in #12857
• Added comment marks in editor gutter in #12840

Fixes

• Long code words no longer cause comment bound overflow in #12961
• Desktop sign-in supported for self-hosted deployments in #12952
• Fix image overflow in table cells by @tsushanth in #12902
• Another fix for foreignObject sizing in Mermaid diagrams by @tsushanth in #12872
• Prevent collapsed sidebar opening during text selection in #12965
• Improved fast-click behavior in sidebar in #12966
• Comments menu now works correctly when triggered from a document list in #12968
• Service worker loading in #12978

New Contributors

• @tsushanth made their first contribution in #12902
• @syf2211 made their first contribution in #12864

Full Changelog: v1.9.0...v1.9.1

Original source

What's Changed

Highlights

Login with Passkey is now supported on desktop in #12749

Markdown input such as --- now work after a soft-break in #12925

MCP

Now supports reading and using templates in #12639

Added document restore tool in #12575

document_update,collection_update tools now return error when no changes occur in #12890

Add HTML input support to `create_document tool by @Ali-ovo in #12943

Newly created collections via MCP now default to private in #12644

Make client_name optional on /oauth/register by @cassvail in #12836

Add WWW-Authenticate header to /mcp 401 responses by @cassvail in #12834

Other improvements

Table menus in editor were improved and now include alignment options for rows in #12611

Added support for Slack-style +:100: reaction shorthand in #12650

Added PROXY_HEADERS_TRUSTED env option (defaults to true) in #12676

CloudFront support for signed attachment URLs by @oliinykdm in #12656

Table sorting is now IP-address aware in #12734

Small images can now be displayed inline for iconography in #12776

Added support for presigned PUT uploads for S3-compatible storage by @nmnmcc in #12748

Image corner drag resizing is now enabled by @UmbraCi in #12690

Added spec-compliant OIDC logout in #12804

Add support for OIDC provider returning JWT from userinfo endpoint in #12879

Fixes

PDF display now correctly scales on mobile in #12608

place cursor at start of inserted table row/column in #12610

Improve patch merging of links in table cells through MCP in #12614

Code blocks auto-collapse while editing in #12616

Spurious post-import edits in #12620

Before/After creation options appear in menu when no permission on parent doc in #12629

Updated validateUrlNotPrivate to match implementation in SSRF in #12636

Widen validated emails for Azure in #12637

Pasted content sometimes appears in plaintext in #12638

Dragging images in editor in #12647

perf: Improve performance of in-page search in #12649

Prevent selecting word-joiner characters around multiplayer cursor in #12660

Reject collections.update requests that include both description and data in payload in #12648

Improve markdown serialization speed in #12667

Editor math block parsing and NaN media dimensions in #12668

Toggling a nested list no longer converts parent lists in #12670

Duplicate paths in export ZIP in #12674

Date mentions in #12621

Comment thread animations in #12677

Nested list behavior in #12678

Various checkbox fixes in #12679

perf: Server startup time in #12680

Tracking of block toolbars in #12681

Reset focusedCommentId on document nav in #12687

Setting attributes from col/row span in #12686

Encode code & math fences in table cells with to avoid breaking rows in #12569

Image drop into editor in #12691

only users with "manage" permissions can edit page permissions by @orikad in #12597

Enable PDF toggle for pre -contentType files in #12709

Import avatar image from Azure/Entra/Microsoft in #12710

Allow template management to be extended to viewers in #12719

Pinterest host matching too broad in #12718

Allow webhook urls without a top-level domain when self-hosted in #12728

Documents shared directly with user not accessible through MCP list tool in #12717

Importer fails after stripping emoji within mark on first line in #12730

Inline code marks longer than the width of editor escape bounds in #12735

Newlines in block fences in table cells in #12740

Cmd+A in image/video captions now works correctly in #12751

Suggestion menus are now correctly announced to screenreaders in #12750

Prevent concurrent OAuth refresh attempts from revoking grant in #12752

Smoothed out image lightbox transition in #12756

Incorrect sidebar hover state with menu open in #12758

Collapse code blocks taller than half the viewport in #12743

Vertically center empty state in notifications popover in #12764

Viewer can disclose existing shared document in #12769

Remove settings from integration presenter in #12770

Remove quote flattening on markdown serialization in #12774

Notion import crash on empty table ("Index 0 out of range") in #12775

Ensure mention in doc emails always include context in #12787

Flicker of sticky table header in #12803

Retain location state when clicking on hash links in doc and TOC in #12805

Guard missing key in manifest in #12806

"User verification was required" during passkey signin in #12817

CleanupDemotedUserTask throws on deleted user in #12818

Guard against orphaned jobs in queue in #12819

Refactor find logic for non-ascii characters in #12813

Avoid pointless +1 on Facepile (show avatar instead) in #12823

Settings appear behind sidebar in #12824

Handle deleted user or team in UserCreatedProcessor in #12839

Avoid SequelizeEmptyResultError in AvatarProcessor in #12838

Avoid SequelizeEmptyResultError when team is missing in CollectionsProcessor in #12837

Remove separate editing guard on Rename action in #12846

revisions.list response too large in #12822

Cannot connect existing workspace when signed into multiple in #12870

mermaid Ctrl+Enter edit shortcut not working on Windows in #12867

Ensure accessible name to search and text inputs in #12869

Incorrect typing of passport request handlers in #12883

useMediaQuery value incorrect on first render in #12914

Handle transient errors in HealthMonitor in #12913

useIdle never triggered without user activity in #12908

all _FILE suffix secrets in env are cemented at startup in #12889

Show more useful breadcrumbs on search results in #12915

Various unlabeled and undescribed interactive elements in #12912

Sensitive fields can leak into logging when non-primitive in #12910

Decode percent-encoded filenames from URLs in #12906

Stale CSRF token sent on request retries and form submissions in #12888

passThrough prop not correctly applied in #12930

Skip attachment work in exports when includeAttachments is false in #12933

Math formulas not rendering correctly in HTML/PDF output in #12939

Comments sidebar opens on document load when draft comment exists in #12897

validateUrlNotPrivate hardening in #12938

perf: Do not load webhook content during failure check in #12944

correctly paste doc links with hash by @salihudickson in #12900

New Contributors

@eliottreich made their first contribution in #12662

@oliinykdm made their first contribution in #12656

@orikad made their first contribution in #12597

@nmnmcc made their first contribution in #12748

@UmbraCi made their first contribution in #12690

@cassvail made their first contribution in #12836

Full Changelog: v1.8.1...v1.9.0

Original source

We've shipped a round of improvements to task lists and checkboxes in the editor so they're easier to use and more natural to interact with.

• Quick conversion – type [ ] at the start of any bullet list item to instantly convert it into a task list. Converting via the menu will now act more predictably
• Completion animation – a stroke animation plays when you check off a task, giving a satisfying sense of progress
• Better "Hide completed" – the option to hide completed tasks now applies correctly to the current list, rather than affecting parent list items

Original source

What's Changed

Improvements

• Drag-and-drop now supports dragging from document lists in #12587
• Add admin interface to change user avatars in #12405
• Add automatic metrics tagging of outgoing emails in #12570
• Various improvements to mobile styling and layout in #12577, #12576

Fixes

• Fixed search term highlights missing on navigation from search in #12598
• Fixed an intermitent issue where sidebar element is not correctly active on first load in #12566
• Scrollbar no longer causes horizontal movement in comments sidebar in #12565
• Added protection against timing attacks on notification unsubscribe endpoints in #12551
• Icon picker is no longer auto-closed on choice in #12573
• Access requests can now be approved by collection managers in #12579
• Collection title and icon inline are now editable like documents in #12574
• Increased valid user-supplied URL length to 1024 in #12585
• Added handling of unhandled server error in MCP route in #12586
• Fixed sticky table header styling in Safari in #12590
• Private IP lookup is now invalid request rather than internal error in #12592
• Improved worker performance through caching in #12593
• chore: Improve handling of "expected" network errors from webhooks in #12599
• Mermaid is no longer persisted as last used coding language in #12601
• Fixed collaboratorIds iterable error when handling very old documents in #12602
• Fixed correct support for hard break serialization for commonMark in #12603
• Added email verification check during sign-in flow in #12605

Full Changelog: v1.8.0...v1.8.1

Original source

What's changed

Highlights

Members can now request access to documents they don't have permission to view – #10825

Comments are now available in the image lightbox, making it easier to discuss visuals in context – #12335

MCP

Inline comments can now be created and managed through the API and MCP – #12322

The fetch tool can now access signed attachment URLs, allowing MCP clients to read images and files – #12315

Added a fullWidth parameter to create_document and update_document, by @toralux – #12338

Document responses now include a commentCount field – #12355

MCP Responses now return full URLs instead of relative paths – #12255

Optional MCP fields now accept empty strings without erroring – #12310

Fixed an issue where updating a collection description via MCP wouldn't persist – #12410

Aligned permission checks between the API and MCP when creating documents – #12517

Other Improvements

Code blocks are now supported inside comments – #12480

Added a system preference to open the desktop app automatically on startup – #12279

Viewers can now create and use API keys – #12278

Mentioned users are now automatically subscribed to the document – #12235

The command menu now shows breadcrumbs alongside documents to make results easier to disambiguate – #12403

You can now format the word at the cursor with the associated shortcut without needing to select it first – #12492

Self-hosted instances can now use HTTP webhook URLs – #12499

Delete confirmation dialogs now use a segmented-style input – #12495

Images pasted as data URIs are now supported – #12294

The icon picker is now responsive and easier to use on mobile – #12275

Notifications now open in a mobile drawer on small screens – #12276

Reduced minimum table column width to 25px for tighter layouts – #12269

Hyphenated words are now treated as a single unit when diffing changes – #11272

Hover previews now trigger while the editor is focused – #12545

The settings sidebar is no longer collapsible – #12460

Hardened OAuth scope validation – #12490

Added Catalan as a language option – #12454

Thousands of new community translations

Performance

Cached decorations across three editor plugins for smoother editing – #12030

Virtualized the main sidebar and reduced unnecessary re-renders – #12443

Added missing indexes on foreign keys referencing documents – #12473

Replaced a correlated subquery in Slack hooks user lookup – #12432

Removed an N+1 query in documents.search – #12540

Reduced batch size when deleting documents – #12474

Avoided a redundant import lookup when presenting documents – #12529

Mammoth is now lazy-loaded to reduce startup memory – #12538

Unused services are no longer loaded at boot – #12537

Importers now stream from the zip archive instead of loading it fully – #12372 #12380

Popularity scoring now reads from the document_insights table for faster results – #12103

Fixes

Document text can now be selected in version history – #12268

Fixed search highlights not rendering in Firefox – #12273

Resolved console warnings for the rtl DOM attribute and an untracked MobX read – #12284

Outline now only preconnects to S3 when it's actually in use, by @marksteward – #12298

Improved handling of additional client-aborted error types – #12303

Short-circuited common scanner and crawler routes – #12306

Fixed a crash when file storage environment variables are misconfigured – #12325

Printing no longer includes an extra blank page – #12326

Document deletes are now batched when emptying trash – #12328

Upgraded Mermaid to 11.15.0 – #12331

Table cell selection no longer appears in print output – #12334

Fixed Mermaid diagrams not rendering correctly inside toggle blocks – #12343

Code blocks now automatically expand when a find result is inside – #12346

Mermaid diagrams now appear correctly in light theme when printing from dark theme – #12342

Fixed authorization providers not being correctly disabled via environment variables – #12349

Improved the resilience of the Markdown importer – #12357

Fixed a bug with multi-tab logout for OIDC providers – #12333

Fixed text selection insights initialization, by @mturac – #12366

Position submenu is now hidden when a collection is sorted alphabetically – #12377

No more "Imported from undefined" entries in document insights – #12378

Failed and canceled imports can now be deleted – #12379

Code blocks at the beginning of a document can now be collapsed – #12381

Fixed an infinite loop with the document restore action, by @Ali-ovo – #12395

Exported filenames are now sanitized of Windows-invalid characters, previously invalid characters would make the Zip file hard to open – #12407

Slack notifications no longer show "Untitled" for documents without titles – #12406

The mention menu now appears when pasting a link followed by a newline – #12402

Non-empty untitled drafts are no longer unintentionally trashed on editor unmount – #12418

"Premature close" stream errors are no longer reported to error tracking – #12424

Database query statement_timeout is now applied on request-handling processes – #12422

Fixed a crash when importing Notion pages containing empty tables – #12421

Upstream OAuth provider errors are no longer reported to error tracking – #12425

Double-clicking actions in DocumentExplorer no longer submits twice – #12417

Fixed a race condition causing undo/redo errors when the editor transitions from readonly – #12427

Removed unnecessary package resolutions – #12442

Fixed a sporadic infinite loop when rendering documents with code blocks – #12444

Updated Node.js to 24.16.0 – #12448

Fixed Safari heading widget handling for the Chinese IME, by @Wars – #12453

Fixed a database error from documents.list when filtering by Draft status – #12426

Internal links are now correctly remapped during JSON import – #12461

Fixed a TypeError when document.collaboratorIds is null – #12471

Skipped exporting attachments with malformed keys instead of failing the export – #12470

Prevented an internal error when a tsquery tail interleaves operator and escape characters – #12475

Removed a stray URL fragment from AuthenticationHelper – #12477

Guarded against table content changing mid-drag – #12476

Stopped logging an error when a team isn't found during apex auth redirect – #12478

Rate limiter errors are now distinguished from other errors – #12479

Notion API 5xx errors are now retried with exponential backoff – #12481

Search highlight chips are now clickable in the desktop app – #12482

Guarded against out-of-range positions in scrollToAnchor – #12489

Expected websocket "No access token" errors are no longer sent to error tracking – #12487

Imports can now target documents that the user can write to – #12485

Upload progress is now shown on the import dialog button – #12488

Fixed indent/outdent on Android mobile – #12496

Subdocuments can now be reordered with document-only access – #12493

Image and video dimension promises now reject with proper Error objects – #12498

Imports now exit gracefully when canceled mid-task – #12497

IP addresses are now normalized to avoid validation errors – #12500

Koa middleware spans are no longer reported to DataDog – #12501

Disabled floating toolbar interaction during the open animation – #12508

Avoided a team invariant violation on OAuth authorize errors – #12506

Shift-tab now outdents correctly inside code blocks – #12514

The block menu no longer triggers when the slash is marked – #12515

Webhooks are now disabled when their associated user is deleted – #12524

Prevented a crash when inserting files into a document with no attachment node in its schema – #12526

Fixed duplicate undo/redo events – #12525

Removed the resize grid-snap behavior in the editor, images and videos now resize smoothly – #12528

Pressing Enter on an image now adds a new paragraph below – #12530

Linear unfurl errors no longer bubble up to error tracking – #12532

Toggle blocks inside collapsed headings are now correctly hidden – #12536

Fixed Mermaid diagrams being mis-sized on high-DPI and RDP displays – #12531

Restored missing text color on search highlights – #12547

Many dependency updates

New Contributors

@marksteward made their first contribution in #12298

@toralux made their first contribution in #12338

@mturac made their first contribution in #12366

@Wars made their first contribution in #12453

Full Changelog: v1.7.1...v1.8.0

Original source

What's Changed

Improvements

• MCP responses now include breadcrumbs (#12203), summaries (#12241), and title guidance (#12242)
• MCP now has delete_document and delete_collection tools (#12245)
• Per-share branding lets you override the title and logo on individual public shares (#12003)
• When navigating to document from search results there is now a UI element to clear search highlights (#12165)
• OAuth account linking flows refactored (#12246)
• Self-hosted instances can now tune rate limiting with the new RATE_LIMITER_MULTIPLIER configuration option (#12226)
• Default model creation rate limits raised from 10/min to 25/min (#12236)
• Improved table-of-contents positioning on shared documents (#12171)
• Improved sidebar performance (#12215)
• Added a Redis healthcheck for better monitoring and resilience (#12157)

Fixes

• Shift-Tab on a list item inside a toggle block no longer outdents the entire block (#12162)
• Code blocks now expand correctly when printing (#12193)
• API keys created with global read/write scope are now saved correctly (#12225)
• Republishing a document now updates lastModifiedById as expected (#12227)
• Suspended users are no longer counted toward the cached group member count (#12197)
• Post-login redirects with invalid paths are now handled correctly in Firefox (#12218)
• Fixed incorrect Mod-ArrowLeft behavior inside heading nodes in Firefox (#12219)
• Autofocus now works inside lazy-loaded modals and popovers (#12146)
• Stricter validation on table attributes (#12156) and the subscription creation endpoint (#12240)
• Resolved a parseXML error originating from the AWS SDK (#12231)
• Many dependency updates

Full Changelog: v1.7.0...v1.7.1

Original source