paperless-ngx Release Notes

paperless-ngx 2.20.10

Note

This release addresses a bug in v2.20.7 that affected some pre-existing storage path templates. Affected users can run the document_renamer command to correct this after updating.

Bug Fixes

• Fix: support string coercion in filepath jinja templates @shamoon (#12244)
• Fix: apply ordering after annotating tag document count @shamoon (#12238)
• Fix: enforce path limit for db filename fields @shamoon (#12235)

All App Changes

3 changes

• Fix: support string coercion in filepath jinja templates @shamoon (#12244)
• Fix: apply ordering after annotating tag document count @shamoon (#12238)
• Fix: enforce path limit for db filename fields @shamoon (#12235)

paperless-ngx 2.20.9

Note

This release addresses a security issue (GHSA-386h-chg4-cfw9) and is recommended for all users. Our sincere thank you to the community members who reported this.

Bug Fixes

• Fixhancement: config option reset @shamoon (#12176)
• Fix: correct page count by separating display vs collection sizes for tags @shamoon (#12170)

All App Changes

2 changes

• Fixhancement: config option reset @shamoon (#12176)
• Fix: correct page count by separating display vs collection sizes for tags @shamoon (#12170)

Note
This release addresses a security issue (GHSA-x395-6h48-wr8v) and is recommended for all users. Our sincere thank you to the community members who reported this.

paperless-ngx 2.20.7

Breaking

Filename template rendering now uses a restricted safe document context for storage paths. Templates relying on unexpected/undocumented document model properties may no longer render and will fall back to default filename formatting.

Bug Fixes

• Fix: correct user dropdown button icon styling @shamoon (#12092)
• Fix: fix broken docker create_classifier command in 2.20.6 @shamoon (#11965)
• Performance fix: use subqueries to improve object retrieval in large installs @shamoon (#11950)

All App Changes

3 changes

• Fix: correct user dropdown button icon styling @shamoon (#12092)
• Fix: fix broken docker create_classifier command in 2.20.6 @shamoon (#11965)
• Performance fix: use subqueries to improve object retrieval in large installs @shamoon (#11950)

Note

This release addresses two security issues (GHSA-jqwv-hx7q-fxh3 and GHSA-w47q-3m69-84v8) and is recommended for all users. Our sincere thank you to the community members who reported these.

paperless-ngx 2.20.6

Bug Fixes

• Fix: extract all ids for nested tags @shamoon (#11888)
• Fix: prevent note deletion outside doc @shamoon e4b861d
• Performance: improve treenode inefficiencies @shamoon (#11606)
• Fixhancement: change date calculation for 'this year' to include future documents @shamoon (#11884)
• Fix: Running management scripts under rootless could fail @stumpylog (#11870)
• Fix: use correct field id for overrides @shamoon (#11869)

All App Changes

• 6 changes
• Fix: extract all ids for nested tags @shamoon (#11888)
• Fix: prevent note deletion outside doc @shamoon e4b861d
• Performance: improve treenode inefficiencies @shamoon (#11606)
• Fixhancement: change date calculation for 'this year' to include future documents @shamoon (#11884)
• Fix: Running management scripts under rootless could fail @stumpylog (#11870)
• Fix: use correct field id for overrides @shamoon (#11869)

paperless-ngx 2.20.5

Bug Fixes

• Fix: ensure horizontal scroll for long tag names in list, wrap tags without parent @shamoon (#11811)
• Fix: use explicit order field for workflow actions @shamoon @stumpylog (#11781)

All App Changes

2 changes

• Fix: ensure horizontal scroll for long tag names in list, wrap tags without parent @shamoon (#11811)
• Fix: use explicit order field for workflow actions @shamoon @stumpylog (#11781)

Note

This release addresses a security issue (GHSA-28cf-xvcf-hw6m) and is recommended for all users. Thank you to the community members who reported this.

paperless-ngx 2.20.4

Bug Fixes

• Fix: propagate metadata override created value @shamoon (#11659)
• Fix: support ordering by storage path name @shamoon (#11661)
• Fix: validate cf integer values within PostgreSQL range @shamoon (#11666)
• Fixhancement: add error handling and retry when opening index @shamoon (#11731)
• Fix: fix recurring workflow to respect latest run time @shamoon (#11735)

All App Changes

5 changes

• Fix: propagate metadata override created value @shamoon (#11659)
• Fix: support ordering by storage path name @shamoon (#11661)
• Fix: validate cf integer values within PostgreSQL range @shamoon (#11666)
• Fixhancement: add error handling and retry when opening index @shamoon (#11731)
• Fix: fix recurring workflow to respect latest run time @shamoon (#11735)

Note

This release addresses two security issues (GHSA-6653-vcx4-69mc and GHSA-24x5-wp64-9fcc) and is recommended for all users. Thank you to the community members who reported these.

paperless-ngx 2.20.2

Features / Enhancements

• Tweakhancement: dim inactive users in users-groups list @shamoon (#11537)

Bug Fixes

• Fix: Expanded SVG validation whitelist and additional checks @stumpylog (#11590)
• Fix: normalize allowed SVG tag and attribute names, add version @shamoon (#11586)
• Fix: pass additional arguments to TagSerializer for permissions @shamoon (#11576)

Maintenance

• Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @dependabot[bot] (#11515)

Dependencies

6 changes

• Chore: update Angular dependencies to 20.3.15 @shamoon (#11568)
• Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @dependabot[bot] (#11515)
• Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @dependabot[bot] (#11513)
• Chore(deps-dev): Bump @playwright/test from 1.56.1 to 1.57.0 in /src-ui @dependabot[bot] (#11514)
• Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @dependabot[bot] (#11512)
• docker(deps): bump astral-sh/uv from 0.9.14-python3.12-trixie-slim to 0.9.15-python3.12-trixie-slim @dependabot[bot] (#11533)

All App Changes

12 changes

• Fix: Expanded SVG validation whitelist and additional checks @stumpylog (#11590)
• Fixhancement: pass ordering to tag children @shamoon (#11556)
• Performance: avoid unnecessary filename operations on bulk custom field updates @shamoon (#11558)
• Fix: normalize allowed SVG tag and attribute names, add version @shamoon (#11586)
• Chore: refactor workflows code @shamoon (#11563)
• Fix: pass additional arguments to TagSerializer for permissions @shamoon (#11576)
• Chore: update Angular dependencies to 20.3.15 @shamoon (#11568)
• Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @dependabot[bot] (#11513)
• Chore(deps-dev): Bump @playwright/test from 1.56.1 to 1.57.0 in /src-ui @dependabot[bot] (#11514)
• Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @dependabot[bot] (#11512)
• Tweakhancement: dim inactive users in users-groups list @shamoon (#11537)
• Chore: add some output of social login errors @shamoon (#11527)

paperless-ngx 2.20.1

Bug Fixes

• Fix: set search term when using advanced search from global search @shamoon (#11503)
• Fix: change async handling of select custom field updates @shamoon (#11490)
• Fix: skip SSL for MariaDB ping in init script @danielrheinbay (#11491)
• Fix: handle allauth groups location breaking change @shamoon (#11471)

Dependencies

• docker(deps): Bump astral-sh/uv from 0.9.10-python3.12-trixie-slim to 0.9.11-python3.12-trixie-slim @dependabot[bot] (#11450)
• Chore(deps): Bump @angular/common from 20.3.12 to 20.3.14 in /src-ui @dependabot[bot] (#11481)

All App Changes

4 changes

• Fix: set search term when using advanced search from global search @shamoon (#11503)
• Fix: change async handling of select custom field updates @shamoon (#11490)
• Chore(deps): Bump @angular/common from 20.3.12 to 20.3.14 in /src-ui @dependabot[bot] (#11481)
• Fix: handle allauth groups location breaking change @shamoon (#11471)