papra-hq Release Notes

Minor Changes

• #1491 a6ac457 Thanks @CorentinTh! - Manage document tags from the document details or the document list.
• #1486 f3d36aa Thanks @CorentinTh! - Format date according to the user's locale in the mobile app.
• #1482 cde1bf0 Thanks @CorentinTh! - Added multi-lang support. Currently, the supported languages are English, French, German, and Spanish. You can now switch between these languages in the app settings, it automatically detects your device's language, and you can also set a preferred language.

Patch Changes

• #1489 ff74b80 Thanks @CorentinTh! - Added app version and commit short hash in the app settings screen.
• #1485 588a1a1 Thanks @CorentinTh! - Fixed select and multi-select custom properties to display option names correctly (previously displayed as JSON).
• #1480 f81bee7 Thanks @CorentinTh! - Stack the alert dialog buttons vertically to avoid line breaks in long button labels on small screens.
• #1459 9b8d9d7 Thanks @CorentinTh! - Verify server initial ping response body to avoid interpreting 2xx responses that may be an auth proxy redirection.
• #1490 e3317d2 Thanks @CorentinTh! - Added a pull-to-refresh to the document details screen.
• #1488 9cc1cfb Thanks @CorentinTh! - Automatically load more documents as you scroll through the document list and search results, instead of showing only the first 20.

Minor Changes

#1474 aa26524 Thanks @CorentinTh! - API breaking change: The route to trash a document DELETE /api/organizations/:organizationId/documents/:documentId now returns a 204 No Content status code instead of { success: true } JSON body.

#1513 1f1a9ad Thanks @CorentinTh! - Added an API endpoint to reprocess existing documents POST /api/organizations/:organizationId/documents/:documentId/reprocess. This endpoint allows re-running content extraction + auto tagging and tagging rules on existing documents.

Patch Changes

#1531 4ac1d68 Thanks @CorentinTh! - Added Hungarian translation

#1468 4fef955 Thanks @CorentinTh! - Fonts are now bundled with the app, so that it can be used offline, and no longer depends on Bunny Fonts. A step towards making Papra fully air-gapped.

#1461 5d3063b Thanks @bartdenhoed! - Fixed missing refresh of the updatedAt db attribute.

#1529 1c993e4 Thanks @CorentinTh! - Add support for {{organization.name}} in document storage key patterns to organize files into folders named after your organizations.

#1469 347029d Thanks @CorentinTh! - Fixed OCR extraction for images whose rotation is stored in EXIF metadata.

#1525 7c9a96f Thanks @CorentinTh! - Added optional storage key synchronization so document renames are reflected in the underlying storage. Enable it with DOCUMENT_STORAGE_KEY_SYNC_ENABLED=true when using pattern-based storage keys.

#1519 82778df Thanks @CorentinTh! - Fixed document action menus wrapping longer translations by allowing the menu to expand.

#1532 50cbe2c Thanks @CorentinTh! - You can now configure Docling OCR languages and other conversion options with DOCLING_OPTIONS, using a JSON object such as {"ocr_lang":["en","fr"]}.

#1503 2993c6e Thanks @CorentinTh! - Security fix: Prevent custom OAuth providers from creating new accounts when registration is disabled, while allowing existing users to sign in.

Thanks to 白墨 for the responsible disclosure of this issue.

#1528 13a6d4a Thanks @CorentinTh! - Added document.date and document.createdAt to storage key patterns, so you can organize files by document date or creation date. Documents without a date use no-date (and can be configured with the default transformer).

#1517 956684c Thanks @CorentinTh! - Added a button to reprocess a document in the documents content tab.

#1428 76c4501 Thanks @jakubM817! - Add Slovak (sk) translation for the app.

#1511 71fdd27 Thanks @CorentinTh! - Fully disabled AI credit accounting by default for self-hosted instances to silence "Failed to register AI credit usage" logs.

#1470 a58b4f0 Thanks @CorentinTh! - Silenced the content extraction warning about DPI.

#1534 a03dc5a Thanks @CorentinTh! - Fix an issue that prevented reinviting users who left or were removed from an organisation.

#1545 193d860 Thanks @CorentinTh! - Added an option to restrict registration to specific email domains using AUTH_ALLOWED_EMAIL_DOMAINS. Forbidden domains still take precedence.

#1502 c16661e Thanks @CorentinTh! - Removed the default value for the intake email webhook validation secret to prevent ingestion of documents from untrusted sources when no secret is provided. Users must now explicitly set a secret using INTAKE_EMAILS_WEBHOOK_SECRET.

Thanks to 白墨 for the responsible disclosure of this issue.

Patch Changes

• #1324 8a3653c Thanks @CorentinTh! - Collapse the mobile menu sheet when navigating to a new page.
• #1453 a64cbba Thanks @CorentinTh! - Fixed an issue where setting AUTH_IS_REGISTRATION_ENABLED=false hid the sign-up interface but did not block email and password registrations made directly through the authentication API.
• #1442 03f4ad4 Thanks @sp71! - Include the tag name in the tag deletion confirmation message.
• #1407 30760f5 Thanks @CorentinTh! - Added a deletion confirmation modal when deleting a tagging rule, to prevent accidental deletion of tagging rules.
• #1326 0247a7a Thanks @CorentinTh! - Added some database indexes for better performances.
• #1416 5d43402 Thanks @ybizeul! - Fix PDF content preview rendering issue after navigation
• #1420 510c162 Thanks @qmarlats! - Fixed the batch document selection remaining in "select all matching documents" mode after unselecting documents.
• #1365 881796e Thanks @CorentinTh! - Increased and made configurable the timeout of content extraction external service.

Docling, Mistral OCR, and Azure DI can now take up to 5 minutes to process a document, instead of the previous 30 seconds, configurable via DOCLING_REQUEST_TIMEOUT_MS, MISTRAL_OCR_REQUEST_TIMEOUT_MS and AZURE_DI_REQUEST_TIMEOUT_MS respectively.

• #1432 a0ce312 Thanks @CorentinTh! - Prevent stripe webhook forgery for apps with unconfigured webhooks secrets.
• Thank you to Andrew Gonzalez (@bruhdev1290) for the responsible disclosure of this issue.
• #1362 8adb16d Thanks @CorentinTh! - Fix mistral ocr replacing tables with external references, no more tbl-0.md in extracted content, the tables are now properly extracted and included in the content.
• #1357 bad01b7 Thanks @CorentinTh! - Added a skeleton loader in the sidenav organization picker when fetching organizations
• #1352 0de24f5 Thanks @MarcSerraPeralta! - Added Catalan language
• #1348 12e1d4b Thanks @CorentinTh! - Security fix: document share links belonging to a soft-deleted organization were still publicly accessible. Public access (document metadata, file download, and password verification) now stops with a 410 Gone as soon as the organization is deleted, and resumes automatically if the organization is restored during the grace period.
• Thank you to Thammachart Sittharod for the responsible disclosure of this issue.
• #1406 d178643 Thanks @CorentinTh! - Security fix: revoke all user sessions on password reset.
• Thank you to MMartinez for the responsible disclosure of this issue.

#1312 aded832 Thanks @CorentinTh! - Greatly improved the performances when updating and deleting document from the sezarch index, avoiding unnecessary table scans. Noticeable improvement on large document collections (10k+ documents).

#1313 94f2a68 Thanks @CorentinTh! - Added visual loading state to the rename document modal.

#1317 35ce235 Thanks @CorentinTh! - Fix the coercion of AUTO_TAGGING_DEFAULT_MAX_TAGS that caused a validation error when the value is a string instead of a number. Now correctly converts the string to a number, preventing the validation error.

#1320 2ef3148 Thanks @CorentinTh! - Fix auto tagging schema definition for some ai providers (notably OpenAI and Anthropic), as they do not support all JSON schema features. It's really nice to have a common spec, if only all providers respected it...

#1323 74d98b2 Thanks @CorentinTh! - Added better logging when an error occurs during the structured data generation.

#1200 68fbacb Thanks @CorentinTh!

• Added AI auto-tagging. When document content is extracted, it can now be automatically tagged using AI. The system uses tag names and descriptions to determine the most relevant tags for the document, and can optionally create new tags if they don't already exist.

#1283 62ae3a0 Thanks @CorentinTh!

• Add support for external document content extraction/ocr, with multiple provider, and support for combining providers using document type filtering and fallback. Currently supported providers are:
  • Mistral OCR
  • Azure Document Intelligence
  • Docling server
  • Custom HTTP endpoint (configurable)
  • Internal Papra extraction engine (default)

#1179 63ec093 Thanks @CorentinTh!

• Replace the AWS S3 SDK (@aws-sdk/client-s3 + @aws-sdk/lib-storage) with the zero-dependency s3mini for document S3 storage. This removes 97 transitive packages (~23 MB unpacked) from the server, replacing them with a single more performant and dependency-free package.

#1246 677f81e Thanks @CorentinTh!

• Extracted and translated remaining hard coded texts, improving localization for non-English languages.

#1240 874354f Thanks @CorentinTh!

• Added mobile friendly hamburger menu in account settings.

#1172 0e970aa Thanks @CorentinTh!

• Set S3 checksum verification headers to "when required" to fix Backblaze B2 storage issues.

#1219 aef57ce Thanks @CorentinTh!

• Pined the Dockerfile node version sha to reduce supply chain attack surface.

#1152 632ac0f Thanks @CorentinTh!

• Fix the document preview being shrunk by very long document name not containing common break characters (spaces, dashes, ...)

#1184 e2c3aa6 Thanks @CorentinTh!

• Updated tesseract.js to v7 which should increase extraction performance by 15 to 35% on images, source.

#1235 ae42102 Thanks @CorentinTh!

• Added mobile friendly hamburger menu in organization settings.

#1196 4250141 Thanks @CorentinTh!

• Added missing translations in all non-English languages.

#1201 167fb8c Thanks @CorentinTh!

• Auto tagging can be configured per organization, with a dedicated page in organization settings. Owners can manage the following settings:
  • Enable or disable auto tagging for their organization.
  • Enable the creation of new tags if relevant tags do not exist.
  • Configure the maximum number of tags that can be automatically added to a document.

#1173 c541b1f Thanks @CorentinTh!

• Added the possibility to configure the file size polling interval for ingestion folder watchers.
• INGESTION_FOLDER_WATCHER_FILE_STABILITY_THRESHOLD_MS: The amount of time in milliseconds for a file size to remain constant before being consumed. This helps to avoid processing files that are still being written to (e.g., scanners, cameras, network shares, etc.).
• INGESTION_FOLDER_WATCHER_FILE_STABILITY_POLL_INTERVAL_MS: The interval in milliseconds at which the file size is polled while waiting for write to finish.

#1292 923e27a Thanks @CorentinTh!

• Document sort order fallback to the importation date when the sort order is set to other sort orders.

#1192 edbd368 Thanks @Pallavikumarimdb!

• Sort documents by document date instead of the created date.

#1296 df9f6c6 Thanks @CorentinTh!

• Fixed the inline tag picker lowercasing the typed name when suggesting a new tag, so newly created tags now keep their original casing (e.g. typing "Invoices" no longer suggests "invoices").

#1232 e853d09 Thanks @CorentinTh!

• Make the top navigation bar mobile-friendly: the search, import, and admin buttons now collapse to icon-only on small screens, and the user settings dropdown is now available on mobile devices.

#1155 e6de1ee Thanks @CorentinTh!

• Fix the displayed max organization count on the user admin page

#960 f4b361e Thanks @anbraten!

• Added the ability to save search queries as views, allowing quick access to frequently used searches. Saved views can be accessed from the sidebar.

#1130 4fc4f68 Thanks @CorentinTh!

• Added document sharing by link: generate a public link to share a document with anyone, without requiring a Papra account. Links can optionally be password-protected and given an expiration date, can be disabled/re-enabled, and are all manageable from a new organization-level "Share links" page.
• Laid out the base for the rate limit system.

#1111 1ecd2c8 Thanks @CorentinTh!

• Fix admin layout pushing the sidenav out of view when page content is long.

#1121 3a67507 Thanks @CorentinTh!

• Added the possibility to disable the initial startup execution of all scheduled tasks by setting the RUN_SCHEDULED_TASKS_ON_STARTUP_DEFAULT=false environment variable, mainly usefull for instance that reboot often, dev environments or fast startup requirements (few ms gained). Each task startup configuration remain individually configurable with their dedicated environment variable.

#1135 d73933a Thanks @CorentinTh!

• Added api-key permissions for managing custom properties

#1141 f93d6e1 Thanks @CorentinTh!

• Custom property definition deletion endpoint (DELETE /api/organizations/:organizationId/custom-properties/:propertyDefinitionId) now returns a 204 with no body instead of a 200 with an empty object.

#1133 a0f2455 Thanks @CorentinTh!

• Added the possibility to add notes to documents, which can be used to add additional information or context to a document.

#1109 d9bc129 Thanks @CorentinTh!

• Added the possibility to delete a user in the admin user details page.

#996 2a8bdec Thanks @magic0whi!

• Fix preview of pdfs without embedded fonts by packaging cmaps and custom fonts in the app assets. Increasing the bundle size by ~2mb, but it's worth it for the improved UX and compatibility with a wider range of pdfs.