This release adds 10 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+11 more
Affected surfaces
ReleasePort's take
Moderate signalVersion v2.11.0 fixes a bug that incorrectly flagged users with 2FA as bots.
Why it matters: Patch to v2.11.0 immediately if your environment uses 2FA; the fix prevents false bot detections.
Summary
AI summaryFix prevents 2FA users from being incorrectly flagged as bots.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Protects signing URLs from indexing, caching, embedding Protects signing URLs from indexing, caching, embedding Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Breaking | Medium |
Removes default personal organizations from custom SSO Removes default personal organizations from custom SSO Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Adds pending signed PDF downloads Adds pending signed PDF downloads Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Adds new field overflow methods Adds new field overflow methods Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Adds granular signup disable flags Adds granular signup disable flags Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Adds custom branding for signing pages Adds custom branding for signing pages Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Supports DOCX uploads via Gotenberg Supports DOCX uploads via Gotenberg Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Adds admin organization deletion capability Adds admin organization deletion capability Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Allows users to add themselves in embed feature Allows users to add themselves in embed feature Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Adds DD-MM-YYYY date format variants Adds DD-MM-YYYY date format variants Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Low |
Allows adding oneself to embeds Allows adding oneself to embeds Source: granite4.1:30b@2026-05-23-audit Confidence: high |
— |
| Performance | Medium |
Dynamically imports PostHog for better performance Dynamically imports PostHog for better performance Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Performance | Medium |
Compresses signing-celebration.png from 20MB to 4MB Compresses signing-celebration.png from 20MB to 4MB Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
Prevents 2FA users from being flagged as bots Prevents 2FA users from being flagged as bots Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Paginates and searches member and group pickers Paginates and searches member and group pickers Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Removes translation tag from CSS textarea placeholder Removes translation tag from CSS textarea placeholder Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Low |
Lints the project codebase Lints the project codebase Source: granite4.1:30b@2026-05-23-audit Confidence: high |
— |
| Refactor | Medium |
Replaces linter with Biome Replaces linter with Biome Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Removes unnecessary DateRange type assertion Removes unnecessary DateRange type assertion Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
What's Changed
- fix: prevent 2fa users from being flagged as bots by @Mythie in https://github.com/documenso/documenso/pull/2748
- feat: allow add myself feature for embeds by @dguyen in https://github.com/documenso/documenso/pull/2754
- feat: remove default personal orgs from custom sso by @dguyen in https://github.com/documenso/documenso/pull/2741
- feat: add pending signed PDF downloads by @ephraimduncan in https://github.com/documenso/documenso/pull/2730
- feat: add DD-MM-YYYY date format variants by @catalinpit in https://github.com/documenso/documenso/pull/2767
- chore: extract translations by @github-actions[bot] in https://github.com/documenso/documenso/pull/2737
- fix: paginate and search member/group pickers by @Mythie in https://github.com/documenso/documenso/pull/2768
- chore: add translations by @Mythie in https://github.com/documenso/documenso/pull/2771
- feat: add new field overflow methods by @dguyen in https://github.com/documenso/documenso/pull/2715
- fix: replace linter with biome by @dguyen in https://github.com/documenso/documenso/pull/2645
- fix: lint project by @dguyen in https://github.com/documenso/documenso/pull/2693
- chore: extract translations by @github-actions[bot] in https://github.com/documenso/documenso/pull/2772
- chore: add translations by @Mythie in https://github.com/documenso/documenso/pull/2774
- feat: add granular signup disable flags by @ephraimduncan in https://github.com/documenso/documenso/pull/2765
- feat: add custom branding for signing pages by @Mythie in https://github.com/documenso/documenso/pull/2785
- perf: dynamically import posthog by @ephraimduncan in https://github.com/documenso/documenso/pull/2622
- feat: protect signing URLs from indexing, caching, and embedding by @ephraimduncan in https://github.com/documenso/documenso/pull/2469
- chore: extract translations by @github-actions[bot] in https://github.com/documenso/documenso/pull/2786
- chore: add translations by @Mythie in https://github.com/documenso/documenso/pull/2788
- chore: add section on personal organisations for SSO users by @dguyen in https://github.com/documenso/documenso/pull/2793
- chore: update French translations by @abdhenni in https://github.com/documenso/documenso/pull/2717
- chore: update fair use policy by @ElTimuro in https://github.com/documenso/documenso/pull/2798
- refactor: remove unnecessary DateRange type assertion by @anish1204 in https://github.com/documenso/documenso/pull/2790
- chore: remove github action caches by @dguyen in https://github.com/documenso/documenso/pull/2802
- feat: support DOCX uploads via Gotenberg by @Mythie in https://github.com/documenso/documenso/pull/2801
- fix: remove translation tag from css textarea placeholder by @Mythie in https://github.com/documenso/documenso/pull/2803
- chore: update docs to use editor instead of authoring by @dguyen in https://github.com/documenso/documenso/pull/2800
- chore: extract translations by @github-actions[bot] in https://github.com/documenso/documenso/pull/2796
- feat: add admin org deletion by @dguyen in https://github.com/documenso/documenso/pull/2795
- perf: compress signing-celebration.png from 20MB to 4MB by @ggoswami777 in https://github.com/documenso/documenso/pull/2781
- chore: extract translations by @github-actions[bot] in https://github.com/documenso/documenso/pull/2804
- chore: add translations by @Mythie in https://github.com/documenso/documenso/pull/2805
New Contributors
- @abdhenni made their first contribution in https://github.com/documenso/documenso/pull/2717
- @anish1204 made their first contribution in https://github.com/documenso/documenso/pull/2790
- @ggoswami777 made their first contribution in https://github.com/documenso/documenso/pull/2781
Full Changelog: https://github.com/documenso/documenso/compare/v2.10.0...v2.11.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]