Hocuspocus 4

v4.4.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 13d Productivity & Wikis

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

collaborative-editing crdt prosemirror real-time self-hosted slatejs

+2 more

tiptap yjs

Summary

AI summary

Updates deps, feat, and fix across a mixed release.

Type	Severity	Summary	CVE
Feature	Medium	Adds `flushDelay` option for batching websocket updates Adds `flushDelay` option for batching websocket updates Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	Adds consistent state synchronization across Redis instances Adds consistent state synchronization across Redis instances Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency
Dependency	Low	Bumps actions/checkout from 6 to 7 in build process Bumps actions/checkout from 6 to 7 in build process Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	Bumps hono from 4.12.21 to 4.12.25 Bumps hono from 4.12.21 to 4.12.25 Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	Bumps ws from 8.19.0 to 8.21.0 for WebSocket handling Bumps ws from 8.19.0 to 8.21.0 for WebSocket handling Source: llm_adapter@2026-07-13 Confidence: high	—
Bugfix	Medium	Ensures `server.destroy()` runs only once Ensures `server.destroy()` runs only once Source: llm_adapter@2026-07-13 Confidence: high	—
Bugfix	Medium	Allows binding the server to a specific address Allows binding the server to a specific address Source: llm_adapter@2026-07-13 Confidence: high	—

Full changelog

feat: add flushDelay option for batching updates to reduce websocket traffic during heavy editing by @janthurau in https://github.com/ueberdosis/hocuspocus/pull/1118
feat: add consistent state synchronization across Redis instances by @janthurau in https://github.com/ueberdosis/hocuspocus/pull/1119
fix: make sure server.destroy() only runs once by @DefV in https://github.com/ueberdosis/hocuspocus/pull/1114
fix: allow binding the server to a specific address by @janthurau in https://github.com/ueberdosis/hocuspocus/pull/1121
build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/ueberdosis/hocuspocus/pull/1117
build(deps): bump hono from 4.12.21 to 4.12.25 by @dependabot[bot] in https://github.com/ueberdosis/hocuspocus/pull/1116
build(deps): bump ws from 8.19.0 to 8.21.0 by @dependabot[bot] in https://github.com/ueberdosis/hocuspocus/pull/1115

@DefV made their first contribution in https://github.com/ueberdosis/hocuspocus/pull/1114

Full Changelog: https://github.com/ueberdosis/hocuspocus/compare/v4.3.0...v4.4.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Hocuspocus 4

Get notified when new releases ship.

About Hocuspocus 4