Loomio

Productivity & Wikis

Collaborative decision-making tool that makes it easy for anyone to participate in decisions which affect them.

Ruby Latest v3.1.3 · 1d ago Security brief →

Features

View all 26 releases →

Review required

v3.1.3 Breaking risk 1d

Auth RBAC

Anonymous‑poll rollback + hardened APIs

Open

Upgrade now

v3.1.2 Security relevant 2d

Auth RBAC

Privacy fixes

Open

Upgrade now

v3.1.1 Breaking risk 3d

Auth RBAC RCE / SSRF

Security fixes

Open

Upgrade now

v3.1.0 Breaking risk 5d

Auth

Poll threads + tag unification + AI copy

Open

v3.0.24 Breaking risk 2mo

Fixed comment editing when admins discard comments.

Full changelog

Fixed: Prevent comment authors from editing or restoring comments that an admin has discarded.
Fixed: Preserve group ownership when creating discussions from templates in grouped contexts.
Improved: Hardened deployment/runtime behavior with trusted ingress IP allowlisting and exec-based Docker startup processes.
Improved: Removed obsolete hocuspocus SQLite persistence and legacy document-list template calls.
Improved: Background jobs now avoid retrying forever for records that have already been deleted.
Maintenance: Updated dependencies including Devise, Vite, Bootsnap, Rollup, Sentry, Nokogiri, Puma, and tzinfo-data.

Fixed: Do not notify the actor when they @mention their own group.
Fixed: Improved German discussion context-menu translations and documented known translation traps.
Fixed: Make received-email allow/block actions idempotent.
Fixed: Retry mark-as-seen when concurrent requests hit a unique-constraint race.
Fixed: Guard transcription analysis against detached blobs and non-rich-text records.
Improved: Migrated legacy Document records to ActiveStorage attachments and removed the legacy Document model/workers.
Improved: Removed Rails Pulse and related schema/dependency leftovers.
Improved: Removed legacy loomio_channel_server setup.
Improved: Raised the global request-per-IP throttle from 300 to 900 per 5 minutes.
Improved: Made demo cloning more reliable by skipping Rails Pulse and bulk-writing translations.
Maintenance: Updated dependencies including Nokogiri and Puma.