Skip to content

Release history

richdocuments releases

Collabora Online for Nextcloud

All releases

30 shown

Review required
v8.5.17 Bug fix
Auth RBAC

Post‑message verification + auth fix

Upgrade now
v8.4.16 Security relevant
Auth

Post‑message origin verification fix

Review required
v9.2.0 Mixed
Auth RBAC

Markdown editing + auth & security fixes

Review required
v10.3.0 Mixed
Auth RBAC

Markdown editing + auth fixes

Review required
v11.1.0 Mixed
Auth RBAC

Markdown editing + auth fixes

Review required
v8.8.2 Bug fix
Auth RBAC

Authorization & origin verification fixes

Upgrade now
v8.4.15 Bug fix
Auth

Initiator token & server trust fixes

Upgrade now
v8.5.16 Security relevant
Auth

Token verification + trust check

Upgrade now
v8.8.1 Bug fix
Auth

Save as operations

Review required
v9.1.1 Bug fix
Auth RBAC

Initiator token + cache + DB fixes

Review required
v10.2.1 Bug fix
Auth

Initiator checks + cache + DB index

Upgrade now
v11.0.1 Bug fix
Auth RBAC

Initiator token + server trust fixes

Monitor
v8.5.15 Bug fix

File name validation

Review required
v8.8.0 Mixed
Dependencies

Configurable preview limits + WOPI token cleanup

No immediate action
v9.1.0 Mixed

Preview config + WOPI cleanup + Encryption

No immediate action
v10.2.0 Mixed

Timeout config + cold start retry + WOPI token cleanup

No immediate action
v11.0.0 Mixed

Direct Editing API + config + bugfixes

v8.7.9 Bug fix

Fixed allowing only auth token types to request config access.

Full changelog

Fixed

  • Only allow setting auth token types to request config access by @elzody in #5610

Other

  • Update nextcloud/ocp dependency by @nextcloud-command in #5433
v9.0.6 Bug fix

Fixed overlapping buttons in the header UI.

Full changelog

Fixed

  • Rate limit wopi endpoints by @elzody in #5615
  • Only allow setting auth token types to request config access by @elzody in #5611
  • Properly validate old timestamp by @elzody in #5608
  • Allow server-side file reads in SecureViewWrapper by @chrip in #5590
  • Handle fopen() returning false for non-existent paths by @chrip in #5584
  • Check read permission before showing PDF edit action by @elzody in #5563
  • Hide sidebar in edit mode by @elzody in #5525
  • Allow to leave edit mode by @mejo- in #5517
  • Fix overlapping buttons in header by @silverkszlo in #5604
  • Allow using regular document files as templates by @meven in #5547

Other

  • Fix npm audit by @nextcloud-command in #5596
  • Update nextcloud/ocp dependency by @nextcloud-command in #5595
  • Update nextcloud/ocp dependency by @nextcloud-command in #5570
  • Update nextcloud/ocp dependency by @nextcloud-command in #5560
  • Bump ts-loader from 9.5.4 to 9.5.7 by @dependabot[bot] in #5542
  • Update nextcloud/ocp dependency by @nextcloud-command in #5534
  • Update nextcloud/ocp dependency by @nextcloud-command in #5510
  • Bump cypress-split from 1.24.28 to 1.24.31 by @dependabot[bot] in #5507
  • Fix npm audit by @nextcloud-command in #5489
v10.1.3 Bug fix

Check read permission before showing PDF edit action.

Full changelog

Fixed

  • Rate limit wopi endpoints by @elzody in #5616
  • Only allow setting auth token types to request config access by @elzody in #5612
  • Properly validate old timestamp by @elzody in #5609
  • Allow server-side file reads in SecureViewWrapper by @chrip in #5591
  • Mark wopi token as sensitive also on controller level by @nickvergessen in #5585
  • Handle fopen() returning false for non-existent paths by @chrip in #5583
  • Use oci 18 container by @elzody in #5580
  • Check read permission before showing PDF edit action by @nfebe in #5562
  • Hide sidebar in edit mode by @elzody in #5526
  • Allow to leave edit mode by @mejo- in #5518
  • Remove unneeded action by @elzody in #5410
  • Stabilize save as test by @elzody in #5313
  • Fix overlapping buttons in header by @silverkszlo in #5603
  • Allow using regular document files as templates by @meven in #5548

Other

  • Update nextcloud/ocp dependency by @nextcloud-command in #5593
  • Bump phpseclib by @elzody in #5581
  • Update nextcloud/ocp dependency by @nextcloud-command in #5569
  • Bump ts-loader from 9.5.4 to 9.5.7 by @dependabot[bot] in #5541
  • Bump cypress-split from 1.24.28 to 1.24.31 by @dependabot[bot] in #5505
  • Update nextcloud/ocp dependency by @nextcloud-command in #5488
v9.0.5 Bug fix

Fixed viewer header visibility issue that occurred after iframe z-index changes.

v10.1.2 Bug fix

Fixed viewer header visibility issue that occurred after iframe z-index changes.

v10.1.1 New feature
Notable features
  • share button for non-shareable documents
  • access key for local editor button
v8.5.14 Bug fix

Minor compatibility fixes for drawing file types and form filling features on the v8.5 maintenance branch.

v8.7.8 Bug fix
Security fixes
  • Fixed non-admins uploading/deleting system config settings
v9.0.3 Bug fix
Security fixes
  • Fixed non-admins uploading/deleting system config settings
v10.1.0 New feature
Security fixes
  • Fixed non-admins uploading/deleting system config settings
Notable features
  • AI watermarking implementation
v10.0.1 Maintenance

Updated database schema to use Doctrine string type for improved compatibility.

v10.0.0 Bug fix
Notable features
  • file type icon favicon
  • proper files:node:updated event emission

Beta — feedback welcome: [email protected]