Skip to content

Release history

wekan releases

The Open Source kanban, built with Meteor. GitHub issues/PRs are only for FLOSS Developers, not for support, support is at https://wekan.fi/commercial-support/ . New English strings for new features at imports/i18n/data/en.i18n.json . Non-English translations at https://app.transifex.com/wekan/wekan only.

Back to tool Latest release

All releases

100 shown

No immediate action
v9.34 Bug fix

Admin panel attachment move fix

Open
No immediate action
v9.33 New feature

Attachment storage backends + bulk move

Open
Upgrade now
v9.32 Security relevant
Auth RBAC RCE / SSRF

SSRF fix + role permission update

Open
Upgrade now
v9.31 Security relevant
Auth Breaking upgrade

GHSA fix + Header Login

Open
No immediate action
v9.30 Bug fix

Snap LXD network fixes

Open
No immediate action
v9.29 Maintenance

Routine maintenance and dependency updates.

Open
No immediate action
v9.28 Maintenance

Routine maintenance and dependency updates.

Open
Review required
v9.27 Bug fix
Dependencies

Snap build fix + pebble removal

Open
No immediate action
v9.26 Breaking risk

Ubuntu 26.04 base

Open
No immediate action
v9.25 Bugfix

Snap fix

Open
No immediate action
v9.24 Bug fix

Snap pidFilePath fix

Open
Upgrade now
v9.23 Security relevant

BFLABleed fix

Open
No immediate action
v9.22 Bug fix

Minicard drag handle fix

Open
No immediate action
v9.21 Bug fix

Bug fixes and stability improvements.

Open
No immediate action
v9.20 Bug fix

Attachments/avatars fallback fix

Open
Upgrade now
v9.19 Breaking risk
Dependencies

Board visibility + card panel

Open
v9.18 Bug fix
Notable features
  • Build scripts no longer change firewall settings
  • Release scripts now update version in the same script
Full changelog

This release adds the following updates:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.16 Bug fix

Fixed uploading attachment to card.

Full changelog

This release adds the following updates:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.09 Security relevant
Security fixes
  • Fixed AuthBleed – critical authentication bypass vulnerability
Full changelog

This release fixes the following CRITICAL SECURITY ISSUES of AuthBleed:

and adds the following updates:

and adds the following tests:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.08 New feature
Notable features
  • Added Snap Store listing and revision publishing scripts
Full changelog

This release adds the following updates:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.07 Security relevant
Security fixes
  • Fix avatars remote code execution (AvatarBleed) — critical security issue
Full changelog

This release fixes the following CRITICAL SECURITY ISSUES of AvatarBleed:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.06 Bug fix

Fixed Snap Candidate WRITABLE_PATH directory permissions bug.

Full changelog

This release adds the following updates:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.05 Bug fix

Fixed Snap Candidate attachments WRITABLE_PATH bug for Parallel Snap installs.

Full changelog

This release adds the following updates:

and fixes the following bugs:

  • Fix Snap Candidate attachments WRITABLE_PATH for Parallel Snap installs.
    Part 1,
    Part 2.
    Thanks to xet7.

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.04 Bug fix
⚠ Upgrade required
  • Upgrade MongoDB to version 7.0.32 across all deployment methods (standalone, Helm chart, Windows bundle).
Full changelog

This release adds the following updates:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.03 New feature
Notable features
  • Added board-attachments API endpoint
Full changelog

This release adds the following new features:

and adds the following updates:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.01 Breaking risk

Minor fixes and improvements.

Full changelog

This release adds the following updates:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v9.00 Bug fix
Notable features
  • Fixed UI hangs and data loss by disabling changeStreams
  • Fixed MongoDB replicaset setup in docker-compose.yml
  • Added permission checks to list width method
Full changelog

This release adds the following updates:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v8.90 Breaking risk
⚠ Upgrade required
  • Helm Charts repository changed from wekan/charts to wekan/wekan
  • ArtifactHub registry now references wekan/wekan instead of wekan/charts
Breaking changes
  • Removed jam:offline, jam:method, and jam:pub-sub packages from the codebase
Full changelog

v8.90 2026-04-16 WeKan ® release

This release adds the following updates:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v8.88 Bug fix

Prevents full-collection COLLSCAN queries and ensures standard GridFS indexing for efficient attachment lookups.

View release on GitHub
v8.84 Mixed
Notable features
  • Helm Chart: readiness, liveness, and startup probes now configurable
Full changelog

v8.84 2026-04-15 WeKan ® release

This release adds the following new features:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v8.83 Breaking risk
Breaking changes
  • Removed armhf (32-bit ARM) architecture from release scripts
  • Removed armhf (32-bit ARM) architecture from Docker builds
  • start-wekan.sh and start-wekan.bat no longer use Change Streams
Full changelog

v8.83 2026-04-14 WeKan ® release

This release adds the following updates:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v8.73 Bug fix

Fixed issues including broken Windows release links, inability to save card dates, and LDAP login failures caused by undefined ReactiveCache. Resolved errors in member/assignee selection, checklist reordering, and card/board activity logs. Removed unnecessary exclude-archs from rebuild-wekan.sh.

View release on GitHub
v8.72 Bug fix
Notable features
  • Fixed avatar display for impersonate user in Admin Panel
  • Fixed Admin Panel version display to show MongoDB storage engine name and Oplog status
Full changelog

v8.72 2026-04-07 WeKan ® release

This release adds the following new features and fixes:

and adds the following updates:

and fixes the following bugs:

Thanks to above GitHub users for their contributions and translators for their translations.

View release on GitHub
v8.71 Bug fix

A null pointer was prevented in notification handling, eliminating crashes when a notification lacked expected data. This improves stability and security of the system.

View release on GitHub
v8.70 Bug fix

Authentication code was refactored to use async upserts, eliminating race conditions and making login operations more reliable.

View release on GitHub
v8.69 Bug fix

Fixed a bug that prevented Snap from initializing MongoDB's op log, risking data inconsistencies and replication failures. The fix ensures the op log starts correctly, boosting write reliability.

View release on GitHub
v8.68 Bug fix

MongoDB op log initialization was corrected, preventing start-up failures for snap deployments and ensuring continuous replication works as expected.

View release on GitHub
v8.67 Bug fix

Fixed GitHub Actions release bundle builds, restoring reliable automated releases for administrators and developers.

View release on GitHub
v8.65 Bug fix

Fixed CI builds for Docker and GitHub Actions to prevent broken release bundles and test failures.

View release on GitHub
v8.62 Bug fix

Fixed a bug that caused GitHub Actions release bundles to fail, improving CI reliability for downstream builds.

View release on GitHub
v8.61 Bug fix

Build and release scripts were tightened to verify directories and repositories, reducing CI failures, and a server crash during comment deletion was fixed, improving stability and data integrity.

View release on GitHub
v8.60 Maintenance

The Docker build script was refreshed, improving container builds and aligning the CI pipeline with recent changes.

View release on GitHub
v8.58 Bug fix

Updated build documentation and corrected packaging bugs in Docker, Snap, and zip bundles, improving installation reliability across platforms.

View release on GitHub
v8.57 Bugfix

A Snap integration bug was corrected, lowering image upload failures and increasing deployment reliability for admins.

View release on GitHub
v8.56 Bugfix

A Snap installation bug was corrected, ensuring the application starts reliably and preventing installation failures on systems using Snap packages.

View release on GitHub
v8.55 Bug fix

Added a warning against using npm audit fix --force which breaks builds, updated several dependencies, and fixed bugs affecting card reports, board search, and Snap.

View release on GitHub
v8.54 Bug fix

The release reverts a refactored async upsert implementation that caused unpredictable behavior, restoring reliable database writes and preventing data inconsistency.

View release on GitHub
v8.52 Bugfix

The release fixed Docker and Snap deployment bugs, improving reliability of container and snap installations for all users.

View release on GitHub
v8.50 Bug fix

Uncommented build scripts, upgraded the exceljs library and other dependencies, and corrected workflow indentation to ensure reliable builds and CI runs.

View release on GitHub
v8.49 Bug fix

Fixed missing @meteorjs/reify module, docker-compose.yml configuration, and Snap packaging issues.

View release on GitHub
v8.47 Maintenance

Updated attachment and avatar storage paths to use WRITABLE_PATH/files/attachments for more flexible file location management.

View release on GitHub
v8.46 Maintenance

Updated release scripts and switched docker-compose.yml database backend from FerretDB/PostgreSQL to MongoDB.

View release on GitHub
v8.45 Maintenance

Updated release scripts and GitHub Actions workflow configurations. Multiple attempts to fix Snap packaging compatibility.

View release on GitHub
v8.44 Maintenance

Reverted from FerretDB/PostgreSQL to MongoDB 7.x. Updated dependencies and fixed data display without migrations, global search crashes, and myCards crashes.

View release on GitHub
v8.43 Maintenance
Breaking changes
  • Requires Meteor 3.4 and Node.js 22.22
Notable features
  • Excel export improvements
  • Attachment handling fixes
View release on GitHub
v8.42 Bugfix

Fixes critical bug where SSO authentication was completely broken and non-functional.

View release on GitHub
v8.38 Maintenance

Updates documentation and fixes empty user list display, missing translations visibility, and button styling inconsistencies.

View release on GitHub
v8.37 Bugfix

Fixes critical bug preventing card save functionality from working across the platform.

View release on GitHub
v8.36 Security relevant
Security fixes
  • IntegrationBleed RebindBleed vulnerability
Notable features
  • Swimlane/list/card copy-move operations
View release on GitHub
v8.34 Security relevant
Security fixes
  • GHSL-2026-035
  • GHSL-2026-036
  • GHSL-2026-037
Notable features
  • Helm Chart ingressClassName support
View release on GitHub
v8.32 Maintenance

Migrates OIDC, Sandstorm, and CAS authentication modules to async API for Meteor 3.0 compatibility. Updates MongoDB to 7.0.30.

View release on GitHub
v8.30 Bug fix

Reverts new UI design introduced in v8.29; includes bug fixes and performance improvements.

View release on GitHub
v8.28 Bug fix

Updates dependencies. Fixes text truncation in quick-access board links, card details CSS, Jade syntax errors, and async operation handling.

View release on GitHub
v8.27 Bug fix

Updates MongoDB documentation to 7.0.29. Fixes async/await handling in card copy and move dialog operations.

View release on GitHub
v8.26 Maintenance

Migrates accounts-lockout module to async API. Adds documentation for spreadsheet vs Kanban comparison. Fixes member settings menu and card operations.

View release on GitHub
v8.24 Maintenance

Adds secure VSCode sandbox for Debian 13; updates to Meteor 2.16. Replaces collection-mutations and speakingurl with lighter alternatives.

View release on GitHub
v8.23 Maintenance

Migrated dependencies (synced-cron, mousetrap, kadira:dochead), bumped tar package, and fixed default swimlane display and database migration issues.

View release on GitHub
v8.21 Security relevant
Security fixes
  • OrgsTeamsBleed
  • ChecklistRESTBleed
  • MigrationsBleed2
Notable features
  • Show password toggle at Login and Register
View release on GitHub
v8.20 Security relevant
Breaking changes
  • Migrations moved to Admin Panel/Settings/Cron
Security fixes
  • Permission checks enforcement on migrations
Notable features
  • Toggle Drag Handles feature
View release on GitHub

Beta — feedback welcome: [email protected]