BookStack v25.11.6 has been released.
This is a security release to address a vulnerability in our dependencies related to XML
handling, which could allow users to replay SAML authentication requests with specially crafted & manipulated requests.
It's strongly advised to update if you're using SAML authentication for BookStack.
Warning
After upgrade, you need to run php bin/console doctrine:migrations:migrate (or equivalent) as webserver user after upgrade.. If you are running a docker container, use sudo docker exec --user=www-data partdb php bin/console doctrine:migrations:migrate, or sudo -E inside the docker container, to ensure that the migrations are applied to the correct database.
Tip
If you like Part-DB, consider donating to support the development. Press the sponsor button on the main github page, for more info.
Important
If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8
Log in
COMPOSER_EXTRA_PACKAGES env to docker containers, to install additional composer packages, like email bridges (#1138)Full Changelog: v2.2.1...v2.3.0
New
Bug Fixes
Enhancements:
Security
This release contains the following fixes and changes:
DISK_USAGE_CACHE environment variable. (#1426)SKIP_SYSTEMD environment variable. (#1448)Full Changelog: v0.16.1...v0.17.0
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)
0 will run the next hook (if any), and let the initiating action proceed if no other hooks object100 will stop processing successive hooks, but return success, letting the initiating action proceedstats-u to grant access to prometheus-metrics based on username, not just permissions b427d78mt button (webworkers) was enabled in the settings tabgrid volflag is applied during navigation if user has not set a preference a9378a8-j is usually a bad idea cad15fb
Note: This was originally accidentally published as v24.11.4, so this is essential a re-publish with the correct version.
The wrong version number commit/history has been retained though to prevent any breakages for git-managed environments.
This release contains the following fixes and changes:
Release v24.11.4
_by_id querying with M2A filters in GraphQL (#26233 by @ComfortablyCoding)@directus/app@14.3.0@directus/api@32.1.1
Note
If someone is asking you to pay money for access to UpSnap binaries, source code, or licenses, you are being scammed.
The official and only trusted source for UpSnap is this repository (and its linked releases).
Do not pay third parties for something that is provided here for free.
@directus/app@14.2.0@directus/api@32.1.0@directus/composables@11.2.7create-directus-extension@11.0.23@directus/env@5.3.2@directus/extensions@3.0.14@directus/extensions-registry@3.0.14@directus/extensions-sdk@17.0.3@directus/memory@3.0.12@directus/pressure@3.0.12@directus/schema-builder@0.0.9@directus/specs@11.2.0@directus/storage-driver-azure@12.0.12@directus/storage-driver-cloudinary@12.0.12@directus/storage-driver-gcs@12.0.12@directus/storage-driver-s3@12.0.12@directus/storage-driver-supabase@3.0.12@directus/stores@1.0.6@directus/system-data@3.4.2@directus/themes@1.1.8@directus/types@13.4.0@directus/utils@13.0.13@directus/validation@2.0.12@directus/sdk@20.2.0
This release contains the following fixes and changes:
SERVICE_PATTERNS environment variable to filter systemd services. (#1153)Full Changelog: v0.16.0...v0.16.1
smartctl in the Windows binary (experimental). (#1362)EXCLUDE_SMART environment variable to exclude devices from S.M.A.R.T. monitoring. (#1392)Full Changelog: v0.15.4...v0.16.0
This release contains the following fixes and changes:
@directus/app@14.1.2@directus/api@32.0.2@directus/composables@11.2.6create-directus-extension@11.0.22@directus/extensions-sdk@17.0.2
@directus/app@14.1.1@directus/api@32.0.1@directus/composables@11.2.5create-directus-extension@11.0.21@directus/env@5.3.1@directus/extensions@3.0.13@directus/extensions-registry@3.0.13@directus/extensions-sdk@17.0.1@directus/memory@3.0.11@directus/pressure@3.0.11@directus/schema-builder@0.0.8@directus/storage-driver-azure@12.0.11@directus/storage-driver-cloudinary@12.0.11@directus/storage-driver-gcs@12.0.11@directus/storage-driver-s3@12.0.11@directus/storage-driver-supabase@3.0.11@directus/system-data@3.4.1@directus/themes@1.1.7@directus/types@13.3.1@directus/utils@13.0.12@directus/validation@2.0.11
smartctl lookup. (#1362, #1363)intel_gpu_top parsing when engine instance id is in column. (#1230)henrygd/beszel-agent-nvidia Dockerfile to build latest smartmontools. (#1335)Full Changelog: v0.15.3...v0.15.4
Removed non-relational types from RELATIONAL_TYPES constant (#25964)
Extensions or external code using RELATIONAL_TYPES should note the excluded presentation and group.
Fixed <scope>.delete filter hook running after permission check. Fixed keys returned by the hook not being used in place of the original keys. (#26034)
Keys returned by the hook are now used in place of the original keys.
The hook will trigger regardless of user permissions. Ensure any necessary permission checks are performed prior to any data processing.
@directus/api
<scope>.delete filter hook running after permission check. Fixed keys returned by the hook not being used in place of the original keys. (#26034 by @ComfortablyCoding)@directus/constants
@directus/extensions-sdk
METRICS_NAME_PREFIX environment variable (#25819 by @ComfortablyCoding)mcp_enabled, mcp_allow_deletes, mcp_system_prompt_enabled and visual_editor_urls in telemetry reports (#25989 by @connorwinston)METRICS_NAME_PREFIX environment variable (#25819 by @ComfortablyCoding)RELATIONAL_TYPES constant (#25964 by @formfcw)directus_comments and directus_extensions to websocket subscriptions (#25464 by @ComfortablyCoding)node-schedule with cron (#25874 by @gaetansenn)tar-fs dependency from 2.1.3 to 2.1.4 (#25958 by @br41nslug)RELATIONAL_TYPES constant (#25964 by @formfcw)updateFields function to the SDK (#25889 by @br41nslug)undefined value in SDK query parsing (#25952 by @br41nslug)3.858.0 β 3.918.03.864.0 β 3.918.03.858.0 β 3.918.012.28.0 β 12.29.12.29.5 β 2.29.71.3.0 β 1.3.22.30.8 β 2.31.09.32.0 β 9.38.06.1.18 β 6.1.196.1.18 β 6.1.196.1.18 β 6.1.196.1.18 β 6.1.196.1.18 β 6.1.197.16.0 β 7.17.25.1.0 β 5.1.21.17.1 β 1.20.21001.0.0 β 1001.0.11000.0.31 β 1000.0.431000.0.18 β 1000.0.2528.0.6 β 28.0.916.0.1 β 16.0.30.34.38 β 0.34.414.1.0 β 4.4.32.10.4 β 2.76.11.10.2 β 2.3.00.5.1 β 0.6.03.2.24 β 3.2.253.1.1 β 3.1.21.4.9 β 1.4.109.0.8 β 9.0.95.0.0 β 5.1.06.4.17 β 7.0.31.5.5 β 1.5.67.7.0 β 7.7.113.6.0 β 14.0.013.6.0 β 14.0.013.6.0 β 14.0.04.5.0 β 4.7.00.43.1 β 0.44.01.11.0 β 1.12.21.8.0 β 1.8.35.4.1 β 5.6.25.0.0 β 5.0.214.0.0 β 14.0.26.0.0 β 6.0.13.2.6 β 3.3.017.2.1 β 17.2.30.25.9 β 0.25.119.32.0 β 9.38.010.4.0 β 10.5.17.6.5 β 7.6.611.3.0 β 11.3.216.3.0 β 16.4.018.0.1 β 20.0.1012.9.0 β 12.10.05.7.0 β 5.8.25.4.0 β 5.5.31.8.2 β 1.13.010.21.1 β 10.24.011.1.0 β 11.2.216.1.1 β 16.4.14.0.7 β 4.1.010.0.3 β 10.1.13.14.3 β 3.15.35.1.5 β 5.1.67.0.5 β 7.0.101.4.1 β 1.5.06.9.0 β 6.10.06.2.0 β 7.2.013.1.1 β 13.1.26.0.8 β 6.0.139.2.0 β 9.3.04.46.2 β 4.52.58.0.1 β 8.1.11.89.2 β 1.93.27.7.2 β 7.7.30.34.3 β 0.34.47.3.0 β 7.3.37.1.0 β 7.1.216.23.0 β 16.25.039.0.0 β 39.0.17.4.3 β 7.5.26.8.5 β 6.8.60.14.2 β 0.15.114.20.3 β 4.20.65.8.3 β 5.9.38.38.0 β 8.46.27.13.0 β 7.16.03.0.4 β 3.0.77.1.3 β 7.1.123.5.18 β 3.5.2211.1.11 β 11.1.124.5.1 β 4.6.33.0.5 β 3.1.24.0.14 β 4.1.124.0.1 β 4.0.2@directus/app@14.1.0@directus/api@32.0.0@directus/composables@11.2.4@directus/constants@14.0.0create-directus-extension@11.0.20create-directus-project@12.0.3@directus/env@5.3.0@directus/errors@2.0.5@directus/extensions@3.0.12@directus/extensions-registry@3.0.12@directus/extensions-sdk@17.0.0@directus/format-title@12.1.1@directus/memory@3.0.10@directus/pressure@3.0.10@directus/release-notes-generator@2.0.3@directus/schema@13.0.4@directus/schema-builder@0.0.7@directus/storage@12.0.3@directus/storage-driver-azure@12.0.10@directus/storage-driver-cloudinary@12.0.10@directus/storage-driver-gcs@12.0.10@directus/storage-driver-local@12.0.3@directus/storage-driver-s3@12.0.10@directus/storage-driver-supabase@3.0.10@directus/stores@1.0.5@directus/system-data@3.4.0@directus/themes@1.1.6@directus/types@13.3.0@directus/update-check@13.0.4@directus/utils@13.0.11@directus/validation@2.0.10@directus/sdk@20.1.1
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)
no-sb-lg or no-sb-md set then it'll apply when navigating into that volume, and vice-versa
INTEL_GPU_DEVICE environment variable to specify Intel GPU device. (#1285)shoutrrr and gopsutil dependencies.Full Changelog: v0.15.2...v0.15.3
Full Changelog: v0.15.1...v0.15.2
SMART_DEVICES environment variable to specify devices and types. (#373, #1335, docs)scsi, sntasmedia, and sntrealtek S.M.A.R.T. types. (#373, #1335)SHARE_ALL_SYSTEMS setting not working for containers. (#1334)Full Changelog: v0.15.0...v0.15.1
This release introduces initial support for S.M.A.R.T. disk health data. The documentation is a work in progress and may not cover all cases. Please report issues in #373.
Other changes:
henrygd/beszel-agent:alpine Docker image and include smartmontools in all non-base agent images.CONTAINER_DETAILS environment variable to control access to container logs and info. (#1305)Thanks to @geekifan for doing the initial work on the S.M.A.R.T. support!
Full Changelog: v0.14.1...v0.15.0
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)
h in the navpane fff7291--notooltips to default-disable tooltips a325353--dr option when the server is running on windows d3dd345unlistc* and the parent folder is not a volume cdd5e78og / opengraph / discord-embed fixes:
MFA_OTP env var to enable email-based one-time password for users and/or superusers.Full Changelog: v0.14.0...v0.14.1
