Added keyboard navigation to the cards layout (#26976 by @HZooly)
Added native Tabs group interface. Uninstall the extension if currently using it to avoid unintended side effects. (#26836 by @bryantgillespie)
Added bulk folder deletion from the files grid with move-up or delete-all options (#26886 by @HZooly)
Used shorter tooltip delay for disabled elements (#26965 by @HZooly)
@directus/utils
Added parseNow utility to resolve the $NOW dynamic variable (#26954 by @costajohnt)
π Bug Fixes & Optimizations
@directus/app
Fixed calendar picker crash when using dynamic variables (e.g. $NOW) (#26954 by @costajohnt)
Updated relationship_not_setup wording to clarify it may also result from missing permissions (#26918 by @Ikromjon1998)
Restored useItem support for custom query options like fields and deep by adding an optional extra query parameter and updating affected call sites. (#26985 by @LZylstra)
Fixed calendar picker crash when using dynamic variables (e.g. $NOW) (#26954 by @costajohnt)
@directus/schema
Fixed MySQL foreignKeys query to include TABLE_NAME in the JOIN condition, preventing a cartesian product when InnoDB statistics on system tables are degraded. (#26964 by @HattoriEnzo)
@directus/sdk
Fixed filter operator typing for date and time fields to support comparison and range operators. (#26957 by @costajohnt)
c93d2cd Fix scoutfs backend s3 upload with non-aligned size.
fbde51b be able to debug LDAP queries; be consistent between GetUserAccount() and ListUserAccounts() on how to build the search filters; objectClasses were missing in GetUserAccount research filter leading to a bad result for example when a posixgGroup have the same name as a posixUser.
eb0a8ee chore(deps): bump the dev-dependencies group with 10 updates
8fb020e chore(deps): bump the dev-dependencies group with 25 updates
5aa407d cleanup: ipa iam server debug logging done with debuglogger
b358e38 cleanup: minor fixes to ldap exported functions and test
24b1c45 cleanup: move debuglogger to top level for full project access
b46a486 cleanup: s3 iam server debug logging done with debuglogger
58117c0 feat: add get bucket location frontend handlers
8cad7fd feat: add response header overrides for GetObject
818e91e feat: adds x-amz-object-size in PutObject response headers
4c41b8b feat: changes cors implementation in s3 to store/retreive in meta bucket
Added support for importing data in the background (#26914)
Imports now automatically time out after 1 hour, with a maximum of 20 running concurrently. These limits can be configured via IMPORT_TIMEOUT and IMPORT_MAX_CONCURRENCY, respectively.
Improved build times using tsdownβs oxc-transform (#26604)
Exports previously available from @directus/types/collab are now exported directly from @directus/types
Shrunk app UI to 90% and converted all px to rem (16px browser default) (#26826)
Potential breaking change: The app UI has been shrunk to 90% of its previous size. Extensions that rely on hardcoded px values or the old 14px root font-size may render incorrectly β all app sizing now uses rem based on the 16px browser default.
@directus/api
Added support for importing data in the background (#26914 by @Nitwel)
@directus/types
Improved build times using tsdownβs oxc-transform (#26604 by @Nitwel)
@directus/specs
Updated fast-xml-parser, qs, minimatch, tar, undici, vue-split-panel and flatted dependencies (#26951 by @br41nslug)
β¨ New Features & Improvements
@directus/app
Added support for importing data in the background (#26914 by @Nitwel)
Added utility endpoint and UI to generate translations collections and fields. (#26742 by @bryantgillespie)
Added deployment provider link on the run detail page, opening deployments directly in Vercel or Netlify dashboards. (#26888 by @LZylstra)
Shrunk app UI to 90% and converted all px to rem (16px browser default) (#26826 by @formfcw)
@directus/api
Added tool search tool for Anthropic AI provider to reduce context usage (#26864 by @bryantgillespie)
Added support for setting the secure attribute on OpenID/OAuth2 cookies via the AUTH_<PROVIDER>_COOKIE_SECURE environment variable (#26628 by @dstockton)
Updated FilesService.uploadOne to support an optional storage parameter (#26882 by @gaetansenn)
Added AI SDK Devtools middleware support for debugging AI Assistant in development only. Added AI telemetry provider (#26678 by @bryantgillespie)
config for Braintrust and Langfuse, enabling sending traces for observability, usage, and token costs.
Added utility endpoint and UI to generate translations collections and fields. (#26742 by @bryantgillespie)
Added support for Redis namespace control (#26943 by @dstockton)
@directus/errors
Added support for importing data in the background (#26914 by @Nitwel)
@directus/env
Added support for importing data in the background (#26914 by @Nitwel)
Added support for Redis namespace control (#26943 by @dstockton)
@directus/system-data
Added utility endpoint and UI to generate translations collections and fields. (#26742 by @bryantgillespie)
@directus/constants
Added utility endpoint and UI to generate translations collections and fields. (#26742 by @bryantgillespie)
@directus/extensions-sdk
Shrunk app UI to 90% and converted all px to rem (16px browser default) (#26826 by @formfcw)
@directus/themes
Shrunk app UI to 90% and converted all px to rem (16px browser default) (#26826 by @formfcw)
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
Added support for setting the secure attribute on OpenID/OAuth2 cookies via the AUTH_<PROVIDER>_COOKIE_SECURE environment variable (#26628 by @dstockton)
Added AI SDK Devtools middleware support for debugging AI Assistant in development only. Added AI telemetry provider (#26678 by @bryantgillespie)
config for Braintrust and Langfuse, enabling sending traces for observability, usage, and token costs.
Added cross origin opener policy settings (#26947 by @br41nslug)
@directus/ai
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/composables
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/constants
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/errors
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/extensions
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/extensions-registry
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/extensions-sdk
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
UpSnap is, and always will be, free and open source software.
If someone is asking you to pay money for access to UpSnap binaries, source code, or licenses, you are being scammed.
The official and only trusted source for UpSnap is this repository (and its linked releases).
Do not pay third parties for something that is provided here for free.
This is a security release to address a vulnerability where the registration form could be manipulated to gain access to additional roles.
Upgrade is very strongly advised if your instance has user registration enabled.
Thanks to Kwonyong Lee (LinkedIn) for responsibly reporting this issue.
Also thanks to Boustani OSAMA (LinkedIn) for also reporting this before public announcement.
Full List of Changes
Updated user creation to only use validated input from registration.
Updated PHP package versions.
Updated translations with latest Crowdin changes. (#6064)
Updated PHP_CodeSniffer repository link. Thanks to @rodrigoprimo. (#6060)
Updated WYSIWYG editors to have consistent collapsible block double click behavior. (#6059)
cosmetic filter to exclude specific files from directory listings by adding their filenames to a textfile named .hidden similar to many linux desktop file managers
the files are still easily available from various APIs; this is not a security feature, just a way to keep things neat and tidy
#1372#1333 no thumbnails if the server OS was too old to have JXL support and the webbrowser was asking for JXL 1afe48b
#1363 new-version alert would only appear if the visitor had the Admin permission in the webroot specifically; now A in any volume is sufficient 6eb4f0a
UpSnap is, and always will be, free and open source software.
If someone is asking you to pay money for access to UpSnap binaries, source code, or licenses, you are being scammed.
The official and only trusted source for UpSnap is this repository (and its linked releases).
Do not pay third parties for something that is provided here for free.
Changelog
Bug fixes
105ae4f: fix: static page reload fails, use search param device id, close #1711 (@seriousm4x)
UpSnap is, and always will be, free and open source software.
If someone is asking you to pay money for access to UpSnap binaries, source code, or licenses, you are being scammed.
The official and only trusted source for UpSnap is this repository (and its linked releases).
Do not pay third parties for something that is provided here for free.
Log in
