Logging: Add logging categories for better log management
Fixes
Security: Harden security with CSP enforcement, SSRF redirect validation, reenabled S/MIME chain verify, IP spoofing prevention, and PDF iframe sandbox
Security: Harden proxy authentication and SSRF defenses
Security: Block plugins with dangerous JS patterns and enforce strict session secret length validation
S/MIME: Add self-signed certificate detection and update status messages for S/MIME signatures
Email: Auto-focus input fields in email composer for improved user experience (#126)
Mailbox: Prevent orphaning of nested mailboxes by restricting deduplication to root-level folders
JMAP: Strip server-immutable fields from updates before sending to JMAP (#128)
Files: Update file feature disabled messages and add stability warnings
i18n: Add missing translation keys to all non-English locales
Added keyboard navigation to the cards layout (#26976 by @HZooly)
Added native Tabs group interface. Uninstall the extension if currently using it to avoid unintended side effects. (#26836 by @bryantgillespie)
Added bulk folder deletion from the files grid with move-up or delete-all options (#26886 by @HZooly)
Used shorter tooltip delay for disabled elements (#26965 by @HZooly)
@directus/utils
Added parseNow utility to resolve the $NOW dynamic variable (#26954 by @costajohnt)
🐛 Bug Fixes & Optimizations
@directus/app
Fixed calendar picker crash when using dynamic variables (e.g. $NOW) (#26954 by @costajohnt)
Updated relationship_not_setup wording to clarify it may also result from missing permissions (#26918 by @Ikromjon1998)
Restored useItem support for custom query options like fields and deep by adding an optional extra query parameter and updating affected call sites. (#26985 by @LZylstra)
Fixed calendar picker crash when using dynamic variables (e.g. $NOW) (#26954 by @costajohnt)
@directus/schema
Fixed MySQL foreignKeys query to include TABLE_NAME in the JOIN condition, preventing a cartesian product when InnoDB statistics on system tables are degraded. (#26964 by @HattoriEnzo)
@directus/sdk
Fixed filter operator typing for date and time fields to support comparison and range operators. (#26957 by @costajohnt)
c93d2cd Fix scoutfs backend s3 upload with non-aligned size.
fbde51b be able to debug LDAP queries; be consistent between GetUserAccount() and ListUserAccounts() on how to build the search filters; objectClasses were missing in GetUserAccount research filter leading to a bad result for example when a posixgGroup have the same name as a posixUser.
eb0a8ee chore(deps): bump the dev-dependencies group with 10 updates
8fb020e chore(deps): bump the dev-dependencies group with 25 updates
5aa407d cleanup: ipa iam server debug logging done with debuglogger
b358e38 cleanup: minor fixes to ldap exported functions and test
24b1c45 cleanup: move debuglogger to top level for full project access
b46a486 cleanup: s3 iam server debug logging done with debuglogger
58117c0 feat: add get bucket location frontend handlers
8cad7fd feat: add response header overrides for GetObject
818e91e feat: adds x-amz-object-size in PutObject response headers
4c41b8b feat: changes cors implementation in s3 to store/retreive in meta bucket
Added support for importing data in the background (#26914)
Imports now automatically time out after 1 hour, with a maximum of 20 running concurrently. These limits can be configured via IMPORT_TIMEOUT and IMPORT_MAX_CONCURRENCY, respectively.
Improved build times using tsdown’s oxc-transform (#26604)
Exports previously available from @directus/types/collab are now exported directly from @directus/types
Shrunk app UI to 90% and converted all px to rem (16px browser default) (#26826)
Potential breaking change: The app UI has been shrunk to 90% of its previous size. Extensions that rely on hardcoded px values or the old 14px root font-size may render incorrectly — all app sizing now uses rem based on the 16px browser default.
@directus/api
Added support for importing data in the background (#26914 by @Nitwel)
@directus/types
Improved build times using tsdown’s oxc-transform (#26604 by @Nitwel)
@directus/specs
Updated fast-xml-parser, qs, minimatch, tar, undici, vue-split-panel and flatted dependencies (#26951 by @br41nslug)
✨ New Features & Improvements
@directus/app
Added support for importing data in the background (#26914 by @Nitwel)
Added utility endpoint and UI to generate translations collections and fields. (#26742 by @bryantgillespie)
Added deployment provider link on the run detail page, opening deployments directly in Vercel or Netlify dashboards. (#26888 by @LZylstra)
Shrunk app UI to 90% and converted all px to rem (16px browser default) (#26826 by @formfcw)
@directus/api
Added tool search tool for Anthropic AI provider to reduce context usage (#26864 by @bryantgillespie)
Added support for setting the secure attribute on OpenID/OAuth2 cookies via the AUTH_<PROVIDER>_COOKIE_SECURE environment variable (#26628 by @dstockton)
Updated FilesService.uploadOne to support an optional storage parameter (#26882 by @gaetansenn)
Added AI SDK Devtools middleware support for debugging AI Assistant in development only. Added AI telemetry provider (#26678 by @bryantgillespie)
config for Braintrust and Langfuse, enabling sending traces for observability, usage, and token costs.
Added utility endpoint and UI to generate translations collections and fields. (#26742 by @bryantgillespie)
Added support for Redis namespace control (#26943 by @dstockton)
@directus/errors
Added support for importing data in the background (#26914 by @Nitwel)
@directus/env
Added support for importing data in the background (#26914 by @Nitwel)
Added support for Redis namespace control (#26943 by @dstockton)
@directus/system-data
Added utility endpoint and UI to generate translations collections and fields. (#26742 by @bryantgillespie)
@directus/constants
Added utility endpoint and UI to generate translations collections and fields. (#26742 by @bryantgillespie)
@directus/extensions-sdk
Shrunk app UI to 90% and converted all px to rem (16px browser default) (#26826 by @formfcw)
@directus/themes
Shrunk app UI to 90% and converted all px to rem (16px browser default) (#26826 by @formfcw)
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
Added support for setting the secure attribute on OpenID/OAuth2 cookies via the AUTH_<PROVIDER>_COOKIE_SECURE environment variable (#26628 by @dstockton)
Added AI SDK Devtools middleware support for debugging AI Assistant in development only. Added AI telemetry provider (#26678 by @bryantgillespie)
config for Braintrust and Langfuse, enabling sending traces for observability, usage, and token costs.
Added cross origin opener policy settings (#26947 by @br41nslug)
@directus/ai
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/composables
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/constants
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/errors
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/extensions
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/extensions-registry
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
@directus/extensions-sdk
Updated @directus/tsconfig dependency from 3.0.0 to 4.0.0 (#26879 by @AlexGaillard)
Log in
