⚠️ Potential Breaking Changes

Added multi-domain support for OAuth/OpenID (#26312)
SSO callback URL generation and redirect validation now includes port matching to ensure redirects target the correct server.

Fixed getAsset returning all file fields instead of only those allowed by the users permissions (#25905)
getAsset / GET /assets/:id now respects directus_files permissions when returning file based fields.

• @directus/app
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml)
    controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
    collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
    has now been fully removed.
  • Removed the "Comment" tab from the activities page (#26440 by @Abdallah-Awwad)
• @directus/api
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml)
    controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
    collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
    has now been fully removed.
  • Fixed getAsset returning all file fields instead of only those allowed by the users permissions (#25905 by @gaetansenn)
  • Added multi-domain support for OAuth/OpenID (#26312 by @gaetansenn)
  • Added a new AI_ENABLED environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
• @directus/system-data
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml)
    controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
    collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
    has now been fully removed.
• @directus/specs
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml)
    controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
    collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
    has now been fully removed.
• @directus/types
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml)
    controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
    collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
    has now been fully removed.
• @directus/sdk
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml)
    controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
    collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
    has now been fully removed.

✨ New Features & Improvements

• @directus/app
  • Added a new AI_ENABLED environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
  • Added concurrency control for file uploads via a new FILES_MAX_UPLOAD_CONCURRENCY env variable (#26424 by @thomas-svrts)
  • Added nested validation rules to validation error notice (#26389 by @robluton)
  • Added Comparison modal wysiwyg diff highlighting (#26301 by @robluton)
  • Fixed an issue that would cause some drawer header icons from being displayed too large (#26442 by @kekekuli)
• @directus/api
  • Added concurrency control for file uploads via a new FILES_MAX_UPLOAD_CONCURRENCY env variable (#26424 by @thomas-svrts)
• @directus/env
  • Added multi-domain support for OAuth/OpenID (#26312 by @gaetansenn)
  • Added a new AI_ENABLED environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
  • Added concurrency control for file uploads via a new FILES_MAX_UPLOAD_CONCURRENCY env variable (#26424 by @thomas-svrts)
  • Added support for specifying a KMS Key ID in S3 storage when using aws:kms Server Side Encryption (#26377 by @Joey92)
• @directus/types
  • Added missing MCP settings types. (#26469 by @bryantgillespie)
• @directus/storage-driver-s3
  • Added support for specifying a KMS Key ID in S3 storage when using aws:kms Server Side Encryption (#26377 by @Joey92)

🐛 Bug Fixes & Optimizations

• @directus/app
  • Added multi-domain support for OAuth/OpenID (#26312 by @gaetansenn)
  • Improves behavior of the in-studio back button (#26427 by @rijkvanzanten)
  • Fixed disabled state for datetime, file, select-dropdown-m2o & collection-item dropdowns interfaces (#26365 by @ComfortablyCoding)
  • Fixed GraphQL error when duplicating M2A items with same name fields of conflicting types. (#26367 by @dstockton)
  • Enforces the eslint vue/no-undef-components rule in the sourcecode (#26390 by @rijkvanzanten)
  • Fixed incorrect initial slider fill position when the midpoint is not a valid stepped value (#26408 by @DamnItAzriel)
  • Fixed sticky column background in M2M list interface (#26401 by @vdr-smartdev-trinh)
  • Improved system permissions collection picker to support easier multi-selection (#26410 by @thanhle98)
  • Enforced PascalCase usage within app source code (#26391 by @rijkvanzanten)
  • Cleaned up header button inconsistencies (#26375 by @rijkvanzanten)
  • Replaced the local useLocalStorage composable with the VueUse equivalent (#26303 by @tydung26)
  • Disable text highlighting for draggable vue elements in Chrome and Firefox (#26413 by @DanielRubianes)
  • Fix markdown editor layout when a minimum input height is applied (#26430 by @DamnItAzriel)
  • Added image validation type for file image upload (#25946 by @gaetansenn)
• @directus/api
  • Updated nodemailer dependency from 7.0.10 to 7.0.11 (#26288 by @dependabot)
  • Added system index for revisions.activity (#26479 by @br41nslug)
  • Fixed cockroachdb failing on "Add Marketplace" migration (#26467 by @ComfortablyCoding)
  • Fixed password reset timing (#26485 by @br41nslug)
  • Fixed MySQL migration compatibility with sql_require_primary_key (#26374 by @gaetansenn)
  • Fix permission cache to respect CACHE_SYSTEM_TTL (#26295 by @clintmoyer)
  • Improved CockroachDB database introspection performance (#26393 by @br41nslug)
• @directus/types
  • Updated nodemailer dependency from 7.0.10 to 7.0.11 (#26288 by @dependabot)
• @directus/system-data
  • Added system index for revisions.activity (#26479 by @br41nslug)
  • Added a new AI_ENABLED environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
• @directus/memory
  • Fix permission cache to respect CACHE_SYSTEM_TTL (#26295 by @clintmoyer)
• @directus/sdk
  • Added a new AI_ENABLED environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
  • Fixed conversion of fields from object notation to dot syntax in SDK subscription queries (#26397 by @bruno-costa)
• @directus/schema
  • Improved CockroachDB database introspection performance (#26393 by @br41nslug)
• @directus/themes
  • Enforced PascalCase usage within app source code (#26391 by @rijkvanzanten)
• @directus/schema-builder
  • Fixed singleton support (#26478 by @licitdev)
• @directus/storage-driver-supabase
  • Fixed an issue where the Supabase storage driver would fail if the root folder is the empty string. (#26384 by @aderugy)

📦 Published Versions

• @directus/app@15.0.0
• @directus/api@33.0.0
• @directus/composables@11.2.9
• create-directus-extension@11.0.25
• @directus/env@5.4.0
• @directus/extensions@3.0.16
• @directus/extensions-registry@3.0.16
• @directus/extensions-sdk@17.0.5
• @directus/memory@3.0.14
• @directus/pressure@3.0.14
• @directus/schema@13.0.5
• @directus/schema-builder@0.0.11
• @directus/specs@12.0.0
• @directus/storage-driver-azure@12.0.14
• @directus/storage-driver-cloudinary@12.0.14
• @directus/storage-driver-gcs@12.0.14
• @directus/storage-driver-s3@12.1.0
• @directus/storage-driver-supabase@3.0.14
• @directus/system-data@4.0.0
• @directus/themes@1.2.1
• @directus/types@14.0.0
• @directus/utils@13.1.1
• @directus/validation@2.0.14
• @directus/sdk@21.0.0