megachangelog
Security8.1.7

Version 8.1.7

Patch release with security hotfixes, permission validation improvements for token generation and room operations, and dependency updates. Includes updates to Node 22.16.0, Deno 1.43.5, MongoDB 8.2, and multiple Rocket.Chat packages.

Engine versions

  • Node: 22.16.0
  • Deno: 1.43.5
  • MongoDB: 8.2
  • Apps-Engine: 1.59.2

Patch Changes

  • Bump @rocket.chat/meteor version.

  • (#41239 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)

  • (#41248 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)

  • (#41297 by @dionisio-bot) Ensures the users.CreateToken endpoint checks for the user-generate-access-token permission when generating a login token for another user

  • (#41289 by @dionisio-bot) Ensures room permission checks are applied consistently regardless of how the room is identified when converting a channel to a team or creating a team from an existing room

  • Updated dependencies [4511f54]:
    • @rocket.chat/core-typings@8.1.7
    • @rocket.chat/model-typings@2.0.9
    • @rocket.chat/models@2.0.9
    • @rocket.chat/abac@0.1.9
    • @rocket.chat/federation-matrix@0.0.18
    • @rocket.chat/license@1.1.16
    • @rocket.chat/media-calls@0.2.9
    • @rocket.chat/omnichannel-services@0.3.53
    • @rocket.chat/pdf-worker@0.3.35
    • @rocket.chat/presence@0.2.56
    • @rocket.chat/api-client@0.2.56
    • @rocket.chat/apps@0.6.9
    • @rocket.chat/core-services@0.12.9
    • @rocket.chat/cron@0.1.56
    • @rocket.chat/fuselage-ui-kit@27.0.7
    • @rocket.chat/gazzodown@27.0.7
    • @rocket.chat/http-router@7.9.23
    • @rocket.chat/message-types@0.1.0
    • @rocket.chat/rest-typings@8.1.7
    • @rocket.chat/ui-avatar@23.0.7
    • @rocket.chat/ui-client@27.0.7
    • @rocket.chat/ui-contexts@27.0.7
    • @rocket.chat/ui-voip@17.0.7
    • @rocket.chat/web-ui-registration@27.0.7
    • @rocket.chat/omni-core-ee@0.0.21
    • @rocket.chat/instance-status@0.1.56
    • @rocket.chat/omni-core@0.0.21
    • @rocket.chat/server-cloud-communication@0.0.2
    • @rocket.chat/network-broker@0.2.35
    • @rocket.chat/ui-theming@0.4.4
    • @rocket.chat/ui-video-conf@27.0.7
securitypatchpermissionsapidependencies

Source: original entry ↗

More from Rocket.Chat

Follow Rocket.Chat to get its new changes in your feed and email digest.

Fix8.5.4

Fixed message list scroll position when switching channels

Fixed issues where the message list scroll position would drift or jump to the latest messages after switching channels instead of restoring the previous scroll position. This ensures a better user experience when navigating between different chat channels.

fixuimessagingscrollchannels
Fix8.6.3

Patch 8.6.3

Patch release fixing app module resolution errors and startup failures with EACCES permissions in Docker deployments, plus updates to Meteor version and core dependencies.

patchappsdockerfix
Announcement8.9.0

8.9.0 LTS

Rocket.Chat 8.9.0 LTS introduces a realtime message composer, hybrid AI search with semantic and keyword retrieval, custom sidebar categories for enterprise users, improved video conferencing with dedicated call windows, new API endpoints for messages and call history, and enhanced draft handling. The release also deprecates Custom OAuth on non-Premium plans and Gravatar integration ahead of future major versions.

message-composerai-searchsidebarvideo-conferencingapi
See all Rocket.Chat changes →