Rocket.Chat — Collaboration product updates and releases, tracked on megachangelog.
Release 8.7.0 introduces phishing-resistant OAuth authentication, AI-powered semantic search with optional OpenAI integration, FIPS mode support for compliance, offline licensing for air-gapped deployments, persistent audio playback across rooms, and modernizes the REST API by replacing deprecated DDP methods. Additionally includes improved emoji support using native Unicode characters and enhanced admin settings with JSON validation.
Release candidate 8.7.0-rc.6 updates engine versions including Node 22.22.3, Deno 2.3.1, and MongoDB 8.0. Includes dependency updates and bumps to Rocket.Chat Meteor and core typings.
Release candidate update with updated dependencies and bumped Meteor version. Includes updated engine versions: Node 22.22.3, Deno 2.3.1, MongoDB 8.0, and Apps-Engine 1.65.1-rc.0.
Release candidate 8.7.0-rc.4 updates engine versions and fixes audio attachments to be seekable using the progress slider, along with dependency updates.
Release candidate 8.7.0-rc.3 with updated engine versions including Node 22.22.3, Deno 2.3.1, MongoDB 8.0, and Apps-Engine 1.65.1-rc.0. Includes dependency updates for core-typings and rest-typings packages.
Release candidate 8.7.0-rc.2 includes updated Engine versions (Node 22.22.3, Deno 2.3.1, MongoDB 8.0, Apps-Engine 1.65.1-rc.0) and dependency updates for core-typings and rest-typings packages.
Release candidate update with upgraded engine versions including Node 22.22.3, Deno 2.3.1, MongoDB 8.0, and Apps-Engine 1.65.1-rc.0. Dependencies updated for core typings and REST typings.
Rocket.Chat 8.7.0-rc.0 introduces phishing-resistant OAuth authentication, AI search with semantic results, FIPS mode support, persistent audio playback, and multiple REST API endpoints replacing deprecated DDP methods for better security and reliability.
Patch release with security hotfixes and permission checking improvements. Includes fixes for the users.CreateToken endpoint permission validation and consistent room permission checks when converting channels to teams or creating teams from existing rooms.
Patch release with security hotfixes, permission validation improvements for token generation and room conversion endpoints, and updated engine versions including Node 22.16.0, MongoDB 8.0, and Apps-Engine 1.60.1.
Patch release with security hotfixes and permission enforcement improvements. Fixes user token generation permission checks and ensures consistent room permission validation when converting channels to teams.
Patch release with security hotfixes and improved room permission consistency when converting channels to teams. Dependencies updated across multiple packages.
Patch release with security hotfixes, permission validation improvements for token generation and room operations, and dependency updates. Includes updates to Node 22.16.0, Deno 1.43.5, MongoDB 8.2, and multiple Rocket.Chat packages.
Patch release including security hotfixes, permission checking improvements for token generation and room operations, and a TypeScript type correction for FederationLookup in apps. Updates core dependencies and engine versions.
Patch release with security hotfixes and permission checks. Updates include enhanced authorization for token generation and consistent room permission validation for team operations, plus dependency updates for core typings and models.
Patch release with security hotfixes, permission checks for token generation and room operations, and updated dependencies. Engine versions updated to Node 22.22.3, Deno 2.3.1, MongoDB 8.0, and Apps-Engine 1.63.0.
Rocket.Chat 8.6.0 delivers security hardening including Virtru ABAC support and token validation improvements, enhanced messaging with voice call popout windows and LibreTranslate, platform extensibility through unified presence sync and new API endpoints, and infrastructure optimizations for faster room loading and search performance.
Version 8.5.0 delivers significant security hardening with stricter access controls and token handling across multiple systems including OAuth, SAML, and file uploads. New features include a Drafts sidebar group, message list virtualization for performance, custom sound REST APIs, improved ABAC administration, and updated runtime to Node.js 22.22.3 and Meteor 3.4.1.
Updated core dependencies including Meteor, core-typings, and rest-typings. Updated engine versions including Node 22.22.3, Deno 2.3.1, MongoDB 8.0, and Apps-Engine 1.63.0-rc.0.
Release candidate 8.5.0-rc.5 includes updated dependencies and bumped Meteor version. Engine versions updated to Node 22.22.3, Deno 2.3.1, MongoDB 8.0, and Apps-Engine 1.63.0-rc.0.
Release candidate update with bumped Meteor version and updated core typings and REST typings packages. Includes Node 22.22.3, MongoDB 8.0, and Apps-Engine 1.63.0-rc.0.
Release candidate with engine version updates (Node 22.22.3, Deno 2.3.1, MongoDB 8.0) and a fix to the Chat Limits locking mechanism allowing bot agents to skip the lock since they aren't subject to chat limits.
Fixed the Chat Limits locking mechanism to allow bot agents to bypass the lock, since they are not subject to rate limits. Updated engine dependencies including Node 22.16.0 and MongoDB 8.0.
Bumped Meteor version and fixed the Chat Limits locking mechanism to allow bot agents to skip the lock since they are not subject to rate limits. Updated core and REST typings dependencies.
Patch release with dependency updates and a fix to the Chat Limits locking mechanism that now allows bot agents to skip the lock since they aren't subject to rate limits.
Release candidate 8.5.0-rc.2 includes updated Node 22.22.3, Deno 2.3.1, MongoDB 8.0, and Apps-Engine 1.63.0-rc.0 with bumped dependencies for core-typings and rest-typings.
Security and stability patch addressing OAuth token cleanup after user deactivation, login token cleanup for idle users, access validation for message translation endpoints, and visitor token exposure. Multiple internal dependencies updated.
24 more changes from Rocket.Chat. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.