Caveat 🔥

These are the release notes of the upcoming release (pull requests merged to the main branch).

• ℹ️ this document is updated automatically by a bot (pr’s to categorize section)
• ℹ️ this document will be roughly updated manually once a week (put PRs + description to the right section)
• 🔥 We don’t guarantee stable APIs. They can still change until the official release
• 🔥 Integration against the upcoming release (currently master branch) is at your own risk

PRs to Categorize

• Patch vulnerabilities [main]
• Patch vulnerabilities [main]
• fix(deps): update dependency form-data from 4.0.3 to v4.0.4 (main)
• Authenticate /media-library/:id/download editing API endpoint
• Hide lightbox trigger for videos
• Fix downloading images with Cloudinary image service if use2025Behavior is not enabled
• Fix Dataloader maxBatchSize
• Move populate-reference-ids script to CLI one-time tasks
• Check Postgres references when deleting media
• chore(deps): update dependency puppeteer-core from 24.12.1 to v24.13.0 (main)
• Rename news agency category labels
• Rename news agency category labels
• fix(deps): update dependency open from 10.1.2 to v10.2.0 (main)
• fix(deps): update aws-sdk (main) (minor)
• Set media as publishedInDocument when scheduling a publication
• Only enable deletion routines with use2025Behavior
• fix(deps): update playwright monorepo from 1.53.2 to v1.54.1 (main) (minor)
• fix: show li-system-target-length on table dashboards
• chore(deps): update dependency eslint from 9.30.1 to v9.31.0 (main)
• fix(deps): update dependency sharp from 0.34.2 to v0.34.3 (main)
• fix(deps): update dependency @livingdocs/framework from 32.9.2 to v32.9.3 (main)
• chore(deps): update dependency @google-cloud/vision from 5.2.0 to v5.3.0 (main)
• Disable newlines in li-unique-id
• fix(deps): update dependency @livingdocs/framework from 32.8.8 to v32.9.2 (main)
• chore(deps): update dependency chai from 5.2.0 to v5.2.1 (main)
• Rename index-reference-ids migration to avoid number conflict
• fix(deps): update dependency @livingdocs/framework from 32.8.8 to v32.9.2 (main)
• Fix kordiam global es query
• Support cmd+click on back button to open in new window
• Li-Tree improvements for Rubrics
• Fix deletion routine reference extraction
• Prevent configuring news agency report content type multiple times
• fix(deps): update dependency @elastic/elasticsearch from 9.0.2 to v9.0.3 (main)
• fix(deps): update aws-sdk from 3.837.0 to v3.840.0 (main) (minor)

To get an overview about new functionality, read the Release Notes. To learn about the necessary actions to update Livingdocs to release-2025-09, read on.

Attention: If you skipped one or more releases, please also check the release-notes of the skipped ones.

Webinar

• Feature Webinar Recording: TODO
• Feature Webinar Documentation: TODO
• Dev Webinar Recording: TODO
• Dev Webinar Slides: TODO
• Release Newsletter Subscription

System Requirements

Suggested

Minimal

Deployment

Before the deployment

No pre-deployment steps are required before rolling out this release.

Rollout deployment

Migrate the Postgres Database

No migrations are required for this release.

After the deployment

No post-deployment steps are required after rolling out this release.

Rollback

No rollback steps are required for this release.

Breaking Changes 🔥

Migrate the Postgres Database 🔥

It’s a simple/fast migration with no expected data losses.

# run `livingdocs-server migrate up` to update to the newest database schema
livingdocs-server migrate up

TODO: check migration

Deprecations

Features

Vulnerability Patches

We are constantly patching module vulnerabilities for the Livingdocs Server and Livingdocs Editor as module fixes are available. Below is a list of all patched vulnerabilities included in the release.

Livingdocs Server

This release we have patched the following vulnerabilities in the Livingdocs Server:

• TBD

No known vulnerabilities. 🎉

Livingdocs Editor

This release we have patched the following vulnerabilities in the Livingdocs Editor:

• TBD

We are aware of the following vulnerabilities in the Livingdocs Editor:

• CVE-2023-44270 vulnerability in postcss, it affects linters using PostCSS to parse external Cascading Style Sheets (CSS). It is not exploitable in the editor as we don’t load untrusted external CSS at build time.
• CVE-2023-26116, CVE-2023-26118, CVE-2023-26117, CVE-2022-25869, CVE-2022-25844 are all AngularJS vulnerabilities that don’t have a patch available. We are working on removing all AngularJS from our code and vulnerabilities will go away when we complete the transition to Vue.js.

Patches

Here is a list of all patches after the release has been announced.

Livingdocs Server Patches

Livingdocs Editor Patches

Icon Legend

• Breaking changes: 🔥
• Feature: 🎁