Rocket.Chat 8.1.8 Patch Release
Security hotfix and improvements including per-client rate limiting for password reset requests, fixed special character escaping in Omnichannel visitor names, and dependency updates across core packages.
Engine versions
- Node:
22.16.0 - Deno:
1.43.5 - MongoDB:
8.2 - Apps-Engine:
1.59.2
Patch Changes
-
Bump @rocket.chat/meteor version.
-
(#41857 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint
-
(#41850 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#41841 by @dionisio-bot) Fixes special characters not being escaped in the visitor name shown in the Omnichannel queue side panel's message preview
-
Updated dependencies []:
- @rocket.chat/core-typings@8.1.8
- @rocket.chat/rest-typings@8.1.8
- @rocket.chat/abac@0.1.10
- @rocket.chat/federation-matrix@0.0.19
- @rocket.chat/license@1.1.17
- @rocket.chat/media-calls@0.2.10
- @rocket.chat/omnichannel-services@0.3.54
- @rocket.chat/pdf-worker@0.3.36
- @rocket.chat/presence@0.2.57
- @rocket.chat/api-client@0.2.57
- @rocket.chat/apps@0.6.10
- @rocket.chat/core-services@0.12.10
- @rocket.chat/cron@0.1.57
- @rocket.chat/fuselage-ui-kit@27.0.8
- @rocket.chat/gazzodown@27.0.8
- @rocket.chat/http-router@7.9.24
- @rocket.chat/message-types@0.1.0
- @rocket.chat/model-typings@2.0.10
- @rocket.chat/ui-avatar@23.0.8
- @rocket.chat/ui-client@27.0.8
- @rocket.chat/ui-contexts@27.0.8
- @rocket.chat/ui-voip@17.0.8
- @rocket.chat/web-ui-registration@27.0.8
- @rocket.chat/models@2.0.10
- @rocket.chat/server-cloud-communication@0.0.2
- @rocket.chat/network-broker@0.2.36
- @rocket.chat/omni-core-ee@0.0.22
- @rocket.chat/ui-theming@0.4.4
- @rocket.chat/ui-video-conf@27.0.8
- @rocket.chat/instance-status@0.1.57
- @rocket.chat/omni-core@0.0.22
Source: original entry ↗
More from Rocket.Chat
Follow Rocket.Chat to get its new changes in your feed and email digest.
8.9.0 LTS
Rocket.Chat 8.9.0 LTS introduces a realtime message composer, hybrid AI search with semantic and keyword retrieval, custom sidebar categories for enterprise users, improved video conferencing with dedicated call windows, new API endpoints for messages and call history, and enhanced draft handling. The release also deprecates Custom OAuth on non-Premium plans and Gravatar integration ahead of future major versions.
8.9.0-rc.5
Release candidate 8.9.0-rc.5 with engine version updates including Node >=22.22.3 or >=24.15.0, MongoDB 8.0, and Apps-Engine 1.67.0-rc.0. Includes dependency updates for core typings and REST typings packages.
Rocket.Chat 8.9.0-rc.4
Custom OAuth authentication will require a Premium license in version 9.0.0; workspaces without a Premium plan now see warnings in admin settings and logs. Audio and video attachments served through S3 or Google Cloud Storage proxy now support byte-range requests for proper duration display, seek functionality, and progress tracking.