Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: - @rocket.chat/core-typings@8.9.0-rc.5 - @rocket.chat/rest-typings@8.9.0-rc.5
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Minor Changes (#42476) Deprecates Custom OAuth authentication on workspaces without a Premium plan. Custom OAuth services keep working as they are today, but their admin settings now warn that version 9.0.0 will require a license including the oauth-enterprise module, and a warning is logged when an unlicens…
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: - @rocket.chat/core-typings@8.9.0-rc.3 - @rocket.chat/rest-typings@8.9.0-rc.3
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. (#42360) Restores the room list sidebar rows and group headers to their previous look, undoing the restyle introduced by the Fuselage upgrade Updated dependencies []: - @rocket.chat/core-typings@8.9.0-rc.2 - @rocket.chat/rest-typings@8.9.0-rc.2
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: - @rocket.chat/core-typings@8.9.0-rc.1 - @rocket.chat/rest-typings@8.9.0-rc.1
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Minor Changes (#41020) Adds a Realtime Message Composer, available as an opt-in Feature Preview (My Account → Feature Preview → Message → Realtime message composer). While the feature preview is off, the message composer keeps its current plain-text behavior. (#42150) Adds a new GET /v1/autotranslate.getProv…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0 Patch Changes Bump @rocket.chat/meteor version. (#42042 by @dionisio-bot) Fixes Omnichannel rooms failing to register agent responses (and showing send errors on messages and file uploads that were actually delivered) when the room carried corrupted visitor activity data created by older app integrations Updated dependencie…
Release 8.8.0 Release Date: September 3, 2026 Support Window: Supported until March 31, 2027 Summary Security and Compliance Security improvements, authentication changes, data protection, and vulnerability fixes. A new Force end-to-end encryption on private rooms setting under Administration > Workspace > End-to-end encryption encrypts every new private room and locks the toggle on in the create-…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.8.0-rc.2 @rocket.chat/rest-typings@8.8.0-rc.2
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Minor Changes (#41954) Promotes Voice Call Screen Sharing to stable by removing the beta alert from its setting and enabling the "In-Room" call interface for every call regardless of screen-share availability. Patch Changes Bump @rocket.chat/meteor version. (#41454) Fixes the message list silently loading the entire ro…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Minor Changes (#41307) Adds classification banners to ABAC-managed rooms: admins can describe US-Government-style classification markings (levels, special access programs, releasability, colors) in a new JSON setting, and matching rooms display a colored classification banner above the room header for all members. (#41…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 5.0, 6.0, 7.0 Apps-Engine: 1.55.3 Patch Changes Bump @rocket.chat/meteor version. (#41858 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41851 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#4185…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.2 Apps-Engine: 1.59.2 Patch Changes Bump @rocket.chat/meteor version. (#41857 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41850 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41841 by @dion…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.61.1 Patch Changes Bump @rocket.chat/meteor version. (#41855 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41844 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41863 by @dion…
Engine versions Node: 22.22.2 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.62.0 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41854 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41842 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.60.1 Patch Changes Bump @rocket.chat/meteor version. (#41856 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41849 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41864 by @dion…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.63.0 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41853 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41836 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41818 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41820 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41832 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41827 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Release 8.7.0 Release Date: August 6, 2026 Support Window: Supported until February 28, 2027 Summary Security and Compliance Security improvements, authentication changes, data protection, and vulnerability fixes. This release adds phishing-resistant MFA and a modern server-side OAuth flow with CSRF protection, state validation, and PKCE, enabled via Accounts_OAuth_Use_Modern_Flow under Manage > W…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.6 @rocket.chat/rest-typings@8.7.0-rc.6
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.5 @rocket.chat/rest-typings@8.7.0-rc.5
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. (#41588) Fixes audio attachments not being seekable using the progress slider Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.4 @rocket.chat/rest-typings@8.7.0-rc.4
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.3 @rocket.chat/rest-typings@8.7.0-rc.3
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.2 @rocket.chat/rest-typings@8.7.0-rc.2
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.1 @rocket.chat/rest-typings@8.7.0-rc.1
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1-rc.0 Minor Changes (#40351) Adds current field to DeviceManagementSession type and currentLoginToken parameter to aggregateSessionsByUserId, allowing the sessions endpoint to identify and flag the caller's active session. (#40721) ## Phishing-Resistant Multi-Factor Authentication Introduces a more secure and reliable server…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1-rc.0 Major Changes (#40721) ## Phishing-Resistant Multi-Factor Authentication Introduces a more secure and reliable server-side OAuth authentication flow. What’s New Improved OAuth login security OAuth authentication now happens fully on the server, reducing the risk of token theft, phishing attacks, and client-side credent…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.2 Apps-Engine: 1.59.1 Patch Changes Bump @rocket.chat/meteor version. (#41240 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41250 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41298 by @dionisio-bot) Ensures the users.CreateToken endpoint checks fo…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.60.1 Patch Changes Bump @rocket.chat/meteor version. (#41238 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41247 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41296 by @dionisio-bot) Ensures the users.CreateToken endpoint checks fo…