Bookstack - Package Updates

[Package Updates]

[1.46.1]

• Update BookStack to 25.12.1
• Full Changelog
• Updated application PHP dependencies.
• Add some additional resource-based limits. (#​5968)
• Updated translations with latest Crowdin changes. (#​5962)

[Package Updates]

[1.46.3]

• Update BookStack to 25.12.3
• Full Changelog
• Page Content - As of this release, most types of form content are now removed from page content on render. If you applied customizations which made use of in-page form content, you may now need to find alternative methods.
• Updated application PHP dependencies.
• Updated session-based API authentication to only be active for GET requests.
• Updated page content filtering to remove many common form elements & attributes.
• Updated translations with latest Crowdin changes. (#5997)

[Package Updates]

[1.46.4]

• Update BookStack to 25.12.5
• Full Changelog
• This release specifically addresses folder permission issues (often showing as an error when attempting to access content) which could occur from changes introduced in v25.12.4.
• Updated filter caching folder handling to avoid server filesystem permission issues. (#​6023)
• Added new option for more granular page filter control.
• Updated page content filtering to detect extra cases, and to apply a more aggressive allow-list style filter.

[Package Updates]

[1.46.7]

• Update BookStack to 25.12.8
• Full Changelog
• Fixed content filtering removing link target attribute, which would impact "New Window" links. (#​6034)
• Fixed content filtering to not remove user references in comments.
• Updated PHP package versions.

[Package Updates]

[1.46.8]

• Update BookStack to 25.12.9
• Full Changelog
• Updated page revision diffs to use content filtering.
• Updated preference change redirect with stronger origin checks.
• Updated application PHP dependencies.

[Package Updates]

[2.0.1]

• Update BookStack to 26.03.1
• Full Changelog
• Updated queries used for pages in markdown exports.
• Updated handling of filenames for file serving.
• Updated PHP package versions.
• Update Instructions
• Update details on blog

[Package Updates]

[2.0.3]

• Update BookStack to 26.03.3
• Full Changelog
• Updated translations with latest Crowdin changes. (#​6067)
• Updated PHP dependency versions.

[Package Updates]

[2.0.4]

• Update BookStack to 26.03.4
• Full Changelog
• Updated PHP package versions.
• Updated attachment actions to align page access check.
• Updated URL validation in webhooks to help prevent escaping workarounds.
• Fixed issue where exact search term negation would lead to no results. (#6121)

[Package Updates]

[2.0.5]

• Update BookStack to 26.03.5
• Full Changelog
• Updated PHP package versions.
• Updated MFA verification routes with rate limiting.

[Package Updates]

[2.1.0]

• Update BookStack to 26.05
• Full Changelog
• Upgrade Notices - Folder Permissions - Due to some changes in how fonts are used for exports, after updating you may need to ensure that the storage/fonts folder (and all folders within that) are accessible & writable by the web-server. If you start seeing errors on PDF export after updating, it's likely this issue. See this page for guidance on setting permissions.
• Revision Access - Revision access & visibility is now controlled separately to pages. In some cases, after upgrading, users may no longer be able to access revisions by default (for example, where users had access to view page content but had no role-level view permissions).
• Added page contents view to page editor. (#6131, #4218)
• Added API endpoints for browsing tags. (#6095, #5835)
• Added custom font load handling for default PDF renderer. (#6109, #148, #719, #5770)
• Added specific permission for revision viewing. (#6108, #4526)
• Added Thai language support. (#6105)
• Fixed misaligned link attachment validation rules. (#6093)
• Fixed non-ascii character issues in headers on PDF exports. Thanks to @alexwoo-awso. (#6069, #6107)