Rocket.Chat - Package Updates

Package Updates

[3.2.0]

Update Rocket.Chat to 8.3.1
Full Changelog
(#40080 by @dionisio-bot) Fixes a bug that could remove all of a user's subscriptions when the user was re-added to a room while still banned.

Package Updates

[3.2.1]

Package Updates

[3.2.2]

Package Updates

[3.3.0]

Update Rocket.Chat to 8.4.0
Full Changelog
Adds file thumbnails with image preview to the message composer attachments
Adds a new REST endpoint to accept or reject media calls without an active media session
Adds externalIds field to livechat visitors for external platform identification.
Adds a skipTranspile flag (default false) to webhook integrations. When set to true, the integration script is stored as-is without Babel transpilation matching the 9.0.0 default where Babel is removed entirely. Admins can flip the flag per-integration to validate strict-mode compatibility before upgrading. The field is deprecated and will be removed in 9.0.0.
Updates omnichannel routing so agents with offline status are always excluded from assignment. The Livechat_enabled_when_agent_idle setting now only affects agents with away status.
Introduces Cold Storage Archiving for Read Receipts to improve performance and scalability in large deployments.
Fixed UI becoming unresponsive after clicking "See on Engagement Dashboard" from the workspace info card, which required a manual page refresh to recover.
Fixes a bug that could remove all of a user's subscriptions when the user was re-added to a room while still banned.
Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
Fixes an issue where the Omnichannel routing system ignored the Livechat_accept_chats_with_no_agents setting. Now, offline agents are correctly considered for assignment when the setting allows it.

Package Updates

[3.3.1]

Update Rocket.Chat to 8.4.1
Full Changelog
(#40410 by @dionisio-bot) Disables SAML login when it is set to validate signatures without the proper configuration for it
(#40459 by @dionisio-bot) Allows users to search for attribute values when assigning them to rooms
(#40410 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)

Package Updates

[3.3.2]

Update Rocket.Chat to 8.4.2
Full Changelog
Ensures OAuth tokens are cleaned up after user deactivation
Fixes the users.presence endpoint returning an empty array when called with multiple comma-separated IDs, caused by ajvQuery coercing the string into a single-element array after the OpenAPI migration (#40527 by @dionisio-bot)
Ensures that deactivated users have their login tokens cleaned up in users.deactivateidle
Ensures the Meteor method for translateMessage validates access and types
Ensures the visitor token is not present in the visitors.info response
Ensures the autotranslate.translateMessage endpoint checks for room access

Package Updates

[3.3.3]

Update Rocket.Chat to 8.4.3
Full Changelog
(#40771 by @dionisio-bot) Fixes the Chat Limits locking mechanism to allow bot agents to skip the lock as they aren't limited

Package Updates

[3.3.4]

Package Updates

[3.4.0]

Update Rocket.Chat to 8.5.0
Full Changelog
Swap usage of internal @rocket.chat/apps-engine internal APIs to @rocket.chat/apps package
Adds 4 new permissions (assigned to admins by default) to control the visibility of each tab inside the ABAC Administration panel
Adds new API endpoints custom-sounds.create and custom-sounds.update to manage custom sounds with strict file validation for size and specific MIME types to ensure system compatibility.
Adds a new "Drafts" group to the sidebar, providing quick access to all rooms with unfinished messages.
Ensures OAuth tokens are cleaned up after user deactivation
Fixes an issue where thread content would disappear after clicking "Jump to recent messages".
Fixes the users.presence endpoint returning an empty array when called with multiple comma-separated IDs, caused by ajvQuery coercing the string into a single-element array after the OpenAPI migration
Ensures the visitor token is not present in the visitors.info response
Sanitizes image URLs in rendered messages to block javascript:, data:, and vbscript: schemes matching the protection already applied to markdown links. Defense-in-depth against XSS via crafted markdown like ![label](javascript:...).
Fixes action buttons added by apps being rendered in the Marketplace Menu rather than the User Menu

Package Updates

[3.4.1]

Update Rocket.Chat to 8.5.1
Full Changelog
(#40917 by @dionisio-bot) Escapes HTML tags in exported data
(#40891 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
(#40904 by @dionisio-bot) Fixes missing permission check on the POST /api/v1/fingerprint endpoint
(#40938 by @dionisio-bot) Fixes an issue where description was incorrectly being used as alternative text for image attachments

Cloudron Forum