Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0 Patch Changes Bump @rocket.chat/meteor version. (#42042 by @dionisio-bot) Fixes Omnichannel rooms failing to register agent responses (and showing send errors on messages and file uploads that were actually delivered) when the room carried corrupted visitor activity data created by older app integrations Updated dependencie…
Release 8.8.0 Release Date: September 3, 2026 Support Window: Supported until March 31, 2027 Summary Security and Compliance Security improvements, authentication changes, data protection, and vulnerability fixes. A new Force end-to-end encryption on private rooms setting under Administration > Workspace > End-to-end encryption encrypts every new private room and locks the toggle on in the create-…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.8.0-rc.2 @rocket.chat/rest-typings@8.8.0-rc.2
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Minor Changes (#41954) Promotes Voice Call Screen Sharing to stable by removing the beta alert from its setting and enabling the "In-Room" call interface for every call regardless of screen-share availability. Patch Changes Bump @rocket.chat/meteor version. (#41454) Fixes the message list silently loading the entire ro…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Minor Changes (#41307) Adds classification banners to ABAC-managed rooms: admins can describe US-Government-style classification markings (levels, special access programs, releasability, colors) in a new JSON setting, and matching rooms display a colored classification banner above the room header for all members. (#41…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 5.0, 6.0, 7.0 Apps-Engine: 1.55.3 Patch Changes Bump @rocket.chat/meteor version. (#41858 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41851 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#4185…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.2 Apps-Engine: 1.59.2 Patch Changes Bump @rocket.chat/meteor version. (#41857 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41850 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41841 by @dion…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.61.1 Patch Changes Bump @rocket.chat/meteor version. (#41855 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41844 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41863 by @dion…
Engine versions Node: 22.22.2 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.62.0 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41854 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41842 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.60.1 Patch Changes Bump @rocket.chat/meteor version. (#41856 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41849 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41864 by @dion…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.63.0 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41853 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41836 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41818 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41820 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41832 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41827 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Release 8.7.0 Release Date: August 6, 2026 Support Window: Supported until February 28, 2027 Summary Security and Compliance Security improvements, authentication changes, data protection, and vulnerability fixes. This release adds phishing-resistant MFA and a modern server-side OAuth flow with CSRF protection, state validation, and PKCE, enabled via Accounts_OAuth_Use_Modern_Flow under Manage > W…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.6 @rocket.chat/rest-typings@8.7.0-rc.6
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.5 @rocket.chat/rest-typings@8.7.0-rc.5
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. (#41588) Fixes audio attachments not being seekable using the progress slider Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.4 @rocket.chat/rest-typings@8.7.0-rc.4
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.3 @rocket.chat/rest-typings@8.7.0-rc.3
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.2 @rocket.chat/rest-typings@8.7.0-rc.2
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.1 @rocket.chat/rest-typings@8.7.0-rc.1
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1-rc.0 Minor Changes (#40351) Adds current field to DeviceManagementSession type and currentLoginToken parameter to aggregateSessionsByUserId, allowing the sessions endpoint to identify and flag the caller's active session. (#40721) ## Phishing-Resistant Multi-Factor Authentication Introduces a more secure and reliable server…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1-rc.0 Major Changes (#40721) ## Phishing-Resistant Multi-Factor Authentication Introduces a more secure and reliable server-side OAuth authentication flow. What’s New Improved OAuth login security OAuth authentication now happens fully on the server, reducing the risk of token theft, phishing attacks, and client-side credent…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.2 Apps-Engine: 1.59.1 Patch Changes Bump @rocket.chat/meteor version. (#41240 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41250 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41298 by @dionisio-bot) Ensures the users.CreateToken endpoint checks fo…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.60.1 Patch Changes Bump @rocket.chat/meteor version. (#41238 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41247 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41296 by @dionisio-bot) Ensures the users.CreateToken endpoint checks fo…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.61.1 Patch Changes Bump @rocket.chat/meteor version. (#41237 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41246 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41295 by @dionisio-bot) Ensures the users.CreateToken endpoint checks fo…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 5.0, 6.0, 7.0 Apps-Engine: 1.55.3 Patch Changes Bump @rocket.chat/meteor version. (#41241 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41253 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41291 by @dionisio-bot) Ensures room permission checks are app…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.2 Apps-Engine: 1.59.2 Patch Changes Bump @rocket.chat/meteor version. (#41239 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41248 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41297 by @dionisio-bot) Ensures the users.CreateToken endpoint checks fo…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41234 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41243 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41308 by @dionisio-bot) Fixes wrong Fed…
Engine versions Node: 22.22.2 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.62.0 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41236 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41245 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41294 by @dionisio-bot) Ensures the use…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.63.0 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41235 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41244 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41293 by @dionisio-bot) Ensures the use…