Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.68.0-rc.0 Patch Changes (#43277) Fixes high database load on busy workspaces with the Engagement Dashboard enabled, where every sent or deleted message read all of the day's dashboard records Bump @rocket.chat/meteor version. (#43477) Fixes the server staying up without ever accepting connections when a step of its st…
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.68.0-rc.0 Major Changes (#43214) Breaking: the REST refusals that the API error switch maps answer 403 with one body shape: { success: false, error: '<message>', errorType: 'error-forbidden' }. errorType is always error-forbidden; error carries the refusal message. error-not-allowed, not-allowed, the unprefixed not-au…
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.68.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: - @rocket.chat/core-typings@9.0.0-rc.2 - @rocket.chat/rest-typings@9.0.0-rc.2
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.68.0-rc.0 Minor Changes (#43215) Adds a noise cancellation choice to the microphone menus of native LiveKit calls: off, the browser's own filter (the default), or RNNoise running on the device to also remove typing and background noise. The workspace serves RNNoise itself, so clients never fetch it from a third party.…
⚠️ Authentication changes in Rocket.Chat 9.0.0 LDAP, SAML, and Custom OAuth now require a premium plan, and Drupal, Facebook, LinkedIn, Meteor, X (formerly Twitter), WordPress, and Dolphin logins are removed. Community workspaces that use any of these must upgrade their plan or move users to a supported login method before updating, or those users won't be able to log in. Supported on every plan,…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.63.0 Patch Changes (#42466 by @dionisio-bot) Fixes the message list scroll drifting position after switching channels and returning Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#42458 by @dionisio-bot) Fixes the issue where the message list kept jumping to the latest messages instead of restoring the prev…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#42128 by @dionisio-bot) Fixes an issue that would cause apps to fail with 'Module not found' errors in some cases (#42225 by @dionisio-bot) Fixes app startup failing with EACCES errors in docker deployments running with specified UIDs Update…
Release Date: October 5, 2026 Support Window: Supported until October 31, 2027 (LTS, 12 months from the release date) 🟢 Long-Term Support release 8.9.0 is a Long-Term Support (LTS) release, supported until October 31, 2027, 12 months from the release date, compared to 6 months for standard releases. Security fixes and critical updates are backported to the 8.9.x line for the full window; new featu…
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: - @rocket.chat/core-typings@8.9.0-rc.5 - @rocket.chat/rest-typings@8.9.0-rc.5
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Minor Changes (#42476) Deprecates Custom OAuth authentication on workspaces without a Premium plan. Custom OAuth services keep working as they are today, but their admin settings now warn that version 9.0.0 will require a license including the oauth-enterprise module, and a warning is logged when an unlicens…
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: - @rocket.chat/core-typings@8.9.0-rc.3 - @rocket.chat/rest-typings@8.9.0-rc.3
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. (#42360) Restores the room list sidebar rows and group headers to their previous look, undoing the restyle introduced by the Fuselage upgrade Updated dependencies []: - @rocket.chat/core-typings@8.9.0-rc.2 - @rocket.chat/rest-typings@8.9.0-rc.2
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: - @rocket.chat/core-typings@8.9.0-rc.1 - @rocket.chat/rest-typings@8.9.0-rc.1
Engine versions Node: >=22.22.3 <23 || >=24.15.0 <25 MongoDB: 8.0 Apps-Engine: 1.67.0-rc.0 Minor Changes (#41020) Adds a Realtime Message Composer, available as an opt-in Feature Preview (My Account → Feature Preview → Message → Realtime message composer). While the feature preview is off, the message composer keeps its current plain-text behavior. (#42150) Adds a new GET /v1/autotranslate.getProv…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0 Patch Changes Bump @rocket.chat/meteor version. (#42042 by @dionisio-bot) Fixes Omnichannel rooms failing to register agent responses (and showing send errors on messages and file uploads that were actually delivered) when the room carried corrupted visitor activity data created by older app integrations Updated dependencie…
Release 8.8.0 Release Date: September 3, 2026 Support Window: Supported until March 31, 2027 Summary Security and Compliance Security improvements, authentication changes, data protection, and vulnerability fixes. A new Force end-to-end encryption on private rooms setting under Administration > Workspace > End-to-end encryption encrypts every new private room and locks the toggle on in the create-…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.8.0-rc.2 @rocket.chat/rest-typings@8.8.0-rc.2
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Minor Changes (#41954) Promotes Voice Call Screen Sharing to stable by removing the beta alert from its setting and enabling the "In-Room" call interface for every call regardless of screen-share availability. Patch Changes Bump @rocket.chat/meteor version. (#41454) Fixes the message list silently loading the entire ro…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.66.0-rc.0 Minor Changes (#41307) Adds classification banners to ABAC-managed rooms: admins can describe US-Government-style classification markings (levels, special access programs, releasability, colors) in a new JSON setting, and matching rooms display a colored classification banner above the room header for all members. (#41…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 5.0, 6.0, 7.0 Apps-Engine: 1.55.3 Patch Changes Bump @rocket.chat/meteor version. (#41858 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41851 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#4185…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.2 Apps-Engine: 1.59.2 Patch Changes Bump @rocket.chat/meteor version. (#41857 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41850 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41841 by @dion…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.61.1 Patch Changes Bump @rocket.chat/meteor version. (#41855 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41844 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41863 by @dion…
Engine versions Node: 22.22.2 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.62.0 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41854 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41842 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.16.0 Deno: 1.43.5 MongoDB: 8.0 Apps-Engine: 1.60.1 Patch Changes Bump @rocket.chat/meteor version. (#41856 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41849 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates) (#41864 by @dion…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.63.0 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41853 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41836 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41818 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41820 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.64.1 Patch Changes Bump @rocket.chat/meteor version. Bump @rocket.chat/meteor version. (#41832 by @dionisio-bot) Adds per-client rate limiting to the unauthenticated sendForgotPasswordEmail method, matching the REST users.forgotPassword endpoint (#41827 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fi…
Release 8.7.0 Release Date: August 6, 2026 Support Window: Supported until February 28, 2027 Summary Security and Compliance Security improvements, authentication changes, data protection, and vulnerability fixes. This release adds phishing-resistant MFA and a modern server-side OAuth flow with CSRF protection, state validation, and PKCE, enabled via Accounts_OAuth_Use_Modern_Flow under Manage > W…
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.6 @rocket.chat/rest-typings@8.7.0-rc.6
Engine versions Node: 22.22.3 Deno: 2.3.1 MongoDB: 8.0 Apps-Engine: 1.65.1-rc.0 Patch Changes Bump @rocket.chat/meteor version. Updated dependencies []: @rocket.chat/core-typings@8.7.0-rc.5 @rocket.chat/rest-typings@8.7.0-rc.5