Bug Fixes
- ODT background color preserved on open — Documents with a colored page background set in LibreOffice/ODT no longer open with a white background in the word editor. Affects both the rendering path (sdkjs) and the ODT→DOCX conversion path (core).
- DJVU rendering: correct color channel order — DJVU files rendered via WASM had swapped color channels (BGRA rendered as RGBA), causing incorrect colors. Fixed by correcting the channel mapping in the WASM renderer.
- Standalone: Postgres schema applied on first boot — The standalone Docker image now correctly initializes the PostgreSQL schema when the database is empty on first start, avoiding a startup failure.
- Mobile editors: fixed loading failure — Mobile editor bundles were failing to load due to an incompatible ES2022 build target and an i18next initialization crash. Both issues resolved; mobile editors load correctly.
- Docker: ds services now have a writable HOME — The sharp image-processing library (used by Node.js services) failed to load in some configurations because the container's service user had no writable HOME directory. Fixed in the Docker setup.
- V8 build stability — Three fixes to the V8 JavaScript engine build pipeline: depot_tools is now pinned to a known-good revision and gclient_paths.patch has been refreshed for both x64 and arm64 targets, restoring reproducible builds after upstream depot_tools changes broke the patch.
New Features
- Standalone: configurable upload and temp-file size limits — Two new environment variables (DS_MAX_UPLOAD_SIZE, DS_MAX_TEMPFILE_SIZE) allow the standalone Docker image's file-size limits to be adjusted without editing nginx config directly.
Security
- Dependency: picomatch ReDoS advisory cleared — picomatch pinned to >=2.3.2 in the web-apps build to address a published ReDoS vulnerability (GHSA advisory).
Infrastructure / Developer Experience
- SELinux support for Docker Compose volumes — :z relabeling flags added to volume mounts in the Compose file so the stack runs correctly on SELinux-enforcing hosts (e.g. RHEL/Fedora).
- eo.sh: parallel test server script — New helper script for running multiple isolated DocumentServer instances side-by-side during development and testing.
- SECURITY.md added — Security disclosure policy and contact information published in the repository.
- AGENTS.md / CLAUDE.md added — Contribution guidance for AI-assisted development documented.