Engine versions
- Node:
22.22.3 - Deno:
2.3.1 - MongoDB:
8.0 - Apps-Engine:
1.64.0-rc.0
Patch Changes
-
Bump @rocket.chat/meteor version.
-
(#41057) Fixes incoming integrations inability of reaching internal hosts by adding "ignoreSsrfValidation: true" to it
-
(#41046) Fixes an issue where editing or deleting a message in a federated room caused subsequent messages to stop syncing between servers
Note: this prevents the issue from happening, but does not restore rooms that are already affected. Recovering those requires a separate, one-time repair.
-
(#41065) Fixes REST API endpoints that require two-factor authentication (such as
users.update) rejecting requests authenticated with a Personal Access Token created with "Ignore Two Factor Authentication", returningtotp-requiredeven though the token was meant to bypass the check. The two-factor authorization check now resolves the login token from the REST connection, sobypassTwoFactortokens are honored again.