Engine versions
- Node:
22.22.3 || 22.23.4 - Deno:
2.3.1 - MongoDB:
8.0 - Apps-Engine:
1.64.1
Patch Changes
-
(#43442 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
Bump @rocket.chat/meteor version.
-
Bump @rocket.chat/meteor version.
-
(#43410 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
-
(#43401 by @dionisio-bot) Bump the Node.js base image of the Docker images to 22.23.4 (the Debian image moves from bullseye to bookworm), which fixes a Brotli decoder out-of-bounds write (CVE-2026-111497).
-
(#43447 by @dionisio-bot) Fixes app slash commands that declare a permission being listed and executed for users without that permission
-
(#43406 by @dionisio-bot) Fixes a permission check in team member management
-
Updated dependencies []:
- @rocket.chat/core-typings@8.6.4
- @rocket.chat/rest-typings@8.6.4