paperless-ngx 3.0.0-beta.rc1
Breaking Changes
- Breaking: Remove the positional arguments from the pre/post consume scripts @stumpylog (#12573)
- Breaking: Decouple OCR control from archive file control @stumpylog (#12448)
- [BREAKING] Chore: drop support for api versions < 9 @shamoon (#12284)
- [BREAKING] Chore: Drop support for Python 3.10 @stumpylog (#12234)
- [BREAKING] Chore: Refactor advanced database settings to allow more user configuration @stumpylog (#12165)
- [BREAKING] Chore: Remove API v1 @stumpylog (#12166)
- [BREAKING] Chore: Remove pybzar as a barcode reader @stumpylog (#12065)
- [BREAKING] Chore: Remove support for document and thumbnail encryption @stumpylog (#11850)
- [BREAKING] Feature: Simplify and improve the consumer @stumpylog (#11753)
Notable Changes
- Feature: Replace Whoosh with tantivy search backend @stumpylog (#12471)
- Feature: document parser plugin framework @stumpylog (#12294)
- Feature: document file versions @shamoon (#12061)
- Feature: sharelink bundles @shamoon (#11682)
Features / Enhancements
- Feature: Further reduce document importer memory usage @stumpylog (#12707)
- Tweakhancement: use fixed position instead of display none for printing @shamoon (#12706)
- Enhancement: Paperless-ngx v3 Logo @shamoon (#12673)
- Tweakhancement: localize some more task result messages @shamoon (#12672)
- Enhancement: chat message document links @shamoon (#12670)
- Tweakhancement: make upload notification open an anchor link @shamoon (#12659)
- Tweakhancement: tweak tasks UI, make open doc an anchor @shamoon (#12658)
- Enhancement: show small task summary in system status @shamoon (#12634)
- Enhancement: new Tasks UI @shamoon (#12614)
- Feature: Allow monitoring access to tasks summary @stumpylog (#12624)
- Tweak: remove stale index warning @shamoon (#12616)
- Enhancement: add highlighting to title + content searches @shamoon (#12593)
- Feature: Redesign the task system @stumpylog (#12584)
- Feature: Tune SQLite default settings for increased speed @stumpylog (#12580)
- Feature: Document fuzzy match improvements @stumpylog (#12579)
- Enhancement: validate and sanitize uploaded logos @shamoon (#12551)
- Enhancement: add view_global_statistics and view_system_status permissions @shamoon (#12530)
- Breaking: Decouple OCR control from archive file control @stumpylog (#12448)
- Fixhancement: include sharelinks + bundles in export/import @shamoon (#12479)
- Enhancement: unify text search to use tantivy @shamoon (#12485)
- Feature: Consumer logging correlation @stumpylog (#12510)
- Security enhancement: allow opt-in blocking internal mail hosts @shamoon (#12502)
- Feature: Replace Whoosh with tantivy search backend @stumpylog (#12471)
- Fixhancement: include trashed documents in document exporter/importer @JanKleine (#12425)
- Tweakhancement: show file extension in StoragePath test @shamoon (#12452)
- Feature: Transition all checksums to use SHA256 @stumpylog (#12432)
- Enhancement: auto-hide the search bar on mobile @shamoon (#12404)
- Security: prevent prototype pollution in frontend settings and list view @shamoon (#12438)
- Fixhancement: default mail-created correspondent matching to exact @shamoon (#12414)
- Change: sort custom fields alphabetically by default @shamoon (#12358)
- Feature: Add progress information to the classifier training for a better ux @stumpylog (#12331)
- Feature: document parser plugin framework @stumpylog (#12294)
- Enhancement: Make the StatusConsumer truly async @stumpylog (#12298)
- Feature: Migrate import/export to rich progress @stumpylog (#12260)
- Enhancement: Show more document details in merge dialog @svenstaro (#12271)
- Enhancement: saved view sharing @shamoon (#12142)
- Enhancement: “live” document updates @shamoon (#12141)
- Enhancement: Improve the retagger output using rich @stumpylog (#12194)
- Enhancement: Transition sanity check to rich and improve output @stumpylog (#12182)
- Enhancement: Switch all indexing to use rich @stumpylog (#12193)
- Feature: Switch progress bar library to rich @stumpylog (#12169)
- Enhancment: Formatted filename for single document downloads @JanKleine (#12095)
- Feature: document file versions @shamoon (#12061)
- Enhancement: prevent duplicate mail processing across rules @shamoon (#12159)
- Feature: move to trash action for workflows @JanKleine (#11176)
- Tweakhancement: reset to page 1 on reset filters @shamoon (#12143)
- Enhancement: consolidate management lists into document attributes section @shamoon (#12045)
- Enhancement: option to stop processing further mail rules @shamoon (#12053)
- Tweak: improve 2-digit year parsing @shamoon (#12044)
- Enhancement: pngx pdf viewer @shamoon (#12043)
- Fixhancement: improve ASN handling with PDF operations @shamoon (#11689)
- Upgrade: Bump @types/node from 25.2.0 to 25.2.1 in /src-ui @dependabot[bot] (#12008)
- Upgrade: Bump webpack from 5.103.0 to 5.105.0 in /src-ui @dependabot[bot] (#12007)
- Feature: Enable users to customize date parsing via plugins @stumpylog (#11931)
- Feature: password removal workflow action @shamoon (#11665)
- Enhancement: per-type object page sizing @shamoon (#11977)
- Enhancement: improve filter drop-down performance with virtual scrolling @shamoon (#11973)
- Tweakhancement: tweak bulk delete text @shamoon (#11967)
- Feature: support split documents based on tag barcodes @schober-ch (#11645)
- Enhancement: Add setting for default PDF Editor mode @JanKleine (#11927)
- Fixhancement: auto-queue llm index if needed @shamoon (#11891)
- Feature: sharelink bundles @shamoon (#11682)
- Enhancement: user control of doc details fields @shamoon (#11906)
- Enhancement: improve relative dates in date filter @JanKleine (#11899)
- Enhancement: allow duplicates with warnings, UI for discovery @shamoon (#11815)
- Enhancement: configurable SSO groups claim @Gabgobie (#11841)
- Enhancement: support select all for management lists @shamoon (#11889)
- Tweakhancement: display document id, with copy @shamoon (#11896)
- Enhancement: Add support for app oidc @paulgessinger (#11756)
- Enhancement: Add 'any of' workflow trigger filters @shamoon (#11683)
- Enhancement: support doc_id placeholder in workflow templates @shamoon (#11847)
- [BREAKING] Feature: Simplify and improve the consumer @stumpylog (#11753)
Bug Fixes
- Fix: avoid unnecessary close_old_connections in Celery task dispatch @stumpylog (#12701)
- Fix: apply tag changes directly to document in db @shamoon (#12664)
- Fix: use only allauth login/logout endpoints @shamoon (#12639)
- Fix: Use FileResponse for file API responses @stumpylog (#12638)
- Fix: correctly scope mail account enumeration @shamoon (#12636)
- Fix: Changes bare metal webserver to use uvloop @stumpylog (#12626)
- Fixhancement: Exact custom field monetary exact searching @stumpylog (#12592)
- Fix: relative added date check visibility @shamoon (#12600)
- Fix: prevent intermediate change event when CustomFieldQueryAtom operator changes type @ggouzi (#12597)
- Fix: reject invalid requests to API notes endpoint @ggouzi (#12582)
- Fix: do not submit permissions for non-owners @shamoon (#12571)
- Fix: prevent duplicate parent tag IDs @shamoon (#12522)
- Fixhancement: include sharelinks + bundles in export/import @shamoon (#12479)
- Fix: dont defer tag change application in workflows @shamoon (#12478)
- Fix: limit share link viewset actions @shamoon (#12461)
- Fix: Respect workflow change_groups during consumption @stumpylog (#12431)
- Fix: add fallback ordering for documents by id after created @shamoon (#12440)
- Fix: validate date CF value in serializer @shamoon (#12410)
- Fix: Scope the workflow saves to prevent clobbering filename/archive_filename @stumpylog (#12390)
- Fix: don't try to usermod/groupmod when non-root + update docs (#12365) @stumpylog (#12391)
- Fix: avoid moving files if already moved @shamoon (#12389)
- Fix: remove pagination from document notes api spec @shamoon (#12388)
- Fix: fix file button hover color in dark mode @shamoon (#12367)
- Fix: Don't try to update the user when running as non-root @stumpylog (#12365)
- Fixhancement: only offer basic auth for appropriate requests @shamoon (#12362)
- Fix: correct dropdown list active color in dark mode @shamoon (#12328)
- Fixhancement: clear descendant selections in dropdown when parent toggled @shamoon (#12326)
- Fix: prevent wrapping with larger amounts of tags on small cards, reset moreTags setting to correct count @shamoon (#12302)
- Fix: prevent stale db filename during workflow actions @shamoon (#12289)
- Fix: support string coercion in filepath jinja templates @shamoon (#12244)
- Fix: use maxsplit=1 in Redis URL parsing to handle URLs with multiple colons @cryptomilk (#12239)
- Fix: apply ordering after annotating tag document count @shamoon (#12238)
- Fix: enforce path limit for db filename fields @shamoon (#12235)
- Fixhancement: show sequential + id version labels, fix padding @shamoon (#12196)
- Fixhancement: config option reset @shamoon (#12176)
- Fix: correct page count by separating display vs collection sizes for tags @shamoon (#12170)
- Fix: correct user dropdown button icon styling @shamoon (#12092)
- Fix: Handle an OOM kill of celery workers in the task handler @stumpylog (#12040)
- Performance fix: use subqueries to improve object retrieval in large installs @shamoon (#11950)
- Fix: re-run ASN check after barcode detection @shamoon (#11681)
- Fix: prevent infinite loading crash in mail component @shamoon (#11978)
- Fix: fix broken docker create_classifier command in 2.20.6 @shamoon (#11965)
- Fix: extract all ids for nested tags @shamoon (#11888)
- Fixhancement: change date calculation for 'this year' to include future documents @shamoon (#11884)
- Fix: Running management scripts under rootless could fail @stumpylog (#11870)
- Fix: use correct field id for overrides @shamoon (#11869)
- Fix: ensure css color-scheme for dark mode @shamoon (#11855)
- Fix: fix tag list horizontal scroll, again @shamoon (#11839)
- Fix: ensure horizontal scroll for long tag names in list, wrap tags without parent @shamoon (#11811)
- Fix: use explicit order field for workflow actions @shamoon (#11781)
Documentation
- Enhancement: Paperless-ngx v3 Logo @shamoon (#12673)
- Fix: Don't try to update the user when running as non-root @stumpylog (#12365)
- Chore: separate actions from bulk edit endpoint @shamoon (#12286)
- Enhancement: saved view sharing @shamoon (#12142)
- Chore: Switches to use prek in place of pre-commit @stumpylog (#12002)
Maintenance
- Chore(deps): Bump the actions group across 1 directory with 17 updates @dependabot[bot] (#12686)
- Chore(deps): Bump the actions group across 1 directory with 4 updates @dependabot[bot] (#12538)
- Chore(deps-dev): Bump @playwright/test from 1.58.2 to 1.59.0 in /src-ui @dependabot[bot] (#12537)
- Chore: address more zizmor flags @shamoon (#12529)
- Chore: Resolves some zizmor reported code scan findings @stumpylog (#12516)
- Chore(deps): Bump the actions group across 1 directory with 9 updates @dependabot[bot] (#12490)
- Chore(deps): Bump the actions group with 2 updates @dependabot[bot] (#12377)
- Chore(deps): Bump the actions group with 3 updates @dependabot[bot] (#12322)
- Chore: Don't upload digets file as a zip @stumpylog (#12264)
- Chore(deps): Bump the actions group across 1 directory with 6 updates @dependabot[bot] (#12224)
- Chore(deps): Bump j178/prek-action from 1.1.0 to 1.1.1 in the actions group @dependabot[bot] (#12033)
- Chore: Switches to use prek in place of pre-commit @stumpylog (#12002)
- Chore: Enable mypy checking in CI @stumpylog (#11991)
- Chore(deps): Bump the actions group with 2 updates @dependabot[bot] (#11966)
Dependencies
122 changes
- Chore(deps-dev): Bump @playwright/test from 1.59.0 to 1.59.1 in /src-ui @dependabot[bot] (#12692)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group across 1 directory with 4 updates @dependabot[bot] (#12689)
- Chore(deps-dev): Bump @codecov/webpack-plugin from 1.9.1 to 2.0.1 in /src-ui @dependabot[bot] (#12691)
- Chore(deps-dev): Bump the frontend-jest-dependencies group across 1 directory with 2 updates @dependabot[bot] (#12685)
- Chore(deps-dev): Bump @types/node from 25.5.0 to 25.6.0 in /src-ui @dependabot[bot] (#12690)
- Chore(deps-dev): Bump webpack from 5.105.3 to 5.106.2 in /src-ui @dependabot[bot] (#12693)
- Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 15 updates @dependabot[bot] (#12684)
- Chore(deps): Bump the utilities-patch group across 1 directory with 7 updates @dependabot[bot] (#12702)
- Chore(deps): Bump the utilities-minor group across 1 directory with 9 updates @dependabot[bot] (#12696)
- Chore(deps): Bump the actions group across 1 directory with 17 updates @dependabot[bot] (#12686)
- Chore(deps): Bump ocrmypdf from 17.4.0 to 17.4.2 in the document-processing group across 1 directory @dependabot[bot] (#12687)
- Chore(deps-dev): Bump the development group with 2 updates @dependabot[bot] (#12683)
- Chore(deps): Bump the pre-commit-dependencies group with 4 updates @dependabot[bot] (#12694)
- Chore(deps): Bump uuid from 13.0.0 to 14.0.0 in /src-ui in the npm_and_yarn group across 1 directory @dependabot[bot] (#12627)
- Chore(deps): Bump lxml from 6.0.2 to 6.1.0 in the uv group across 1 directory @dependabot[bot] (#12619)
- Chore(deps): Bump hono from 4.12.12 to 4.12.14 in /src-ui in the npm_and_yarn group across 1 directory @dependabot[bot] (#12585)
- Chore(deps): Bump follow-redirects from 1.15.11 to 1.16.0 in /src-ui in the npm_and_yarn group across 1 directory @dependabot[bot] (#12575)
- Chore(deps): Bump pillow from 12.1.1 to 12.2.0 in the uv group across 1 directory @dependabot[bot] (#12574)
- Chore(deps-dev): Bump pytest from 9.0.2 to 9.0.3 in the uv group across 1 directory @dependabot[bot] (#12568)
- Chore(deps): Bump the utilities-minor group across 1 directory with 19 updates @dependabot[bot] (#12540)
- Chore(deps): Bump cryptography from 46.0.6 to 46.0.7 in the uv group across 1 directory @dependabot[bot] (#12546)
- Chore(deps-dev): Bump types-python-dateutil from 2.9.0.20260305 to 2.9.0.20260323 @dependabot[bot] (#12542)
- Chore(deps-dev): Bump types-pytz from 2025.2.0.20251108 to 2026.1.1.20260304 @dependabot[bot] (#12541)
- Chore(deps): Bump django-guardian from 3.3.0 to 3.3.1 in the utilities-patch group across 1 directory @dependabot[bot] (#12539)
- Chore(deps-dev): Bump zensical from 0.0.29 to 0.0.31 in the development group across 1 directory @dependabot[bot] (#12532)
- Chore(deps): Bump pdfjs-dist from 5.4.624 to 5.6.205 in /src-ui @dependabot[bot] (#12536)
- Chore(deps): Bump the actions group across 1 directory with 4 updates @dependabot[bot] (#12538)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group across 1 directory with 3 updates @dependabot[bot] (#12535)
- Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 5 updates @dependabot[bot] (#12533)
- Chore(deps-dev): Bump jest-preset-angular from 16.1.1 to 16.1.2 in /src-ui in the frontend-jest-dependencies group across 1 directory @dependabot[bot] (#12534)
- Chore(deps-dev): Bump @playwright/test from 1.58.2 to 1.59.0 in /src-ui @dependabot[bot] (#12537)
- Chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates @dependabot[bot] (#12531)
- Chore(deps): Bump djangorestframework from 3.16.1 to 3.17.1 in the django-ecosystem group across 1 directory @dependabot[bot] (#12488)
- Chore(deps): Bump the document-processing group across 1 directory with 3 updates @dependabot[bot] (#12489)
- Chore(deps): Bump the utilities-patch group across 1 directory with 5 updates @dependabot[bot] (#12499)
- Chore(deps): Bump aiohttp from 3.13.3 to 3.13.4 in the uv group across 1 directory @dependabot[bot] (#12486)
- Chore(deps): Bump the pre-commit-dependencies group with 2 updates @dependabot[bot] (#12495)
- Chore(deps): Bump lodash from 4.17.23 to 4.18.1 in /src-ui in the npm_and_yarn group across 1 directory @dependabot[bot] (#12498)
- Chore(deps): Bump the actions group across 1 directory with 9 updates @dependabot[bot] (#12490)
- Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 20 updates @dependabot[bot] (#12491)
- Chore(deps-dev): Bump @types/node from 25.4.0 to 25.5.0 in /src-ui @dependabot[bot] (#12494)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 4 updates @dependabot[bot] (#12493)
- Chore(deps): Bump cryptography from 46.0.5 to 46.0.6 in the uv group across 1 directory @dependabot[bot] (#12458)
- Chore(deps): Bump requests from 2.32.5 to 2.33.0 in the uv group across 1 directory @dependabot[bot] (#12441)
- Chore(deps): Bump cbor2 from 5.8.0 to 5.9.0 in the uv group across 1 directory @dependabot[bot] (#12424)
- Chore(deps): Bump tinytag from 2.2.0 to 2.2.1 in the uv group across 1 directory @dependabot[bot] (#12396)
- Chore(deps): Bump ujson from 5.11.0 to 5.12.0 @dependabot[bot] (#12387)
- Chore(deps): Bump pyasn1 from 0.6.2 to 0.6.3 @dependabot[bot] (#12370)
- Chore(deps): Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.5 to 0.15.6 in the pre-commit-dependencies group @dependabot[bot] (#12371)
- Chore(deps): Bump the actions group with 2 updates @dependabot[bot] (#12377)
- Chore(deps): Bump the utilities-patch group across 1 directory with 2 updates @dependabot[bot] (#12382)
- Chore(deps): Bump openai from 2.24.0 to 2.26.0 in the utilities-minor group @dependabot[bot] (#12379)
- Chore(deps-dev): Bump types-python-dateutil from 2.9.0.20260124 to 2.9.0.20260305 @dependabot[bot] (#12380)
- Chore(deps): Update django-allauth[mfa,socialaccount] requirement from ~=65.14.0 to ~=65.15.0 @dependabot[bot] (#12381)
- Chore(deps-dev): Bump the frontend-jest-dependencies group in /src-ui with 2 updates @dependabot[bot] (#12374)
- Chore(deps): Bump @ng-select/ng-select from 21.4.1 to 21.5.2 in /src-ui in the frontend-angular-dependencies group @dependabot[bot] (#12373)
- Chore(deps-dev): Bump @types/node from 25.3.3 to 25.4.0 in /src-ui @dependabot[bot] (#12376)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 4 updates @dependabot[bot] (#12375)
- Chore(deps): Bump pyopenssl from 25.3.0 to 26.0.0 @dependabot[bot] (#12363)
- Chore(deps): Bump pyjwt from 2.10.1 to 2.12.0 @dependabot[bot] (#12335)
- Chore: bump Angular dependencies to 21.2.x @shamoon (#12338)
- Bump ocrmypdf from 16.13.0 to 17.3.0 in the document-processing group @dependabot[bot] (#12267)
- Chore(deps): Bump tornado from 6.5.4 to 6.5.5 @dependabot[bot] (#12327)
- Chore(deps): Bump the utilities-minor group across 1 directory with 5 updates @dependabot[bot] (#12324)
- Chore(deps): Bump the pre-commit-dependencies group with 4 updates @dependabot[bot] (#12323)
- Chore(deps): Bump the actions group with 3 updates @dependabot[bot] (#12322)
- docker(deps): bump astral-sh/uv from 0.10.7-python3.12-trixie-slim to 0.10.9-python3.12-trixie-slim @dependabot[bot] (#12265)
- Chore(deps): Bump the utilities-patch group across 1 directory with 6 updates @dependabot[bot] (#12291)
- Chore: update ESLint to v10 @shamoon (#12256)
- Bump django-allauth from 65.14.0 to 65.14.1 @dependabot[bot] (#12253)
- Bump django from 5.2.11 to 5.2.12 @dependabot[bot] (#12249)
- docker(deps): Bump astral-sh/uv from 0.10.5-python3.12-trixie-slim to 0.10.7-python3.12-trixie-slim @dependabot[bot] (#12191)
- Chore(deps): Bump the actions group across 1 directory with 6 updates @dependabot[bot] (#12224)
- Chore: Updates actions to the most specific version released @stumpylog (#12222)
- Chore(deps): Bump whitenoise from 6.11.0 to 6.12.0 in the django-ecosystem group @dependabot[bot] (#12192)
- docker-compose(deps): Bump gotenberg/gotenberg from 8.26 to 8.27 in /docker/compose @dependabot[bot] (#12190)
- Chore: Updates s6-overlay to 3.2.2.0 @stumpylog (#12189)
- Chore(deps): Bump the utilities-patch group across 1 directory with 11 updates @dependabot[bot] (#12179)
- Chore(deps): Bump nltk from 3.9.2 to 3.9.3 @dependabot[bot] (#12177)
- Chore(deps): Bump the utilities-minor group across 1 directory with 7 updates @dependabot[bot] (#12174)
- docker(deps): Bump astral-sh/uv from 0.10.0-python3.12-trixie-slim to 0.10.4-python3.12-trixie-slim @dependabot[bot] (#12125)
- Chore(deps): Bump pillow from 12.1.0 to 12.1.1 @dependabot[bot] (#12064)
- Chore(deps): Bump cryptography from 46.0.3 to 46.0.5 @dependabot[bot] (#12060)
- Chore(deps): Bump the utilities-patch group across 1 directory with 3 updates @dependabot[bot] (#12051)
- Chore(deps): Bump j178/prek-action from 1.1.0 to 1.1.1 in the actions group @dependabot[bot] (#12033)
- docker(deps): Bump astral-sh/uv from 0.9.29-python3.12-trixie-slim to 0.10.0-python3.12-trixie-slim @dependabot[bot] (#12019)
- Chore(deps-dev): Bump @playwright/test from 1.58.1 to 1.58.2 in /src-ui @dependabot[bot] (#12032)
- Chore(deps): Bump the utilities-minor group across 1 directory with 2 updates @dependabot[bot] (#12020)
- docker-compose(deps): Bump nginx from 1.29-alpine to 1.29.5-alpine in /docker/compose @dependabot[bot] (#12018)
- Upgrade: Bump @types/node from 25.2.0 to 25.2.1 in /src-ui @dependabot[bot] (#12008)
- Upgrade: Bump webpack from 5.103.0 to 5.105.0 in /src-ui @dependabot[bot] (#12007)
- docker(deps): Bump astral-sh/uv from 0.9.26-python3.12-trixie-slim to 0.9.28-python3.12-trixie-slim @dependabot[bot] (#11980)
- docker-compose(deps): Bump gotenberg/gotenberg from 8.25 to 8.26 in /docker/compose @dependabot[bot] (#11979)
- Chore(deps): Bump the utilities-patch group with 3 updates @dependabot[bot] (#11981)
- Chore(deps): Bump the utilities-minor group across 1 directory with 6 updates @dependabot[bot] (#11993)
- Chore(deps): Bump drf-spectacular-sidecar from 2025.10.1 to 2026.1.1 @dependabot[bot] (#11985)
- Chore(deps): Update django-allauth[mfa,socialaccount] requirement from ~=65.13.1 to ~=65.14.0 @dependabot[bot] (#11984)
- Chore(deps): Update granian[uvloop] requirement from ~=2.6.0 to ~=2.7.0 @dependabot[bot] (#11983)
- Chore(deps): Bump django from 5.2.10 to 5.2.11 @dependabot[bot] (#11988)
- Chore(deps): Bump the actions group with 2 updates @dependabot[bot] (#11966)
- Chore(deps): Bump the frontend-angular-dependencies group in /src-ui with 22 updates @dependabot[bot] (#11968)
- Chore(deps): Bump zone.js from 0.15.1 to 0.16.0 in /src-ui @dependabot[bot] (#11970)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 4 updates @dependabot[bot] (#11969)
- Chore(deps-dev): Bump @types/node from 24.10.1 to 25.2.0 in /src-ui @dependabot[bot] (#11972)
- Chore(deps-dev): Bump @playwright/test from 1.57.0 to 1.58.1 in /src-ui @dependabot[bot] (#11971)
- Chore: Bulk backend updates @stumpylog (#11543)
- Chore: Manually upgrades allauth to resolve a security issue with it @stumpylog (#11853)
- Chore(deps): Bump the utilities-patch group across 1 directory with 7 updates @dependabot[bot] (#11793)
- Chore(deps): Bump the utilities-minor group across 1 directory with 10 updates @dependabot[bot] (#11799)
- Chore(deps): Bump pyasn1 from 0.6.1 to 0.6.2 @dependabot[bot] (#11801)
- Chore(deps): Bump torch from 2.7.1 to 2.8.0 @dependabot[bot] (#11800)
- docker(deps): Bump astral-sh/uv from 0.9.15-python3.12-trixie-slim to 0.9.24-python3.12-trixie-slim @dependabot[bot] (#11762)
- Chore(deps): Bump brotli from 1.1.0 to 1.2.0 @dependabot[bot] (#11796)
- Chore(deps): Bump transformers from 4.51.3 to 4.53.0 @dependabot[bot] (#11797)
- Chore(deps): Bump django from 5.2.7 to 5.2.9 @dependabot[bot] (#11794)
- Chore(deps): Bump the llama-index group @dependabot[bot] (#11798)
- Chore(deps): Bump marshmallow from 3.26.1 to 3.26.2 @dependabot[bot] (#11790)
- Chore(deps): Bump uv from 0.9.3 to 0.9.6 @dependabot[bot] (#11795)
- Chore(deps): Bump aiohttp from 3.11.18 to 3.13.3 @dependabot[bot] (#11789)
- Chore(deps): Bump urllib3 from 2.5.0 to 2.6.3 @dependabot[bot] (#11792)
- Chore(deps): Bump virtualenv from 20.34.0 to 20.36.1 @dependabot[bot] (#11774)
- Chore(deps): Bump azure-core from 1.33.0 to 1.38.0 @dependabot[bot] (#11776)
All App Changes
241 changes
- Feature: Further reduce document importer memory usage @stumpylog (#12707)
- Chore(deps-dev): Bump @playwright/test from 1.59.0 to 1.59.1 in /src-ui @dependabot[bot] (#12692)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group across 1 directory with 4 updates @dependabot[bot] (#12689)
- Chore(deps-dev): Bump @codecov/webpack-plugin from 1.9.1 to 2.0.1 in /src-ui @dependabot[bot] (#12691)
- Chore(deps-dev): Bump the frontend-jest-dependencies group across 1 directory with 2 updates @dependabot[bot] (#12685)
- Chore(deps-dev): Bump @types/node from 25.5.0 to 25.6.0 in /src-ui @dependabot[bot] (#12690)
- Chore(deps-dev): Bump webpack from 5.105.3 to 5.106.2 in /src-ui @dependabot[bot] (#12693)
- Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 15 updates @dependabot[bot] (#12684)
- Tweakhancement: use fixed position instead of display none for printing @shamoon (#12706)
- Fix: avoid unnecessary close_old_connections in Celery task dispatch @stumpylog (#12701)
- Chore(deps): Bump the utilities-patch group across 1 directory with 7 updates @dependabot[bot] (#12702)
- Chore(deps): Bump the utilities-minor group across 1 directory with 9 updates @dependabot[bot] (#12696)
- Chore(deps): Bump ocrmypdf from 17.4.0 to 17.4.2 in the document-processing group across 1 directory @dependabot[bot] (#12687)
- Chore(deps-dev): Bump the development group with 2 updates @dependabot[bot] (#12683)
- Enhancement: Paperless-ngx v3 Logo @shamoon (#12673)
- Tweakhancement: localize some more task result messages @shamoon (#12672)
- Enhancement: chat message document links @shamoon (#12670)
- Fix: apply tag changes directly to document in db @shamoon (#12664)
- Tweakhancement: make upload notification open an anchor link @shamoon (#12659)
- Tweakhancement: tweak tasks UI, make open doc an anchor @shamoon (#12658)
- Fix: use only allauth login/logout endpoints @shamoon (#12639)
- Fix: Use FileResponse for file API responses @stumpylog (#12638)
- Chore: Paginate the task listing @stumpylog (#12633)
- Fix: correctly scope mail account enumeration @shamoon (#12636)
- Enhancement: show small task summary in system status @shamoon (#12634)
- Security: Don't allow the example secret key as a secret key @stumpylog (#12630)
- Chore(deps): Bump uuid from 13.0.0 to 14.0.0 in /src-ui in the npm_and_yarn group across 1 directory @dependabot[bot] (#12627)
- Enhancement: new Tasks UI @shamoon (#12614)
- Feature: Allow monitoring access to tasks summary @stumpylog (#12624)
- Chore(deps): Bump lxml from 6.0.2 to 6.1.0 in the uv group across 1 directory @dependabot[bot] (#12619)
- Performance: Increases workflow related M2M prefetching @stumpylog (#12618)
- Tweak: remove stale index warning @shamoon (#12616)
- Fixhancement: Exact custom field monetary exact searching @stumpylog (#12592)
- Performance: Resolves another N+1 query related to custom fields @stumpylog (#12617)
- Enhancement: add highlighting to title + content searches @shamoon (#12593)
- Feature: Redesign the task system @stumpylog (#12584)
- Fix: relative added date check visibility @shamoon (#12600)
- Fix: prevent intermediate change event when CustomFieldQueryAtom operator changes type @ggouzi (#12597)
- Chore(deps): Bump hono from 4.12.12 to 4.12.14 in /src-ui in the npm_and_yarn group across 1 directory @dependabot[bot] (#12585)
- Feature: Tune SQLite default settings for increased speed @stumpylog (#12580)
- Feature: Document fuzzy match improvements @stumpylog (#12579)
- Fix: reject invalid requests to API notes endpoint @ggouzi (#12582)
- Breaking: Remove the positional arguments from the pre/post consume scripts @stumpylog (#12573)
- Chore(deps): Bump follow-redirects from 1.15.11 to 1.16.0 in /src-ui in the npm_and_yarn group across 1 directory @dependabot[bot] (#12575)
- Chore(deps): Bump pillow from 12.1.1 to 12.2.0 in the uv group across 1 directory @dependabot[bot] (#12574)
- Chore(deps-dev): Bump pytest from 9.0.2 to 9.0.3 in the uv group across 1 directory @dependabot[bot] (#12568)
- Fix: do not submit permissions for non-owners @shamoon (#12571)
- Enhancement: validate and sanitize uploaded logos @shamoon (#12551)
- Chore(deps): Bump the utilities-minor group across 1 directory with 19 updates @dependabot[bot] (#12540)
- Chore(deps): Bump cryptography from 46.0.6 to 46.0.7 in the uv group across 1 directory @dependabot[bot] (#12546)
- Chore(deps-dev): Bump types-python-dateutil from 2.9.0.20260305 to 2.9.0.20260323 @dependabot[bot] (#12542)
- Chore(deps-dev): Bump types-pytz from 2025.2.0.20251108 to 2026.1.1.20260304 @dependabot[bot] (#12541)
- Chore(deps): Bump django-guardian from 3.3.0 to 3.3.1 in the utilities-patch group across 1 directory @dependabot[bot] (#12539)
- Chore(deps-dev): Bump zensical from 0.0.29 to 0.0.31 in the development group across 1 directory @dependabot[bot] (#12532)
- Chore(deps): Bump pdfjs-dist from 5.4.624 to 5.6.205 in /src-ui @dependabot[bot] (#12536)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group across 1 directory with 3 updates @dependabot[bot] (#12535)
- Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 5 updates @dependabot[bot] (#12533)
- Chore(deps-dev): Bump jest-preset-angular from 16.1.1 to 16.1.2 in /src-ui in the frontend-jest-dependencies group across 1 directory @dependabot[bot] (#12534)
- Chore(deps-dev): Bump @playwright/test from 1.58.2 to 1.59.0 in /src-ui @dependabot[bot] (#12537)
- Enhancement: add view_global_statistics and view_system_status permissions @shamoon (#12530)
- Chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates @dependabot[bot] (#12531)
- Fix: prevent duplicate parent tag IDs @shamoon (#12522)
- Breaking: Decouple OCR control from archive file control @stumpylog (#12448)
- Fixhancement: include sharelinks + bundles in export/import @shamoon (#12479)
- Chore: Better typed status manager messages @stumpylog (#12509)
- Enhancement: unify text search to use tantivy @shamoon (#12485)
- Feature: Consumer logging correlation @stumpylog (#12510)
- Chore(deps): Bump djangorestframework from 3.16.1 to 3.17.1 in the django-ecosystem group across 1 directory @dependabot[bot] (#12488)
- Chore(deps): Bump the document-processing group across 1 directory with 3 updates @dependabot[bot] (#12489)
- Chore(deps): Bump the utilities-patch group across 1 directory with 5 updates @dependabot[bot] (#12499)
- Security: Sign the Celery pickled tasks @stumpylog (#12504)
- Security enhancement: allow opt-in blocking internal mail hosts @shamoon (#12502)
- Feature: Replace Whoosh with tantivy search backend @stumpylog (#12471)
- Fix: dont defer tag change application in workflows @shamoon (#12478)
- Chore(deps): Bump aiohttp from 3.13.3 to 3.13.4 in the uv group across 1 directory @dependabot[bot] (#12486)
- Chore(deps): Bump lodash from 4.17.23 to 4.18.1 in /src-ui in the npm_and_yarn group across 1 directory @dependabot[bot] (#12498)
- Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 20 updates @dependabot[bot] (#12491)
- Chore(deps-dev): Bump @types/node from 25.4.0 to 25.5.0 in /src-ui @dependabot[bot] (#12494)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 4 updates @dependabot[bot] (#12493)
- Performance: support bulk edit without id lists @shamoon (#12355)
- Performance: deprecate and remove usage of
allin API results @shamoon (#12309) - Performance: support passing selection data with filtered document requests @shamoon (#12300)
- Fix: limit share link viewset actions @shamoon (#12461)
- Chore(deps): Bump cryptography from 46.0.5 to 46.0.6 in the uv group across 1 directory @dependabot[bot] (#12458)
- Tweakhancement: show file extension in StoragePath test @shamoon (#12452)
- Feature: Transition all checksums to use SHA256 @stumpylog (#12432)
- Chore(deps): Bump requests from 2.32.5 to 2.33.0 in the uv group across 1 directory @dependabot[bot] (#12441)
- Enhancement: auto-hide the search bar on mobile @shamoon (#12404)
- Chore: logger, response and template sanitization cleanup @shamoon (#12439)
- Fix: Respect workflow change_groups during consumption @stumpylog (#12431)
- Fix: add fallback ordering for documents by id after created @shamoon (#12440)
- Security: prevent prototype pollution in frontend settings and list view @shamoon (#12438)
- Chore(deps): Bump cbor2 from 5.8.0 to 5.9.0 in the uv group across 1 directory @dependabot[bot] (#12424)
- Fixhancement: default mail-created correspondent matching to exact @shamoon (#12414)
- Fix: validate date CF value in serializer @shamoon (#12410)
- Chore(deps): Bump tinytag from 2.2.0 to 2.2.1 in the uv group across 1 directory @dependabot[bot] (#12396)
- Fix: Scope the workflow saves to prevent clobbering filename/archive_filename @stumpylog (#12390)
- Fix: avoid moving files if already moved @shamoon (#12389)
- Chore(deps): Bump ujson from 5.11.0 to 5.12.0 @dependabot[bot] (#12387)
- Fix: remove pagination from document notes api spec @shamoon (#12388)
- Chore(deps): Bump pyasn1 from 0.6.2 to 0.6.3 @dependabot[bot] (#12370)
- Chore(deps): Bump the utilities-patch group across 1 directory with 2 updates @dependabot[bot] (#12382)
- Chore(deps): Bump openai from 2.24.0 to 2.26.0 in the utilities-minor group @dependabot[bot] (#12379)
- Chore(deps-dev): Bump types-python-dateutil from 2.9.0.20260124 to 2.9.0.20260305 @dependabot[bot] (#12380)
- Chore(deps): Update django-allauth[mfa,socialaccount] requirement from ~=65.14.0 to ~=65.15.0 @dependabot[bot] (#12381)
- Chore(deps-dev): Bump the frontend-jest-dependencies group in /src-ui with 2 updates @dependabot[bot] (#12374)
- Chore(deps): Bump @ng-select/ng-select from 21.4.1 to 21.5.2 in /src-ui in the frontend-angular-dependencies group @dependabot[bot] (#12373)
- Chore(deps-dev): Bump @types/node from 25.3.3 to 25.4.0 in /src-ui @dependabot[bot] (#12376)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 4 updates @dependabot[bot] (#12375)
- Fix: fix file button hover color in dark mode @shamoon (#12367)
- Fixhancement: only offer basic auth for appropriate requests @shamoon (#12362)
- Chore: Reduce system status test times @stumpylog (#12354)
- Chore(deps): Bump pyopenssl from 25.3.0 to 26.0.0 @dependabot[bot] (#12363)
- Chore(deps): Bump pyjwt from 2.10.1 to 2.12.0 @dependabot[bot] (#12335)
- Change: sort custom fields alphabetically by default @shamoon (#12358)
- Feature: Add progress information to the classifier training for a better ux @stumpylog (#12331)
- Chore: bump Angular dependencies to 21.2.x @shamoon (#12338)
- Bump ocrmypdf from 16.13.0 to 17.3.0 in the document-processing group @dependabot[bot] (#12267)
- Feature: document parser plugin framework @stumpylog (#12294)
- Fix: correct dropdown list active color in dark mode @shamoon (#12328)
- Chore(deps): Bump tornado from 6.5.4 to 6.5.5 @dependabot[bot] (#12327)
- Enhancement: Make the StatusConsumer truly async @stumpylog (#12298)
- Chore(deps): Bump the utilities-minor group across 1 directory with 5 updates @dependabot[bot] (#12324)
- Fixhancement: clear descendant selections in dropdown when parent toggled @shamoon (#12326)
- Chore: mark document detail email action as deprecated @shamoon (#12308)
- Fix: prevent wrapping with larger amounts of tags on small cards, reset moreTags setting to correct count @shamoon (#12302)
- Chore: separate actions from bulk edit endpoint @shamoon (#12286)
- Fix: prevent stale db filename during workflow actions @shamoon (#12289)
- [BREAKING] Chore: drop support for api versions < 9 @shamoon (#12284)
- Chore(deps): Bump the utilities-patch group across 1 directory with 6 updates @dependabot[bot] (#12291)
- Performance: Stream JSON during import for memory improvements @stumpylog (#12276)
- Feature: Migrate import/export to rich progress @stumpylog (#12260)
- Enhancement: Show more document details in merge dialog @svenstaro (#12271)
- Performance: Further export memory improvements @stumpylog (#12273)
- Chore: pytest style paperless tests @stumpylog (#12254)
- Chore: update ESLint to v10 @shamoon (#12256)
- Bump django-allauth from 65.14.0 to 65.14.1 @dependabot[bot] (#12253)
- Bump django from 5.2.11 to 5.2.12 @dependabot[bot] (#12249)
- [BREAKING] Chore: Drop support for Python 3.10 @stumpylog (#12234)
- Performance: Improve exporter memory efficiency @stumpylog (#12236)
- Enhancement: saved view sharing @shamoon (#12142)
- Fix: support string coercion in filepath jinja templates @shamoon (#12244)
- Fix: use maxsplit=1 in Redis URL parsing to handle URLs with multiple colons @cryptomilk (#12239)
- Fix: apply ordering after annotating tag document count @shamoon (#12238)
- Enhancement: “live” document updates @shamoon (#12141)
- Fix: enforce path limit for db filename fields @shamoon (#12235)
- Enhancement: Improve the retagger output using rich @stumpylog (#12194)
- Enhancement: Transition sanity check to rich and improve output @stumpylog (#12182)
- Enhancement: Switch all indexing to use rich @stumpylog (#12193)
- Chore(deps): Bump whitenoise from 6.11.0 to 6.12.0 in the django-ecosystem group @dependabot[bot] (#12192)
- Fixhancement: show sequential + id version labels, fix padding @shamoon (#12196)
- [BREAKING] Chore: Refactor advanced database settings to allow more user configuration @stumpylog (#12165)
- Chore(deps): Bump the utilities-patch group across 1 directory with 11 updates @dependabot[bot] (#12179)
- Feature: Switch progress bar library to rich @stumpylog (#12169)
- Chore(deps): Bump nltk from 3.9.2 to 3.9.3 @dependabot[bot] (#12177)
- Enhancment: Formatted filename for single document downloads @JanKleine (#12095)
- Fixhancement: config option reset @shamoon (#12176)
- Chore(deps): Bump the utilities-minor group across 1 directory with 7 updates @dependabot[bot] (#12174)
- Feature: document file versions @shamoon (#12061)
- [BREAKING] Chore: Remove API v1 @stumpylog (#12166)
- Fix: correct page count by separating display vs collection sizes for tags @shamoon (#12170)
- Enhancement: prevent duplicate mail processing across rules @shamoon (#12159)
- Feature: move to trash action for workflows @JanKleine (#11176)
- Tweakhancement: reset to page 1 on reset filters @shamoon (#12143)
- Fix: correct user dropdown button icon styling @shamoon (#12092)
- Enhancement: consolidate management lists into document attributes section @shamoon (#12045)
- Enhancement: option to stop processing further mail rules @shamoon (#12053)
- [BREAKING] Chore: Remove pybzar as a barcode reader @stumpylog (#12065)
- Chore(deps): Bump pillow from 12.1.0 to 12.1.1 @dependabot[bot] (#12064)
- Chore(deps): Bump cryptography from 46.0.3 to 46.0.5 @dependabot[bot] (#12060)
- Chore: Optimizes the integer fields for choice types @stumpylog (#12057)
- Chore(deps): Bump the utilities-patch group across 1 directory with 3 updates @dependabot[bot] (#12051)
- Tweak: improve 2-digit year parsing @shamoon (#12044)
- Enhancement: pngx pdf viewer @shamoon (#12043)
- Fix: Handle an OOM kill of celery workers in the task handler @stumpylog (#12040)
- Chore(deps-dev): Bump @playwright/test from 1.58.1 to 1.58.2 in /src-ui @dependabot[bot] (#12032)
- Chore(deps): Bump the utilities-minor group across 1 directory with 2 updates @dependabot[bot] (#12020)
- Fixhancement: improve ASN handling with PDF operations @shamoon (#11689)
- Upgrade: Bump @types/node from 25.2.0 to 25.2.1 in /src-ui @dependabot[bot] (#12008)
- Upgrade: Bump webpack from 5.103.0 to 5.105.0 in /src-ui @dependabot[bot] (#12007)
- Chore: bump Angular to 21.1.3, ngx-ui-tour-ng-bootstrap to v18 @shamoon (#12015)
- Chore: Switches to use prek in place of pre-commit @stumpylog (#12002)
- Performance fix: use subqueries to improve object retrieval in large installs @shamoon (#11950)
- Chore(deps): Bump the utilities-patch group with 3 updates @dependabot[bot] (#11981)
- Chore(deps): Bump the utilities-minor group across 1 directory with 6 updates @dependabot[bot] (#11993)
- Chore(deps): Bump drf-spectacular-sidecar from 2025.10.1 to 2026.1.1 @dependabot[bot] (#11985)
- Chore(deps): Update django-allauth[mfa,socialaccount] requirement from ~=65.13.1 to ~=65.14.0 @dependabot[bot] (#11984)
- Chore(deps): Update granian[uvloop] requirement from ~=2.6.0 to ~=2.7.0 @dependabot[bot] (#11983)
- Chore(deps): Bump django from 5.2.10 to 5.2.11 @dependabot[bot] (#11988)
- Feature: Enable users to customize date parsing via plugins @stumpylog (#11931)
- Chore: Fix further test flakiness @stumpylog (#11987)
- Feature: password removal workflow action @shamoon (#11665)
- Fix: re-run ASN check after barcode detection @shamoon (#11681)
- Fix: prevent infinite loading crash in mail component @shamoon (#11978)
- Enhancement: per-type object page sizing @shamoon (#11977)
- Chore(deps): Bump the frontend-angular-dependencies group in /src-ui with 22 updates @dependabot[bot] (#11968)
- Chore(deps): Bump zone.js from 0.15.1 to 0.16.0 in /src-ui @dependabot[bot] (#11970)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 4 updates @dependabot[bot] (#11969)
- Chore(deps-dev): Bump @types/node from 24.10.1 to 25.2.0 in /src-ui @dependabot[bot] (#11972)
- Chore(deps-dev): Bump @playwright/test from 1.57.0 to 1.58.1 in /src-ui @dependabot[bot] (#11971)
- Enhancement: improve filter drop-down performance with virtual scrolling @shamoon (#11973)
- Tweakhancement: tweak bulk delete text @shamoon (#11967)
- Feature: support split documents based on tag barcodes @schober-ch (#11645)
- Chore: Bulk backend updates @stumpylog (#11543)
- Tweak: increase minimum screen width before inserting padding @JanKleine (#11926)
- Enhancement: Add setting for default PDF Editor mode @JanKleine (#11927)
- Fixhancement: auto-queue llm index if needed @shamoon (#11891)
- Feature: sharelink bundles @shamoon (#11682)
- Enhancement: user control of doc details fields @shamoon (#11906)
- Enhancement: improve relative dates in date filter @JanKleine (#11899)
- Performance: faster statistics panel on dashboard @Merinorus (#11760)
- Enhancement: allow duplicates with warnings, UI for discovery @shamoon (#11815)
- Enhancement: configurable SSO groups claim @Gabgobie (#11841)
- Enhancement: support select all for management lists @shamoon (#11889)
- Fix: extract all ids for nested tags @shamoon (#11888)
- Tweakhancement: display document id, with copy @shamoon (#11896)
- Enhancement: Add support for app oidc @paulgessinger (#11756)
- Fixhancement: change date calculation for 'this year' to include future documents @shamoon (#11884)
- Enhancement: Add 'any of' workflow trigger filters @shamoon (#11683)
- [BREAKING] Chore: Remove support for document and thumbnail encryption @stumpylog (#11850)
- Fix: use correct field id for overrides @shamoon (#11869)
- Fix: ensure css color-scheme for dark mode @shamoon (#11855)
- Enhancement: support doc_id placeholder in workflow templates @shamoon (#11847)
- [BREAKING] Feature: Simplify and improve the consumer @stumpylog (#11753)
- Fix: fix tag list horizontal scroll, again @shamoon (#11839)
- Fix: ensure horizontal scroll for long tag names in list, wrap tags without parent @shamoon (#11811)
- Chore(deps): Bump the utilities-patch group across 1 directory with 7 updates @dependabot[bot] (#11793)
- Chore(deps): Bump the utilities-minor group across 1 directory with 10 updates @dependabot[bot] (#11799)
- Chore(deps): Bump pyasn1 from 0.6.1 to 0.6.2 @dependabot[bot] (#11801)
- Chore(deps): Bump torch from 2.7.1 to 2.8.0 @dependabot[bot] (#11800)
- Chore(deps): Bump brotli from 1.1.0 to 1.2.0 @dependabot[bot] (#11796)
- Chore(deps): Bump transformers from 4.51.3 to 4.53.0 @dependabot[bot] (#11797)
- Chore(deps): Bump django from 5.2.7 to 5.2.9 @dependabot[bot] (#11794)
- Chore(deps): Bump the llama-index group @dependabot[bot] (#11798)
- Chore(deps): Bump marshmallow from 3.26.1 to 3.26.2 @dependabot[bot] (#11790)
- Chore(deps): Bump uv from 0.9.3 to 0.9.6 @dependabot[bot] (#11795)
- Chore(deps): Bump aiohttp from 3.11.18 to 3.13.3 @dependabot[bot] (#11789)
- Chore(deps): Bump urllib3 from 2.5.0 to 2.6.3 @dependabot[bot] (#11792)
- Chore(deps): Bump virtualenv from 20.34.0 to 20.36.1 @dependabot[bot] (#11774)
- Fix: use explicit order field for workflow actions @shamoon (#11781)
- Chore(deps): Bump azure-core from 1.33.0 to 1.38.0 @dependabot[bot] (#11776)