papra-hq/papra @papra/app@26.6.2

on GitHub

Patch Changes

• #1324 8a3653c Thanks @CorentinTh! - Collapse the mobile menu sheet when navigating to a new page.

• #1453 a64cbba Thanks @CorentinTh! - Fixed an issue where setting AUTH_IS_REGISTRATION_ENABLED=false hid the sign-up interface but did not block email and password registrations made directly through the authentication API.

• #1442 03f4ad4 Thanks @sp71! - Include the tag name in the tag deletion confirmation message.

• #1407 30760f5 Thanks @CorentinTh! - Added a deletion confirmation modal when deleting a tagging rule, to prevent accidental deletion of tagging rules.

• #1326 0247a7a Thanks @CorentinTh! - Added some database indexes for better performances.

• #1416 5d43402 Thanks @ybizeul! - Fix PDF content preview rendering issue after navigation

• #1420 510c162 Thanks @qmarlats! - Fixed the batch document selection remaining in "select all matching documents" mode after unselecting documents.

• #1365 881796e Thanks @CorentinTh! - Increased and made configurable the timeout of content extraction external service.
  Docling, Mistral OCR, and Azure DI can now take up to 5 minutes to process a document, instead of the previous 30 seconds, configurable via DOCLING_REQUEST_TIMEOUT_MS, MISTRAL_OCR_REQUEST_TIMEOUT_MS and AZURE_DI_REQUEST_TIMEOUT_MS respectively.

• #1432 a0ce312 Thanks @CorentinTh! - Prevent stripe webhook forgery for apps with unconfigured webhooks secrets.

  Thank you to Andrew Gonzalez (@bruhdev1290) for the responsible disclosure of this issue.

• #1362 8adb16d Thanks @CorentinTh! - Fix mistral ocr replacing tables with external references, no more [tbl-0.md](tbl-0.md) in extracted content, the tables are now properly extracted and included in the content.

• #1357 bad01b7 Thanks @CorentinTh! - Added a skeleton loader in the sidenav organization picker when fetching organizations

• #1352 0de24f5 Thanks @MarcSerraPeralta! - Added Catalan language

• #1348 12e1d4b Thanks @CorentinTh! - Security fix: document share links belonging to a soft-deleted organization were still publicly accessible. Public access (document metadata, file download, and password verification) now stops with a 410 Gone as soon as the organization is deleted, and resumes automatically if the organization is restored during the grace period.

  Thank you to Thammachart Sittharod for the responsible disclosure of this issue.

• #1406 d178643 Thanks @CorentinTh! - Security fix: revoke all user sessions on password reset.

  Thank you to MMartinez for the responsible disclosure of this issue.