BigBlueButton 3.0.7 → 3.0.26
19 releases · 8 breaking changes · 22 security fixes · 16 advisories fixed
22security8breaking1deprecated105feature293fix
Vulnerabilities fixed by this upgrade
- 5.4 GHSA-j43j-jmqf-2fg6 Missing server-side enforcement of the maximum number of custom poll options
- 9.6 GHSA-v28f-mvg5-mv7m Arbitrary local file read via crafted SVG presentation upload
- 7.1 CVE-2026-46355 Unauthenticated Session Hijack via Exposed /bigbluebutton/api/handleJoinExistingUser
- 8.5 CVE-2026-46682 Blind SQL Injection AUTH (Moderator)
- 8.1 CVE-2026-46353 BigBlueButton API checksum bypass via presentationUploadExternalUrl
- 6.8 CVE-2026-46404 Presentation URL Security Hardening
- 8.1 CVE-2026-46351 Insecure Randomness allows to guess user's conference session token and impersonate them
- 8.9 CVE-2026-27737 Stored XSS in bbb-playback replay
- 6.5 CVE-2026-41127 Missing authorization allows viewer to inject/overwrite captions
- 4.3 CVE-2026-41126 Open Redirect on bigbluebutton through bigbluebutton/api/join via get-parameter "logoutURL"
- 6.1 CVE-2026-27736 Open Redirect vulnerability in ApiController
- 2.0 CVE-2026-27467 Audio from participants to the server initially unmuted
- 7.2 CVE-2026-27466 Exposed ClamAV port allowing denial of service
- 7.1 CVE-2025-55200 Stored XSS via name of user at Shared Notes
- 7.5 CVE-2025-61601 DoS via PollSubmitVote GraphQL mutation leads to BigBlueButton server crash
- 7.5 CVE-2025-61602 Reacting to messages can make the chat unusable.
Breaking changes
- breaking Ref(html5): Remove non-used settings in 3.0.25
- breaking indirectly: * fix(tldraw): remove unnecessary extra zoom call + in 3.0.19
- breaking fix (gql-server): Remove length-constrained user columns (for values provided via API or config) in 3.0.16
- breaking Refactor (html5): Remove Subscriptions and Add Conditional Execution for Performance Optimization in 3.0.14
- breaking refactor (gql-server): Remove unused indexes from the bbb_graphql database in 3.0.12
- breaking fix (gql-server): Remove unused voiceConf fields from Graphql and fix UserVoice race condition in 3.0.8
- breaking cleanup (gql-server): Removes graphql Type meeting_metadata in 3.0.8
- breaking Recording: Remove 'duration' lines from ffmpeg playlist in 3.0.8
Security changes
- security Missing authorization allows viewer to inject/overwrite captions https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-q387-2q28-mg33 in 3.0.24
- security Open Redirect on bigbluebutton through bigbluebutton/api/join via get-parameter "logoutURL" https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-cvwj-4pcp-f3g8 in 3.0.24
- security fix(bbb-web): Make ApiController Helper Methods Private contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-38fw-2gq7-ccgr will be made public not earlier than March 24, 2026 in 3.0.23
- security fix(core): enforce maxCustom poll settings on akka contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-j43j-jmqf-2fg6 will be made public not earlier than March 24, 2026 in 3.0.23
- security fix(akka-apps): Use Bind Parameters in SQL Query contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-gfv2-46v4-jvw5 will be made public not earlier than March 24, 2026 in 3.0.23
- security fix(bbb-web): Fix Presentation Download URL Validation by @paultrudel @gustavotrott in https://github.com/bigbluebutton/bigbluebutton/commit/7ccc60c965d744d9fb637715052352a1e59a2c27 contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-xqm3-6q7q-4v5h will… in 3.0.23
- security fix(core): enforce chat min-max character settings on akka contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-qfv6-rv7x-6rq6 will be made public not earlier than March 24, 2026 in 3.0.23
- security Fix(akka): restrict markdown chat content contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-3m6h-47j2-83r4 will be made public not earlier than Feb 24, 2026 in 3.0.22
- security [3.0]chore: clamav tighten command contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-wmhx-qw2p-w6gc will be made public not earlier than Feb 24, 2026 in 3.0.22
- security fix(bbb-web): Prevent Checksum Bypass With PresentationUploadExternalUrl contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-43hc-5g2m-cqff will be made public not earlier than Feb 10, 2026 in 3.0.21
- security fix(bbb-web): Use Secure PRNG for ID and Token Generation contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-7959-pf2v-xc4h will be made public not earlier than Feb 10, 2026 in 3.0.21
- security fix(audio): ensure MediaStreamTrack is disabled on first join + mute contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-6gj9-5rhm-68j8 will be made public not earlier than Feb 10, 2026 in 3.0.20
- security fix(bbb-web): Ignore ErrorRedirectUrl on Checksum Validation Failure contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-65cv-rg9f-qqrx will be made public not earlier than Feb 10, 2026 in 3.0.20
- security [Snyk] Security upgrade lodash from 4.17.21 to 4.17.23 in 3.0.20
- security build: bbb-playback to 5.4.3 contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-8vv7-vj94-q2pv will be made public not earlier than Feb 2, 2026 in 3.0.19
- security Fixes GHSA-v28f-mvg5-mv7m: Arbitrary local file read via crafted SVG presentation upload in 3.0.16
- security [Snyk] Security upgrade axios from 1.8.3 to 1.12.0 in 3.0.15
- security refactor: remove emoji id from chat reactions contains a security fix. https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5m8m-h7fj-8wx6 will be made public circa Sept 1, 2025 in 3.0.13
- security fix (gql-actions): Add validation for mutation pollSubmitUserVote contains a security fix. https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-73j3-v3fq-fqx5 will be made public circa Sept 1, 2025 in 3.0.13
- security [Snyk] Security upgrade form-data from 4.0.2 to 4.0.4 in 3.0.13
- security build: Bump bbb-pads to 1.5.4 contains a security fix. https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-9jv9-cjrm-grj2 will be made public cicra Sept 1, 2025 in 3.0.13
- security Update SECURITY.md in 3.0.9
Deprecations
- deprecated [3.0 external video share] remove deprecated parameters in 3.0.26
Every release in between
fixfix(html5): keep loading screen during graphql retries and show error screen on connection timeout
fixfix(html5): prevent pinch-to-zoom for viewers and WB users on touch devices
fixfix: suppress join/leave notifications for locked viewers when hideUserList is active
fixfix (html5): Export of Block Notes broken for cluster setup
fixfix: blocknote placeholder wrap when container size too small
other[3.0 port] fix: exclude audio-only tiles from SFU subscription and plugin buttons
featurefeat (html5): Implement static toolbar for BlockNote
deprecated[3.0 external video share] remove deprecated parameters
other[3.0 locales] Updates for project BigBlueButton v3.0 HTML5 client
otherchore(livekit): enable reconnectOnFatalFailure by default
fixfix(livekit): dial-in unable to be heard by web users
other[3.0 port] fix(bbb-web): respond to /create before downloading pre-uploaded presentations
fixfix(bbb-web): Upgrade Dependencies
fixrecording: Fix hang when deskshare audio ends before video
fixfix (build): Install XDG_RUNTIME_DIR drop-in in Docker for bbb-shared-notes-server
otherdocs: Document lockSettingsHideViewersAnnotation /create parameter
otherdocs: Fix livekit setup commands
otherdocs: Mention sharedNotesEditor was added as a create param
otherdocs: Refactor/restructure BBB 3.0 api changes to be more readable
otherdocs: Fix - strings were being interpreted as True
otherdocs: Simplify bbb-web dev instructions
otherdocs: Document events.xml LayoutBroadcastedEvent addition
otherdocs: Fix typos and iterate over 3.0 docs
otherdocs: bump bbb version to 3.0.26
other[3.0 doc] Guide to use developing html5 client
otherci: bump GitHub Actions to Node 24 versions
fixfix(whiteboard): prevent presenter/viewer viewed-region desync after fullscreen
fixFix(html5): Make the cursor point respect the pointerDiameter setting
fixfix(html5): Notifications being clipped on mobile
fixfix(html5): fix question detection and indented option matching
fixfix: review breakout room moderator actions
fixfix: Breakouts: viewers sent to waiting lobby
fixFix(html5): WB camera position change on slide change when zoom applied
fixFix(html5): zoom with mouser wheel not being centered
fixfix: client crashes when a invalid layout is set in local storage(port to 3.0)
fixfix(html5, tests): only display allowed shapes in edit mode
fixfix(chat): display message timestamp using locale-aware time format
fixFix(html5): cursor zoom misalignment
fixFix(html5): cursor appearing on wrong position to viewers
fixfix: State events leak between user sessions or tabs
featurefeat: Block note integration
breakingRef(html5): Remove non-used settings
featurefeat: extend audio groups to cameras and screen sharing
otherrefactor(livekit): review camera and screen sharing quality presets and simulcast layers
featurefeat(livekit): option to use LiveKit as the client's audio state source
featurefeat(livekit): add a last N-like system to selective subscription (audio)
fixfix(livekit): only display screenshare volume control if there's audio
fixfix(livekit): use LK APIs for WebRTC stats gathering, fix edge cases
featurefeat(html5): Automate asset compression with Webpack
fixfix(html5): exclude .gz files from language selector list
otherRef(html5): Make webcam show ui on hover or touch hold
otherci: remove 3rd-party packages pull + install
othertests: update connection status tests
othertests: update flaky tests
fixfix(plugin-sdk): screenshare blocks snapshot of current slide for plugin-sdk
fixfix(plugin-sdk): Change loading value of a subscription when data didn't change
fixfix(LAD): Generic data keeps updating in plugin's table
featurefeat(plugin-sdk): Add svg icon for all extensible areas
fixfix(bbb-web): Disable External Entity Parsing in XML Services
featurefeat (bbb-web): Introduce a new /create param clientSettingsOverrideJsonUrl
fixfix(akka-apps): Remove Unnecessary Akka Apps Logging
fixfix(bbb-web): Upgrade Grails and Spring Boot
fixfix(bbb-web): Prevent SVGs From Being Generated With Zero Value Dimensions
fixFix(akka): Add Disable feature support for plugins
fixfix(LAD): Legacy dasboard data files not working with newer version of BBB
fixfix(recording): Address A/V sync issues, glitches on cuts, ffmpeg memory usage (audio)
+36 more items in the release notessecurityMissing authorization allows viewer to inject/overwrite captions https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-q387-2q28-mg33
securityOpen Redirect on bigbluebutton through bigbluebutton/api/join via get-parameter "logoutURL" https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-cvwj-4pcp-f3g8
fixFix(html5): The video preview and audio modals open even with the lock settings settings enabled
fixfix: trim spaces of external video url
otherUpdate external video label to remove unsupported platform
fixfix: WhiteBoard Ctrl+D work only once
fixfix: userdata-bbb_override_default_locale is ineffective in guest lobby
otherBreakouts: ensure moderator only functionality is not shown
featurefeat: Make webcamBackgroundURL available in breakouts
fixFix(html5): Space bar key problem on WB
otherstyle: Improve visual hierarchy and UX of guest lobby screen by @tylercopeland @ramonlsouza
fixFix(html5): Recalculate time sync when a new minimal rtt is available
fixfix: talking indicator behind webcam area - custom and smart layouts
fixfix(html5): session details closing when user talks
fixfix(whiteboard): scope slide zoom state to presentation id by @ramonlsouza @germanocaumo
otherrefactor(client): Reword You have been banned message
otherchore: temporarily disable breakout audio transfer UI when using LiveKit
othertest: add test cases for external video
fixfix (ci): attempt to fix: Error: Input required and not supplied: token for Cleanup Playwright reports workflow
otherci: avoid running GH workflows after PR is merged when it's not necessary at this point
other[3.0 locales] Updates for project BigBlueButton v3.0 HTML5 client https://github.com/bigbluebutton/bigbluebutton/pull/24667 https://github.com/bigbluebutton/bigbluebutton/pull/24733
otherUpdates for project BigBlueButton v3.0 HTML5 client and language eu
fixfix (akka-apps): Prevent race condition when a user joins a breakout room
fixfix (gql-server): Not re-assigning users to their last breakout room
fixfix (akka-apps): not storing user activity for breakout rooms (only main meeting)
otherrefactor(core): Breakouts moderator vs viewer
otherrefactor: drop logging of password/authToken
securityfix(bbb-web): Make ApiController Helper Methods Private contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-38fw-2gq7-ccgr will be made public not earlier than March 24, 2026
securityfix(core): enforce maxCustom poll settings on akka contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-j43j-jmqf-2fg6 will be made public not earlier than March 24, 2026
fixfix: Additional checks in polls
securityfix(akka-apps): Use Bind Parameters in SQL Query contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-gfv2-46v4-jvw5 will be made public not earlier than March 24, 2026
securityfix(bbb-web): Fix Presentation Download URL Validation by @paultrudel @gustavotrott in https://github.com/bigbluebutton/bigbluebutton/commit/7ccc60c965d744d9fb637715052352a1e59a2c27 contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-xqm3-6q7q-4v5h will…
securityfix(core): enforce chat min-max character settings on akka contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-qfv6-rv7x-6rq6 will be made public not earlier than March 24, 2026
otherchore(recording): Bump bbbevents to 2.0.3
fixfix(recording): Detect system sender correctly in breakouts recording
otherRecording: avoid short cuts in audio processing
otherbuild: require running redis for bbb-export-annotations.service
otherbuild: [email protected] (up from v1.9.9), [email protected] (up from v2.3.1), +
otherbuild: Update .gitlab-ci.yml with Go 1.26.0 and NodeJS 22.22.0
featureAdd firewalld support to apply-lib.sh
fixfix(conf): Avoid bbb-conf noise on empty bigbluebutton.properties
featurefeat(conf): Warn about retired bbb-web properties
+6 more items in the release notesfixFix(html5): Annotations get transferred to another presentation
otherrefactor: camera custom pagination settings
fixfix (html5): Always include presenter in cursors list
otherRefactor(html5): Improve deduplication logic for toastify
fixfix(audio): missing CC icon in talking indicator (mediasoup/FS)
fixfix: userdata-bbb_auto_share_webcam=true causes webcams to stay enabled when joining breakout rooms
fixfix: Leave meeting button oversize area
otherrefactor: remove unused component
fixfix: pushLayout default settings
fixfix: audio modal should have precedence over video modal
featureIntroduce showAudioOnlyOnFirstPage and maxAudioOnlyUsers settings
fixFix(html5): Eraser not being persisted in the batch
fixfix: audio-only tiles appear in all layouts
othertest(docs): Update README and remove config for browsers not fully supported
otherrefactor: Add data-test to a few user-list components
fixfix(workflow): Update publish-results workflow with robust PR resolution, cleanup, and in‑progress rerun handling
fixfix(workflow): Publish test-results under workflow ID
othertests: adjust toast element check
othertest(chore): [Snyk] Security upgrade axios from 1.12.2 to 1.13.5 https://github.com/bigbluebutton/bigbluebutton/pull/24632
otherUpdates for project BigBlueButton v3.0 HTML5 client and language et https://github.com/bigbluebutton/bigbluebutton/pull/24600
otherrefactor (gql-middleware): Make message caches meeting-scoped
securityFix(akka): restrict markdown chat content contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-3m6h-47j2-83r4 will be made public not earlier than Feb 24, 2026
fixfix(core): Fix transcription problem with multiple users speaking at the same time
fixfix(export): respect autoSize property for text annotations
otherchore(export-annot): Bump axios to 1.13.5 by @antobinary in https://github.com/bigbluebutton/bigbluebutton/pull/24640
fix[3.0]docs: Fix broken links
otherdocs: Adjust wording of welcome message location
security[3.0]chore: clamav tighten command contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-wmhx-qw2p-w6gc will be made public not earlier than Feb 24, 2026
fixFix(html5): presentation moving to old position when enable infinite WB
fixFix(html5): missing space in some locales on waiting room queue
featurefeat(ci): Restore upload of merge HTML reporter to publish tests
fixfix(ci): refine conditions for publishing test results and handling blob reports
otherUpdates for project BigBlueButton v3.0 HTML5 client and language hu_HU
otherUpdates for project BigBlueButton v3.0 HTML5 client and language ar
securityfix(bbb-web): Prevent Checksum Bypass With PresentationUploadExternalUrl contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-43hc-5g2m-cqff will be made public not earlier than Feb 10, 2026
securityfix(bbb-web): Use Secure PRNG for ID and Token Generation contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-7959-pf2v-xc4h will be made public not earlier than Feb 10, 2026
fixfix (akka-apps): list of breakout rooms doesn't update when user is promoted/demoted
otherref(plugin): refactor the code of plugin logger to be more robust
fixfix(bbb-conf): Use turnutils_stunclient instead of old stun 0.97 client
otherbuild: Bump bbb-pads to 1.5.7
otherbuild: Bump bbb-pads to 1.5.8
otherdocs: Add docs for meta_analytics-callback-url
otherdocs: set a random domain as example in Docs
fixfix(livekit): trigger forced room reconnection on fatal errors
fixfix(livekit): frozen cams on reconn, camera bridge improvements
fixfix(livekit): frozen screen share on reconnects
other[3.0] fix(chat): audio alerts playing when panel is opened
fixfix: drop areas appearing when presentation is removed
fixfix (html5): Show chat message notification from html version of the message (instead of markdown)
fixfix: Virtual background image upload fails when userdata-bbb_hide_notifications is set to true
fixfix(html5/chat): Remove unstable chat scrolling log
fixFix(html5): chat counter stale due race condition on mark message as read
fixfix: Raise hand notification not working for second moderator
fixfix(html5): exclude worker.ts from ReactRefresh so hot reload can work
fixfix: Leave button opens empty dropdown
fixFix(html5): talking indicator being covered by webcam
otherrefactor(html5): Replace isMeteorConnected prop with isConnected across UI components
securityfix(audio): ensure MediaStreamTrack is disabled on first join + mute contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-6gj9-5rhm-68j8 will be made public not earlier than Feb 10, 2026
fixFix(html5): moderators were unable to unlock users via the Raised Hand list.
fixfix(audio): legacy listen only broken due to undefined argument
fixFix(html5): Pinch zoom not propagating on WB
fixFix(html5): enforce meetingId filtering across user-related data streams
fixfix(plugins-sdk): compare generic content items by their id
featurefeat(plugin): Add nameSortable and bot in the UsersBasicInfo data hook
featurefeat(plugin): added z-index to floating-window
featurefeat: added more fields to useMeeting hook and created a projection feature
featurefeat(publish-reports): add action to publish Playwright reports to GitHub Pages
fixfix(workflows): update repository references for Playwright reports
fixfix(workflows): Add artifact existence check for test reports in automated tests workflow
featurefeat (gql-server): Add breakout room participant activity tracking
featurerefactor (gql-middleware): Reject new mutations once the rate limit is reached, instead of delaying them
featurechore (gql-middleware): Introduce a config to dump queries to files (for debugging)
fixFix(graphql-server): Change type of some breakout name related fields to text
securityfix(bbb-web): Ignore ErrorRedirectUrl on Checksum Validation Failure contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-65cv-rg9f-qqrx will be made public not earlier than Feb 10, 2026
featurefeat(LAD/akka): Added new functions for the plugin to publish data to LAD
featurefeat: added fields IP, User-Agent, Referer and sessionToken to UserJoinedMeetingEvtMsg
fixFix(akka, html5): Prevent upload error notifications when converting breakout rooms with no changes
fixfix(bbb-web): Fallback to Using Blank Files if Page Downscaling Fails
featurerecording: Add archival of learning analytics dashboard
featurefeat(recording): Recording dynamic video
fixfix(recording): Add check for notes_id undefined in events_worker.rb
fixfix: Build replaces part of variable names with client version
security[Snyk] Security upgrade lodash from 4.17.21 to 4.17.23
+35 more items in the release notesfeaturefeat: Layout System Revamp (no dialog, intro of Unified layout)
featurefeat: Layout System Revamp (Camera sorting and pagination)
fixfix(client): Fix possible undefined function
fixfix(livekit): broken volume control for plugin SDK and away mode
fixfix(livekit): SIP calls aren't accepted w/o published audio tracks
fixfix(livekit): stricter measures to prevent publish-unpublish loops, +
fixfix: Lock Settings should not be visible in breakout rooms
fixfix: LiveKit token update fails on database
fixfix(html5/user-list): Append both user name and user id
fixfix(tldraw): remove unnecessary extra zoom call +
fixfix: Can't start a quiz with "true/false" or "yes/no/abstention" in languages other than english
otherstyle(poll): Increase visible area of typed responses
fixfix: unified layout updates
feature(tests): Add tests for "create breakout rooms" buttons
feature(tests): Add tests for breakout rooms sharing audio and video
feature(tests): Add test for "group parameters" (breakout room pre-selection)
feature[3.0] Adds the test upload multiple presentation on ci
otherchore(client): [Snyk] Security upgrade validator from 13.12.0 to 13.15.22
otherchore: Drop SVG presentation file support (client side)
otherUpdates for project BigBlueButton v3.0 HTML5 client and language tr
otherUpdates for project BigBlueButton v3.0 HTML5 client and language ar
otherUpdates for project BigBlueButton v3.0 HTML5 client and language it_IT
otherUpdates for project BigBlueButton v3.0 HTML5 client and language ru
otherUpdates for project BigBlueButton v3.0 HTML5 client and language et
otherrefactor(bbb-web): Remove Support For SVG Uploads
otherchore(bbb-graphql-actions): [Snyk] Security upgrade express from 5.0.1 to 5.2.0
fixfix(sec): core: Bump spring-data-commons from 3.4.4 to 3.4.10
fixfix(sec): core: bbb-web commons-validator bump from 1.7 to 1.10.0
otherchore(core): Bump scalaVersion from 2.13.9 to 2.13.18
fixfix(bbb-web): Fix defaultHTML5ClientUrl trailing slash
fixfix(sec): core: Update tika related bbb-web dependencies
fixfix(bbb-web/akka): Error while loading plugins
fixfix: Do not allow private chat in Breakouts if it the parent room had it locked
otherrefactor: move pinned notes notification to backend
breakingindirectly: * fix(tldraw): remove unnecessary extra zoom call +
otherbuild(livekit): [email protected], [email protected], [email protected], @livekit/[email protected]
otherbuild: make bbb-web nginx config not executable
otherbuild(livekit): [email protected] (up from v1.9.4)
otherbuild(bbb-webrtc-sfu): v2.21.1
securitybuild: bbb-playback to 5.4.3 contains a security fix https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-8vv7-vj94-q2pv will be made public not earlier than Feb 2, 2026
+3 more items in the release notesotherUpdates for project BigBlueButton v3.0 HTML5 client and language de
otherbuild(bbb-webrtc-sfu): v2.21.0
featurefeat: New raise hand experience
fixFix(html5): Normalize correct answer to match options in QuickPollDropdown
fixfix: chat alert styles
fixfix(html5): Notification bar positioning
fixfix: do not enforce muteOnStart on dial-in participants, make behavior configurable
fixfix(livekit): mitigate audio publish timeouts from overlapping calls
fixfix(html5/whiteboard): Wrap annotation removals into remote change
fixfix: When locked settings for shared notes are applied, links in shared notes don't open in new window
fixfix: Poll Custom input don't work with .txt file
fixfix(html5/chat): Can't remove reactions
fixFix(html5): External video modal no longer opens unexpectedly on presenter change
fixfix: presence label margin
fixfix(html5/whiteboard): Do not allow unwanted shape deletion (local-only)
fixFix(html5): duplicated session joining full audio
fixfix(audio): edge cases with permission reset and input device rollbacks
fixFix(html5): System messages in sequence did not display the time
fixfix(html5): prevent local state mutation causing desync on modal close
fixFix(html5): tldraw capturing link edit input events
featureFeat(html5): Move rtt-check fetch to a worker
fixFix(html5): Make the share webcam removes away status
featureRef(html5): Re-introduce raise hand audio notification and full user options for raised hand users list
fixfix(audio): broken mute toggle when using LiveKit
fixfix: add null safety check for breakout room join
feature(tests): Add test for "Data savings", webcam and screensharing
featureci (feat): New workflow "Cleanup caches after PR merge"
fixfix(layout/plugin): Fix blue screen when updating generic content
featurefeat: New styling for custom chat messages and permission for editing custom plugin messages
fixfix(plugins/data-channel): Fix multiple connections not receiving data from data-channel
fixfix: webcam plugin helper overlaps menu
fixfix(plugin/data-channel): Fix data-channel interface type
featurefeat: Add prop version to plugins manifest to avoid browser caching
featurefeat(plugin): private chat messages commands
fixfix: Remove invalid fields on publiccode.yml
fixfix (bbb-web): Fix timeout units for pdftotext and generateThumbnail (seconds passed instead of milliseconds)
fixfix (bbb-web): systemd-run failures caused by accumulated failed transient units
fixfix(bbb-web): Improve SVG Dimension Calculation Speed
featureupdate(recording): add LayoutBroadcastedRecordEvent to events.xml
featureLAD (feat): Add more data (notes and annotations) to LAD data file
featurefeat(LAD): Add new activity columns (wb annotations and shared notes)
featurerecording: Add support for multiple presets to 'video' recording format
+60 more items in the release notessecurityFixes GHSA-v28f-mvg5-mv7m: Arbitrary local file read via crafted SVG presentation upload
featurehtml5: Adds event required by BBB App when sharing screen
featurefeat(audio): implements client sound alert to mute/unmute and user settings to configure, when livekit is active
fixfix(livekit): indicate user has left audio in user list/camera containers
fixfix: sidekick content title not updating
fixfix(livekit): audio input switch fails while unmuted (Windows), +
fixfix(whiteboard): Add ability to limit history stack size
otherRename Leave session in breakouts to Leave breakout
fixFix(html5): enable client read of X-Server-Epoch-Msec on cluster for proper time sync
fixfix(whiteboard): Remove duplicate annotation subscription
fixfix(whiteboard): Avoid useless mutation call
fixFix(html5): Add min version before load bundle and show a error banner
fixfix: Multi user whiteboard number of participants can be incorrect
otherrefactor: use whiteboardWriteAccess flag for presentation permission check
fixfix(html5): Error notification bar appears when presentation is removed
featurefeat(html5): add showConnectionErrors to control shown error codes
fixFix(html5): Add optional chainning for some reported undefined cases
fixfix(html5): skip chat message subscriptions when alerts are disabled
otherOption to create only one breakout room
fixFix(html5): Old chat messages being notified when nofications are enabled
otherrefactor: remove remaining presPagesWritable uses in the client by @ramonlsouza in #24031
fixfix: whiteboard access toggle in userlist by @ramonlsouza in #24047
othertests: Add playback recording test suite
othertests: Add test for "autohide whiteboard toolbar"
othertests: Add Error Logs Monitoring tests
featurerefactor (ci): Avoid generating APT Cache for every new PR
othertests: Add test for drag and drop webcam
otherrefactor(tests): Update test configurations to use only parallel execution
otherref(plugin): Refactor logic to reduce load on back-end
otherref: Change log level of payload coming null in data-channel
otherchore(client): bump tldraw to 2.0.0-alpha.31
otherchore: Add comment for maxHistoryStackSize in settings.yml
otherUpdates for project BigBlueButton v3.0 HTML5 client and language et https://github.com/bigbluebutton/bigbluebutton/pull/23961
otherUpdates for project BigBlueButton v3.0 HTML5 client and language eu
breakingfix (gql-server): Remove length-constrained user columns (for values provided via API or config)
fixfix (bbb-web): Rework SVG dimension parsing using ImageMagick identify
featureperf (gql-server): New database indexes to improve graphql queries
featurerefactor (gql-middleware): Allow more than one subscription for streamings handled by the Middleware
fixfix(bbb-export-annotations): Fix text wrapping
fixfix(bbb-export-annotations): Use Tldraw v2's fonts
+18 more items in the release notesfixFix(html5): fix video stuttering on vimeo
feature[3.0 external video share] Add stop share video button
fixfix: Dark mode chat message cursor
fixFix: console warnings in the client
fixfix(html5): Typed responses are cut off in the poll results
fixfix: filter userlist items by meetingId
fixfix: hardcoded default camera position
fixfix: whiteboard toolbar fade not working after enabling auto hide
fixfix(virtual-backgrounds): restore MIME type for wasm files, configurable willReadFrequently
fixfix: webcamsOnlyForModerator broken
fixfix: missing default value for camera position
fixfix(captions): Unsupported captions should show warning instead of empty space
othertests: Add support for SDK flaky test exclusions in CI workflow
othertest: Updates the smart slides test
otherci: checkout from prebuilt merge ref
fixfix(CI): Avoid failure on merge blob-report step when files were not generated
otherci: add publiccode.yml validation workflow
security[Snyk] Security upgrade axios from 1.8.3 to 1.12.0
otherchore: upgrade axios from 1.8.3 to 1.12.0
otherUpdates for project BigBlueButton v3.0 HTML5 client and language el_GR
otherUpdates for project BigBlueButton v3.0 HTML5 client and language it_IT
otherUpdates for project BigBlueButton v3.0 HTML5 client and language fr
otherUpdates for project BigBlueButton v3.0 HTML5 client and language ja
otherUpdates for project BigBlueButton v3.0 HTML5 client and language et
otherUpdates for project BigBlueButton v3.0 HTML5 client and language zh_TW
otherfeat (core): Enhance performance monitoring (traceLog, Prometheus metrics) and connection status handling
fixfix (gql-server): Only moderators should see the current breakout room of users (in the userlist)
otherrefactor (gql-server): tweak name of type breakoutRoom_user_summary
featurefeat(akka-apps): Monitor Presentation Conversion in Akka Apps and Enforce Max Conversion Time
otherrefactor (gql-middleware): Avoid blocking functions or nested lock() calls inside locked sections (and more)
otherperf (gql-server): Optimize the user list subscription by aligning the index with the ORDER BY
fixfix (gql-middleware): Add non-blocking and cancellable send options to SafeChannel
fixfix (bbb-web): Increase default bbb-web LimitNOFILE to 4096
fixfix: guarantee deafen is executed for dial-in users in lobby
fixfix(LAD): Fix unsafe optional chaining
fixvideo recording: Fix typos and missing escaping in index template
fixrecording: Fix processing fail when cut near start of recording
fixrecording: Fix flickering with overlapping video areas
otherbuild(bbb-webrtc-sfu): v2.19.1
otherbuild(bbb-webhooks): v3.4.0
+4 more items in the release notesfixfix: adjust locale dropdown to not display fallback id + include ru-RU en string
fixfix: Fullscreen by ENTER not working inside of the presentation
other[3.0] Extract multiple quick polls WITH text options
fixfix: quick external video share not working at fullscreen
other[3.0 Quick poll] number of options up to 19
featureFeat(html5): Add hot reload environment variable
fixFix(html5): Video preview modal keeps frozen when using bbb_auto_share_webcam and bbb_skip_video_preview
featurefeat: Tweak floating window to enhance usability and stability
fixfix(html5/whiteboard): Do not run resync code on change page
featureref: Added information to useUsersBasicInfo and ordered the results
fixfix(html5/whiteboard): Debounced function recreated on every render
breakingRefactor (html5): Remove Subscriptions and Add Conditional Execution for Performance Optimization
featurefeat(html5/bbb-web): layout engine wait for enforcedLayout finish loading
fixfix(html5): remove leading blank spaces from correct answer lines
otherRef(html5): Make useMeeting use MeetingStaticData
fixfix: skip invalid quick polls
otherRef(html5): Reduce user_current usage through the client.
otherrefactor(html5): Optimize audio functions and reduce prop drilling using MeetingStaticData
otherSubscription kills
featurefeat(html5): add structured logs for NotificationsBar connection errors
featurefeat(html5): Add global error listeners for runtime, resource, and unhandled errors
fixFix(html5): Tooltip not applying translation
other[3.0] fix: inconsistent hook component remounting due to count-based keys
fixfix: wrong zoom position on slide change
fixfix: Resolve missing or duplicated key problem in data-channel or custom-subscriptions
othertest: Update smart slides test
featureAdd tests for "End meeting" Functionality
fixfix (ci / aut-tests): "Too Many Requests" issue when downloading Libreoffice docker image
featureAdd Focus/Unfocus Webcam Automated Tests
featureci (aut-tests): Add cache for Playright binaries
featureAdd test for "mirror webcam"
featureAdd tests for "Leave meeting" Functionality
featurefeat(html5): add new PLUGINS_ONLY layout type
featurefeat (gql-server): Add new graphql flag componentFlags.hasSharedNotes
featureperf (gql-server): Optimize Meeting data fetching with new meetingStaticData endpoint and Nginx caching
featureperf (gql-server): Add more permissions for Hasura role bbb_client_not_in_meeting
featureperf (gql-server): Add more permissions for Hasura role bbb_client_not_in_meeting (part 2)
fixfix(bbb-learning-dashboard): Wrong poll answer count
fixfix(bbb-learning-dashboard): Quizzes table sorting toggling doesn't work
fixfix(bbb-export-annotations): Text wrapping in text shapes
+24 more items in the release notesfixFix(html5): quickPollConfirmationStep turning quiz to poll
otherRef(html5): Quiz style refinements
featuredev(client): add react-refresh in dev mode so hot reload can work
fixfix(html5): Add regex to handle missing question text in smart slides
otherChore(html5): add logCodes for initial connection steps
fixFix(html5): Add support to locales on annotation polls
fixFix(html5): prevent poll options from being hidden when the number of options was 10 or greater
fixfix(html5): Fix useMeeting hook returning undefined
fixFix: console warnings/errors in the client
fixfix: Device settings window disappears when recording permission prompt appears
fixFix(html5): Add support to audio elements on external video
fixFix(html5): Correct answer marker clipping on long options
securityrefactor: remove emoji id from chat reactions contains a security fix. https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-5m8m-h7fj-8wx6 will be made public circa Sept 1, 2025
fixfix(html5/chat): Messages cannot be selected in the chat
fixfix(html5): Improve smart poll detection for typed-response slides without options
otherchore (html5): Disable error overlay for react-refresh feature
fixfix(video-preview): correct variable scope to prevent crash on unmount
fixFix(html5): Console errors on initial client load
fixfix: Listen-only participants show misleading crossed-out microphone icon instead of headphones icon
fixfix(livekit): unable to connect if /stuns maxTtl is undefined
featurefeat(html5): ui-command to better manipulate generic content in sidekick area
fixfix: Sequential numbering missing from saved whiteboards and notes in breakout rooms
otherChore: Add support to typescript on Husky
otherChore: Add logCodes to graphql connection errors and improve connection status messages
othertest: Add 'Video pagination' test
featureAdd User Leave Notification Test
featurefeat(html5): Added custom-query and custom-mutation for plugins
fixfix (bbb-web): Some presentation-related configs not being respected
securityfix (gql-actions): Add validation for mutation pollSubmitUserVote contains a security fix. https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-73j3-v3fq-fqx5 will be made public circa Sept 1, 2025
featurefeat(akka/bbb-web): persist plugin errors from back-end to be logged into the front-end
fixfix(bbb-web): Add Presentation Upload Concurrency Explanation
fixfix(bbb-learning-dashboard): Poll/Quiz sorting
fixfix(bbb-learning-dashboard): Localize quiz answers
fixfix(bbb-learning-dashboard): Quizzes table showing user response as incorrect while the correct answer was not disclosed
featurerefactor (Learning Dashboard): Add info ended for Polls/Quizzes to LAD json
featureupdate(recording): add quiz info to presentation format
security[Snyk] Security upgrade form-data from 4.0.2 to 4.0.4
fixfix: Poll Results in the pdf-File
securitybuild: Bump bbb-pads to 1.5.4 contains a security fix. https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-9jv9-cjrm-grj2 will be made public cicra Sept 1, 2025
featureDocs (plugins): Add example of javascriptEntrypointIntegrity and remove unimplemented features
+20 more items in the release notesfixfix: startup crash
otherstyle: use the same font for firefox and chrome toasts
featurefeat(learning-dashboard): Add support for markdown rendering in learning-dashboard - plugins table
otherUpdates for project BigBlueButton v3.0 HTML5 client and language it_IT
otherUpdates for project BigBlueButton v3.0 HTML5 client and language de
otherUpdates for project BigBlueButton v3.0 HTML5 client and language ja
otherUpdates for project BigBlueButton v3.0 HTML5 client and language zh_TW
fixfix (gql-server): fix trigger to recount chat messages on delete
breakingrefactor (gql-server): Remove unused indexes from the bbb_graphql database
fixfix (akka-apps): Dynamically adjust poll annotation size based on question length and number of answers
otherchore: Update bbb-presentation-video to 5.0.0
featureFeat(html5): Add support for quizzes
featurefeat(bbb-learning-dashboard): Add support for quizzes
featurefeat(html5,akka): Add disable feature for quiz
featureRef(html5): Apply new style to quiz interface
featurefeat: persist whiteboard tools on unmount
other[3.0] fix(audio-captions): transcription stops after a long period of silence
fixfix(chat): "Start a private chat" menu option is still shown when chat is disabled
fixfix(livekit): block audio subscription if playback is blocked, autoplay handling is not always triggered
otherstyle: Fix reactions modal too big on mobile
fixfix(livekit): mute local camera when in "Away" mode
otherstyle: Fix chat spacing when typing indicator is disabled
otherstyle: adjust snapshot of current slide and presentation uploader notification styles
fixfix(livekit): stopping one local camera un-shares all instead
fixfix(livekit): cached output device isn't correctly applied on join
fixfix: typingIndicator.showNames: false does not work
fixFix(html5): Audio output change causing user to not hear other users
fixfix(html5/whiteboard): Tool config fixes
fixFix(html5): poll form fields clean up on poll start
fixfix(html5): Accessibility recommendations
fixfix: Breakout room numbers not showing
fixfix(html5): Quiz information isn't saved when navigating between tabs
otherrefactor(ci): Unify artifacts download and extraction process in CI workflow
otherValidate endpoints and env variables before running all tests
featurefeat(tests): Add dataTest attributes to audio, video, and presentation components for enabling sample plugin tests
otherchore: Temporarily disable merging and uploading blob reports in CI workflow
otherchore: Add comment on disableEmojis source for ids
otherchore(html5): include clientSessionUUID in log userInfo
otherchore(client): bump tldraw to 2.0.0-alpha.30
otherrefactor(html5/chat): Log high scroll activity
otherrefactor(bbb-learning-dashboard): Quizzes patch
otherUpdates for project BigBlueButton v3.0 HTML5 client and language ar
otherUpdates for project BigBlueButton v3.0 HTML5 client and language it_IT
otherUpdates for project BigBlueButton v3.0 HTML5 client and language et
othergql-server (perf): Workaround to prevent Hasura from adding redundant nullability checks
otherrefactor (akka-apps): Ignore unknown properties when reading plugins manifests
featurebackend (feat): Add support for polls with correct answers (quizzes)
featurechore (gql-middleware): Add clientSessionUUID to all logs of gql-middleware
othergql-server (perf): Increase performance for chat queries
otherRef(akka,web,docs): Rename disable feature from quiz to quizzes
featurefeat (akka-apps): Add quiz info to events.xml
+6 more items in the release notesotherProvide context for localizations instead of just 0, 1
feature[3.0] fix(layout): allow longer strings for cameraWithFocus
fixFix(html5): Add localization to live polls
fixFix(html5): Add support to numeric TLD
otherRevert "fix: Switching slides causes the next slide to slightly zoom in"
otherRefactor(html5,akka): Let akka-apps extract external video start time directly from the URL instead of relying on the client/player
fixfix (html5): Copy new translations placeholders from en.json to all languages
other[3.0] fix(layout): ensure the camera position is not undefined
fixfix(html5/whiteboard): Fixes a few keyboard shortcuts
fixfix: multi user pen only not working
fixFix(html5): Remove list and index params from youtube url for external video
fixfix: Whiteboard context menu shortcuts missing key modifiers in Safari
featurefeat(akka): Introduce Settings Schema Definition in Plugin Manifest
featurefeat(common-web): added plugin_ parameters and default value support for manifest.json placeholders
featurefeat(common-web): Add Main version replacements for placeholders in plugin manifest URLs
othertest: Enforce layout parameter
othertest: Remove flaky tag from Zoom In/Out test and add snapshots
fixfix(test): Add assertion for video elements count on Enforce Layout - VIDEO_FOCUS
fixfix(test/chat): update expected message strings
othertest: Add 'clear all status icon' test
othertest: Adds a check for the duration bar on breakouts tests
otherupdate text for localization strings with has/was
otherchore(sec): Bump tomcatEmbed to 9.0.106
otherchore(sec): bump brace-expansion to 1.1.12
otherUpdates for project BigBlueButton v3.0 HTML5 client and language zh_TW
otherUpdates for project BigBlueButton v3.0 HTML5 client and language eu
otherUpdates for project BigBlueButton v3.0 HTML5 client and language ja
otherUpdates for project BigBlueButton v3.0 HTML5 client and language ar
otherUpdates for project BigBlueButton v3.0 HTML5 client and language it_IT
otherUpdates for project BigBlueButton v3.0 HTML5 client and language et
otherUpdates for project BigBlueButton v3.0 HTML5 client and language pt_BR
otherrefactor (akka-apps): Convert notifications.messageValues to Map(String,String) instead of Vector(String)
fixFix(bbb-common-web): Change flag to priotize the text order on pdf to text conversion
fixfix (akka-apps): Unpin Shared Notes before sharing External Video
otherrefactor (akka-apps, gql-middleware): General improvements to prevent system stalling and enhance debugging
otherbuild: Bump Hasura from v2.45.0 to v2.48.1
otherbuild: Update LibreOffice to 25.2.4
otherbuild(deps): bump the npm_and_yarn group across 3 directories with 1 update
otherdocs: Correct values for removable and downloadable api.md
featurefeat: New ui-data-getter and refactor of ui-data's
fixFix(html5): External video unsync when presenter resume session
fixfix(html5): data-channel dispatching multiple replace/delete messages to akka
fixfix(html5): Make poll chat message accessible for screen readers
fixFix(html5): Player not emitting play event when Presenter changes
fixfix: start private chat option is available when chat is disabled via disabledFeatures
fixFix(html5): chat Emoji picker not being diabled when lock settings enabled
fixstyles(html5): Fix positioning of the session details modal
fixfix(html5): Open presentation+annotations in a new tab
fixfix: make emoji auto convert ignore shortcodes from disableEmojis setting
fixfix(html5): Place polling modal at the end of the DOM tree
fixfix: Clear all reactions missing
fixFix(html5): external video desync on player seek
fixfix: SmartSlide Poll Option Removed When Editing Custom Input
featurefeat(html5/chat): Filter out unallowed emojis from search results
featurefeat(html5): Add emojiPicker to the list disabledFeatures
fixfix(html5): add rollback to video-preview gUM and option to skip initial enumerateDevices
fixfix(html5): Unable to mark messages as seen on Safari
fixfix(whiteboard): Viewer zoom desync caused by incorrect initial zoom
otherChange publish poll button text to publish results
fixfix(audio-captions): check for Speech Recognition API support before accessing voices
fixfix(html5/whiteboard): Use correct base zoom value
fixfix(plugin): Fix some typos in the SDK
fixfix(tests): Add timeout before export breakout tests to ensure the zoom is stabilized
otherrefactor(tests): Set default viewport size in the playwright config file
othertest: Adds screenshots for viewers with layout changes
featurefeat: Add plugin (samples) tests setup to CI workflow
otherbuild(deps): bump the npm_and_yarn group across 3 directories with 2 updates
otherbuild(deps-dev): bump webpack-dev-server from 5.2.1 to 5.2.2 in /bigbluebutton-html5 in the npm_and_yarn group across 1 directory
otherUpdates for project BigBlueButton v3.0 HTML5 client and language fa_IR
featurefeat(bbb-web): Adds placeholder replacements for pluginManifests URLs
fixfix(akka-bbb-apps): Improve logs for user lock messages
featurefeat(screnshare): add ParticipantStatusChange event for screen sharing, +
fixfix(bbb-web): URL encode presentation name
featurechore (gql-middleware): Add more logs to clarify the reasons behind WebSocket disconnections from the browser and Hasura
fixfix: reintroduce meta_hack-record-viewer-video
featureAdded publiccode.yml for public administrations directories
featureadd missing info fields
fixFix typo in customize.md
securityUpdate SECURITY.md
+19 more items in the release notesfeaturefeat(html5): Add shortcut for custom poll
featurefeat: Add option to disable reactions
fixfix(html5): remove fragments with only one child
fixfix(html5/external-video): Show viewer controls only on hover
fixfix(html5): rename useState variables and functions to solve sonarcloud alerts about destructuring pattern
fixfix(html5): remove unnecessary unused imports
fixfix(whiteboard): remove stale annotations on reconnect edge case
fixFix(html5): Shared Notes not being pinned when hidePresentationOnJoin setting is enabled
fixfix(html5): remove unused assignments
fixFix(html5): Mute state inconsistencies on the player during presenter changes.
fixFix(html5): External video playback rate unsync
fixFix(html5): External video reset when presenter Refresh client
featurerefactor (html5): Add class for plugins floating window content
fixFix(html5): Breakout duration edit not allowing time shorter than 5 minutes
fixfix: Avoid Cannot read properties of null (reading 'avatar')
fixfix: Failproof hasTimer of undefined
fixfix: Failproof showRemainingTime of undefined
fixfix(html5): Skip font embeding when taking snapshot of current slide
fixfix: Avoid Cannot read properties of undefined (reading 'length')
fixfix(html5/poll): Save poll state on unmount, restore it on mount
fixFix(html5): Cleaning connections errors
fixfix(html5/whiteboard): Add missing whiteboard shortcuts
fixfix: Switching slides causes the next slide to slightly zoom in
fixFix(html5): External video player not restoring presenter's volume
fixfix(livekit): ensure camera subscription on meeting join
fixfix(audio): use storage to check if input device was previously set
fixfix(screenshare): remove instability UI
fixfix(whiteboard): Eliminate DOM side-effects causing toolbar tools to disappear
featureBackport(html5): blocks MiBrowser & feat: adds WebRTC API browser support check
fixFix(html5): Whiteboard cursor deteriorates near border
fixFix(html5): Ensure audio autoplay permission for playAlertSound method
fixFix(html5): Audio captions get stucked when hardware muted
fixFix(html5): Race condition leading to an error in conditionally rendered chat hooks.
featurefeat(plugins): Add support for the plugin to unmount on meeting end
featurefeat: Add plugin-sdk version compatibility check
featurechore (html5): Add temporary logs to the EndMeeting component to debug OK button
breakingfix (gql-server): Remove unused voiceConf fields from Graphql and fix UserVoice race condition
featurefeat(bbb-web): Parameter to add all pluginManifests at once
breakingcleanup (gql-server): Removes graphql Type meeting_metadata
breakingRecording: Remove 'duration' lines from ffmpeg playlist
+26 more items in the release notes