From ed8945809f1c8e2ca39932dfca88964a3080ad1e Mon Sep 17 00:00:00 2001 From: Changelog Bot Date: Fri, 17 Jul 2026 11:50:40 +0000 Subject: [PATCH 01/21] docs: add changelog for v11.0.0 --- .../mattermost-v11-changelog.md | 132 ++++++++++++++++++ 1 file changed, 132 insertions(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index c72a1ac82ca..b7ab1c15af7 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -13,6 +13,138 @@ Platform and OS scope reflects reported and tested environments and may not represent all affected configurations. ``` + +(release-v11.0-feature-release)= +## Release v11.0 - [Feature Release](https://docs.mattermost.com/product-overview/release-policy.html#release-types) + +**Release day: 2026-08-14** + +### Upgrade Impact + +#### config.json +New setting options were added to ``config.json``. Below is a list of the additions and their default values on install. The settings can be modified in ``config.json``, or the System Console when available. + - **Changes to Enterprise Advanced plan:** + - Under ``AccessControlSettings`` in ``config.json``, added ``EnableChannelPolicyIndicators`` configuration setting to control whether channel access attribute indicators are shown in the channel members list and invite dialog. Default is ``true``. + +### Improvements +See [this blog post](https://mattermost.com/blog/mattermost-v11-0-is-now-available/) on the highlights in our latest release. + +#### User Interface + - Updated Mattermost Calls to v1.12.2, fixing a stale join button on Desktop after WebSocket reconnect, guarding against concurrent join attempts, surfacing the deprecated ``MM_CALLS_RTCD_URL`` setting in the ``/env`` endpoint, and limiting decompressed SDP payload size to prevent potential denial-of-service. + - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full Markdown round-trip. + - Added a media gallery layout for posts with multiple images or videos, plus inline frame previews for single videos. + - Added support for a file upload element type in interactive dialogs. + - Added support for MM Blocks as a new way to create Interactive Messages. + - Plugins and integrations can now open stacked child dialogs from within an interactive dialog using the new ``action_button`` element type. + - Bot accounts, OAuth apps, incoming webhooks, and plugins can now deliver posts silently — visible in the channel without producing notifications, unread badges, or the "New Messages" separator. + - Bot accounts managed by a plugin now display the managing plugin's ID in the Bot Accounts list instead of a generic "Managed by plugin" label. + - Added inline plugin metadata to the Plugin Management page and plugin settings page showing the plugin ID, version, and links to the website and release notes when available. + - The agent selector now respects the configured default agent and remembers your last-selected agent. + - Mattermost now proactively warns the owner of a personal access token with a direct message from the system bot as the token approaches expiry (7, 3, and 1 days before), so token-backed integrations no longer break without warning. Added the ``pat_expiry_notify`` job, which runs hourly when ``EnableUserAccessTokens`` is set and can also be triggered on demand by admins via the jobs API. + - Token owners are now notified by a direct message from the system bot when one of their personal access tokens is removed after expiring. + - Added a "Regenerate" option to Personal Access Tokens in Account Settings > Security. + +#### Plugins/Integrations + - Added plugin support for pluggable tabs in the Channel Settings modal, including a new ``ChannelSettingsTab`` webapp registration surface. + - Allowed plugins to implement ``MessagesWillBeConsumed`` without requiring the feature flag. + - Outgoing integration requests for post action button and interactive dialog endpoints now surface upstream 429/503 responses verbatim (preserving retry semantics) and map other upstream 5xx responses to 502, instead of collapsing all non-200 responses to 400. + +#### Administration + - Added a new Board Attributes panel under System Console > System Attributes for managing the default attributes shown on every board, including the locked Status and Assignee fields. Available when the ``IntegratedBoards`` feature flag is enabled. + - Added a "Revoke non-compliant tokens" action in System Console > Integrations > Integration Management that lets admins revoke existing personal access tokens that violate the configured Maximum Personal Access Token Lifetime (tokens that never expire or expire beyond the cap). Bot account tokens are exempt, and the number of affected tokens is shown for confirmation before revoking. + - Added a discovery page for Classification Markings in the System Console so the feature is surfaced with an upgrade path on licenses below Enterprise when the ``ClassificationMarkings`` feature flag is enabled. + - Added a new System Console setting (``AccessControlSettings.EnableChannelPolicyIndicators``, default ``true``) under Attribute-Based Access Control that lets admins hide channel access attribute indicators (the attribute tags shown in the channel members list and invite dialog) to avoid revealing policy details to end users. Requires Enterprise Advanced license. + - Added a Session Attributes management page under System Console > System Attributes, and made enabled session attributes selectable in Attribute-Based permission-policy editors (generating ``user.session.`` conditions). Requires Enterprise Advanced license. + - Added the ability to edit a team's name and description from the System Console Team Configuration page. + - Added a Teams column to the System Console user data CSV export, listing each user's team memberships. + - Team membership can now be controlled by user attributes (department, program, etc.) — private teams automatically enforce access rules, block non-qualifying joins, and remove ineligible members via sync; public teams use advisory mode, surfacing a "Recommended" tag to qualifying users without blocking anyone. Team admins and system admins can define per-team membership rules, configure auto-add, and trigger or monitor sync jobs directly from Team Settings and the System Console, with inline enforcement in the Invite People and Add Members modals. + - Added a specific error message when uploading a license signed for a different service environment (a production license on a test/dev server, or vice versa) instead of the generic "Invalid license file." error. + - Corrected the System Console "Max Users Per Team" description to accurately state that only active members with active accounts count toward the limit; deactivated users and removed members are not counted. + - Improved accessibility of the Content Flagging "Content Reviewers" admin settings: each per-team enable/disable toggle now includes the team name in its ``aria-label``. + - Improved the precision of the OAuth Dynamic Client Registration (DCR) redirect URI allowlist by matching patterns per URL component. + - The server now pushes a ``job_updated`` WebSocket event when a job changes status. System Console job tables (LDAP sync, data retention, message export, etc.) now reflect job status changes in real time instead of polling every 15 seconds. + - Removed the ``ChannelBookmarks`` feature flag. The Channel Bookmarks feature is now always enabled (subject to licensing). + - Removed the ``WebSocketEventScope`` feature flag; scoping of typing and reaction WebSocket events to clients that have the relevant channel or thread open is now permanently enabled. + - Removed the ``ExperimentalAuditSettingsSystemConsoleUI`` feature flag. The experimental Audit Logging configuration page in the System Console (Enterprise, beta) is now permanently enabled. + - Removed the ``NotificationMonitoring`` feature flag. Notification delivery metrics collection is now permanently enabled and controlled solely by the ``MetricsSettings.EnableNotificationMetrics`` setting. + - Removed the ``StreamlinedMarketplace`` feature flag; the streamlined plugin Marketplace is now always enabled. + - Removed the ``AttributeBasedAccessControl`` feature flag. Attribute-based access control is now exclusively controlled by the ``AccessControlSettings.EnableAttributeBasedAccessControl`` configuration setting. + - Removed ``CloudIPFiltering`` feature flag and enabled this functionality by default for licensed Cloud servers. + - Sent a wipe signal to mobile apps with open sessions when a session is revoked. + - Removed Google Fonts references from server email templates so notification emails no longer load fonts from external URLs when opened. + - Added ``ClusterGracefulDrain`` feature flag (default on) to reduce cluster message errors during rolling restarts of high-availability deployments. + - Added delta support for the PSAv2 property fields and values endpoints, and a new fields search endpoint. + - Added property owners, audit logs for all custom profile attribute value changes, and new plugin APIs for property values. + - Improved performance of the Scheduled messages page by virtualizing the scheduled posts list, so opening the tab is no longer slow when there are many scheduled posts. + +#### mmctl + - Added the ability to send direct messages with ``mmctl`` using ``mmctl post create @username --message ``. + - Added new ``mmctl`` commands: ``job create`` to create jobs with type-specific options, ``job show`` to display job details, and ``job cancel`` to cancel running jobs. + - Added a new ``--auto-add-users`` flag to the ``mmctl channel move`` command. The command now also lists the channel members that are missing from the destination team when a move is rejected. + - Added a new ``mmctl channel users list`` command that lists the members of a channel (ID, username, email, and roles), with ``--page``, ``--per-page``, and ``--all`` pagination flags. + - Added the ``mmctl user status`` and ``mmctl user status set`` commands to read and update a user's presence status (online, away, dnd, offline), with an optional ``--dnd-end-time`` flag. The user status GET/PUT endpoints are now also available over the ``mmctl`` local mode socket. + - Added a ``--show-ids`` flag to the ``mmctl channel list`` command to include channel IDs in the plain-text output. + - Added the user's roles to the plain-text output of the ``mmctl user search`` command. + - Moved the ``mmctl user deleteall`` command to ``mmctl system nuke users`` to reduce the risk of accidental invocation. The ``mmctl user deleteall`` command has been removed. + +### Bug Fixes + - Fixed an issue where reactions using emoji names with mixed case (e.g. ``:Mattermost:``) could not be added or removed. + - Fixed a webapp issue that caused private chat message content to be copied into the Web Notifications API ``tag`` option, where Chromium-based browsers can expose it through notification activation metadata. + - Fixed Markdown list items containing multiple paragraphs appearing as a single paragraph. + - Fixed code blocks in Markdown lists not being able to scroll horizontally. + - Fixed an issue where the Recaps sparkle icon in the left-hand sidebar appeared dimmer than the other sidebar item icons. + - Fixed an issue where the AI-generated indicator was only shown on the first message when an agent posted multiple messages in a row. + - Fixed an issue where the W3C specification links in the Signature Algorithm and Canonicalization Algorithm help text on the SAML 2.0 System Console page were not clickable. + - Fixed an issue where action buttons in interactive message attachments could overflow horizontally instead of wrapping when they had long labels. + - Fixed the System Console permissions page to label the Playbook role as "Playbook Administrators" (plural), consistent with the other role headings. + - Fixed an issue where a GUEST tag could be shown next to bot and webhook posts when the webhook creator was demoted to a guest. + - Fixed a data race in ``pluginapi.ConfigureLogrus`` that could panic with "concurrent map read and map write" when a plugin configured logrus while logging was in flight. ``ConfigureLogrus`` now also applies ``SetReportCaller``/``SetLevel`` to the logger passed in rather than the global standard logger. + - Fixed an issue where the access control Job Details modal showed a confusing search-style empty state (and, in some cases, a blank body) when a sync job affected no channels; it now shows a neutral "No channels were affected by this job." message. + - Fixed the System Console feature discovery "Learn more" links for Auto-translation and Mobile Ephemeral Mode so they open the corresponding documentation pages instead of the generic documentation landing page. + - Fixed layout shift sometimes caused by post previews for posts in Direct Message channels. + - Fixed an issue where the "Upload files" permission was pre-selected by default when creating a new rule in a channel's Permissions Policy. New rules now start with no permissions selected. + - Fixed an issue where the Quarantine for Review modal could overflow its boundary when flagging a post with many file attachments on smaller screens. + - Fixed an issue where the System Console permission policy rule editor defaulted to advanced (CEL) mode instead of simple (table) mode when editing rules that used multiselect "has any of" conditions or ranked operators. + - Fixed an issue where the Last Sync column in the output of the ``/share-channel status`` command always showed "--" instead of the actual last sync time. + - Fixed an issue where the shared channel sync loop repeatedly logged a warning for orphaned ``SharedChannelRemotes`` rows whose ``RemoteCluster`` had been deleted. The sync loop now self-heals by soft-deleting the orphaned row. + - Fixed the ``/secure-connection status`` slash command so deleted connections are listed after active ones and the results render as a valid Markdown table. + - Fixed unquoted searches for hyphenated compound words (e.g. ``t-shirt``) on PostgreSQL to match the compound word instead of the individual words. + - Fixed an issue where the data retention policy teams endpoint returned more team information than intended. + - Fixed an issue with the wrong scroll position in the permalink view of channels with images. + - Fixed an issue where the Global Relay compliance export undercounted skipped-attachment warnings: the run-level warning count reflected only the last channel/batch processed instead of the sum across all channels and batches. + - Fixed an issue where the "save" button did not appear in some scenarios when updating connected workspaces in the channel settings. + - Fixed an issue with plugins receiving hooks and logging errors after shutting down. + - Fixed the Playbooks Become a Participant modal text alignment. + - Fixed an issue where broken draft state occurred when uploads failed or were interrupted, preventing users from sending messages again. + +### API Changes + - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint. + - Removed ``POST /actions/{action_id:[A-Za-z0-9]+}`` (``doPostAction``) API endpoint. + - Added ``GET /tokens/non_compliant/count`` (``countNonCompliantUserAccessTokens``) API endpoint. + - Added ``POST /tokens/non_compliant/revoke`` (``revokeNonCompliantUserAccessTokens``) API endpoint. + - Added ``POST /tokens/rotate`` (``rotateUserAccessToken``) API endpoint. + - Added ``GET /access_control/attributes`` (``getTeamAccessControlAttributes``) API endpoint. + - Added ``POST /`` (``searchPropertyFields``) API endpoint. + +### WebSocket Event Changes + - Added a ``job_updated`` WebSocket event that is pushed when a job changes status. + +### Audit Log Event Changes + - Added ``AuditEventRevokeNonCompliantUserAccessTokens`` audit log event. + - Added ``AuditEventRotateUserAccessToken`` audit log event. + - Added ``AuditEventTeamCascadedChannelRemoval`` audit log event. + - Added ``AuditEventTeamMembershipAdded`` audit log event. + - Added ``AuditEventTeamMembershipRemoved`` audit log event. + - Added ``obtained_user_email`` field to ``completeSaml`` audit log events. + +### Go Version + - v11.0 is built with Go ``v1.26.4``. + +### Open Source Components + - Added ``@tiptap/extension-code-block-lowlight``, ``@tiptap/extension-link``, ``@tiptap/extension-placeholder``, ``@tiptap/extension-table``, ``@tiptap/extension-table-cell``, ``@tiptap/extension-table-header``, ``@tiptap/extension-table-row``, ``@tiptap/markdown``, ``@tiptap/react``, ``@tiptap/starter-kit``, and ``lowlight`` to https://github.com/mattermost/mattermost/. + - Added ``Azure/azure-sdk-for-go`` to https://github.com/mattermost/mattermost/. + + (release-v11.9-feature-release)= ## Release v11.9 - [Feature Release](https://docs.mattermost.com/product-overview/release-policy.html#release-types) From fca2b91db98172d426b41bc30241c34a402c8f26 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Fri, 17 Jul 2026 14:53:07 +0300 Subject: [PATCH 02/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index b7ab1c15af7..e5cea87424b 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -14,8 +14,8 @@ Platform and OS scope reflects reported and tested environments and may not repr ``` -(release-v11.0-feature-release)= -## Release v11.0 - [Feature Release](https://docs.mattermost.com/product-overview/release-policy.html#release-types) +(release-v11.10-feature-release)= +## Release v11.10 - [Feature Release](https://docs.mattermost.com/product-overview/release-policy.html#release-types) **Release day: 2026-08-14** @@ -27,7 +27,7 @@ New setting options were added to ``config.json``. Below is a list of the additi - Under ``AccessControlSettings`` in ``config.json``, added ``EnableChannelPolicyIndicators`` configuration setting to control whether channel access attribute indicators are shown in the channel members list and invite dialog. Default is ``true``. ### Improvements -See [this blog post](https://mattermost.com/blog/mattermost-v11-0-is-now-available/) on the highlights in our latest release. +See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-available/) on the highlights in our latest release. #### User Interface - Updated Mattermost Calls to v1.12.2, fixing a stale join button on Desktop after WebSocket reconnect, guarding against concurrent join attempts, surfacing the deprecated ``MM_CALLS_RTCD_URL`` setting in the ``/env`` endpoint, and limiting decompressed SDP payload size to prevent potential denial-of-service. @@ -138,13 +138,12 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-0-is-now-availab - Added ``obtained_user_email`` field to ``completeSaml`` audit log events. ### Go Version - - v11.0 is built with Go ``v1.26.4``. + - v11.10 is built with Go ``v1.26.4``. ### Open Source Components - Added ``@tiptap/extension-code-block-lowlight``, ``@tiptap/extension-link``, ``@tiptap/extension-placeholder``, ``@tiptap/extension-table``, ``@tiptap/extension-table-cell``, ``@tiptap/extension-table-header``, ``@tiptap/extension-table-row``, ``@tiptap/markdown``, ``@tiptap/react``, ``@tiptap/starter-kit``, and ``lowlight`` to https://github.com/mattermost/mattermost/. - Added ``Azure/azure-sdk-for-go`` to https://github.com/mattermost/mattermost/. - (release-v11.9-feature-release)= ## Release v11.9 - [Feature Release](https://docs.mattermost.com/product-overview/release-policy.html#release-types) From 4c6dd2685ff874369aa4480c0c2505e6701af132 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 11:20:47 +0300 Subject: [PATCH 03/21] Update mattermost-v11-changelog.md --- .../product-overview/mattermost-v11-changelog.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index e5cea87424b..d4dc1ea56ac 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -25,11 +25,18 @@ Platform and OS scope reflects reported and tested environments and may not repr New setting options were added to ``config.json``. Below is a list of the additions and their default values on install. The settings can be modified in ``config.json``, or the System Console when available. - **Changes to Enterprise Advanced plan:** - Under ``AccessControlSettings`` in ``config.json``, added ``EnableChannelPolicyIndicators`` configuration setting to control whether channel access attribute indicators are shown in the channel members list and invite dialog. Default is ``true``. + - Added a new Enterprise configuration setting, TeamSettings.LockProfileFieldsForEmailUsers (System Console > Site Configuration > Users and Teams), which prevents users who sign in with email and password from changing their first name, last name, and username ("name_and_username"), or additionally their nickname, position, and profile picture ("all"). System Admins are exempt, and empty first/last names can be filled in once. When enabled, users with the Invite Users permission can pre-set the first name, last name, and username on email invitations; the POST /api/v4/teams/{team_id}/invite/email endpoint accepts a new optional "profiles" field, and the System Console user detail page now supports editing a user's first and last name. + - Added ``TeamSettings.LockProfileFieldsForEmailUsers`` configuration setting. + +### Compatibility + - Updated minimum Edge and Chrome versions to 150+. ### Improvements See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-available/) on the highlights in our latest release. #### User Interface + - Prepackaged the Mattermost Agents plugin at version 2.5.0-rc1 instead of 2.4.2. + - Prepackage MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). - Updated Mattermost Calls to v1.12.2, fixing a stale join button on Desktop after WebSocket reconnect, guarding against concurrent join attempts, surfacing the deprecated ``MM_CALLS_RTCD_URL`` setting in the ``/env`` endpoint, and limiting decompressed SDP payload size to prevent potential denial-of-service. - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full Markdown round-trip. - Added a media gallery layout for posts with multiple images or videos, plus inline frame previews for single videos. @@ -76,6 +83,9 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added delta support for the PSAv2 property fields and values endpoints, and a new fields search endpoint. - Added property owners, audit logs for all custom profile attribute value changes, and new plugin APIs for property values. - Improved performance of the Scheduled messages page by virtualizing the scheduled posts list, so opening the tab is no longer slow when there are many scheduled posts. + - Team membership can now be controlled by user attributes (department, program, etc.) — private teams automatically enforce access rules, block non-qualifying joins, and remove ineligible members via sync; public teams use advisory mode, surfacing a "Recommended" tag to qualifying users without blocking anyone. + - Team admins and system admins can define per-team membership rules, configure auto-add, and trigger or monitor sync jobs directly from Team Settings and the System Console, with inline enforcement in the Invite People and Add Members modals. + - Property owners, audit logs for all CPA value changes and new plugin apis for property values #### mmctl - Added the ability to send direct messages with ``mmctl`` using ``mmctl post create @username --message ``. @@ -116,6 +126,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Fixed an issue with plugins receiving hooks and logging errors after shutting down. - Fixed the Playbooks Become a Participant modal text alignment. - Fixed an issue where broken draft state occurred when uploads failed or were interrupted, preventing users from sending messages again. + - Fixed most layout shifts caused by images in posts loading ### API Changes - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint. @@ -125,6 +136,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added ``POST /tokens/rotate`` (``rotateUserAccessToken``) API endpoint. - Added ``GET /access_control/attributes`` (``getTeamAccessControlAttributes``) API endpoint. - Added ``POST /`` (``searchPropertyFields``) API endpoint. + - Added `GET /access_control/attributes` (`getTeamAccessControlAttributes`) API endpoint. ### WebSocket Event Changes - Added a ``job_updated`` WebSocket event that is pushed when a job changes status. @@ -136,6 +148,9 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added ``AuditEventTeamMembershipAdded`` audit log event. - Added ``AuditEventTeamMembershipRemoved`` audit log event. - Added ``obtained_user_email`` field to ``completeSaml`` audit log events. + - Added ``AuditEventTeamCascadedChannelRemoval`` audit log event. + - Added ``AuditEventTeamMembershipAdded`` audit log event. + - Added ``AuditEventTeamMembershipRemoved`` audit log event. ### Go Version - v11.10 is built with Go ``v1.26.4``. @@ -143,6 +158,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa ### Open Source Components - Added ``@tiptap/extension-code-block-lowlight``, ``@tiptap/extension-link``, ``@tiptap/extension-placeholder``, ``@tiptap/extension-table``, ``@tiptap/extension-table-cell``, ``@tiptap/extension-table-header``, ``@tiptap/extension-table-row``, ``@tiptap/markdown``, ``@tiptap/react``, ``@tiptap/starter-kit``, and ``lowlight`` to https://github.com/mattermost/mattermost/. - Added ``Azure/azure-sdk-for-go`` to https://github.com/mattermost/mattermost/. + - Added ``jaytaylor/html2text`` and ``wneessen/go-mail``, and removed ``go-mail/mail`` from https://github.com/mattermost/mattermost/pull/. (release-v11.9-feature-release)= ## Release v11.9 - [Feature Release](https://docs.mattermost.com/product-overview/release-policy.html#release-types) From b643777c7d2108b753d95a1ebb3abe1cde268574 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 12:34:20 +0300 Subject: [PATCH 04/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index d4dc1ea56ac..26864bf3731 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -21,6 +21,10 @@ Platform and OS scope reflects reported and tested environments and may not repr ### Upgrade Impact +#### Database Schema Changes + - The following schema changes are included in the v11.9 release. No database downtime is expected for this upgrade. See the [Important Upgrade Notes](https://docs.mattermost.com/upgrade/important-upgrade-notes.html) for more details. + - Added + #### config.json New setting options were added to ``config.json``. Below is a list of the additions and their default values on install. The settings can be modified in ``config.json``, or the System Console when available. - **Changes to Enterprise Advanced plan:** @@ -31,6 +35,10 @@ New setting options were added to ``config.json``. Below is a list of the additi ### Compatibility - Updated minimum Edge and Chrome versions to 150+. +```{Important} +If you upgrade from a release earlier than v11.9, please read the other [Important Upgrade Notes](https://docs.mattermost.com/administration-guide/upgrade/important-upgrade-notes.html). In case of an upgrade failure, please check the [Downgrade Guide](https://docs.mattermost.com/administration-guide/upgrade/downgrading-mattermost-server.html) and the [Recovery Guide](https://docs.mattermost.com/deployment-guide/backup-disaster-recovery.html) for rollback steps and interim mitigation strategy. +``` + ### Improvements See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-available/) on the highlights in our latest release. From bbcf832ad85addb0bbcbb5d19bf7786750e9c7b4 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 12:49:06 +0300 Subject: [PATCH 05/21] Update mattermost-v11-changelog.md --- .../mattermost-v11-changelog.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 26864bf3731..e0a13d39db0 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -49,15 +49,15 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full Markdown round-trip. - Added a media gallery layout for posts with multiple images or videos, plus inline frame previews for single videos. - Added support for a file upload element type in interactive dialogs. - - Added support for MM Blocks as a new way to create Interactive Messages. + - Added support for MM Blocks as a new way to create Interactive Messages (including webapp and mobile app). - Plugins and integrations can now open stacked child dialogs from within an interactive dialog using the new ``action_button`` element type. - - Bot accounts, OAuth apps, incoming webhooks, and plugins can now deliver posts silently — visible in the channel without producing notifications, unread badges, or the "New Messages" separator. + - Bot accounts, OAuth apps, incoming webhooks, and plugins can now deliver posts silently — visible in the channel without producing notifications, unread badges, or the "New Messages" separator (including desktop and mobile apps). - Bot accounts managed by a plugin now display the managing plugin's ID in the Bot Accounts list instead of a generic "Managed by plugin" label. - Added inline plugin metadata to the Plugin Management page and plugin settings page showing the plugin ID, version, and links to the website and release notes when available. - The agent selector now respects the configured default agent and remembers your last-selected agent. - Mattermost now proactively warns the owner of a personal access token with a direct message from the system bot as the token approaches expiry (7, 3, and 1 days before), so token-backed integrations no longer break without warning. Added the ``pat_expiry_notify`` job, which runs hourly when ``EnableUserAccessTokens`` is set and can also be triggered on demand by admins via the jobs API. - Token owners are now notified by a direct message from the system bot when one of their personal access tokens is removed after expiring. - - Added a "Regenerate" option to Personal Access Tokens in Account Settings > Security. + - Added a "Regenerate" option to **Personal Access Tokens** in **Account Settings > Security** (including webapp). #### Plugins/Integrations - Added plugin support for pluggable tabs in the Channel Settings modal, including a new ``ChannelSettingsTab`` webapp registration surface. @@ -81,14 +81,14 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Removed the ``ChannelBookmarks`` feature flag. The Channel Bookmarks feature is now always enabled (subject to licensing). - Removed the ``WebSocketEventScope`` feature flag; scoping of typing and reaction WebSocket events to clients that have the relevant channel or thread open is now permanently enabled. - Removed the ``ExperimentalAuditSettingsSystemConsoleUI`` feature flag. The experimental Audit Logging configuration page in the System Console (Enterprise, beta) is now permanently enabled. - - Removed the ``NotificationMonitoring`` feature flag. Notification delivery metrics collection is now permanently enabled and controlled solely by the ``MetricsSettings.EnableNotificationMetrics`` setting. + - Removed the ``NotificationMonitoring`` feature flag for webapp/desktop app. Notification delivery metrics collection is now permanently enabled and controlled solely by the ``MetricsSettings.EnableNotificationMetrics`` setting. - Removed the ``StreamlinedMarketplace`` feature flag; the streamlined plugin Marketplace is now always enabled. - Removed the ``AttributeBasedAccessControl`` feature flag. Attribute-based access control is now exclusively controlled by the ``AccessControlSettings.EnableAttributeBasedAccessControl`` configuration setting. - Removed ``CloudIPFiltering`` feature flag and enabled this functionality by default for licensed Cloud servers. - Sent a wipe signal to mobile apps with open sessions when a session is revoked. - Removed Google Fonts references from server email templates so notification emails no longer load fonts from external URLs when opened. - Added ``ClusterGracefulDrain`` feature flag (default on) to reduce cluster message errors during rolling restarts of high-availability deployments. - - Added delta support for the PSAv2 property fields and values endpoints, and a new fields search endpoint. + - Added delta support for the PSAv2 property fields and values endpoints, and a new fields search endpoint (including mobile apps). - Added property owners, audit logs for all custom profile attribute value changes, and new plugin APIs for property values. - Improved performance of the Scheduled messages page by virtualizing the scheduled posts list, so opening the tab is no longer slow when there are many scheduled posts. - Team membership can now be controlled by user attributes (department, program, etc.) — private teams automatically enforce access rules, block non-qualifying joins, and remove ineligible members via sync; public teams use advisory mode, surfacing a "Recommended" tag to qualifying users without blocking anyone. @@ -107,10 +107,10 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa ### Bug Fixes - Fixed an issue where reactions using emoji names with mixed case (e.g. ``:Mattermost:``) could not be added or removed. - - Fixed a webapp issue that caused private chat message content to be copied into the Web Notifications API ``tag`` option, where Chromium-based browsers can expose it through notification activation metadata. - - Fixed Markdown list items containing multiple paragraphs appearing as a single paragraph. - - Fixed code blocks in Markdown lists not being able to scroll horizontally. - - Fixed an issue where the Recaps sparkle icon in the left-hand sidebar appeared dimmer than the other sidebar item icons. + - Fixed a webapp issue that caused private chat message content to be copied into the Web Notifications API ``tag`` option, where Chromium-based browsers can expose it through notification activation metadata (reported on webapp, Windows, and Chromium browsers). + - Fixed Markdown list items containing multiple paragraphs appearing as a single paragraph (reported on webapp, Firefox and Mac). + - Fixed code blocks in Markdown lists not being able to scroll horizontally (reported on webapp, Firefox and Mac). + - Fixed an issue where the Recaps sparkle icon in the left-hand sidebar appeared dimmer than the other sidebar item icons (reported on webapp). - Fixed an issue where the AI-generated indicator was only shown on the first message when an agent posted multiple messages in a row. - Fixed an issue where the W3C specification links in the Signature Algorithm and Canonicalization Algorithm help text on the SAML 2.0 System Console page were not clickable. - Fixed an issue where action buttons in interactive message attachments could overflow horizontally instead of wrapping when they had long labels. From eb0c12c318fbf4f3cc581a729400cf293bc9126d Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 12:50:23 +0300 Subject: [PATCH 06/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index e0a13d39db0..24818cafbe8 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -57,7 +57,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - The agent selector now respects the configured default agent and remembers your last-selected agent. - Mattermost now proactively warns the owner of a personal access token with a direct message from the system bot as the token approaches expiry (7, 3, and 1 days before), so token-backed integrations no longer break without warning. Added the ``pat_expiry_notify`` job, which runs hourly when ``EnableUserAccessTokens`` is set and can also be triggered on demand by admins via the jobs API. - Token owners are now notified by a direct message from the system bot when one of their personal access tokens is removed after expiring. - - Added a "Regenerate" option to **Personal Access Tokens** in **Account Settings > Security** (including webapp). + - Added a **Regenerate** option to Personal Access Tokens in **Account Settings > Security** (including webapp). #### Plugins/Integrations - Added plugin support for pluggable tabs in the Channel Settings modal, including a new ``ChannelSettingsTab`` webapp registration surface. From 74ea67de9530a28e68249fa7bc6f3fbde82b5835 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 12:56:55 +0300 Subject: [PATCH 07/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 24818cafbe8..5c2bfeb03f5 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -43,9 +43,10 @@ If you upgrade from a release earlier than v11.9, please read the other [Importa See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-available/) on the highlights in our latest release. #### User Interface - - Prepackaged the Mattermost Agents plugin at version 2.5.0-rc1 instead of 2.4.2. - - Prepackage MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). - - Updated Mattermost Calls to v1.12.2, fixing a stale join button on Desktop after WebSocket reconnect, guarding against concurrent join attempts, surfacing the deprecated ``MM_CALLS_RTCD_URL`` setting in the ``/env`` endpoint, and limiting decompressed SDP payload size to prevent potential denial-of-service. + - Pre-packaged Playbooks plugin version [v2.11.0](https://github.com/mattermost/mattermost-plugin-playbooks/releases/tag/v2.11.0). + - Pre-packaged Agents plugin version [v2.5.0](https://github.com/mattermost/mattermost-plugin-agents/releases/tag/v2.5.0). + - Pre-packaged Calls plugin version [v1.12.2](https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.12.2). + - Pre-packaged MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full Markdown round-trip. - Added a media gallery layout for posts with multiple images or videos, plus inline frame previews for single videos. - Added support for a file upload element type in interactive dialogs. From 308f5152bb2a9876513a7063cfd84e90b197b213 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 13:03:54 +0300 Subject: [PATCH 08/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 5c2bfeb03f5..228790365de 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -22,7 +22,7 @@ Platform and OS scope reflects reported and tested environments and may not repr ### Upgrade Impact #### Database Schema Changes - - The following schema changes are included in the v11.9 release. No database downtime is expected for this upgrade. See the [Important Upgrade Notes](https://docs.mattermost.com/upgrade/important-upgrade-notes.html) for more details. + - The following schema changes are included in the v11.10 release. No database downtime is expected for this upgrade. See the [Important Upgrade Notes](https://docs.mattermost.com/upgrade/important-upgrade-notes.html) for more details. - Added #### config.json From 614b75b75743bc90936123e8bf5a60ba7f9351a3 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 14:39:57 +0300 Subject: [PATCH 09/21] Update mattermost-v11-changelog.md --- .../mattermost-v11-changelog.md | 30 ++++++++++++------- 1 file changed, 19 insertions(+), 11 deletions(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 228790365de..10e9817ad8c 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -23,14 +23,15 @@ Platform and OS scope reflects reported and tested environments and may not repr #### Database Schema Changes - The following schema changes are included in the v11.10 release. No database downtime is expected for this upgrade. See the [Important Upgrade Notes](https://docs.mattermost.com/upgrade/important-upgrade-notes.html) for more details. - - Added + - Added nullable bigint column lastnotifiedat to the useraccesstokens table to support token notification tracking; catalog-only change with negligible production impact. + - Adds composite index ``idx_propertyvalues_groupid_updateat_id`` on ``PropertyValues(GroupID, UpdateAt, ID)`` to improve Custom Attributes query performance with no downtime or DML impact. #### config.json New setting options were added to ``config.json``. Below is a list of the additions and their default values on install. The settings can be modified in ``config.json``, or the System Console when available. - **Changes to Enterprise Advanced plan:** - Under ``AccessControlSettings`` in ``config.json``, added ``EnableChannelPolicyIndicators`` configuration setting to control whether channel access attribute indicators are shown in the channel members list and invite dialog. Default is ``true``. - - Added a new Enterprise configuration setting, TeamSettings.LockProfileFieldsForEmailUsers (System Console > Site Configuration > Users and Teams), which prevents users who sign in with email and password from changing their first name, last name, and username ("name_and_username"), or additionally their nickname, position, and profile picture ("all"). System Admins are exempt, and empty first/last names can be filled in once. When enabled, users with the Invite Users permission can pre-set the first name, last name, and username on email invitations; the POST /api/v4/teams/{team_id}/invite/email endpoint accepts a new optional "profiles" field, and the System Console user detail page now supports editing a user's first and last name. - - Added ``TeamSettings.LockProfileFieldsForEmailUsers`` configuration setting. + - **Changes to Enterprise plans:** + - Under ``TeamSettings`` in ``config.json``, added a new Enterprise configuration setting, ``TeamSettings.LockProfileFieldsForEmailUsers`` (**System Console > Site Configuration > Users and Teams**), which prevents users who sign in with email and password from changing their first name, last name, and username ("name_and_username"), or additionally their nickname, position, and profile picture ("all"). System Admins are exempt, and empty first/last names can be filled in once. When enabled, users with the Invite Users permission can pre-set the first name, last name, and username on email invitations; the ``POST /api/v4/teams/{team_id}/invite/email`` endpoint accepts a new optional "profiles" field, and the System Console user detail page now supports editing a user's first and last name. ### Compatibility - Updated minimum Edge and Chrome versions to 150+. @@ -59,6 +60,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Mattermost now proactively warns the owner of a personal access token with a direct message from the system bot as the token approaches expiry (7, 3, and 1 days before), so token-backed integrations no longer break without warning. Added the ``pat_expiry_notify`` job, which runs hourly when ``EnableUserAccessTokens`` is set and can also be triggered on demand by admins via the jobs API. - Token owners are now notified by a direct message from the system bot when one of their personal access tokens is removed after expiring. - Added a **Regenerate** option to Personal Access Tokens in **Account Settings > Security** (including webapp). + - Changed Left-Hand-Side/Right-Hand-Side to only be resizable with the left mouse button. #### Plugins/Integrations - Added plugin support for pluggable tabs in the Channel Settings modal, including a new ``ChannelSettingsTab`` webapp registration surface. @@ -92,9 +94,15 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added delta support for the PSAv2 property fields and values endpoints, and a new fields search endpoint (including mobile apps). - Added property owners, audit logs for all custom profile attribute value changes, and new plugin APIs for property values. - Improved performance of the Scheduled messages page by virtualizing the scheduled posts list, so opening the tab is no longer slow when there are many scheduled posts. - - Team membership can now be controlled by user attributes (department, program, etc.) — private teams automatically enforce access rules, block non-qualifying joins, and remove ineligible members via sync; public teams use advisory mode, surfacing a "Recommended" tag to qualifying users without blocking anyone. - Team admins and system admins can define per-team membership rules, configure auto-add, and trigger or monitor sync jobs directly from Team Settings and the System Console, with inline enforcement in the Invite People and Add Members modals. - - Property owners, audit logs for all CPA value changes and new plugin apis for property values + - Added ``window.WebappUtils.modals.openModalById`` and ``canOpenModalId``, letting plugins open and feature-detect an allowlisted set of core modals by id. The plugin-facing modal types now ship from @mattermost/shared/types/global (including webapp). + - Made ``SendBestEffort`` cluster messages fall back to using TCP when their length is larger than a UDP datagram. + - Aligned the logic that updates a user's authentication method with other credential and authentication paths, so that all existing sessions of a user are revoked when their authentication method is changed. + - Plugins calling ``p.API.UpdateUserAuth`` to change a user's authentication method will now revoke all existing sessions for that user, logging them out of all active clients. Plugin developers should be aware of this new behavior. + - Replaced "Enable Concurrent React (Experimental)" user setting with a feature flag. + - Remove unused feature flag ``OnboardingTourTips``. + - Added audit trail for property values. + - Added support for team-scoped plugin products: a product registered via registerProduct with isTeamScoped set to true is now mounted under the team route with team context initialized from the URL. Products with global baseURLs are unaffected (including webapp). #### mmctl - Added the ability to send direct messages with ``mmctl`` using ``mmctl post create @username --message ``. @@ -135,7 +143,9 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Fixed an issue with plugins receiving hooks and logging errors after shutting down. - Fixed the Playbooks Become a Participant modal text alignment. - Fixed an issue where broken draft state occurred when uploads failed or were interrupted, preventing users from sending messages again. - - Fixed most layout shifts caused by images in posts loading + - Fixed most layout shifts caused by images in posts loading. + - Fixed an issue where shared channel messages sent while a remote connection was briefly interrupted would not sync until the next message was sent. + - Fixed an issue with plugin configuration loss on High Availability nodes with incomplete plugin sync. ### API Changes - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint. @@ -145,21 +155,19 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added ``POST /tokens/rotate`` (``rotateUserAccessToken``) API endpoint. - Added ``GET /access_control/attributes`` (``getTeamAccessControlAttributes``) API endpoint. - Added ``POST /`` (``searchPropertyFields``) API endpoint. - - Added `GET /access_control/attributes` (`getTeamAccessControlAttributes`) API endpoint. + - Added new API endpoint ``POST /api/v4/users/tokens/rotate`` to rotate (regenerate) the secret of an existing Personal Access Token. The old secret is invalidated immediately on rotation. ### WebSocket Event Changes - - Added a ``job_updated`` WebSocket event that is pushed when a job changes status. + - Added a ``job_updated`` WebSocket event that is pushed when a job changes status. System Console job tables (LDAP sync, data retention, message export, etc.) now reflect job status changes in real time instead of polling every 15 seconds. ### Audit Log Event Changes - Added ``AuditEventRevokeNonCompliantUserAccessTokens`` audit log event. - Added ``AuditEventRotateUserAccessToken`` audit log event. - - Added ``AuditEventTeamCascadedChannelRemoval`` audit log event. - - Added ``AuditEventTeamMembershipAdded`` audit log event. - Added ``AuditEventTeamMembershipRemoved`` audit log event. - Added ``obtained_user_email`` field to ``completeSaml`` audit log events. - Added ``AuditEventTeamCascadedChannelRemoval`` audit log event. - Added ``AuditEventTeamMembershipAdded`` audit log event. - - Added ``AuditEventTeamMembershipRemoved`` audit log event. + - Added ``AuditEventCPAValueChange`` audit log event. ### Go Version - v11.10 is built with Go ``v1.26.4``. From 7b648f8bf7cc04639ac41e33d65e54abc71c745f Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 14:53:06 +0300 Subject: [PATCH 10/21] Update mattermost-v11-changelog.md --- .../mattermost-v11-changelog.md | 235 +++++++++--------- 1 file changed, 117 insertions(+), 118 deletions(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 10e9817ad8c..f934afd626e 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -13,17 +13,16 @@ Platform and OS scope reflects reported and tested environments and may not represent all affected configurations. ``` - (release-v11.10-feature-release)= ## Release v11.10 - [Feature Release](https://docs.mattermost.com/product-overview/release-policy.html#release-types) -**Release day: 2026-08-14** +**Release Day: 2026-08-14** ### Upgrade Impact #### Database Schema Changes - The following schema changes are included in the v11.10 release. No database downtime is expected for this upgrade. See the [Important Upgrade Notes](https://docs.mattermost.com/upgrade/important-upgrade-notes.html) for more details. - - Added nullable bigint column lastnotifiedat to the useraccesstokens table to support token notification tracking; catalog-only change with negligible production impact. + - Added nullable ``bigint`` column ``lastnotifiedat`` to the ``useraccesstokens`` table to support token notification tracking; catalog-only change with negligible production impact. - Adds composite index ``idx_propertyvalues_groupid_updateat_id`` on ``PropertyValues(GroupID, UpdateAt, ID)`` to improve Custom Attributes query performance with no downtime or DML impact. #### config.json @@ -33,7 +32,7 @@ New setting options were added to ``config.json``. Below is a list of the additi - **Changes to Enterprise plans:** - Under ``TeamSettings`` in ``config.json``, added a new Enterprise configuration setting, ``TeamSettings.LockProfileFieldsForEmailUsers`` (**System Console > Site Configuration > Users and Teams**), which prevents users who sign in with email and password from changing their first name, last name, and username ("name_and_username"), or additionally their nickname, position, and profile picture ("all"). System Admins are exempt, and empty first/last names can be filled in once. When enabled, users with the Invite Users permission can pre-set the first name, last name, and username on email invitations; the ``POST /api/v4/teams/{team_id}/invite/email`` endpoint accepts a new optional "profiles" field, and the System Console user detail page now supports editing a user's first and last name. -### Compatibility +#### Compatibility - Updated minimum Edge and Chrome versions to 150+. ```{Important} @@ -44,138 +43,138 @@ If you upgrade from a release earlier than v11.9, please read the other [Importa See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-available/) on the highlights in our latest release. #### User Interface - - Pre-packaged Playbooks plugin version [v2.11.0](https://github.com/mattermost/mattermost-plugin-playbooks/releases/tag/v2.11.0). - - Pre-packaged Agents plugin version [v2.5.0](https://github.com/mattermost/mattermost-plugin-agents/releases/tag/v2.5.0). - - Pre-packaged Calls plugin version [v1.12.2](https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.12.2). - - Pre-packaged MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). - - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full Markdown round-trip. - - Added a media gallery layout for posts with multiple images or videos, plus inline frame previews for single videos. - - Added support for a file upload element type in interactive dialogs. - - Added support for MM Blocks as a new way to create Interactive Messages (including webapp and mobile app). - - Plugins and integrations can now open stacked child dialogs from within an interactive dialog using the new ``action_button`` element type. - - Bot accounts, OAuth apps, incoming webhooks, and plugins can now deliver posts silently — visible in the channel without producing notifications, unread badges, or the "New Messages" separator (including desktop and mobile apps). - - Bot accounts managed by a plugin now display the managing plugin's ID in the Bot Accounts list instead of a generic "Managed by plugin" label. - - Added inline plugin metadata to the Plugin Management page and plugin settings page showing the plugin ID, version, and links to the website and release notes when available. - - The agent selector now respects the configured default agent and remembers your last-selected agent. - - Mattermost now proactively warns the owner of a personal access token with a direct message from the system bot as the token approaches expiry (7, 3, and 1 days before), so token-backed integrations no longer break without warning. Added the ``pat_expiry_notify`` job, which runs hourly when ``EnableUserAccessTokens`` is set and can also be triggered on demand by admins via the jobs API. - - Token owners are now notified by a direct message from the system bot when one of their personal access tokens is removed after expiring. - - Added a **Regenerate** option to Personal Access Tokens in **Account Settings > Security** (including webapp). - - Changed Left-Hand-Side/Right-Hand-Side to only be resizable with the left mouse button. + - Pre-packaged Playbooks plugin version [v2.11.0](https://github.com/mattermost/mattermost-plugin-playbooks/releases/tag/v2.11.0). + - Pre-packaged Agents plugin version [v2.5.0](https://github.com/mattermost/mattermost-plugin-agents/releases/tag/v2.5.0). + - Pre-packaged Calls plugin version [v1.12.2](https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.12.2). + - Pre-packaged MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). + - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full Markdown round-trip. + - Added a media gallery layout for posts with multiple images or videos, plus inline frame previews for single videos. + - Added support for a file upload element type in interactive dialogs. + - Added support for Mattermost Blocks as a new way to create Interactive Messages (including webapp and mobile app). + - Plugins and integrations can now open stacked child dialogs from within an interactive dialog using the new ``action_button`` element type. + - Bot accounts, OAuth apps, incoming webhooks, and plugins can now deliver posts silently — visible in the channel without producing notifications, unread badges, or the "New Messages" separator (including desktop and mobile apps). + - Bot accounts managed by a plugin now display the managing plugin's ID in the **Bot Accounts** list instead of a generic "Managed by plugin" label. + - Added inline plugin metadata to the **Plugin Management** page and plugin settings page showing the plugin ID, version, and links to the website and release notes when available. + - The agent selector now respects the configured default agent and remembers your last-selected agent. + - Mattermost now proactively warns the owner of a personal access token with a direct message from the system bot as the token approaches expiry (7, 3, and 1 days before), so token-backed integrations no longer break without warning. Added the ``pat_expiry_notify`` job, which runs hourly when ``EnableUserAccessTokens`` is set and can also be triggered on demand by admins via the jobs API. + - Token owners are now notified by a direct message from the system bot when one of their personal access tokens is removed after expiring. + - Added a **Regenerate** option to Personal Access Tokens in **Account Settings > Security** (including webapp). + - Changed Left-Hand-Side/Right-Hand-Side to only be resizable with the left mouse button. #### Plugins/Integrations - - Added plugin support for pluggable tabs in the Channel Settings modal, including a new ``ChannelSettingsTab`` webapp registration surface. - - Allowed plugins to implement ``MessagesWillBeConsumed`` without requiring the feature flag. - - Outgoing integration requests for post action button and interactive dialog endpoints now surface upstream 429/503 responses verbatim (preserving retry semantics) and map other upstream 5xx responses to 502, instead of collapsing all non-200 responses to 400. + - Added plugin support for pluggable tabs in the **Channel Settings** modal, including a new ``ChannelSettingsTab`` webapp registration surface. + - Allowed plugins to implement ``MessagesWillBeConsumed`` without requiring the feature flag. + - Outgoing integration requests for post action button and interactive dialog endpoints now surface upstream 429/503 responses verbatim (preserving retry semantics) and map other upstream 5xx responses to 502, instead of collapsing all non-200 responses to 400. #### Administration - - Added a new Board Attributes panel under System Console > System Attributes for managing the default attributes shown on every board, including the locked Status and Assignee fields. Available when the ``IntegratedBoards`` feature flag is enabled. - - Added a "Revoke non-compliant tokens" action in System Console > Integrations > Integration Management that lets admins revoke existing personal access tokens that violate the configured Maximum Personal Access Token Lifetime (tokens that never expire or expire beyond the cap). Bot account tokens are exempt, and the number of affected tokens is shown for confirmation before revoking. - - Added a discovery page for Classification Markings in the System Console so the feature is surfaced with an upgrade path on licenses below Enterprise when the ``ClassificationMarkings`` feature flag is enabled. - - Added a new System Console setting (``AccessControlSettings.EnableChannelPolicyIndicators``, default ``true``) under Attribute-Based Access Control that lets admins hide channel access attribute indicators (the attribute tags shown in the channel members list and invite dialog) to avoid revealing policy details to end users. Requires Enterprise Advanced license. - - Added a Session Attributes management page under System Console > System Attributes, and made enabled session attributes selectable in Attribute-Based permission-policy editors (generating ``user.session.`` conditions). Requires Enterprise Advanced license. - - Added the ability to edit a team's name and description from the System Console Team Configuration page. - - Added a Teams column to the System Console user data CSV export, listing each user's team memberships. - - Team membership can now be controlled by user attributes (department, program, etc.) — private teams automatically enforce access rules, block non-qualifying joins, and remove ineligible members via sync; public teams use advisory mode, surfacing a "Recommended" tag to qualifying users without blocking anyone. Team admins and system admins can define per-team membership rules, configure auto-add, and trigger or monitor sync jobs directly from Team Settings and the System Console, with inline enforcement in the Invite People and Add Members modals. - - Added a specific error message when uploading a license signed for a different service environment (a production license on a test/dev server, or vice versa) instead of the generic "Invalid license file." error. - - Corrected the System Console "Max Users Per Team" description to accurately state that only active members with active accounts count toward the limit; deactivated users and removed members are not counted. - - Improved accessibility of the Content Flagging "Content Reviewers" admin settings: each per-team enable/disable toggle now includes the team name in its ``aria-label``. - - Improved the precision of the OAuth Dynamic Client Registration (DCR) redirect URI allowlist by matching patterns per URL component. - - The server now pushes a ``job_updated`` WebSocket event when a job changes status. System Console job tables (LDAP sync, data retention, message export, etc.) now reflect job status changes in real time instead of polling every 15 seconds. - - Removed the ``ChannelBookmarks`` feature flag. The Channel Bookmarks feature is now always enabled (subject to licensing). - - Removed the ``WebSocketEventScope`` feature flag; scoping of typing and reaction WebSocket events to clients that have the relevant channel or thread open is now permanently enabled. - - Removed the ``ExperimentalAuditSettingsSystemConsoleUI`` feature flag. The experimental Audit Logging configuration page in the System Console (Enterprise, beta) is now permanently enabled. - - Removed the ``NotificationMonitoring`` feature flag for webapp/desktop app. Notification delivery metrics collection is now permanently enabled and controlled solely by the ``MetricsSettings.EnableNotificationMetrics`` setting. - - Removed the ``StreamlinedMarketplace`` feature flag; the streamlined plugin Marketplace is now always enabled. - - Removed the ``AttributeBasedAccessControl`` feature flag. Attribute-based access control is now exclusively controlled by the ``AccessControlSettings.EnableAttributeBasedAccessControl`` configuration setting. - - Removed ``CloudIPFiltering`` feature flag and enabled this functionality by default for licensed Cloud servers. - - Sent a wipe signal to mobile apps with open sessions when a session is revoked. - - Removed Google Fonts references from server email templates so notification emails no longer load fonts from external URLs when opened. - - Added ``ClusterGracefulDrain`` feature flag (default on) to reduce cluster message errors during rolling restarts of high-availability deployments. - - Added delta support for the PSAv2 property fields and values endpoints, and a new fields search endpoint (including mobile apps). - - Added property owners, audit logs for all custom profile attribute value changes, and new plugin APIs for property values. - - Improved performance of the Scheduled messages page by virtualizing the scheduled posts list, so opening the tab is no longer slow when there are many scheduled posts. - - Team admins and system admins can define per-team membership rules, configure auto-add, and trigger or monitor sync jobs directly from Team Settings and the System Console, with inline enforcement in the Invite People and Add Members modals. - - Added ``window.WebappUtils.modals.openModalById`` and ``canOpenModalId``, letting plugins open and feature-detect an allowlisted set of core modals by id. The plugin-facing modal types now ship from @mattermost/shared/types/global (including webapp). - - Made ``SendBestEffort`` cluster messages fall back to using TCP when their length is larger than a UDP datagram. - - Aligned the logic that updates a user's authentication method with other credential and authentication paths, so that all existing sessions of a user are revoked when their authentication method is changed. - - Plugins calling ``p.API.UpdateUserAuth`` to change a user's authentication method will now revoke all existing sessions for that user, logging them out of all active clients. Plugin developers should be aware of this new behavior. - - Replaced "Enable Concurrent React (Experimental)" user setting with a feature flag. - - Remove unused feature flag ``OnboardingTourTips``. - - Added audit trail for property values. - - Added support for team-scoped plugin products: a product registered via registerProduct with isTeamScoped set to true is now mounted under the team route with team context initialized from the URL. Products with global baseURLs are unaffected (including webapp). + - Added a new **Board Attributes** panel under **System Console > System Attributes** for managing the default attributes shown on every board, including the locked **Status** and **Assignee** fields. Available when the ``IntegratedBoards`` feature flag is enabled. + - Added a "Revoke non-compliant tokens" action in **System Console > Integrations > Integration Management** that lets admins revoke existing personal access tokens that violate the configured **Maximum Personal Access Token Lifetime** (tokens that never expire or expire beyond the cap). Bot account tokens are exempt, and the number of affected tokens is shown for confirmation before revoking. + - Added a discovery page for **Classification Markings** in the **System Console** so the feature is surfaced with an upgrade path on licenses below Enterprise when the ``ClassificationMarkings`` feature flag is enabled. + - Added a new System Console setting (``AccessControlSettings.EnableChannelPolicyIndicators``, default ``true``) under **Attribute-Based Access Control** that lets admins hide channel access attribute indicators (the attribute tags shown in the channel members list and invite dialog) to avoid revealing policy details to end users. Requires Enterprise Advanced license. + - Added a **Session Attributes** management page under **System Console > System Attributes**, and made enabled session attributes selectable in Attribute-Based permission-policy editors (generating ``user.session.`` conditions). Requires Enterprise Advanced license. + - Added the ability to edit a team's name and description from the System Console **Team Configuration** page. + - Added a Teams column to the System Console user data CSV export, listing each user's team memberships. + - Team membership can now be controlled by user attributes (department, program, etc.) — private teams automatically enforce access rules, block non-qualifying joins, and remove ineligible members via sync; public teams use advisory mode, surfacing a "Recommended" tag to qualifying users without blocking anyone. Team admins and system admins can define per-team membership rules, configure auto-add, and trigger or monitor sync jobs directly from Team Settings and the System Console, with inline enforcement in the Invite People and Add Members modals. + - Added a specific error message when uploading a license signed for a different service environment (a production license on a test/dev server, or vice versa) instead of the generic "Invalid license file." error. + - Corrected the System Console "Max Users Per Team" description to accurately state that only active members with active accounts count toward the limit; deactivated users and removed members are not counted. + - Improved accessibility of the **Content Flagging** "Content Reviewers" admin settings: each per-team enable/disable toggle now includes the team name in its ``aria-label``. + - Improved the precision of the OAuth Dynamic Client Registration (DCR) redirect URI allowlist by matching patterns per URL component. + - The server now pushes a ``job_updated`` WebSocket event when a job changes status. System Console job tables (LDAP sync, data retention, message export, etc.) now reflect job status changes in real time instead of polling every 15 seconds. + - Removed the ``ChannelBookmarks`` feature flag. The Channel Bookmarks feature is now always enabled (subject to licensing). + - Removed the ``WebSocketEventScope`` feature flag; scoping of typing and reaction WebSocket events to clients that have the relevant channel or thread open is now permanently enabled. + - Removed the ``ExperimentalAuditSettingsSystemConsoleUI`` feature flag. The experimental **Audit Logging** configuration page in the System Console (Enterprise, beta) is now permanently enabled. + - Removed the ``NotificationMonitoring`` feature flag for webapp/desktop app. Notification delivery metrics collection is now permanently enabled and controlled solely by the ``MetricsSettings.EnableNotificationMetrics`` setting. + - Removed the ``StreamlinedMarketplace`` feature flag; the streamlined plugin Marketplace is now always enabled. + - Removed the ``AttributeBasedAccessControl`` feature flag. Attribute-based access control is now exclusively controlled by the ``AccessControlSettings.EnableAttributeBasedAccessControl`` configuration setting. + - Removed ``CloudIPFiltering`` feature flag and enabled this functionality by default for licensed Cloud servers. + - Sent a wipe signal to mobile apps with open sessions when a session is revoked. + - Removed Google Fonts references from server email templates so notification emails no longer load fonts from external URLs when opened. + - Added ``ClusterGracefulDrain`` feature flag (default on) to reduce cluster message errors during rolling restarts of high-availability deployments. + - Added delta support for the PSAv2 property fields and values endpoints, and a new fields search endpoint (including mobile apps). + - Added property owners, audit logs for all custom profile attribute value changes, and new plugin APIs for property values. + - Improved performance of the **Scheduled Messages** page by virtualizing the scheduled posts list, so opening the tab is no longer slow when there are many scheduled posts. + - Team admins and system admins can define per-team membership rules, configure auto-add, and trigger or monitor sync jobs directly from **Team Settings** and the System Console, with inline enforcement in the Invite People and Add Members modals. + - Added ``window.WebappUtils.modals.openModalById`` and ``canOpenModalId``, letting plugins open and feature-detect an allowlisted set of core modals by id. The plugin-facing modal types now ship from ``@mattermost/shared/types/global`` (including webapp). + - Made ``SendBestEffort`` cluster messages fall back to using TCP when their length is larger than a UDP datagram. + - Aligned the logic that updates a user's authentication method with other credential and authentication paths, so that all existing sessions of a user are revoked when their authentication method is changed. + - Plugins calling ``p.API.UpdateUserAuth`` to change a user's authentication method will now revoke all existing sessions for that user, logging them out of all active clients. Plugin developers should be aware of this new behavior. + - Replaced "Enable Concurrent React (Experimental)" user setting with a feature flag. + - Removed an unused feature flag ``OnboardingTourTips``. + - Added an audit trail for property values. + - Added support for team-scoped plugin products: a product registered via ``registerProduct`` with ``isTeamScoped`` set to true is now mounted under the team route with team context initialized from the URL. Products with global ``baseURLs`` are unaffected (including webapp). #### mmctl - - Added the ability to send direct messages with ``mmctl`` using ``mmctl post create @username --message ``. - - Added new ``mmctl`` commands: ``job create`` to create jobs with type-specific options, ``job show`` to display job details, and ``job cancel`` to cancel running jobs. - - Added a new ``--auto-add-users`` flag to the ``mmctl channel move`` command. The command now also lists the channel members that are missing from the destination team when a move is rejected. - - Added a new ``mmctl channel users list`` command that lists the members of a channel (ID, username, email, and roles), with ``--page``, ``--per-page``, and ``--all`` pagination flags. - - Added the ``mmctl user status`` and ``mmctl user status set`` commands to read and update a user's presence status (online, away, dnd, offline), with an optional ``--dnd-end-time`` flag. The user status GET/PUT endpoints are now also available over the ``mmctl`` local mode socket. - - Added a ``--show-ids`` flag to the ``mmctl channel list`` command to include channel IDs in the plain-text output. - - Added the user's roles to the plain-text output of the ``mmctl user search`` command. - - Moved the ``mmctl user deleteall`` command to ``mmctl system nuke users`` to reduce the risk of accidental invocation. The ``mmctl user deleteall`` command has been removed. + - Added the ability to send direct messages with ``mmctl`` using ``mmctl post create @username --message ``. + - Added new ``mmctl`` commands: ``job create`` to create jobs with type-specific options, ``job show`` to display job details, and ``job cancel`` to cancel running jobs. + - Added a new ``--auto-add-users`` flag to the ``mmctl channel move`` command. The command now also lists the channel members that are missing from the destination team when a move is rejected. + - Added a new ``mmctl channel users list`` command that lists the members of a channel (ID, username, email, and roles), with ``--page``, ``--per-page``, and ``--all`` pagination flags. + - Added the ``mmctl user status`` and ``mmctl user status set`` commands to read and update a user's presence status (online, away, dnd, offline), with an optional ``--dnd-end-time`` flag. The user status GET/PUT endpoints are now also available over the ``mmctl`` local mode socket. + - Added a ``--show-ids`` flag to the ``mmctl channel list`` command to include channel IDs in the plain-text output. + - Added the user's roles to the plain-text output of the ``mmctl user search`` command. + - Moved the ``mmctl user deleteall`` command to ``mmctl system nuke users`` to reduce the risk of accidental invocation. The ``mmctl user deleteall`` command has been removed. ### Bug Fixes - - Fixed an issue where reactions using emoji names with mixed case (e.g. ``:Mattermost:``) could not be added or removed. - - Fixed a webapp issue that caused private chat message content to be copied into the Web Notifications API ``tag`` option, where Chromium-based browsers can expose it through notification activation metadata (reported on webapp, Windows, and Chromium browsers). - - Fixed Markdown list items containing multiple paragraphs appearing as a single paragraph (reported on webapp, Firefox and Mac). - - Fixed code blocks in Markdown lists not being able to scroll horizontally (reported on webapp, Firefox and Mac). - - Fixed an issue where the Recaps sparkle icon in the left-hand sidebar appeared dimmer than the other sidebar item icons (reported on webapp). - - Fixed an issue where the AI-generated indicator was only shown on the first message when an agent posted multiple messages in a row. - - Fixed an issue where the W3C specification links in the Signature Algorithm and Canonicalization Algorithm help text on the SAML 2.0 System Console page were not clickable. - - Fixed an issue where action buttons in interactive message attachments could overflow horizontally instead of wrapping when they had long labels. - - Fixed the System Console permissions page to label the Playbook role as "Playbook Administrators" (plural), consistent with the other role headings. - - Fixed an issue where a GUEST tag could be shown next to bot and webhook posts when the webhook creator was demoted to a guest. - - Fixed a data race in ``pluginapi.ConfigureLogrus`` that could panic with "concurrent map read and map write" when a plugin configured logrus while logging was in flight. ``ConfigureLogrus`` now also applies ``SetReportCaller``/``SetLevel`` to the logger passed in rather than the global standard logger. - - Fixed an issue where the access control Job Details modal showed a confusing search-style empty state (and, in some cases, a blank body) when a sync job affected no channels; it now shows a neutral "No channels were affected by this job." message. - - Fixed the System Console feature discovery "Learn more" links for Auto-translation and Mobile Ephemeral Mode so they open the corresponding documentation pages instead of the generic documentation landing page. - - Fixed layout shift sometimes caused by post previews for posts in Direct Message channels. - - Fixed an issue where the "Upload files" permission was pre-selected by default when creating a new rule in a channel's Permissions Policy. New rules now start with no permissions selected. - - Fixed an issue where the Quarantine for Review modal could overflow its boundary when flagging a post with many file attachments on smaller screens. - - Fixed an issue where the System Console permission policy rule editor defaulted to advanced (CEL) mode instead of simple (table) mode when editing rules that used multiselect "has any of" conditions or ranked operators. - - Fixed an issue where the Last Sync column in the output of the ``/share-channel status`` command always showed "--" instead of the actual last sync time. - - Fixed an issue where the shared channel sync loop repeatedly logged a warning for orphaned ``SharedChannelRemotes`` rows whose ``RemoteCluster`` had been deleted. The sync loop now self-heals by soft-deleting the orphaned row. - - Fixed the ``/secure-connection status`` slash command so deleted connections are listed after active ones and the results render as a valid Markdown table. - - Fixed unquoted searches for hyphenated compound words (e.g. ``t-shirt``) on PostgreSQL to match the compound word instead of the individual words. - - Fixed an issue where the data retention policy teams endpoint returned more team information than intended. - - Fixed an issue with the wrong scroll position in the permalink view of channels with images. - - Fixed an issue where the Global Relay compliance export undercounted skipped-attachment warnings: the run-level warning count reflected only the last channel/batch processed instead of the sum across all channels and batches. - - Fixed an issue where the "save" button did not appear in some scenarios when updating connected workspaces in the channel settings. - - Fixed an issue with plugins receiving hooks and logging errors after shutting down. - - Fixed the Playbooks Become a Participant modal text alignment. - - Fixed an issue where broken draft state occurred when uploads failed or were interrupted, preventing users from sending messages again. - - Fixed most layout shifts caused by images in posts loading. - - Fixed an issue where shared channel messages sent while a remote connection was briefly interrupted would not sync until the next message was sent. - - Fixed an issue with plugin configuration loss on High Availability nodes with incomplete plugin sync. + - Fixed an issue where reactions using emoji names with mixed case (e.g. ``:Mattermost:``) could not be added or removed. + - Fixed a webapp issue that caused private chat message content to be copied into the Web Notifications API ``tag`` option, where Chromium-based browsers can expose it through notification activation metadata (reported on webapp, Windows, and Chromium browsers). + - Fixed Markdown list items containing multiple paragraphs appearing as a single paragraph (reported on webapp, Firefox and Mac). + - Fixed code blocks in Markdown lists not being able to scroll horizontally (reported on webapp, Firefox and Mac). + - Fixed an issue where the Recaps sparkle icon in the left-hand sidebar appeared dimmer than the other sidebar item icons (reported on webapp). + - Fixed an issue where the AI-generated indicator was only shown on the first message when an agent posted multiple messages in a row. + - Fixed an issue where the W3C specification links in the Signature Algorithm and Canonicalization Algorithm help text on the SAML 2.0 System Console page were not clickable. + - Fixed an issue where action buttons in interactive message attachments could overflow horizontally instead of wrapping when they had long labels. + - Fixed the System Console permissions page to label the Playbook role as "Playbook Administrators" (plural), consistent with the other role headings. + - Fixed an issue where a GUEST tag could be shown next to bot and webhook posts when the webhook creator was demoted to a guest. + - Fixed a data race in ``pluginapi.ConfigureLogrus`` that could panic with "concurrent map read and map write" when a plugin configured logrus while logging was in flight. ``ConfigureLogrus`` now also applies ``SetReportCaller``/``SetLevel`` to the logger passed in rather than the global standard logger. + - Fixed an issue where the access control Job Details modal showed a confusing search-style empty state (and, in some cases, a blank body) when a sync job affected no channels; it now shows a neutral "No channels were affected by this job." message. + - Fixed the System Console feature discovery "Learn more" links for Auto-translation and Mobile Ephemeral Mode so they open the corresponding documentation pages instead of the generic documentation landing page. + - Fixed layout shift sometimes caused by post previews for posts in Direct Message channels. + - Fixed an issue where the "Upload files" permission was pre-selected by default when creating a new rule in a channel's Permissions Policy. New rules now start with no permissions selected. + - Fixed an issue where the Quarantine for Review modal could overflow its boundary when flagging a post with many file attachments on smaller screens. + - Fixed an issue where the System Console permission policy rule editor defaulted to advanced (CEL) mode instead of simple (table) mode when editing rules that used multiselect "has any of" conditions or ranked operators. + - Fixed an issue where the Last Sync column in the output of the ``/share-channel status`` command always showed "--" instead of the actual last sync time. + - Fixed an issue where the shared channel sync loop repeatedly logged a warning for orphaned ``SharedChannelRemotes`` rows whose ``RemoteCluster`` had been deleted. The sync loop now self-heals by soft-deleting the orphaned row. + - Fixed the ``/secure-connection status`` slash command so deleted connections are listed after active ones and the results render as a valid Markdown table. + - Fixed unquoted searches for hyphenated compound words (e.g. ``t-shirt``) on PostgreSQL to match the compound word instead of the individual words. + - Fixed an issue where the data retention policy teams endpoint returned more team information than intended. + - Fixed an issue with the wrong scroll position in the permalink view of channels with images. + - Fixed an issue where the Global Relay compliance export undercounted skipped-attachment warnings: the run-level warning count reflected only the last channel/batch processed instead of the sum across all channels and batches. + - Fixed an issue where the "save" button did not appear in some scenarios when updating connected workspaces in the channel settings. + - Fixed an issue with plugins receiving hooks and logging errors after shutting down. + - Fixed the Playbooks Become a Participant modal text alignment. + - Fixed an issue where broken draft state occurred when uploads failed or were interrupted, preventing users from sending messages again. + - Fixed most layout shifts caused by images in posts loading. + - Fixed an issue where shared channel messages sent while a remote connection was briefly interrupted would not sync until the next message was sent. + - Fixed an issue with plugin configuration loss on High Availability nodes with incomplete plugin sync. ### API Changes - - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint. - - Removed ``POST /actions/{action_id:[A-Za-z0-9]+}`` (``doPostAction``) API endpoint. - - Added ``GET /tokens/non_compliant/count`` (``countNonCompliantUserAccessTokens``) API endpoint. - - Added ``POST /tokens/non_compliant/revoke`` (``revokeNonCompliantUserAccessTokens``) API endpoint. - - Added ``POST /tokens/rotate`` (``rotateUserAccessToken``) API endpoint. - - Added ``GET /access_control/attributes`` (``getTeamAccessControlAttributes``) API endpoint. - - Added ``POST /`` (``searchPropertyFields``) API endpoint. - - Added new API endpoint ``POST /api/v4/users/tokens/rotate`` to rotate (regenerate) the secret of an existing Personal Access Token. The old secret is invalidated immediately on rotation. + - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint. + - Removed ``POST /actions/{action_id:[A-Za-z0-9]+}`` (``doPostAction``) API endpoint. + - Added ``GET /tokens/non_compliant/count`` (``countNonCompliantUserAccessTokens``) API endpoint. + - Added ``POST /tokens/non_compliant/revoke`` (``revokeNonCompliantUserAccessTokens``) API endpoint. + - Added ``POST /tokens/rotate`` (``rotateUserAccessToken``) API endpoint. + - Added ``GET /access_control/attributes`` (``getTeamAccessControlAttributes``) API endpoint. + - Added ``POST /`` (``searchPropertyFields``) API endpoint. + - Added new API endpoint ``POST /api/v4/users/tokens/rotate`` to rotate (regenerate) the secret of an existing Personal Access Token. The old secret is invalidated immediately on rotation. ### WebSocket Event Changes - - Added a ``job_updated`` WebSocket event that is pushed when a job changes status. System Console job tables (LDAP sync, data retention, message export, etc.) now reflect job status changes in real time instead of polling every 15 seconds. + - Added a ``job_updated`` WebSocket event that is pushed when a job changes status. System Console job tables (LDAP sync, data retention, message export, etc.) now reflect job status changes in real time instead of polling every 15 seconds. ### Audit Log Event Changes - - Added ``AuditEventRevokeNonCompliantUserAccessTokens`` audit log event. - - Added ``AuditEventRotateUserAccessToken`` audit log event. - - Added ``AuditEventTeamMembershipRemoved`` audit log event. - - Added ``obtained_user_email`` field to ``completeSaml`` audit log events. - - Added ``AuditEventTeamCascadedChannelRemoval`` audit log event. - - Added ``AuditEventTeamMembershipAdded`` audit log event. - - Added ``AuditEventCPAValueChange`` audit log event. + - Added ``AuditEventRevokeNonCompliantUserAccessTokens`` audit log event. + - Added ``AuditEventRotateUserAccessToken`` audit log event. + - Added ``AuditEventTeamMembershipRemoved`` audit log event. + - Added ``obtained_user_email`` field to ``completeSaml`` audit log events. + - Added ``AuditEventTeamCascadedChannelRemoval`` audit log event. + - Added ``AuditEventTeamMembershipAdded`` audit log event. + - Added ``AuditEventCPAValueChange`` audit log event. ### Go Version - - v11.10 is built with Go ``v1.26.4``. + - v11.10 is built with Go ``v1.26.4``. ### Open Source Components - - Added ``@tiptap/extension-code-block-lowlight``, ``@tiptap/extension-link``, ``@tiptap/extension-placeholder``, ``@tiptap/extension-table``, ``@tiptap/extension-table-cell``, ``@tiptap/extension-table-header``, ``@tiptap/extension-table-row``, ``@tiptap/markdown``, ``@tiptap/react``, ``@tiptap/starter-kit``, and ``lowlight`` to https://github.com/mattermost/mattermost/. - - Added ``Azure/azure-sdk-for-go`` to https://github.com/mattermost/mattermost/. - - Added ``jaytaylor/html2text`` and ``wneessen/go-mail``, and removed ``go-mail/mail`` from https://github.com/mattermost/mattermost/pull/. + - Added ``@tiptap/extension-code-block-lowlight``, ``@tiptap/extension-link``, ``@tiptap/extension-placeholder``, ``@tiptap/extension-table``, ``@tiptap/extension-table-cell``, ``@tiptap/extension-table-header``, ``@tiptap/extension-table-row``, ``@tiptap/markdown``, ``@tiptap/react``, ``@tiptap/starter-kit``, and ``lowlight`` to https://github.com/mattermost/mattermost/. + - Added ``Azure/azure-sdk-for-go`` to https://github.com/mattermost/mattermost/. + - Added ``jaytaylor/html2text`` and ``wneessen/go-mail``, and removed ``go-mail/mail`` from https://github.com/mattermost/mattermost/pull/. (release-v11.9-feature-release)= ## Release v11.9 - [Feature Release](https://docs.mattermost.com/product-overview/release-policy.html#release-types) From 5db28454ec70b3df39e058fd70b784874e76d032 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 15:14:46 +0300 Subject: [PATCH 11/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index f934afd626e..8dca9561d4c 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -28,7 +28,7 @@ Platform and OS scope reflects reported and tested environments and may not repr #### config.json New setting options were added to ``config.json``. Below is a list of the additions and their default values on install. The settings can be modified in ``config.json``, or the System Console when available. - **Changes to Enterprise Advanced plan:** - - Under ``AccessControlSettings`` in ``config.json``, added ``EnableChannelPolicyIndicators`` configuration setting to control whether channel access attribute indicators are shown in the channel members list and invite dialog. Default is ``true``. + - Under ``AccessControlSettings`` in ``config.json``, added ``EnableChannelPolicyIndicators`` configuration setting (default ``true``) under **Attribute-Based Access Control** that lets admins hide channel access attribute indicators (the attribute tags shown in the channel members list and invite dialog) to avoid revealing policy details to end users. Requires Enterprise Advanced license. - **Changes to Enterprise plans:** - Under ``TeamSettings`` in ``config.json``, added a new Enterprise configuration setting, ``TeamSettings.LockProfileFieldsForEmailUsers`` (**System Console > Site Configuration > Users and Teams**), which prevents users who sign in with email and password from changing their first name, last name, and username ("name_and_username"), or additionally their nickname, position, and profile picture ("all"). System Admins are exempt, and empty first/last names can be filled in once. When enabled, users with the Invite Users permission can pre-set the first name, last name, and username on email invitations; the ``POST /api/v4/teams/{team_id}/invite/email`` endpoint accepts a new optional "profiles" field, and the System Console user detail page now supports editing a user's first and last name. @@ -70,7 +70,6 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added a new **Board Attributes** panel under **System Console > System Attributes** for managing the default attributes shown on every board, including the locked **Status** and **Assignee** fields. Available when the ``IntegratedBoards`` feature flag is enabled. - Added a "Revoke non-compliant tokens" action in **System Console > Integrations > Integration Management** that lets admins revoke existing personal access tokens that violate the configured **Maximum Personal Access Token Lifetime** (tokens that never expire or expire beyond the cap). Bot account tokens are exempt, and the number of affected tokens is shown for confirmation before revoking. - Added a discovery page for **Classification Markings** in the **System Console** so the feature is surfaced with an upgrade path on licenses below Enterprise when the ``ClassificationMarkings`` feature flag is enabled. - - Added a new System Console setting (``AccessControlSettings.EnableChannelPolicyIndicators``, default ``true``) under **Attribute-Based Access Control** that lets admins hide channel access attribute indicators (the attribute tags shown in the channel members list and invite dialog) to avoid revealing policy details to end users. Requires Enterprise Advanced license. - Added a **Session Attributes** management page under **System Console > System Attributes**, and made enabled session attributes selectable in Attribute-Based permission-policy editors (generating ``user.session.`` conditions). Requires Enterprise Advanced license. - Added the ability to edit a team's name and description from the System Console **Team Configuration** page. - Added a Teams column to the System Console user data CSV export, listing each user's team memberships. @@ -93,7 +92,6 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added delta support for the PSAv2 property fields and values endpoints, and a new fields search endpoint (including mobile apps). - Added property owners, audit logs for all custom profile attribute value changes, and new plugin APIs for property values. - Improved performance of the **Scheduled Messages** page by virtualizing the scheduled posts list, so opening the tab is no longer slow when there are many scheduled posts. - - Team admins and system admins can define per-team membership rules, configure auto-add, and trigger or monitor sync jobs directly from **Team Settings** and the System Console, with inline enforcement in the Invite People and Add Members modals. - Added ``window.WebappUtils.modals.openModalById`` and ``canOpenModalId``, letting plugins open and feature-detect an allowlisted set of core modals by id. The plugin-facing modal types now ship from ``@mattermost/shared/types/global`` (including webapp). - Made ``SendBestEffort`` cluster messages fall back to using TCP when their length is larger than a UDP datagram. - Aligned the logic that updates a user's authentication method with other credential and authentication paths, so that all existing sessions of a user are revoked when their authentication method is changed. From 39935bfd994efe47a1b77bbd38434f3fcfbc7244 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 15:33:59 +0300 Subject: [PATCH 12/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 8dca9561d4c..9e062078cad 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -47,7 +47,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Pre-packaged Agents plugin version [v2.5.0](https://github.com/mattermost/mattermost-plugin-agents/releases/tag/v2.5.0). - Pre-packaged Calls plugin version [v1.12.2](https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.12.2). - Pre-packaged MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). - - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full Markdown round-trip. + - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full markdown round-trip. - Added a media gallery layout for posts with multiple images or videos, plus inline frame previews for single videos. - Added support for a file upload element type in interactive dialogs. - Added support for Mattermost Blocks as a new way to create Interactive Messages (including webapp and mobile app). @@ -59,7 +59,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Mattermost now proactively warns the owner of a personal access token with a direct message from the system bot as the token approaches expiry (7, 3, and 1 days before), so token-backed integrations no longer break without warning. Added the ``pat_expiry_notify`` job, which runs hourly when ``EnableUserAccessTokens`` is set and can also be triggered on demand by admins via the jobs API. - Token owners are now notified by a direct message from the system bot when one of their personal access tokens is removed after expiring. - Added a **Regenerate** option to Personal Access Tokens in **Account Settings > Security** (including webapp). - - Changed Left-Hand-Side/Right-Hand-Side to only be resizable with the left mouse button. + - Changed left-hand-side/right-hand-side to only be resizable with the left mouse button. #### Plugins/Integrations - Added plugin support for pluggable tabs in the **Channel Settings** modal, including a new ``ChannelSettingsTab`` webapp registration surface. From b06d1a6155ef525be792b3ce9c834dfb47c131f0 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Wed, 22 Jul 2026 16:52:46 +0300 Subject: [PATCH 13/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 1 + 1 file changed, 1 insertion(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 9e062078cad..2c0a6403b62 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -47,6 +47,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Pre-packaged Agents plugin version [v2.5.0](https://github.com/mattermost/mattermost-plugin-agents/releases/tag/v2.5.0). - Pre-packaged Calls plugin version [v1.12.2](https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.12.2). - Pre-packaged MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). + - Pre-packaged Boards plugin version [v9.3.1](https://github.com/mattermost/mattermost-plugin-boards/releases/tag/v9.3.1). - Added a WYSIWYG editor option for message composition, allowing users to compose messages with rich-text formatting while preserving full markdown round-trip. - Added a media gallery layout for posts with multiple images or videos, plus inline frame previews for single videos. - Added support for a file upload element type in interactive dialogs. From 38ff40b37a1c34fdd9c815d65dae6223bd0b6e54 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Thu, 23 Jul 2026 09:01:02 +0300 Subject: [PATCH 14/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 1 + 1 file changed, 1 insertion(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 2c0a6403b62..a1e5a2491eb 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -144,6 +144,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Fixed most layout shifts caused by images in posts loading. - Fixed an issue where shared channel messages sent while a remote connection was briefly interrupted would not sync until the next message was sent. - Fixed an issue with plugin configuration loss on High Availability nodes with incomplete plugin sync. + - Fixed an issue where bots and integrations could not update markdown action buttons (``mm_blocks_actions``) on their own posts via the API. ### API Changes - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint. From cc2405d564f92e058da4bfb045a8991bca60525e Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Fri, 24 Jul 2026 10:29:21 +0300 Subject: [PATCH 15/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index a1e5a2491eb..4f89dc09c73 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -43,7 +43,7 @@ If you upgrade from a release earlier than v11.9, please read the other [Importa See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-available/) on the highlights in our latest release. #### User Interface - - Pre-packaged Playbooks plugin version [v2.11.0](https://github.com/mattermost/mattermost-plugin-playbooks/releases/tag/v2.11.0). + - Pre-packaged Playbooks plugin version [v2.11.1](https://github.com/mattermost/mattermost-plugin-playbooks/releases/tag/v2.11.1). - Pre-packaged Agents plugin version [v2.5.0](https://github.com/mattermost/mattermost-plugin-agents/releases/tag/v2.5.0). - Pre-packaged Calls plugin version [v1.12.2](https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.12.2). - Pre-packaged MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). From b1a8a3000e34f493ecd3f31060cd340b83088853 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Tue, 28 Jul 2026 09:40:31 +0300 Subject: [PATCH 16/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 4f89dc09c73..b3dceffffc4 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -145,6 +145,8 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Fixed an issue where shared channel messages sent while a remote connection was briefly interrupted would not sync until the next message was sent. - Fixed an issue with plugin configuration loss on High Availability nodes with incomplete plugin sync. - Fixed an issue where bots and integrations could not update markdown action buttons (``mm_blocks_actions``) on their own posts via the API. + - Fixed an issue where the web app didn't load the channel header and post textbox earlier. + - Fixed an issue where editing a message could cause it to appear as a draft (reported on Chrome, webapp). ### API Changes - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint. From f9bd644e1916804873a9a0e172bd73b0cbf31e71 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Thu, 30 Jul 2026 09:30:32 +0300 Subject: [PATCH 17/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index b3dceffffc4..3605309c405 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -44,7 +44,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa #### User Interface - Pre-packaged Playbooks plugin version [v2.11.1](https://github.com/mattermost/mattermost-plugin-playbooks/releases/tag/v2.11.1). - - Pre-packaged Agents plugin version [v2.5.0](https://github.com/mattermost/mattermost-plugin-agents/releases/tag/v2.5.0). + - Pre-packaged Agents plugin version [v2.5.1](https://github.com/mattermost/mattermost-plugin-agents/releases/tag/v2.5.1). - Pre-packaged Calls plugin version [v1.12.2](https://github.com/mattermost/mattermost-plugin-calls/releases/tag/v1.12.2). - Pre-packaged MS Calendar plugin version [v1.7.0](https://github.com/mattermost/mattermost-plugin-mscalendar/releases/tag/v1.7.0). - Pre-packaged Boards plugin version [v9.3.1](https://github.com/mattermost/mattermost-plugin-boards/releases/tag/v9.3.1). @@ -147,6 +147,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Fixed an issue where bots and integrations could not update markdown action buttons (``mm_blocks_actions``) on their own posts via the API. - Fixed an issue where the web app didn't load the channel header and post textbox earlier. - Fixed an issue where editing a message could cause it to appear as a draft (reported on Chrome, webapp). + - Fixed an issue with the focus outline on multi-image gallery thumbnails being clipped after closing the image preview. ### API Changes - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint. From 080f8a1881f9e9ccecca6d6fbf40218632f2e620 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Thu, 30 Jul 2026 14:54:07 +0300 Subject: [PATCH 18/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 1 + 1 file changed, 1 insertion(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 3605309c405..d3fab38438b 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -29,6 +29,7 @@ Platform and OS scope reflects reported and tested environments and may not repr New setting options were added to ``config.json``. Below is a list of the additions and their default values on install. The settings can be modified in ``config.json``, or the System Console when available. - **Changes to Enterprise Advanced plan:** - Under ``AccessControlSettings`` in ``config.json``, added ``EnableChannelPolicyIndicators`` configuration setting (default ``true``) under **Attribute-Based Access Control** that lets admins hide channel access attribute indicators (the attribute tags shown in the channel members list and invite dialog) to avoid revealing policy details to end users. Requires Enterprise Advanced license. + - Under ``AccessControlSettings`` in ``config.json``, added ``SyncJobIntervalSeconds`` configuration setting to configure how often the ABAC membership sync jobs run. - **Changes to Enterprise plans:** - Under ``TeamSettings`` in ``config.json``, added a new Enterprise configuration setting, ``TeamSettings.LockProfileFieldsForEmailUsers`` (**System Console > Site Configuration > Users and Teams**), which prevents users who sign in with email and password from changing their first name, last name, and username ("name_and_username"), or additionally their nickname, position, and profile picture ("all"). System Admins are exempt, and empty first/last names can be filled in once. When enabled, users with the Invite Users permission can pre-set the first name, last name, and username on email invitations; the ``POST /api/v4/teams/{team_id}/invite/email`` endpoint accepts a new optional "profiles" field, and the System Console user detail page now supports editing a user's first and last name. From 8d268fc289f1c96b0be29af0bacbb3ef5649a91a Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Mon, 3 Aug 2026 09:35:03 +0300 Subject: [PATCH 19/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index d3fab38438b..1c61a7adf5c 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -63,6 +63,9 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Added a **Regenerate** option to Personal Access Tokens in **Account Settings > Security** (including webapp). - Changed left-hand-side/right-hand-side to only be resizable with the left mouse button. +#### Performance + - Benchmarking test results showed no significant difference: a -2.61% decrease in the number of supported users for the new release, which lies within the ``[-5%, +5%]`` prediction interval. View the full raw data and methodology in our [Performance Reports repository](https://github.com/mattermost/performance-reports/tree/main/performance-comparisons/v11.10). + #### Plugins/Integrations - Added plugin support for pluggable tabs in the **Channel Settings** modal, including a new ``ChannelSettingsTab`` webapp registration surface. - Allowed plugins to implement ``MessagesWillBeConsumed`` without requiring the feature flag. From e378c6b857d0af775b3e933b8643414c87be2800 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Tue, 4 Aug 2026 08:48:24 +0300 Subject: [PATCH 20/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 1 + 1 file changed, 1 insertion(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 1c61a7adf5c..1eea0538f0f 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -105,6 +105,7 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Removed an unused feature flag ``OnboardingTourTips``. - Added an audit trail for property values. - Added support for team-scoped plugin products: a product registered via ``registerProduct`` with ``isTeamScoped`` set to true is now mounted under the team route with team context initialized from the URL. Products with global ``baseURLs`` are unaffected (including webapp). + - Hard-coded a second plugin signing key from Mattermost. #### mmctl - Added the ability to send direct messages with ``mmctl`` using ``mmctl post create @username --message ``. From 79b61f2da12ec23e5ad0a6bfd570ed99343b1912 Mon Sep 17 00:00:00 2001 From: Amy Blais <29708087+amyblais@users.noreply.github.com> Date: Tue, 4 Aug 2026 09:49:45 +0300 Subject: [PATCH 21/21] Update mattermost-v11-changelog.md --- source/product-overview/mattermost-v11-changelog.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/source/product-overview/mattermost-v11-changelog.md b/source/product-overview/mattermost-v11-changelog.md index 1eea0538f0f..0108774f774 100644 --- a/source/product-overview/mattermost-v11-changelog.md +++ b/source/product-overview/mattermost-v11-changelog.md @@ -153,6 +153,8 @@ See [this blog post](https://mattermost.com/blog/mattermost-v11-10-is-now-availa - Fixed an issue where the web app didn't load the channel header and post textbox earlier. - Fixed an issue where editing a message could cause it to appear as a draft (reported on Chrome, webapp). - Fixed an issue with the focus outline on multi-image gallery thumbnails being clipped after closing the image preview. + - Fixed an issue where typing in a thread or the right-hand sidebar with rich text editing enabled moved focus to the center channel message box. + - Fixed an issue where pressing **Enter** inside a heading could crash the web app. ### API Changes - Added ``POST /actions/{action_id:[A-Za-z0-9_-]+}`` (``doPostAction``) API endpoint.