v0.1.8 v2.0.9-beta
VectifyAI/PageIndexSep 21, 2026 → Sep 25, 20264 days between releases
What's New
Major security hardening and database locking fixes introduced in v2.0.9-beta.
Breaking Changes
- Webdav always shows hidden files, ignoring user preference
- Startup fails when auth signing key differs from database key
- External JWT requests now reuse existing sessions instead of minting new ones
New Features
- Randomized initial password generation for fresh installs
- OAuth2 state bound to HttpOnly cookie for security
- Protection against open redirects and SSRF vulnerabilities
Improvements
- Removed SQLite shared cache to resolve database locking conflicts
- Token management improvements including expiry pruning at startup
Bug Fixes
- Fixed token migration lockout regression from v2.0.8-beta
- Fixed blank page issues and CSP hardening side effects
- Fixed ffmpeg unresponsive lock issue
Upgrade Notes
Ensure your configuration database key matches the auth signing key to prevent startup failures. Be aware that WebDAV now displays all files regardless of hidden file preferences. OAuth2 redirects must use same-app relative paths.
The Two Releases
Version 0.1.8
Sep 21, 2026· 1 month ago
This release is a maintenance update containing numerous bug fixes and patches to improve stability and handling of edge cases across various file formats like CSV, DOCX, and EPUB. The `markitdown-ocr` plugin was also refactored for better maintainability.
Full release notesv2.0.9-beta
Sep 25, 2026· 26 days ago
This beta release focuses on security hardening, featuring randomized initial passwords, secure OAuth2 state handling, and protections against open redirects and SSRF vulnerabilities. It also includes fixes for database locking issues, token management, and OnlyOffice integration.
Full release notes