1.11.0 1.11.1
langgenius/difyDec 11, 2025 → Dec 12, 20251 day between releases
What's New
Security-focused patch fixes React/Next.js CVEs and several credential, document, and token bugs.
New Features
- Adds Amplitude API key integration to layout and provider components.
Improvements
- Upgrades React and React DOM to 19.2.3 and applies a Next.js security update.
- Optimizes Excel extractor performance and memory usage.
- Adds charset handling to response content types for consistent formatting.
- Improves document saving performance in save_document_with_dataset_id.
- Resolves Flask-RESTX AttributeError triggered by validate=True.
Bug Fixes
- Fixes empty available_credentials display.
- Truncates auto-generated descriptions to avoid 400-character limit errors.
- Fixes DOCX extraction failures caused by external images.
- Fixes hit-test failures when attachment IDs are missing.
- Returns None gracefully when access_token is empty instead of erroring.
Upgrade Notes
This is a security patch; upgrading promptly is recommended. No configuration or migration steps are mentioned. Verify custom integrations relying on response content types or Flask-RESTX validation behavior after upgrade.
The Two Releases
v1.11.0 - Your knowledge base just went from mono to full HD
Dec 11, 2025· 11 months ago
Dify 1.11.0 introduces multimodal knowledge bases that can extract, attach, and embed images alongside text. It also adds Zen Mode, workflow tool shortcuts, Start node JSON Schema, admin API key CSRF bypass, and a broad set of performance, testing, and UI improvements.
Full release notesv1.11.1
Dec 12, 2025· 11 months ago
Dify 1.11.1 is a security-focused patch release with important React, React DOM, and Next.js CVE fixes. It also resolves credential display, description length, content-type charset, Flask-RESTX, document handling, token retrieval, and hit-test issues while improving Excel extractor performance.
Full release notes