v4.9.4 v4.8.8

low risk

onyx-dot-app/onyxOct 22, 2026 → Oct 22, 20260 days between releases

What's New

v4.8.8 is a v4.8-line backport, not a forward upgrade: same dep pins, minus v4.9.4's Entra perf fix.

Improvements

  • Pins dompurify to 3.4.17 with nested dependency overrides, matching the v4.9.4 pin.
  • Pins Next.js to 16.4.1 and @sentry/nextjs to 10.75.2, identical to the v4.9.4 versions.
  • Refreshes Node base image digests, the same housekeeping change carried in v4.9.4.

Upgrade Notes

This release is a maintenance patch on the older v4.8 branch, published seconds after v4.9.4, so moving from v4.9.4 to v4.8.8 is a downgrade rather than an upgrade. It carries the same dependency pins but omits the Entra nested-group document-reader permission optimization and the Storybook 10.6.2 pin present in v4.9.4. Stay on v4.9.4 unless you are deliberately tracking the v4.8 line, in which case this patch is a safe drop-in.

The Two Releases

v4.9.4

v4.9.4

Oct 22, 2026· 1 day ago

Patch release for the v4.9 line that combines dependency pinning with a permissions performance improvement. It pins Storybook, dompurify, Next.js, and Sentry versions and updates Node base image digests. The release includes an optimization for listing only groups nested in an Entra group for document readers.

Full release notes
v4.8.8

v4.8.8

Oct 22, 2026· 1 day ago

Patch release focused on dependency maintenance and version pinning for the v4.8 line. It pins key packages including dompurify, Next.js, and Sentry, and updates Node base image digests. No new user-facing features or breaking changes are introduced.

Full release notes