v2.20.12

p-e-w/hereticv2.20.12Mar 20, 2026by github-actions[bot]

AI Summary

A security patch (GHSA-96jx-fj7m-qh6x) is included alongside fixes for workflow saving, file operations, API specs, and UI elements.

Key Highlights

Security fix for GHSA-96jx-fj7m-qh6x.
Workflow saves are now scoped to prevent clobbering filenames and archive filenames.
File moving logic improved to avoid moving files that are already in place.
Basic auth is now only offered for appropriate requests.
Dark mode hover color for file buttons has been fixed.

Full Release Notes

## paperless-ngx 2.20.12

> [!NOTE]
> This release addresses a security issue (GHSA-96jx-fj7m-qh6x) and is recommended for all users. Our sincere thank you to the community members who reported this.

### Bug Fixes

- Fix:  Scope the workflow saves to prevent clobbering filename/archive\_filename @stumpylog ([#12390](https://github.com/paperless-ngx/paperless-ngx/pull/12390))
- Fix: don't try to usermod/groupmod when non-root + update docs (#<!---->12365) @stumpylog ([#12391](https://github.com/paperless-ngx/paperless-ngx/pull/12391))
- Fix: avoid moving files if already moved @shamoon ([#12389](https://github.com/paperless-ngx/paperless-ngx/pull/12389))
- Fix: remove pagination from document notes api spec @shamoon ([#12388](https://github.com/paperless-ngx/paperless-ngx/pull/12388))
- Fix: fix file button hover color in dark mode @shamoon ([#12367](https://github.com/paperless-ngx/paperless-ngx/pull/12367))
- Fixhancement: only offer basic auth for appropriate requests @shamoon ([#12362](https://github.com/paperless-ngx/paperless-ngx/pull/12362))

### All App Changes

<details>
<summary>5 changes</summary>

- Fix:  Scope the workflow saves to prevent clobbering filename/archive\_filename @stumpylog ([#12390](https://github.com/paperless-ngx/paperless-ngx/pull/12390))
- Fix: avoid moving files if already moved @shamoon ([#12389](https://github.com/paperless-ngx/paperless-ngx/pull/12389))
- Fix: remove pagination from document notes api spec @shamoon ([#12388](https://github.com/paperless-ngx/paperless-ngx/pull/12388))
- Fix: fix file button hover color in dark mode @shamoon ([#12367](https://github.com/paperless-ngx/paperless-ngx/pull/12367))
- Fixhancement: only offer basic auth for appropriate requests @shamoon ([#12362](https://github.com/paperless-ngx/paperless-ngx/pull/12362))
</details>