v1.24.0 v4.11.0

Name: strictjson
Author: tanchongmin

high risk

tanchongmin/strictjsonSep 23, 2026 → Sep 26, 20264 days between releases

What's New

Repository focus shifted from PDF text extraction to security hardening.

Breaking Changes

API and functionality are completely different; v4.11.0 focuses on security while v1.24.0 focused on PDF text.

New Features

Hardened OAuth, MFA, CAS, and signup security checks.
Blocks Server-Side Request Forgery (SSRF) and forged payment notifications.
Restricts ID verification providers to their own organization.

Improvements

Hardened DCR, session rotation, Kerberos, and XSS defenses.
Fixed cross-org API permission fallback.

Bug Fixes

Fixed cross-org API permission fallback on empty owner.
Fixed ID verification provider restrictions.
Fixed tenant SSRF blocking.

Upgrade Notes

The repository functionality has completely changed from PDF text extraction to security hardening. Ensure the new version aligns with your current requirements, as the PDF text features from v1.24.0 are no longer present.

The Two Releases

v1.24.0

1.24.0 — Text paint and document information

Sep 23, 2026· 29 days ago

Adds text paint information (fill/stroke colors, render mode) to TextItem and expands document metadata extraction.

Full release notes

v4.11.0

Sep 26, 2026· 25 days ago

This release focuses on security hardening across authentication, payment, and session management systems to prevent common vulnerabilities.

Full release notes