v17.12.1 v2.3.5

high risk

thevoiceguy/siphon-aiSep 16, 2026 → Sep 17, 20260 days between releases

What's New

OCRmyPDF v17.12.1 to Mercur v2.3.5: security patches and API authorization changes

Breaking Changes

  • POST /store/carts/:id/line-items no longer accepts unit_price or compare_at_unit_price

New Features

  • Added plugin extension points for order details including action locks and timeline entries

Improvements

  • Bumped Next.js to 15.5.24 to patch critical advisories

Bug Fixes

  • Fixed vendor onboarding currency select
  • Fixed ocrmypdf --version and --help output redirection

Upgrade Notes

Remove unit_price and compare_at_unit_price from cart line item requests, as line prices now come from the offer. Ensure your Next.js version is updated to 15.5.24.

The Two Releases

v17.12.1

v17.12.1

Sep 16, 2026· 1 month ago

This patch release fixes a regression where --version and --help were incorrectly writing to standard error instead of standard output due to an early redirection of file descriptor 1.

Full release notes
v2.3.5

v2.3.5

Sep 17, 2026· 1 month ago

A security-focused patch release addressing authorization gaps in Store and Vendor APIs, patching critical Next.js advisories, and introducing new plugin extension points for order details.

Full release notes