Skip to content

Releases: RocketChat/Rocket.Chat

7.0.0

01 Nov 00:25
Compare
Choose a tag to compare

Summary

What's new

Rocket.Chat has introduced several key updates. Enterprise users can now leverage add-ons like RC AI, VoIP for Team Collaboration, and WhatsApp 360 Dialog for expanded capabilities. The Starter Plan now supports up to 50 users, and Community Edition users can upgrade via the Cloud Portal.

Security enhancements include the removal of the Compatible Sandbox in favor of a Secure Sandbox for integration scripts. Omnichannel optimizations have significantly improved visitor processing times, and ACH Debit is now available as a payment option.

A new VoIP for Team Collaboration beta feature allows direct calls within the platform. MongoDB 7.0 is supported, while MongoDB 4.4 has been deprecated. The platform has been upgraded to Node.js 20.x and Meteor 3.0 for better performance.

E2EE now has a confirmation modal and an option to reset room keys. Uploading private apps is limited to premium plans, and air-gapped environments are only supported on premium plans for licensing compliance. Admins now have enhanced control over team permissions, and the sidebar has gained collapsible categories and a recent room view as part of Feature preview.

Bug fixes

Support window restrictions now work as intended, and issues causing E2EE room freezes, and multiple LDAP sync cron jobs have been resolved. Login button customization properly applies WCAG warnings, and a broken translation in the "Forgot Password" email has been fixed. Deprecated endpoints have been removed.

For more detailed information, check out our release notes and deprecated and phasing out of the features document.

Details

Engine versions

  • Node: 20.17.0
  • MongoDB: 5.0, 6.0, 7.0

Major Changes

  • (#33316) Changes some displays to reflect new rules for private apps and adds a new modal before uploading a private app

  • (#32212) Fixed broken translation in "Forgot Password" e-mail

  • (#33503) Adds modal confirmation to enable and disable End-to-end encryption

    Adds a reset room key option to the modal that disables End-to-end encryption, this is useful when all the members of a room lose their room E2EE keys

  • (#33038) Remove support of filtering by agent's username on the following endpoint:

    • /v1/livechat/rooms

    The performance of the endpoint was improved when filtering by:

    • Agent
    • Deparment
    • Open chats
  • (#33474) Removes deprecated endpoint pw.getPolicyReset. Moving forward, use the pw.getPolicy endpoint.

  • (#32162) As per MongoDB Lifecycle Schedules (mongodb.com/legal/support-policy/lifecycles) we're removing official support to MongoDB version 4.4 that has reached end of life in February 2024.

    We recommend upgrading to at least MongoDB 6.0+, though 5.0 is still a supported version.

    Here are official docs on how to upgrade to some of the supported versions:

  • (#33333) Login services button was not respecting the button color and text color settings. Implemented a fix to respect these settings and change the button colors accordingly.

    Added a warning on all settings which allow admins to change OAuth button colors, so that they can be alerted about WCAG (Web Content Accessibility Guidelines) compliance.

  • (#32162) Added MongoDB 7.0 support

  • (#33449) Removes deprecated method livechat:webhookTest. Moving forward use the endpoint livechat/webhook.test.

  • (#33373) This adjustment removes the deprecated method livechat:searchAgent. Moving forward, use livechat/users/agent/:_id endpoint.

  • (#33442) Removes deprecated livechat:getAnalyticsOverviewData method. Moving forward use the livechat/analytics/overview endpoint.

  • (#31889) Removed upsert behavior on users.update endpoint (joinDefaultChannels param or empty userId are not allowed anymore)

  • (#33802) Changes groups messages listing endpoint by moving query params from the 'query' attribute to standard query parameters.

  • (#32159) Api login should not suggest which credential is wrong (password/username)

    Failed login attemps will always return Unauthorized instead of the internal fail reason

  • (#31117) Adds a new set of permissions to provide a more granular control for the creation and deletion of rooms within teams

    • create-team-channel: controls the creations of public rooms within teams, it is checked within the team's main room scope and overrides the global create-c permission check. That is, granting this permission to a role allows users to create channels in teams even if they do not have the permission to create channels globally;
    • create-team-group: controls the creations of private rooms within teams, it is checked within the team's main room scope and overrides the global create-p permission check. That is, granting this permission to a role allows users to create groups in teams even if they do not have the permission to create groups globally;
    • delete-team-channel: controls the deletion of public rooms within teams, it is checked within the team's main room scope and complements the global delete-c permission check. That is, users must have both permissions (delete-c in the channel scope and delete-team-channel in its team scope) in order to be able to delete a channel in a team;
    • delete-team-group: controls the deletion of private rooms within teams, it is checked within the team's main room scope and complements the global delete-p permission check. That is, users must have both permissions (delete-p in the group scope and delete-team-group in its team scope) in order to be able to delete a group in a team;;

    Renames add-team-channel permission (used for adding existing rooms to teams) to move-room-to-team, since it is applied to groups and channels.

  • (#33391) Removed deprecated method livechat:loginByToken. Moving forward, use the endpoint livechat/visitor/:token.

  • (#33473) Removes deprecated method getPasswordPolicy. Moving forward, use the endpoint pw.getPolicy.

  • (#33210) Removes private App installation via URL method following a deprecation warning.

  • (#33429) Removed deprecated methods livechat:saveTrigger and livechat:removeTrigger. Moving forward use the endpoints livechat/triggers (POST) and livechat/triggers/:_id (DELETE) respectively.

  • (#33465) Removes deprecated method addOAuthApp. Moving forward, use the endpoint oauth-apps.create instead.

  • (#33472) Removes deprecated deleteMessage method. Moving forward, use the chat.delete endpoint.

  • (#33447) Removes deprecated method livechat:saveInfo. Moving forward use the enpoint livechat/room/save.info.

  • (#31438) Upgrades the version of the Meteor framework to 3.0

    The main reason behind this is the upgrade of the Node.js version, where version 14 will be removed and version 20 will be used instead.

    Internally, significant changes have been made, mostly due to the removal of fibers.

    As a result, it was necessary to adapt our code to work with the new version.

    No functionality should have been affected by this, but if you are running Rocket.Chat in unconventional ways, please note that you need to upgrade your Node.js version.

  • (#33426) Removed deprecated method livechat:getNextAgent. Moving forward, use the livechat/agent.next/:token endpoint.

  • (#33526) Removes deprecated method livechat:setDepartmentForVisitor. Moving forward, use the endpoint livechat/visitor.

  • (#33241) Adds restrictions to air-gapped environments without a license

  • ([#33042](#33...

Read more

7.0.0-rc.6

30 Oct 20:35
Compare
Choose a tag to compare
7.0.0-rc.6 Pre-release
Pre-release

Engine versions

  • Node: 20.17.0
  • MongoDB: 5.0, 6.0, 7.0
  • Apps-Engine: undefined

Patch Changes

7.0.0-rc.5

28 Oct 21:53
Compare
Choose a tag to compare
7.0.0-rc.5 Pre-release
Pre-release

Engine versions

  • Node: 20.17.0
  • MongoDB: 5.0, 6.0, 7.0
  • Apps-Engine: undefined

Major Changes

  • (#33038) Remove support of filtering by agent's username on the following endpoint:

    • /v1/livechat/rooms

    The performance of the endpoint was improved when filtering by:

    • Agent
    • Deparment
    • Open chats
  • (#33802) Changes groups messages listing endpoint by moving query params from the 'query' attribute to standard query parameters.

  • (#33801) Changes channels messages listing endpoint by moving query params from the 'query' attribute to standard query parameters.

  • (#33787) Changes settings public listing endpoint by moving query params from the 'query' attribute to standard query parameters.

  • (#33807) Changes ims and dms messages listing endpoint by moving query params from the 'query' attribute to standard query parameters.

Patch Changes

7.0.0-rc.4

25 Oct 18:37
Compare
Choose a tag to compare
7.0.0-rc.4 Pre-release
Pre-release

Engine versions

  • Node: 20.17.0
  • MongoDB: 5.0, 6.0, 7.0
  • Apps-Engine: undefined

Patch Changes

7.0.0-rc.3

23 Oct 20:59
Compare
Choose a tag to compare
7.0.0-rc.3 Pre-release
Pre-release

Engine versions

  • Node: 20.17.0
  • MongoDB: 5.0, 6.0, 7.0
  • Apps-Engine: undefined

Patch Changes

7.0.0-rc.2

23 Oct 01:54
Compare
Choose a tag to compare
7.0.0-rc.2 Pre-release
Pre-release

Engine versions

  • Node: 20.17.0
  • MongoDB: 5.0, 6.0, 7.0
  • Apps-Engine: undefined

Patch Changes

7.0.0-rc.1

21 Oct 16:09
Compare
Choose a tag to compare
7.0.0-rc.1 Pre-release
Pre-release

Engine versions

  • Node: 20.17.0
  • MongoDB: 5.0, 6.0, 7.0
  • Apps-Engine: undefined

Patch Changes

7.0.0-rc.0

20 Oct 05:01
Compare
Choose a tag to compare
7.0.0-rc.0 Pre-release
Pre-release

Engine versions

  • Node: 20.17.0
  • MongoDB: 5.0, 6.0, 7.0
  • Apps-Engine: undefined

Major Changes

  • (#33316) Changes some displays to reflect new rules for private apps and adds a new modal before uploading a private app

  • (#32212) Fixed broken translation in "Forgot Password" e-mail

  • (#33503) Adds modal confirmation to enable and disable End-to-end encryption

    Adds a reset room key option to the modal that disables End-to-end encryption, this is useful when all the members of a room lose their room E2EE keys

  • (#33474) Removes deprecated endpoint pw.getPolicyReset. Moving forward, use the pw.getPolicy endpoint.

  • (#32162) As per MongoDB Lifecycle Schedules (mongodb.com/legal/support-policy/lifecycles) we're removing official support to MongoDB version 4.4 that has reached end of life in February 2024.

    We recommend upgrading to at least MongoDB 6.0+, though 5.0 is still a supported version.

    Here are official docs on how to upgrade to some of the supported versions:

  • (#33333) Login services button was not respecting the button color and text color settings. Implemented a fix to respect these settings and change the button colors accordingly.

    Added a warning on all settings which allow admins to change OAuth button colors, so that they can be alerted about WCAG (Web Content Accessibility Guidelines) compliance.

  • (#32162) Added MongoDB 7.0 support

  • (#33449) Removes deprecated method livechat:webhookTest. Moving forward use the endpoint livechat/webhook.test.

  • (#33373) This adjustment removes the deprecated method livechat:searchAgent. Moving forward, use livechat/users/agent/:_id endpoint.

  • (#33442) Removes deprecated livechat:getAnalyticsOverviewData method. Moving forward use the livechat/analytics/overview endpoint.

  • (#31889) Removed upsert behavior on users.update endpoint (joinDefaultChannels param or empty userId are not allowed anymore)

  • (#32159) Api login should not suggest which credential is wrong (password/username)

    Failed login attemps will always return Unauthorized instead of the internal fail reason

  • (#31117) Adds a new set of permissions to provide a more granular control for the creation and deletion of rooms within teams

    • create-team-channel: controls the creations of public rooms within teams, it is checked within the team's main room scope and overrides the global create-c permission check. That is, granting this permission to a role allows users to create channels in teams even if they do not have the permission to create channels globally;
    • create-team-group: controls the creations of private rooms within teams, it is checked within the team's main room scope and overrides the global create-p permission check. That is, granting this permission to a role allows users to create groups in teams even if they do not have the permission to create groups globally;
    • delete-team-channel: controls the deletion of public rooms within teams, it is checked within the team's main room scope and complements the global delete-c permission check. That is, users must have both permissions (delete-c in the channel scope and delete-team-channel in its team scope) in order to be able to delete a channel in a team;
    • delete-team-group: controls the deletion of private rooms within teams, it is checked within the team's main room scope and complements the global delete-p permission check. That is, users must have both permissions (delete-p in the group scope and delete-team-group in its team scope) in order to be able to delete a group in a team;;

    Renames add-team-channel permission (used for adding existing rooms to teams) to move-room-to-team, since it is applied to groups and channels.

  • (#33391) Removed deprecated method livechat:loginByToken. Moving forward, use the endpoint livechat/visitor/:token.

  • (#33473) Removes deprecated method getPasswordPolicy. Moving forward, use the endpoint pw.getPolicy.

  • (#33210) Removes private App installation via URL method following a deprecation warning.

  • (#33429) Removed deprecated methods livechat:saveTrigger and livechat:removeTrigger. Moving forward use the endpoints livechat/triggers (POST) and livechat/triggers/:_id (DELETE) respectively.

  • (#33465) Removes deprecated method addOAuthApp. Moving forward, use the endpoint oauth-apps.create instead.

  • (#33472) Removes deprecated deleteMessage method. Moving forward, use the chat.delete endpoint.

  • (#33447) Removes deprecated method livechat:saveInfo. Moving forward use the enpoint livechat/room/save.info.

  • (#31438) Upgrades the version of the Meteor framework to 3.0

    The main reason behind this is the upgrade of the Node.js version, where version 14 will be removed and version 20 will be used instead.

    Internally, significant changes have been made, mostly due to the removal of fibers.

    As a result, it was necessary to adapt our code to work with the new version.

    No functionality should have been affected by this, but if you are running Rocket.Chat in unconventional ways, please note that you need to upgrade your Node.js version.

  • (#33426) Removed deprecated method livechat:getNextAgent. Moving forward, use the livechat/agent.next/:token endpoint.

  • (#33526) Removes deprecated method livechat:setDepartmentForVisitor. Moving forward, use the endpoint livechat/visitor.

  • (#33241) Adds restrictions to air-gapped environments without a license

  • (#33042) Removes view-history permission due to lack of usage

  • (#33448) Removes the deprecated method livechat:saveAppearance. Moving forward use the endpoint livechat/appearance.

  • (#33445) Removes deprecated livechat:getAgentOverviewData method. Moving forward use livechat/analytics/agent-overview endpoint.

  • (#33444) Removes deprecated method livechat:setCustomField. The custom fields can be directly set via the livechat/visitor endpoint.

  • (#33471) Removes deprecated endpoint channels.images. Moving forward, use rooms.images endpoint.

  • (#33650) Changes custom emoji listing endpoint by moving query params from the 'query' attribute to standard query parameters.

  • (#32856) Adds a new collection to store all the workspace cloud tokens to defer the race condition management to MongoDB instead of having to handle it within the settings cache.
    Removes the Cloud_Workspace_Access_Token & Cloud_Workspace_Access_Token_Expires_At settings since they are not going to be used anymore.

  • (#33423) Removed deprecated methods livechat:removeAgent, livechat:removeManager and livechat:removeDepartment. Moving forward, use livechat/users/agent/:_id, and livechat/users/manager/:_id and livechat/department/:_id respectively.`

  • (#31438) Node.js 20.x support

  • (#32154) Removed the ability to import data in the HipChat Enterprise format, as it was discontinued over five years ago.

  • (#33419) Changes End-to-end encryption default setting to enable mention in encrypted messages

  • (#33451) Removes deprecated method livechat:saveIntegration. Moving forward, use the endpoint omnichannel/integrations (POST).

  • (#33443) Removed deprecated method livechat:saveSurveyFeedback. Moving forward use the endpoint livechat/room.survey.

  • Removed th...

Read more

6.13.0

10 Oct 03:11
Compare
Choose a tag to compare

Summary

What’s new

This update brings several useful features to improve collaboration and admin control. Mentions are now supported in end-to-end encrypted rooms, allowing secure communication without compromising functionality. Admins can also enjoy more flexibility when managing live chat departments by associating them with specific units during setup and updates. Additionally, a secondary navigation panel is available in the preview, providing quick access to team channels and discussions, with a full release planned as a premium feature. A new setting enables admins to disable two-factor authentication for OAuth users, simplifying login for verified users. Apps can now send emails via the built-in SMTP server. Finally, a new API for listing team rooms and discussions helps streamline room management.

Bug fixes

Key bug fixes include resolving issues with unread room marking, optimizing the message parser, and improving email validation for incomplete addresses. Conference call status errors have been corrected, ensuring accurate call information.

For more details, check out our website release page.

Details

Engine versions

  • Node: 14.21.3
  • MongoDB: 4.4, 5.0, 6.0
  • Apps-Engine: 1.46.0

Minor changes

  • (#33156) added sidepanelNavigation to feature preview list

  • (#32682) Added support for specifying a unit on departments' creation and update

  • (#33139) Added new setting Allow visitors to finish conversations that allows admins to decide if omnichannel visitors can close a conversation or not. This doesn't affect agent's capabilities of room closing, neither apps using the livechat bridge to close rooms.
    However, if currently your integration relies on livechat/room.close endpoint for closing conversations, it's advised to use the authenticated version livechat/room.closeByUser of it before turning off this setting.

  • (#32729) Implemented "omnichannel/contacts.update" endpoint to update contacts

  • (#32510) Added a new setting to enable mentions in end to end encrypted channels

  • (#32821) Replaced new SidebarV2 components under feature preview

  • (#33212) Added new Admin Feature Preview management view, this will allow the workspace admins to both enable feature previewing in the workspace as well as define which feature previews are enabled by default for the users in the workspace.

  • (#33011) Return parent and team information when calling rooms.info endpoint

  • (#32693) Introduced "create contacts" endpoint to omnichannel

  • (#33177) New teams.listChildren endpoint that allows users listing rooms & discussions from teams. Only the discussions from the team's main room are returned.

  • (#33114) Wraps some room settings in an accordion advanced settings section in room edit contextual bar to improve organization

  • (#33160) Implemented sending email via apps

  • (#32945) Added a new setting which allows workspace admins to disable email two factor authentication for SSO (OAuth) users. If enabled, SSO users won't be asked for email two factor authentication.

  • (#33225) Implemented new feature preview for Sidepanel

Patch changes

  • (#33339) Fixes a problem that caused visitor creation to fail when GDPR setting was enabled and visitor was created via Apps Engine or the deprecated livechat:registerGuest method.

  • Bump @rocket.chat/meteor version.

  • Bump @rocket.chat/meteor version.

  • Bump @rocket.chat/meteor version.

  • Bump @rocket.chat/meteor version.

  • Bump @rocket.chat/meteor version.

  • Bump @rocket.chat/meteor version.

  • Bump @rocket.chat/meteor version.

  • (#33317) Fixed error during sendmessage client stub

  • (#33381) Fixes a race condition that causes livechat conversations to get stuck in the agent's sidebar panel after being forwarded.

  • (#33211) Allow to use the token from room.v when requesting transcript instead of visitor token. Visitors may change their tokens at any time, rendering old conversations impossible to access for them (or for APIs depending on token) as the visitor token won't match the room.v token.

  • (#33298) Fixed a Federation callback not awaiting db call

  • (#32939) Fixed issue where when you marked a room as unread and you were part of it, sometimes it would mark it as read right after

  • (#33197) Fixes an issue where the retention policy warning keep displaying even if the retention is disabled inside the room

  • (#33321) Changed the contextualbar behavior based on chat size instead the viewport

  • (#33246) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)

  • (#32999) Fixes multiple selection for MultiStaticSelectElement in UiKit

  • (#33155) Fixed a code issue on NPS service. It was passing startAt as the expiration date when creating a banner.

  • (#33237) fixed retention policy max age settings not being respected after upgrade

  • (#33216) Prevented uiInteraction to subscribe multiple times

  • (#33295) Resolves the issue where outgoing integrations failed to trigger after the version 6.12.0 upgrade by correcting the parameter order from the afterSaveMessage callback to listener functions. This ensures the correct room information is passed, restoring the functionality of outgoing webhooks, IRC bridge, Autotranslate, and Engagement Dashboard.

  • (#33193) Fixed avatar blob image setting in setUserAvatar method by correcting service handling logic.

  • (#33209) Fixed LivechatSessionTaken webhook event being called without the agent param, which represents the agent serving the room.

  • (#33296) Fixed remaining direct references to external user avatar URLs

    Fixed local avatars having priority over external provider

    It mainly corrects the behavior of E2E encryption messages and desktop notifications.

  • (#33157 by @csuadev) Fixed inconsistency between the markdown parser from the composer and the rest of the application when using bold and italics in a text.

  • (#33181) Fixed issue that caused an infinite loading state when uploading a private app to Rocket.Chat

  • (#33158) Fixes an issue where multi-step modals were closing unexpectedly

  • Updated dependencies [bb94c9c, 9a38c8e, 5997627, 7c14fd1, 9eaefdc, 274f4f5, cd0d500, 78e6ba4, 2f9eea0, 532f088, 79c16d3, 927710d, 3a161c4, 0f21fa0, 12d6307]:

6.12.2

10 Oct 21:49
Compare
Choose a tag to compare

Engine versions

  • Node: 14.21.3
  • MongoDB: 4.4, 5.0, 6.0
  • Apps-Engine: 1.45.0-alpha.866

Patch Changes