shamoon
85c52cc27f
tests
2026-11-06 14:14:29 -08:00
shamoon
9b3d484e24
Bulk run workflow + dialog
2026-11-06 14:14:28 -08:00
shamoon
3a5ba814b6
frotnend use the manual filter
2026-11-06 14:14:28 -08:00
shamoon
26552f54b4
Ah, need a backend filter for wf type
2026-11-06 14:14:28 -08:00
shamoon
de9d7e54bd
WorkflowTriggerType.Manual
2026-11-06 14:14:27 -08:00
shamoon
a5c460a567
Add some backend tests for the manual wf
2026-11-06 14:14:27 -08:00
shamoon
cfca79e7fc
api bulk edit run_workflow
2026-11-06 14:14:27 -08:00
shamoon
9d59f3aaa2
run_workflows task= with filter_documents option
2026-11-06 14:14:26 -08:00
shamoon
332c308f84
Add skip_matching to run_workflows
2026-11-06 14:14:26 -08:00
shamoon
a0b8da7687
Add manual trigger
2026-11-06 14:14:23 -08:00
GitHub Actions
2642cefd35
Auto translate strings
2026-11-06 20:20:35 +00:00
shamoon and Codex
8aa99a381a
Performance: replace django-treenode with adjacency-list tags ( #14612 )
...
---------
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
2026-11-06 20:18:59 +00:00
Trenton H
d14cfc93f4
Performance: use small vec0 chunks and larger pages for the LLM index ( #14678 )
...
The vec0 default of 1024 rows per vector chunk makes each chunk a
multi-megabyte blob. On spinning disks, indexing a document took about
2.5 seconds and re-indexing one about 13 seconds. With 32 rows per
chunk the same operations take about 35 and 180 milliseconds, with the
write-ahead log a third of the size and no cost in query speed or file
size.
Pair that with 64 KiB SQLite pages, which made cold scans about 35%
faster and warm ones about 45% faster at no write cost once the chunks
are small. The page size is set before the file enters WAL mode, so it
applies to new files.
2026-11-06 10:20:03 -08:00
shamoon
53e386ec81
Chore: avoid stale lock from failed apt process on CI ( #14701 )
2026-11-06 09:29:56 -08:00
shamoon and Codex
6fd91beae2
Chore: CI apt caching for flakiness ( #14647 )
...
---------
Co-authored-by: Codex <267193182+codex@users.noreply.github.com >
2026-11-06 16:36:46 +00:00
Trenton H
a4543c03dc
Fix: release the LLM index read lock before streaming the chat answer ( #14674 )
...
Document chat held the shared index read lock for the whole request,
including the LLM stream, which can take minutes. A compaction or
migration swap waiting for exclusive access could time out behind it
and be skipped until the next run.
Now that the answer is synthesized from the nodes already retrieved,
nothing after the vector search touches the store. Hold the lock only
while loading the index and searching, and release it before synthesis.
2026-11-06 07:03:44 -08:00
Trenton H
45a2ac4879
Fix: retrieve once per document chat question ( #14673 )
...
Document chat searched the vector store twice per question: once
explicitly to build the reference list, and again inside
RetrieverQueryEngine.query(), which retrieves before synthesizing. That
meant two query-embedding calls and two full vector searches each time.
The engine added nothing beyond the retriever call (no node
postprocessors are configured), so drop it and synthesize directly from
the nodes already retrieved. The streaming response is unchanged.
2026-11-06 07:03:43 -08:00
GitHub Actions
8bc9db816a
Auto translate strings
2026-11-06 03:07:21 +00:00
shamoon
c5239f9f74
Fixhancement: rework saved view widget queue processing to expected ( #14699 )
...
* activateSavedViewWithDocuments, move most of loadSavedView to a helper
* Consolidate the page size thing
* Pass widget's documents to list service fpr next / previous
* Tests for the page size + widget click
* Fix close from a dashboard widget list
2026-11-05 19:06:10 -08:00
shamoon
e88303cc16
Fix: apply PDF/A conversion once for mail archives ( #14698 )
2026-11-05 18:03:36 -08:00
shamoon
cb3513c6f3
Fix default MFA trusted AMR setting ( #14693 )
2026-11-04 23:46:15 +00:00
dependabot[bot]
4468a510a6
Chore(deps): Bump the actions group across 1 directory with 17 updates ( #14691 )
...
Bumps the actions group with 17 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-python](https://github.com/actions/setup-python ) | `7.0.0` | `7.1.0` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) | `10.3.2` | `10.3.3` |
| [docker/login-action](https://github.com/docker/login-action ) | `4.6.0` | `4.7.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `7.0.1` | `7.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `8.0.1` | `8.0.2` |
| [actions/setup-node](https://github.com/actions/setup-node ) | `7.0.0` | `7.1.0` |
| [j178/prek-action](https://github.com/j178/prek-action ) | `3.0.0` | `3.1.0` |
| [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter ) | `7.7.0` | `7.10.0` |
| [shogo82148/actions-upload-release-asset](https://github.com/shogo82148/actions-upload-release-asset ) | `1.10.4` | `1.10.7` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) | `0.6.4` | `0.8.0` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.38.2` | `4.39.1` |
| [stumpylog/image-cleaner-action/ephemeral](https://github.com/stumpylog/image-cleaner-action ) | `0.13.0` | `0.14.0` |
| [stumpylog/image-cleaner-action/untagged](https://github.com/stumpylog/image-cleaner-action ) | `0.13.0` | `0.14.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.38.2` | `4.39.1` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.38.2` | `4.39.1` |
| [crowdin/github-action](https://github.com/crowdin/github-action ) | `3.3.0` | `3.5.0` |
| [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action ) | `7.2.0` | `7.2.1` |
Updates `actions/setup-python` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/5fda3b95a4ea91299a34e894583c3862153e4b97...6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 )
Updates `astral-sh/setup-uv` from 10.3.2 to 10.3.3
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](https://github.com/astral-sh/setup-uv/compare/07a047e608db84b3d8c06cd9a7c7dcc9c355c18e...68559e99cc807c1eb7e9238fd43a15bba460eec2 )
Updates `docker/login-action` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...81c6f93d4bc991e510b342a00b419b3bb4efc5c6 )
Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9 )
Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333 )
Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1 )
Updates `j178/prek-action` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/j178/prek-action/releases )
- [Commits](https://github.com/j178/prek-action/compare/4e14d07f9231acabce116ccfca13b13dd9755ece...44924fe9ef4a6f88253c4b6b1bf11c689d3ce53d )
Updates `release-drafter/release-drafter` from 7.7.0 to 7.10.0
- [Release notes](https://github.com/release-drafter/release-drafter/releases )
- [Commits](https://github.com/release-drafter/release-drafter/compare/34d80673e067bdc0c24568d3af899c216adcfaa9...978bb0b30c5ee8cdd332ced253758157150d43f0 )
Updates `shogo82148/actions-upload-release-asset` from 1.10.4 to 1.10.7
- [Release notes](https://github.com/shogo82148/actions-upload-release-asset/releases )
- [Commits](https://github.com/shogo82148/actions-upload-release-asset/compare/aaba0f56bdbc1071f4af234d5cb16055e8a400de...73f83b114970a3485e1423ecc1fb93d887c9b096 )
Updates `zizmorcore/zizmor-action` from 0.6.4 to 0.8.0
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/cc914d7f3750a2d13d75c7f184a1060aa0e9d482...53290badfa369cb0bf7ad16342cb62c2fa47ac7b )
Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `stumpylog/image-cleaner-action/ephemeral` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/stumpylog/image-cleaner-action/releases )
- [Changelog](https://github.com/stumpylog/image-cleaner-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/stumpylog/image-cleaner-action/compare/21f875bab2376314e0525c614e923c669434f0e4...9796867b2a7994f0a3b6b1f2e38a6579f502c977 )
Updates `stumpylog/image-cleaner-action/untagged` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/stumpylog/image-cleaner-action/releases )
- [Changelog](https://github.com/stumpylog/image-cleaner-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/stumpylog/image-cleaner-action/compare/21f875bab2376314e0525c614e923c669434f0e4...9796867b2a7994f0a3b6b1f2e38a6579f502c977 )
Updates `github/codeql-action/init` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `github/codeql-action/analyze` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `crowdin/github-action` from 3.3.0 to 3.5.0
- [Release notes](https://github.com/crowdin/github-action/releases )
- [Commits](https://github.com/crowdin/github-action/compare/9c23991700c0ec5256fd41089b9d9d7d540e424e...959dc74ac104447731cba99a016f85d0ae719788 )
Updates `stefanzweifel/git-auto-commit-action` from 7.2.0 to 7.2.1
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases )
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md )
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/4a55954c782fc1ea30b9056cd3e7a2b40ca8887d...d0b01107b5db882071f96de5dd4b54961ea93f4c )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: astral-sh/setup-uv
dependency-version: 10.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: docker/login-action
dependency-version: 4.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/download-artifact
dependency-version: 8.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/setup-node
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: j178/prek-action
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: release-drafter/release-drafter
dependency-version: 7.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: shogo82148/actions-upload-release-asset
dependency-version: 1.10.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: stumpylog/image-cleaner-action/ephemeral
dependency-version: 0.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: stumpylog/image-cleaner-action/untagged
dependency-version: 0.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: github/codeql-action/init
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: crowdin/github-action
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: stefanzweifel/git-auto-commit-action
dependency-version: 7.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 13:40:41 -08:00
dependabot[bot]
09d70ed7da
docker(deps): bump astral-sh/uv ( #14635 )
...
Bumps [astral-sh/uv](https://github.com/astral-sh/uv ) from 0.13.5-python3.14-trixie-slim to 0.13.7-python3.14-trixie-slim.
- [Release notes](https://github.com/astral-sh/uv/releases )
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/uv/compare/0.13.5...0.13.7 )
---
updated-dependencies:
- dependency-name: astral-sh/uv
dependency-version: 0.13.6-python3.14-trixie-slim
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 12:30:59 -08:00
GitHub Actions
057aee8bbd
Auto translate strings
2026-11-04 19:07:00 +00:00
shamoon
fa83a4c5dc
Fix: check descendant tag permissions on delete ( #14687 )
2026-11-04 11:05:48 -08:00
shamoon
22746aa202
Fix: lock rows for first-user signup ( #14688 )
2026-11-04 16:33:28 +00:00
shamoon
137342c1f9
Documentation: clarify metadata exposure reporting scope
2026-11-04 07:29:41 -08:00
GitHub Actions
0ae5e2d3d4
Auto translate strings
2026-11-04 14:47:43 +00:00
shamoon
b7b0de100f
Fix: prevent ID badge wrapping under title on mobile ( #14682 )
2026-11-04 06:46:22 -08:00
Trenton H
8531d3e0c9
chore(deps): bump django-allauth to 65.21.1 ( #14672 )
...
django-allauth 65.20.1 -> 65.21.1. Security fixes:
- MFA: authentication records from an inactive user's passwordless WebAuthn login could carry over to a later login in the same session, skipping MFA
- Rate limits with multiple windows for the same scope shared a cache entry, allowing longer windows to be bypassed
- Passwordless WebAuthn registration and login now always require user verification (MFA_WEBAUTHN_USER_VERIFICATION)
- Headless: reaching the phone verification attempt limit now aborts pending flows
Released 2026-10-30, inside the usual 7 day dependency cooldown, taken deliberately for the security fixes.
2026-11-04 01:25:10 +00:00
Trenton H
05f7545a4a
chore(deps): bump dev tooling ( #14671 )
...
- prek 0.5.3 -> 0.5.7
- ruff 0.16.9 -> 0.16.10
- faker 40.39.0 -> 40.43.0
- pytest-env 1.7.1 -> 1.8.1
- pytest-mock 3.15.1 -> 3.17.0
- time-machine 3.5.1 -> 3.6.0
- zensical 0.0.65 -> 0.0.73
- python-dotenv 1.2.3 -> 1.2.4 (pulled in by the above)
2026-11-04 00:53:22 +00:00
github-actions[bot] and shamoon
fc29f3511f
Documentation: Add v3.4.2 changelog ( #14681 )
...
* Changelog v3.4.2 - GHA
* Update changelog for paperless-ngx 3.4.2
Removed features and enhancements section for version 3.4.2.
---------
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-11-03 14:05:46 -08:00
shamoon
d939d873e1
Bump version to 3.4.2
v3.4.2
2026-11-03 13:37:33 -08:00
github-actions[bot] and Crowdin Bot
f0cc7fa953
New Crowdin translations by GitHub Action ( #14607 )
...
Co-authored-by: Crowdin Bot <support+bot@crowdin.com >
2026-11-03 18:08:48 +00:00
GitHub Actions
43c73796ac
Auto translate strings
2026-11-03 17:39:31 +00:00
shamoon
ec47c0f11d
Fix: mobile save button display obsessing ( #14676 )
2026-11-03 09:37:15 -08:00
Trenton H
cc15aa0180
Fix: make index and llmindex init wait for tesseract language install ( #14670 )
...
* Fix: make index and llmindex init wait for tesseract language install
* Updates this out of date diagram and makes it Mermaid
2026-11-03 06:59:44 -08:00
GitHub Actions
e6ea046e31
Auto translate strings
2026-11-03 06:12:15 +00:00
shamoon
04bae0af62
Fix: prevent loss of save view name on save + close ( #14667 )
2026-11-02 22:11:09 -08:00
GitHub Actions
d2f4cfa783
Auto translate strings
2026-11-03 05:26:53 +00:00
shamoon
7cdf8ec3c2
Chore: ditch the abandoned ngx-bootstrap-icons, roll our own ( #14665 )
2026-11-02 21:25:35 -08:00
GitHub Actions
786eac0b22
Auto translate strings
2026-11-03 03:23:17 +00:00
shamoon
16b79fc023
Fixhancement: doc detail mobile ux tweaks ( #14664 )
2026-11-02 19:21:56 -08:00
Trenton H
cd58cffd89
chore(deps): bump turbohtml to 1.15.3 ( #14662 )
...
turbohtml 1.10.0 -> 1.15.3. Includes sanitizer hardening (GHSA-9x48-74fj-x342, GHSA-wh2c-9vrv-w597, GHSA-pjrh-5m66-3wwf, URL schemes hidden behind character references in the bleach shim). Only the bleach clean shim and linkify are used, in the mail parser.
2026-11-02 16:15:36 -08:00
dependabot[bot]
2c82b06b93
docker-compose(deps): bump gotenberg/gotenberg in /docker/compose ( #14634 )
...
Bumps gotenberg/gotenberg from 8.37 to 8.38.
---
updated-dependencies:
- dependency-name: gotenberg/gotenberg
dependency-version: '8.38'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-02 23:11:43 +00:00
Trenton H
5486fa7c40
chore(deps): bump Django, django-guardian, django-filter, drf-spectacular-sidecar ( #14661 )
...
- django 5.2.17 -> 5.2.18 (security release: DoS fixes in language variant lookup and header parameter parsing, plus other security fixes)
- django-guardian 3.5.0 -> 3.5.2 (GHSA-5729-mvhf-9gq4: get_objects_for_user could return objects missing required permissions; also fixes global permission handling in get_objects_for_group and get_40x_or_None)
- django-filter 26.1 -> 26.2 (LinkWidget label escaping hardening)
- drf-spectacular-sidecar 2026.9.1 -> 2026.10.1
2026-11-02 21:47:27 +00:00
Trenton H
fefe4e5802
Fix: Bumps filelock to 4.2.6 to pick up ACL related fixes ( #14656 )
2026-11-02 08:53:17 -08:00
shamoon
936f9363a0
Fix: ensure import bulk_edit tasks in Celery workers ( #14653 )
2026-11-02 07:59:27 -08:00
dependabot[bot]
1b8b861a60
docker-compose(deps): bump greenmail/standalone in /docker/compose ( #14631 )
...
Bumps greenmail/standalone from 2.1.14 to 2.1.15.
---
updated-dependencies:
- dependency-name: greenmail/standalone
dependency-version: 2.1.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-02 03:51:52 +00:00
dependabot[bot]
c2b25bdd93
docker-compose(deps): Bump nginx in /docker/compose ( #14633 )
...
Bumps nginx from 1.31.6-alpine to 1.31.7-alpine.
---
updated-dependencies:
- dependency-name: nginx
dependency-version: 1.31.7-alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-02 03:37:27 +00:00