Bump version to 3.3.3

Merge branch 'dev'
New Crowdin translations by GitHub Action (#14474 )
2026-10-19 22:38:13 +00:00 · 2026-10-19 10:06:39 -07:00 · 2026-10-19 10:05:59 -07:00 · 2026-10-19 16:58:46 +00:00 · 2026-10-19 09:39:26 -07:00 · 2026-10-19 15:41:29 +00:00
192 changed files with 33590 additions and 33381 deletions
@@ -66,7 +66,7 @@ services:
    command:
      - "gotenberg"
      - "--chromium-disable-javascript=true"
-      - "--chromium-allow-list=file:///tmp/.*"
+      - "--chromium-allow-list=^file:///tmp/.*"
  tika:
    image: docker.io/apache/tika:3.3.1.0
    restart: unless-stopped
@@ -31,9 +31,19 @@ body:
      value: |
        #### 🤖 Use of AI tools
-        If this report was generated, in whole or in part, by an AI tool or agent you **must** clearly say so in the description below. Failing to clearly disclose this is a violation of our [Code of Conduct](https://github.com/paperless-ngx/paperless-ngx/blob/main/CODE_OF_CONDUCT.md).
+        If this report was generated, in whole or in part, by an AI tool or agent you **must** say so using the field below. Failing to clearly disclose this is a violation of our [Code of Conduct](https://github.com/paperless-ngx/paperless-ngx/blob/main/CODE_OF_CONDUCT.md).
        Reports written by an AI agent must describe the _observed behavior only_: what happened, how to reproduce it, logs etc. Do **not** include code analysis, speculation about the root cause, or suggest code fixes.
  - type: dropdown
    id: ai-usage
    attributes:
      label: AI usage
      description: Was any part of this report written by an AI tool or agent?
      options:
        - No AI tools were used
        - Yes, AI tools helped write this report
    validations:
      required: true
  - type: textarea
    id: description
    attributes:
@@ -43,6 +43,12 @@ jobs:
            const haystack = `${issue.title}\n${issue.body ?? ''}`;
            const honeypot = haystack.toUpperCase().includes('ASLOP-PR-VERIFY');
            // The form's required "AI usage" dropdown renders as a `### AI usage` section. An agent
            // that follows the template trips the honeypot even when it discloses, so only treat
            // the honeypot as undisclosed AI use when the reporter did not answer "Yes" here.
            const aiUsage = (issue.body ?? '').match(/^###\s+AI usage\s*\n+\s*(.+?)\s*$/m)?.[1] ?? '';
            const disclosedAI = aiUsage.toLowerCase().startsWith('yes');
            // Issues opened through the form always get the template's default labels. GitHub
            // applies them a second or two *after* creation, so re-read them instead of trusting
            // the webhook payload, and retry before concluding that there are none.
@@ -55,19 +61,30 @@ jobs:
              if (labels.some((label) => templateLabels.includes(label))) break;
            }
            const bypassedTemplate = !labels.some((label) => templateLabels.includes(label));
-            core.info(`Labels: [${labels.join(', ')}], honeypot: ${honeypot}, bypassed template: ${bypassedTemplate}`);
+            core.info(
              `Labels: [${labels.join(', ')}], honeypot: ${honeypot}, AI usage: "${aiUsage}", ` +
                `bypassed template: ${bypassedTemplate}`
            );
-            if (!honeypot && !bypassedTemplate) {
+            if (!bypassedTemplate && (disclosedAI || !honeypot)) {
-              core.info('No slop signals found');
+              if (disclosedAI) {
                core.info('AI use disclosed, labeling only');
                await github.rest.issues.addLabels({ ...common, labels: ['ai'] });
              } else {
                core.info('No slop signals found');
              }
              return;
            }
            // The honeypot is only ever tripped deliberately, so that message can name the cause.
            // A missing template label only tells us the issue did not come from the form, which
-            // is reason enough to close it, but not proof of how it was written.
+            // is reason enough to close it, but not proof of how it was written. It takes priority:
-            const body = honeypot
+            // a hand-built body can carry the honeypot *and* a disclosure, and the form message is
            // the only one that is accurate for both. Reaching the honeypot message means the issue
            // came from the form without disclosing AI usage, so that message can name the cause.
            const body = honeypot && !bypassedTemplate
              ? 'This issue was automatically closed because it contains a marker that is only visible to ' +
-                'automated tools, which indicates it was generated by an AI agent without being disclosed as such.\n\n' +
+                'automated tools, which indicates it was generated by an AI agent, but the "AI usage" field does not ' +
                'disclose this.\n\n' +
                `Please see our [contributing guidelines](${contributing}) and [Code of Conduct](${codeOfConduct}). ` +
                'You are welcome to open a new issue that describes the problem you observed in your own words.'
              : 'This issue was automatically closed because it was not opened using our bug report form. ' +
@@ -38,16 +38,6 @@ jobs:
        uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
        with:
          repo-token: ${{ secrets.GITHUB_TOKEN }}
      - name: Label by size
        uses: Gascon1/pr-size-labeler@deff8ed00a76639a7c0f197525bafa3350ba4c36 # v1.3.0
        with:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          xs_label: 'small-change'
          xs_diff: '9'
          s_label: 'non-trivial'
          s_diff: '99999'
          fail_if_xl: 'false'
          excluded_files: /\.lock$/ /\.txt$/ ^src-ui/pnpm-lock\.yaml$ ^src-ui/messages\.xlf$ ^src/locale/en_US/LC_MESSAGES/django\.po$
      - name: Label by PR title
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
        with:
@@ -43,26 +43,17 @@ Once you have submitted a **P**ull **R**equest it will be reviewed, approved, an
 Important: Pull requests that implement a new feature or enhancement _should almost always target an existing feature request_ with evidence of community interest and discussion. This is in order to balance the work of implementing and maintaining new features / enhancements. Instead of opening a PR which does not meet this requirement, please open a feature request instead, to gather feedback from both users and the project maintainers.
-## Non-Trivial Requests
+## PR Review Process
-PRs deemed `non-trivial` will go through a stricter review process before being merged into `dev`. This is to ensure code quality and complete functionality (free of side effects).
+Our community review process for PRs is the following:
 Examples of `non-trivial` PRs might include:
 - Additional features
 - Large changes to many distinct files
 - Breaking or deprecation of existing features
 Our community review process for `non-trivial` PRs is the following:
 1. Must pass usual automated code tests and formatting checks.
 2. The PR will be assigned and pinged to the appropriately experienced team (i.e. @paperless-ngx/backend for backend changes).
 3. Development team will check and test code manually (possibly over several days).
   - You may be asked to make changes or rebase.
-   - The team may ask for additional testing done by @paperless-ngx/test
+4. One or more members of the team will approve and finally merge the request into `dev` 🎉.
 4. **At least two** members of the team will approve and finally merge the request into `dev` 🎉.
-This process might be slow as community members have different schedules and time to dedicate to the Paperless project. However it ensures community code reviews are as brilliantly thorough as they once were with @jonaswinkler.
+This process might be slow as community members have different schedules and time to dedicate to the Paperless project. However it ensures community code reviews are thorough and of high quality.
 # Use of AI Tools
@@ -21,7 +21,7 @@ Paperless-ngx is a document management system that transforms your physical docu
 Paperless-ngx is the official successor to the original [Paperless](https://github.com/the-paperless-project/paperless) & [Paperless-ng](https://github.com/jonaswinkler/paperless-ng) projects and is designed to distribute the responsibility of advancing and supporting the project among a team of people. [Consider joining us!](#community-support)
-Thanks to the generous folks at [DigitalOcean](https://m.do.co/c/8d70b916d462), a demo is available at [demo.paperless-ngx.com](https://demo.paperless-ngx.com) using login `demo` / `demo`. _Note: demo content is reset frequently and confidential information should not be uploaded._
+Thanks to the generous folks at [Fyra Stack](https://fyrastack.com), a demo is available at [demo.paperless-ngx.com](https://demo.paperless-ngx.com) using login `demo` / `demo`. _Note: demo content is reset frequently and confidential information should not be uploaded._
 - [Features](#features)
 - [Getting started](#getting-started)
@@ -33,13 +33,9 @@ Thanks to the generous folks at [DigitalOcean](https://m.do.co/c/8d70b916d462),
 - [Related Projects](#related-projects)
 - [Important Note](#important-note)
-<p align="right">This project is supported by:<br/>
+<p align="right">Demo hosting provided by:<br/>
-  <a href="https://m.do.co/c/8d70b916d462" style="padding-top: 4px; display: block;">
+  <a href="https://fyrastack.com">
-    <picture>
+    <img src="docs/assets/sponsors/fyra-stack.svg" alt="" width="28px" align="absmiddle"> Fyra Stack
      <source media="(prefers-color-scheme: dark)" srcset="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_white.svg" width="140px">
      <source media="(prefers-color-scheme: light)" srcset="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" width="140px">
      <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_black_.svg" width="140px">
    </picture>
  </a>
 </p>
@@ -14,7 +14,7 @@ services:
    command:
      - "gotenberg"
      - "--chromium-disable-javascript=true"
-      - "--chromium-allow-list=file:///tmp/.*"
+      - "--chromium-allow-list=^file:///tmp/.*"
      - "--log-level=warn"
      - "--log-format=text"
  tika:
@@ -40,7 +40,6 @@ services:
    volumes:
      - dbdata:/var/lib/mysql
    environment:
      MARIADB_HOST: paperless
      MARIADB_DATABASE: paperless
      MARIADB_USER: paperless
      MARIADB_PASSWORD: paperless
@@ -79,7 +78,7 @@ services:
    command:
      - "gotenberg"
      - "--chromium-disable-javascript=true"
-      - "--chromium-allow-list=file:///tmp/.*"
+      - "--chromium-allow-list=^file:///tmp/.*"
  tika:
    image: docker.io/apache/tika:3.3.1.0
    restart: unless-stopped
@@ -36,7 +36,6 @@ services:
    volumes:
      - dbdata:/var/lib/mysql
    environment:
      MARIADB_HOST: paperless
      MARIADB_DATABASE: paperless
      MARIADB_USER: paperless
      MARIADB_PASSWORD: paperless
@@ -74,7 +74,7 @@ services:
    command:
      - "gotenberg"
      - "--chromium-disable-javascript=true"
-      - "--chromium-allow-list=file:///tmp/.*"
+      - "--chromium-allow-list=^file:///tmp/.*"
  tika:
    image: docker.io/apache/tika:3.3.1.0
    restart: unless-stopped
@@ -63,7 +63,7 @@ services:
    command:
      - "gotenberg"
      - "--chromium-disable-javascript=true"
-      - "--chromium-allow-list=file:///tmp/.*"
+      - "--chromium-allow-list=^file:///tmp/.*"
  tika:
    image: docker.io/apache/tika:3.3.1.0
    restart: unless-stopped
@@ -101,3 +101,32 @@ h4 code {
        border-top: .05rem solid var(--md-default-fg-color--lightest);
    }
 }
 .md-typeset .demo-sponsor {
    display: flex;
    align-items: center;
    flex-wrap: wrap;
    gap: .35rem;
    margin-top: -1rem;
    margin-bottom: 2rem;
    color: var(--md-default-fg-color--light);
    font-size: .65rem;
 }
 .md-typeset .demo-sponsor a {
    display: inline-flex;
    align-items: center;
    gap: .25rem;
    color: inherit;
    font-weight: 600;
 }
 .md-typeset .demo-sponsor a:hover {
    color: var(--md-accent-fg-color);
 }
 .md-typeset .demo-sponsor img {
    width: 1rem;
    height: 1rem;
    flex-shrink: 0;
 }
@@ -0,0 +1 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="666.667" height="666.667" viewBox="0 0 666.667 666.667"><g stroke-width="1.333"><path fill="#fef400" d="m332.66668 418.66668h-84.66667v-85.33334-85.33333h84.66667 84.66667v-85.33334-85.333334h85.33333 85.33334v85.333334 85.33334h-85.33334-85.33333v85.33333 85.33334z"/><path fill="#fe6565" d="m248.00001 589.33335h-170.666674v-170.66667-170.66667h85.333334 85.33334v-85.33334-85.333334h84.66667 84.66667v85.333334 85.33334h85.33333 85.33334v85.33333 85.33334h-84.66667-84.66667v85.33334 85.33333zm84.66667-170.66667h84.66667v-85.33334-85.33333h-84.66667-84.66667v85.33333 85.33334z"/></g></svg>
@@ -1,5 +1,205 @@
 # Changelog
 ## paperless-ngx 3.3.2
 ### Bug Fixes
 - Fix: copy only direct user grants in DocumentMetadataOverrides.from\_document [@stumpylog](https://github.com/stumpylog) ([#14452](https://github.com/paperless-ngx/paperless-ngx/pull/14452))
 - Fix: support combined text/query searches [@shamoon](https://github.com/shamoon) ([#14443](https://github.com/paperless-ngx/paperless-ngx/pull/14443))
 - Fix: make exporter derived file names unique when originals differ only by extension [@stumpylog](https://github.com/stumpylog) ([#14429](https://github.com/paperless-ngx/paperless-ngx/pull/14429))
 ### Dependencies
 - Chore(deps): Bump filelock from 3.32.6 to 4.0.12 @[dependabot[bot]](https://github.com/apps/dependabot) ([#14336](https://github.com/paperless-ngx/paperless-ngx/pull/14336))
 - Chore(deps): Bump the uv group across 1 directory with 3 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14418](https://github.com/paperless-ngx/paperless-ngx/pull/14418))
 ### All App Changes
 <details>
 <summary>5 changes</summary>
 - Fix: copy only direct user grants in DocumentMetadataOverrides.from\_document [@stumpylog](https://github.com/stumpylog) ([#14452](https://github.com/paperless-ngx/paperless-ngx/pull/14452))
 - Chore(deps): Bump filelock from 3.32.6 to 4.0.12 @[dependabot[bot]](https://github.com/apps/dependabot) ([#14336](https://github.com/paperless-ngx/paperless-ngx/pull/14336))
 - Fix: support combined text/query searches [@shamoon](https://github.com/shamoon) ([#14443](https://github.com/paperless-ngx/paperless-ngx/pull/14443))
 - Chore(deps): Bump the uv group across 1 directory with 3 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14418](https://github.com/paperless-ngx/paperless-ngx/pull/14418))
 - Fix: make exporter derived file names unique when originals differ only by extension [@stumpylog](https://github.com/stumpylog) ([#14429](https://github.com/paperless-ngx/paperless-ngx/pull/14429))
 </details>
 ## paperless-ngx 3.3.1
 ### Bug Fixes
 - Fix: use a root document's effective content for the LLM index and pr… [@stumpylog](https://github.com/stumpylog) ([#14423](https://github.com/paperless-ngx/paperless-ngx/pull/14423))
 - Fix: index document versions as their root document [@stumpylog](https://github.com/stumpylog) ([#14422](https://github.com/paperless-ngx/paperless-ngx/pull/14422))
 - Fix: authorize document versions by their root in the single-object permission check [@stumpylog](https://github.com/stumpylog) ([#14421](https://github.com/paperless-ngx/paperless-ngx/pull/14421))
 - Fix: Provide better error messages to users for invalid JSON [@stumpylog](https://github.com/stumpylog) ([#14419](https://github.com/paperless-ngx/paperless-ngx/pull/14419))
 - Fix: authorize document versions by their root and speed up permission id sets [@stumpylog](https://github.com/stumpylog) ([#14396](https://github.com/paperless-ngx/paperless-ngx/pull/14396))
 - Chore: update the db options warning [@shamoon](https://github.com/shamoon) ([#14398](https://github.com/paperless-ngx/paperless-ngx/pull/14398))
 - Fix: bulk reprocess latest version for root documents [@shamoon](https://github.com/shamoon) ([#14385](https://github.com/paperless-ngx/paperless-ngx/pull/14385))
 - Fix: consistently use root doc for version action permissions [@shamoon](https://github.com/shamoon) ([#14384](https://github.com/paperless-ngx/paperless-ngx/pull/14384))
 - Fix: Don't attempt to index created dates which are not representable in the FTS index [@stumpylog](https://github.com/stumpylog) ([#14390](https://github.com/paperless-ngx/paperless-ngx/pull/14390))
 - Fix: retry a search index rebuild that was interrupted [@stumpylog](https://github.com/stumpylog) ([#14379](https://github.com/paperless-ngx/paperless-ngx/pull/14379))
 ### Documentation
 - Chore: silence gotenberg startup warning [@slankes](https://github.com/slankes) ([#14405](https://github.com/paperless-ngx/paperless-ngx/pull/14405))
 - Documentation: remove MARIADB\_HOST from MariaDB compose files [@shamoon](https://github.com/shamoon) ([#14378](https://github.com/paperless-ngx/paperless-ngx/pull/14378))
 - Documentation: Updates the troubleshooting with 2 common database collation issues [@stumpylog](https://github.com/stumpylog) ([#14370](https://github.com/paperless-ngx/paperless-ngx/pull/14370))
 ### Maintenance
 - Chore: Upgrade runners to Ubuntu 26.04 [@stumpylog](https://github.com/stumpylog) ([#14347](https://github.com/paperless-ngx/paperless-ngx/pull/14347))
 ### Dependencies
 - Chore(deps): Bump the npm\_and\_yarn group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14417](https://github.com/paperless-ngx/paperless-ngx/pull/14417))
 ### All App Changes
 <details>
 <summary>12 changes</summary>
 - Chore: share the authorizing owner rule between the id sets and the trash filter [@stumpylog](https://github.com/stumpylog) ([#14425](https://github.com/paperless-ngx/paperless-ngx/pull/14425))
 - Fix: use a root document's effective content for the LLM index and pr… [@stumpylog](https://github.com/stumpylog) ([#14423](https://github.com/paperless-ngx/paperless-ngx/pull/14423))
 - Fix: index document versions as their root document [@stumpylog](https://github.com/stumpylog) ([#14422](https://github.com/paperless-ngx/paperless-ngx/pull/14422))
 - Fix: authorize document versions by their root in the single-object permission check [@stumpylog](https://github.com/stumpylog) ([#14421](https://github.com/paperless-ngx/paperless-ngx/pull/14421))
 - Fix: Provide better error messages to users for invalid JSON [@stumpylog](https://github.com/stumpylog) ([#14419](https://github.com/paperless-ngx/paperless-ngx/pull/14419))
 - Chore(deps): Bump the npm\_and\_yarn group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14417](https://github.com/paperless-ngx/paperless-ngx/pull/14417))
 - Fix: authorize document versions by their root and speed up permission id sets [@stumpylog](https://github.com/stumpylog) ([#14396](https://github.com/paperless-ngx/paperless-ngx/pull/14396))
 - Chore: update the db options warning [@shamoon](https://github.com/shamoon) ([#14398](https://github.com/paperless-ngx/paperless-ngx/pull/14398))
 - Fix: bulk reprocess latest version for root documents [@shamoon](https://github.com/shamoon) ([#14385](https://github.com/paperless-ngx/paperless-ngx/pull/14385))
 - Fix: consistently use root doc for version action permissions [@shamoon](https://github.com/shamoon) ([#14384](https://github.com/paperless-ngx/paperless-ngx/pull/14384))
 - Fix: Don't attempt to index created dates which are not representable in the FTS index [@stumpylog](https://github.com/stumpylog) ([#14390](https://github.com/paperless-ngx/paperless-ngx/pull/14390))
 - Fix: retry a search index rebuild that was interrupted [@stumpylog](https://github.com/stumpylog) ([#14379](https://github.com/paperless-ngx/paperless-ngx/pull/14379))
 </details>
 ## paperless-ngx 3.3.0
 ### Features / Enhancements
 - Enhancement: more control over suggestion requests [@shamoon](https://github.com/shamoon) ([#14258](https://github.com/paperless-ngx/paperless-ngx/pull/14258))
 - Chorehancement: set manifest CORS for credentials [@shamoon](https://github.com/shamoon) ([#14307](https://github.com/paperless-ngx/paperless-ngx/pull/14307))
 - Enhancement: include Django admin with 2FA [@shamoon](https://github.com/shamoon) ([#14270](https://github.com/paperless-ngx/paperless-ngx/pull/14270))
 - Feature: propagate resolved secrets to interactive container shells [@stumpylog](https://github.com/stumpylog) ([#14254](https://github.com/paperless-ngx/paperless-ngx/pull/14254))
 - Enhancement: support separate embedding API key [@furkanural](https://github.com/furkanural) ([#14067](https://github.com/paperless-ngx/paperless-ngx/pull/14067))
 - Enhancement: support passthrough extra params for LLMs [@shamoon](https://github.com/shamoon) ([#14202](https://github.com/paperless-ngx/paperless-ngx/pull/14202))
 - Feature: store barcode contents, list and search them [@jurassicparkicecream](https://github.com/jurassicparkicecream) ([#14276](https://github.com/paperless-ngx/paperless-ngx/pull/14276))
 ### Bug Fixes
 - Fix: Set the ProcessedMail owner based on the rule owner in all cases [@stumpylog](https://github.com/stumpylog) ([#14356](https://github.com/paperless-ngx/paperless-ngx/pull/14356))
 - Fix: Ensure log rotation settings are converted to integers [@stumpylog](https://github.com/stumpylog) ([#14343](https://github.com/paperless-ngx/paperless-ngx/pull/14343))
 - Fix: Wrap apt calls into a retry so we can ideally jump a slow mirror [@stumpylog](https://github.com/stumpylog) ([#14344](https://github.com/paperless-ngx/paperless-ngx/pull/14344))
 - Fix: ship pdf.js CMaps so CJK documents render in the viewer [@MrOggy85](https://github.com/MrOggy85) ([#14318](https://github.com/paperless-ngx/paperless-ngx/pull/14318))
 - Fix: use version page\_count for versioned document [@shamoon](https://github.com/shamoon) ([#14280](https://github.com/paperless-ngx/paperless-ngx/pull/14280))
 - Fix: allow pointer events for pdf links in pngx viewer [@shamoon](https://github.com/shamoon) ([#14264](https://github.com/paperless-ngx/paperless-ngx/pull/14264))
 - Fix: During a move to the trash directory, only attempt to copy metadata [@stumpylog](https://github.com/stumpylog) ([#14250](https://github.com/paperless-ngx/paperless-ngx/pull/14250))
 - Fix: convert file mtime to the configured time zone directly [@stumpylog](https://github.com/stumpylog) ([#14249](https://github.com/paperless-ngx/paperless-ngx/pull/14249))
 - Fix: ensure documentDeleted subscription is discarded [@shamoon](https://github.com/shamoon) ([#14247](https://github.com/paperless-ngx/paperless-ngx/pull/14247))
 - Chore: Fix bugs in the test suite [@stumpylog](https://github.com/stumpylog) ([#14244](https://github.com/paperless-ngx/paperless-ngx/pull/14244))
 - Fix: ensure bulk operations are checked against version root [@shamoon](https://github.com/shamoon) ([#14246](https://github.com/paperless-ngx/paperless-ngx/pull/14246))
 - Fix: indexing after document-added workflows signal [@shamoon](https://github.com/shamoon) ([#14242](https://github.com/paperless-ngx/paperless-ngx/pull/14242))
 - Fix: Record full tag and custom field lists in bulk edit audit log [@stumpylog](https://github.com/stumpylog) ([#14236](https://github.com/paperless-ngx/paperless-ngx/pull/14236))
 - Chore: update pikepdf for ocrmypdf requirement [@shamoon](https://github.com/shamoon) ([#14235](https://github.com/paperless-ngx/paperless-ngx/pull/14235))
 - Fix: handle legacy bulk edit split page range with missing page\_count [@shamoon](https://github.com/shamoon) ([#14212](https://github.com/paperless-ngx/paperless-ngx/pull/14212))
 - Fix: ignore invalid EXIF orientation when generating image archives [@zhzy0077](https://github.com/zhzy0077) ([#14203](https://github.com/paperless-ngx/paperless-ngx/pull/14203))
 ### Documentation
 - Documentation: correct duplicates info [@shamoon](https://github.com/shamoon) ([#14243](https://github.com/paperless-ngx/paperless-ngx/pull/14243))
 ### Maintenance
 - Chore(deps): Bump the actions group across 1 directory with 4 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14332](https://github.com/paperless-ngx/paperless-ngx/pull/14332))
 - Fix: Wrap apt calls into a retry so we can ideally jump a slow mirror [@stumpylog](https://github.com/stumpylog) ([#14344](https://github.com/paperless-ngx/paperless-ngx/pull/14344))
 - Chore(deps): Bump the actions group across 1 directory with 10 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14301](https://github.com/paperless-ngx/paperless-ngx/pull/14301))
 ### Dependencies
 <details>
 <summary>27 changes</summary>
 - Chore(deps): Bump django-filter from 25.2 to 26.1 @[dependabot[bot]](https://github.com/apps/dependabot) ([#14337](https://github.com/paperless-ngx/paperless-ngx/pull/14337))
 - Chore(deps): Bump the utilities-patch group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14338](https://github.com/paperless-ngx/paperless-ngx/pull/14338))
 - Chore(deps): Bump the pre-commit-dependencies group across 1 directory with 3 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14351](https://github.com/paperless-ngx/paperless-ngx/pull/14351))
 - Chore(deps-dev): Bump types-channels from 4.3.0.20260408 to 4.3.0.20260518 @[dependabot[bot]](https://github.com/apps/dependabot) ([#14335](https://github.com/paperless-ngx/paperless-ngx/pull/14335))
 - docker(deps): Bump astral-sh/uv from 0.12.20-python3.14-trixie-slim to 0.12.23-python3.14-trixie-slim @[dependabot[bot]](https://github.com/apps/dependabot) ([#14327](https://github.com/paperless-ngx/paperless-ngx/pull/14327))
 - Chore(deps): Bump the actions group across 1 directory with 4 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14332](https://github.com/paperless-ngx/paperless-ngx/pull/14332))
 - Chore(deps): Bump the uv group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14325](https://github.com/paperless-ngx/paperless-ngx/pull/14325))
 - Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 13 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14329](https://github.com/paperless-ngx/paperless-ngx/pull/14329))
 - Chore(deps-dev): Bump prettier from 3.9.8 to 3.9.9 in /src-ui @[dependabot[bot]](https://github.com/apps/dependabot) ([#14331](https://github.com/paperless-ngx/paperless-ngx/pull/14331))
 - Chore(deps-dev): Bump the frontend-eslint-dependencies group across 1 directory with 3 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14330](https://github.com/paperless-ngx/paperless-ngx/pull/14330))
 - Chore(deps-dev): Bump zensical from 0.0.64 to 0.0.65 in the development group @[dependabot[bot]](https://github.com/apps/dependabot) ([#14326](https://github.com/paperless-ngx/paperless-ngx/pull/14326))
 - Chore(deps): Bump the uv group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14314](https://github.com/paperless-ngx/paperless-ngx/pull/14314))
 - Chore(deps): Bump the utilities-minor group across 1 directory with 7 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14305](https://github.com/paperless-ngx/paperless-ngx/pull/14305))
 - docker-compose(deps): bump greenmail/standalone from 2.1.13 to 2.1.14 in /docker/compose @[dependabot[bot]](https://github.com/apps/dependabot) ([#14281](https://github.com/paperless-ngx/paperless-ngx/pull/14281))
 - docker(deps): Bump astral-sh/uv from 0.12.16-python3.14-trixie-slim to 0.12.20-python3.14-trixie-slim @[dependabot[bot]](https://github.com/apps/dependabot) ([#14282](https://github.com/paperless-ngx/paperless-ngx/pull/14282))
 - Chore(deps): Bump the pre-commit-dependencies group across 1 directory with 3 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14283](https://github.com/paperless-ngx/paperless-ngx/pull/14283))
 - Chore(deps): Bump the utilities-patch group across 1 directory with 6 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14297](https://github.com/paperless-ngx/paperless-ngx/pull/14297))
 - Chore(deps): Bump the actions group across 1 directory with 10 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14301](https://github.com/paperless-ngx/paperless-ngx/pull/14301))
 - Chore(deps-dev): Bump the frontend-jest-dependencies group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14286](https://github.com/paperless-ngx/paperless-ngx/pull/14286))
 - Chore(deps-dev): Bump eslint from 10.10.0 to 10.11.0 in /src-ui in the frontend-eslint-dependencies group across 1 directory @[dependabot[bot]](https://github.com/apps/dependabot) ([#14287](https://github.com/paperless-ngx/paperless-ngx/pull/14287))
 - Chore(deps-dev): Bump @types/node from 26.5.0 to 26.6.2 in /src-ui @[dependabot[bot]](https://github.com/apps/dependabot) ([#14288](https://github.com/paperless-ngx/paperless-ngx/pull/14288))
 - Chore(deps-dev): Bump prettier from 3.9.6 to 3.9.8 in /src-ui @[dependabot[bot]](https://github.com/apps/dependabot) ([#14289](https://github.com/paperless-ngx/paperless-ngx/pull/14289))
 - Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 10 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14285](https://github.com/paperless-ngx/paperless-ngx/pull/14285))
 - Chore: replace bleach with turbohtml [@gaborbernat](https://github.com/gaborbernat) ([#14269](https://github.com/paperless-ngx/paperless-ngx/pull/14269))
 - Chore(deps): Bump autobahn from 25.12.2 to 26.7.1 in the uv group across 1 directory @[dependabot[bot]](https://github.com/apps/dependabot) ([#14231](https://github.com/paperless-ngx/paperless-ngx/pull/14231))
 - Chore: update pikepdf for ocrmypdf requirement [@shamoon](https://github.com/shamoon) ([#14235](https://github.com/paperless-ngx/paperless-ngx/pull/14235))
 - Chore(deps): Bump the pre-commit-dependencies group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14133](https://github.com/paperless-ngx/paperless-ngx/pull/14133))
 </details>
 ### All App Changes
 <details>
 <summary>41 changes</summary>
 - Feature: store barcode contents, list and search them [@jurassicparkicecream](https://github.com/jurassicparkicecream) ([#14276](https://github.com/paperless-ngx/paperless-ngx/pull/14276))
 - Fix: Set the ProcessedMail owner based on the rule owner in all cases [@stumpylog](https://github.com/stumpylog) ([#14356](https://github.com/paperless-ngx/paperless-ngx/pull/14356))
 - Chore(deps): Bump django-filter from 25.2 to 26.1 @[dependabot[bot]](https://github.com/apps/dependabot) ([#14337](https://github.com/paperless-ngx/paperless-ngx/pull/14337))
 - Chore(deps): Bump the utilities-patch group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14338](https://github.com/paperless-ngx/paperless-ngx/pull/14338))
 - Chore(deps-dev): Bump types-channels from 4.3.0.20260408 to 4.3.0.20260518 @[dependabot[bot]](https://github.com/apps/dependabot) ([#14335](https://github.com/paperless-ngx/paperless-ngx/pull/14335))
 - Chore(deps): Bump the uv group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14325](https://github.com/paperless-ngx/paperless-ngx/pull/14325))
 - Fix: Ensure log rotation settings are converted to integers [@stumpylog](https://github.com/stumpylog) ([#14343](https://github.com/paperless-ngx/paperless-ngx/pull/14343))
 - Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 13 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14329](https://github.com/paperless-ngx/paperless-ngx/pull/14329))
 - Chore(deps-dev): Bump prettier from 3.9.8 to 3.9.9 in /src-ui @[dependabot[bot]](https://github.com/apps/dependabot) ([#14331](https://github.com/paperless-ngx/paperless-ngx/pull/14331))
 - Chore(deps-dev): Bump the frontend-eslint-dependencies group across 1 directory with 3 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14330](https://github.com/paperless-ngx/paperless-ngx/pull/14330))
 - Fix: ship pdf.js CMaps so CJK documents render in the viewer [@MrOggy85](https://github.com/MrOggy85) ([#14318](https://github.com/paperless-ngx/paperless-ngx/pull/14318))
 - Chore(deps-dev): Bump zensical from 0.0.64 to 0.0.65 in the development group @[dependabot[bot]](https://github.com/apps/dependabot) ([#14326](https://github.com/paperless-ngx/paperless-ngx/pull/14326))
 - Enhancement: more control over suggestion requests [@shamoon](https://github.com/shamoon) ([#14258](https://github.com/paperless-ngx/paperless-ngx/pull/14258))
 - Chore(deps): Bump the uv group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14314](https://github.com/paperless-ngx/paperless-ngx/pull/14314))
 - Chore: anchor admin url pattern [@shamoon](https://github.com/shamoon) ([#14316](https://github.com/paperless-ngx/paperless-ngx/pull/14316))
 - Chorehancement: set manifest CORS for credentials [@shamoon](https://github.com/shamoon) ([#14307](https://github.com/paperless-ngx/paperless-ngx/pull/14307))
 - Chore(deps): Bump the utilities-minor group across 1 directory with 7 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14305](https://github.com/paperless-ngx/paperless-ngx/pull/14305))
 - Chore(deps): Bump the utilities-patch group across 1 directory with 6 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14297](https://github.com/paperless-ngx/paperless-ngx/pull/14297))
 - Chore(deps-dev): Bump the frontend-jest-dependencies group across 1 directory with 2 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14286](https://github.com/paperless-ngx/paperless-ngx/pull/14286))
 - Chore(deps-dev): Bump eslint from 10.10.0 to 10.11.0 in /src-ui in the frontend-eslint-dependencies group across 1 directory @[dependabot[bot]](https://github.com/apps/dependabot) ([#14287](https://github.com/paperless-ngx/paperless-ngx/pull/14287))
 - Chore(deps-dev): Bump @types/node from 26.5.0 to 26.6.2 in /src-ui @[dependabot[bot]](https://github.com/apps/dependabot) ([#14288](https://github.com/paperless-ngx/paperless-ngx/pull/14288))
 - Chore(deps-dev): Bump prettier from 3.9.6 to 3.9.8 in /src-ui @[dependabot[bot]](https://github.com/apps/dependabot) ([#14289](https://github.com/paperless-ngx/paperless-ngx/pull/14289))
 - Chore(deps): Bump the frontend-angular-dependencies group across 1 directory with 10 updates @[dependabot[bot]](https://github.com/apps/dependabot) ([#14285](https://github.com/paperless-ngx/paperless-ngx/pull/14285))
 - Fix: use version page\_count for versioned document [@shamoon](https://github.com/shamoon) ([#14280](https://github.com/paperless-ngx/paperless-ngx/pull/14280))
 - Chore: replace bleach with turbohtml [@gaborbernat](https://github.com/gaborbernat) ([#14269](https://github.com/paperless-ngx/paperless-ngx/pull/14269))
 - Enhancement: include Django admin with 2FA [@shamoon](https://github.com/shamoon) ([#14270](https://github.com/paperless-ngx/paperless-ngx/pull/14270))
 - Fix: allow pointer events for pdf links in pngx viewer [@shamoon](https://github.com/shamoon) ([#14264](https://github.com/paperless-ngx/paperless-ngx/pull/14264))
 - Feature: propagate resolved secrets to interactive container shells [@stumpylog](https://github.com/stumpylog) ([#14254](https://github.com/paperless-ngx/paperless-ngx/pull/14254))
 - Fix: During a move to the trash directory, only attempt to copy metadata [@stumpylog](https://github.com/stumpylog) ([#14250](https://github.com/paperless-ngx/paperless-ngx/pull/14250))
 - Fix: convert file mtime to the configured time zone directly [@stumpylog](https://github.com/stumpylog) ([#14249](https://github.com/paperless-ngx/paperless-ngx/pull/14249))
 - Fix: ensure documentDeleted subscription is discarded [@shamoon](https://github.com/shamoon) ([#14247](https://github.com/paperless-ngx/paperless-ngx/pull/14247))
 - Chore: Fix bugs in the test suite [@stumpylog](https://github.com/stumpylog) ([#14244](https://github.com/paperless-ngx/paperless-ngx/pull/14244))
 - Fix: ensure bulk operations are checked against version root [@shamoon](https://github.com/shamoon) ([#14246](https://github.com/paperless-ngx/paperless-ngx/pull/14246))
 - Enhancement: support separate embedding API key [@furkanural](https://github.com/furkanural) ([#14067](https://github.com/paperless-ngx/paperless-ngx/pull/14067))
 - Enhancement: support passthrough extra params for LLMs [@shamoon](https://github.com/shamoon) ([#14202](https://github.com/paperless-ngx/paperless-ngx/pull/14202))
 - Chore(deps): Bump autobahn from 25.12.2 to 26.7.1 in the uv group across 1 directory @[dependabot[bot]](https://github.com/apps/dependabot) ([#14231](https://github.com/paperless-ngx/paperless-ngx/pull/14231))
 - Fix: indexing after document-added workflows signal [@shamoon](https://github.com/shamoon) ([#14242](https://github.com/paperless-ngx/paperless-ngx/pull/14242))
 - Fix: Record full tag and custom field lists in bulk edit audit log [@stumpylog](https://github.com/stumpylog) ([#14236](https://github.com/paperless-ngx/paperless-ngx/pull/14236))
 - Chore: update pikepdf for ocrmypdf requirement [@shamoon](https://github.com/shamoon) ([#14235](https://github.com/paperless-ngx/paperless-ngx/pull/14235))
 - Fix: handle legacy bulk edit split page range with missing page\_count [@shamoon](https://github.com/shamoon) ([#14212](https://github.com/paperless-ngx/paperless-ngx/pull/14212))
 - Fix: ignore invalid EXIF orientation when generating image archives [@zhzy0077](https://github.com/zhzy0077) ([#14203](https://github.com/paperless-ngx/paperless-ngx/pull/14203))
 </details>
 ## paperless-ngx 3.2.1
 ### Bug Fixes
@@ -76,7 +76,9 @@ is not supported by any of the available parsers.
 **A:** Not by default. As of v3, a file whose contents match an existing document is still
 consumed, and the duplicate is flagged in the UI — open the document and check the
-**Duplicates** tab to review documents that share the same content. If you prefer the old
+**Duplicates** tab to review documents that share the same content, or filter the document
 list by **Duplicates** to find all of them (see
 [Duplicate documents](usage.md#duplicate-documents)). If you prefer the old
 behavior of rejecting duplicates during consumption, set
 [`PAPERLESS_CONSUMER_DELETE_DUPLICATES`](configuration.md#PAPERLESS_CONSUMER_DELETE_DUPLICATES)
 to `true`.
@@ -12,10 +12,10 @@ physical documents into a searchable online archive so you can keep, well, _less
 [Get started](setup.md){ .md-button .md-button--primary .index-callout }
 [Demo](https://demo.paperless-ngx.com){ .md-button .md-button--secondary target=\_blank }
-<div style="display: flex; justify-content: end; margin-top: -1.5rem;">
+<div class="demo-sponsor">
-  <a href="https://m.do.co/c/8d70b916d462" target="_blank">
+  <span>Demo hosting by</span>
-    <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/PoweredByDO/DO_Powered_by_Badge_white.svg#only-dark" class="no-lightbox" width="150px">
+  <a href="https://fyrastack.com" target="_blank" rel="noopener">
-    <img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/PoweredByDO/DO_Powered_by_Badge_black.svg#only-light" class="no-lightbox" width="150px">
+    <img src="assets/sponsors/fyra-stack.svg" alt="" class="no-lightbox" width="20" height="20"> Fyra Stack
  </a>
 </div>
@@ -129,7 +129,7 @@ change in the `docker-compose.yml` file:
 command:
  - 'gotenberg'
  - '--chromium-disable-javascript=true'
-  - '--chromium-allow-list=file:///tmp/.*'
+  - '--chromium-allow-list=^file:///tmp/.*'
  - '--api-timeout=60s'
 ```
@@ -272,6 +272,65 @@ This error can occur in installations which have upgraded from a version of Pape
 $ python3 manage.py convert_mariadb_uuid
 ```
 ## MariaDB/MySQL error "Illegal mix of collations"
 Consumption or other operations fail with an error like:
 ```
 (1267, "Illegal mix of collations (utf8mb4_general_ci,IMPLICIT) and
 (utf8mb4_unicode_ci,IMPLICIT) for operation '='")
 ```
 This happens when the tables in your database do not all use the same
 collation. It is most often seen on databases that existed before a
 MariaDB/MySQL upgrade: older tables keep their original collation, while
 tables created afterwards use the new server default.
 To work around it, set the collation your existing tables use (the one in the error
 that is not `utf8mb4_unicode_ci`) with
 [`PAPERLESS_DB_OPTIONS`](configuration.md#PAPERLESS_DB_OPTIONS):
 ```bash
 PAPERLESS_DB_OPTIONS="collation=utf8mb4_general_ci"
 ```
 To fix it permanently, back up your database, then convert the database and
 each table to a single collation and remove the override:
 ```sql
 ALTER DATABASE paperless CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
 ALTER TABLE <table_name> CONVERT TO CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
 ```
 ## PostgreSQL warns about a "collation version mismatch"
 The PostgreSQL log shows a warning like:
 ```
 WARNING:  database "paperless" has a collation version mismatch
 DETAIL:  The database was created using collation version 2.36, but the operating system provides version 2.41.
 HINT:  Rebuild all objects in this database that use the default collation and run ALTER DATABASE paperless REFRESH COLLATION VERSION, or build PostgreSQL with the right library version.
 ```
 This comes from PostgreSQL, not Paperless-ngx. The `glibc` version that PostgreSQL
 runs against changed, and the existing database was created with an older one. With
 Docker, `glibc` comes from the PostgreSQL image's Debian base, not the host, so this
 commonly happens when a new image is pulled after its base Debian release changed.
 If PostgreSQL is installed directly on a host, it uses the host's `glibc` instead.
 The warning is not an error and Paperless-ngx keeps working, but the database's text
 indexes may be built with outdated sorting rules. To resolve it, back up your
 database, then connect to it (for example with `psql -U paperless -d paperless`
 inside the database container) and run:
 ```sql
 REINDEX DATABASE paperless;
 ALTER DATABASE paperless REFRESH COLLATION VERSION;
 ```
 To avoid this in the future, pin your PostgreSQL image to a specific Debian release,
 for example `postgres:18-trixie`, rather than `postgres:18`.
 ## Platform-Specific Deployment Troubleshooting
 A user-maintained wiki page is available to help troubleshoot issues that may arise when trying to deploy Paperless-ngx on specific platforms, for example SELinux. Please see [the wiki](https://github.com/paperless-ngx/paperless-ngx/wiki/Platform%E2%80%90Specific-Troubleshooting).
@@ -299,19 +299,18 @@ for details.
 ### Duplicate documents
 By default, Paperless-ngx **does not reject duplicates**. If you consume a file whose
-contents exactly match an existing document (same checksum), the new copy is still
+contents match an existing document (same original or archive checksum), the new copy is
-consumed and a warning is logged. The task entry for the upload also flags that a
+still consumed and a warning is logged.
 duplicate was detected and links to the existing document(s).
-To review duplicates, open a document and switch to the **Duplicates** tab on the
+When a document has duplicates, a **Duplicates** tab appears on its detail page, listing
-document detail page. It lists other documents that share the same content, including any
+the other documents you can view that share the same content (including any in the trash).
-that are in the trash (shown with a badge), and links to each so you can decide which to
+To find all documents with duplicates, choose **Duplicates** in the document list's text
-keep.
+filter dropdown, or use `has_duplicates=true` in the REST API.
 If you would rather reject duplicates at consumption time (the pre-v3 behavior), set
 [`PAPERLESS_CONSUMER_DELETE_DUPLICATES`](configuration.md#PAPERLESS_CONSUMER_DELETE_DUPLICATES)
 to `true`. The duplicate file is then deleted instead of consumed, and the task fails with
-a "document already exists" message.
+a "Document already exists" message linking to the existing document.
 ## Document Suggestions
@@ -1,6 +1,6 @@
 [project]
 name = "paperless-ngx"
-version = "3.2.1"
+version = "3.3.3"
 description = """\
  A community-supported supercharged document management system: scan, index and archive all your physical documents\
  """
@@ -43,7 +43,7 @@ dependencies = [
  "drf-spectacular~=0.30",
  "drf-spectacular-sidecar>=2026.7.1,<2026.10",
  "drf-writable-nested~=0.7.1",
-  "filelock~=3.32.0",
+  "filelock>=3.32,<4.1",
  "flower>=2.0.1,<2.3",
  "gotenberg-client[httpx]~=1.0",
  "httpx-oauth~=0.17",
@@ -2,5 +2,5 @@
 docker run -p 5432:5432 -e POSTGRES_PASSWORD=password -v paperless_pgdata:/var/lib/postgresql/data -d postgres:15
 docker run -d -p 6379:6379 redis:latest
-docker run -p 3000:3000 -d gotenberg/gotenberg:7.8 gotenberg --chromium-disable-javascript=true --chromium-allow-list="file:///tmp/.*"
+docker run -p 3000:3000 -d gotenberg/gotenberg:7.8 gotenberg --chromium-disable-javascript=true --chromium-allow-list="^file:///tmp/.*"
 docker run -p 9998:9998 -d docker.io/apache/tika:latest
@@ -15,6 +15,8 @@ module.exports = {
        tsconfig: '<rootDir>/tsconfig.spec.json',
        stringifyContentPathRegex: '\\.(html|svg)$',
        useESM: true,
        // Disable the builder's deprecated override; tsconfig.spec.json enables isolation.
        isolatedModules: false,
      },
    ],
  },
@@ -26,7 +28,7 @@ module.exports = {
    'abstract-paperless-service',
  ],
  transformIgnorePatterns: [
-    'node_modules/(?!.*(\\.mjs$|tslib|lodash-es|normalize-diacritics|marked|@angular/common/locales/.*\\.js$))',
+    'node_modules/(?!.*(\\.mjs$|tslib|lodash-es|normalize-diacritics|@angular/common/locales/.*\\.js$))',
  ],
  moduleNameMapper: {
    ...esmPreset.moduleNameMapper,
@@ -1,6 +1,6 @@
 {
  "name": "paperless-ngx-ui",
-  "version": "3.2.1",
+  "version": "3.3.3",
  "scripts": {
    "preinstall": "npx only-allow pnpm",
    "ng": "ng",
@@ -30,7 +30,6 @@
    "bootstrap": "^5.3.8",
    "file-saver": "^2.0.5",
    "lodash-es": "^4.18.1",
    "marked": "~18.0.14",
    "mime-names": "^1.0.0",
    "ngx-bootstrap-icons": "^1.9.3",
    "ngx-color": "^10.1.0",
@@ -53,9 +53,6 @@ importers:
      lodash-es:
        specifier: ^4.18.1
        version: 4.18.1
      marked:
        specifier: ~18.0.14
        version: 18.0.14
      mime-names:
        specifier: ^1.0.0
        version: 1.0.0
@@ -3229,11 +3226,6 @@ packages:
  make-error@1.3.6:
    resolution: {integrity: sha512-s8UhlNe7vPKomQhC1qFelMokr/Sc3AgNbso3n74mVPA5LTZwkB9NlXf4XPamLxJE8h0gh73rM94xvwRT2CVInw==}
  marked@18.0.14:
    resolution: {integrity: sha512-mBHK6FBHuBAlhgRe88w9F0O1AbwwXJUcQibUbC/QcdTbVGAD7aWza+xt3N6oT/jCZx3/OMeS+8rnuiHZcQ9s7A==}
    engines: {node: '>= 20'}
    hasBin: true
  material-colors@1.2.6:
    resolution: {integrity: sha512-6qE4B9deFBIa9YSpOc9O0Sgc43zTeVYbgDT5veRKSlB2+ZuHNoVVxA1L/ckMUayV9Ay9y7Z/SZCLcGteW9i7bg==}
@@ -7417,8 +7409,6 @@ snapshots:
  make-error@1.3.6: {}
  marked@18.0.14: {}
  material-colors@1.2.6: {}
  merge-stream@2.0.0: {}
@@ -102,25 +102,34 @@
    </button>
  }
-  <ngb-pagination
+  @if (selectedSection !== TaskSection.All && totalTasks() > pageSize) {
-    [pageSize]="pageSize"
+    <ngb-pagination
-    [collectionSize]="totalTasks()"
+      [pageSize]="pageSize"
-    [page]="page"
+      [collectionSize]="totalTasks()"
-    [maxSize]="5"
+      [page]="page"
-    [rotate]="true"
+      [maxSize]="5"
-    size="sm"
+      [rotate]="true"
-    aria-label="Tasks pagination"
+      size="sm"
-    (pageChange)="setPage($event)">
+      aria-label="Tasks pagination"
-  </ngb-pagination>
+      (pageChange)="setPage($event)">
    </ngb-pagination>
  }
 </div>
 <ng-template let-tasks="tasks" let-section="section" #tasksTemplate>
-  <div class="section-header d-flex align-items-center justify-content-between mb-2">
+  <div class="section-header mb-2">
-    <div>
+    <h5 class="mb-0">{{ sectionLabel(section) }}</h5>
-      <h5 class="mb-0">{{ sectionLabel(section) }}</h5>
+    @let count = sectionCount(section);
-      <div class="small text-muted">
+    @let hasMore = selectedSection === TaskSection.All && count > tasks.length;
-        <ng-container i18n>{tasks.length, plural, =1 {1 task} other {{{tasks.length}} tasks}}</ng-container>
+    <div class="small text-muted">
-      </div>
+      @if (hasMore) {
        <ng-container i18n>{{tasks.length}} of {{count}} tasks</ng-container>
        <button class="btn btn-link show-all p-0 ms-2 align-baseline" type="button" (click)="setSection(section)">
          <ng-container i18n>Show all</ng-container><i-bs class="ms-1" width="1em" height="1em" name="arrow-right"></i-bs>
        </button>
      } @else {
        <ng-container i18n>{count, plural, =1 {1 task} other {{{count}} tasks}}</ng-container>
      }
    </div>
  </div>
@@ -169,10 +178,9 @@
              <div>{{ taskDisplayName(task) }}</div>
              <div class="small text-muted">
                @if (taskShowsSeparateTypeLabel(task)) {
-                  <span>{{ task.task_type_display }}</span>
+                  <span class="me-2">{{ task.task_type_display }}</span>
                  <span class="mx-1">&bull;</span>
                }
-                <span>{{ task.trigger_source_display }}</span>
+                <span class="text-nowrap"><i-bs class="me-1" width="1em" height="1em" name="box-arrow-in-right"></i-bs>{{ task.trigger_source_display }}</span>
              </div>
            </td>
            <td class="d-none d-lg-table-cell created-col">{{ task.date_created | customDate:'short' }}</td>
@@ -72,3 +72,7 @@ pre {
 tbody tr:nth-last-child(2) td {
    border-bottom: none !important;
 }
 .section-header .show-all {
    font-size: inherit;
 }
@@ -223,16 +223,6 @@ describe('TasksComponent', () => {
      )
      .flush(paginatedTasks)
    httpTestingController
      .expectOne(
        (req) =>
          req.url === `${environment.apiBaseUrl}tasks/` &&
          req.params.get('acknowledged') === 'false' &&
          req.params.get('page_size') === '25' &&
          req.params.get('page') === '1'
      )
      .flush(paginatedTasks)
    httpTestingController
      .expectOne(
        (req) =>
@@ -241,8 +231,30 @@ describe('TasksComponent', () => {
          !req.params.has('status')
      )
      .flush(sectionCountResponse)
    flushTaskLists(10)
  })
  // answers task list requests with the fixture tasks matching their status filter
  function flushTaskLists(pageSize: number, count?: number) {
    httpTestingController
      .match(
        (req) =>
          req.url === `${environment.apiBaseUrl}tasks/` &&
          req.params.get('page_size') === `${pageSize}`
      )
      .forEach((req) => {
        const statuses = req.request.params.getAll('status')
        const results = tasks.filter((task) => statuses.includes(task.status))
        req.flush({ count: count ?? results.length, results })
      })
  }
  function selectSection(section: TaskSection, count: number) {
    component.setSection(section)
    flushTaskLists(25, count)
  }
  it('should display task sections with counts', () => {
    expect(component.selectedSection).toBe(TaskSection.All)
    expect(component.selectedTaskType).toBeNull()
@@ -338,6 +350,7 @@ describe('TasksComponent', () => {
  })
  it('should render pagination controls next to the task filter', () => {
    selectSection(TaskSection.Completed, 30)
    fixture.detectChanges()
    const controls = fixture.debugElement.query(By.css('.task-controls'))
@@ -348,6 +361,51 @@ describe('TasksComponent', () => {
    expect(pagination).not.toBeNull()
  })
  it('should only paginate a section with more than one page of tasks', () => {
    const pagination = () =>
      fixture.debugElement.query(By.css('ngb-pagination'))
    fixture.detectChanges()
    expect(pagination()).toBeNull()
    selectSection(TaskSection.Completed, 2)
    fixture.detectChanges()
    expect(pagination()).toBeNull()
  })
  it('should load the all tasks overview one section at a time', () => {
    expect(component.tasksForSection(TaskSection.NeedsAttention)).toHaveLength(
      2
    )
    expect(component.tasksForSection(TaskSection.InProgress)).toHaveLength(3)
    expect(component.tasksForSection(TaskSection.Completed)).toHaveLength(2)
    expect(component.totalTasks()).toBe(7)
  })
  it('should show section totals and link truncated sections to their full list', () => {
    component.sectionCounts.update((counts) => ({
      ...counts,
      [TaskSection.Completed]: 27,
    }))
    fixture.detectChanges()
    const header = (label: string) =>
      fixture.debugElement
        .queryAll(By.css('.section-header'))
        .find((h) => h.nativeElement.textContent.includes(label))
    expect(header('Needs attention').nativeElement.textContent).toContain(
      '2 tasks'
    )
    expect(header('Needs attention').query(By.css('button'))).toBeNull()
    expect(header('Recently completed').nativeElement.textContent).toContain(
      '2 of 27 tasks'
    )
    header('Recently completed').query(By.css('button')).nativeElement.click()
    expect(component.selectedSection).toBe(TaskSection.Completed)
  })
  it('should apply the selected section to the server-side task query', () => {
    component.setSection(TaskSection.NeedsAttention)
@@ -368,55 +426,56 @@ describe('TasksComponent', () => {
  it('should apply task type and trigger source filters to the server-side task query', () => {
    component.setTaskType(PaperlessTaskType.SanityCheck)
-    httpTestingController
+    expect(
-      .expectOne(
+      httpTestingController.match(
        (request) =>
          request.url === `${environment.apiBaseUrl}tasks/` &&
-          request.params.get('page_size') === '25' &&
+          request.params.get('page_size') === '10' &&
          request.params.get('task_type') === PaperlessTaskType.SanityCheck
      )
-      .flush({ count: 1, results: [tasks[6]] })
+    ).toHaveLength(3)
    component.setTriggerSource(PaperlessTaskTriggerSource.System)
-    httpTestingController
+    expect(
-      .expectOne(
+      httpTestingController.match(
        (request) =>
          request.url === `${environment.apiBaseUrl}tasks/` &&
-          request.params.get('page_size') === '25' &&
+          request.params.get('page_size') === '10' &&
          request.params.get('task_type') === PaperlessTaskType.SanityCheck &&
          request.params.get('trigger_source') ===
            PaperlessTaskTriggerSource.System
      )
-      .flush({ count: 1, results: [tasks[6]] })
+    ).toHaveLength(3)
  })
  it('should apply text filters to the server-side task query', () => {
    component.filterText = 'invoice'
    jest.advanceTimersByTime(150)
-    httpTestingController
+    expect(
-      .expectOne(
+      httpTestingController.match(
        (request) =>
          request.url === `${environment.apiBaseUrl}tasks/` &&
-          request.params.get('page_size') === '25' &&
+          request.params.get('page_size') === '10' &&
          request.params.get('name') === 'invoice'
      )
-      .flush({ count: 1, results: [tasks[0]] })
+    ).toHaveLength(3)
    component.setFilterTarget(TaskFilterTargetID.Result)
-    httpTestingController
+    expect(
-      .expectOne(
+      httpTestingController.match(
        (request) =>
          request.url === `${environment.apiBaseUrl}tasks/` &&
-          request.params.get('page_size') === '25' &&
+          request.params.get('page_size') === '10' &&
          request.params.get('result') === 'invoice'
      )
-      .flush({ count: 0, results: [] })
+    ).toHaveLength(3)
  })
  it('should load a different task page when pagination changes', () => {
    selectSection(TaskSection.Completed, 30)
    component.setPage(2)
    const pageTwoTasks = {
@@ -440,6 +499,7 @@ describe('TasksComponent', () => {
  })
  it('should not replace section counts with current-page counts', () => {
    selectSection(TaskSection.Completed, 30)
    component.setPage(2)
    httpTestingController
@@ -455,11 +515,21 @@ describe('TasksComponent', () => {
        results: [tasks[0]],
      })
    expect(component.sectionCount(TaskSection.All)).toBe(7)
    expect(component.sectionCount(TaskSection.NeedsAttention)).toBe(2)
    expect(component.sectionCount(TaskSection.InProgress)).toBe(3)
    expect(component.sectionCount(TaskSection.Completed)).toBe(2)
  })
  it('should stop loading when the overview fails to load', () => {
    component.setSection(TaskSection.All)
    httpTestingController
      .match((req) => req.params.get('page_size') === '10')[0]
      .flush('', { status: 500, statusText: 'Error' })
    expect(component.loading()).toBe(false)
  })
  it('should expose stable task type options and disable empty ones', () => {
    expect(component.taskTypeOptions.map((option) => option.value)).toContain(
      PaperlessTaskType.TrainClassifier
@@ -15,6 +15,9 @@ import {
  distinctUntilChanged,
  filter,
  first,
  forkJoin,
  map,
  Observable,
  Subject,
  takeUntil,
  timer,
@@ -25,6 +28,7 @@ import {
  PaperlessTaskTriggerSource,
  PaperlessTaskType,
 } from 'src/app/data/paperless-task'
 import { Results } from 'src/app/data/results'
 import { IfPermissionsDirective } from 'src/app/directives/if-permissions.directive'
 import { CustomDatePipe } from 'src/app/pipes/custom-date.pipe'
 import { TasksService } from 'src/app/services/tasks.service'
@@ -169,6 +173,7 @@ export class TasksComponent
  public expandedTask: number
  public autoRefreshEnabled: boolean = true
  public readonly pageSize = 25
  public readonly overviewSize = 10
  public page: number = 1
  readonly totalTasks = signal(0)
  readonly sectionCounts = signal<Record<TaskSection, number>>({
@@ -484,13 +489,6 @@ export class TasksComponent
    return this.sectionCounts()[section]
  }
  private setSectionCount(section: TaskSection, count: number) {
    this.sectionCounts.update((counts) => ({
      ...counts,
      [section]: count,
    }))
  }
  sectionShowsResults(section: TaskSection): boolean {
    return section !== TaskSection.InProgress
  }
@@ -737,21 +735,12 @@ export class TasksComponent
    this.reloadSectionCounts()
    this.loading.set(true)
-    this.tasksService
+    this.listTasks()
      .list(
        this.page,
        this.pageSize,
        this.getParamsForSection(this.selectedSection)
      )
      .pipe(first(), takeUntil(this.unsubscribeNotifier))
      .subscribe({
        next: (result) => {
          this.pagedTasks.set(result.results)
          this.totalTasks.set(result.count)
          this.setSectionCount(TaskSection.All, result.count)
          if (this.selectedSection !== TaskSection.All) {
            this.setSectionCount(this.selectedSection, result.count)
          }
          this.loading.set(false)
          if (
            this.page > 1 &&
@@ -767,4 +756,30 @@ export class TasksComponent
        },
      })
  }
  private listTasks(): Observable<Results<PaperlessTask>> {
    if (this.selectedSection !== TaskSection.All) {
      return this.tasksService.list(
        this.page,
        this.pageSize,
        this.getParamsForSection(this.selectedSection)
      )
    }
    // All is an overview of each section to avoid splitting sections across pages
    return forkJoin(
      this.sections.map((section) =>
        this.tasksService.list(
          1,
          this.overviewSize,
          this.getParamsForSection(section)
        )
      )
    ).pipe(
      map((results) => ({
        count: results.reduce((sum, result) => sum + result.count, 0),
        results: results.flatMap((result) => result.results),
      }))
    )
  }
 }
@@ -154,6 +154,31 @@ describe('UsersAndGroupsComponent', () => {
    jest.useRealTimers()
  })
  it('should logout current user under base href if password changed', () => {
    jest.useFakeTimers()
    const base = document.createElement('base')
    base.href = '/paperless/'
    document.head.appendChild(base)
    completeSetup()
    let modal: NgbModalRef
    modalService.activeInstances.subscribe((refs) => (modal = refs[0]))
    component.editUser(users[0])
    const navSpy = jest
      .spyOn(navUtils, 'setLocationHref')
      .mockImplementation(() => {})
    const editDialog = modal.componentInstance as UserEditDialogComponent
    editDialog.passwordIsSet = true
    settingsService.currentUser.set(users[0]) // simulate logged in as same user
    editDialog.succeeded.emit(users[0])
    fixture.detectChanges()
    jest.advanceTimersByTime(2600)
    expect(navSpy).toHaveBeenCalledWith(
      `${window.location.origin}/paperless/accounts/logout/?next=/paperless/accounts/login/?next=/paperless/`
    )
    base.remove()
    jest.useRealTimers()
  })
  it('should support edit / create group, show error if needed', () => {
    completeSetup()
    let modal: NgbModalRef
@@ -116,8 +116,9 @@ export class UsersAndGroupsComponent
            $localize`Password has been changed, you will be logged out momentarily.`
          )
          setTimeout(() => {
            const basePath = new URL(document.baseURI).pathname
            setLocationHref(
-              `${window.location.origin}/accounts/logout/?next=/accounts/login/?next=/`
+              `${window.location.origin}${basePath}accounts/logout/?next=${basePath}accounts/login/?next=${basePath}`
            )
          }, 2500)
        } else {
@@ -66,6 +66,7 @@
 }
 .search-container {
  min-width: 0;
  padding-left: 1rem;
  padding-right: 1rem;
 }
@@ -499,6 +500,11 @@ main {
 // true center the search with equal flex widths
@media (min-width: 768px) {
  .search-container {
    // Prevent input padding and the conditional search button from resizing
    flex-basis: 55rem;
  }
  .navbar-brand-container,
  .navbar > ul {
    display: flex; // so the brand link stays as wide as its contents
@@ -70,6 +70,17 @@ form {
  max-height: 75vh;
 }
 .dropdown.show {
  // Hide the search icon when the dropdown is shown
  i-bs[name="search"] {
    display: none !important;
  }
  .form-control {
    padding-left: 0.5rem;
  }
 }
 .dropdown-item {
  &:has(button:focus) {
    background-color: var(--pngx-bg-darker);
@@ -1,85 +1,49 @@
-<li ngbDropdown class="nav-item" display="dynamic" placement="bottom-end" [popperOptions]="popperOptions" (openChange)="onOpenChange($event)">
+<li ngbDropdown class="nav-item" (openChange)="onOpenChange($event)">
  <button class="btn navbar-action border-0" id="chatDropdown" ngbDropdownToggle aria-label="Chat" i18n-aria-label>
    <i-bs width="1.3em" height="1.3em" name="chatSquareDots"></i-bs>
  </button>
-  <div ngbDropdownMenu class="dropdown-menu-end shadow p-0 overflow-hidden" aria-labelledby="chatDropdown">
+  <div ngbDropdownMenu class="dropdown-menu-end shadow p-3" aria-labelledby="chatDropdown">
-    <div class="d-flex align-items-center border-bottom px-3 py-2">
+    <div class="chat-container bg-light p-2">
-      <i-bs width="1em" height="1em" name="stars" class="text-primary me-2"></i-bs>
+      <div class="chat-messages font-monospace small">
-      <span class="fw-semibold small">
+        @for (message of messages(); track message) {
-        @if (documentId()) {
+          <div class="message d-flex flex-row small" [class.justify-content-end]="message.role === 'user'">
-          <ng-container i18n>Ask about this document</ng-container>
+            <div class="p-2 m-2" [class.bg-body]="message.role === 'user'">
-        } @else {
+              <span class="text-break">
-          <ng-container i18n>Ask about your documents</ng-container>
+                {{ message.content }}
-        }
+                @if (message.isStreaming) { <span class="blinking-cursor">|</span> }
-      </span>
+              </span>
-      @if (messages().length) {
+              @if (message.role === 'assistant' && message.references?.length) {
-        <button class="btn btn-sm btn-link text-muted ms-auto p-0" type="button" (click)="clearChat()" title="Clear chat" i18n-title>
+                <div class="chat-references list-group mt-3">
-          <i-bs width="1em" height="1em" name="arrow-counterclockwise"></i-bs>
+                  @for (reference of message.references; track reference.id) {
-        </button>
+                    <a class="list-group-item list-group-item-action d-flex text-primary text-break" [routerLink]="['/documents', reference.id]">
-      }
+                      <i-bs width="0.9em" height="0.9em" name="file-text" class="me-1"></i-bs><span>{{ reference.title }}</span>
-    </div>
+                    </a>
-
+                  }
-    <div class="chat-messages small px-2">
+                </div>
-      @if (!messages().length) {
+              }
-        <p class="text-muted text-center py-4 px-3 mb-0" i18n>Answers come from your documents, with links to their sources.</p>
+            </div>
      }
      @for (message of messages(); track message) {
        <div class="message d-flex flex-row" [class.justify-content-end]="message.role === 'user'" [class.mt-3]="message.role === 'user' && !$first">
          <div class="p-2 m-2" [class.bg-body-secondary]="message.role === 'user'" [class.rounded-3]="message.role === 'user'" [class.flex-grow-1]="message.role === 'assistant'">
            @if (message.isStreaming && !message.content) {
              <div class="d-flex align-items-center text-muted">
                <div class="spinner-border spinner-border-sm me-2" role="status"></div>
                @if (slowResponse()) {
                  <ng-container i18n>Still thinking...</ng-container>
                } @else {
                  <ng-container i18n>Thinking...</ng-container>
                }
              </div>
            } @else if (message.role === 'assistant') {
              <div class="chat-markdown text-break text-wrap" [class.streaming]="message.isStreaming" [innerHTML]="message.content | markdown"></div>
            } @else {
              <span class="text-break">{{ message.content }}</span>
            }
            @if (message.role === 'assistant' && !message.isStreaming && message.references?.length) {
              <div class="chat-references list-group mt-3">
                <div class="list-group-item text-muted small py-1" i18n>Sources</div>
                @for (reference of message.references; track reference.id) {
                  <a class="list-group-item list-group-item-action d-flex align-items-center text-primary" [routerLink]="['/documents', reference.id]" [title]="reference.title">
                    <i-bs width="0.9em" height="0.9em" name="file-text" class="me-2 flex-shrink-0"></i-bs><span class="text-truncate">{{ reference.title }}</span>
                  </a>
                }
              </div>
            }
          </div>
-        </div>
+        }
-      }
+        <div #scrollAnchor></div>
-      <div #scrollAnchor></div>
+      </div>
    </div>
-    <form class="chat-input border-top p-2">
+      <form class="chat-input">
-      <label class="visually-hidden" for="chatInput" i18n>Message</label>
+        <label class="visually-hidden" for="chatInput" i18n>Message</label>
-      <div class="input-group">
+        <div class="input-group">
-        <input
+          <input
-          #chatInput
+            #chatInput
-          id="chatInput"
+            id="chatInput"
-          class="form-control" name="chatInput" type="text"
+            class="form-control form-control-sm" name="chatInput" type="text"
            [placeholder]="placeholder"
            [disabled]="loading()"
            [ngModel]="input()"
            (ngModelChange)="input.set($event)"
            (keydown)="searchInputKeyDown($event)"
-          />
+            />
-        @if (loading()) {
+          <button class="btn btn-sm btn-secondary" type="button" (click)="sendMessage()" [disabled]="loading()">Send</button>
-          <button class="btn btn-outline-secondary" type="button" (click)="stopStreaming()" title="Stop" i18n-title aria-label="Stop" i18n-aria-label>
+        </div>
-            <i-bs width="1em" height="1em" name="x-lg"></i-bs>
+      </form>
-          </button>
+    </div>
        } @else {
          <button class="btn btn-primary" type="button" (click)="sendMessage()" title="Send" i18n-title aria-label="Send" i18n-aria-label>
            <i-bs width="1em" height="1em" name="arrow-return-left"></i-bs>
          </button>
        }
      </div>
    </form>
  </div>
 </li>
@@ -1,13 +1,17 @@
 .dropdown-menu {
-  width: min(36rem, calc(100vw - 20px));
+  width: var(--pngx-toast-max-width);
 }
 .chat-messages {
-  max-height: min(60dvh, 36rem);
+  max-height: 350px;
  overflow-y: auto;
  white-space: pre-wrap;
 }
 .chat-references {
  font-family: var(--bs-font-sans-serif);
 }
 .dropdown-toggle::after {
  display: none;
 }
@@ -16,44 +20,23 @@
  white-space: initial;
 }
-@media screen and (max-width: 575.98px) {
+@media screen and (max-width: 400px) {
-  .chat-messages {
+  :host ::ng-deep .dropdown-menu-end {
-    max-height: calc(100dvh - 12rem);
+    right: -3rem;
  }
 }
-.chat-markdown.streaming ::ng-deep {
+.blinking-cursor {
-  > :last-child:not(ul, ol, table)::after,
+  font-weight: bold;
-  > :is(ul, ol):last-child > li:last-child::after {
+  font-size: 1.2em;
-    content: '';
+  animation: blink 1s step-end infinite;
    display: inline-block;
    width: 2px;
    height: 1.05em;
    margin-left: 2px;
    background-color: currentColor;
    vertical-align: -0.15em;
    animation: blink 1s step-end infinite;
  }
 }
@keyframes blink {
-  50% {
+  from, to {
    opacity: 0;
  }
-}
+  50% {
-
+    opacity: 1;
 .chat-markdown ::ng-deep {
  h1, h2, h3, h4, h5, h6 {
    font-size: 1em;
    font-weight: bold;
  }
  th, td {
    padding: 0.15rem 0.4rem;
    border: 1px solid var(--bs-border-color);
  }
  > :last-child {
    margin-bottom: 0;
  }
 }
@@ -80,16 +80,8 @@ describe('ChatComponent', () => {
    expect(component.messages()[0].content).toBe('Hello')
    expect(component.loading()).toBe(true)
    fixture.detectChanges()
    const messagesEl = fixture.nativeElement.querySelector('.chat-messages')
    expect(messagesEl.querySelector('.spinner-border')).not.toBeNull()
    expect(messagesEl.textContent).toContain('Thinking...')
    mockStream$.next('Hi')
    expect(component.messages()[1].content).toBe('H')
    fixture.detectChanges()
    expect(messagesEl.querySelector('.spinner-border')).toBeNull()
    expect(messagesEl.querySelector('.chat-markdown.streaming')).not.toBeNull()
    mockStream$.next('Hi there')
    // advance time to process the typewriter effect
    await jest.runAllTimersAsync()
@@ -104,8 +96,6 @@ describe('ChatComponent', () => {
    await fixture.whenStable()
    expect(component.loading()).toBe(false)
    expect(component.messages()[1].isStreaming).toBe(false)
    fixture.detectChanges()
    expect(messagesEl.querySelector('.chat-markdown.streaming')).toBeNull()
    expect(fixture.nativeElement.querySelector('#chatInput').disabled).toBe(
      false
    )
@@ -133,10 +123,6 @@ describe('ChatComponent', () => {
    mockStream$.next(
      `Hi there${CHAT_METADATA_DELIMITER}{"references":[{"id":42,"title":"Bread Recipe"}]}`
    )
    fixture.detectChanges()
    expect(fixture.nativeElement.querySelector('.chat-references')).toBeNull()
    mockStream$.complete()
    jest.advanceTimersByTime(1000)
    fixture.detectChanges()
@@ -170,96 +156,13 @@ describe('ChatComponent', () => {
    component.input.set('Hello')
    component.sendMessage()
    mockStream$.next('Partial')
    mockStream$.error('Error')
-    expect(component.messages()[1].content).toBe(
+    expect(component.messages()[1].content).toContain(
-      'Partial\n\n⚠️ Error receiving response.'
+      '⚠️ Error receiving response.'
    )
    expect(component.loading()).toBe(false)
  })
  it('should keep streaming until the typewriter catches up', () => {
    component.input.set('Hello')
    component.sendMessage()
    mockStream$.next('Hi there')
    mockStream$.complete()
    expect(component.messages()[1].isStreaming).toBe(true)
    expect(component.loading()).toBe(true)
    jest.advanceTimersByTime(1000)
    expect(component.messages()[1].content).toBe('Hi there')
    expect(component.messages()[1].isStreaming).toBe(false)
    expect(component.loading()).toBe(false)
  })
  it('should show a slow response message while waiting', () => {
    component.input.set('Hello')
    component.sendMessage()
    fixture.detectChanges()
    const messagesEl = fixture.nativeElement.querySelector('.chat-messages')
    expect(messagesEl.textContent).not.toContain('Still thinking...')
    jest.advanceTimersByTime(8000)
    fixture.detectChanges()
    expect(messagesEl.textContent).toContain('Still thinking...')
    mockStream$.next('Hi')
    expect(component.slowResponse()).toBe(false)
  })
  it('should stop streaming and keep the partial response', () => {
    component.input.set('Hello')
    component.sendMessage()
    fixture.detectChanges()
    const stopButton = fixture.nativeElement.querySelector('.chat-input button')
    expect(stopButton.getAttribute('aria-label')).toBe('Stop')
    mockStream$.next('Hi there')
    jest.advanceTimersByTime(20)
    stopButton.click()
    expect(mockStream$.observed).toBe(false)
    expect(component.messages()[1].content).toBe('Hi there')
    expect(component.messages()[1].isStreaming).toBe(false)
    expect(component.loading()).toBe(false)
    jest.advanceTimersByTime(1000)
    expect(component.messages()[1].content).toBe('Hi there')
  })
  it('should drop the empty response when stopped before any content', () => {
    component.input.set('Hello')
    component.sendMessage()
    component.stopStreaming()
    expect(component.messages()).toHaveLength(1)
    expect(component.loading()).toBe(false)
    component.stopStreaming() // no-op once stopped
    expect(component.messages()).toHaveLength(1)
  })
  it('should clear the conversation', () => {
    component.input.set('Hello')
    component.sendMessage()
    mockStream$.next('Hi there')
    fixture.detectChanges()
    fixture.nativeElement.querySelector('button[title="Clear chat"]').click()
    expect(component.messages()).toHaveLength(0)
    expect(component.loading()).toBe(false)
    expect(mockStream$.observed).toBe(false)
    fixture.detectChanges()
    jest.advanceTimersByTime(10)
    expect(document.activeElement).toBe(
      fixture.nativeElement.querySelector('#chatInput')
    )
    expect(fixture.nativeElement.textContent).toContain(
      'Answers come from your documents'
    )
  })
  it('should enqueue typewriter chunks correctly', () => {
    const message = { content: '', role: 'assistant', isStreaming: true }
    component.enqueueTypewriter(null, message as any) // coverage for null
@@ -304,33 +207,4 @@ describe('ChatComponent', () => {
    component.searchInputKeyDown(event)
    expect(component.sendMessage).not.toHaveBeenCalled()
  })
  it('should render markdown for assistant messages only', () => {
    component.messages.set([
      { role: 'user', content: '**user**' },
      { role: 'assistant', content: '**assistant** <script>x</script>' },
    ])
    fixture.detectChanges()
    const el: HTMLElement = fixture.nativeElement
    expect(el.querySelector('.chat-markdown strong')?.textContent).toBe(
      'assistant'
    )
    expect(el.querySelector('.chat-markdown script')).toBeNull()
    expect(el.textContent).toContain('**user**')
  })
  it('should keep the destination hostname visible after sanitizing chat links', () => {
    component.messages.set([
      {
        role: 'assistant',
        content:
          '[View original document](https://otherdomain.example/?data=secret)',
      },
    ])
    fixture.detectChanges()
    const el: HTMLElement = fixture.nativeElement
    const link = el.querySelector('.chat-markdown a')
    expect(link?.textContent).toBe('View original document')
    expect(link?.nextElementSibling?.textContent).toBe('(otherdomain.example)')
  })
 })
@@ -10,16 +10,12 @@ import { FormsModule, ReactiveFormsModule } from '@angular/forms'
 import { NavigationEnd, Router, RouterModule } from '@angular/router'
 import { NgbDropdownModule } from '@ng-bootstrap/ng-bootstrap'
 import { NgxBootstrapIconsModule } from 'ngx-bootstrap-icons'
-import { filter, map, Subscription } from 'rxjs'
+import { filter, map } from 'rxjs'
 import { MarkdownPipe } from 'src/app/pipes/markdown.pipe'
 import {
  ChatMessage,
  ChatService,
  parseChatResponse,
 } from 'src/app/services/chat.service'
 import { pngxPopperOptions } from 'src/app/utils/popper-options'
 const SLOW_RESPONSE_DELAY_MS = 8000
@Component({
  selector: 'pngx-chat',
@@ -29,7 +25,6 @@ const SLOW_RESPONSE_DELAY_MS = 8000
    RouterModule,
    NgxBootstrapIconsModule,
    NgbDropdownModule,
    MarkdownPipe,
  ],
  templateUrl: './chat.component.html',
  styleUrl: './chat.component.scss',
@@ -39,8 +34,6 @@ export class ChatComponent implements OnInit {
  readonly loading = signal(false)
  readonly input = signal('')
  readonly documentId = signal<number>(undefined)
  readonly slowResponse = signal(false)
  public popperOptions = pngxPopperOptions
  private chatService: ChatService = inject(ChatService)
  private router: Router = inject(Router)
@@ -50,11 +43,6 @@ export class ChatComponent implements OnInit {
  private typewriterBuffer: string[] = []
  private typewriterActive = false
  private typewriterTimeout: ReturnType<typeof setTimeout>
  private streamSubscription: Subscription
  private streamingMessage: ChatMessage
  private streamFinished = false
  private slowResponseTimeout: ReturnType<typeof setTimeout>
  public get placeholder(): string {
    return this.documentId()
@@ -93,96 +81,47 @@ export class ChatComponent implements OnInit {
    }
    this.messages.update((messages) => [...messages, assistantMessage])
    this.loading.set(true)
    this.streamingMessage = assistantMessage
    this.streamFinished = false
    this.slowResponseTimeout = setTimeout(
      () => this.slowResponse.set(true),
      SLOW_RESPONSE_DELAY_MS
    )
    let lastVisibleContent = ''
-    this.streamSubscription = this.chatService
+    this.chatService.streamChat(this.documentId(), this.input()).subscribe({
-      .streamChat(this.documentId(), this.input())
+      next: (chunk) => {
-      .subscribe({
+        const nextResponse = parseChatResponse(chunk)
        next: (chunk) => {
          this.clearSlowResponse()
          const nextResponse = parseChatResponse(chunk)
-          if (nextResponse.content.length < lastVisibleContent.length) {
+        if (nextResponse.content.length < lastVisibleContent.length) {
-            this.resetTypewriter(assistantMessage, nextResponse.content)
+          this.resetTypewriter(assistantMessage, nextResponse.content)
-            lastVisibleContent = nextResponse.content
+          lastVisibleContent = nextResponse.content
-          } else {
+        } else {
-            const visibleDelta = nextResponse.content.substring(
+          const visibleDelta = nextResponse.content.substring(
-              lastVisibleContent.length
+            lastVisibleContent.length
-            )
+          )
-            lastVisibleContent = nextResponse.content
+          lastVisibleContent = nextResponse.content
-            this.enqueueTypewriter(visibleDelta, assistantMessage)
+          this.enqueueTypewriter(visibleDelta, assistantMessage)
-          }
+        }
-          assistantMessage.references = nextResponse.references
+        assistantMessage.references = nextResponse.references
-          this.notifyMessagesChanged()
+        this.notifyMessagesChanged()
-        },
+      },
-        error: () => {
+      error: () => {
-          this.flushTypewriter(assistantMessage)
+        assistantMessage.content += '\n\n⚠️ Error receiving response.'
-          assistantMessage.content += '\n\n⚠️ Error receiving response.'
+        assistantMessage.isStreaming = false
-          this.finishStreaming(assistantMessage)
+        this.notifyMessagesChanged()
-        },
+        this.loading.set(false)
-        complete: () => {
+      },
-          // let the typewriter catch up before hiding the cursor
+      complete: () => {
-          this.streamFinished = true
+        assistantMessage.isStreaming = false
-          if (!this.typewriterActive) this.finishStreaming(assistantMessage)
+        this.notifyMessagesChanged()
-        },
+        this.loading.set(false)
-      })
+        this.scrollToBottom()
      },
    })
    this.input.set('')
  }
-  stopStreaming(): void {
+  private resetTypewriter(message: ChatMessage, content: string): void {
    const message = this.streamingMessage
    if (!message?.isStreaming) return
    this.streamSubscription?.unsubscribe()
    this.flushTypewriter(message)
    if (!message.content) {
      this.messages.update((messages) => messages.filter((m) => m !== message))
    }
    this.finishStreaming(message)
  }
  clearChat(): void {
    this.stopStreaming()
    this.messages.set([])
    setTimeout(() => this.chatInput?.nativeElement.focus())
  }
  private finishStreaming(message: ChatMessage): void {
    this.clearSlowResponse()
    this.streamFinished = false
    message.isStreaming = false
    this.notifyMessagesChanged()
    this.loading.set(false)
    this.scrollToBottom()
  }
  private clearSlowResponse(): void {
    clearTimeout(this.slowResponseTimeout)
    this.slowResponse.set(false)
  }
  private flushTypewriter(message: ChatMessage): void {
    message.content += this.typewriterBuffer.join('')
    this.cancelTypewriter()
  }
  private cancelTypewriter(): void {
    clearTimeout(this.typewriterTimeout)
    this.typewriterBuffer = []
    this.typewriterActive = false
  }
  private resetTypewriter(message: ChatMessage, content: string): void {
    this.cancelTypewriter()
    message.content = content
    this.notifyMessagesChanged()
    this.scrollToBottom()
@@ -202,7 +141,6 @@ export class ChatComponent implements OnInit {
  playTypewriter(message: ChatMessage): void {
    if (this.typewriterBuffer.length === 0) {
      this.typewriterActive = false
      if (this.streamFinished) this.finishStreaming(message)
      return
    }
@@ -211,8 +149,7 @@ export class ChatComponent implements OnInit {
    this.notifyMessagesChanged()
    this.scrollToBottom()
-    // 10ms per character
+    setTimeout(() => this.playTypewriter(message), 10) // 10ms per character
    this.typewriterTimeout = setTimeout(() => this.playTypewriter(message), 10)
  }
  private notifyMessagesChanged(): void {
@@ -218,6 +218,38 @@ describe('ProfileEditDialogComponent', () => {
    jest.useRealTimers()
  })
  it('should logout under base href on save if password changed', () => {
    jest.useFakeTimers()
    const base = document.createElement('base')
    base.href = '/paperless/'
    document.head.appendChild(base)
    const getSpy = jest.spyOn(profileService, 'get')
    getSpy.mockReturnValue(of(profile))
    const getProvidersSpy = jest.spyOn(
      profileService,
      'getSocialAccountProviders'
    )
    getProvidersSpy.mockReturnValue(of(socialAccountProviders))
    component.ngOnInit()
    component['newPassword'] = 'new*pass'
    component.form.get('password').patchValue('new*pass')
    component.form.get('password_confirm').patchValue('new*pass')
    const updateSpy = jest.spyOn(profileService, 'update')
    updateSpy.mockReturnValue(of(null))
    const navSpy = jest
      .spyOn(navUtils, 'setLocationHref')
      .mockImplementation(() => {})
    component.save()
    expect(updateSpy).toHaveBeenCalled()
    jest.advanceTimersByTime(2600)
    expect(navSpy).toHaveBeenCalledWith(
      `${window.location.origin}/paperless/accounts/logout/?next=/paperless/accounts/login/?next=/paperless/`
    )
    base.remove()
    jest.useRealTimers()
  })
  it('should support auth token copy', () => {
    jest.useFakeTimers()
    const getSpy = jest.spyOn(profileService, 'get')
@@ -210,8 +210,9 @@ export class ProfileEditDialogComponent
              $localize`Password has been changed, you will be logged out momentarily.`
            )
            setTimeout(() => {
              const basePath = new URL(document.baseURI).pathname
              setLocationHref(
-                `${window.location.origin}/accounts/logout/?next=/accounts/login/?next=/`
+                `${window.location.origin}${basePath}accounts/logout/?next=${basePath}accounts/login/?next=${basePath}`
              )
            }, 2500)
          }
@@ -1,6 +1,6 @@
 <div class="d-flex align-items-center">
  <div class="btn-group">
-    <button type="button" class="btn btn-sm btn-outline-primary" (click)="clickSuggest()" [disabled]="disabled() || loading() || (suggestions() && !aiEnabled())" [aria-label]="noSuggestions ? 'No suggestions' : 'Suggest'" i18n-aria-label>
+    <button type="button" class="btn btn-sm btn-outline-primary" (click)="clickSuggest()" [disabled]="disabled() || loading()" [aria-label]="noSuggestions ? 'No suggestions' : 'Suggest'" i18n-aria-label>
      @if (loading()) {
        <div class="spinner-border spinner-border-sm" role="status"></div>
      } @else if (noSuggestions) {
@@ -18,46 +18,44 @@
      }
    </button>
-    @if (aiEnabled()) {
+    <div class="btn-group" ngbDropdown #dropdown="ngbDropdown" [popperOptions]="popperOptions">
-      <div class="btn-group" ngbDropdown #dropdown="ngbDropdown" [popperOptions]="popperOptions">
+      <button type="button" class="btn btn-sm btn-outline-primary" ngbDropdownToggle [disabled]="disabled() || loading() || !suggestions()" aria-expanded="false" aria-controls="suggestionsDropdown" aria-label="Suggestions dropdown">
-        <button type="button" class="btn btn-sm btn-outline-primary" ngbDropdownToggle [disabled]="disabled() || loading() || !suggestions()" aria-expanded="false" aria-controls="suggestionsDropdown" aria-label="Suggestions dropdown">
+        <span class="visually-hidden" i18n>Show suggestions</span>
-          <span class="visually-hidden" i18n>Show suggestions</span>
+      </button>
        </button>
-        <div ngbDropdownMenu aria-labelledby="suggestionsDropdown" class="shadow suggestions-dropdown">
+      <div ngbDropdownMenu aria-labelledby="suggestionsDropdown" class="shadow suggestions-dropdown">
-          <div class="list-group list-group-flush small pb-0">
+        <div class="list-group list-group-flush small pb-0">
-            @if (novelSuggestions === 0 && fieldSuggestions === 0) {
+          @if (novelSuggestions === 0 && fieldSuggestions === 0) {
-              <div class="list-group-item text-muted fst-italic">
+            <div class="list-group-item text-muted fst-italic">
-                <small class="text-muted small fst-italic" i18n>No novel suggestions</small>
+              <small class="text-muted small fst-italic" i18n>No novel suggestions</small>
-              </div>
+            </div>
          }
          @if (suggestions()?.suggested_tags?.length > 0) {
            <small class="list-group-item text-uppercase text-muted small"><i-bs class="me-2" name="tags"></i-bs><ng-container i18n>Tags</ng-container></small>
            @for (tag of suggestions().suggested_tags; track tag) {
              <button type="button" class="list-group-item list-group-item-action bg-light" (click)="addTag.emit(tag)">{{ tag }}</button>
            }
-            @if (suggestions()?.suggested_tags?.length > 0) {
+          }
-              <small class="list-group-item text-uppercase text-muted small"><i-bs class="me-2" name="tags"></i-bs><ng-container i18n>Tags</ng-container></small>
+          @if (suggestions()?.suggested_document_types?.length > 0) {
-              @for (tag of suggestions().suggested_tags; track tag) {
+            <div class="list-group-item text-uppercase text-muted small"><i-bs class="me-2" name="hash"></i-bs><ng-container i18n>Document Types</ng-container></div>
-                <button type="button" class="list-group-item list-group-item-action bg-light" (click)="addTag.emit(tag)">{{ tag }}</button>
+            @for (type of suggestions().suggested_document_types; track type) {
-              }
+              <button type="button" class="list-group-item list-group-item-action bg-light" (click)="addDocumentType.emit(type)">{{ type }}</button>
            }
-            @if (suggestions()?.suggested_document_types?.length > 0) {
+          }
-              <div class="list-group-item text-uppercase text-muted small"><i-bs class="me-2" name="hash"></i-bs><ng-container i18n>Document Types</ng-container></div>
+          @if (suggestions()?.suggested_correspondents?.length > 0) {
-              @for (type of suggestions().suggested_document_types; track type) {
+            <div class="list-group-item text-uppercase text-muted small"><i-bs class="me-2" name="person"></i-bs><ng-container i18n>Correspondents</ng-container></div>
-                <button type="button" class="list-group-item list-group-item-action bg-light" (click)="addDocumentType.emit(type)">{{ type }}</button>
+            @for (correspondent of suggestions().suggested_correspondents; track correspondent) {
-              }
+              <button type="button" class="list-group-item list-group-item-action bg-light" (click)="addCorrespondent.emit(correspondent)">{{ correspondent }}</button>
            }
-            @if (suggestions()?.suggested_correspondents?.length > 0) {
+          }
-              <div class="list-group-item text-uppercase text-muted small"><i-bs class="me-2" name="person"></i-bs><ng-container i18n>Correspondents</ng-container></div>
+          @if (fieldSuggestions > 0) {
-              @for (correspondent of suggestions().suggested_correspondents; track correspondent) {
+            <div class="list-group-item text-muted fst-italic">
-                <button type="button" class="list-group-item list-group-item-action bg-light" (click)="addCorrespondent.emit(correspondent)">{{ correspondent }}</button>
+              <small class="text-muted small fst-italic" i18n>{fieldSuggestions, plural, =1 {1 suggestion available below} other {{{fieldSuggestions}} suggestions available below}}</small>
-              }
+            </div>
-            }
+          }
            @if (fieldSuggestions > 0) {
              <div class="list-group-item text-muted fst-italic">
                <small class="text-muted small fst-italic" i18n>{fieldSuggestions, plural, =1 {1 suggestion available below} other {{{fieldSuggestions}} suggestions available below}}</small>
              </div>
            }
          </div>
        </div>
      </div>
-    }
+    </div>
  </div>
  @if (aiEnabled()) {
@@ -251,6 +251,37 @@ describe('SuggestionsDropdownComponent', () => {
    expect(fixture.nativeElement.textContent).toContain('No novel suggestions')
  })
  it('should open ML date suggestions with AI disabled', () => {
    const getSuggestions = jest.spyOn(component.getSuggestions, 'emit')
    fixture.componentRef.setInput('aiEnabled', false)
    fixture.componentRef.setInput('fetchedSources', [SuggestionSource.ML])
    fixture.componentRef.setInput('suggestions', {
      dates: ['2026-01-04', '2026-02-01'],
    })
    fixture.componentRef.setInput('appliedCreated', '2026-01-04')
    fixture.detectChanges()
    const button = fixture.nativeElement.querySelector('button')
    expect(button.disabled).toBeFalsy()
    expect(button.querySelector('.badge').textContent.trim()).toBe('1')
    button.click()
    fixture.detectChanges()
    expect(component.dropdown.isOpen()).toBeTruthy()
    expect(fixture.nativeElement.textContent).toContain(
      '1 suggestion available below'
    )
    expect(getSuggestions).not.toHaveBeenCalled()
    expect(
      fixture.nativeElement.querySelector('button[title="Suggestion options"]')
    ).toBeNull()
    button.click()
    fixture.detectChanges()
    expect(component.dropdown.isOpen()).toBeFalsy()
  })
  it('should fetch unfetched sources and show existing suggestions', () => {
    jest.spyOn(component.getSuggestions, 'emit')
    fixture.componentRef.setInput('aiEnabled', true)
@@ -53,11 +53,7 @@ export class SuggestionsDropdownComponent {
  addCorrespondent: EventEmitter<string> = new EventEmitter()
  public clickSuggest(): void {
-    if (
+    if (this.disabled() || this.loading()) {
      this.disabled() ||
      this.loading() ||
      (this.suggestions() && !this.aiEnabled())
    ) {
      return
    }
@@ -25,6 +25,8 @@
            @if (displayFields().includes(field)) {
              <th
                scope="col"
                class="text-truncate"
                [title]="getColumnTitle(field)"
                [ngClass]="{
                  'd-none d-md-table-cell': i > 1,
                  'w-25': field === DisplayField.CREATED || field === DisplayField.ADDED
@@ -484,6 +484,22 @@ describe('FilterEditorComponent', () => {
    expect(component.textFilter).toBeNull()
  })
  it('should ingest title filter rules alongside a fulltext query with date created', () => {
    component.filterRules = [
      {
        rule_type: FILTER_SIMPLE_TITLE,
        value: 'foo',
      },
      {
        rule_type: FILTER_FULLTEXT_QUERY,
        value: 'created:[-1 week to now]',
      },
    ]
    expect(component.dateCreatedRelativeDate).toEqual(1) // RELATIVE_DATE_QUERYSTRINGS['-1 week to now']
    expect(component.textFilter).toEqual('foo')
    expect(component.textFilterTarget).toEqual('title') // TEXT_FILTER_TARGET_TITLE
  })
  it('should ingest text filter rules for fulltext query that include date added', () => {
    expect(component.dateAddedRelativeDate).toBeNull()
    component.filterRules = [
@@ -1845,7 +1861,7 @@ describe('FilterEditorComponent', () => {
    ])
  })
-  it('should carry over text filtering on date created with relative date', () => {
+  it('should keep text filtering separate from date created relative date', () => {
    component.textFilter = 'foo'
    const dateCreatedDropdown = fixture.debugElement.queryAll(
      By.directive(DatesDropdownComponent)
@@ -1855,14 +1871,18 @@ describe('FilterEditorComponent', () => {
    fixture.detectChanges()
    tick(400)
    expect(component.filterRules).toEqual([
      {
        rule_type: FILTER_SIMPLE_TEXT,
        value: 'foo',
      },
      {
        rule_type: FILTER_FULLTEXT_QUERY,
-        value: 'foo,created:[-1 week to now]',
+        value: 'created:[-1 week to now]',
      },
    ])
  })
-  it('should carry over text filtering once with created and added relative dates', () => {
+  it('should keep text filtering separate from created and added relative dates', () => {
    component.textFilter = 'foo'
    const datesDropdown = fixture.debugElement.query(
      By.directive(DatesDropdownComponent)
@@ -1873,14 +1893,18 @@ describe('FilterEditorComponent', () => {
    fixture.detectChanges()
    tick(400)
    expect(component.filterRules).toEqual([
      {
        rule_type: FILTER_SIMPLE_TEXT,
        value: 'foo',
      },
      {
        rule_type: FILTER_FULLTEXT_QUERY,
-        value: 'foo,created:[-1 week to now],added:[-1 month to now]',
+        value: 'created:[-1 week to now],added:[-1 month to now]',
      },
    ])
  })
-  it('should convert legacy title filters into full text query when adding a created relative date', () => {
+  it('should keep legacy title filters as a title search when adding a created relative date', () => {
    component.filterRules = [
      {
        rule_type: FILTER_TITLE,
@@ -1895,14 +1919,18 @@ describe('FilterEditorComponent', () => {
    fixture.detectChanges()
    tick(400)
    expect(component.filterRules).toEqual([
      {
        rule_type: FILTER_SIMPLE_TITLE,
        value: 'foo',
      },
      {
        rule_type: FILTER_FULLTEXT_QUERY,
-        value: 'foo,created:[-1 week to now]',
+        value: 'created:[-1 week to now]',
      },
    ])
  })
-  it('should convert simple title filters into full text query when adding a created relative date', () => {
+  it('should keep simple title filters as a title search when adding a created relative date', () => {
    component.filterRules = [
      {
        rule_type: FILTER_SIMPLE_TITLE,
@@ -1917,9 +1945,13 @@ describe('FilterEditorComponent', () => {
    fixture.detectChanges()
    tick(400)
    expect(component.filterRules).toEqual([
      {
        rule_type: FILTER_SIMPLE_TITLE,
        value: 'foo',
      },
      {
        rule_type: FILTER_FULLTEXT_QUERY,
-        value: 'foo,created:[-1 week to now]',
+        value: 'created:[-1 week to now]',
      },
    ])
  })
@@ -2005,7 +2037,7 @@ describe('FilterEditorComponent', () => {
    ])
  })
-  it('should carry over text filtering on date added with relative date', () => {
+  it('should keep text filtering separate from date added relative date', () => {
    component.textFilter = 'foo'
    const datesDropdown = fixture.debugElement.query(
      By.directive(DatesDropdownComponent)
@@ -2015,9 +2047,13 @@ describe('FilterEditorComponent', () => {
    fixture.detectChanges()
    tick(400)
    expect(component.filterRules).toEqual([
      {
        rule_type: FILTER_SIMPLE_TEXT,
        value: 'foo',
      },
      {
        rule_type: FILTER_FULLTEXT_QUERY,
-        value: 'foo,added:[-1 week to now]',
+        value: 'added:[-1 week to now]',
      },
    ])
  })
@@ -1083,23 +1083,6 @@ export class FilterEditorComponent
        (fr) => fr.rule_type == FILTER_FULLTEXT_QUERY
      )
      // if had a title / content search and added a relative date we need to carry it over...
      if (
        !existingRule &&
        this._textFilter?.length > 0 &&
        (this.textFilterTarget == TEXT_FILTER_TARGET_TITLE_CONTENT ||
          this.textFilterTarget == TEXT_FILTER_TARGET_TITLE)
      ) {
        existingRule = filterRules.find(
          (fr) =>
            fr.rule_type == FILTER_TITLE_CONTENT ||
            fr.rule_type == FILTER_SIMPLE_TEXT ||
            fr.rule_type == FILTER_TITLE ||
            fr.rule_type == FILTER_SIMPLE_TITLE
        )
        existingRule.rule_type = FILTER_FULLTEXT_QUERY
      }
      let queryArgs = existingRule?.value.split(',') ?? []
      if (this.dateCreatedRelativeDate !== null) {
        const rd = RELATIVE_DATE_QUERYSTRINGS.find(
@@ -11,7 +11,7 @@
      <div class="input-group input-group-sm w-auto d-none d-md-flex">
        <label class="input-group-text bg-transparent border-0" for="managementPageSize" i18n>Show:</label>
      </div>
-      <div class="input-group input-group-sm w-auto me-3">
+      <div class="input-group input-group-sm w-auto">
        <select id="managementPageSize" class="form-select form-select-sm small" [(ngModel)]="pageSize">
          <option [ngValue]="25">25</option>
          <option [ngValue]="50">50</option>
@@ -19,7 +19,9 @@
        </select>
        <span class="input-group-text text-muted d-none d-md-flex" i18n>per page</span>
      </div>
-      <ngb-pagination [pageSize]="pageSize" [collectionSize]="collectionSize()" [page]="page()" [maxSize]="5" (pageChange)="page.set($event); reloadData()" size="sm" aria-label="Pagination"></ngb-pagination>
+      @if (collectionSize() > pageSize) {
        <ngb-pagination [pageSize]="pageSize" [collectionSize]="collectionSize()" [page]="page()" [maxSize]="5" (pageChange)="page.set($event); reloadData()" class="ms-3" size="sm" aria-label="Pagination"></ngb-pagination>
      }
    </div>
  </div>
@@ -70,7 +72,7 @@
        }
      </div>
    }
-    @if (collectionSize() > 20) {
+    @if (collectionSize() > pageSize) {
      <ngb-pagination class="ms-auto" [pageSize]="pageSize" [collectionSize]="collectionSize()" [page]="page()" [maxSize]="5" (pageChange)="page.set($event); reloadData()" size="sm" aria-label="Pagination"></ngb-pagination>
    }
  </div>
@@ -93,15 +93,17 @@
        [disabled]="selectedMailIds().size === 0"
        (confirm)="deleteSelected()">
      </pngx-confirm-button>
-      <div class="ms-auto">
+      @if (processedMails().length > 50) {
-        <ngb-pagination
+        <div class="ms-auto">
-          [collectionSize]="processedMails().length"
+          <ngb-pagination
-          [(page)]="page"
+            [collectionSize]="processedMails().length"
-          [pageSize]="50"
+            [(page)]="page"
-          [maxSize]="5"
+            [pageSize]="50"
-          (pageChange)="loadProcessedMails()">
+            [maxSize]="5"
-        </ngb-pagination>
+            (pageChange)="loadProcessedMails()">
-      </div>
+          </ngb-pagination>
        </div>
      }
    </div>
  }
 </div>
@@ -1,90 +0,0 @@
 import { MarkdownPipe } from './markdown.pipe'
 describe('MarkdownPipe', () => {
  const pipe = new MarkdownPipe()
  it('should return empty string for empty input', () => {
    expect(pipe.transform(null)).toEqual('')
    expect(pipe.transform(undefined)).toEqual('')
    expect(pipe.transform('')).toEqual('')
  })
  it('should render basic markdown', () => {
    const html = pipe.transform(
      '**bold** _em_ `code`\n\n- one\n- two\n\n| a | b |\n|---|---|\n| 1 | 2 |'
    )
    expect(html).toContain('<strong>bold</strong>')
    expect(html).toContain('<em>em</em>')
    expect(html).toContain('<code>code</code>')
    expect(html).toContain('<li>one</li>')
    expect(html).toContain('<table>')
  })
  it('should escape raw html', () => {
    const html = pipe.transform(
      'hi <img src=x onerror="alert(1)"> <b>x</b>\n\n<script>alert(1)</script>'
    )
    expect(html).not.toContain('<img')
    expect(html).not.toContain('<script')
    expect(html).not.toContain('<b>')
    expect(html).toContain('&lt;script&gt;')
  })
  it('should not render images', () => {
    const html = pipe.transform(
      '![secret](https://otherdomain.example/x.png?d=1)'
    )
    expect(html).not.toContain('<img')
    expect(html).not.toContain('otherdomain.example')
    expect(html).toContain('secret')
  })
  it('should render safe links with target and rel', () => {
    const html = pipe.transform('[docs](https://docs.paperless-ngx.com "Docs")')
    expect(html).toContain(
      '<a target="_blank" rel="noopener noreferrer nofollow" href="https://docs.paperless-ngx.com" title="Docs">docs</a>'
    )
    expect(pipe.transform('[mail](mailto:a@b.c)')).toContain(
      'href="mailto:a@b.c"'
    )
  })
  it('should drop unsafe or relative links but keep their text', () => {
    for (const href of [
      'javascript:alert(1)',
      'JaVaScRiPt:alert(1)',
      'data:text/html,<script>alert(1)</script>',
      'vbscript:msgbox',
      '/api/documents/',
    ]) {
      const html = pipe.transform(`[click](${href})`)
      expect(html).not.toContain('<a')
      expect(html).toContain('click')
    }
  })
  it('should show the actual hostname beside web links with misleading labels', () => {
    for (const protocol of ['http', 'https']) {
      const html = pipe.transform(
        `[docs.paperless-ngx.com](${protocol}://docs.paperless-ngx.com@otherdomain.example/path?secret=1)`
      )
      expect(html).toContain(
        '</a> <span class="text-muted small">(otherdomain.example)</span>'
      )
      expect(html).not.toContain('(docs.paperless-ngx.com)')
    }
  })
  it('should omit the hostname label for mailto links', () => {
    expect(pipe.transform('[mail](mailto:a@b.c)')).toBe(
      '<p><a target="_blank" rel="noopener noreferrer nofollow" href="mailto:a@b.c">mail</a></p>\n'
    )
  })
  it('should escape link titles', () => {
    const html = pipe.transform(
      '[x](https://a.example "a\\" onmouseover=\\"1")'
    )
    expect(html).not.toMatch(/"\s*onmouseover=/)
  })
 })
@@ -1,52 +0,0 @@
 import { Pipe, PipeTransform } from '@angular/core'
 import { Marked, Renderer, Tokens } from 'marked'
 const ALLOWED_LINK_PROTOCOLS = new Set(['http:', 'https:', 'mailto:'])
 function allowedUrl(href: string): URL | null {
  try {
    const url = new URL(href)
    return ALLOWED_LINK_PROTOCOLS.has(url.protocol) ? url : null
  } catch {
    return null
  }
 }
 // Treat chat content as untrusted: no raw HTML, no images, and only
 // absolute links. All escaping is done by marked's default renderer, and
 // Angular's sanitizer runs on top of this as well.
 const renderer: Partial<Renderer> = {
  html(this: Renderer, { raw, text }: Tokens.HTML | Tokens.Tag): string {
    return this.text({ type: 'text', raw, text })
  },
  image(this: Renderer, { raw, text }: Tokens.Image): string {
    return this.text({ type: 'text', raw, text })
  },
  link(this: Renderer, token: Tokens.Link): string {
    const url = allowedUrl(token.href)
    if (!url) return this.parser.parseInline(token.tokens)
    const anchor = Renderer.prototype.link
      .call(this, token)
      .replace('<a ', '<a target="_blank" rel="noopener noreferrer nofollow" ')
    if (!url.hostname) return anchor
    const hostname = this.text({ type: 'text', raw: '', text: url.hostname })
    return `${anchor} <span class="text-muted small">(${hostname})</span>`
  },
 }
 const markdown = new Marked({
  async: false,
  gfm: true,
  breaks: true,
  renderer,
 })
@Pipe({
  name: 'markdown',
 })
 export class MarkdownPipe implements PipeTransform {
  transform(value: string | null | undefined): string {
    if (!value) return ''
    return markdown.parse(value) as string
  }
 }
@@ -8,7 +8,7 @@ export const environment = {
  apiVersion: '10', // match src/paperless/settings.py
  appTitle: DEFAULT_APP_TITLE,
  tag: 'prod',
-  version: '3.2.1',
+  version: '3.3.3',
  webSocketHost: window.location.host,
  webSocketProtocol: window.location.protocol == 'https:' ? 'wss:' : 'ws:',
  webSocketBaseUrl: base_url.pathname + 'ws/',
@@ -32,7 +32,6 @@ import {
  arrowDownUp,
  arrowLeft,
  arrowRepeat,
  arrowReturnLeft,
  arrowRight,
  arrowRightShort,
  arrowUpRight,
@@ -42,6 +41,7 @@ import {
  bell,
  bodyText,
  bookmark,
  boxArrowInRight,
  boxArrowUp,
  boxArrowUpRight,
  boxes,
@@ -284,7 +284,6 @@ const icons = {
  arrowDownUp,
  arrowLeft,
  arrowRepeat,
  arrowReturnLeft,
  arrowRight,
  arrowRightShort,
  arrowUpRight,
@@ -295,6 +294,7 @@ const icons = {
  braces,
  bodyText,
  bookmark,
  boxArrowInRight,
  boxArrowUp,
  boxArrowUpRight,
  boxes,
@@ -54,6 +54,10 @@ def _predict_with_threshold(classifier, X, threshold: float) -> int | None:
    cutoff so that uncertain predictions are discarded rather than assigned.
    """
    probas = classifier.predict_proba(X)[0]
    if len(classifier.classes_) == 1:
        # scikit-learn treats a single-class fit as binary, so predict_proba
        # returns [1 - p, p] for one class. Column 0 is the real class.
        probas = probas[:1]
    best_idx = int(probas.argmax())
    best_class = int(classifier.classes_[best_idx])
@@ -130,12 +130,14 @@ class DocumentMetadataOverrides:
            get_users_with_perms(
                doc,
                only_with_perms_in=["view_document"],
                with_group_users=False,
            ).values_list("id", flat=True),
        )
        overrides.change_users = list(
            get_users_with_perms(
                doc,
                only_with_perms_in=["change_document"],
                with_group_users=False,
            ).values_list("id", flat=True),
        )
        overrides.custom_fields = {
@@ -50,6 +50,7 @@ from documents.models import ShareLink
 from documents.models import ShareLinkBundle
 from documents.models import StoragePath
 from documents.models import Tag
 from documents.permissions import annotate_authorizing_fields
 from documents.permissions import permitted_document_ids
 from documents.permissions import permitted_object_ids
 from documents.versioning import annotate_effective_content
@@ -1075,6 +1076,9 @@ class PermittedObjectsFilter(BaseFilterBackend):
    include_granted: bool = True
    perm_codename: str | None = None
    # A self-referencing foreign key whose target authorizes a row, so a row is
    # judged by its parent's owner and grants (``Document.root_document``).
    parent_field: str | None = None
    def filter_queryset(self, request, queryset, view):
        # Before the superuser and owner-only paths, neither of which consults
@@ -1086,11 +1090,23 @@ class PermittedObjectsFilter(BaseFilterBackend):
        if request.user.is_superuser:
            return queryset
        if not self.include_granted:
-            return queryset.filter(Q(owner=request.user) | Q(owner__isnull=True))
+            owner_field = "owner"
            if self.parent_field is not None:
                queryset = annotate_authorizing_fields(queryset, self.parent_field)
                owner_field = "authorizing_owner"
            return queryset.filter(
                Q(**{owner_field: request.user.pk})
                | Q(**{f"{owner_field}__isnull": True}),
            )
        model = queryset.model
        perm = self.perm_codename or f"view_{model._meta.model_name}"
        return queryset.filter(
-            id__in=permitted_object_ids(request.user, model, perm),
+            id__in=permitted_object_ids(
                request.user,
                model,
                perm,
                parent_field=self.parent_field,
            ),
        )
Author	SHA1	Message	Date
shamoon	31caf01ae5	Bump version to 3.3.3	2026-10-19 10:06:39 -07:00
shamoon	e756f5985f	Merge branch 'dev'	2026-10-19 10:05:59 -07:00
github-actions[bot]andCrowdin Bot	ce1dee7549	New Crowdin translations by GitHub Action (#14474 ) Co-authored-by: Crowdin Bot <support+bot@crowdin.com>	2026-10-19 16:58:46 +00:00
shamoon	fd187cd09a	Fix: fix global search input layout shifting (#14491 )	2026-10-19 09:39:26 -07:00
GitHub Actions	814b208280	Auto translate strings	2026-10-19 15:41:29 +00:00
shamoon	11c32d352e	Fix: dont include doc content on global search results (#14488 )	2026-10-19 08:40:05 -07:00
GitHub Actions	c21deaa452	Auto translate strings	2026-10-19 06:20:40 +00:00
shamoon	c47766121d	Fix: remove some redundant pagers (#14487 )	2026-10-18 23:19:24 -07:00
GitHub Actions	979bcd3896	Auto translate strings	2026-10-19 06:05:02 +00:00
shamoon	d450f03d5f	Fix: prevent weird wrapping of dashboard widget column titles (#14486 )	2026-10-18 23:03:43 -07:00
GitHub Actions	730c2d8688	Auto translate strings	2026-10-19 03:23:47 +00:00
shamoon	b1738c85d7	Fix: dont paginate 'all' tasks view across sections (#14484 )	2026-10-18 20:22:18 -07:00
Trenton H	a8b835fcd0	Fix: use float parsing for importer manifest records with a passphrase (#14483 )	2026-10-18 15:16:13 -07:00
GitHub Actions	41498113d3	Auto translate strings	2026-10-18 14:29:34 +00:00
Jaime Velaz Dominguez Claude Opus 5.5 shamoon	309a4b004d	Fix: respect subpath in logout, share link and auto-login redirects (#14476 ) --------- Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>	2026-10-18 14:28:15 +00:00
GitHub Actions	961f7fd672	Auto translate strings	2026-10-18 00:30:41 +00:00
shamoon	de94657e17	Fix: dont tie suggestions button to ai enabled any more (#14478 )	2026-10-17 17:29:29 -07:00
Trenton H	0cb2cdbfdd	Fix: handle single-class classifier in threshold prediction (#14471 ) (#14473 ) scikit-learn treats a single-class fit as binary, so predict_proba returns [1 - p, p] for one class and argmax could index past classes_. Use only column 0, the real class, so the confidence threshold still applies.	2026-10-16 10:47:58 -07:00
GitHub Actions	1f3d451a3a	Auto translate strings	2026-10-16 17:12:50 +00:00
Trenton H	183cfd2da4	Fix: keep counter and extension when shortening long public filenames (#14472 ) get_public_filename relied on sanitize_filename to truncate, which cuts from the end and so dropped the counter and extension of long titles. Multi-byte titles could also exceed the 255 byte filesystem limit. Shorten the title by UTF-8 bytes before appending the counter and extension. The exporter reserves room for its longer derived thumbnail and archive suffixes.	2026-10-16 10:11:34 -07:00
github-actions[bot]	15e9a7a017	Changelog v3.3.2 - GHA (#14468 ) Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>	2026-10-15 23:21:41 -07:00
shamoon	04a927c25f	Bump version to 3.3.2	2026-10-15 22:52:43 -07:00
shamoon	30a24ee02e	Chore: disable deprecated ts-jest isolation override	2026-10-15 22:51:55 -07:00
github-actions[bot]andCrowdin Bot	1943c99b27	New Crowdin translations by GitHub Action (#14449 ) Co-authored-by: Crowdin Bot <support+bot@crowdin.com>	2026-10-15 22:51:00 -07:00
shamoon	8b26ecafb6	Fix: prevent ownerless docs leaking others in to LLM prompts	2026-10-15 22:42:34 -07:00
Trenton H	d4a57204eb	Fix: copy only direct user grants in DocumentMetadataOverrides.from_document (#14452 ) get_users_with_perms includes group members by default, so PDF actions such as merge and split gave them direct grants on the new documents, which outlived their group membership.	2026-10-15 15:11:28 -07:00
dependabot[bot]	c50c6f5517	Chore(deps): Bump filelock from 3.32.6 to 4.0.12 (#14336 ) Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.32.6 to 4.0.12. - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/py-filelock/compare/3.32.6...4.0.12) --- updated-dependencies: - dependency-name: filelock dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-14 16:11:12 -07:00
GitHub Actions	34a6c718fa	Auto translate strings	2026-10-14 15:18:54 +00:00
shamoon	14aaa42777	Fix: support combined text/query searches (#14443 )	2026-10-14 08:17:22 -07:00
shamoon	c86c822bc7	Fix ai auto-close message	2026-10-13 12:15:28 -07:00
dependabot[bot]	b23b118a49	Chore(deps): Bump the uv group across 1 directory with 3 updates (#14418 ) Bumps the uv group with 3 updates in the / directory: [banks](https://github.com/masci/banks), [fsspec](https://github.com/fsspec/filesystem_spec) and [multidict](https://github.com/aio-libs/multidict). Updates `banks` from 2.4.5 to 2.5.1 - [Release notes](https://github.com/masci/banks/releases) - [Commits](https://github.com/masci/banks/compare/v2.4.5...v2.5.1) Updates `fsspec` from 2026.1.0 to 2026.6.0 - [Commits](https://github.com/fsspec/filesystem_spec/compare/2026.1.0...2026.6.0) Updates `multidict` from 6.7.1 to 6.9.1 - [Release notes](https://github.com/aio-libs/multidict/releases) - [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst) - [Commits](https://github.com/aio-libs/multidict/compare/v6.7.1...v6.9.1) --- updated-dependencies: - dependency-name: banks dependency-version: 2.5.1 dependency-type: indirect - dependency-name: fsspec dependency-version: 2026.6.0 dependency-type: indirect - dependency-name: multidict dependency-version: 6.9.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-13 17:25:40 +00:00
Trenton H	6e717817c6	Fix: make exporter derived file names unique when originals differ only by extension (#14429 )	2026-10-12 15:14:08 -07:00
shamoon	3e0fa73771	Chore: adjust issue auto-triage	2026-10-12 14:16:45 -07:00
github-actions[bot]andshamoon	2b00cf6a95	Documentation: Add v3.3.1 changelog (#14427 ) * Changelog v3.3.1 - GHA * Update changelog for paperless-ngx 3.3.1 Removed MARIADB_HOST documentation from MariaDB compose files. --------- Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>	2026-10-12 13:22:46 -07:00
shamoon	c4d1b0c732	Bump version to 3.3.1	2026-10-12 13:01:03 -07:00
shamoon	333cbf0ae6	Merge branch 'dev'	2026-10-12 13:00:15 -07:00
github-actions[bot]andCrowdin Bot	49a298894e	New Crowdin translations by GitHub Action (#14368 ) Co-authored-by: Crowdin Bot <support+bot@crowdin.com>	2026-10-12 12:59:46 -07:00
GitHub Actions	551ebad6f1	Auto translate strings	2026-10-12 19:13:03 +00:00
Trenton H	4171ecf166	Chore: share the authorizing owner rule between the id sets and the trash filter (#14425 ) The trash list needs to show a version to whoever owns its root document, but it deliberately shows only owned and unowned documents and ignores explicit shares, so it cannot use permitted_object_ids. #14384 gave it its own filter_queryset with a hand-built condition through the root, which describes the same rule as the annotations in permitted_object_ids a second time. Move those annotations into annotate_authorizing_fields. PermittedObjectsFilter gains a parent_field attribute that its owner-only and granted paths both use, and the trash filter shrinks to setting include_granted and parent_field.	2026-10-12 12:11:42 -07:00
GitHub Actions	8289dd0bae	Auto translate strings	2026-10-12 18:12:14 +00:00
Trenton H	b195423f1d	Fix: use a root document's effective content for the LLM index and pr… (#14423 ) * Fix: use a root document's effective content for the LLM index and prompts The search index and the document views use the newest version's content as a root document's content, but everything the LLM side reads used the root's own content: the text embedded in the LLM index, the content in the classification prompt, the context blocks from similar documents, and the text that is searched for similar documents. After a document was replaced by a new version the LLM kept answering from the old text. Read get_effective_content() in those four places. The index update annotates the content in the query like the search index does, and the similar-document lookup annotates it for the documents it fetches, so no query is made per document. Entries already in the LLM index keep the old text until the document next changes or the index is rebuilt. * Chore: test the LLM query text and bulk annotation use effective content * Removes the query count testing. It's flakey from local to CI and workers, doesn't really add much imo	2026-10-12 11:10:50 -07:00
Trenton H	9f2f809131	Fix: index document versions as their root document (#14422 ) * Fix: index document versions as their root document The search index and the LLM index hold root documents only, a root being indexed with its newest version's content. Every write path therefore had to remember to hand them the root. Several did not. WriteBatch.add_or_update, WriteBatch.add_or_update_ids and llm_index_add_or_update_document now resolve a version to its root themselves. The reindex command and update_llm_index only walk root documents, and an incremental LLM update is scoped to the roots of the given ids through versioning.root_document_ids, which add_or_update_ids shares. more_like_id returns the root's id for a version. The reprocess task no longer picks the root for the indexes and only still clears the caches of both documents. * Fix: rebuild old search indexes and look versions up as their root for similar documents An index built before versions were indexed as their root can still hold version entries under their own id and metadata, and only a rebuild clears them. Bump the schema version so the index is rebuilt on upgrade. more_like_this_ids looked the given id up in the index as is, so asking for documents like a version, as the AI suggestions endpoint can, silently found nothing. It now looks the root up instead.	2026-10-12 11:10:50 -07:00
GitHub Actions	96535991a3	Auto translate strings	2026-10-12 17:18:18 +00:00
Trenton H	c2deb69ac5	Fix: authorize document versions by their root in the single-object permission check (#14421 ) * Fix: authorize document versions by their root in the single-object permission check has_perms_owner_aware judged a document by its own owner and grants, so each endpoint that fetches a document itself had to remember to map a version to its root document first, and one that forgot, like the more-like-this search filter, authorized by a stale version owner. The check now maps a Document to its root before looking at the owner and the guardian grants, matching what permitted_document_ids does for id sets. The eight call sites that mapped the document themselves pass it straight through. The DRF object permission class needs no change because the document viewset only ever serves root documents.	2026-10-12 17:17:00 +00:00
GitHub Actions	070f614929	Auto translate strings	2026-10-12 17:06:18 +00:00
Trenton H	6f496f741b	Chore: New helper for JSON parsing during settings, to provide a better error message to users (#14419 )	2026-10-12 17:04:56 +00:00
Sven Lankes	1fb463b55c	Chore: silence gotenberg startup warning (#14405 )	2026-10-12 16:54:47 +00:00
shamoon	9a136ecb62	Chore: drop PR size labeling	2026-10-12 09:41:48 -07:00
shamoon	192ddbe45e	Documentation: tweak demo hosting attribution	2026-10-12 09:18:19 -07:00
shamoon	aac5e49034	Merge branch 'main' into dev	2026-10-12 09:13:04 -07:00
shamoon	716d310eb3	Documentation: credit Fyra Stack for hosting the demo (#14399 )	2026-10-12 09:10:40 -07:00
dependabot[bot]	71d2edb055	Chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates (#14417 ) Bumps the npm_and_yarn group with 2 updates in the /src/paperless_mail/templates directory: [source-map-js](https://github.com/7rulnik/source-map-js) and [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser). Updates `source-map-js` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2) Removes `postcss-selector-parser` --- updated-dependencies: - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss-selector-parser dependency-version: dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-12 06:52:11 -07:00
shamoon	f8876c55e3	Documentation: remove MARIADB_HOST from MariaDB compose files (#14378 )	2026-10-07 07:32:37 -07:00
Trenton H	e5b215f9d3	Chore: Updates the troubleshooting with 2 common database collation things (#14370 )	2026-10-06 11:02:42 -07:00
github-actions[bot]andshamoon	94f10b8622	Documentation: Add v3.3.0 changelog (#14362 ) Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>	2026-10-05 21:14:19 -07:00
shamoon	6f7ed1d4a7	Bump version to 3.3.0	2026-10-05 20:34:24 -07:00
shamoon	0428bf6955	Merge branch 'dev'	2026-10-05 20:33:36 -07:00
shamoon	c63afb47b2	Documentation: correct duplicates info (#14243 )	2026-09-23 08:27:18 -07:00
		`@@ -0,0 +1 @@`
							<svg xmlns="http://www.w3.org/2000/svg" width="666.667" height="666.667" viewBox="0 0 666.667 666.667"><g stroke-width="1.333"><path fill="#fef400" d="m332.66668 418.66668h-84.66667v-85.33334-85.33333h84.66667 84.66667v-85.33334-85.333334h85.33333 85.33334v85.333334 85.33334h-85.33334-85.33333v85.33333 85.33334z"/><path fill="#fe6565" d="m248.00001 589.33335h-170.666674v-170.66667-170.66667h85.333334 85.33334v-85.33334-85.333334h84.66667 84.66667v85.333334 85.33334h85.33333 85.33334v85.33333 85.33334h-84.66667-84.66667v85.33334 85.33333zm84.66667-170.66667h84.66667v-85.33334-85.33333h-84.66667-84.66667v85.33333 85.33334z"/></g></svg>