Mattermost legacy self-hosted changelog 

Mattermost is an open source platform for secure collaboration across the entire software development lifecycle. This changelog summarizes updates for all self-hosted versions of Mattermost prior to v6.0.

Latest Mattermost releases 

See changelog in progress for the upcoming release, and see the Mattermost Self-Hosted Changelog for details on the latest self-hosted versions of Mattermost including the most recent Extended Support Release (ESR).

Release v5.39 - Quality Release 

  • v5.39.3, released 2021-12-17

    • Mattermost v5.39.3 contains medium level security fixes. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Added a general performance fix for loading the web application and typing.

    • Improved performance while typing by moving some autocomplete layout calculations.

    • Improved performance by reducing DOM usage during render.

    • Removed real-time updates of a couple of features to prevent overloading servers on user updates. The “This channel contains guests” indicator and the number of timezones displayed when notifying members of a group will only be updated on channel change now.

    • Fixed an issue where v5.39 reported an incorrect mmctl version.

  • v5.39.2, released 2021-11-15

  • v5.39.1, released 2021-10-27

    • Mattermost v5.39.1 contains a medium level security fix. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed an issue with fetching threads upon websocket reconnection.

    • Fixed a race condition in telemetry IDs on High Availability servers MM-39343.

  • 5.39.0, released 2021-09-16

    • Original 5.39 release

Mattermost v5.39.0 contains a low level security fix. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Improvements 

User Interface (UI) 

  • Updated in-product help documentation to fix broken links and to correct outdated information.

  • Italian, Polish, Korean, and Ukrainian languages have been downgraded to alpha. Korean and Ukrainian are no longer actively maintained.

Bug Fixes 

  • Fixed a possible panic during license validation.

  • Fixed an issue with loading of emojis in message attachment titles.

  • Fixed an issue where the timestamp in deleted messages was not correctly positioned.

  • Changed the whitespace in the refresh bar so that it always displays to the user.

  • Fixed an issue where email invites were not sent when clicking the Next button during onboarding.

  • Fixed an issue where clicking “View Message” in an email did not navigate to the post or remember the user’s preference to “View in App”.

  • Fixed an issue with the detection of certain collapsible images.

  • Prevented users from having the unreads filter enabled when the button to toggle it was not shown.

  • Fixed an issue where Mattermost’s shortcut key CTRL+SHIFT+A to open the Account Settings clashed with Chrome’s CTRL+SHIFT+A that opens a “Search Tabs” pop-up.

  • Fixed a crash when markdown images were present on the message attachments and embedded bindings.

  • Fixed an issue that kept message attachment fields unaligned.

  • Fixed an issue with right-hand side SuggestionList positioning.

  • Fixed an issue where Mattermost panicked on docx files uploaded with .doc extension.

  • Fixed a bug with the auto-responder where it would incorrectly calculate the time interval and never send the message.

  • Fixed a decoding problem for OpenID integration. The requests are now decoded against RawURLEncoding.

  • Fixed various bugs for the Collapsed Reply Threads (Beta) feature, including:

    • Fixed an issue where a gap appeared between the first and second consecutive message from the same user.

    • Fixed an issue where the thread unread state would not update on websocket reconnect.

    • Fixed an issue where the main channel view root post timestamp added a horizontal scrollbar on hover.

    • The ThreadAutoFollow setting must now be enabled in order to enable CollapsedThreads.

    • Fixed issue with users re-following a previously unfollowed thread when other users replied to the thread.

    • Clicking code blocks and in-line code no longer open the associated thread.

    • Fixed an issue where two scrollbars appeared in the Threads view on high resolution monitors using zoom.

    • Fixed an issue where the quick channel switcher mention counts did not follow collapsed threads logic.

    • Fixed an issue where threads started by webhooks/integrations were being auto-followed by the webhook/integration creator when collapsed threads was enabled.

    • Fixed an issue where re-connecting to the websocket caused thread mentions to be cleared in the user interface with collapsed reply threads enabled.

    • Fixed an issue where the New messages line and date separators overlapped text in a thread.

Go Version 

  • v5.39 is built with Go 1.16.7.

Upcoming Deprecations in Mattermost v6.0 

The following deprecations are planned for the Mattermost v6.0 release, which is scheduled for 2021/10/13. This list is subject to change prior to the release.

  1. Legacy Command Line Tools. All commands have been fully replaced by mmctl and new commands have been added over the last few months, making this tool a full and robust replacement.

  2. Slack Import via the web app. The Slack import tool accessible via the Team Setting menu is being replaced by the mmetl tool that is much more comprehensive for the types of data it can assist in uploading.

  3. MySQL versions below 5.7.7. Minimum support will now be for 5.7.12. This version introduced a native JSON data type that lets us improve performance and scalability of several database fields (most notably Users and Posts props). Additionally, version 5.6 (our current minimum version) reached EOL in February 2021.

  4. Elasticsearch 5 and 6 - versions 5.x reached EOL in March of 2019, and versions 6.x reached EOL in November 2020. Our minimal supported version with Mattermost v6.0 will be Elasticsearch version 7.0.

  5. Windows 7 reached EOL in January 2020. We will no longer provide support for Mattermost Desktop App issues on Windows 7.

  6. DisableLegacyMFAEndpoint configuration setting.

  7. ExperimentalTimezone configuration setting. The config setting will be removed and the feature will be promoted to general availability.

  8. All legacy channel sidebar experimental configuration settings. We encourage customers using these settings to upgrade to v5.32 or later to access custom, collapsible channel categories among many other channel organization features. The settings being deprecated include:

  9. All configuration settings previously marked as “Deprecated”.

  10. Changes to mattermost-server/model for naming consistency.

Known Issues 

  • Collapsed Reply Threads is currently in beta. Before enabling the feature, please ensure you are well versed in the known issues, particularly relating to database resource requirements and server performance implications. If you cannot easily scale up your database size, or are running the Mattermost application server and database server on the same machine, we recommended waiting to enable Collapsed Reply Threads until it is promoted to general availability in Q2 2022. Learn more about these performance considerations here.

  • Experimental timezones and custom statuses can cause an increase in CPU usage and database connections for servers with an E20 license. A current workaround is to disable custom statuses or to disable experimental timezones.

  • Adding an at-mention at the start of a post draft and pressing the leftwards or rightwards arrow can clear the post draft and the undo history MM-33823.

  • Pinned posts are no longer highlighted MM-34870.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.38 - Feature Release 

  • v5.38.4, released 2021-11-15

  • v5.38.3, released 2021-10-27

  • v5.38.2, released 2021-08-26

    • Upgraded Go version to 1.16.7 to fix an application crash issue.

    • Fixed an issue where mmctl config reload command was missing local-mode server-side implementation. MM-38082

  • v5.38.1, released 2021-08-18

    • Fixed an issue where Playbooks v1.16.0 could not be installed as a pre-packaged plugin MM-37928.

  • v5.38.0, released 2021-08-16

    • Original 5.38.0 release

Mattermost v5.38.0 contains low to medium level security fixes. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Deprecations 

  • The “config watcher” (the mechanism that automatically reloads the config.json file) has been removed in favor of the mmctl config reload command, which must be run to apply configuration changes after they are made on disk. This change improves configuration performance and robustness.

Important Upgrade Notes 

  • v5.38 adds fixes for some of the incorrect mention counts and unreads around threads and channels since the introduction of Collapsed Reply Threads (Beta). This fix is done through a SQL migration, and it may take several minutes to complete for large databases. The fixCRTChannelMembershipCounts fix takes 1 minute and 20 seconds for a database containing approximately 4 million channel memberships and about 130,000 channels. The fixCRTThreadCountsAndUnreads fix takes about 3 minutes and 30 seconds for a database containing 56367 threads, 124587 thread memberships, and 220801 channel memberships. These are on MySQL v5.6.51.

  • Focalboard v0.8.2 (released with Mattermost v5.38.0) requires Mattermost v5.37+ due to the new database connection system.

IMPORTANT: If you upgrade from a release earlier than v5.37, please read the other Important Upgrade Notes.

Highlights 

Granular Data Retention Policies (Enterprise E20) 

  • A data_retention type job can now be run even if the global policy is disabled. The granular (i.e. team and channel-specific) policies will be executed when the data retention job is run. Please note there is a known issue where deleted posts get displayed in channels without new activity after the retention job is run. This issue is tracked with this ticket.

Enhanced User Onboarding Experience 

  • To help new users get started with Mattermost, new Getting Started steps have been added to the onboarding experience. These steps help users to complete their profile, name their teams, configure desktop notifications, and invite others to join their team. Additionally, once the onboarding is complete, users are provided with helpful tips to get started with channels, plugins, and more.

Playbooks Updates 

  • Incident Collaboration was rebranded to Playbooks. Also the channel right-hand sidebar is redesigned, our own playbooks are shared as templates, and more triggers and actions were added.

Focalboard Updates 

  • Added created-by property and improved performance with shared database connections. Focalboard 0.8.2 requires Mattermost v5.37+ due to a new database connection system.

Improvements 

User Interface (UI) 

  • Upgraded German language back to an official language.

  • Markdown formatting is now stripped from push notifications.

  • Enabled the Set Status button if the custom status hasn’t changed from currently set status.

  • Improved default rendering of images inserted via the GIF picker.

  • Small text changes were added to Direct and Group Message menus: Mute channel and Edit Channel Header now reads as Mute Conversation and Edit Conversation Header.

Performance 

  • Improved performance of components that show reactions on posts.

  • Improved performance of certain components when viewing non-Direct Message channels.

  • Added minor improvements to performance of messages posted in the right-hand side.

  • Improved typing performance in affected environments by reducing the frequency in which drafts are saved.

Integrations 

  • Added icons to apps in the Marketplace.

  • Apps can now add arbitrary markdown in between fields on forms.

  • Added support for markdown in apps forms, interactive dialogs field descriptions, errors, and slash commands.

  • Improved user and channel selector for app commands.

  • Added support for react-intl and <Timestamp/> usage in plugins.

  • Added plugin API methods for user access tokens and OAuth apps.

Administration 

  • Added a new feature to archive and unarchive teams through System Console > Teams.

Bug Fixes 

  • Fixed an issue where the “Find channel” channel switcher text overflowed beyond the button for some languages.

  • Fixed an issue where inter-plugin requests without a body didn’t work.

  • Fixed an issue with opening a dialog from an interactive message when returning an empty response.

  • Fixed an issue where the Add Members modal was incorrectly themed on the Mattermost Dark Theme.

  • Fixed a panic in the getPrevTrialLicense API request when loading the System Console on Team Edition.

  • Fixed an issue where admin advisor notifications were accidentally re-enabled in a previous release.

  • Fixed various bugs for the Collapsed Reply Threads (Beta) feature, including:

    • Fixed an issue where an error occurred while following a thread with no replies.

    • Fixed an issue where reply_count of 0 was always returned for GET single Post on /posts/<postid> API.

    • Fixed an issue where following a single message returned a status 500.

    • Fixed an issue where when replying in a thread after unfollowing it, the thread was not auto-followed again.

    • Fixed an issue where when enabling Collapsed Reply Threads, channels that had no new activity were showing as unread.

    • Fixed an issue with thread unreads when the feature was enabled by a user.

    • Fixed an issue where self replies were marking threads as unread.

    • Unread threads are now correctly displayed on app load for teams in the sidebar when Collapsed Reply Threads feature is enabled.

    • Fixed an issue where “Thread” in the thread viewer was displayed vertically in some languages.

    • Fixed an issue where opening global threads containing a root post markdown image crashed the app.

    • Fixed an issue where the app crashed when switching to the Threads view after leaving a channel.

    • Fixed an issue where replying to a thread from the global threads screen marked the channel as read.

    • The Mark all as unread button is now no longer disabled for Collapsed Reply Threads.

    • Fixed root posts not being shown as followed for the post creator after receiving the first reply that affected servers with Collapsed Reply Threads enabled and database read replicas configured.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under PluginSettings in config.json:

    • Added ChimeraOAuthProxyURL to allow specifying Chimera URL that can be used by plugins to connect with pre-created OAuth applications.

  • The config setting EnableReliableWebSockets now defaults to true.

API Changes 

  • Added CreateChannelSidebarCategory, GetChannelSidebarCategories and UpdateChannelSidebarCategories to the Plugin API.

  • Add a new Plugin API method that allows files to register dropdown menu actions.

Go Version 

  • v5.38 is built with Go 1.16.0.

Open Source Components 

  • Added classnames and react-window to https://github.com/mattermost/mattermost-webapp/.

  • Added @react-native-community/datetimepicker, array.prototype.flat, and base-64 to https://github.com/mattermost/mattermost-mobile/.

Upcoming Deprecations in Mattermost v6.0 

The following deprecations are planned for the Mattermost v6.0 release, which is scheduled for 2021/10/15. This list is subject to change prior to the release.

  1. Legacy Command Line Tools. All commands have been fully replaced by mmctl and new commands have been added over the last few months, making this tool a full and robust replacement.

  2. Slack Import via the web app. The Slack import tool accessible via the Team Setting menu is being replaced by the mmetl tool that is much more comprehensive for the types of data it can assist in uploading.

  3. MySQL versions below 5.7.7. Minimum support will now be for 5.7.12. This version introduced a native JSON data type that lets us improve performance and scalability of several database fields (most notably Users and Posts props). Additionally, version 5.6 (our current minimum version) reached EOL in February 2021.

  4. Elasticsearch 5 and 6 - versions 5.x reached EOL in March of 2019, and versions 6.x reached EOL in November 2020. Our minimal supported version with Mattermost v6.0 will be Elasticsearch version 7.0.

  5. Windows 7 reached EOL in January 2020. We will no longer provide support for Mattermost Desktop App issues on Windows 7.

  6. DisableLegacyMFA configuration setting.

  7. ExperimentalTimezone configuration setting.

  8. All legacy channel sidebar experimental configuration settings. We encourage customers using these settings to upgrade to v5.32 or later to access custom, collapsible channel categories among many other channel organization features. The settings being deprecated include:

  9. All configuration settings previously marked as “Deprecated”.

  10. Changes to mattermost-server/model for naming consistency.

Known Issues 

  • Collapsed Reply Threads is currently in beta. Before enabling the feature, please ensure you are well versed in the known issues, particularly relating to database resource requirements and server performance implications. If you cannot easily scale up your database size, or are running the Mattermost application server and database server on the same machine, we recommended waiting to enable Collapsed Reply Threads until it is promoted to general availability in Q2 2022. Learn more about these performance considerations here.

  • The server version for v5.38.2 for Team Edition is reported as 5.39.2.

  • Deleted posts get displayed in channels without new activity after the data retention job is run MM-36574.

  • Adding an at-mention at the start of a post draft and pressing the leftwards or rightwards arrow can clear the post draft and the undo history MM-33823.

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side MM-31994.

  • Fields on the right column in a message attachment render unevenly MM-36943.

  • Pinned posts are no longer highlighted.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.37 - Extended Support Release 

  • 5.37.10, released 2022-08-31

    • Improved groups query performance by not counting deleted members.

    • Prevented the request for counting channel members in a group when the feature is disabled to prevent performance problems at scale.

  • v5.37.9, released 2022-03-10

  • v5.37.8, released 2022-02-03

    • Mattermost v5.37.8 contains medium level security fixes. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • The default for ThreadAutoFollow has been changed to false. This does not affect existing configurations where this value is already set to true MM-41351.

    • Prevented some instances where operations relating to Collapsed Reply Threads added load to the database server even when the ThreadAutoFollow and CollapsedThreads config settings were disabled MM-41350.

    • .pages content search is no longer available due to technical difficulties.

    • Fixed an issue where Actiance compliance jobs caused the Mattermost server process to crash with a panic MM-41245.

  • v5.37.7, released 2022-01-21

  • v5.37.6, released 2021-12-17

    • Mattermost v5.37.6 contains medium level security fixes. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Added a general performance fix for loading the web application and typing.

    • Improved performance while typing by moving some autocomplete layout calculations.

    • Improved performance by reducing DOM usage during render.

    • Removed real-time updates of a couple of features to prevent overloading servers on user updates. The “This channel contains guests” indicator and the number of timezones displayed when notifying members of a group will only be updated on channel change now.

  • v5.37.5, released 2021-11-30

    • Fixed an issue where OpenID redirect did not work when hosting Mattermost on a subdirectory MM-40151.

    • Fixed an issue where v5.37 reported an incorrect mmctl version.

  • v5.37.4, released 2021-11-15

    • Mattermost v5.37.4 contains a medium level security fix. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed a potential panic during the message export job MM-39521.

    • Fixed some sentry crashes MM-38565, MM-39208.

    • Updated in-product help documentation to fix broken links and to correct outdated information.

  • v5.37.3, released 2021-10-27

    • Mattermost v5.37.3 contains a medium level security fix. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed a race condition in telemetry IDs on High Availability servers MM-39343.

    • Fixed import process for imports with attachments MM-38375.

    • Fixed an issue that kept message attachment fields unaligned MM-36943.

  • v5.37.2, released 2021-08-26

    • Upgraded Go version to 1.16.7 to fix an application crash issue.

    • Fixed a server panic issue. MM-37574

    • Fixed an issue where saving or updating user statuses caused the logs to be filled with multiple key insertion errors. MM-37202.

    • Fixed a panic in the getPrevTrialLicense API request when loading the System Console on Team Edition. MM-37108

    • Fixed an issue where screen readers read “user object” instead of reading the username or channel in the Switch Channels modal.

  • v5.37.1, released 2021-08-04

    • Mattermost v5.37.1 contains a medium level security fix. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Improved typing performance in affected environments by reducing the frequency at which drafts are saved.

    • Fixed an issue in clustering where a mutex would fail to be unlocked when a timeout happened. MM-37246

  • v5.37.0, released 2021-07-16

    • Original 5.37.0 release

Deprecations 

  • The platform binary and “–platform” flag have been removed. If you are using the “–platform” flag or are using the platform binary directly to run the Mattermost server application via a systemd file or custom script, you will be required to use only the mattermost binary.

Important Upgrade Notes 

  • Collapsed Reply Threads are available as beta in Mattermost Server v5.37 and later. It’s expected that you may experience bugs as we stabilize the feature. In particular, please be aware of the known issues documented here.

  • v5.37 adds support for emoji standard v13.0. If you have added a custom emoji in the past that uses one of the new system names, then that custom emoji is going to get overwritten by the system emoji. The workaround is to change the custom emoji name.

  • Parts of Incident Collaboration are now available to all Mattermost editions. As part of this update, Incident Collaboration will require a minimum server version of v5.37. To learn more about what is available in each edition, visit our pricing page.

  • Support for Mattermost Server v5.31 Extended Support Release will come to the end of its life cycle on October 15, 2021. Upgrading to Mattermost Server v5.37 or later is required.

  • Collapsed Reply Threads, available in beta, are known to have a negative impact on server performance. If you cannot easily scale up and tune your database, or if you are running the Mattermost application server and database server on the same machine, we recommended disabling ThreadAutoFollow and CollapsedThreads until Collapsed Reply Threads is promoted to general availability in Q2 2022. Learn more about these performance considerations here.

IMPORTANT: If you upgrade from a release earlier than v5.36, please read the other Important Upgrade Notes.

Highlights 

Collapsed Reply Threads (Beta) 

  • We’re excited to give you early access to Collapsed Reply Threads (Beta). It can be enabled in the System Console > Experimental > Collapsed Reply Threads (Beta). Learn more about the features and known issues in our documentation.

Emoji Enhancements with Skin Tone Selection 

  • Added support for emoji standard v13.0. Users now have the ability to choose various skin tones using the Mattermost emoji picker. Mobile support is included in v1.45 Mobile App release (July 16th).

Improved Enterprise Trial Experience (Enterprise Editions E0, E10, E20) 

  • After a Self-Managed trial ends, admins can optionally contact sales or make a purchase in a single click.

Focalboard: Grouped Table view, New properties, and More (Beta) 

  • Focalboard tables can now be grouped by a property, for example allowing you to quickly see tasks per epic or owner.

Incident Collaboration Updates 

  • The update includes availability on all editions, playbook keyword monitoring, retrospective report, and playbook dashboard.

English-Australian Language Support 

  • Mattermost is now available in English-Australian.

Improvements 

User Interface (UI) 

  • In the at-mention autocomplete, the user’s nickname is no longer shown when (you) is present.

  • Updated the help text on the Add Users channel modal.

  • Added the ability to upload .jpeg files on Linux. Uploading .jpg files was already supported.

  • The Channel Switcher now displays recently viewed channels when launched.

  • Polish, German, and Italian languages were downgraded to beta as they are no longer actively maintained.

  • Custom statuses can now be set to expire after common time intervals or custom selected dates and times. Mobile App support will be added in a future release.

Performance 

  • Added some improvements to typing performance.

Administration 

  • Improved memory performance for large image uploads, particularly PNGs with transparency.

  • Optimized the bulk import process by no longer requiring the server to write the incoming archive to the filesystem when unzipping it.

  • Added channel restore and channel privacy change endpoints to the local mode using the System bot.

Bug Fixes 

  • Fixed an issue where users were unable to set a custom status emoji via slash command. Added the logic for detecting unicode emoji and setting it as a custom status emoji via slash commands.

  • Fixed an issue where messages with fallback text were repeated.

  • Fixed an issue where a persistent unread badge showed on the Main Menu when Enable Marketplace or Enable Plugins was disabled.

  • Fixed an issue where sidebar icons were not aligned with the navigator area icons.

  • Fixed an issue where using CTRL+F in a Direct Message channel added the user ID rather than the user’s name into the search field.

  • Fixed an issue where user icons were displayed at full opacity in muted channels.

  • Fixed an issue where a redundant user_update websocket event was generated for bot users.

  • Fixed an issue where a Self-Managed Enterprise Edition E20 trial could be activated more than once without contacting the Mattermost support team.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added CollapsedThreads to add support for Collapsed Reply Threads (Beta).

Database Changes 

  • Removed several redundant Database indexes.

API Changes 

  • Added a new field, team_id, to the response of POST api/v4/groups/{group_id}/channels/{channel_id}/link to add a team ID to the response when linking a channel to a group.

  • Added an optional collapsed_threads_supported parameter to /channels/members/{userId}/view to indicate that the client supports collapsed threads.

  • Added an optional collapsed_threads_supported parameter to /users/{userId}/posts/{postId}/set_unread to indicate that the client supports collapsed threads.

  • Updated the webapp to pass collapsed_threads_supported parameters to the server to indicate that the webapp supports collapsed reply threads.

  • Updated the webapp to correctly mark channels and threads as unread/read when marking root and reply posts as unread/read.

  • Added a new endpoint GET /trial-license/prev for fetching last used trial license.

  • Added two new fields in CustomStatus struct and modified the APIs to validate and handle them.

Go Version 

  • v5.37 is built with Go 1.15.5.

Open Source Components 

  • Removed reselect from https://github.com/mattermost/mattermost-webapp/.

Upcoming Deprecations in Mattermost v6.0 

The following deprecations are planned for the Mattermost v6.0 release, which is scheduled for 2021/10/15. This list is subject to change prior to the release.

  1. Legacy Command Line Tools. All commands have been fully replaced by mmctl and new commands have been added over the last few months, making this tool a full and robust replacement.

  2. Slack Import via the web app. The Slack import tool accessible via the Team Setting menu is being replaced by the mmetl tool that is much more comprehensive for the types of data it can assist in uploading.

  3. MySQL versions below 5.7.7. Minimum support will now be for 5.7.12. This version introduced a native JSON data type that lets us improve performance and scalability of several database fields (most notably Users and Posts props). Additionally, version 5.6 (our current minimum version) reached EOL in February 2021.

  4. Elasticsearch 5 and 6 - versions 5.x reached EOL in March of 2019, and versions 6.x reached EOL in November 2020. Our minimal supported version with Mattermost v6.0 will be Elasticsearch version 7.0.

  5. Windows 7 reached EOL in January 2020. We will no longer provide support for the Desktop App issues on Windows 7.

  6. DisableLegacyMFA configuration setting.

  7. ExperimentalTimezone configuration setting.

  8. All legacy channel sidebar experimental configuration settings. We encourage customers using these settings to upgrade to v5.32 or later to access custom, collapsible channel categories among many other channel organization features. The settings being deprecated include:

  9. All configuration settings previously marked as “Deprecated”.

  10. Changes to mattermost-server/model for naming consistency.

Known Issues 

  • Collapsed Reply Threads is currently in beta. Before enabling the feature, please ensure you are well versed in the known issues, particularly relating to database resource requirements and server performance implications. If you cannot easily scale up your database size, or are running the Mattermost application server and database server on the same machine, we recommended waiting to enable Collapsed Reply Threads until it is promoted to general availability in Q2 2022. Learn more about these performance considerations here.

  • When upgrading to 5.37.0, the Incident Collaboration plugin may not be automatically installed in some cases.

  • Add Members modal is incorrectly themed on the Mattermost Dark theme MM-37220.

  • config.json can reset when running the command systemctl restart mattermost, and when running any commands that write to the config (e.g. config or plugin) MM-33752, MM-32390.

  • Adding an at-mention at the start of a post draft and pressing the leftwards or rightwards arrow can clear the post draft and the undo history MM-33823.

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side MM-31994.

  • Fields on the right column in a message attachment render unevenly MM-36943.

  • Pinned posts are no longer highlighted.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.36 - Feature Release 

  • v5.36.2, released 2021-08-04

  • v5.36.1, released 2021-06-21

    • Mattermost v5.36.1 contains a high level security fix. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Added performance improvements by reducing the time taken to re-render when a post is received.

  • v5.36.0, released 2021-06-16

    • Original 5.36.0 release

Mattermost v5.36.0 contains a high level security fix. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Important Upgrade Notes 

  • Gossip clustering mode is now in General Availability and is no longer available as an option. All cluster traffic will always use the gossip protocol. The config setting UseExperimentalGossip has no effect and has only been kept for compatibility purposes. The setting to use gossip has been removed from the System Console. Note: For High Availability upgrades, all nodes in the cluster must use a single protocol. If an existing system is not currently using gossip, one node in a cluster can’t be upgraded while other nodes in the cluster use an older version. Customers must either use gossip for their High Availability upgrade, or customers must shut down all nodes, perform the upgrade, and then bring all nodes back up.

IMPORTANT: If you upgrade from a release earlier than v5.35, please read the other Important Upgrade Notes.

Highlights 

Focalboard (Beta) 

  • Focalboard is now integrated with Mattermost as a beta feature in v5.36. To enable Focalboard, open the Marketplace from the sidebar menu, install the Focalboard plugin, then click on Configure, enable it, and save. Update your NGINX or Apache web proxy config following these steps.

Incident Collaboration (Enterprise Edition E20) 

  • Includes automated welcome message, team-wide playbook access, and permission control for playbook creation.

Hungarian Language Support (Beta) 

  • Mattermost is now available in Hungarian.

Improvements 

User Interface (UI) 

  • If message autoresponder is set, only one message is now sent to a given user irrespective of how many Direct Message messages the user receives.

  • Added status icons on Add members to channel and Add members to team lists.

  • Added a keyboard shortcut to focus on the Search bar and search in the current channel.

  • A search tip is now shown when scrolling back in a channel.

  • Improved the error text in the Edit Channel Header modal.

  • Added the ability to clear a custom status when only an emoji and no text is set.

  • Redesigned message notification emails.

  • When Show online availability on profile images is set to Off, the online status icon is hidden from the profile image in the center channel and the right-hand side view.

Performance 

  • Added a performance improvement to the emoji picker overlay to improve typing performance.

  • Added performance improvements when receiving new posts.

Administration 

  • TCP_NO_DELAY is disabled for Websocket connections to allow for higher throughput.

  • Compliance Monitoring CSV files are no longer limited to 30,000 rows.

  • The default value of the Support Email (previously _feedback@mattermost.com_) has been removed. Admin Advisor will now prompt System Admins about missing configuration for the Support Email. This value is required, and it ensures Mattermost account requests are sent to the correct team for resolution.

  • The Marketplace button in the Main Menu is now displayed if the user has the sysconsole_write_plugins permission.

  • Added new feature discoveries in the System Console, including Data Retention Policy and OpenID Connect.

  • Added basic intra-cluster communication support for plugins.

  • Improved error messages for /header and /purpose commands.

  • Team-restricted direct channel creation is now also applied to the backend. Previously, this was restricted to the frontend.

  • Refactored the config storing logic to improve its robustness and performance.

  • Added a visual grouping of related settings under AD/LDAP in the System Console.

Bug Fixes 

  • Fixed an issue where bulk export generated invalid Direct Message channels between deactivated users.

  • Fixed an issue where the custom status cleared slash commands on mobile.

  • Fixed an issue with an incorrect error message when trying to change handle via API to another one that already existed.

  • Fixed an issue where LDAP Group Sync didn’t work when using SAML (ADFS) for authentication and AD/LDAP Group Sync unless EnableSyncWithLdapIncludeAuth was set to true, which caused the AuthData to be stored in AD/LDAP format.

  • Fixed an issue where a user with ‘No Access’ permission could still access Groups, Channels and Teams configuration pages through a URL.

  • Fixed an issue where Remove from channel and Remove Team Member menu items were visible in a group-synced channel or team.

  • Fixed various bugs related to hardcoded theme colours.

  • Fixed UI issues related to hardcoded variables and misalignment of the channel header with the Has guests text.

  • Fixed an issue with SAML Sign-on where System Admins were unable to modify Service Provider Login URL unless VerifySignature was enabled.

  • Fixed a race condition where enabling plugins would result in spurious errors in the logs.

  • Fixed a bug where team member permissions were not updated after associating a team with a permission scheme.

  • Fixed the responses of the role by ID and all roles of API endpoints when the role was associated to channel schemes.

  • Removed sticky sidebar headings in favor of fixing nesting errors.

  • Fixed an issue where the Close button in the Create New Category modal was only visible on mouse hover.

  • Fixed a bug where session expiration was extended with activity regardless of what the config setting ServiceSettings.ExtendSessionLengthWithActivity was set to.

  • Fixed an issue where the idmigrate command did not update values if they were not already present as LDAP attributes in the config.json.

  • Fixed an issue where the job scheduler server could miss a “changed leader” cluster event.

  • Fixed an issue where using Ctrl+Cmd+F on the MacOS Desktop App opened the search instead of full-screened the app.

  • Fixed an issue where the message input box was shadowed when uploading a file in the center channel.

  • Fixed an error caused by a post created with a non-string attachment field.

  • Fixed the opacity of the read state in the channel sidebar, as well as enhanced the opacity of the channel icon when the channel was unread.

  • Fixed an issue where users were unable to sign in with O365 authentication when the AuthData was formatted differently between Office365 OAuth and Office 365 OpenID.

  • Fixed an issue where custom emojis for custom statuses were not loaded on page refresh.

  • Fixed an issue where the “Set a status” placeholder in the profile popover was not correctly themed.

  • Fixed an issue where bots showed the integration owner’s custom status in the post header in the right-hand side.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ComplianceSettings in config.json:

    • Added a new config setting BatchSize. Compliance Monitoring CSV files are no longer limited to 30,000 rows.

  • Under SupportSettings in config.json:

    • SupportEmail default value is now empty instead of _feedback@mattermost.com_.

  • Under LogSettings in config.json:

    • A new setting EnableColor was added to LogSettings and NotificationLogSettings. Non-JSON console logs will now be colored if that field is set to true.

  • Under ServiceSettings in config.json:

    • Added EnableReliableWebSockets, to make WebSocket messages more reliable by bufferring messages during a connection loss and then re-transmitting all unsent messages when the connection is revived.

API Changes 

  • Added support to include config diff in audit records for the related API calls (updateConfig and patchConfig).

  • Response field names changed for experimental API GetAllSharedChannels to match the field names for other channels APIs.

  • Added a new function to the plugin API, RequestTrialLicense.

  • The /ldap/sync endpoint now accepts a parameter include_removed_members which will force all LDAP group members back into the teams and channels synced to that group.

  • Added a new API endpoint to removeUserRecentCustomStatus POST /status/custom/recent/delete.

  • Added GetGroupMemberUsers and GetGroupsBySource to the plugin API to add plugin support for user groups.

  • Added a new API endpoint POST /api/v4/saml/reset_auth_data to reset SAML users’ AuthData field to their email.

  • Added new API endpoints:

    • GET    /data_retention/policies

    • GET    /data_retention/policies_count

    • POST   /data_retention/policies

    • GET    /data_retention/policies/{policy_id}

    • PATCH  /data_retention/policies/{policy_id}

    • DELETE /data_retention/policies/{policy_id}

    • GET    /data_retention/policies/{policy_id}/teams

    • POST   /data_retention/policies/{policy_id}/teams

    • DELETE /data_retention/policies/{policy_id}/teams

    • POST   /data_retention/policies/{policy_id}/teams/search

    • GET    /data_retention/policies/{policy_id}/channels

    • POST   /data_retention/policies/{policy_id}/channels

    • DELETE /data_retention/policies/{policy_id}/channels

    • POST   /data_retention/policies/{policy_id}/channels/search

    • GET    /users/{user_id}/data_retention/team_policies

    • GET    /users/{user_id}/data_retention/channel_policies

Go Version 

  • v5.36 is built with Go 1.15.5.

Open Source Components 

  • Added lodash, memoize-one, and sass to https://github.com/mattermost/mattermost-webapp.

  • Added react-native-startup-time and removed react-native-status-bar-size from https://github.com/mattermost/mattermost-mobile.

Upcoming Deprecations in Mattermost v6.0 

The following deprecations are planned for the Mattermost v6.0 release, which is scheduled for 2021/10/15. This list is subject to change prior to the release.

  1. Legacy Command Line Tools. All commands have been fully replaced by mmctl and new commands have been added over the last few months, making this tool a full and robust replacement.

  2. Slack Import via the web app. The Slack import tool accessible via the Team Setting menu is being replaced by the mmetl tool that is much more comprehensive for the types of data it can assist in uploading.

  3. MySQL versions below 5.7.7. Minimum support will now be for 5.7.12. This version introduced a native JSON data type that lets us improve performance and scalability of several database fields (most notably Users and Posts props). Additionally, version 5.6 (our current minimum version) reached EOL in February 2021.

  4. Elasticsearch 5 and 6 - versions 5.x reached EOL in March of 2019, and versions 6.x reached EOL in November 2020. Our minimal supported version with Mattermost v6.0 will be Elasticsearch version 7.0.

  5. Windows 7 reached EOL in January 2020. We will no longer provide support for the Desktop App issues on Windows 7.

  6. DisableLegacyMFA configuration setting.

  7. ExperimentalTimezone configuration setting.

  8. All legacy channel sidebar experimental configuration settings. We encourage customers using these settings to upgrade to v5.32 or later to access custom, collapsible channel categories among many other channel organization features. The settings being deprecated include:

  9. All configuration settings previously marked as “Deprecated”.

  10. Changes to mattermost-server/model for naming consistency.

Known Issues 

  • Batched email notifications from a single post have incorrect title text MM-36559.

  • config.json can reset when running the command systemctl restart mattermost, and when running any commands that write to the config (e.g. config or plugin) MM-33752, MM-32390.

  • Adding an at-mention at the start of a post draft and pressing the leftwards or rightwards arrow can clear the post draft and the undo history MM-33823.

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side MM-31994.

  • Pinned posts are no longer highlighted.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.35 - Feature Release 

  • v5.35.5, released 2021-08-04

  • v5.35.4, released 2021-06-21

  • v5.35.3, released 2021-06-11

    • Mattermost v5.35.3 contains a high level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed an issue where missing query parameters in the datasource could cause MySQL servers to crash on startup. MM-36236

    • Added performance improvements to the emoji picker overlay to improve typing performance and reduced the time taken to re-render when a post is received.

  • v5.35.2, released 2021-06-03

    • Fixed an issue where subsequent migrations failed to run after running a dot release on new installations. MM-35931

    • Fixed an issue where the server would crash if content extractor dependencies for PDFs were not present. MM-35990

    • Fixed an issue where the setting to allow disabling link previews from certain domains was grayed out in the System Console. MM-35796

    • Fixed an issue where SMTP showed a permission error when upgrading from version < 5.35 to 5.35 or greater. MM-35861

    • Fixed an issue with extracting OpenDocument Text files as part of content extraction. MM-36103

  • v5.35.1, released 2021-05-18

    • Fixed an issue where 5.35.0 migration failed on MySQL installations with an “invalid connection” error due to an issue with the readTimeout parameter in SqlSettings.DataSource (default is 30 seconds). The readTimeout datasource query parameter is now being ignored and the application provided SqlSettings.QueryTimeout should be used instead. MM-35767

  • v5.35.0, released 2021-05-16

    • Original 5.35.0 release

Mattermost v5.35.0 contains low and medium level security fixes. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Important Upgrade Notes 

  • Due to the introduction of backend database architecture required for upcoming new features, including Shared Channels and Collapsed Reply Threads, the performance of the migration process for the v5.35 release (May 16, 2021) has been noticeably affected. Depending on the size, type, and version of the database, longer than usual upgrade times should be expected. This can vary from a couple of minutes (average case) to hours (worst case, MySQL 5.x only). A moderate to significant spike in database CPU usage should also be expected during this process. More details on the performance impact of the migration and possible mitigation strategies are provided here.

  • v5.35.0 introduces a new feature to search for files. Search results for files shared in the past may be incomplete until a content extraction command is executed to extract and index the content of files already in the database. Instances running Elasticsearch or Bleve search backends will also need to execute a Bulk Indexing after the content extraction is complete. Please see more details in this blog post.

  • The existing password generation logic used during the bulk user import process was comparatively weak. Hence it’s advised for admins to immediately reset the passwords for all the users who were generated during the bulk import process and whose password has not been changed even once.

  • In the v5.38 release (August 16, 2021), we will deprecate “config watcher” (the mechanism that automatically reloads the config.json file), in favor of an mmctl command that will need to be run to apply configuration changes after they are made. This change will improve configuration performance and robustness.

IMPORTANT: If you upgrade from a release earlier than v5.34, please read the other Important Upgrade Notes.

Highlights 

Apps Framework (Developer Preview) 

  • Apps Framework is a new way to integrate with external tools, and allows developers to create interactive apps in Mattermost, using any development language they’re comfortable with. The new apps work seamlessly across mobile and desktop clients. This is a developer preview and is not intended for production instances of Mattermost yet. This feature is available for self-managed customers with v5.35 when the Apps Framework Plugin is loaded on an instance. Learn more: https://developers.mattermost.com/integrate/apps/.

Search for files and document contents 

  • Searching in Mattermost now finds both relevant messages and files in your team’s conversation history. Search will return results for attachments that match the file name or contain matching text content within supported document types. Learn more.

Granular Access to System Console Pages (Enterprise E20 Edition) 

  • Migrated Experimental, About, Reporting, Environment, Site Configuration, Authentication, Integrations, and Compliance sections to their respective sub-section permissions.

Shared Channels (Experimental, Enterprise Edition E20) 

  • Experimental support added for sharing channels between Mattermost clusters. Requires an Enterprise Edition E20 license. The Shared Channels feature is disabled by default.

Enterprise Trial Enhancements (Enterprise E20 Edition) 

  • Added banners to alert System Admins when an Enterprise Edition E20 trial has started, when there are three days left of the trial, and when the trial is on the last day.

Incident Collaboration (Enterprise Edition E20) 

  • Updated prepackaged Incident Collaboration plugin with to include ad hoc tasks, stakeholder overview, and more.

Improvements 

User Interface (UI) 

  • Added support to collapse in-line images over 100px in height.

  • Implemented maximum length validation on the status modal for custom statuses.

  • Synchronized collapsed channel sidebar categories on the server to keep category collapse states in-sync across devices.

  • Empty state is no longer off-centered in the Channel Switcher.

  • Ephemeral message created from call response markdown field is now posted by bot.

  • Added various enhancements to custom status to allow users to switch to recent statuses with less clicks.

  • Users can now see online status on user profile images in the channel switcher.

  • Added a string field to restricted domains configuration with the key RestrictLinkPreviews, and added a UI field for restricted domains under System Console > Site Configuration > Posts. Also expanded the logic that determines whether a post has a preview or not.

  • Added an unread badge to the Main Menu icon and the Plugin Marketplace menu that displays until a System Admin visits the Plugin Marketplace for the first time.

  • Profile images are now visible on Direct Messages in the channel sidebar.

  • Added channel icons for email notifications as part of email notification redesigns.

  • Direct Messages More… modal is now sorted by recent conversations when the modal is opened.

  • Removed legacy Open-Sans fonts and upgraded Open-Sans to v18.

Administration 

  • Paused Admin Advisor notifications from triggering.

  • Added a command line document extraction command that allows indexing documents by content.

  • Removed the utility function model.GeneratePassword() for security reasons. An improved version is now being used internally to generate passwords for bulk-imported users.

  • Only the System Admin is allowed to have the ability to assign system roles.

  • Two new gauge metrics were added: mattermost_db_replica_lag_abs and mattermost_db_replica_lag_time, both containing a label of “node”, signifying which database host is the metric from.

    • These metrics signify the replica lag in absolute terms and in the time dimension capturing the whole picture of replica lag. To use these metrics, a separate config section ReplicaLagSettings was added under SqlSettings. This is an array of maps which contain three keys: DataSource, QueryAbsoluteLag, and QueryTimeLag. Each map entry is for a single replica instance. DataSource contains the database credentials to connect to the replica instance. QueryAbsoluteLag is a plain SQL query that must return a single row of which the first column must be the node value of the Prometheus metric, and the second column must be the value of the lag. QueryTimeLag is the same as above, but used to measure the time lag.

    • As an example, for AWS Aurora instances, the QueryAbsoluteLag can be: select server_id highest_lsn_rcvd-durable_lsn as bindiff from aurora_global_db_instance_status() where server_id=<> and QueryTimeLag can be: select server_id, visibility_lag_in_msec aurora_global_db_instance_status() where server_id=<>. For MySQL Group Replication, the absolute lag can be measured from the number of pending transactions in the applier queue: select member_id, count_transactions_remote_in_applier_queue FROM performance_schema.replication_group_member_stats where member_id=<>. Overall, what query to choose is left to the administrator, and depending on the database and need, an appropriate query can be chosen.

Bug Fixes 

  • Fixed link previews on a number of websites, including Reddit.

  • Fixed an issue where SAML assigned Mattermost UserID as username if the value was invalid and did not log this.

  • Fixed an issue where hover effects for category sorting and Direct Messages category limit submenus were too dark on a dark theme.

  • Fixed an issue where users were unable to drag the vertical scroll bar on a PDF preview.

  • Fixed an issue with animations on long posts when highlighted as a permalink.

  • Fixed an issue where the user’s nickname was not shown on channel switch.

  • Fixed an issue where deactivated users were not marked as Deactivated in the channel switcher.

  • Fixed an issue where queries executed during the upgrade process would pre-emptively time out on the application side.

  • Fixed an issue where users were unable to deactivate MFA for their accounts even if MFA was disabled on the server.

  • Fixed an issue where user settings on API could be set if LDAP Sync was on. For LDAP and SAML users, the following fields cannot be changed via the API if the corresponding LDAP/SAML attributes have been set: first name, last name, position, nickname, email, profile picture. For OAuth users (i.e., GitLab, Google, Office365, and OpenID), the following fields cannot be changed via the API: first name, last name. All users who authenticate via a method other than email cannot change their username via the API.

  • Fixed a possible panic on post creation when the collapsed threads feature was enabled.

  • Fixed a database deadlock that could happen if a sidebar category was updated and deleted at the same time.

  • Fixed an issue where the sidebar Text Hover BG Theme color didn’t work on the left-hand side.

  • Fixed an issue where the Team Admin’s current role was presented inconsistently in the different areas of the System Console.

  • Fixed an issue where the Show more background color on long posts was broken for permalinks.

  • Fixed an issue where redirecting with JS failed when Content Security Policy was enabled and restricted with unsafe-inline.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added EnableFileSearch for file search feature.

    • Added RestrictLinkPreviews setting to allow disabling link previews from certain domains.

  • Under FileSettings in config.json:

    • Added ExtractContent and ArchiveRecursion for file search feature.

  • Under ExperimentalSettings in config.json:

    • Added EnableRemoteClusterService for experimental Shared Channels feature.

  • Under SqlSettings in config.json:

    • Added ReplicaLagSettings. This is an array of maps which contain three keys: DataSource, QueryAbsoluteLag, and QueryTimeLag.

Database Changes 

  • Added new column in ChannelMembers table called MentionCountRoot. Please note that the migration can take up to a few minutes on installations with large numbers of channels/users.

  • Added TotalMsgCountRoot to Channels table and MsgCountRoot column to ChannelMembers table. Please note that the migration can take several minutes to complete on large MySQL instances.

API Changes 

  • Added /teams/{team_id}/files/search API endpoint for files search.

  • For LDAP and SAML users, the following fields cannot be changed via the API if the corresponding LDAP/SAML attributes have been set: first name, last name, position, nickname, email, profile picture. For OAuth users (i.e., GitLab, Google, Office365, and OpenID), the following fields cannot be changed via the API: first name, last name. All users who authenticate via a method other than email cannot change their username via the API.

Go Version 

  • v5.35 is built with Go 1.15.5.

Open Source Components 

  • Added country-list, form-data, gfycat-sdk, redux-thunk, rudder-sdk-js, serialize-error and shallow-equals, and removed mattermost-redux from https://github.com/mattermost/mattermost-webapp.

Known Issues 

  • A persistent unread badge on sidebar hamburger menu may show if Enable Marketplace or Enable Plugins is disabled in the System Console MM-36160.

  • config.json can reset when running the command systemctl restart mattermost, and when running any commands that write to the config (e.g. config or plugin) MM-33752, MM-32390.

  • Adding an at-mention at the start of a post draft and pressing the leftwards or rightwards arrow can clear the post draft and the undo history MM-33823.

  • Posts created by bots containing attachments sometimes appear as repeated until the user refreshes the page MM-30980.

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side MM-31994.

  • Fields on the right column in a message attachment render unevenly MM-36943.

  • Pinned posts are no longer highlighted.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.34 - Feature Release 

  • v5.34.5, released 2021-06-21

  • v5.34.4, released 2021-06-11

    • Mattermost v5.34.4 contains a high level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed an issue where missing query parameters in the datasource could cause MySQL servers to crash on startup. MM-36236

    • Fixed an issue where plugin icons were displaying as a column instead of as a row on the left-hand side. MM-36199

  • v5.34.3, released 2021-06-03

    • Fixed an issue where subsequent migrations failed to run after running a dot release on new installations. MM-35931

  • v5.34.2, released 2021-04-17

    • Fixed an issue where installs with some special characters in the MySQL password would break and fail to start.

  • v5.34.1, released 2021-04-15

    • Fixed an issue where upgrading to v5.34.0 runs a migration that could cause timeouts on MySQL installations. Upgrading to v5.34.1 may also execute missing migrations that were scheduled for v5.32.0. These additions can be lengthy on very big MySQL (version 5.x) installations.

      • Altering of Posts.FileIds type (PostgreSQL only)

      • Added new column ThreadMemberships.UnreadMentions

      • Added new column Channels.Shared

      • Added new column Reactions.UpdateAt

      • Added new column Reactions.DeleteAt

  • v5.34.0, released 2021-04-15

    • Original 5.34.0 release

Highlights 

Incident Collaboration: Automated actions on incident start (E20 Edition) 

  • Users can now configure playbooks to automatically execute key actions when an incident is created to save time and reduce the chance of manual error.

Bulgarian and Swedish language support 

  • Removed Beta tags from Swedish and Bulgarian languages. Mattermost is now available in 18 languages.

Improvements 

User Interface (UI) 

  • System Admins now see a prompt to join private channel when joining a private channel via a permalink.

  • Added support for adding in-product notices for external dependency deprecation details.

  • Improved the timezone selector component.

  • Introduced a new theme variable for the team sidebar.

  • Added support for automatic right-to-left (RTL) detection in browsers.

  • Updated the font size for the Add People channel modal.

  • Online status is now shown in the channel switcher.

  • Improved the design and layout of email notifications for password resets, member invites, member welcomes, and verifications.

Administration 

  • Added mmctl commands to create, list, download, and delete export files.

  • Added schema migrations phase 0 (Teams, TeamMembers).

  • Removed references to SqlLite3 from the code.

  • Bleve updates are now logged in the config only when there is an actual change in the BleveSettings instead of on every config update.

  • Profiling the Mattermost server with pprof is now available for Team Edition.

  • Added attributes to split.io feature flags.

Bug Fixes 

  • Fixed unsafe access of properties of the plugin environment during ServePluginPublicRequest.

  • Fixed an issue where the Admin Console > Server Logs did not focus to the sidebar filter upon reload.

  • Fixed an issue where the GIF picker appeared empty instead of showing a “No results” modal when no results were displayed.

  • Fixed an issue where the keyboard accessibility controller was not allowed to resume left-hand side scroll after drag and drop.

  • Fixed an issue where markdown links rendered incorrectly.

  • Fixed an issue where the Slack theme import failed due to changes in formatting of Slack export color schemes.

  • Fixed an issue where tooltips were missing for channels with a long name.

  • Fixed a race condition which would crash the app server due to improper handling of WebSocket closing.

  • Fixed an issue where the PDF zoom failed to respond to zoom in/out/reset actions until the user scrolled.

  • Fixed an issue where, in a reply thread with the right-hand side expanded, attachments in a post draft were hidden behind the center channel text box.

  • Fixed bugs related to replication lag for Enterprise Edition instances configured to use read replicas.

  • Fixed an issue where Compliance Report field headers were not correctly aligned.

  • Fixed an issue where the /join command was case-sensitive.

  • Fixed an issue where one-character sidebar category names were not displayed.

  • Fixed an issue with a theme discrepancy on Close buttons on some modals in the System Console (when using a custom team theme).

  • Fixed an issue where long text input in the right-hand pane was jumpy when selected.

  • Fixed an issue where the zoom level persisted across multi-attachment PDF previews.

  • Fixed an issue where long image names pushed the show/hide control off the right side of the window.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Added ExportSettings to add support for compressed export files with attachments.

Go Version 

  • v5.34 is built with Go 1.15.5.

Open Source Components 

  • Removed core-js from https://github.com/mattermost/mattermost-mobile.

Known Issues 

  • Text alignment in right-to-left support does not work correctly in v5.34. This issue is fixed in the latest version of the mattermost-rtl plugin.

  • Deactivated users are not marked as “Deactivated” in the channel switcher MM-33910.

  • User nickname is not shown on channel switch MM-33897.

  • Config.json can reset when running the command systemctl restart mattermost, and when running any commands that write to the config (e.g. config or plugin) MM-33752, MM-32390.

  • The server tries to install E20-required plugins on non-E20 installations MM-32387.

  • Adding an at-mention at the start of a post draft and pressing the leftwards or rightwards arrow can clear the post draft and the undo history MM-33823.

  • Posts created by bots containing attachments sometimes appear as repeated until the user refreshes the page MM-30980.

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side MM-31994.

  • Reddit link previews no longer work in Mattermost. This affects older versions too MM-31899.

  • Fields on the right column in a message attachment render unevenly MM-36943.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

abdullahceylan, aconitumnapellus, Adovenmuehle, aeomin, agarciamontoro, aggmoulik, AGMETEOR, agnivade, amyblais, amynicol1985, angeloskyratzakos, anurag6713, appleboy, asaadmahmood, asimsedhain, bbodenmiller, BenCookie95, berkeka, BharatKalluri, calebroseland, catalintomai, chenilim, chetanyakan, chikei, christian-lim, coltoneshaw, cpanato, cpoile, Crimson-riot, crspeller, ctlaltdieliet, cwarnermm, CyrilLD, danielsischy, deanwhillier, devinbinnie, djanda97, ebati, enahum, enelson720, esethna, ethervoid, firasm, flexo3001, flynbit, furqanmlk, gabrieljackson, gigawhitlocks, gruceqq, haardikdharma10, hahmadia, hanzei, haonm, hastadhana, hectorskypl, hmhealey, ianatha, icelander, IndushaS, iomodo, isacikgoz, it33, jamiehurewitz, jasonblais, jaydeland, jbutler992, jbutlerdev, jespino, jfrerich, jials, johnsonbrothers, josephbaylon, jp0707, JtheBAB, justinegeffen, jwilander, kaakaa, kayazeren, khos2ow, larkox, lawrencejohnson, levb, lieut-data, lindalumitchell, lucievr, lutfuahmet, Maekes, mahmud2011, mantlecurve, matt-w99, matthewbirtch, maxerenberg, metanerd, mgdelacroix, michelengelen, mickmister, microolapshare, migbot, minecraftchest1, mistikel, mkdbns, mkraft, mlongo4290, mrtpcet, msal4, Mshahidtaj, natalie-hub, nathanaelhoun, nevyangelova, nronas, ogi-m, opr77, pablovelezvidal, pat-s, phntom, pidgelar, potatogim, prapti, Prescise, proffalken, r-52, rakhi2104, rbradleyhaas, reflog, renjithgr, rodcorsi, saf6260, sakaitsu, saturninoabril, sbishel, shazm, spirosoik, stafot, streamer45, stylianosrigas, svelle, Szymongib, thePanz, toto6038, tsabi, uhlhosting, wget, wiersgallak, wiggin77, Willyfrog, xlanor, YoheiZuho, youtsumi, zefhemel, Zukerherr

Release v5.33 - Feature Release 

  • v5.33.5, released 2021-06-11

  • v5.33.4, released 2021-06-03

    • Fixed an issue where subsequent migrations failed to run after running a dot release on new installations. MM-35931

    • Added a performance improvement to the emoji picker overlay to improve typing performance.

  • v5.33.3, released 2021-03-31

    • Fixed an issue where, after migrating to OpenID, Office 365 returned different ID attributes based on user type, causing an error for users with expired sessions when they tried to sign in to Mattermost. MM-34356

  • v5.33.2, released 2021-03-25

    • Improved typing performance on busy servers with lots of active users and with the new sidebar enabled. MM-30407

    • Reverted the WebSocket improvement added in v5.33.0 where epoll was used to manually read from a WebSocket connection. It was reverted because unofficial Mattermost builds in several different platforms broke due to the WebSocket changes. MM-34158

  • v5.33.1, released 2021-03-22

    • Fixed an issue where WebSockets failed with TLS connections. MM-34000

    • Fixed a race condition which would crash the app server due to improper handling of WebSocket closing. MM-33233

    • Fixed an issue where the mmctl config command didn’t recognize newer settings (e.g. ClusterSettings.EnableGossipCompression) that were introduced in v5.33.0. MM-34046

  • v5.33.0, released 2021-03-17

    • Original 5.33.0 release

Mattermost v5.33.0 contains low-level security fixes. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Important Upgrade Notes 

  • Deleting a reaction is now a soft delete in the Reactions table. A schema update is required and may take up to 15 seconds on first run with large data sets.

  • WebSocket handshakes done with an HTTP version lower than 1.1 will result in a warning, and the server will transparently upgrade the version to 1.1 to comply with the WebSocket RFC. This is done to work around incorrect Nginx (and other proxy) configs that do not set the proxy_http_version directive to 1.1. This facility will be removed in a future Mattermost version. It is strongly recommended to fix the proxy configuration to correctly use the WebSocket protocol.

IMPORTANT: If you upgrade from a release earlier than v5.32, please read the other Important Upgrade Notes.

Highlights 

OpenID Connect for OAuth 2.0 Authentication (E20 Edition) 

  • OpenID Connect enables authentication to Mattermost using any OAuth 2.0 provider that adheres to the OpenID Connect specification. This feature is available for Mobile Apps in the v1.40 release.

Support Packet Generation (E10 & E20 Editions) 

  • Mattermost provides the ability to download configuration details, logs, and other deployment information when requesting commercial support for Mattermost self-managed E10 or E20 Enterprise editions, or Mattermost Cloud editions.

Updated Incident Collaboration Plugin to 1.4.0 (E20 Edition) 

  • Added an Incident Timeline to support status updates and other key events shown chronologically in the right-hand sidebar. The timeline enables users to easily gather information for post-incident reports.

Custom Statuses 

  • Users now gain the flexibility to express their current status in any way they prefer. Set a custom status to add a descriptive status message and emoji that’s visible to everyone throughout the app.

Improvements 

User Interface (UI) 

  • Improved the Add Members to channel modal.

  • Added Formatting shortcut keys to the Shortcut modal.

  • Added localization to the date picker used when searching for posts around a given date.

  • The autocomplete popover is now positioned relative to the @, ~, or / trigger in the post draft.

  • Removed the 5-page limit on previewing PDFs.

  • Added files as a reserved team name.

  • Searching for a channel by URL now returns the channel.

  • Users are now provided with feedback when creating a custom category name that exceeds the character limit.

Notifications 

  • Posts from OAuth 2.0 bots no longer trigger mentions for the user.

Administration 

  • Added an ImportDelete job to periodically delete unused import files after a configurable retention period has passed.

  • Introduced new mattermost_system_server_start_time and mattermost_jobs_active metrics for improved debugging with Grafana dashboards.

  • Deleting a reaction is now a soft delete in the Reactions table. A schema update is required and may take up to 15 seconds on first run with large data sets.

  • Changed default MaxFileSize from 50MB to 100MB.

  • Updated Go dependencies to their latest minor version.

  • Added support for compressed export files with attachments.

  • Server crashes due to runtime panics are now captured as a log line.

  • Optimized Direct Message creation by fetching all users involved in a single database call.

  • During the user import process, a change in a user’s NotifyProps will not send an email notification. This is done to make it consistent with other parts of the import process where a change in user’s attributes would also not send any notifications.

  • Implemented a job to delete unused export files.

Bug Fixes 

  • Fixed an issue where the Database Schema upgrade step for v5.29.1 was not taken into account in releases v5.30 and later.

  • Fixed an issue where mmctl channel move did not allow moving private channels.

  • Fixed an issue where mmctl config set PluginSettings.EnableUploads to change a configuration value did not return an error.

  • Fixed an issue where the instructions to search for users in System Console > Reporting > Server Logs were not up-to-date.

  • Fixed an issue where no error message was displayed when adding an LDAP Group Synchronized Team in System Console > User Management > Users.

  • Fixed an issue where markdown tables did not wrap correctly.

  • Fixed an issue where the search bar styling on dark themes was incorrect on mobile web view.

  • Fixed an issue where the Main Menu on webapp appeared more left-aligned than previous releases.

  • Fixed an issue where sticky sidebar headings appeared under More Unreads.

  • Fixed an issue where the group channel icon was misaligned in the channel switcher.

  • Fixed an issue where line breaks were ignored when used with inline images.

  • Fixed an issue where the channel switcher did not focus on the first list result after a backspace.

  • Fixed an issue where demoting a user to a guest would not take effect in an environment with read replicas.

  • Fixed a bug with in-product notices where a date constraint might fail to match, which would lead to the notice not being fetched.

  • Fixed an issue where creation of a bot would fail due to replica lag.

  • The DownloadComplianceReport function in the Golang driver has been fixed to download a full report as a zip archive.

  • Fixed Cache-Control headers to instruct that responses may only be cached on browsers.

  • Fixed a panic when the OAuth discovery endpoint would not return a Cache-Control header.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ClusterSettings in config.json:

    • Added EnableGossipCompression, to disable compression in the Gossip protocol. By default the value of the setting is true. This is done to maintain compatibility with old servers in a cluster. Once all servers in a cluster are upgraded, it is recommended to disable this setting for better performance.

  • Under SqlSettings in config.json:

    • Added ConnMaxIdleTimeMilliseconds, to allow System Admins to control the maximum time a database connection can remain idle. The default value is set to 5 minutes.

  • Under TeamSettings in config.json:

    • Added EnableCustomUserStatuses, to allow users to set descriptive status messages and optional status emoji that are visible to all users.

Go Version 

  • v5.33 is built with Go 1.15.5.

Open Source Components 

  • Added types/react-overlays, crypto-browserify, process and stream-browserify, and removed node-semver from https://github.com/mattermost/mattermost-webapp.

  • Removed isomorphic-fetch from https://github.com/mattermost/mattermost-redux.

API Changes 

  • Added a new GET /{team_id}/threads/{thread_id} API method for retrieving single threads.

  • Added a new /exports API endpoint to generate and manage export files.

  • Added a new /users/{user_id}/teams/{team_id}/threads/mention_counts API endpoint.

  • Added a new GET /api/v4/cloud/subscription/stats API endpoint.

  • Added a new GET /api/v4/cloud/subscription/limitreached/invite API endpoint.

  • Added new PUT /api/v4/users/<id>/status/custom, DELETE /api/v4/users/<id>/status/custom, and DELETE /api/v4/users/<id>/status/custom/recent API endpoints.

  • The /api/v4/users/me/auth API endpoint can no longer be used to change passwords. This was a hidden feature that was not documented, but was nevertheless possible. We have removed this hidden feature.

  • Updated /users/{user_id}/teams/{team_id}/threads API to support the unread=true query parameter.

  • The /api/v4/users/{user_id}/teams/{team_id}/threads API endpoint now accepts “before” and “after” parameters instead of a page index.

  • Removed the session required restriction from the GET api/v4/subscription/stats API endpoint.

Websocket Event Changes 

  • Improved the WebSocket implementation by using epoll to manually read from a WebSocket connection. As a result, the number of goroutines is expected to go down by half. This implementation is only available on Linux and FreeBSD-based distributions.

  • The UserUpdate WebSocket Event is now broadcast by two more APIs, plugin.UpdateUser and ConvertBotToUser.

Known Issues 

  • Config.json can reset when running the command systemctl restart mattermost, and when running any commands that write to the config (e.g. config or plugin) MM-33752, MM-32390.

  • The server tries to install E20-required plugins on non-E20 installations MM-32387.

  • Adding an at-mention at the start of a post draft, then pressing the left or right arrow can clear the post draft and the undo history MM-33823.

  • In some cases, the New messages toast appears without replacing variables with text. MM-33829

  • Posts created by bots containing attachments sometimes appear as repeated until the user refreshes the page MM-30980.

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side MM-31994.

  • Reddit link previews no longer work in Mattermost. This affects older versions too MM-31899.

  • Slack theme import fails due to changes in formatting of Slack export color schemes MM-30531.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.32 - Feature Release 

  • v5.32.1, released 2021-02-17

    • Fixed an issue where any search containing an underscore failed on PostgreSQL databases. This was fixed by reverting a v5.32.0 feature that added support for searching for terms on PostgreSQL that contain underscores.

  • v5.32.0, released 2021-02-16

    • Original 5.32.0 release

Mattermost v5.32.0 contains low level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Compatibility 

  • TLS versions 1.0 and 1.1 have been deprecated by browser vendors. Starting in Mattermost Server v5.32 (February 16), mmctl returns an error when connected to Mattermost servers deployed with these TLS versions and System Admins will need to explicitly add a flag in their commands to continue to use them. We recommend upgrading to TLS version 1.2 or higher.

  • PostgreSQL ended long-term support for version 9.4 in February 2020. From v5.26 Mattermost officially supports PostgreSQL version 10 as PostgreSQL 9.4 is no longer supported. New installs will require PostgreSQL 10+. Previous Mattermost versions will continue to be compatible with PostgreSQL 9.4. PostgreSQL 9.4 and all 9.x versions are now fully deprecated in our v5.30 release (December 16, 2020). Please follow the instructions under the Upgrading Section within the PostgreSQL documentation. Mattermost will now fail to start if the Postgres version is below that.

Breaking Changes 

  • ExperimentalChannelOrganization, EnableXToLeaveChannelsFromLHS, CloseUnusedDirectMessages, and ExperimentalHideTownSquareinLHS settings are only functional if the Legacy Sidebar (EnableLegacySidebar) is enabled since they are not compatible with the new sidebar experience. ExperimentalChannelSidebarOrganization has been deprecated, since the new sidebar is now enabled for all users.

  • Breaking changes to the Golang client API were introduced: GetPostThread, GetPostsForChannel, GetPostsSince, GetPostsAfter, GetPostsBefore, and GetPostsAroundLastUnread now require an additional collapsedThreads parameter to be passed. Any client making use of these functions will need to update them when upgrading its dependencies.

  • A breaking change was introduced when upgrading the Go version to v1.15.5 where user logins fail with AD/LDAP Sync when the certificate of the LDAP Server has no Subject Alternative Name (SAN) in it. Creating a new certificate on the AD/LDAP Server with the SAN inside fixes this.

IMPORTANT: If you upgrade from a release earlier than v5.31, please read the other Important Upgrade Notes.

Highlights 

General availability of custom, collapsible channel categories 

  • Mattermost now gives users flexibility to organize channels and direct messages into custom, collapsible sidebar categories. Users gain full personalization of their sidebar to improve productivity, reduce clutter and focus on what matters. Learn more about the new channel sidebar enhancements.

Self-serve renewals (E10 & E20 Editions) 

  • Mattermost is introducing the ability to renew your self-managed E10 or E20 license subscription online with a credit card. This feature creates a frictionless experience for System Administrators to renew their license without the need to contact sales. The renewal process takes place in the customer portal and only takes a few minutes to complete.

Incident Collaboration v1.3.2 (E20 Edition) 

  • Pre-packaged Incident Collaboration v1.3.2 offers a more specific incident status and centralized task list.

Improvements 

User Interface (UI) 

  • Added new languages, Bulgarian and Swedish.

  • Added team sidebar user interface and animation enhancements.

  • Moved the header icons to the left of the header beside the channel description.

  • Added support to move multi-selected groups of channels to another category via the More options menu.

Plugins 

  • Updated bundled plugin packages, including GitHub and Jenkins plugins.

  • Enabled experimental support for ARM64 plugins by allowing any matching GOOS-GOOARCH combination in the plugin manifest.

Administration 

  • AnalyticsPostCount now avoids unnecessary table scans during various background jobs.

  • The Help text for the Rate Limiting setting was updated to explain the purpose of rate limiting.

  • Removed the word “experimental” from the Gossip setting in the System Console.

  • Updated the Go version to v1.15.5.

  • Added support for automatic installation and enablement of plugins using feature flags.

  • Added webhook create endpoints to local mode and the ability to create webhooks for other users.

  • Added a Mattermost CLI command to initialize the database.

  • Added support for processing import files through the API.

  • Added support for protocol-relative URLs while using the Image Proxy.

  • A Striped LRU cache is now used by default.

  • Added shared channels and remote_cluster_service under a license check.

Bug Fixes 

  • Fixed an issue where the Admin Filter option was not disabled in the AD/LDAP page for Admin roles with a sysconsole_write_authentication permission.

  • Fixed an issue where channels would sometimes be removed from custom categories when a user left a team.

  • Fixed an issue where the error text was missing when the team name was left blank on the Team Create page.

  • Fixed an issue where the System Manager was able to download the Compliance Export files.

  • Fixed an issue where themed button colours in interactive message attachments in Mattermost’s default dark theme were mismatched.

  • Fixed an issue where bold and italics shortcuts triggered with CTRL+B on Mac.

  • Fixed an issue where a “Your license does not support cloud requests” log error appeared on self-hosted servers.

  • Fixed an issue where the permissions of a System Admin role got deleted when changing the access level to any permission.

  • Fixed an issue where editing a /me post behaved differently within the Mattermost Web App and the Mobile App.

  • Fixed an issue where the hover state on category headers did not span the whole width of the left-hand navigation.

  • Fixed an issue where plugins on the left-hand side of the System Console were sorted differently than the ones in the Plugin Management page.

  • Fixed an issue where 15-character team names were truncated when the experimental channel sidebar was enabled.

  • Fixed an issue where the sidebar menus weren’t styled correctly in mobile browser view.

  • Fixed an issue where jumping into an archive channel and clicking the link to jump to recent messages sent the user out of the archived channel.

  • Fixed an issue where the tooltip text for copying an incoming webhook URL was unclear.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Deprecated the ExperimentalChannelSidebarOrganization setting and added a new EnableLegacySidebar setting. The new channel sidebar will be enabled system-wide by default.

  • The UseExperimentalGossip field under ClusterSettings is now true by default. This means that new installations will use the Gossip protocol for cluster communication. There will be no changes to existing installations. The Gossip protocol is now considered to be in General Availability and is the recommended clustering mode.

  • Enabled ExperimentalDataPrefetch for all servers and removed the corresponding setting.

  • Under NativeAppSettings in config.json:

    • Added a AppCustomURLSchemes setting to add the ability to redirect to the mobile app after OAuth & SAML auth completion.

Go Version 

  • 5.32 is built with Go 1.15.5.

API Changes 

  • Thread related API routes now include teamId path parameter.

  • Changed output of Get Threads API to include total_unread_threads instead of total_unread_replies.

  • Added collapsedThreads and collapsedThreadsExtended query parameters to:

    • api/v4/channels/{channel_id:[A-Za-z0-9]+}/posts

    • api/v4/users/{user_id:[A-Za-z0-9]+}/channels/{channel_id:[A-Za-z0-9]+}/posts/unread

    • api/v4/posts/{post_id:[A-Za-z0-9]+}/thread

Database Changes 

  • Added a new Shared column to the Channels table.

Known Issues 

  • Config.json can reset when running the command systemctl restart mattermost, and when running any commands that write to the config (e.g. config or plugin) MM-33752, MM-32390.

  • The server tries to install E20 required plugins on non-E20 installations. MM-32387

  • Some known issues related to the new channel sidebar, such as that the team icon on-click animation is laggy. MM-32198

  • Adding an at-mention at the start of a post draft, then pressing the left or right arrow can clear the post draft and the undo history MM-33823.

  • Reddit link previews no longer work in Mattermost. MM-31899

  • Posts created by bots containing attachments sometimes appear as repeated until the user refreshes the page. MM-30980

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side. MM-31994

  • Slow typing has been experienced when the channel sidebar has many channels. MM-30407

  • Slack theme import fails due to changes in formatting of Slack export color schemes. MM-30531

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.31 - ESR 

  • v5.31.9, released 2021-08-04

    • Mattermost v5.31.9 contains a medium level security fix. Upgrading to this release is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Improved typing performance in affected environments by reducing the frequency at which drafts are saved.

  • v5.31.8, released 2021-07-21

    • Fixed an issue in clustering where a mutex would fail to be unlocked when a timeout happened. MM-37246

  • v5.31.7, released 2021-06-21

    • Fixed an issue with an infinite recursion during message export for Hitachi HCP file backends. MM-36440

  • v5.31.6, released 2021-06-11

    • Fixed an issue where subsequent migrations failed to run after running a dot release on new installations. MM-35931

    • Fixed an issue where messages with fallback text were repeated. MM-30980

  • v5.31.5, released 2021-05-12

    • Fixed an issue where mmctl channel move did not allow moving private channels. MM-32746

  • v5.31.4, released 2021-04-23

    • Fixed an issue with client-side slash commands being processed by multiple plugins. MM-35074

  • v5.31.3, released 2021-04-07

    • Fixed an issue where cluster handlers were not immediately registered after starting the server. This led to issues where jobs were not scheduled until a request hit the cluster. MM-34179

    • Fixed an issue where the server version was reported as v5.30.0.

  • v5.31.2, released 2021-03-29

    • Improved typing performance on busy servers with lots of active users and with the new sidebar enabled. MM-30407

    • Fixed bugs related to replication lag for Enterprise Edition instances configured to use read replicas. MM-31094

  • v5.31.1, released 2021-02-05

    • Fixed an issue where the config.json was sporadically getting reset upon CLI command execution. MM-32234

    • Fixed an issue where FeatureFlags section was getting erroneously written to config.json. MM-32389

    • Fixed an issue where channels were sometimes removed from custom categories when a user left a team. MM-30314

    • Fixed an issue where users were unable to mark Direct Messages in a thread as unread. MM-32253

    • Fixed an issue where PermanentDeleteChannel failed with “failed to get a thread” error. MM-31731

  • v5.31.0, released 2021-01-16

    • Original 5.31.0 release

Mattermost v5.31.0 contains a low level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Compatibility 

  • Support for Mattermost Server v5.25 Extended Support Release is coming to the end of its life cycle on April 16, 2021. Upgrading to Mattermost Server v5.31 Extended Support Release or later is highly recommended.

Highlights 

Improved status updates for Incident Management (E20 Edition) 

  • Pre-packaged and pre-installed the Mattermost Incident Management v1.2.0, which enables incident responders to easily inform stakeholders of incident status updates.

Improvements 

User Interface (UI) 

  • Added the ability to mute categories with the experimental channel sidebar feature.

  • Added support for multi-selection of channels when dragging and dropping between channels in the experimental sidebar feature.

  • Group messages are now returned in the channel switcher when only first names are typed.

  • Issuing /dnd consecutively no longer unexpectedly toggles the user’s status between “Do Not Disturb” and “Online”, and will only set the user’s status to “Do Not Disturb”.

Administration 

  • Added a new manage_remote_clusters permission.

Bug Fixes 

  • Fixed an issue where the UnreadMentions column was missing in the ThreadMemberships table for servers upgrading from v5.29.0. Admins planning to enable Collapsed Reply Threads (available in beta in Q1 2021) are recommended to upgrade to v5.31.0 or later.

  • Cleaned up the config store on server initialization errors.

  • Fixed an issue where permissions did not grant read and/or write access to the Global Relay configuration settings.

  • Fixed an issue where the site configuration “Read only” permission did not make the “Notice” section read-only for the System Manager.

  • Fixed an issue where importing Client4 in a node server caused an exception due to rudder modules.

  • Fixed an issue where LDAP FirstLoginSync didn’t close the LDAP session.

  • Fixed an issue where line numbers did not line up with the text on code file previews.

  • Fixed an issue where the threshold from the bottom of the screen was sometimes not respected for received messages.

  • Fixed an issue where desktop notifications got sent for every message posted in a Direct Message channel.

Go Version 

  • 5.31 is built with Go 1.14.6.

API Changes 

  • Added a new POST /api/v4/cloud/webhook endpoint.

Websocket Event Changes 

  • Added new websocket events thread_updated, thread_follow_changed, and thread_read_changed.

Known Issues 

  • The Database Schema Version is displayed as 5.30.0 in the About Mattermost modal.

  • Config.json can reset when running the command systemctl restart mattermost and when running any commands that write to the config (e.g. config or plugin) MM-33752, MM-32390.

  • Reddit link previews no longer work in Mattermost. MM-31899

  • Discard Changes confirmation is not displayed when a System Admin adds people on the System Roles System Console page and clicks elsewhere before saving the changes. MM-29927

  • Error text is missing when the team name is left blank on the team creation page. MM-31361

  • Posts created by bots containing attachments sometimes appear as repeated until the user refreshes the page. MM-30980

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side. MM-31994

  • Slow typing has been experienced when the channel sidebar has many channels. MM-30407

  • Slack theme import fails due to changes in formatting of Slack export color schemes. MM-30531

  • A JavaScript error may appear in some cases when dismissing the new messages toast while scrolled up in the right-hand side. MM-30446

  • The Admin Filter option is not disabled on the AD/LDAP page for Admin roles with the sysconsole_write_authentication permission. MM-29089

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotation marks with Elasticsearch enabled returns more than just the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.30 - Feature Release 

  • v5.30.3, released 2021-02-02

    • Fixed an issue where the Edition diagnostics field was reporting as “null” for Team Edition servers on 5.30.

  • v5.30.2, released 2021-01-18

    • Fixed an issue where the UnreadMentions column was missing in the ThreadMemberships table for servers upgrading from v5.29.0. Admins planning to enable Collapsed Reply Threads (available in beta in Q1 2021) are recommended to upgrade to v5.30.2 or later.

  • v5.30.1, released 2020-12-18

    • Fixed the displayed modal Build Number version to standard semver.

  • v5.30.0, released 2020-12-16

    • Original 5.30.0 release

Compatibility 

  • PostgreSQL ended long-term support for version 9.4 in February 2020. From v5.26 Mattermost officially supports PostgreSQL version 10 as PostgreSQL 9.4 is no longer supported. New installs will require PostgreSQL 10+. Previous Mattermost versions, including our current ESR, will continue to be compatible with PostgreSQL 9.4. PostgreSQL 9.4 and all 9.x versions are now fully deprecated in our v5.30 release (December 16, 2020). Please follow the instructions under the Upgrading Section within the PostgreSQL documentation.

Highlights 

Incident Management provided out-of-the-box (E20) 

  • Pre-packaged and pre-installed the Incident Management as well as Channel Export plugins for enterprise-ready builds.

Configure New Admin Roles Permissions in the System Console (E20, Beta) 

  • Mattermost recently released three new pre-built granular administrator roles to enable you to selectively delegate administrative tasks to other members of your organization. The three new roles are System Manager, User Manager, and Read-only Admin. Now you can configure specific permissions for these roles directly from the System Console.

Improvements 

User Interface 

  • @-autocomplete results are now prioritized based on recency and thread activity.

  • File attachments below the size of 10 (KB, MB, GB, TB, etc.) now allow showing fractions.

  • The formatting of the channel header change message was improved.

  • Team invite workflow now shows BOT tags when the search returns bot users.

  • Added the ability to zoom in and out of PDF files.

  • Added support for 16x16 base64 encoded mini images to use with progressive rendering.

Notifications 

  • Channel-wide mentions are now automatically disabled when a user mutes a channel.

Command Line Interface (CLI) 

  • Added new local API endpoints for getting, updating, and deleting incoming and outgoing webhooks.

  • Added mmctl system version endpoint to print the remote server version.

  • Improved the mmctl system status command output to include all the reported values.

Integrations 

  • Updated icon_emoji field in incoming webhooks to allow emojis to be specified with surrounding colons.

  • Dynamic auto-completion is now supported for built-in slash commands.

  • Added plugin hooks for ReactionHasBeenAdded and ReactionHasBeenRemoved.

Administration 

  • Added the ability to load a set of custom configuration defaults from a MM_CUSTOM_DEFAULTS_PATH environment variable.

  • Added AWS metering service support.

Enterprise Edition (EE) 

  • Added the ability to retrieve compliance files from the System Console.

Bug Fixes 

  • Fixed a performance issue related to typing lag.

  • Fixed an issue where YouTube previews did not display sometimes.

  • Fixed an issue with broken link previews for Twitter links.

  • Fixed an issue where editing a post did not submit with CMD+ENTER.

  • Fixed an issue where users were able to create or edit slash commands to contain more than two slashes in the URL.

  • Fixed an issue where resized emojis were being overwritten with original data.

  • Fixed an issue where the sidebar category More menu was not shown when hovering over a long category name.

  • Fixed an issue where a received direct message notification did not show up on the sidebar if the Direct Message channel was newly created.

  • Fixed an issue where a search using from: failed to auto-load more results on the right-hand side when Elasticsearch was enabled.

  • Fixed an issue where an s3 file backend TestFileConnection failed due to permissions if S3PathPrefix was in use.

  • Fixed an issue where an ID was missing for a Tooltip in PostInfo.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ExperimentalSettings in config.json:

    • Added EnableSharedChannels, to support managing shared channels feature.

  • Under SamlSettings in config.json:

    • Added IgnoreGuestsLdapSync, to ignore guests when using SAML and synchronizing with LDAP.

Go Version 

  • 5.30 is built with Go 1.14.6.

Open Source Components 

  • Added @stripe/react-stripe-js, @stripe/stripe-js, and @types/country-list to https://github.com/mattermost/mattermost-webapp.

  • Removed react-native-image-gallery from https://github.com/mattermost/mattermost-mobile.

  • Added react-native-redash and react-native-share to https://github.com/mattermost/mattermost-mobile.

Database Changes 

  • Added a new column minipreview to FileInfo table.

Websocket Event Changes 

  • In post_deleted websocket event, System Admins are now notified when a user initiates a post deletion.

API Changes 

  • Added new local API endpoints for getting, updating, and deleting incoming and outgoing webhooks.

  • Added new API endpoints to work with experimental collapsed threads.

Known Issues 

  • The config.json may reset itself to default values if the binary is run with the root user.

  • Reddit link previews no longer work in Mattermost. This affects older versions too.

  • Discard Changes confirmation is not displayed when an admin adds people in the System Roles System Console page, then clicks elsewhere before saving the changes.

  • Slow typing has been experienced when the channel sidebar has many channels. This has been reported in older versions too.

  • Slack theme import fails due to changes in formatting of Slack export color schemes.

  • Error text is missing when the team name is left blank on the team creation page.

  • Line numbers do not line up with the text on code file previews.

  • In some cases reply posts cannot be marked as unread.

  • The threshold from the bottom of the screen is sometimes not respected for received messages.

  • Posts created by bots containing attachments sometimes appear as repeated until the user refreshes the page.

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side.

  • A JavaScript error may appear in some cases when dismissing the new messages toast while scrolled up in the right-hand side.

  • The Admin Filter option is not disabled in AD/LDAP page for admin roles with sysconsole_write_authentication permission.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console. To fix this, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • The team sidebar on the desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.29 - Quality Release 

  • v5.29.2, released 2021-01-18

    • Fixed an issue where the UnreadMentions column was missing in the ThreadMemberships table for servers upgrading from v5.29.0. Admins planning to enable Collapsed Reply Threads (available in beta in Q1 2021) are recommended to upgrade to v5.29.2 or later.

  • v5.29.1, released 2020-12-03

    • Disabled the xmlsec1-based SAML library in favor of the re-enabled and improved SAML library.

    • Added UnreadMentions column to ThreadMemberships table, and fixed server log warnings related to ThreadMemberships. Admins planning to enable Collapsed Reply Threads (available in beta in Q1 2021) are recommended to upgrade to v5.29.1 or later.

  • v5.29.0, released 2020-11-16

    • Original 5.29.0 release

Compatibility 

  • A new configuration setting ThreadAutoFollow has been added to support Collapsed Reply Threads releasing in beta in Q1 2021. This setting is enabled by default and may affect server performance. It is recommended to review our documentation on hardware requirements to ensure your servers are appropriately scaled for the size of your user base.

IMPORTANT: If you upgrade from a release earlier than v5.28, please read the other Important Upgrade Notes.

Highlights 

Channel Moderation Settings now generally available (E20) 

Mattermost Omnibus now generally available 

  • Mattermost Omnibus feature was moved out of beta to general availability.

Improvements 

User Interface (UI) 

  • Added a new browser favicon state for when there are new messages but no mentions.

  • Improved sort order of the channel switcher to prioritize recently viewed channels.

  • Improved filter control for the new channel sidebar to show unread channels without categories.

  • The ‘More unreads’ banner in the new channel sidebar was updated to match the new mobile app styling.

  • A threshold was added from the bottom of the screen for the new messages toast.

Bug Fixes 

  • Fixed an issue where Enterprise CLI commands would not run.

  • Fixed an issue where the right-hand side comment box got pushed out of the view when a new message was posted in the message thread.

  • Fixed an issue where the color picker colors were missing from the Announcement Banner page in the System Console.

  • Fixed an issue where links in channels headers overlapped in some cases.

  • Fixed an issue where a plugin could create a blank ephymeral post, leading to a white screen.

  • Fixed an issue where the channel switcher dialog was not accessible with a screen reader.

  • Fixed an issue where email addresses were not auto-detected on invites.

  • Fixed an issue where duplicate sidebar categories could be created on first use of the new experimental sidebar.

  • Fixed an issue where installing plugins on a server using FileSettings.PathPrefix caused issues.

  • Fixed an issue where the error message was unclear when a plugin crashed during a slash command execution.

  • Fixed an issue where bot icon images had too much height.

  • Fixed an issue where tags where nested in Plugin Marketplace labels.

  • Fixed an issue with inconsistent behaviour in channel mentions in message attachments.

  • Fixed an issue where ephemeral posts posted by bot accounts showed a wrong username on the right-hand side.

  • Fixed an issue where the category headings in the experimental sidebar were not sticky and overlapped the More Unreads indicators.

  • Fixed an issue where Automatic Direct Message Replies were not shown on the right-hand side.

  • Fixed an issue where Automatic Direct Message Replies were still showing after the root post was deleted.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added ThreadAutoFollow, to add support for collapsed reply threads.

    • Added ManagedResourcePaths, to add support for a setting to use with the Desktop Managed Resources feature.

Go Version 

  • 5.29 is built with Go 1.14.6.

Open Source Components 

  • Removed @types/react-custom-scrollbars from https://github.com/mattermost/mattermost-webapp.

Database Changes 

  • Altered some types and defaults in SidebarCategories table.

  • Added a new column Threads.ChannelId.

  • Added UnreadMentions column to ThreadMembership table.

Known Issues 

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side.

  • A JavaScript error may appear in some cases when dismissing the new messages toast while scrolled up in the right-hand side.

  • Slow typing has been experienced when the channel sidebar has many channels. This has been reported in older versions too.

  • Slack theme import fails due to changes in formatting of Slack export color schemes.

  • Pressing ENTER closes the Account Settings Edit modal when adjusting the settings for desktop notification sound.

  • Admin Filter option is not disabled in AD/LDAP page for admin roles with sysconsole_write_authentication permission.

  • Twitter link previews no longer work in Mattermost as Twitter has removed OpenGraph data from its pages.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console. To fix this, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.28 - Feature Release 

  • v5.28.2, released 2020-12-03

    • Disabled the xmlsec1-based SAML library in favor of the re-enabled and improved SAML library.

  • v5.28.1, released 2020-10-19

    • Fixed an issue where mmctl Command Line Tool (Beta) was broken on Mattermost server v5.28.0. MM-29740

    • Fixed an issue where the Compliance Exports were taking too long on large deployments. This was fixed with a performance optimization of the message export query.

  • v5.28.0, released 2020-10-16

    • Original 5.28.0 release

Compatibility 

  • PostgreSQL ended long-term support for version 9.4 in February 2020. Mattermost is officially supporting PostgreSQL version 10 with v5.26 release as PostgreSQL 9.4 is no longer supported. New installs will require PostgreSQL 10+. Previous Mattermost versions, including our current ESR, will continue to be compatible with PostgreSQL 9.4. We plan on fully deprecating PostgreSQL 9.4 and all 9.x versions in our v5.30 release (December 16, 2020). Please follow the instructions under the Upgrading Section within the PostgreSQL documentation.

  • Support for Mattermost Server Extended Support Release (ESR) 5.19 has come to the end of its lifecycle. Upgrading to Mattermost Server v5.25 or later is required.

  • TLS versions 1.0 and 1.1 have been deprecated by browser vendors. Starting in v5.31 (January 16, 2021) mmctl will return an error when connected to Mattermost servers deployed with these TLS versions and System Admins will need to explicitly add a flag in their commands to continue to use them. We recommend upgrading to TLS version 1.2 or higher.

Breaking Changes 

  • Now when the service crashes, it will generate a coredump instead of just dumping the stack trace to the console. This allows us to preserve the full information of the crash to help with debugging it. For more information about coredumps, please see: https://man7.org/linux/man-pages/man5/core.5.html.

IMPORTANT: If you upgrade from a release earlier than v5.27, please read the other Important Upgrade Notes.

Highlights 

New admin roles to delegate administration tasks to other types of administrators (E20) 

  • New admin roles are additional system roles that have access to designated areas of the System Console. This enables you to delegate certain administrative tasks to other members of your organization.

Certificate-based authentication with AD/LDAP (E10) 

  • You can now improve the security of your AD/LDAP authentication with certificate-based AD/LDAP authentication.

Stay current with in-product notices 

  • With in-product notices, users and Admins will be made aware of the newest product enhancements from within Mattermost. Learn more about in-product notices here.

Improvements 

User Interface (UI) 

  • Improved the readability of the toast banner message timestamp, post timestamp, and date separators.

  • Added animation for emoji reactions on webapp.

  • Added the ability to use CTRL+B and CTRL+I to add bold and italics markdown formatting to selected text.

  • Clicking on original message creator’s username in discontinuing posts now opens the user’s profile popover.

  • Added support for PSD file preview.

  • When the Enable Latex Rendering option is set to true, the current code now doesn’t highlight.

  • Updated the UX of the More unreads indicator in the channel sidebar.

  • Select Team list container now scales in width based on browser window width.

  • Added support for signaling login to other tabs (Windows, macOS and Linux browsers).

Notifications 

  • Added an option in the Account Settings to select different desktop notification sounds. This setting is available in supported browsers and in the Desktop app v4.6 and later.

Command Line Interface (CLI) 

  • Added config migrate, config subpath, user delete, integrity, user migrate_auth, moveChannel, updateChannelPrivacy, restoreTeam, channel delete, and plugin marketplace commands to mmctl.

Plugins 

  • Plugins now start concurrently on server startup.

  • Plugin tooltips are now only rendered when user hovers over a link.

  • Added a CreateCommand plugin API that creates a slash command that is not handled by the plugin itself.

Administration 

  • Added the ability to upload and remove private and public certificates for LDAP authentication.

  • Added support for resumable file uploads.

  • Added the ability to convert a public channel to private and vice versa via Advanced Permissions.

  • Added filters to search teams in Teams page.

  • Improved logging related to sessions that are not found.

  • Created Grafana enterprise metrics for logging, such as for current queue level(s), rate of logging records emitted, and rate of logging errors.

  • Improved logging when GetUser fails during MFA Authentication.

  • Added support for sending telemetry via an environment variable set by packages to identify type of deployment (e.g. Docker, Mattermost Omnibus).

Bug Fixes 

  • Fixed an issue where a large number of archived channels caused performance degradation.

  • Fixed an issue where group list-ldap mmctl command didn’t return any results.

  • Fixed an issue where user were allowed to update their profile picture on ADFS setup with SAML and LDAP configured and AD/LDAP Sync enabled.

  • Fixed an issue where patching the config with DataSourceReplicas caused a panic.

  • Fixed an issue where API invites by email were silently rate-limited.

  • Fixed an issue where deactivated users broke pagination in Manage Members modal.

  • Fixed an issue where an error occurred while inviting more than 20 users to a team via Invite People.

  • Fixed an issue where a PostUtils.formatText crashed when formatting text with unicode emoji.

  • Fixed an issue where a white screen occurred when editing a post and sending the post from a preview mode.

  • Fixed an issue on Microsoft Edge (non-Chromium) where logging out caused the user to get stuck at a loading screen.

  • Fixed an issue where a selected item in the Direct Messages More menu didn’t scroll into view when using keyboard navigation.

  • Fixed an issue where users received ghost notifications when the “First name trigger mention” setting was set but the “First Name” was not set.

  • Fixed an issue where post text was partially hidden by the post hover menu.

  • Fixed an issue where users were unable to type color hex value into custom theme color input box.

  • Fixed an issue where the badge with a mention count on the team sidebar did not increment when user was added to a channel.

  • Fixed an issue where Group Message results were prioritized over Direct Message results for Full Name in the user autocomplete.

  • Fixed an issue where the New Message indicator was broken when a webhook owned by the user posted to a channel.

  • Fixed an issue where the active search bar was not vertically aligned with left edge of the right-hand side in tablet view.

  • Fixed an issue where there were two scrollbars showing in the channel switcher.

  • Fixed an issue where the “Start trial” message was unreadable in the System Console on dark theme on first load.

  • Fixed an issue on Firefox where pasting an image also added the file as text.

  • Fixed an issue where Python syntax highlighting handled """ strangely.

  • Fixed an issue where formatting around inline codes was missing.

  • Fixed an issue where GetPluginStatus didn’t work in a non-cluster environment.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under LdapSettings in config.json:

    • Added PublicCertificateFile, to be able to upload the public certificate to be used for encryption with SAML configuration.

    • Added PrivateKeyFile, to be able to upload the private key to be used for encryption with SAML configuration.

  • Under ServiceSettings in config.json:

    • Added EnableAPIChannelDeletion, to permanently delete channels for compliance reasons.

    • Added EnableAPIUserDeletion, to permanently delete users for compliance reasons.

  • Under NotificationLogSettings and ExperimentalAuditSettings in config.json:

    • Added AdvancedLoggingConfig, to enable configuration options for setting audit targets.

  • Under AnnouncementSettings in config.json:

    • Added AdminNoticesEnabled and UserNoticesEnabled, to enable in-product notices to make users and Admins aware of the newest product enhancements from within Mattermost.

  • EnableCustomEmoji, EnableGifPicker, ExperimentalViewArchivedChannels and ExperimentalTimezone are now enabled by default for new installs.

Open Source Components 

  • Added react-is and tinycolor2 to https://github.com/mattermost/mattermost-webapp.

  • Removed @types/highlight.js, @typescript-eslint/parser, bootstrap-colorpicker, and intl from https://github.com/mattermost/mattermost-webapp.

  • Removed react-native-v8 from https://github.com/mattermost/mattermost-mobile.

Database Changes 

  • Added a new column Commands.PluginId.

  • Changed to data type of Teams.Type to varchar(255).

  • Changed to data type of Teams.SchemeId to varchar(26).

  • Changed to data type of IncomingWebhooks.Username to varchar(255).

  • Changes to data type of IncomingWebhooks.IconURL to text",.

API Changes 

  • Added POST /upgrade_to_enterprise API endpoint.

  • Added GET /upgrade_to_enterprise/status API endpoint.

  • Added POST /restart API endpoint.

  • Added GET /warn_metrics/status API endpoint.

  • Added POST /warn_metrics/ack/:warn_metric_id API endpoint.

Known Issues 

  • Emoji counter in the center channel doesn’t always update immediately when a reaction is added in the right-hand side.

  • Pressing ENTER closes the Account Settings Edit modal when adjusting the settings for desktop notification sound.

  • Admin Filter option is not disabled in AD/LDAP page for admin roles with sysconsole_write_authentication permission.

  • Twitter link previews no longer work in Mattermost as Twitter has removed OpenGraph data from its pages.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console. To fix this, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.27 - Quality Release 

  • v5.27.2, released 2020-12-03

    • Disabled the xmlsec1-based SAML library in favor of the re-enabled and improved SAML library.

  • v5.27.1, released 2020-10-19

    • Fixed an issue where the Compliance Exports were taking too long on large deployments. This was fixed with a performance optimization of the message export query.

  • v5.27.0, released 2020-09-16

    • Original 5.27.0 release

Mattermost v5.27.0 contains a low level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Improvements 

  • Added the ability to upgrade Mattermost from Team Edition to Enterprise Edition directly from the System Console.

  • Added various improvements for Admin Advisor feature (Team Edition), including that the bot messages now appear only once for the 500-user advisory and the banner notification interval is reduced from daily to weekly.

  • Changed the Default Theme setting in the System Console to a drop-down field.

Bug Fixes 

  • Fixed an issue where the server crashed when a Compliance Export job was run for Global Relay EML.

  • Fixed an issue where Compliance Jobs did not restart correctly after a Warning status.

  • Fixed an issue where users were not matching on mixed-case SAML assertions.

  • Fixed an issue where Channel Admin was not able to make the default role as Channel Admin for AD/LDAP Groups.

  • Fixed an issue where user role was not added correctly in the Members block in System Console > Teams.

  • Fixed an issue where a team stopped loading in the System Console Filter By-dropdown when a search was performed and then cleared.

  • Fixed an issue where the ability to demote Admins to members and to deactivate accounts from System Console > Users was not available.

  • Fixed an issue where a false message “Group Mentions is already taken” was shown when a System Admin tried to add a channel to an AD/LDAP Group.

  • Fixed an issue where a AD/LDAP group mention of an outsider group was highlighted in a Group Synced channel.

  • Fixed an issue where incoming webhooks owned by a bot did not consistently allow a username override.

  • Fixed an issue where the emoji picker in the Edit Post modal was misaligned.

  • Fixed an issue where pasted unicode emojis failed to appear once posted.

  • Fixed an issue where long text in message edit modal did not scroll with a scroll bar.

  • Fixed an issue with Accessibility where user’s name was not displayed in alt text on some images.

  • Fixed an issue where dates on System Console > Site Statistics - Dates were displayed out of order on days when there were no posts.

  • Fixed an issue where the Admin Advisor bot was unexpectedly displayed in the Integrations > Bot Accounts page.

  • Fixed an issue where a new badge in the channel sidebar category header reappeard after a channel was removed from the category.

  • Fixed an issue where the theme color for Sidebar Text Active Border was not currently being used in the active border in the sidebar.

  • Fixed an issue where users saw an incorrect mention count when added to a channel by another user.

  • Fixed an issue where channels created from another browser tab did not immediately appear in the channel sidebar.

  • Fixed an issue where a console error showed when creating a new custom category in the channel sidebar.

  • Fixed an issue where enabling the new channel sidebar created invalid channel links.

  • Fixed an issue where a channel state got broken after an “unallowed” deletion.

  • Fixed an issue where dynamic slash command autocomplete options did not update between requests.

  • Fixed an issue where an incorrect callback URL with OAuth 2.0 allowed users to click Back to Mattermost in the authentication window.

  • Fixed an issue where editing “Full Name” got overwritten by Single Sign-On settings.

  • Fixed an issue where “You do not have the appropriate permissions” error was shown for warn_metrics call for non-admin users.

  • Fixed an issue where the channel switcher sometimes showed a wrong empty state with network API.

  • Fixed an issue where the loader was not hidden when posts were not loading which affected the performance of some Linux distros.

  • Fixed an issue where PatchConfig caused a panic if SiteURL was not set.

  • Fixed an issue where a panic occurred when the server was getting a shutdown before InitPlugins() was able to complete.

  • Fixed an issue where a panic was caused when a user joined a team with default channels archived.

  • Fixed an issue where App.GetSidebarCategories() panicked on nil returned value.

  • Fixed an issue where the SendEmailNotifications setting blocked testing the SMTP connection.

Open Source Components 

  • Removed @types/redux-mock-store and tinycolor2 from https://github.com/mattermost/mattermost-webapp.

  • Added bootstrap-colorpicker in https://github.com/mattermost/mattermost-webapp.

  • Added @react-native-community/clipboard in https://github.com/mattermost/mattermost-mobile.

API Changes 

  • Added POST api/v4/upgrade_to_enterprise API endpoint to be able to execute an inplace upgrade from Team Edition to Enterprise Edition.

  • Added GET api/v4/upgrade_to_enterprise/status API endpoint to get the current status for the inplace upgrade from Team Edition to Enterprise Edition.

  • Added POST api/v4/restart API endpoint to restart the system after an upgrade from Team Edition to Enterprise Edition.

Known Issues 

  • A blank screen occurs when user edits a post and submits or cancels the edits while on Preview mode.

  • Twitter link previews do not work in Mattermost.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console. To fix this, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as Away or Offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.26 - Feature Release 

  • v5.26.2, released 2020-09-03

    • Forcefully disabled the SAML Setting “Use Improved SAML Library (Beta)”, as we have identified some issues in this feature. Please follow instructions at https://docs.mattermost.com/deployment/sso-saml-before-you-begin.html for enabling SAML using the feature-equivalent xmlsec1 utility.

  • v5.26.1, released 2020-08-25

    • Fixed an issue where users were unable to use the PictureAttribute setting with SAML authentication. MM-27852

    • Fixed an issue where users got unexpectedly logged out from the mobile app when ExtendSessionLengthWithActivity was enabled as opening the mobile app called an API that overrode session extension triggers of typing, channel change, and posts. MM-27184

    • Fixed an issue where users experienced a kernel panic during LDAP sync when AuthData value was null. MM-27965

  • v5.26.0, released 2020-08-16

    • Original 5.26.0 release

Compatibility 

  • PostgreSQL ended long-term support for version 9.4 in February 2020. Mattermost is officially supporting PostgreSQL version 10 with v5.26 release as PostgreSQL 9.4 is no longer supported. New installs will require PostgreSQL 10+. Previous Mattermost versions, including our current ESR, will continue to be compatible with PostgreSQL 9.4. In our 6.0 release (date to be announced), we plan on fully deprecating PostgreSQL 9.4. Please follow the instructions under the Upgrading Section within the PostgreSQL documentation.

Breaking Changes 

  • In v5.26, Elasticsearch indexes needed to be recreated. Admins should re-index Elasticsearch using the Purge index and then Index now button so that all the changes will be included in the index. Systems may be left with a limited search during the indexing, so it should be done during a time when there is little to no activity because it may take several hours.

  • An EnableExperimentalGossipEncryption option was added under ClusterSettings. If this is set to true, and UseExperimentalGossip is also true, all communication through the cluster using the gossip protocol will be encrypted. The encryption uses AES-256 by default, and it is not kept configurable by design. However, if one wishes, they can set the value in Systems table manually for the ClusterEncryptionKey row. A key is a byte array converted to base64. It should be either 16, 24, or 32 bytes to select AES-128, AES-192, or AES-256. To update the key, one can execute UPDATE Systems SET Value='<value>' WHERE Name='ClusterEncryptionKey'; in MySQL and UPDATE systems SET value='<value>' WHERE name='ClusterEncryptionKey' for PostgreSQL. For any change in this config setting to take effect, the whole cluster must be shutdown first. Then the config change made, and then restarted. In a cluster, all servers either will completely use encryption or not. There cannot be any partial usage.

IMPORTANT: If you upgrade from a release earlier than 5.25, please read the other Important Upgrade Notes.

Highlights 

Archive & unarchive channels from the System Console (E20 Edition) 

  • Channels can now be archived and unarchived with ease from the System Console.

Manage members and channels in System Console using search filters (E20 Edition) 

  • Managing members & channels is now lot easier with new search filters.

Customize log configuration and output targets (E20 Edition) 

  • Customize log level records beyond the standard levels of trace, debug, info, and panic, as well as configure different destinations based on discrete log levels.

Categorize and reorder channels with channel sidebar enhancements (Experimental) 

  • Users now have the ability to create custom categories in the sidebar to group channels together for easier navigation, drag channels between or within categories to prioritize conversations most important to you, and much more.

Improvements 

User Interface (UI) 

  • Improved the styling of a deactivated user’s Direct Message channel footer.

  • All emoji aliases are now shown on the emoji picker.

  • Added support for allowing copying and pasting of emoji shortcodes.

  • Added Online, Away, Do Not Disturb, and Offline icons to the status menu for quicker recognition.

  • Increased visibility of user and channel autocomplete suggestions when editing a long post.

  • Added a flag icon to the post hover menu and updated pinned and flagged post styling in the channel.

  • Added support for PostgreSQL & PL/pgSQL syntax highlighting.

  • Expanded the width of server logs page in System Console UI to full screen width.

Localization 

  • Promoted Russian and Dutch languages to “official”.

Command Line Interface (CLI) 

  • Added new mmctl CLI commands, such as ldap idmigrate, user convert, channel move, and user deleteall.

Search 

  • Added ability for Elasticsearch to search terms inside links.

  • Searching for a user with a leading “@” in the search term with Elasticsearch now returns results for those users.

  • Added ability to include filtering search/autocompletion by roles.

  • Added ability to search/autocomplete inactive users from Elasticsearch.

  • Added missing methods such as PermanenteDeleteByUser and PermanenteDeleteByChannel that update and/or delete entities in the searchlayer.

  • Implemented prefix/suffix search on Teams and Channel pages in System Console.

Integrations 

  • Added slash command autocomplete functionality to enable commands to be executed on selection (mouse click, tab or enter).

  • Added plugin API endpoint to run a slash command.

  • Implemented http.Hijacker for plugins’ ServeHTTP to make it possible to upgrade the ServeHTTP hook to expose a websocket connection.

Command Line Interface (CLI) 

  • Added the ability to remove non-members of the target team if channel move fails.

Administration 

  • Added support for a System Admin warning system that displays warnings in the announcement bar and sends Direct Messages to admins if one or more metric fulfills a certain condition.

  • System Console > Plugins section now lists all the installed plugins regardless of the number of configurable settings associated with each plugin.

  • Servers now send a push notification to mobile clients when a user’s session expires.

  • Clearing the Site URL in the System Console is no longer allowed.

  • Changed the patch post API endpoint authorization logic to allow the edit_others_posts permission to function independently from edit_own_posts.

  • Included a response code in the “Received HTTP Request” log line.

  • Added support for a new environment variable MM_LICENSE which can contain the contents of a license file. When set, this license takes priority over all other license sources.

  • Added support for encryption for gossip protocol.

  • Move gossip protocol to use only gossip.

Bug Fixes 

  • Fixed an issue where an empty outgoing webhook response generated a spurious ERROR.

  • Fixed an issue where quick switch user search was always falling back to the database.

  • Fixed an issue where a user’s status was displayed as online while the database status was displayed as offline.

  • Fixed an issue where Elasticsearch indexing job did not index users and/or channels older than the first post.

  • Fixed an issue where Global Relay SMTP connection timeout was not independent of the regular SMTP email settings timeout.

  • Fixed an issue with a poor performance when opening More Direct Messages modal.

  • Fixed an issue where bot username validation message was unclear as it did not mention which value was invalid.

  • Fixed an issue where Command+K input field lost focus when the window lost focus, causing search results to disappear.

  • Fixed an issue where a highlight was missing when users at-mentioned themselves, followed by period, underscore, or hyphen.

  • Fixed an issue where a 500 error was returned by the /posts/unread endpoint caused by an integer overflow when limit_after was set to 0.

  • Fixed an issue where the footer text in invitation emails was not translated.

  • Fixed an issue where PermanentDeleteTeam did not return an error but did a soft deletion if EnableAPITeamDeletion was not set.

  • Fixed an issue on PostgreSQL where logging in using MFA did not respect the uppercase of the email address.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added ExperimentalDataPrefetch, to enable messages in all unread channels to be pre-loaded from the server whenever the client reconnects to the network to eliminate loading time when users switch to unread channels.

  • Under ClusterSettings in config.json:

    • Added EnableExperimentalGossipEncryption, to enable all communication through the cluster using the gossip protocol to be encrypted.

  • Under LogSettings in config.json:

    • Added EnableSentry, to enable sentry reporting.

    • Added AdvancedLoggingConfig, to enable optional logging capability to allow sending log records to a number of destinations.

  • Under FileSettings in config.json:

    • Added AmazonS3PathPrefix, to allow using the same S3 bucket for multiple deployments.

  • Under EmailSettings in config.json:

    • Added PushNotificationBuffer, to remove hardcoded goroutine workers from push notifications to improve notifications arriving in order.

  • Under SupportSettings in config.json:

    • Added EnableAskCommunityLink, to enable showing a link in the Mattermost channel header under the Help menu. When clicked, users are redirected to https://mattermost.com/pl/default-ask-mattermost-community/, where they can join the Mattermost Community to ask questions and help others troubleshoot issues. This option is not available on the mobile apps.

  • Under GlobalRelayMessageExportSettings in config.json:

    • Added SMTPServerTimeout, to ensure Global Relay SMTP connection timeout is independent of regular email settings timeout.

Open Source Components 

  • Added react-native-cookies and react-native-keyboard-aware-scroll-view, and removed @react-native-community/cookies in https://github.com/mattermost/mattermost-mobile.

  • Added dynamic-virtualized-list and prettier in https://github.com/mattermost/mattermost-webapp.

  • Added rudder-sdk-js in https://github.com/mattermost/mattermost-redux.

Database Changes 

  • Added a new column Sessions.ExpiredNotify.

API Changes 

  • Added POST api/v4/bots/:bot_id/convert_to_user API endpoint to add the ability to convert a bot into a user.

  • Added POST api/v4/users/:user_id/convert_to_bot API endpoint to add the ability to convert a user into a bot.

  • Added GET api/v4/users/:user_id/teams/:team_id/channels/categories API endpoint to get a list of sidebar categories that will appear in the user’s sidebar on the given team, including a list of channel IDs in each category.

  • Added POST api/v4/users/:user_id/teams/:team_id/channels/categories API endpoint to create a custom sidebar category for the user on the given team.

  • Added PUT api/v4/users/:user_id/teams/:team_id/channels/categories API endpoint to update any number of sidebar categories for the user on the given team.

  • Added GET api/v4/users/:user_id/teams/:team_id/channels/categories/order API endpoint to get the order of the sidebar categories for a user on the given team as an array of IDs.

  • Added PUT api/v4/users/:user_id/teams/:team_id/channels/categories/order API endpoint to update the order of the sidebar categories for a user on the given team.

  • Added GET api/v4/users/:user_id/teams/:team_id/channels/categories/:category_id API endpoint to get a single sidebar category for the user on the given team.

  • Added PUT api/v4/users/:user_id/teams/:team_id/channels/categories/:category_id API endpoint to update a single sidebar category for the user on the given team.

  • Added DELETE api/v4/users/:user_id/teams/:team_id/channels/categories/:category_id API endpoint to delete a single custom sidebar category for the user on the given team.

  • Added POST api/v4/ldap/migrateid API endpoint to migrate LDAP IdAttribute to a new value.

  • Added GET api/v4/warn_metrics/status API endpoint to get the status of a set of metrics (enabled or disabled) from the Systems table.

  • Added POST api/v4/warn_metrics/ack/:warn_metric_id API endpoint to acknowldge a warning for the warn_metric_id metric crossing a threshold (or some similar condition being fulfilled).

  • Added GET api/v4/groups/:group_id/stats API endpoint to retrieve the stats of a given group.

  • Added GET api/v4/teams/:team_id/channels/private API endpoint to get a list of private channels on a team based on query string parameters.

  • Added GET api/v4/users/stats/filtered API endpoint to get a count of users in the system matching the specified filters.

  • Added POST api/v4/users/:user_id/email/verify/member API endpoint to verify the email used by a user without a token.

  • Added POST api/v4/users/:user_id/typing API endpoint to notify users in the given channel via websocket that the given user is typing.

  • Added Get/Update/Delete user preferences to Plugin API.

  • Added channel ID check for Plugin API UploadFile to specify the ID of the channel a file will be uploaded to.

Websocket Event Changes 

  • Added sidebar_category_created Websocket Event.

  • Added sidebar_category_updated Websocket Event.

  • Added sidebar_category_deleted Websocket Event.

  • Added sidebar_category_order_updated Websocket Event.

  • Added warn_metric_status_received Websocket Event.

  • Added warn_metric_status_removed Websocket Event.

Known Issues 

  • Twitter link previews do not work in Mattermost.

  • Pasted unicode emojis fail to appear once posted.

  • CMD+SHIFT+V does not paste copied text on MacOS on Safari 12 (Catalina) and Firefox.

  • Enabling Bleve search engine makes the Command Line Interface (CLI) mutually exclusive with the running server. This issue does not apply when using mmctl Command Line Tool.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.25 - ESR 

  • v5.25.7, released 2020-12-03

    • Disabled the xmlsec1-based SAML library in favor of the re-enabled and improved SAML library.

  • v5.25.6, released 2020-11-10

    • Fixed an issue where the Compliance Exports were taking too long on large deployments. This was fixed with a performance optimization of the message export query.

    • Bumped up Go patch version to 1.14.6 to fix an issue where a potential livelock was detected in the app server under heavy load. MM-26584

  • v5.25.5, released 2020-09-03

    • Forcefully disabled the SAML Setting “Use Improved SAML Library (Beta)”, as we have identified some issues in this feature. Please follow instructions at https://docs.mattermost.com/deployment/sso-saml-before-you-begin.html for enabling SAML using the feature-equivalent xmlsec1 utility.

  • v5.25.4, released 2020-08-25

    • Fixed an issue where users were unable to use the PictureAttribute setting with SAML authentication. MM-27852

    • Fixed an issue where users got unexpectedly logged out from the mobile app when ExtendSessionLengthWithActivity was enabled as opening the mobile app called an API that overrode session extension triggers of typing, channel change, and posts. MM-27184

    • Fixed an issue where users experienced a kernel panic during LDAP sync when AuthData value was null. MM-27965

    • Fixed an issue where users experienced the Mattermost server crashing on (Status).ToClusterJson calls. MM-24544

  • v5.25.3, released 2020-08-12

    • Fixed an issue where the permission to create user access tokens on environments with OpenID Connect login providers such as GitLab was denied for System Admins. MM-27623

    • Fixed an issue where deactivated users were included in compliance exports. MM-27194

    • Fixed an issue where guest user invites did not work in a SAML environment. MM-27519

    • Fixed an issue where the bulk export didn’t finish if a custom data directory was set. MM-27550

    • Fixed an issue with a performance degradation after upgrading to 5.25.0. MM-27575

    • Fixed an issue where attempting to pin a post failed if a user did not have the channel_mention permission on a channel. MM-26346

  • v5.25.2, released 2020-07-31

    • Fixed an issue where pages in the System Console didn’t scroll up or down in some browser versions. MM-27168

  • v5.25.1, released 2020-07-23

    • Smoothed the database query load while syncing teams and channel roles by fetching data in batches. MM-27114

    • Fixed a bug in pagination which queried more data redundantly. MM-27187

    • Throttled network traffic by implementing bounded concurrency.

  • v5.25.0, released 2020-07-16

    • Original 5.25.0 release

Mattermost v5.25.0 contains a low level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Breaking Changes 

  • Some incorrect instructions regarding SAML setup with Active Directory ADFS for setting the “Relying party trust identifier” were corrected. Although the settings will continue to work, it is encouraged to modify those settings.

IMPORTANT: If you upgrade from a release earlier than 5.24, please read the other Important Upgrade Notes.

Improvements 

  • Added the ability for admins to request a 30-day E20 trial license directly in the System Console.

  • AD/LDAP Group Sync (E20) feature was moved out of Beta to General Availability.

Bug Fixes 

  • Fixed an issue where the ability to run a command to export data was erroneously available in Team Edition.

  • Fixed an issue where a user lost access to the current channel and other channels in a team when Team Override Scheme was deleted.

  • Fixed an issue where ADFS for SAML and AD/LDAP using ObjectGUID did not sync correctly.

  • Fixed an issue where LDAP Sync job failed when one of the teams had email restrictions.

  • Fixed an issue where an incorrect session length for SSO login was initiated from the mobile app.

  • Fixed an issue on web mobile narrow view where clicking a hashtag in a channel header did not open the hashtag search.

  • Fixed an issue where license ID was not populated correctly in the license renewal banner.

  • Fixed an issue where an archived team could be fully accessed with the archived team’s URL.

  • Fixed an issue where leaving an archived channel did not return user to the last viewed channel.

  • Fixed an issue where bulk import rejected team names prefixed with reserved keywords, even with additional text appended.

  • Fixed an issue where System Admin could no longer manage custom emoji after running bin/mattermost permissions reset.

  • Fixed an issue where a user’s role in Team Members dialog did not update when a user was searching for the user.

  • Fixed an issue where Bleve was not correctly setting the query size, missing search results.

  • Fixed an issue where the timezone count was not displayed correctly when a user set a new timezone and then changed it to set automatically.

  • Fixed an issue where existing users were not shown in the Invite Members flow.

  • Fixed an issue where the System Console > User Management > Users page was too tall and the Revoke All Sessions button was cut off when a license banner was present.

  • Fixed an issue where the Email verified banner was red instead of green.

  • Fixed an issue where Copy Theme Colors button in Account Settings > Display > Theme was not themed correctly.

  • Fixed an issue where archived channel icons were too dark in the Channel Info modal with the Dark Theme.

  • Fixed an issue where the Save button was not visible in browser for Safari on iPad device.

  • Fixed an issue where the thumbnail of a user was not displayed correctly when searching for a Direct Message channel.

  • Fixed an issue where text flowed outside the “Invite Members” button in “Invite People” page for some languages.

  • Fixed an issue where the Next button in Main Menu > Manage Members was not visible to be able to see the last few members of the team.

  • Fixed an issue where a different behavior was seen when pasting a table into message compose and to message edit box.

  • Fixed an issue where one-byte unicode emoji did not support skin tones.

  • Fixed an issue where no error was reported in server logs if a plugin icon was invalid.

  • Fixed an issue where providing AutocompleteData did not log a proper error in the System Console.

  • Fixed an issue where signup password minimum length error messages were inconsistent.

  • Fixed an issue where the right-hand side overlapped the GitHub Plugin tooltip.

  • Fixed an issue where the plugin right-hand side did not show tooltips when a user hovered over the Close or Expand/Shrink icons.

  • Fixed an issue where query string parameters were omitted from interactive dialog request urls.

  • Fixed an issue where store.GetPostsSince() did not sanitise deleted posts.

  • Fixed an issue with a panic caused by nil pointer dereference in importTeam.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under SamlSettings in config.json:

    • Added ServiceProviderIdentifier, as the unique identifier for the Service Provider, usually the same as Service Provider Login Url. In ADFS, this must match the Relying Party Identifier.

Known Issues 

  • Twitter link previews do not work in Mattermost.

  • Highlight is missing when at-mentioning yourself, followed by period, underscore, or hyphen.

  • Ctrl+Enter doesn’t post an edited message with “Send messages on Ctrl+Enter” enabled for all messages.

  • Enabling Bleve search engine makes the Command Line Interface (CLI) mutually exclusive with the running server. This issue does not apply when using mmctl Command Line Tool.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.24 - Feature Release 

  • v5.24.3, released 2020-07-23

    • Smoothed the database query load while syncing teams and channel roles by fetching data in batches. MM-27114

    • Fixed a bug in pagination which queried more data redundantly. MM-27187

    • Throttled network traffic by implementing bounded concurrency.

  • v5.24.2, released 2020-06-26

    • Fixed an issue where changing primary keys during migration did not work with Postgres versions lower than 9.3. MM-26514

  • v5.24.1, released 2020-06-19

    • Fixed an issue with a semantic versioning violation of the plugin API that broke plugins using the GetGroupByName method. MM-26231

    • Fixed an issue with the Plugin Tooltip implementation that caused links to be truncated when rendered. This issue occured if you are using the recent GitHub plugin v1.0.0 release. All links were affected, regardless if they were related to GitHub. MM-25808

  • v5.24.0, released 2020-06-16

    • Original 5.24.0 release

Mattermost v5.24.0 contains low level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Breaking Changes 

  • A new configuration setting, ExtendSessionLengthWithActivity automatically extends sessions to keep users logged in if they are active in their Mattermost apps. It is recommended to enable this setting to improve user experience if compliant with your organizations policies. Learn more here.

  • The mattermost_http_request_duration_seconds histogram metric (in Enterprise Edition) has been removed. This information was already captured by mattermost_api_time, which also contains the api handler name, HTTP method, and the response code. As an example, if you are using rate(mattermost_http_request_duration_seconds_sum{server=~"$var"}[5m]) /   rate(mattermost_http_request_duration_seconds_count{server=~"$var"}[5m]) to measure average call duration, it needs to be replaced with sum(rate(mattermost_api_time_sum{server=~"$var"}[5m])) by (instance) /   sum(rate(mattermost_api_time_count{server=~"$var"}[5m])) by (instance).

  • Due to fixing performance issues related to emoji reactions, the performance of the upgrade has been affected in that the schema upgrade now takes more time in environments with lots of reactions in their database. These environments are recommended to perform the schema migration during low usage times and potentially in advance of the upgrade. Since this migration happens before the Mattermost Server is fully launched, non-High Availability installs will be unreachable during this time. Please see the Important Upgrade Notes for full details.

  • On mobile apps, users will not be able to see LDAP group mentions (E20 feature) in the autocomplete dropdown. Users will still receive notifications if they are part of an LDAP group. However, the group mention keyword will not be highlighted.

IMPORTANT: If you upgrade from a release earlier than 5.23, please read the other Important Upgrade Notes.

Highlights 

Notify AD/LDAP Groups with a single @mention (Beta) (E20) 

  • Ability to enable mentions for LDAP-synced groups so users can notify the entire group at the same time.

Manage users from the System Console (E20) 

  • Ability to view and manage members via each team or channel configuration page.

Sync profile images from AD/LDAP (E10, E20) 

  • Ability to ensure compliance with corporate policies by automatically syncing profile images from AD/LDAP.

Automatically extending user sessions 

  • Ability to enable a feature that automatically extends session lengths when users are active on Mattermost apps.

Access CLI remotely 

  • Ability to manage Mattermost without having direct access to the server with a new Local Mode for mmctl.

Improved search filters 

  • Ability to use the mouse or keyboard to select search filters instead of typing them manually.

Slash command autocomplete framework (Beta) 

  • Ability to make slash commands easier to use and increase discoverability with a new slash command autocomplete framework for plugins.

Full-text search and indexing (Experimental) 

  • Ability to use Bleve to execute search functionality instead of the database.

Improvements 

Enterprise Edition (EE) 

  • Grace period after Enterprise Edition subscription expires was reduced from 15 days to 10 days. Moreover, Enterprise features are now disabled immediately after the grace period is over, instead of only after a server restart. Please see https://mattermost.com/pricing/#faq for more details.

User Interface (UI) 

  • Added a count for pinned posts header icon.

  • Added the ability to view user profile pop-over when clicking the profile picture or username from the View Members and Manage Members modals.

  • Improved keyboard usability in the emoji picker search bar.

  • Improved profile popover for posts with overwritten username or icon.

  • Added support for code highlighting of TypeScript files.

Notifications 

  • Mention notification settings for “Case sensitive first name” and “Non-case sensitive username” are now disabled by default.

Search 

  • Added support for searching by position in user lists such as the Add Members menu.

Integrations 

  • Added support for different interactive message button styles.

Administration 

  • Added the ability to bulk create, update, and delete team members and channel members in the store, as well as bulk import users belonging to different teams and channels.

  • Added auditing support to all Comman Line Interface (CLI) API’s.

  • Replaced “Back to Mattermost” button with a helpful error message in the OAuth 2.0 authentication window when an incorrect Client ID is typed during authentication.

  • Centralized ID validation to a single function.

Bug Fixes 

  • Fixed an issue where database read and search replicas were available in Team Edition, leading to unsupported server configuration.

  • Fixed an issue where Session Idle Timeout setting also unexpectedly affected the mobile app session expiry.

  • Fixed an issue where an unread channel disappeared from a list of unread channels immediately.

  • Fixed an issue where a user’s role was not reflected correctly in the Team Members modal when the user’s role was updated after the modal was opened.

  • Fixed an issue where the autocomplete list of channels remained populated after a user cleared the search on Add user to a channel modal.

  • Fixed an issue where Integrations menu was available for member and team admin roles only if with oAuth2 permission.

  • Fixed an issue where empty strings for auth_data created invalid users for LDAP sync during bulk import.

  • Fixed an issue where bulk import did not report errors when importing posts failed.

  • Fixed an issue where Compliance Export reported “success” when failing to export a missing file.

  • Fixed an issue where the user interface got stuck when leaving an archived channel.

  • Fixed an issue where Unicode characters appeared in users’ display names.

  • Fixed an issue where a failed plugin installation from the plugin marketplace retried automatically.

  • Fixed an issue where markdown images hosted by plugins did not appear if local image proxy was enabled.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added ExtendSessionLengthWithActivity to enable sessions to be automatically extended when the user is active in their Mattermost client.

    • Added EnableLocalMode to enable local mode for mmctl.

    • Added LocalModeSocketLocation to set the path for the socket that the server will create for mmctl to connect and communicate through local mode.

    • Changed EnableLinkPreviews to default true for new installs.

    • Changed SessionLengthWebInDays to default to 30 days for new installs.

  • Under SqlSettings in config.json:

    • Added DisableDatabaseSearch to disable the use of the database to perform searches.

  • Under LdapSettings in config.json:

    • Added PictureAttribute to configure the attribute in the AD/LDAP server used to synchronize (and lock) the profile picture used in Mattermost.

  • Under BleveSettings in config.json:

    • Added IndexDir to set the directory path to use for storing bleve indexes.

    • Added EnableIndexing to enable the indexing of new posts to occur automatically.

    • Added EnableSearching to enable search queries to use bleve search.

    • Added EnableAutocomplete to enable autocomplete queries to use bleve search.

    • Added BulkIndexingTimeWindowSeconds to determine the maximum time window for a batch of posts being indexed by the Bulk Indexer.

  • Under EmailSettings in config.json:

    • Changed PushNotificationContents to default full for new installs.

Open Source Components 

  • Added @types/react-custom-scrollbars in https://github.com/mattermost/mattermost-webapp

  • Added p-queue in https://github.com/mattermost/mattermost-webapp

  • Added @react-native-community/cookies in https://github.com/mattermost/mattermost-mobile

  • Added @react-native-community/masked-view in https://github.com/mattermost/mattermost-mobile

  • Added analytics-react-native in https://github.com/mattermost/mattermost-mobile

  • Added react-native-elements in https://github.com/mattermost/mattermost-mobile

  • Added react-native-file-viewer in https://github.com/mattermost/mattermost-mobile

  • Added react-native-localize in https://github.com/mattermost/mattermost-mobile

  • Added react-native-reanimated in https://github.com/mattermost/mattermost-mobile

  • Added react-native-safe-area-context in https://github.com/mattermost/mattermost-mobile

  • Added react-native-screens in https://github.com/mattermost/mattermost-mobile

Database Changes 

  • Added a new column UserGroups.AllowReference.

  • Changed the primary key on the Reactions table.

API Changes 

  • Added a new route POST /api/v4/group/bleve/purge_indexes to delete all Bleve indexes and their contents.

  • Added a new route GET /api/v4/channels/:channel_id/member_counts_by_group to get the channel members counts for each AD/LDAP group that has at least one member in the channel.

  • Added a new route GET /api/v4/teams/:team_id/commands/autocomplete_suggestions to get a list of autocomplete suggestions.

  • Added a new route GET api/v4/users/:user_id/groups to get all AD/LDAP groups for a user.

  • Added a new route GET api/v4/teams/:team_id/groups_by_channels to get a set of AD/LDAP groups associated with the channels in the given team grouped by channel.

  • Added several new APIs for use by mmctl local mode, such as the ability to modify and restore teams with mmctl.

Websocket Event Changes 

  • Added a new received_group Websocket Event.

  • Added a new received_group_associated_to_team Websocket Event.

  • Added a new received_group_not_associated_to_team Websocket Event.

  • Added a new received_group_associated_to_channel Websocket Event.

  • Added a new received_group_not_associated_to_channel Websocket Event.

Known Issues 

  • Profile image of a user is not displayed correctly when searching for Direct Message channels.

  • “Email verified” banner is red instead of green.

  • Command+K search results disappear when the input field loses focus when Mattermost window is made unfocused.

  • Enabling Bleve search engine makes the Command Line Interface (CLI) mutually exclusive with the running server. This issue does not apply when using mmctl Command Line Tool.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.23 - Quality Release 

  • v5.23.2, released 2020-07-23

    • Smoothed the database query load while syncing teams and channel roles by fetching data in batches. MM-27114

    • Fixed a bug in pagination which queried more data redundantly. MM-27187

    • Throttled network traffic by implementing bounded concurrency.

  • v5.23.1, released 2020-06-02

    • Fixed an issue where Content-Type was no longer optional in incoming webhook requests and led to errors. MM-25677

  • v5.23.0, released 2020-05-16

    • Original 5.23.0 release

Mattermost v5.23.0 contains a low level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Compatibility 

PostgreSQL ended long-term support for version 9.4 in February 2020. Mattermost will officially be supporting PostgreSQL version 10 with the Mattermost v5.26 release as PostgreSQL 9.4 is no longer supported. New installs will require PostgreSQL version 10. Previous Mattermost versions, including our current ESR, will continue to be compatible with PostgreSQL version 9.4. In our 6.0 release (date to be announced), we plan on fully deprecating PostgreSQL 9.4.

We highly recommend upgrading to PostgreSQL version 10+. Please follow the instructions under the Upgrading Section within the PostgreSQL documentation.

Bug Fixes 

  • Fixed an issue where using slash command /leave failed to leave the channel.

  • Fixed an issue where clicking on a channel link from a Direct Message channel that linked to a different team resulted in a “Page not Found” error.

  • Fixed an issue where reloading a channel caused the channel to be shown as read-only for a few seconds.

  • Fixed an issue where the Channel Export plugin bot channel did not appear on the left-hand side channel sidebar until the user switched to a different channel.

  • Fixed an issue where no channel suggestions were displayed for in: search modifier for Guest Accounts.

  • Fixed an issue where Guest tags were not shown in Group Message channel header.

  • Fixed an issue where guest permissions could not be set in Team Override Schemes.

  • Fixed an issue where a “this user didn’t get notified” system message was missing if an at-mention was followed by a period and the user was not in the channel.

  • Fixed an issue where batched emails were still sent even if there was activity from the user.

  • Fixed an issue where /me messages weren’t formatted in the right-hand side.

  • Fixed an issue where mentions in header-changed system messages weren’t highlighted.

  • Fixed an issue where a thread title was missing when initial message in a thread showed as “message deleted”.

  • Fixed an issue where there was no hover effect when mousing over options in Search.

  • Fixed an issue on Firefox where using Alt+arrow stopped working on read-only channels.

  • Fixed an issue where muted channels on another team appeared as unread in team sidebar and browser tab.

  • Fixed an issue where the URL field on Rename Channel modal allowed more than two underscores.

  • Fixed an issue where pasting text from a GitHub code block erased post textbox contents.

  • Fixed an issue where keyboard shortcuts to move between teams conflicted with a native Linux OS shortcut for switching virtual desktops.

  • Fixed an issue where incoming webhooks that contained certain sized attachments resulted in an infinite loop, causing a memory leak.

  • Fixed an issue with errors appearing in logs when sending a direct message to your own account.

  • Fixed an issue with a “Failed to get membership” log spam for bot posts.

Open Source Components 

  • Added react-native-mmkv-storage in https://github.com/mattermost/mattermost-mobile.

  • Added redux-action-buffer in https://github.com/mattermost/mattermost-mobile.

  • Added redux-reset in https://github.com/mattermost/mattermost-mobile.

  • Added serialize-error in https://github.com/mattermost/mattermost-mobile.

API Changes 

  • Added a new API endpoint GET /api/v4/users/known to get the list of user IDs of users with any direct relationship with a user. That means any user sharing any channel, including direct and group channels.

  • GET /api/v4/teams/:team_id/channels no longer requires the list_team_channels permission.

Websocket Event Changes 

  • Added a new update_team_scheme Websocket Event.

Known Issues 

  • Copy Theme Colors button on custom theme Display Settings modal is not themed correctly on Mattermost dark theme.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.22 - Feature Release 

  • v5.22.3, released 2020-05-11

  • v5.22.2, released 2020-05-05

    • Fixed an issue where message reply threads did not get correctly imported via bulk loading tool. MM-24707

  • v5.22.1, released 2020-04-23

    • Fixed an issue where Amazon S3 file storage with IAM credentials failed due to a bug in the minio-go library. MM-24388

  • v5.22.0, released 2020-04-16

    • Original 5.22.0 release

Release day: 2020-04-16

Mattermost v5.22.0 contains a low level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Compatibility 

  • v5.9.0 as our Extended Support Release (ESR) is coming to the end of its lifecycle and upgrading to 5.19.0 ESR or a later version is highly recommended. v5.19.0 will continue to be our current ESR until October 15, 2020. Learn more in our forum post.

Breaking Changes 

  • Due to fixing performance issues related to emoji reactions, the performance of the upgrade has been affected in that the schema upgrade now takes more time in environments with lots of reactions in their database. These environments are recommended to perform the schema migration during low usage times and potentially in advance of the upgrade. Since this migration happens before the Mattermost Server is fully launched, non-High Availability installs will be unreachable during this time.

  • The Channel Moderation Settings feature is supported on mobile app versions v1.30 and later. In earlier versions of the mobile app, users who attempt to post or react to posts without proper permissions will see an error.

  • Direct access to the Props field in the model.Post structure has been deprecated. The available GetProps() and SetProps() methods should now be used. Also, direct copy of the model.Post structure must be avoided in favor of the provided Clone() method.

IMPORTANT: If you upgrade from a release earlier than 5.21, please read the other Important Upgrade Notes.

Highlights 

Read-only channels and channel moderation settings (E20) (Beta) 

  • System admins can use new channel-specific permissions to create read-only channels, restrict who can post in certain channels, and more. This feature is in beta and ships with Enterprise Edition E20.

Team switch shortcuts 

  • Added new keyboard shortcuts that allow users to switch to the next or previous team using Ctrl/⌘ + Alt + Up/Down and switch to a specific team using Ctrl/⌘ + Alt + #.

  • Also added the ability to reorder teams on the sidebar via drag-and-drop.

Unarchive Channel option in the archived channels menu 

  • Added the ability for users to restore archived channels via the Mattermost interface.

Channel sidebar reorganization features (Experimental) 

  • Added improvements to the channel sidebar, including the ability to collapse categories in the sidebar (e.g., favorites, public channels, private channels, and direct messages) to reduce unnecessary scrolling.

Improvements 

User Interface (UI) 

  • Added several UI improvements, such as added a “Close Group Message” option to Group Message menu.

  • Added a keyboard shortcut to open/close the right-hand sidebar.

  • Added a keyboard shortcut to add reactions to last message in a channel or a thread.

  • Added infinite scroll to Select Teams screen.

  • Updated the message permalink view.

Localization 

  • Promoted Dutch and Russian languages to Beta.

Notifications 

  • Added support for notification sounds in Firefox.

Plugins 

  • Allow searching for files through the plugin API.

  • Allowed prepackaged and local plugins to set ReleaseNotesURL.

Integrations 

  • In interactive dialogs, the autocomplete lists now render below the input field by default.

  • Extended the payload of slash commands to include a map of the users and channels mentioned in the message to their corresponding identifiers.

  • Added support for recognizing multi-line slash commands without requiring trailing space after the trigger word.

Bulk Import 

  • Added support for exporting and importing the props of a post.

Bug Fixes 

  • Fixed an issue where a user’s role was not reflected correctly in the Channel Members Modal when it was updated after the modal was opened.

  • Fixed an issue where verification emails were still sent on servers with SMTP configured whenEnable Email Notifications and Require Email Verification were disabled in the System Console.

  • Fixed an issue where a user account was still created when inviting a new user to a team with an email address that didn’t match the team’s allowed domain.

  • Fixed an issue where System Admins could not access the Teams menu of the System Console.

  • Fixed an issue where an incorrect time was displayed at midnight when 24-hour clock display was enabled.

  • Fixed an issue where a channel appeared twice on the channel sidebar if the channels were created with a certain arrangement of characters.

  • Fixed an issue where pasting a custom theme caused a white screen.

  • Fixed an issue where a modified Edit Post dialog silently closed on a mouse click outside it.

  • Fixed an issue where users were unable to drag and drop files on Edge.

  • Fixed an issue where the autoresponder responded to every bot post.

  • Fixed an issue where Mattermost was unable to start if a configured mail server was listening but not responding.

  • Fixed an issue where LDAP sync did not finish if read database replica was enabled.

  • Fixed a SIGSEGV crash issue when exporting to CSV.

  • Fixed an issue where Elasticsearch error was output when running unrelated commands.

  • Fixed an issue where importing from slack crashed due to invalid memory access or nil pointer dereference.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added EnableOpenTracing, to enable a Jaeger client to be instantiated and used to trace each HTTP request as it goes through App and Store layers.

    • Added IdleTimeout, to set an explicit idle timeout in the HTTP server.

    • Added ExperimentalChannelSidebarOrganization, to enable accessing the experimental channel sidebar feature set.

  • Under NotificationLogSettings in config.json:

    • Added SMTPServerTimeout, to enable the maximum amount of time (in seconds) allowed for establishing a TCP connection between Mattermost and the SMTP server, to be idle before being terminated.

  • Added DirectoryId object, to enable the ID of the application’s AAD directory.

  • Added ExperimentalAuditSettings object, to enable the audit settings to output audit records to syslog (local or remote server via TLS) and/or to a local file.

Open Source Components 

  • Added core-js in https://github.com/mattermost/mattermost-redux.

  • Added @types/redux-mock-store in https://github.com/mattermost/mattermost-webapp.

  • Added react-beautiful-dnd in https://github.com/mattermost/mattermost-webapp.

  • Added react-native-hw-keyboard-event in https://github.com/mattermost/mattermost-mobile.

  • Added react-native-v8 in https://github.com/mattermost/mattermost-mobile.

  • Removed jsc-android from https://github.com/mattermost/mattermost-mobile.

Database Changes 

  • Various indexes were added.

API Changes 

  • Added GET api/v4/channels/:channels/moderations and PUT api/v4/channels/:channels/moderations/patch to support channel moderation settings.

  • Added a PUT api/v4/commands/move endpoint to move a command to another team.

  • Added a GET api/v4/commands endpoint to retrieve a command by id.

Websocket Event Changes 

  • Added channel_scheme_updated Websocket Event.

Known Issues 

  • Batched emails are still sent even if any activity from the user is detected.

  • Keyboard shortcut to move between teams conflicts with Linux native OS shortcut.

  • Webapp crashes if the Direct Message modal is open when a guest is removed from a channel.

  • Slash command /leave fails to leave channel on webapp and crashes the Android app.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

Release v5.21 - Quality Release 

Release day: 2020-03-16

Mattermost v5.21.0 contains low level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Compatibility 

  • Honour key value expiry in KVCompareAndSet, KVCompareAndDelete and KVList. We also improved handling of plugin key value race conditions and deleted keys in Postgres.

Bug Fixes 

  • Fixed an issue where switching to an unread channel sometimes got stuck at “Loading…” on certain screen resolutions.

  • Fixed an issue where bots could not be added to group-synced channels or teams.

  • Fixed an issue where a user’s authentication method in the System Console was shown as email if it was actually LDAP.

  • Fixed an issue where lines in over 65536 characters caused bulk import to fail.

  • Fixed an issue where code block line numbers were copied when pasting into certain applications.

  • Fixed an issue where the right-hand side reply thread scrolled down after receiving a new message.

  • Fixed an issue where the post menu opened up in the right-hand side made the menu options float off page if the parent post was short with no replies.

  • Fixed an issue where enabling and disabling the demo plugin generated a “connection is shutdown” error.

  • Fixed an issue where deactivated users with whom a user had never interacted in a private message before appeared in the New Direct Message menu.

  • Fixed an issue where clicking on an image in external image preview opened the image within the desktop app.

  • Fixed an issue where users were unable to open email links using View in Browsers option in incognito mode.

  • Fixed an issue where Invite Guests > Emails containing upper case letters were rejected.

  • Fixed an issue where a new user got a “No more channels to join” message while scrolling through the channel list.

  • Fixed an issue where clicking on “Terms of Service” and “Privacy Policy” on account creation on the desktop app didn’t do anything.

  • Fixed an issue where gendered emojis were rendered with the wrong gender.

  • Fixed an issue where large video file uploads failed on the right-hand side without an appropriate error.

Known Issues 

  • Verification emails are still sent on servers with SMTP configured whenEnable Email Notifications and Require Email Verification are disabled in the System Console.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.20 - Feature Release 

  • v5.20.2, released 2020-03-12

    • Fixed an issue where Mattermost server crashed when running a compliance export. MM-23157

    • Fixed an issue where switching to an unread channel got stuck at “Loading…” in certain screen resolutions. MM-22698

  • v5.20.1, released 2020-02-16

    • Fixed an issue where upgrading to v5.20 failed on servers running with PluginSettings.Enable = false, and LogSettings.EnableDiagnostics = true.

  • v5.20.0, released 2020-02-16

    • Original 5.20.0 release

Mattermost v5.20.0 contains a low level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Compatibility 

Breaking Changes 

  • Any pre-packaged plugin that is not enabled in the config.json will no longer install automatically, but can continue to be installed via the plugin marketplace.

  • Boolean elements from interactive dialogs are no longer serialized as strings. While we try to avoid breaking changes, this change was necessary to allow both the web and mobile apps to work with the boolean elements introduced with v5.16.

IMPORTANT: If you upgrade from a release earlier than 5.19, please read the other Important Upgrade Notes.

Highlights 

A Banner to Jump to the Most Recent Posts 

  • Ability to jump to the most recent posts in a channel by clicking a banner that automatically appears in busy channels with unread messages.

Open Email Notifications in the Desktop or Mobile App 

  • Ability to open messages from email notifications in the Mattermost desktop or mobile apps instead of being directed to open them in the browser.

Ship MMCTL with Mattermost 

  • Manage servers remotely with mmctl, a CLI tool that mimics the Mattermost CLI tool and ships inside Mattermost.

Reworked pre-packaged plugins 

  • Pre-packaged plugins are now “pre-downloaded” plugins that are available within the Plugin Marketplace, even if your server doesn’t have direct access to the internet.

Plugin Marketplace Labels 

  • Plugins supported by Mattermost and community supported plugins will be visible, making it easier to select an appropriate plugin based on your organization’s security policies.

Role mapping from LDAP and SAML (E20) 

  • Ability to assign and restrict users to roles within Mattermost from your single sign-on (SSO) system.

Faster SAML install and configuration (E20) 

  • Ability to use SAML without installing a separate binary and pull configuration metadata directly from the Identity Provider using an account-specific URL.

Improvements 

User Interface (UI) 

  • Added support for mute option in Direct Message channel menus.

  • Added a red dot to browser favicon when there are unread mentions.

  • Added support for displaying a left-hand side bot icon in the webapp.

  • User’s own username with a suffix ‘you’ is now shown in the username autocomplete.

  • Allowed user autocomplete to match on terms with spaces.

  • Improved autocomplete highlighting when using mouse and keyboard together.

  • Added support for showing single image thumbnails in compact view.

  • Contents of View Members and Manage Members modals now refresh when a user’s role has changed.

  • Filtering search by channel now also shows the channel name and not only its ID.

  • Users now cannot type account input fields longer than the maximum length for first name, last name and email fields.

Plugins 

  • Added a way to show that a plugin requires a certain Mattermost configuration setting.

  • Added support for plugins to add menu items to the Channel Menu.

Command Line Interface (CLI) 

  • Added a CLI command webhook move for moving outgoing webhooks.

Bulk Import 

  • When bulk import finds an already existing post, it now deletes existing files before importing new ones.

  • Bulk export now includes direct messages from a user to themselves.

Administration 

  • Added support for Elasticsearch 7.

  • Added ability to inform System Admins when a user who managed bot accounts is deactivated, and enable them to take ownership of the bot.

  • Added LDAP/Elasticsearch/SQL Trace to server logs to make it easier for admins to diagnose problems.

  • Added plugins to the list of words that a team URL cannot start with.

  • Removed 26 character requirement from post action IDs.

Bug Fixes 

  • Fixed an issue where guest account creation erroneously considered the global list of whitelisted domains.

  • Fixed an issue where inviting multiple users with valid and invalid emails caused the invites for the valid users not to be sent.

  • Fixed an issue where option to invite users by email was displayed even if email invitations were disabled.

  • Fixed an issue where the channel drop-down Leave Channel failed to leave the channel on a server with a subpath.

  • Fixed an issue where messages with 2-byte characters didn’t get posted.

  • Fixed an issue where links for recent mentions and flagged posts were doubled in smaller window widths.

  • Fixed an issue where opening the right-hand sidebar placed focus in the Search box instead of the Text box.

  • Fixed an issue where Customization > Site Name help text didn’t match text field behavior.

  • Fixed an issue where the option to mark posts as unread was unexpectedly available when viewing archived channels.

  • Fixed an issue where emoji reactions shifted down a few pixels after clicking.

  • Fixed an issue where pasting code from GitHub resulted in broken markup and loss of text.

  • Fixed an issue where importing theme colours from Slack gave an error.

  • Fixed an issue where navigating to a plugin configuration page in the System Console for a deleted plugin returned a Not Found error.

  • Fixed an issue where scroll bar was missing on the welcome tutorial screen in web mobile view.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under SamlSettings in config.json:

    • Added IdpMetadataUrl, to add the URL where Mattermost sends a request to obtain setup metadata from the provider.

    • Added EnableAdminAttribute and AdminAttribute, to add the attribute in the SAML Assertion for designating System Admins.

  • Under LdapSettings in config.json:

    • Added EnableAdminFilter and AdminFilter, to enter a filter to use for designating the System Admin role to users.

  • Under PluginSettings in config.json:

    • Added EnableRemoteMarketplace, to have the server attempt to connect to the configured Plugin Marketplace to show the latest plugins.

    • Added AutomaticPrepackagedPlugins, so that any pre-packaged plugins enabled in the configuration will be installed or upgraded automatically.

Open Source Components 

  • Added @formatjs/intl-pluralrules in https://github.com/mattermost/mattermost-webapp.

  • Added @formatjs/intl-relativetimeformat in https://github.com/mattermost/mattermost-webapp.

  • Added custom-protocol-detection in https://github.com/mattermost/mattermost-webapp.

  • Added react-inlinesvg in https://github.com/mattermost/mattermost-webapp.

Database Changes 

  • Added Bots.LastIconUpdate column.

  • Added GroupTeams.SchemeAdmin column.

  • Added GroupChannels.SchemeAdmin column.

API Changes 

  • Added PUT /config/patch REST API endpoint that uses patch semantics to only update the fields of the config that are provided, while leaving the other fields unchanged.

  • Added POST /server_busy, GET /server_busy and DELETE /server_busy REST API endpoints to add the ability to turn off non-critical services when under load.

Websocket Event Changes 

  • Added channel_restored Websocket Event.

Known Issues 

  • Code block line numbers are copied when pasting into certain applications.

  • Deactivated users with whom you never interacted in a private message before appear in New Direct Message menu.

  • Verification emails are still sent on servers with SMTP configured whenEnable Email Notifications and Require Email Verification are disabled in the System Console.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

abdusabri, aeomin, agarciamontoro, AGMETEOR, agnivade, ali-farooq0, allenlai18, amyblais, andylibrian, anidok, AninditaBasu, anon6789, asaadmahmood, ashishbhate, atulya-pandey, avasconcelos114, bbodenmiller, bolariin, bpietraga, bradjcoughlin, c-yan, calebroseland, catalintomai, CEOehis, chikei, ChrisDobby, chuttam, cjohannsen81, comharris, cpanato, crspeller, ctmusicnz, davidjwilkins, DE-mbecker, deanwhillier, der-test, devinbinnie, dlclark, dra, DSchalla, emilioicai, enahum, enelson720, enolal826, esdrasbeleza, ethervoid, faase, flexo3001, fm2munsh, gabrieljackson, gigawhitlocks, gopheros, grubbins, gruceqq, gsagula, gupsho, hahmadia, hanzei, hector2, hectorskypl, hmhealey, hunterlester, ikeohachidi, imisshtml, iomodo, isacikgoz, itao, jasonblais, jasonlanderson, jaydeland, jespino, jfrerich, jomaxro, josephbaylon, JtheBAB, jupenur, justinegeffen, JustinReynolds-MM, jwilander, kaakaa, karlmarxlopez, Kaya_Zeren, khos2ow, kosgrz, larkox, lawikip, Lena, levb, lfbrock, lieut-data, lindalumitchell, lindy65, lukewest, lurcio, M-ZubairAhmed, marianunez, meilon, metanerd, mgdelacroix, michaelschiffmm, mickmister, migbot, mitchellroe, mjthomp95, mkraft, mlongo4290, nadalfederer, natalie-hub, niklabh, NiroshaV, nmlc, opllama2, phillipahereza, Pomyk, popstr, RajatVaryani, rajudev, rascasoft, rbradleyhaas, reflog, rodcorsi, rvillablanca, RyanCommits, saturninoabril, sbishel, scottjr632, sij507, somenet, sowmiyamuthuraman, streamer45, stylianosrigas, sudheerDev, svelle, tasdomas, thapakazi, thefactremains, themaverikk, thePanz, TQuock, uhlhosting, vesari, VishalSwarnkar, wget, wiersgallak, wiggin77, Willyfrog, xalkan

Release v5.19 - ESR 

Mattermost v5.19.0 contains low to high level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

  • v5.19.3, released 2020-06-19

    • Fixed an issue with the Plugin Tooltip implementation that caused links to be truncated when rendered. This issue occured if you are using the recent GitHub plugin v1.0.0 release. All links were affected, regardless if they were related to GitHub. [MM-25808]

  • v5.19.2, released 2020-04-21

    • Fixed an issue with unexpected crashes related to any action taken to modify post properties such as push notifications. Note for developers: Direct access to the Props field in the model.Post structure has been deprecated. To avoid crash issues, the available GetProps() and SetProps() methods should now be used. Also, direct copy of the model.Post structure must be avoided in favor of the provided Clone() method. MM-21378

    • Fixed an issue where a public channel appears in the list of Direct Message channels in the channel sidebar if the channel name is 40 characters long. MM-23427

  • v5.19.1, released 2020-01-21

    • Fixed a regression affecting v5.18 and v5.19 where some users were experiencing client-side performance issues. This was mainly affecting users with more than 100 channels listed in the channel sidebar and with channels sorted alphabetically. MM-20349

  • v5.19.0, released 2020-01-16

    • Original 5.19.0 release

Compatibility 

Breaking Changes 

  • LockTeammateNameDisplay setting was moved to Enterprise Edition E20 as it was erroneously available in Team Edition and Enterprise Edition E10.

IMPORTANT: If you upgrade from a release earlier than 5.18, please read the other Important Upgrade Notes.

Bug Fixes 

  • Fixed an issue where email notifications were still sent in some cases while disabled in the user interface.

  • Fixed an issue where System Console > Site Configuration > Users & Teams > Lock Teammate Name Display should only have been available on Enterprise Edition E20 but was erroneously available also on Team Edition and Enterprise Edition E10.

  • Fixed an issue where the System Console left-hand side scrollbar was too dark to see.

  • Fixed an issue where inline markdown image links did not open with preview modal.

  • Fixed an issue on Edge where the “+” buttons in channel list were black on Mattermost default theme.

  • Fixed an issue where users were unable to scroll through message textbox autocomplete results using arrow keys.

  • Fixed an issue where clicking a line separator in the Main Menu closed the menu.

  • Fixed an issue where date separator showed long-format timestamps.

  • Fixed an issue where the Menu help text was truncated in English for Do Not Disturb status.

  • Fixed an issue where the height and width parameters in inline images didn’t work.

  • Fixed an issue where the day picker in after/before search didn’t honor the user’s timezone override.

  • Fixed an issue where editing a post and hitting <enter> in code block saved the post automatically instead of adding a newline.

  • Fixed an issue where users were unable to close the Edit Channel Header modal when opened from the Intro Message.

  • Fixed an issue where opening the channel picker using CTRL+K and then focusing on the message box using CTRL+SHIFT+L did not close the channel picker.

  • Fixed an issue where the at-mention suggestions still highlighted the previous search but not the first suggestion in the list.

  • Fixed an issue where the at-mention autocomplete always opened up in the right-hand side reply thread, sometimes cutting off users in the list.

  • Fixed an issue with a notification badge count inconsistency when push notification setting was set to All Activity.

  • Fixed an issue where timestamps on 12-hour format had a leading zero.

  • Fixed an issue with an incorrect error message when attempting to add a bot to a channel if the bot was previously on the team.

  • Fixed an issue where the client license API generated a different ETag for every response.

API Changes 

  • Etag header was added to the API endpoint to get the client license.

  • Oath IsTrusted configuration can only be changed if the user has the manage_system permission.

Known Issues 

  • Client-side performance issues seen while typing.

  • On a server with a subpath, channel drop-down Leave Channel fails to leave the channel.

  • Importing theme colours from Slack gives an error.

  • Inviting multiple users with valid/allowed and invalid emails causes the invites for the valid users not to be sent.

  • Option to invite users by email is displayed even if email invitations are disabled.

  • Users may need to reinstall and delete cache on Classic apps if launching and logging into the app get stuck.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.18 - Feature Release 

Mattermost v5.18.0 contains low to high level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

  • v5.18.2, released 2020-01-16

    • Fixed an issue where server crashed when a user updated their Account Settings in a high availability cluster environment, and the corresponding user_updated event did not reach a guest user. MM-21481

  • v5.18.1, released 2020-01-08

  • v5.18.0, released 2019-12-16

    • Original 5.18.0 release

Compatibility 

Important Upgrade Notes 

  • Marking a post unread from the mobile app requires v1.26 or later. If using v5.18, but mobile is on v1.25 or earlier, marking a post unread from webapp/desktop will only be reflected on mobile the next time the app launches or is brought to the foreground.

Breaking Changes 

  • The Go module path of mattermost-server was changed to comply with the Go module version specification. Developers using Go modules with mattermost-server as a dependency must change the module and import paths to github.com/mattermost/mattermost-server/v5 when upgrade this dependency to v5.18. See https://blog.golang.org/v2-go-modules for further information.

  • Removed Team.InviteId from the related Websocket event and sanitized it on all team API endpoints for users without invite permissions.

  • Removed the ability to change the type of a channel using the PUT /channels/{channel_id} API endpoint. The new PUT /channels/{channel_id}/privacy endpoint should be used for that purpose.

IMPORTANT: If you upgrade from a release earlier than 5.17, please read the other Important Upgrade Notes.

Highlights 

ID Loaded push notifications (E20) 

  • Allows push notifications to be delivered showing the full message contents that are fetched from the server once the notification is delivered to the device. This means that Apple Push Notification Service (APNS) or Google Firebase Cloud Messaging (FCM) cannot read the message contents since only a unique message ID is sent in the notification payload.

Allow Plugin Upgrades 

  • Added ability to upgrade plugins and prepackaged plugins via the marketplace.

Mark Posts as Unread 

  • When marking a post as unread, the user will land on the unread post the next time they click on the relevant channel.

mmctl remote CLI tool 

  • Allows a system admin to run commands when conventional access to the server via SSH isn’t possible.

View Archived Channels (Beta) 

  • View, share and search for content of archived channels. See more details here.

Guest Account SAML & LDAP Support (EE) 

  • Provision Guests directly from AD/LDAP or SAML upon login. Guests will have no access to any teams or channels until they are assigned.

Actiance Improvements (E20) 

  • Added events (such as post/file deletion and edit events) to Actiance Export to improve tracking within the Vantage report interface.

LDAP Group Sync upgraded to Beta phase (E20) 

  • Previously in “Experimental” phase, the linking of AD/LDAP groups to Mattermost groups is now officially in “Beta” phase.

Improvements 

User Interface (UI) 

  • Disabled email notifications in Do Not Disturb mode.

  • Added support for showing a tooltip on public and private channel names that get truncated.

  • Added support for allowing in-line markdown images to open a preview window.

  • Added line numbers to code blocks that have syntax highlighting.

  • Added support for trimming leading/trailing whitespace on a channel name when a channel is created.

Command Line Interface (CLI) 

  • Updated CLI command “deleter user” to add ability to delete the given user’s group memberships.

  • Created CLI command “config reset” to allow resetting the value of a config setting to its default value.

Integrations 

  • Added ability to disable attachment buttons and fields.

  • Added user_name, team_domain and channel_name metadata when clicking an interactive button.

  • Extended EnsureBot helper function to include bot images.

  • Added support for a generic error message in interactive dialog responses.

Plugins 

  • Added support for interplugin communication.

  • Added support for server version and minimum server version checks in helper methods for plugins.

  • Added support for returning results for individual plugins in System Console > Search.

  • Added the ability to add submenus in post dropdowns for plugins.

Administration 

  • Added support for System Administrators to control Teammate Name Display at the system level.

  • Added support for revoking Guest User Sessions when the Guest Accounts feature is disabled.

  • Added the ability to search in System Console > Channels and System Console > Teams.

  • Added the ability to add users as another user to the plugin API.

  • Restricted user access to /logs API endpoint.

  • Added “Remove team” and “Change role” options in Team Membership panel.

  • Added support for disabling channel settings for public and private toggle for default channels.

Enterprise Edition (EE) 

  • Added SAML login events to the Audits Table.

  • Added support for configuration of SAML crypto hashing algorithms.

  • Added support for not allowing Guest invitations to teams that are managed by LDAP Group Sync.

  • Added support for custom post types to Compliance exports.

Bug Fixes 

  • Fixed an issue where modifying config files caused compliance exports to run twice.

  • Fixed an issue where admins were not able to create LDAP user via /api/v4/users.

  • Fixed some bugs related to the keyboard accessibility feature.

  • Fixed issues with Guest Accounts feature, such as an issue where the option to make guest users as team admins was erroneously provided in Manage Teams dialog on System Console > Users.

  • Fixed an issue where an opened emoji picker floated while the user scrolled in the channel.

  • Fixed an issue where “Your message is too long” warning on the right-hand side reply thread overlapped the Preview button.

  • Fixed an issue where hitting escape to close autocomplete also closed channel header modal.

  • Fixed an issue where negative search filter hypens and occasional random terms were highlighted in search results.

  • Fixed an issue where deactivating a user increased Monthly Active Users and Daily Active Users count by 1 in System Console > Site Statistics.

  • Fixed an issue where Reporting > Statistics showed ‘Loading…’ when the value for any of the statistics was zero.

  • Fixed an issue where converting a user to a bot via the command line tool (CLI) did not create an access token and could not be deleted.

  • Fixed an issue where archived channels displayed in System Console -> Channels page.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under TeamSettings:

    • Added LockTeammateNameDisplay to add support for System Administrators to control Teammate Name Display at the system level.

  • Under LdapSettings:

    • Added GuestFilter to be able to enter an AD/LDAP Filter to use when searching for external users who have Guest Access to Mattermost.

  • Under SamlSettings:

    • Added SignatureAlgorithm to be able to choose a signature algorithm used to sign the request.

    • Added CanonicalAlgorithm to be able to choose the canonicalization algorithm.

    • Added GuestAttribute to add support for entering the attribute in the SAML Assertion used to apply a guest role to users.

  • Under PluginSettings:

    • Added RequirePluginSignature to add support for requiring valid plugin signatures before starting managed or unmanaged plugins.

    • Added SignaturePublicKeyFiles to add support for specifying public keys to be trusted to validate plugin signatures in addition to the Mattermost plugin signing key built-into the server.

  • Under Push Notification Contents:

    • Added id_loaded to add an option for full message content being fetched from the server on receipt (Available in Enterprise Edition E20).

  • Under ServiceSettings:

    • Removed ExperimentalLdapGroupSync setting.

Open Source Components 

  • Added @types/highlight in https://github.com/mattermost/mattermost-webapp.

  • Added @typescript-eslint/parser in https://github.com/mattermost/mattermost-webapp.

  • Added @react-native-community/cameraroll in https://github.com/mattermost/mattermost-mobile.

  • Added @sentry/react-native in https://github.com/mattermost/mattermost-mobile.

  • Added form-data in https://github.com/mattermost/mattermost-mobile.

  • Added react-native-fast-image in https://github.com/mattermost/mattermost-mobile.

  • Added react-navigation-stack in https://github.com/mattermost/mattermost-mobile.

  • Added redux-offline in https://github.com/mattermost/mattermost-mobile.

API Changes 

  • Added POST handler for /plugins/marketplace to install marketplace plugins.

  • Added a search_archived API endpoint to be able to search archived channels.

  • Added a post_unread API endpoint to be able to set posts as unread.

Websocket Event Changes 

  • Added marked post as unread Websocket Event.

  • Added guests deactivated Websocket Event.

Known Issues 

  • Client-side performance issues seen while typing.

  • System Console left-hand side scrollbar may be too dark to see.

  • Menu help text for Do Not Disturb is truncated in English.

  • Inviting multiple users with valid/allowed and invalid emails causes the invites for the valid users not to be sent.

  • Option to invite users by email is displayed even if email invitations are disabled.

  • Option to mark posts as unread is unexpectedly available when viewing archived channels.

  • Users may need to reinstall and delete cache on Classic apps if launching and logging into the app get stuck.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

3mard, a8uhnf, aaronrothschild, abdusabri, aeomin, AGMETEOR, agnivade, akshaychhajed, ali-farooq0, allenlai18, alxsah, amyblais, andresoro, anindha, AninditaBasu, arjitc, asaadmahmood, ashishbhate, avasconcelos114, bradjcoughlin, brewsterbhg, bvineyar, cardoso, catalintomai, chapa, chetanyakan, chikei, chuttam, cinlloc, cjohannsen81, cometkim, comharris, cpanato, cpoile, cpurta, crspeller, deanwhillier, der-test, devinbinnie, DHaussermann, drekar, DSchalla, enahum, enolal826, ethervoid, etoaster, FlaviaBastos, fm2munsh, focusonmx, g3rv4, gabrieljackson, gigawhitlocks, goku321, gruceqq, grundleborg, gupsho, hahmadia, hanzei, harshilsharma63, hectorskypl, HilalNazli, hmhealey, icelander, ilgooz, imisshtml, iomodo, ishanray, ivanvc, jabshire, jasonblais, jaydeland, jespino, jfrerich, jgbaylon, jimiolaniyan, johnthompson365, joshuabezaleel, jozuenoon, justinegeffen, jwilander, kaakaa, kanozec, karlmarxlopez, Kaya_Zeren, kdenz, kosgrz, KuSh, larkox, last-partizan, Lena, levb, lieut-data, lindalumitchell, M-ZubairAhmed, m4ver1k, malaDev, manland, marianunez, MathewtheCoder, meilon, mgdelacroix, michaelschiffmm, mickmister, migbot, mkraft, mlongo4290, natalie-hub, nathanmkaya, niklabh, nrekretep, Pomyk, pqzx, pradeepmurugesan, promulo, PunitGr, r4zorgeek, RajatVaryani, reflog, rfoyard, rodcorsi, rvillablanca, SamWolfs, saneletm, saturninoabril, sbishel, scottleedavis, Sheshagiri, sij507, sphr, srkgupta, sstaszkiewicz-copperleaf, steevsachs, streamer45, stylianosrigas, sudheerDev, sunsingerus, svelle, thePanz, TonPC64, TQuock, uhlhosting, unlikelygeek, valentijnnieman, ventz, vinicio, wget, wiersgallak, wiggin77, Willyfrog, wlsf82, YuikoTakada

Release v5.17 - Quality Release 

Mattermost v5.17.0 contains medium to high level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

  • v5.17.3, released 2020-01-08

  • v5.17.2, released 2019-12-18

  • v5.17.1, released 2019-11-25

    • Fixed an issue where leaving a channel does not work in some cases if the channel was open in another webapp or desktop client. MM-20206

  • v5.17.0, released 2019-11-16

    • Original 5.17.0 release

Bug Fixes 

  • Fixed an issue where saving an empty string on Marketplace URL reset the URL instead of showing an error.

  • Fixed an issue where the default permission was such that all users were allowed to invite a guest instead of only System Admins.

  • Fixed an issue where Guest users were shown in the list when adding new members to a channel.

  • Fixed an issue where attempting to configure uninstalled plugins got stuck at “Loading…” without timeout.

  • Fixed an issue where clicking “Search” icon in narrow-width mode caused right-hand side to appear along with loading indicator “…”.

  • Fixed an issue where @all notification was still sent to all users when using TAB to press Cancel on the notification prompt.

  • Fixed an issue where system messages could trigger mentions for username collisions.

  • Fixed an issue where code syntax was not rendering or highlighting as expected in markdown.

  • Fixed an issue where users were not able to attach a file from iPad using Safari.

  • Fixed an issue where /code was rendering HTML incorrectly.

  • Fixed an issue where clicking “Pinned” icon removed text in the search box.

  • Fixed an issue where Main Menu > Integrations > OAuth 2.0 Applications page user interface broke when shrinking the window to a small size.

  • Fixed an issue where no feedback was given on mobile view when the maximum post length had been exceeded.

  • Fixed an issue where dragging or dropping a folder did not scroll the user to the right-hand side text box to make the error more visible.

  • Fixed an issue on mobile browser view where the post menu was split in 2 and users were not able to scroll up to see “Add Reaction” option.

  • Fixed an issue where pressing and holding on teams and channels in the left-hand side opened the context menu on the Desktop App.

  • Fixed an issue where the user popover bled off screen when browser or Desktop App was set to full-screen mode.

  • Fixed an issue where clicking locally installed plugins without a URL opened a new tab to the same page.

  • Fixed an issue where interactive message buttons and menus were not vertically the same size.

  • Fixed an issue where the first element was selected by default in radio elements in interactive buttons.

  • Fixed an issue where search with quotation marks was not returning expected results.

  • Fixed an issue where bulk importer generated invalid passwords for the user object with a missing password key.

  • Fixed an issue where post metadata was returned for deleted posts.

  • Fixed an issue where users were not able to use api/v4/websocket with a trailing slash.

  • Fixed an issue with subpaths where in-app System Console links were missing in the /subpath and resulted in a 404 error.

  • Fixed an issue where Terms of Service and Privacy Policy in Main Menu > About Mattermost did not permanently link to Mattermost’s policies.

config.json 

A setting option was added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added EnableLatex to add an option to enable/disable rendering of latex code.

Known Issues 

  • Deactivating a user increases Monthly Active Users and Daily Active Users count by 1 in System Console > Site Statistics.

  • Negative search filter hypens and occasional random terms are highlighted in search results.

  • Hitting escape to close autocomplete also closes channel header modal.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Contributors 

a-arias, A-Hilaly, a8uhnf, aaronrothschild, abadojack, abdusabri, abelharisov, aeomin, AGMETEOR, agnivade, agusl88, akantsevoi, akpark, akshaychhajed, aladhims, ali-farooq0, amyblais, ananichev, anchepiece, andresoro, anindha, aqche, arjitc, asaadmahmood, avasconcelos114, bensooraj, boonwj, bradjcoughlin, brewsterbhg, bryanculver, catalintomai, cedrickring, chahat-arora, chikei, ChrisDobby, chuttam, cinlloc, codevbus, comharris, cpanato, cpoile, crspeller, CSBatchelor, dailos2coders, DaKeiser, deanwhillier, dedifferentiator, der-test, devinbinnie, DHaussermann, dnguy078, drekar, DropNib, enahum, esethna, FlaviaBastos, gabrieljackson, gfelixc, gigawhitlocks, goku321, gruceqq, grundleborg, guigui64, gupsho, hahmadia, hanzei, hector2, hectorskypl, HelioStrike, heowc, hmhealey, hypnoglow, iDevoid, imavroukakis, imisshtml, iomodo, isacikgoz, italolelis, iwataka, jairojj, jasminexie, jasonblais, jatinjtg, JeewhanR, jesperhansen17, jespino, jfrerich, jkl5616, joebordes, johnthompson365, jordeguevara, jorgeruvalcaba, josephk96, JosephSamela, joshuabezaleel, jozuenoon, JtheBAB, justinegeffen, jwilander, kaakaa, karanrn, karlmarxlopez, kashifsoofi, Kaya_Zeren, kethinov, kgeorgiou, larkox, laurapareja, Lena, levb, lieut-data, lindalumitchell, LK4D4, lucianomagrao, Lumexralph, lurcio, malaDev, manland, marianunez, mauricio, MayMeow, mbluemer, meilon, Menelion, mgdelacroix, mhartenbower, mickmister, migbot, mistikel, mjthomp95, mkraft, mlongo4290, Mrigank11, Muscaw, Mycobee, nfriend, nicnicknicky, niklabh, njkevlani, octoquad, oksmelnik, pbitty, Pensu, phillipahereza, Phizzard, pikami, Pomyk, pqzx, pradeepmurugesan, ptisserand, pushkyn, raghuiamsingh, RajatVaryani, reflog, rfoyard, rodcorsi, rohanjulka19, rv404674, sahilsharma011, SamWolfs, sascha-andres, saturninoabril, sbishel, scottleedavis, sdesani, SezalAgrawal, shahbour, Sheshagiri, simonfrey, simross, sourabkumarkeshri, sowmiyamuthuraman, srkgupta, steevsachs, stefan-malcek, streamer45, stylianosrigas, sudheerDev, svelle, tgkouras, thekiiingbob, thePanz, ThiefMaster, tpaschalis, uhlhosting, Vaelor, valentijnnieman, vdepatla, VictorAvelar, wget, wiersgallak, willdot, Willyfrog, wyze, xrav3nz

Release v5.16 - Feature Release 

  • v5.16.5, released 2020-01-08

  • v5.16.4, released 2019-12-18

  • v5.16.3, released 2019-11-06

    • (Accessibility) Fixed an issue where keyboard navigation within the right-hand side did not navigate in expected order. MM-19901

  • v5.16.2, released 2019-10-30

    • Fixed an issue where Permission Schemes was not working properly on an E10 license. MM-19556

    • Fixed an issue where switching to an unread channel sometimes got stuck at “Loading…”. MM-19091

  • v5.16.1, released 2019-10-24

    • Mattermost v5.16.1 contains a high level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • (Accessibility) Fixed an issue where “Click here to jump to recent messages” was not accessible via keyboard. MM-19498

    • (Accessibility) Fixed an issue where post options were skipped when tabbing through a post in search results. MM-19497

    • (Accessibility) Fixed an issue where F6 did not allow navigating to the right-hand side when a thread wasn’t open. MM-18117

    • Fixed an issue where a change to the production Plugin Marketplace URL wasn’t backported to v5.16.0. MM-19516

  • v5.16.0, released 2019-10-16

    • Original 5.16.0 release

Mattermost v5.16.0 contains a low level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Compatibility 

Removed and Deprecated Features 

  • Support for Internet Explorer (IE11) was removed. Learn more in our forum post.

Breaking Changes 

  • The Mattermost Desktop v4.3.0 release includes a change to how desktop notifications are sent from non-secure URLs (http://). Organizations using non-secure Mattermost Servers (http://) will need to update to Mattermost Server versions 5.16.0+, 5.15.1, 5.14.4 or 5.9.5 (ESR) to continue receiving desktop notifications when using Mattermost Desktop v4.3.0 or later.

  • When enabling Guest Accounts, all users who have the ability to invite users will be able to invite guests by default. System admins will need to remove this permission on each role via System Console > Permissions Schemes. In Mattermost Server version 5.17, the System admin will be the only role to automatically get the invite guest permission, however the fix will not be applicable in 5.16 due to database migration processes.

Highlights 

Guest Accounts 

  • Provides a controlled and secure method for users outside of an organization to collaborate with their organization without allowing the guest to access proprietary or confidential information.

Plugin Marketplace 

  • The integrations marketplace is built into the product and gives system administrators the ability to discover and install Mattermost plugins that are compatible with the server version you are running.

Improved user management 

  • System Administrators can view a user’s team memberships and add a user to additional teams from the System Console without having to be a member of the team.

Improvements 

User Interface (UI) 

  • Added support for showing TIF image thumbnail previews.

  • Added the ability to remove the custom branding image.

  • Added support for showing channel links as links in email notifications.

  • Added support for direct message permalinks.

  • Changed recent date separators to read Today/Yesterday.

Import/Export 

  • Added support for including the Theme property on UserTeamMemberships in bulk exports.

Search 

  • Added support for excluding results from search.

Notifications 

  • Enabled account related emails when SendEmailNotifications is set to false.

Command Line Interface (CLI) 

  • Added a integrity CLI command to verify database integrity.

Plugins 

  • Added the ability for plugins to render custom embed views for posts.

  • Added support for including custom System Console components for plugins.

  • Added support for plugins to close the right-hand sidebar.

Integrations 

  • Added support for introductory markdown paragraph in interactive dialogs.

  • Added a password type for interactive dialogs.

  • Added support for footer and footer_icon in attachments.

  • Added support for boolean elements in interactive dialogs.

  • Added support for a radio type in interactive dialogs.

Performance 

  • Improved perceived performance of the emoji picker.

  • Improved post list performance by making thread comments be loaded only when needed.

  • Improved quick switcher experience to make the autocomplete feel more like a modal rather than a dropdown.

Administration 

  • Added the ability for System Administrators to revoke all sessions from all users.

  • Added support for System Administrators to make public channels private and private channels public within the System Console > User Management > Channel Configuration page when Experimental Groups feature is enabled.

  • Added user Id information in the System Console > Users page.

  • Updated System Console plugin settings page to expose enable/disable setting.

  • Added ability for System Administrators to view a user’s team memberships and add users to additional teams within System Console > User Management > User Configuration.

Bug Fixes 

  • Fixed an issue where user count did not update if a user automatically joined a channel.

  • Fixed an issue where using the channel autocomplete while editing posts caused the current channel to be unread.

  • Fixed an issue where users were unable to type in any other channel after leaving a draft post in preview mode in one channel and then switching to another channel.

  • Fixed an issue where a user didn’t see any unreads when rejoining a team if they were in a Direct Message channel when they left the last team.

  • Fixed an issue where some pre-packaged plugins showed as removable in the user interface.

  • Fixed an issue where clicking “Edit” of another sub-section in Account Settings appeared to save the setting that was currently being edited in an open sub-section in the same modal.

  • Fixed an issue where the System Console user menu did not show all inactive users.

  • Fixed an issue where a JS console error appeared when uploading an image from the right-hand side.

  • Fixed some bugs related to the new keyboard accessibility feature.

  • Fixed an issue where the /leave slash command was not working on direct message channels.

  • Fixed an issue where the quick channel switcher box opened behind the header attachment expansion.

  • Fixed an issue on mobile web view where emoji reaction modal was cut off when adding a second reaction via “+” icon.

  • Fixed an issue where the username was not shown in the left-hand side on mobile web view.

  • Fixed an issue where “Thumbs up” emoji did not get added to “Recently Used” section.

  • Fixed an issue where trailing white space was not ignored when saving a bot username.

  • Fixed an issue where enabling channel group constraints turned the admin site blank.

  • Fixed an issue where SQL connections closed prematurely for clusters.

  • Fixed an issue where absolute paths were not honoured in SAML certificates.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under PluginSettings:

    • Added EnableMarketplace (default to true) and MarketplaceUrl (default to https://marketplace.integrations.mattermost.com), to enable Plugin Marketplace feature.

  • Under GuestAccountsSettings:

    • Added Enable, AllowEmailAccounts, EnforceMultifactorAuthentication, and RestrictCreationToDomains, to enable Guest Accounts feature.

  • Changed SqlSettings.DataSource, ElasticsearchSettings.ConnectionUrl, and EmailSettings.SMTPServer to default to using localhost (instead of dockerhost).

  • Changed NativeAppSettings.AppDownloadLink to default to https://mattermost.com/download/#mattermostApps (instead of https://mattermost.com/download/).

Open Source Components 

  • Added react-native-android-open-settings in https://github.com/mattermost/mattermost-mobile.

  • Added react-native-haptic-feedback in https://github.com/mattermost/mattermost-mobile.

  • Added DefinitelyTyped in https://github.com/mattermost/mattermost-webapp.

  • Added node-semver in https://github.com/mattermost/mattermost-webapp.

  • Added regenerator in https://github.com/mattermost/mattermost-webapp.

  • Added typescript in https://github.com/mattermost/mattermost-webapp.

API Changes 

  • Added a new GET /plugins/marketplace API endpoint added to list marketplace plugins.

  • Added a new PUT /channels/:channel_id/privacy API endpoint to update the privacy of a channel.

  • Added a new POST /site_url/test to test API endpoint to test the configured site URL.

  • Added a new POST /teams/:team_id/invite-guests/email API endpoint to invite guest users by email.

  • Added new POST /users/:user_id/promote and POST /users/:user_id/demote API endpoints to promote and demote users to guest accounts.

  • Updated the PUT /channels/:channel_id/patch API endpoint to ensure that the requestor user has permission to see each channel member.

  • Updated the GET /channels/:channel_id/stats API endpoint to include the pinned post and guest counts.

  • PUT /roles/:role_id/patch API endpoint now ensures that guest account roles are not updatable without the required license and feature SKU.

  • Several OAuth API endpoints were removed.

Database Changes 

  • Added a change to the Tokens table Extra column’s data type.

Known Issues 

  • Saving an empty string on Plugin Marketplace URL resets the URL instead of showing an error.

  • Switching to an unread channel sometimes gets stuck at “Loading…”.

  • Attempting to configure uninstalled plugins get stuck at “Loading…” without timeout.

  • Enabling/disabling guest access in System Console fails.

  • Guest users are shown in the list when adding new members to a channel.

  • Negative search filter hypens and occasional random terms are highlighted in search results.

  • @all notification is still sent to all users when using TAB to press Cancel on the notification prompt.

  • System messages may trigger mentions for name collisions.

  • Hitting escape to close autocomplete also closes channel header modal.

  • Pressing and holding on teams and channels in the left-hand side opens the context menu on desktop apps.

  • Modifying config files causes compliance exports to run twice.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.15 - Quality Release 

  • v5.15.5, released 2020-01-08

    • Fixed an issue where migrating accounts from email to SAML failed. MM-21472

  • v5.15.4, released 2019-12-18

  • v5.15.3, released 2019-11-06

    • (Accessibility) Fixed an issue where keyboard navigation within the right-hand side did not navigate in expected order. MM-19901

    • Fixed an issue where switching to an unread channel sometimes got stuck at “Loading…”. MM-19091

  • v5.15.2, released 2019-10-24

    • Mattermost v5.15.2 contains a high level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • (Accessibility) Fixed an issue where “Click here to jump to recent messages” was not accessible via keyboard. MM-19498

    • (Accessibility) Fixed an issue where post options were skipped when tabbing through a post in search results. MM-19497

    • (Accessibility) Fixed an issue where F6 did not allow navigating to the right-hand side when a thread wasn’t open. MM-18117

  • v5.15.1, released 2019-10-11

    • Fixed an issue that will be introduced with a change in upcoming server v5.16 and desktop app v4.3 releases where desktop notifications will be broken as the desktop app will no longer be able to directly interact with the web app. MM-18819

    • Fixed an issue where server-side telemetry was not reporting back after 5.14 release. MM-18115

  • v5.15.0, released 2019-09-16

    • Original 5.15.0 release

Mattermost v5.15.0 contains low level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Bug Fixes 

  • Fixed an issue where an invalid locale caused a white screen.

  • Fixed an issue where rate limited posts failed to load threads.

  • Improved the group linking failure error message and logging to make it clear that the group id attribute is most likely misconfigured.

  • Fixed an issue where the right-hand side did not fetch messages on socket reconnect when a different channel was in center.

  • Fixed an issue where posting a message in an empty channel sometimes caused the channel to display a loading spinner.

  • Fixed an issue where deleting the last post in a channel caused the channel to only display a loading spinner.

  • Fixed an issue with an absence of unread badges on private channels on mobile apps.

  • Fixed an issue where at-sign was missing in front of usernames in push notifications.

  • Fixed some bugs related to the new keyboard accessibility feature.

  • Fixed an issue where the “@” sign was replaced with keyboard accessibility feature on Italian keyboard.

  • Fixed an issue where joining a new channel with few posts sometimes did not take the user to the bottom of the channel.

  • Fixed an issue where scroll pop sometimes occured with embedded Youtube links.

  • Fixed an issue with stuttery dropdowns in Safari.

  • Fixed an issue where clicking on a post would highlight it after returning to the tab/window.

  • Fixed an issue where SVG attachments bled over into subsequent posts.

  • Fixed an issue where long posts were overlapping in compact view.

  • Fixed an issue where the expand/collapse button in images were underlined.

  • Fixed an issue where incoming webhook URL was clickable and shown as a link on the desktop app.

  • Fixed an issue where the markdown helper text was missing on Edit Channel Header modal.

  • Fixed an issue on mobile view where Edit/Delete/More options were not displayed on the right-hand side after a message was posted.

  • Fixed an issue where the channel mute icon was displayed in the incorrect position when a channel was muted.

  • Fixed an issue where there was an extra menu divider on Town Square channel menu.

  • Fixed an issue on Firefox where post and comment boxes were expanding too early.

  • Fixed an issue where focus was not automatically set on text input box after selecting an emoji from the emoji picker.

  • Fixed an issue where channel changes were not updated for other users until refresh.

  • Fixed an issue where changes to Account Settings were being saved even when the user did not click the Save button.

  • Fixed an issue where some of the links in System Console opened the page on the same tab instead of opening it on a new browser/tab.

  • Fixed an issue where installing a plugin via URL failed if the download took longer then 30 seconds.

  • Fixed an issue where plugins did not get disabled when removing them.

  • Fixed an issue where plugin translation files were not updated on web-clients when plugins were upgraded.

  • Fixed an issue where bots could not be added to any team if server wide email domain restriction was enabled.

  • Fixed an issue where pagination broke when adding users to a team.

  • Fixed an issue where list of users were not paginated on warning modal for LDAP group sync team / channel removal.

  • Fixed an issue where enabling LDAP Trace prevented login.

  • Fixed an issue where Google User API Endpoint showed an outdated helper text.

  • Fixed an issue where a markdown image with an SVG briefly displayed for sender with EnableSVGs set to false.

  • Fixed an issue with an incorrect error message on Custom URL Schemes field.

Known Issues 

  • JS console error may appear when uploading an image from the right-hand side.

  • Scroll pop may occur in channels with markdown images.

  • Trailing white space is not ignored when saving bot user name.

  • Clicking “Edit” of another sub-section in Account Settings appears to save the setting that is currently being edited in an open sub-section in the same modal.

  • Some pre-packaged plugins show as removable in the User Interface.

  • If ExperimentalStrictCSRFEnforcement is set to True, attempts to use /jira subscribe fail.

  • Users are unable to type in any other channel after leaving a draft post in preview mode in one channel and then switching to another channel.

  • User count in a channel does not update until after refresh if a user automatically joins a channel.

  • Scrolling upwards while loading more posts sometimes causes you to jump upwards on Firefox.

  • Modifying config files causes compliance exports to run twice.

  • Using channel autocomplete while editing post causes current channel to be unread.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.14 - Feature Release 

  • v5.14.5, released 2019-10-24

  • v5.14.4, released 2019-10-11

    • Fixed an issue that will be introduced with a change in upcoming server v5.16 and desktop app v4.3 releases where desktop notifications will be broken as the desktop app will no longer be able to directly interact with the web app. MM-18819

    • Fixed an issue where server-side telemetry was not reporting back after 5.14 release. MM-18115

  • v5.14.3, released 2019-09-16

    • Fixed an issue where edited posts were not included in Compliance Export (Beta). MM-18522

  • v5.14.2, released 2019-08-30

    • Fixed an issue where Mattermost crashed when date-related search terms on: before: and after: were used in search. MM-18143

  • v5.14.1, released 2019-08-28

    • Fixed issues with keyboard accessibility where post and search textboxes did not read characters when using the arrow keys to move back and forth through the text. MM-17964 and MM-17974

  • v5.14.0, released 2019-08-16

    • Original 5.14.0 release

Mattermost v5.14.0 contains a medium level security fix. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Compatibility 

Removed and Deprecated Features 

  • We are removing support for Internet Explorer (IE11) in Mattermost v5.16.0, which releases on October 16, 2019. Learn more in our forum post.

Breaking Changes 

  • Webhooks are now only displayed if the user is the creator of the webhook or a system administrator.

  • With the update from Google+ to Google People, system admins need to ensure the GoogleSettings.Scope config.json setting is set to profile email and UserAPIEndpoint setting should be set to https://people.googleapis.com/v1/people/me?personFields=names,emailAddresses,nicknames,metadata per updated documentation.

IMPORTANT: If you upgrade from a release earlier than 5.13, please read the other Important Upgrade Notes.

Highlights 

Keyboard navigation and screen reader improvements 

  • New keyboard navigation improvements enable you to move between app regions—like the post list, channel sidebar, and header—using F6 on the Desktop App and CTRL-F6 on a web browser. You can also use TAB, arrow keys, and ENTER to interact with buttons, links, and other elements in Mattermost.

  • Screen readers are now much more compatible with Mattermost. Buttons, links, and app regions now have accurate readouts that enable visually impaired users to use Mattermost productively with screen readers.

  • Learn more

Bidirectional scrolling to land on oldest unread post 

  • No more scrolling required to get to the oldest unread post. Now when the channel opens when there are unreads it opens at the new messages line, regardless of how many unreads exist since the last time the user viewed the channel.

Jira V2.1 

  • Full list of features in v2.1: https://github.com/mattermost/mattermost-plugin-jira#jira-21-features.

System Console tools to manage LDAP Groups within Teams and Channels (EE) 

  • New Team and Channel pages in the System Console allow administrators to easily manage teams and channels membership with LDAP Group Synchronization instead of using the CLI group commands released in v5.12.

Pre-packaged Plugins 

  • Jenkins plugin for interacting with jobs and builds via slash commands in Mattermost.

  • Antivirus plugin for scanning files uploaded to Mattermost.

  • GitLab plugin for getting notifications in Mattermost about mentions, review requests and comments.

Improvements 

User Interface (UI) 

  • Added support for allowing + and . in System Console > Customization > Posts > Custom URL Schemes.

  • Added support for Range on files needed by Safari to view videos.

  • Added ability to add info cards to the right-hand side section.

  • Added support for rendering emojis in Message Attachment field titles.

  • Changed “About” section references to use the site name when it is configured in System Console > Custom Branding > Site Name.

  • Combined “Send messages on CTRL+ENTER” with code block setting.

  • Added ability to upload files on paste when file constructor is not supported (ie. in Edge or IE11).

Import/Export 

  • Added the ability to import Slack corporate export files with direct messages, group messages and private channels.

  • Added support for exporting Global Relay to zip file.

Webhooks 

  • EnableWebhookDebugging now logs the request id for additional context when debugging.

  • Added support for plugins to dismiss posts through the MessageWillBePosted hook. Dismissed posts no longer show up as a client-side error.

  • Added an optional “icon_emoji” field to incoming webhooks to use an emoji in place of the display picture when the webhook posts into Mattermost.

Integrations 

  • Added support for interactive dialogs without elements, e.g. for confirmation dialogs.

  • Added support for relative links in interactive message buttons, simplifying plugin development.

Plugins 

  • Added support for plugins to override right-hand sidebar.

  • Added support for plugins to trigger interactive dialogs programmatically, instead of only after a user action.

Bot Accounts 

  • Added an identifier for compliance exports when a message is posted by a bot account.

  • Created a dedicated System Console page at /admin_console/integrations/bot_accounts to organize bot configuration options.

Command Line Interface (CLI) 

  • Added support for converting bot accounts to user accounts with email/password login through the CLI.

  • Extended the config migrate command to handle SAML keys and certificates.

  • Updated CLI channel list and search commands to show if a channel is private.

  • Create CLI command “team modify” to modify team’s privacy setting.

Administration 

  • Office365 SSO was promoted out of beta.

  • Removed maximum length from LinkMetadata value so that links can generate OpenGraph previews and be stored in the database.

  • The config.json file is now generated with build time using defaults in code and not in default.json.

  • Added new settings to have more control over BindAddress and AdvertiseAddress in the cluster server to allow users to configure properly in situations where the servers are communicating through another server using NAT.

  • implemented enhanced logging for CSRF warnings by adding the following information to each request: Remote Adddress, Path, User ID, Session ID.

Enterprise Edition (EE) 

  • Added support for signing SAML requests, as required for Infosec approval.

  • Added support for configuring the interface used for cluster peer discovery in High Availability clusters.

Bug Fixes 

  • Fixed an issue where pagination of group members was broken in LDAP Groups.

  • Fixed an issue where the options to leave a team was disabled for all teams and not just the primary team when a primary team was set.

  • Fixed an issue where bulk import got stuck when importing lines were missing the “type” entry.

  • Fixed an issue where titles for webhooks, commands and OAuth apps were no longer bolded in the System Console.

  • Fixed an issue where disabling email notifications also disabled email invites.

  • Fixed an issue where Admins were shown a warning of a user’s bot being deactivated even if they already were.

  • Fixed an issue where a bot profile image disappeared when saving bot details.

  • Fixed an issue where plus-sign was not visible on mobile browser view for reacting with a new emoji next to existing reactions.

  • Fixed an issue in the System Console where the UserID in User Activity Logs changed from email to UserID.

  • Fixed an issue where user got a notification to add a bot to a channel when mentioning it.

  • Fixed an issue where permanenently deleting a bot user didn’t remove it from the bots table.

  • Fixed an issue where a scroll pop was caused by large image dimensions in markdown.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ClusterSettings in config.json:

    • Added NetworkInterface to allow configuring devices to detect the IP in High Availability clusters.

    • Added BindAddress and AdvertiseAddress to add more control over bind and advertising address in a cluster server.

  • Under ComplianceSettings in config.json:

    • Added SignRequest to add support for signing SAML requests.

  • Under PluginSettings in config.json:

    • Added AllowInsecureDownloadUrl to allow servers to download and install a plugin from a remote url via the System Console.

Open Source Components 

  • Added core-js in https://github.com/mattermost/mattermost-mobile/.

  • Added deepmerge in https://github.com/mattermost/mattermost-mobile/.

  • Removed react-native-bottom-sheet from https://github.com/mattermost/mattermost-mobile/.

  • Added react-hot-loader in https://github.com/mattermost/mattermost-webapp.

  • Removed @babel/polyfill from https://github.com/mattermost/mattermost-webapp.

  • Removed redux-persist-transform-filter from https://github.com/mattermost/mattermost-webapp.

  • Removed url-search-params-polyfill from https://github.com/mattermost/mattermost-webapp.

  • Removed whatwg-fetch from https://github.com/mattermost/mattermost-webapp.

API Changes 

  • Migrated user API endpoint from Google+ API to People API.

  • Added api/v4/channels/group/search API endpoint to return the group channels whose members’ usernames match the search term.

  • Added /api/v4/channels/:channel_id/members_minus_group_members API endpoint to determine users who will be removed from a group-synchronized channel.

  • Added api/v4/posts/unread API endpoint to support landing on the last unread post.

  • Added api/v4/teams/:team_id/members_minux_group_members API endpoint to determine users who will be removed from a group-synchronized team.

  • Added api/v4/users/group_channels API endpoint to get an object containing a key per group channel id in the query and its value as a list of users members of that group channel.

  • Added api/v4/sessions/revoke/all API endpoint to add the ability to revoke sessions from all users.

Plugin API 

  • Added GetBotIconImage, SetBotIconImage and DeleteBotIconImage API endpoints to control bot icon images.

  • Added api/v4/plugins/install_from_url API endpoint to allow server to download and install a plugin from a remote url.

Known Issues 

  • Users are unable to type in any other channel after leaving a draft post in preview mode in one channel and then switching to another channel.

  • Google User API Endpoint shows outdated helper text.

  • Making a post in an empty channel sometimes causes the channel to display a loading spinner.

  • Deleting the last post in a channel causes the channel to only display a loading spinner.

  • Markdown helper text is missing on Edit Channel Header modal.

  • User count in a channel does not update until after refresh if a user automatically joins a channel.

  • Long posts might overlap in compact view.

  • Joining a new channel with few posts might not take the user to the bottom of the channel.

  • Missing messages can be caused if network fails on API calls.

  • Search help text popover may not display on narrow screen view.

  • Expand/collapse in image icons are underlined.

  • Messages may not load when opening a channel with multiple unread messages.

  • Scrolling upwards while loading more posts sometimes causes you to jump upwards on Firefox.

  • Post and comment boxes are expanding too early on Firefox.

  • Modifying config files causes compliance exports to run twice.

  • Using channel autocomplete while editing post causes current channel to be unread.

  • Scroll pop may occur with embedded Youtube links.

  • Clicking on a post will highlight it after returning to the tab/window.

  • Plugin translation files are not updated on web-client when plugins are upgraded.

  • Changes to Account Settings are being saved even when user does not clicks on Save button.

  • SVG attachments bleed over into subsequent posts.

  • Custom-Attributes plugin might crash.

  • Pagination breaks when adding users to a team.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.13 - Quality Release 

Mattermost v5.13.0 contains low level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

  • v5.13.3, released 2019-08-22

  • v5.13.2, released 2019-07-24

    • Fixed performance issues in channels with large message history due to a change made to posts query. MM-16936

    • Fixed an issue where some settings were not visible in the System Console. MM-17114

    • Fixed an issue where announcement banner overlapped content. MM-17115

    • Fixed an issue where the scroll position was not at the new message indicator on switching channels when there were 30-60 unread messages. MM-17078

  • v5.13.1, released 2019-07-19

    • Fixed an issue with Jira plugin where creating or attaching to Jira issues failed due to GDPR changes released by Atlassian. Affected Jira Cloud only, not Jira Server or Jira Data Center. MM-17060

    • Fixed an issue in server logs where messages related to OpenGraph API were unnecessarily reported as errors. MM-17043

    • Fixed an issue in the System Console without an Enterprise Edition license where Push Notification Contents setting was not available. MM-17008

  • v5.13.0, released 2019-07-16

    • Original 5.13.0 release

Compatibility 

Removed and Deprecated Features 

  • We are removing support for Internet Explorer (IE11) in Mattermost v5.16.0, which releases on October 16, 2019. Learn more in our forum post.

  • v4.10.0 as our current Extended Support Release (ESR) is coming to the end of its lifecycle. We will be implementing version v5.9.0 as a new ESR starting July 16, 2019. Learn more in our forum post.

Bug Fixes 

  • Fixed an issue where changing the timezone setting to “Set automatically” did not work on the mobile app.

  • Fixed an issue where the channel introduction content sometimes disappeared on opening a channel.

  • Fixed an issue with missing messages.

  • Fixed an issue where disabling Join/Leave Messages and switching to a specific channel caused a white screen.

  • Fixed an issue where the SMTP server password was no longer concealed in the System Console.

  • Fixed an issue where Notifications and Plugins settings were missing in the System Console for restricted system administrators.

  • Fixed an issue where “Enable AD/LDAP Group Sync” was visible in experimental System Console settings section in Team Edition servers.

  • Fixed an issue where System Console > SMTP > Connection Security setting was missing in Team Edition servers.

  • Fixed an issue where “Allow Mobile upload/download Files” options in the System Console where not hidden in Team Edition servers.

  • Fixed an issue where channel links did not work inside brackets.

  • Fixed an issue where uploading a team icon image fired a JS console error and a blank image preview.

  • Fixed an issue on Safari where a user jumped to the top of the Direct Messages selection list every few seconds.

  • Fixed an issue where “Error populating syncables” was seen on login when LDAP groups tried to add a user to a team that was at its maximum number of users.

  • Fixed an issue where the slash command /rename was restricted to 22-character maximum channel name length.

  • Fixed an issue where Manage Members menu was visible even if a user did not have Manage Member permissions when viewing the Main Menu.

  • Fixed an issue where the “Set a Header” button in the channel introduction was not clickable.

  • Fixed an issue where Group Message and private channel icons in the sidebar were misaligned.

  • Fixed an issue where custom emojis sometimes overlapped in messages.

  • Fixed an issue where bot tags were misaligned in search results and in the “in:” modifier in the search bar autocomplete.

  • Fixed an issue where the post menu divider had a gap in mobile view.

  • Fixed an issue where the bottom of right-hand side was cut off in tablet view.

  • Fixed an issue where the channel dropdown menu user interface was broken in mobile view when Zoom plugin was enabled.

  • Fixed an issue where the Save button was hidden in the System Console when a banner was displayed at the top of the page.

  • Fixed an issue where users were not able to search for split parts of first/last names or for split characters such as _ with elasticsearch autocomplete enabled.

  • Fixed an issue where OAuth endpoints returned application/json content type for HTML redirects.

  • Fixed an issue where json responses were not returned for errors on oauth API endpoints, and a 500 error was returned instead of 4xx errors.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ElasticsearchSettings in config.json:

    • Added SkipTLSVerification to ignore certificate verification for Elasticsearch.

Open Source Components 

  • Added moment-timezone in https://github.com/mattermost/mattermost-redux/.

Database Changes 

  • plugins type entries in the Jobs table will be purged on upgrade. This job was incorrectly configured to run every minute, spamming the table with mostly useless records. All old records will be removed on upgrade, and the job will run daily instead.

Known Issues 

  • Cannot leave any team when a default primary team is set.

  • Titles for webhooks, commands and OAuth apps are no longer bolded in the System Console.

  • Users can get logged out of server without a session expiry notification.

  • Desktop app hangs on opening emoji picker.

  • When a primary team is set, the options to leave a team is disabled for all teams, not just the primary team.

  • Plugin crashes the server when calling w.WriteHeader(0).

  • Bot account profile image disappears when saving bot details.

  • Custom emoji containing specified letters do not appear in emoji autocomplete, unless they start with the letters or have been returned in the autocomplete before.

  • Buttons inside ephemeral messages are not clickable / functional on the mobile app.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.12 - Feature Release 

Mattermost v5.12.0 contains low to medium level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

  • v5.12.6, released 2019-08-22

  • v5.12.5, released 2019-07-19

    • Fixed an issue with Jira plugin where creating or attaching to Jira issues failed due to GDPR changes released by Atlassian. Affected Jira Cloud only, not Jira Server or Jira Data Center. MM-17060

  • v5.12.4, released 2019-07-15

    • Fixed an issue with missing messages. MM-16921

  • v5.12.3, released 2019-07-09

    • Fixed an issue where setting the MM_SQLSETTINGS_DATASOURCEREPLICAS environment variable broke the server startup. MM-16719

  • v5.12.2, released 2019-07-03

  • v5.12.1, released 2019-06-28

    • Fixed an issue where messages were sometimes missing after reconnecting the network. MM-16423

    • Fixed an issue where the client sometimes crashed while viewing a direct message channel. MM-16480

    • Fixed an issue where Net Promoter Score (NPS) printed an error message in server logs when Error and Diagnostics Reporting was disabled. MM-16465

    • Fixed an issue where Net Promoter Score (NPS) telemetry reporting surveys were disabled if the setting had not been modified. MM-16554

  • v5.12.0, released 2019-06-16

    • Original 5.12.0 release

Breaking changes since last release 

  • If your plugin uses the DeleteEphemeralMessage plugin API, update it to accept a postId string parameter. See documentation to learn more.

  • Image link and YouTube previews do not display unless System Console > Enable Link Previews is enabled. Please ensure that your Mattermost server is connected to the internet and has network access to the websites from which previews are expected to appear. Learn more here.

  • ExperimentalEnablePostMetadata setting was removed. Post metadata, including post dimensions, is now stored in the database to correct scroll position and eliminate scroll jumps as content loads in a channel.

IMPORTANT: If you upgrade from a release earlier than 5.11, please read the other Important Upgrade Notes.

Highlights 

Infinite Scroll 

  • Read messages more easily. Older posts are loaded automatically as you scroll up instead of having to click the “Load more messages” button at the top of the screen. This feature is not supported on Internet Explorer (IE11).

Bot Accounts 

  • Users no longer have to rely on creating fake user accounts to act as bots for integrations. Instead, create a real bot account and use it to generate bot access tokens to interact with users and complete tasks.

  • Users can can also use these bots to post to any channel in the system, whether it’s a private team, private channel or a direct message channel.

  • For Enterprise deployments, bot accounts no longer count as an active user towards licensing subscriptions.

  • To learn more about bot accounts, see the documentation.

Jira Plugin 2.0 

  • Enhanced existing plugin for a deep two-way integration between Jira and Mattermost.

  • Send notifications for Jira issue creation, issue updates and comments to Mattermost channels.

  • Users can also take quick actions in Mattermost, including creating Jira issues, attaching Mattermost messages to Jira issues, and transitioning issues via slash commands.

  • For a full feature set for 2.0, see https://github.com/mattermost/mattermost-plugin-jira#jira-20-features.

Pre-packaged Plugins 

  • New pre-packaged plugins bundled with this Mattermost release include:

    • GitHub plugin for notifications, reminders and slash commands to stay up-to-date on issues and pull requests. Supports GitHub SaaS and Enterprise versions.

    • Autolink plugin to automatically hyperlink text, such as adding links to your issue tracker when someone posts an issue key or number.

    • Custom Attributes plugin to add custom attributes in the user profile popover.

    • Welcome Bot plugin to improve onboarding and HR processes by adding a Welcome Bot that helps add new team members to channels.

    • Amazon SNS CloudWatch plugin to send alert notifications from Amazon AWS CloudWatch to Mattermost channels via AWS SNS.

System Console Reorganization 

  • Informational architecture restructure of the System Console to make a more logical flow to the settings and to provide a more cohesive experience for hiding features on the Mattermost Private Cloud product, where the system admin should not have access to change configurations that affect the environment directly.

Net Promoter Score (NPS) 

  • We are gathering user feedback to help improve user experience and hear directly from our users. The feature can be disabled via System Console > Plugins > Net Promoter Score.

AD/LDAP Group Sync Removals (Enterprise Edition E20) 

  • System Admins can manage the membership of private teams and channels with AD/LDAP groups, eliminating the need to individually add and remove members. Users in the groups are automatically removed from the team or channel when removed from an associated group.

User/Channel Search & Autocomplete in Elasticsearch (Enterprise Edition E20) 

  • Added new settings in System Console > Elasticsearch to enable Elasticsearch for autocompletion queries. When enabled, Elasticsearch uses its indexed data for user/channel search queries and autocomplete queries.

Improvements 

User Interface (UI) 

  • Added an option to add a user to a channel from the profile popover.

  • Removed @ for full name display in push notifications.

Plugins 

  • Added support for Markdown in plugin System Console help text fields.

  • Added support for plugins to override ephemeral posts.

Localization 

  • Promoted Polish language to “official”.

Command Line Interface (CLI) 

  • Added a command modify CLI command to modify slash commands.

  • Added a mattermost user convert --bot CLI command to convert user accounts to bot accounts.

  • Implemented a new command config migrate for migrating configuration to and from the database.

  • For AD/LDAP Group Sync, added the following CLI commands:

    • group team enable to add the ability to switch a team to be group-constrained.

    • group team disableto add the ability to disable group constraint on the specified team.

    • group team list to list the groups associated with a team.

    • group team status to show the group constraint status of the specified team.

    • group channel enable to add the ability to switch a channel to be group-constrained.

    • group channel disable to disable group constraint on the specified channel.

    • group channel list to list the groups associated with a channel.

    • group channel status to show the group constraint status of the specified channel.

Administration 

  • Added support for running two Mattermost instances on the same domain using subpaths.

  • Added support for importing threads from Slack.

Bug Fixes 

  • Fixed an issue where releasing a mouse click while the cursor was outside of the Rename Channel modal would close the modal.

  • Fixed an issue where a whitepage occured after uploading a plugin with an invalid settings_schema value.

  • Fixed an issue where the announcement banner overlapped channel content.

  • Fixed an issue where license expiration notice banner could not be dismissed prior to the license expiration date.

  • Fixed an issue where the channel switcher autocomplete didn’t function properly when autocompleting the name of a person who was the first person named in a group message channel.

  • Fixed an issue where inline images in markdown preview didn’t get expanded.

  • Fixed an issue where replies to the parent post were not left-aligned.

  • Fixed an issue where the timezone picker dropdown closed when trying to drag the scrollbar.

  • Fixed an issue where the ExperimentalPrimaryTeam config.json setting no longer hid the “Leave Team” option.

  • Fixed an issue where the setting position field for AD/LDAP sync in System Console did not block user from changing it in Account Settings.

  • Fixed an issue where scrolling was not working on iOS browser sign-up and sign-in pages.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under "PluginSettings": in config.json:

    • Added "EnableHealthCheck": true, to ensure all plugins are periodically monitored, and restarted or deactivated based on their health status.

  • Under "NotificationLogSettings": in config.json:

    • Added "EnableConsole": true, "ConsoleLevel": "DEBUG", "ConsoleJson": true, "EnableFile": true, "FileLevel": "INFO", "FileJson": true, and "FileLocation": "", to implement a structured logger to keep track of push notifications.

  • Under "ServiceSettings": in config.json:

    • Added "EnableBotAccountCreation": false to enable bot account creation.

    • Added "DisableBotsWhenOwnerIsDeactivated": true to disable bots automatically when the owner is deactivated.

    • Added "TrustedProxyIPHeader": [], to explicitly define which IP headers are trusted.

Database Changes 

  • SchemeGuest column added to the TeamMembers table.

  • SchemeGuest column added to the ChannelMembers table.

  • DefaultTeamGuestRole column added to the Schemes table, and set to an empty string.

  • DefaultChannelGuestRole column added to the Schemes table, and set to an empty string.

API Changes 

RESTful API v4 Changes 

  • Updated API to use gziphandler wrapper if server is configured to use gzip. This ensures that the Mattermost server can respond to REST API requests with compressed data (via gzip) to reduce the amount of bandwidth used.

  • LDAP Group Sync:

    • Added API endpoints getGroupsByChannel and GetGroupsByTeam to retrieve groups by team and by channel.

    • Added group_constrained API to both /users and /users/search endpoints to be able to limit users listed to those allowed by group-constraints.

    • Added the GetGroups API endpoint to retrieve lists of groups with searching, pagination, and member counts.

  • Disabled Team InviteID modification via Create/Update actions and moved it to a dedicated API endpoint.

Plugin API v4 Changes 

  • Added KVCompareAndSet(key string, old []byte, new []byte) to Plugin API to add support for transactional semantics with KV Store in plugin framework.

Known Issues 

  • Creating or attaching to Jira issues fails for Jira Cloud. This is resolved in v5.12.5.

  • Messages related to OpenGraph API are unnecessarily reported as errors in the server logs. This is resolved in v5.13.1.

  • Push Notification Contents setting is not available in the System Console in servers without an Enterprise Edition license. This is resolved in v5.13.1.

  • Channels with large message history may have performance issues. This is resolved in v5.13.2.

  • Site Configuration > Notifications > Email Notification Contents is missing from E10 servers. This is resolved in v5.13.2.

  • Changing announcement banner overlaps content. This is resolved in v5.13.2.

  • Scroll position is not at the new message indicator on switching channels with unreads between 30-60. This is resolved in v5.13.2.

  • Titles for webhooks, commands and OAuth apps are no longer bolded in the System Console.

  • Users can get logged out of server without a session expiry notification.

  • Desktop app hangs on opening emoji picker.

  • When a primary team is set, the options to leave a team is disabled for all teams, not just the primary team.

  • Plugin crashes the server when calling w.WriteHeader(0).

  • Bot account profile image disappears when saving bot details.

  • Custom emoji containing specified letters do not appear in emoji autocomplete, unless they start with the letters or have been returned in the autocomplete before.

  • Buttons inside ephemeral messages are not clickable / functional on the mobile app.

  • On a server using a subpath, the URL opens a blank page if the System Admin changes the Site URL in the System Console UI. To fix, the System Admin should restart the server.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.11 - Quality Release 

Mattermost v5.11.0 contains low level security fixes. Upgrading is recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Breaking changes since last release 

  • If your integration uses Update.Props == nil to clear Props, this will no longer work in 5.11+. Instead, use Update.Props == {} to clear properties. This change was made because Update.Props == nil unintentionally cleared all Props, such as the profile picture, instead of preserving them.

IMPORTANT: If you upgrade from a release earlier than 5.10, please read the other Important Upgrade Notes.

Bug Fixes 

  • Fixed an issue where plugin settings link didn’t appear until refresh after uploading a plugin in the System Console.

  • Fixed an issue where System Console > Users bottom section of “user actions” menu was cut off for the last three users in the screen.

  • Fixed an issue where corners on image previews were squared instead of rounded.

  • Fixed an issue where the hover effect was missing on images.

  • Fixed an issue where a post action (via button or menu) reset the profile picture of the webhook post.

  • Fixed an issue where a flagged post containing only file attachments didn’t render in the sidebar until loaded in the centre.

  • Fixed an issue where some strings in channel settings weren’t localizable.

  • Fixed an issue where clicking “Open” downloaded an image instead of opening it.

  • Fixed an issue where an at-mention user autocomplete overlapped with the channel header when drafting a long message containing a file attachment.

  • Fixed an issue where the reply bar showed gaps between posts in compact view.

  • Fixed an issue where markdown preview of nested lists displayed differently from styling in posted message.

  • Fixed an issue where Safari suggested auto-corrections in the channel switcher.

  • Fixed an issue on Safari where the mention badge count didn’t update immediately.

  • Fixed an issue where the post action menu overlapped with posts on iOS/Safari on mobile view.

  • Fixed an issue where interactive dialog’s description text colour was difficult to see on dark themes.

  • Fixed an issue where delete permissions for custom emoji team admin role were not always granted.

  • Fixed an issue with a slight scroll pop on reaching loading indictor of search results.

  • Fixed an issue where adding a user to a channel that is in the unreads section caused the channel to become read in the user’s view.

  • Fixed an issue where the channel menu dropdown icon had an unnecessary tooltip.

  • Fixed an issue on LDAP Groups where adding a group to a team provided an unnecessary permission confirmation modal.

  • Fixed an issue on mobile view where clicking on the attachment icon didn’t bring up the dropdown menu.

Known Issues 

  • Buttons inside ephemeral posts are not clickable / functional on the mobile app.

  • On a server using a subpath, the URL opens a blank page if the system admin changes the Site URL in the System Console UI. The system admin should restart the server to fix it.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.10 - Feature Release 

Mattermost v5.10.0 contains medium to high level security fixes. Upgrading is highly recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

  • v5.10.2, released 2019-06-20

  • v5.10.1, released 2019-05-16

    • Fixed an issue on Internet Explorer (IE11) where the system console opened a blank page.

  • v5.10.0, released 2019-04-16

    • Original 5.10.0 release

Breaking changes since last release 

  • SupportedTimezonesPath setting in config.json and changes to timezones in the UI based on the timezones.json file was removed. This was made to support storing configurations in the database.

IMPORTANT: If you upgrade from a release earlier than 5.9, please read the other Important Upgrade Notes.

Highlights 

Interactive Ephemeral Messages 

  • Added support for message actions and buttons in ephemeral messages.

Configuration in Database 

  • Added experimental support for storing config.json in the database, improving the system console experience on read-only filesystems. Storing the configuration in the database is optional, as the existing config.json remains fully supported.

Improvements 

User Interface (UI) 

  • Added ability to use “c” and “sh” for code block syntax highlighting.

  • Words that trigger mentions now supports Chinese.

  • Added support for rendering emojis and hyperlinks in message attachment titles.

  • Added support for showing the channel name in the message box.

  • Added support for markdown in plugin system console help text fields.

  • Added ability to convert Excel cells to markdown table when pasting in Mattermost.

  • Added ability to render emojis in interactive message buttons.

Plugins (Beta) 

  • Created a plugin component to override file previews.

  • Added support for plugins to create link tooltips.

  • Added experimental support for plugins to use bot accounts.

Bulk Import/Export 

  • Added User Preference fields in bulk export.

  • Added ability to include direct and group message channels and their posts in bulk export.

  • Added ability to include deactivated users in bulk import.

Command Line Tools (CLI) 

  • Created CLI command command show to allow seeing detailed information of a slash command.

  • Created CLI command webhook show to allow seeing detailed information of a webhook.

  • Created CLI command team rename to allow renaming teams.

  • Created CLI command channel search to allow searching for channels.

Administration 

  • Improved default session timeout behavour, including changing the default SessionLengthWebInDays from 30 to 180 days.

  • Added full text search to the system console panel to easily find options in the configuration.

  • (Advanced Permissions) Split managing emoji permissions into “create”, “delete own” and “delete others”.

  • (Advanced Permissions) Added List_Public_Teams, Join_Public_Teams, List_Private_Teams and Join_Private_Teams permissions.

  • Added support for LDAP groups search.

  • Added a setting to the system console to change the minimum length of hashtags.

  • Added support for setting Reply-To header in outbound Mattermost emails.

  • Added support for invalidating all email invitations from the system console.

Bug Fixes 

  • Fixed an issue where enterprise features became immediately unavailable when the enterprise license expired with a 15 day grace period.

  • Fixed an issue where an at-mention for username that starts with “all” did not highlight their entire username.

  • Fixed an issue where the migrate_auth command did not work with valid license file.

  • Fixed an issue where post metadata was requested if link previews were disabled.

  • Fixed an issue where a channel did not get removed from the unreads section if the user navigated out of it via a permalink.

  • Fixed an issue where a link from Access Control Groups to Group Filter on AD/LDAP did not work for subpath Site URL.

  • Fixed an issue where expired channels appeared in “My Channels” section of channel switcher if using the Automatically Close Direct Messages setting.

  • Fixed an issue where the text box reverted to default size after a user returned from the Integrations page.

  • Fixed an issue where the profile popover wasn’t allowed to close itself when opened through an at-mention.

  • Fixed an issue where filtering by first name with Korean characters no longer worked for at-mentions.

  • Fixed an issue where the Remove MFA option was visible for all users when Enforce MFA was enabled.

Compatibility 

Deprecated Features 

  • Deprecated configurable timezones.json in favour of the existing hard-coded list built into the server.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under "ExperimentalSettings": in config.json:

    • Added "RestrictSystemAdmin": false, to optionally constrain even system admins from changing critical settings.

  • Under "ServiceSettings": in config.json:

    • Added "MinimumHashtagLength": 3, to add the ability to change the minimum length of hashtags.

RESTful API Changes 

  • Added GetUsers API method to add the ability to list users.

  • Added POST /bots to create a bot accounts.

  • Added PUT /bots/{bot_user_id} to partially update a bot by providing only the fields you want to update.

  • Added GET /bots/{bot_user_id} to get a bot specified by its bot id.

  • Added GET /bots to get a page of a list of bots.

  • Added POST /bots/{bot_user_id}/disable to disable a bot.

  • Added POST /bots/{bot_user_id}/enable to enable a bot.

  • Added POST /bots/{bot_user_id}/assign/{user_id} to assign a bot to the specified user.

Plugin API Changes 

  • Added the SearchPostsInTeam method to add the ability to search posts in a team.

  • Added GetTeamMembersForUser and GetChannelMembersForUser to add the ability to get team and channel members for a specific user.

  • Added GetBundleInfo() string method to add the ability to store assets elsewhere.

  • Added CreateBot(bot *model.Bot) (*model.Bot, *model.AppError) to create the given bot and corresponding user.

  • Added PatchBot(botUserId string, botPatch *model.BotPatch) (*model.Bot, *model.AppError) to apply the given patch to the bot and corresponding user.

  • Added GetBot(botUserId string, includeDeleted bool) (*model.Bot, *model.AppError) to return the given bot.

  • Added GetBots(options *model.BotGetOptions) ([]*model.Bot, *model.AppError) to return the requested page of bots.

  • Added UpdateBotActive(botUserId string, active bool) (*model.Bot, *model.AppError) to mark a bot as active or inactive, along with its corresponding user.

  • Added PermanentDeleteBot(botUserId string) *model.AppError to permanently delete a bot and its corresponding user.

Database Changes 

  • Granted the following permissions for the System Admin, in preparation for an upcoming bot accounts feature:

    • PERMISSION_CREATE_BOT

    • PERMISSION_READ_BOTS

    • PERMISSION_READ_OTHERS_BOTS

    • PERMISSION_MANAGE_BOTS

    • PERMISSION_MANAGE_OTHERS_BOTS

  • Bots table was added.

Known Issues 

  • Attachments menu on mobile view is partly cut off on the right-hand side.

  • Clicking on the attachment icon doesn’t bring up the dropdown menu on mobile browser.

  • Content for ephemeral messages is not displayed on mobile apps.

  • When login is done through SAML, text in Account Settings > General > Email is misaligned.

  • On a server using a subpath, the URL opens a blank page if the system admin changes the Site URL in the System Console UI. The system admin should restart the server to fix it.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

Release v5.9 - ESR 

Mattermost v5.9.0 contains low to medium level security fixes. Upgrading is highly recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Breaking Changes since last release 

  • If DisableLegacyMfa setting in config.json is set to true and multi-factor authentication is enabled, ensure your users have upgraded to mobile app version 1.17 or later. Otherwise, users who have MFA enabled may not be able to log in successfully. See Important Upgrade Notes for more details.

  • The public IP of the Mattermost application server is considered a reserved IP for additional security hardening in the context of untrusted external requests such as Open Graph metadata, webhooks or slash commands. See Important Upgrade Notes for more details.

IMPORTANT: If you upgrade from another release than 5.8, please read the Important Upgrade Notes.

Bug Fixes 

  • Fixed an issue where emoji reactions did not appear on posts right away.

  • Fixed an issue where the emoji Recently Used cleared entirely after logging out and back in.

  • Fixed an issue where emoji not included in our list of text-based emoji were not rendered as jumboemoji.

  • Fixed an issue where the default server/client locales got reverted to en on server startup.

  • Fixed an issue where email notification setting in the webapp was out of sync with the mobile apps.

  • Fixed an issue where a broken image displayed on login page if custom branding was enabled but no image had been uploaded.

  • Fixed an issue where at-channel, at-all, at-here followed by a period were not highlighted as mentions.

  • Fixed an issue where the Mattermost icon was pixelated in bookmark rendering on Google Chrome.

  • Fixed an issue where System Console > Users page had broken user interface on narrow screens.

  • Fixed an issue where at-channel notification showed incorrect number of timezones.

  • Fixed an issue where leading whitespace with emoji affected emoji size so that they didn’t render as jumboemoji.

  • Fixed an issue where the System Console graphs did not load smoothly.

  • Fixed an issue with inconsistent formatting in page header on System Console > Notifications > Mobile Push.

  • Fixed an issue where invite tokens with a 48-hour expiry expired after 24 hours.

  • Fixed an issue where a blank screen appeared when opening a group message channel from “More” modal using Enter key.

  • Fixed an issue where Zoom plugin caused link metadata code to print warnings in the System Console.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Enable Image Proxy setting is now false by default. See Important Upgrade Notes for more details.

  • Under "ServiceSettings" in config.json:

    • Added "DisableLegacyMFA": false, to keep the legacy checkMfa endpoint enabled to support mobile versions 1.16 and earlier. See Important Upgrade Notes for more details.

Known Issues 

  • On a server using a subpath, the URL opens a blank page if the system admin changes the Site URL in the System Console UI. The system admin should restart the server to fix it.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.8 - Feature Release 

Mattermost v5.8.0 contains low to high level security fixes. Upgrading is highly recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

  • v5.8.2, released 2019-04-24

  • v5.8.1, released 2019-03-16

    • Mattermost v5.8.1 contains a medium level security fix. Upgrading is highly recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

    • Turned image proxy off by default, unless a server already had it enabled (including new installs). Also, warnings about not getting embedded content for a post were downgraded or removed. See important upgrade notes for more details.

  • v5.8.0, released 2019-02-16

    • Original 5.8.0 release

Breaking Changes since last release 

  • The local image proxy has been added, and images displayed within the client are now affected by the AllowUntrustedInternalConnections setting. See documentation for more details if you have trouble loading images.

IMPORTANT: If you upgrade from another release than 5.7, please read the Important Upgrade Notes.

Highlights 

Added support for LDAP Group Sync 

  • Lets admins set default team and channel membership based on LDAP groups. See more details in the documentation.

Added multi-factor authentication support to Team Edition 

Enhanced image performance 

  • Improved performance for images by adding support for image proxy servers, which are now integrated into the server and switched on by default.

  • Note that this may cause problems loading images from within your local network due to security settings. See here for more information.

Improvements 

User Interface (UI) 

  • Improved sorting of emoji in the emoji autocomplete and emoji picker search results.

  • Added support for emoji picker for mobile web view.

Notifications 

  • Added a channel notification setting to disable at-channel mentions.

Administration 

  • Added the ability to search users by role in System Console > Users.

  • Added a CLI command to modify an outgoing webhook.

  • Added a CLI command to restore a team.

Performance 

  • Added network connectivity improvements where the server no longer allows clients to auto-retry posts and to cause posts to appear twice.

Slash Commands 

  • Added support for sending a message to a different channel than where the slash command was issued from.

  • Added an option to send a message beginning with a “/” from the right-hand side.

Plugins 

  • Added server support for updating a plugin instead of having to remove and install them as two separate actions.

Attachments 

  • Optimized file attachment memory usage where possible.

Bug Fixes 

  • Fixed an issue where “[user] is typing …” was not removed when a message was composed and sent very quickly.

  • Fixed an issue where an announcement banner displayed when the banner was enabled but the text field was blank.

  • Fixed an issue where a language was not set if selected in Account Settings.

  • Fixed an issue where removing rows from Send Email Invite modal didn’t remove them immediately.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under "ServiceSettings" in config.json:

    • Added "ExperimentalLdapGroupSync": false, to add support for experimental LDAP Group Sync feature.

  • Under "LdapSettings" in config.json:

    • Added "GroupFilter": "", "GroupDisplayNameAttribute": "" and "GroupIdAttribute": "", to add the ability to configure group display name and unique identifier.

  • Under "ImageProxySettings": in config.json:

    • Added "Enable": true,, "ImageProxyType": "local",, "RemoteImageProxyURL": "", and "RemoteImageProxyOptions": "", to allow integrating image proxy into the server and switching it on by default.

  • Under "ExperimentalSettings": in config.json:

    • Added "LinkMetadataTimeoutMilliseconds": 5000 and "DisablePostMetadata": false, to enable post metadata by default.

API Changes 

RESTful API v4 Changes 

  • Added SearchTeams to plugin API to add the ability to search teams.

  • Added GetTeamStats to plugin API to add the ability to get team statistics.

  • Added /api/v4/posts/ids/reactions API endpoint to get the bulk reactions for posts.

  • Added UpdateUserActive to plugin API to allow updating user’s status as active or inactive.

  • Add GetFile to plugin to add the ability to get files.

Known Issues 

  • On a server using a subpath, the URL opens a blank page if the system admin changes the Site URL in the System Console UI. The system admin should restart the server to fix it.

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.7 - Quality Release 

Mattermost v5.7.0 contains low to medium level security fixes. Upgrading is highly recommended. Details will be posted on our security updates page 30 days after release as per the Mattermost Responsible Disclosure Policy.

Bug Fixes 

  • Fixed an issue where push notification to clear unread messages badge from another client was not being forwarded. There are cases on the mobile app where the badge could still linger - see MM-13722 for more details.

  • Fixed a SQL syntax error when a non-existent channelId was attempted to be viewed.

  • Fixed an issue where OpenGraph and Post Metadata cache were purged on any config change with the image proxy enabled.

  • Added a check for percent value on file upload progress to prevent the app from crashing.

  • Fixed an issue where multi-line announcement banner text did not expand its background.

  • Fixed an issue where channel modal text and icons were misaligned if only one channel type was available.

  • Fixed an issue where every channel switch triggered a fetch for users in all Group Message channels for the user.

  • Fixed an issue where the user was not redirected to sign up page to create first account on fresh install.

  • Fixed an issue where scrollbar appeared in team sidebar when a user was a member of too many teams.

  • Fixed an issue where wide images posted by a webhook could be cut off on the right-hand side.

  • Fixed an issue where leaving a team showed a 403 error in the console.

  • Fixed an issue where Code Theme did not save unless other colours were changed.

  • Fixed an issue where Webapp only showed a star or mention count for active team.

  • Fixed an issue where Web mobile view was missing the mute option in the channel menu.

  • Fixed an issue where the “participant is typing” appeared a few seconds after a message was posted.

  • Fixed an issue where a profile popover got cut off on the right-hand side if it included an admin badge and a long username.

Known Issues 

  • Custom Terms of Service returns on refresh after clicking to agree.

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.6 - Feature Release 

  • v5.6.5, released 2019-02-16

  • v5.6.4, released 2019-02-01

  • v5.6.3, released 2019-01-16

  • v5.6.2, released 2018-12-22

    • Fixed JIRA plugin not sending messages back to Mattermost channels.

  • v5.6.1, released 2018-12-20

    • Fixed an issue where a user is not redirected to the account creation page on a fresh Mattermost server install.

    • Fixed an issue where file uploads crashed the webapp for some users.

    • Fixed slow channel switching load times, where every channel switch fetched users from all group message channels.

    • Fixed JIRA plugin not working due to a rename of the JIRA plugin directory structure.

  • v5.6.0, released 2018-12-16

    • Original 5.6.0 release

Breaking Changes since the last release 

  • Replaced WebRTC prototype with other video and audio calling solutions. Learn more here.

  • Removed support for IE11 Mobile View due to low usage and instability in order to invest that effort in maintaining a high quality experience on other more used browsers. End users on IE11 will thus have an increased minimum screen size.

  • If EnablePublicChannelsMaterialization setting in config.json is set to false, an offline migration prior to upgrade may be required to synchronize the materialized table for public channels to increase channel search performance in the channel switcher (CTRL/CMD+K), channel autocomplete (~) and elsewhere in the UI. See Important Upgrade Notes for more details.

IMPORTANT: If you upgrade from another release than 5.5, please read the Important Upgrade Notes.

Highlights 

Interactive Dialogs 

  • Added support for interactive dialogs to more easily collect structured information from users to perform an action or submit a request via an integration. Learn more here

Languages 

  • Added support for Ukrainian language, bringing the number of supported languages to 16.

  • Romanian language promoted out of beta.

Command Line Interface (CLI) 

  • Added new CLI commands to improve admin productivity, including:

    • command create to create a custom slash command for a specified team.

    • command delete to delete a slash command.

    • command move to move a slash command to a different team.

    • command list to list all commands on specified teams or all teams by default.

    • config get to retrieve the value of a config setting by its name in dot notation.

    • config set to set the value of a config setting by its name in dot notation.

    • config show to print the current Mattermost configuration in an easy to read format.

    • team archive to archive teams based on name.

    • team search to search for teams based on name.

    • webhook create-incoming to create incoming webhook within specific channel.

    • webhook create-outgoing to create outgoing webhook within specific channel.

    • webhook delete to delete a webhook.

    • webhook list to list all webhooks for a team or across the server.

    • webhook modify-incoming to modify existing incoming webhook by changing its title, description, channel or icon url.

Improvements 

User Interface 

  • Added ability to remove profile pictures in Account Settings.

  • Added a new loading bar that shows progress on file uploads.

  • Added a new badge to the profile popover that indicates if a user is a System Admin.

  • Added new channel sidebar reorganization options for the ExperimentalGroupUnreadChannels config.json setting, such as the ability to sort channels by recent messages.

  • Added an option to be able to clear search results.

Notifications 

  • Enabled push notifications by default on new Mattermost installs, via an encrypted TPNS (test push notification service).

  • Added a channel notification setting to disable @-channel @-here @-all notifications in specific channels.

Performance 

  • Increased performance for returning user autocomplete results.

Plugins 

  • Added a “min_server_version” field to plugin.json manifest, which enables built-in control for preventing loading plugins that are not compatible with the Mattermost server version.

  • Added ability for plugins to add channel header tooltips.

  • Stopped hashing plugin keys on write to more effectively enumerate the keys stored by a plugin.

  • Removed support for automatically unmarshalling a plugin’s server configuration.

Bulk Import/Export 

  • Added custom emoji and emoji reactions to bulk export tool.

  • Added favorite channels to bulk export tool.

  • Added user and channel notification preferences to bulk export tool.

  • Added the ability to specify an email batching interval for bulk import.

Slash Commands 

  • Added support for multiple responses from a slash command.

  • Added an option to send a message when an invalid slash command is entered.

Administration 

  • Added mobile support for Custom Terms of Service (Beta)

  • Removed System Console > Plugins (Beta) > Configuration page and moved enabling plugins setting to the Plugins (Beta) > Management page.

  • Introduced mlog/human package to consume and reformat structured logging with a human readable output.

Enterprise Edition (E20) 

  • Data Retention promoted out of beta.

Bug Fixes 

  • Fixed an issue where pinned post list refreshed when a user posted a new message.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under "ServiceSettings" in config.json:

    • Added "TLSMinVer": "1.2", "TLSStrictTransport": false, "TLSStrictTransportMaxAge": 63072000 and "TLSOverwriteCiphers": [], to configure TLS connection when not using a reverse proxy such as NGINX.

  • Under "ExperimentalSettings" in config.json:

    • Added "EnablePostMetadata": false, to disable post metadata from being loaded.

API Changes 

RESTful API v4 Changes 

  • Added GET /channels/{channel_id}/timezones to get a list of timezones for the users who are in the specified channel.

  • Added page and per_page properties to POST /teams/{team_id}/posts/search call for Elasticsearch paging.

  • Added DELETE /users/{user_id}/image to remove a user’s profile picture.

  • Added DELETE /brand/image to remove a custom branding image.

  • Added POST /actions/dialogs/open and POST /actions/dialogs/submit to open and submit requests via interactive dialogs.

Plugin API Changes 

  • Changed GetTeamMembers(teamId string, offset, limit int) to GetTeamMembers(teamId string, page, perPage int) to be clearer and consistent with other APIs

  • Changed GetPublicChannelsForTeam(teamId string, offset, limit int) to GetPublicChannelsForTeam(teamId string, page, perPage int) to be clearer and more consistent with other APIs

  • Added the following plugin API methods. For more information on each method, see the server plugin reference.

    • GetChannelsForTeamForUser

    • GetChannelMembers

    • GetChannelMembersByIds

    • GetChannelStats

    • GetEmoji

    • GetEmojiByName

    • GetEmojiImage

    • GetEmojiList

    • GetPluginConfig

    • SavePluginConfig

    • GetPostsAfter

    • GetPostsBefore

    • GetPostsSince

    • GetPostsForChannel

    • GetPostThread

    • GetProfileImage

    • SetProfileImage

    • GetTeamsForUser

    • GetTeamsUnreadForUser

    • GetTeamIcon

    • SetTeamIcon

    • RemoveTeamIcon

    • GetUsersByUsernames

    • GetUsersInChannel

    • GetUsersInChannelByStatus

    • GetUsersInTeam

    • CreateDirectChannel

    • SearchChannels

    • SearchUsers

    • GetFileLink

    • UploadFile

    • SetProfileImage

    • KVSetWithExpiry

    • KVDeleteAll

    • KVList

Database Changes 

  • Added ExpireAt column to the PluginKeyValueStore table.

  • Migrated user’s accepted terms of service data into a new table called UserTermsOfService.

  • Removed idx_users_email_lower, idx_users_username_lower, idx_users_nickname_lower, idx_users_firstname_lower and idx_users_lastname_lower indexes.

Known Issues 

  • Login does not work when Custom Terms of Service is enabled and MFA is enforced.

  • Custom Terms of Service returns on refresh after clicking to agree.

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.5 - Quality Release 

  • v5.5.3, released 2019-02-01

  • v5.5.2, released 2019-01-16

  • v5.5.1, released 2018-12-06

    • Fixed a bug preventing Elasticsearch v6.0+ from working in Mattermost server versions 5.4 and 5.5.

  • v5.5.0, released 2018-11-16

    • Original 5.5.0 release

Bug Fixes 

  • Fixed an issue where clicking the two arrows to expand/collapse an image didn’t work after posting an image.

  • Fixed an issue where switching authentication methods from email/password to SAML (OKTA and OneLogin) showed session expiry message instead of a success message.

  • Fixed an issue where message drafts occasionally posted to the channel even though user did not take any action to post it.

  • Fixed an issue with Autoresponder feature where the reply message did not get inserted consistently.

  • Fixed an issue where bolded channel names rendered over top of unbolded channel names in desktop.

  • Fixed an issue where config.ServiceSettings.SiteURL could contain a trailing slash.

  • Fixed a caching issue with archiving/unarchiving channels through API.

  • Fixed UX issues when trying to edit pending posts from reply thread.

  • Fixed an issue where “Enable Post Formatting” did not actually require page refresh.

  • Fixed an issue where User AuthService Export value of “” could be incompatible for importer.

  • Fixed an issue where search results that did not match case were not highlighted when returning hashtags in search results.

  • Fixed issues with indentation on the right-hand side in desktop app compact view.

  • Fixed an issue where the post header for bot messages was cutting off username before using available horizontal space.

  • Fixed an issue where “undefined” was briefly shown on refresh with combined system messages.

  • Fixed an issue where profile popover was cut-off at right-hand side root post.

  • Fixed UX issues for some plugins that displayed a blank page when clicking on the “Settings” link from “Management” page in System Console.

  • Fixed an issue where uploading a plugin resulted in a JS error and a blank page.

  • Fixed an issue where some team icons did not fill bounding box on MacOS.

  • Fixed an issue where there was no hover effect on emoji reactions.

  • Fixed an issue where a permanent announcement banner pushed the bottom of a channel sidebar off screen.

  • Fixed an issue where cancelling a change to channel notifications settings appeared to save the change.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.4 - Feature Release 

Release date: 2018-10-16

Breaking Changes since the last release 

  • Mattermost mobile app version 1.13+ is required. File uploads will fail on earlier mobile app versions.

  • In certain upgrade scenarios the new Allow Team Administrators to edit others posts setting under General then Users and Teams may be set to True while the Mattermost default in 5.1 and earlier and with new 5.4+ installations is False.

IMPORTANT: If you upgrade from another release than 5.3, please read the Important Upgrade Notes.

Highlights 

Basic Export Tool 

  • Created a basic exporter tool to extract objects from Mattermost for allowing to merge two servers.

Improvements 

Web User Interface (UI) 

  • Added a draft indicator in the channel sidebar and channel switcher for channels with unsent messages.

  • Added support for jumboemojis.

  • Added support for searching in direct message and group message channels using the “in:” modifier.

  • Last viewed channel on logout is restored on next session.

  • Added support for consecutive messages in the right-hand side.

  • Added tooltips to post info overlay buttons.

  • Added a feature to post a code block on CTRL + ENTER.

  • Expanded post text box area when composing long posts.

  • Updated the pinned post list when it’s open and the channel is switched so that the pinned post list updates to show the other channel’s pinned posts.

  • Download of common file types is not forced when viewing a public link.

Command Line Interface (CLI) 

  • Added a new Command Line Interface for removing all users from a channel.

Performance 

  • Improved channel switcher performance.

Integrations 

  • Added interactive menus to message attachments.

  • Added a autotranslation plugin.

  • Added a button to copy the information from webhooks/slash commands such as the url and token.

  • Added “Commented on…” text for files and message attachment type posts.

  • Updated incoming and outgoing webhook description to 500 characters.

  • Added hook ID to webhook requests in server logs.

  • Plugins without a server or webapp component now fail to be activated.

Notifications 

  • Desktop notifications now follow teammate name display setting.

  • Added a mute/unmute option to channel dropdown menu.

  • Added a mute icon to mobile view.

  • Added support for notifying users when desktop/browser sessions expire.

Autocomplete and Focus 

  • With “Send messages on CTRL+ENTER = ON”, channel and user autocomplete now work.

  • Cursor is now autofocused on edit box before the modal fully loads.

  • Channel autocomplete closes after two consecutive tildes used for strikethrough formatting.

  • If a user begins typing and the cursor is not in an input box, the cursor is automatically put into the center channel text input box.

Administration 

  • Moved hiding join/leave messages to Team Edition.

  • Added edit_others_posts as a permission setting for Team Edition.

  • Added account setting option to hide channel switcher button in the sidebar.

Compliance 

  • Added changes for E20 custom service terms.

  • Team membership can be restricted based on email domains.

Bug Fixes 

  • Fixed an issue where logging in with LDAP account with MFA enabled resulted in “Error trying to authenticate MFA token” error when “Enable sign-in with username” was set to false.

  • Fixed an issue where log-in page flashed briefly during process of verifying an updated email address.

  • Fixed an issue where “”GET /api/v4/redirect_location” responses got stuck when “EnableLinkPreviews” was set to “false”.

  • Fixed an issue where Account Settings teammate name display setting changed when System Console teammate name display setting was changed.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Enterprise Edition: 

  • Under “SqlSettings”: in config.json:

    • Added "EnablePublicChannelsMaterialization": true, to increase channel search performance in the channel switcher (CTRL/CMD+K), channel autocomplete (~) and elsewhere in the UI.

API Changes 

Plugin API Changes 

  • Added slash commands with GET crush query parameters on configured endpoint URL to avoid parameters specified by both the user and Mattermost from being duplicated.

  • Added a GetServerVersion() string method to the plugin API to return the current server version.

Database Changes 

  • Description column was added to the OutgoingWebhooks table.

  • Description column was added to the IncomingWebhooks table.

  • AcceptedServiceTermsId column was added to the Users table.

  • PublicChannels table was added.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.3 - Feature Release 

Mattermost v5.3.0 contains a high level security fix. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

  • v5.3.1, released 2018-09-19

    • Fixed an issue where HTML elements such as links did not display correctly for non-English languages.

  • v5.3.0, released 2018-09-16

    • Original 5.3.0 release

Breaking Changes since the last release 

  • Those servers with Elasticsearch enabled will notice that hashtag search is case-sensitive.

IMPORTANT: If you upgrade from another release than 5.2, please read the Important Upgrade Notes.

Highlights 

Search Date Filters 

  • Search for messages before, on, or after a specified date.

IdAttribute Setting for SAML 

  • Added a new IdAttribute setting for SAML, which allows SAML users to change their email address without losing their account.

Improvements 

Web User Interface (UI) 

  • Added ability to set username and profile picture in Outgoing Webhooks setup page.

  • Added “Deactivate Account” option under Account Settings > Advanced.

  • Added member count for the More Direct Messages list.

  • Expanded shortened (e.g. bitly) links for previewable content such as images and YouTube links.

Performance 

  • Improved channel switcher performance by adding a short delay after the last character has been typed before querying the server for new autocomplete results.

Integrations 

  • Added support for interactive message buttons to, for instance, delete or edit the post after clicking on a message button.

Administration 

  • Created a telemetry event for when telemetry is turned off from the System Console.

  • Added support for attachments in Direct Message channels to the bulk import tool.

Bug Fixes 

  • Fixed an issue where closing an archived channel did not redirect users to the last viewed channel.

  • Fixed an issue where users were able to react to existing emojis in an archived channel.

  • Fixed an issue where clicking “+” twice to add a public or private channel added a recently archived channel back to the left-hand side.

  • Fixed an issue where channel autocomplete appeared to include all public channels, including deleted channels and channels one has never joined.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Enterprise Edition: 

  • Under “SamlSettings”: in config.json:

    • Added "EnableSyncWithLdapIncludeAuth": false, to override the SAML ID attribute with the AD/LDAP ID attribute if configured, or override the SAML Email attribute with the AD/LDAP Email attribute if SAML ID attribute is not present. See documentation to learn more.

    • Added "IdAttribute": "", to set the attribute in the SAML Assertion that will be used to bind users from SAML to users in Mattermost.

API Changes 

Plugin API Changes (Release Candidate) 

  • Added postId as a property for PostDropDownMenuComponent and as a parameter for the PostDropDownMenuAction function to improve the ability to add options to the post “…” action menu.

  • Added FileInfo and file []byte to retrieve File Info for a specific fileId and to ensure the file is read for a specific path.

  • Added GetLDAPUserAttributes, which matches the functionality of the ldapextras built-in plugin that was removed in Mattermst v5.2.

Known Issues 

  • When “Enable sign-in with username” is set to false, logging in with LDAP account with MFA enabled results in “Error trying to authenticate MFA token” error.

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.2 - Feature Release 

  • v5.2.2, released 2018-09-16

  • v5.2.1, released 2018-08-23

    • Disabled the ability to search archived channels by default, given multiple issues were raised after v5.2.0 was released. The feature can be enabled in v5.2.1 via ExperimentalViewArchivedChannels setting.

  • v5.2.0, released 2018-08-16

    • Original 5.2.0 release

Security Update 

Breaking Changes since the last release 

  • Those servers upgrading from v4.1 - v4.4 directly to v5.2 or later and have JIRA enabled will need to re-enable the JIRA plugin after an upgrade.

IMPORTANT: If you upgrade from another release than 5.1, please read the Important Upgrade Notes.

Highlights 

Embed Mattermost in Other Apps (Beta) 

  • Added support for extensions, which allow you to embed Mattermost in other apps and websites via OAuth 2.0.

  • A sample extension for Chrome is here.

Plugins 

  • Added support to add/delete and enable/disable plugins via the CLI.

  • See our demo plugin that demonstrates the capabilities of a Mattermost plugin. For a starting point to write a Mattermost plugin, see our sample plugin.

  • Breaking changes to the plugins framework introduced. To migrate your existing plugins to be compatible with Mattermost 5.2 and later, see our migration guide.

Searching Archived Channels 

  • Added ability to search for archived channel content on desktop and mobile clients.

Romanian Language 

  • Added support for Romanian language.

Improvements 

Web User Interface (UI) 

  • Added experimental custom default channels.

  • Added link to profile pop-over from names in Join/Leave messages.

  • Added support for webhook message attachments to trigger mentions.

  • Stripped markdown formatting characters from desktop notifications and “Commented on…” text.

  • Added ability to bulk import emoji.

  • Added support for file attachments in bulk import.

Plugins (All Beta) 

  • New antivirus plugin to scan for viruses before uploading a file to Mattermost. Supports ClamAV anti-virus software across browser, Desktop Apps and the Mobile Apps.

  • New GitHub plugin to subscribe to notifications, and to keep track of unread GitHub messages and open pull requests requiring your attention.

  • Zoom plugin now has one option to start a meeting rather than three separate ones to simplify the user experience.

Server Plugins: Release Candidate 

  • A release candidate (RC) is released for server plugins. Stable release is expected in v5.3 or v5.4.

  • Added various API methods for plugins to provide the same capabilities as the REST API.

  • Added support to intercept file uploads before the file is uploaded to a Mattermost server.

  • Added support for plugins to respond after a user joins/leaves a channel or a team, or creates a new channel.

  • Added support for plugins to respond prior to or after a user logs in to a Mattermost server.

  • Added support for plugins to update user status. Sample use case is setting a user’s status to Do Not Disturb based on Google Calendar events.

  • Added CSRF tokens that are attached to users sessions. The tokens can be enforced as an alternative to XHR checks in the plugin request system.

  • Added session token to context for ServeHTTP hook.

Webapp Plugins: Beta 

  • Upcoming Mattermost UI redesign may cause breaking changes to webapp plugins. Hence, webapp plugins remain as beta in v5.2.

  • Added support to override […] post menu, and paperclip icon for file uploads.

  • Added support for multiple plugins to add components at the same integration points instead of only allowing one plugin to do so.

  • Removed ability to fully override profile popover. Instead, multiple plugins can now add to the profile popover via multiple integration points.

  • For an up-to-date list of pluggable UI components, see this list in our demo plugin.

Administration 

  • In the compliance export status table, in System Console > Compliance > Compliance Export, added a number of exported records to Details column.

  • Added support for cross-origin resource sharing.

Command Line Interface (CLI) 

  • Enhanced log output from Permanent Delete CLI command to delete FileInfos for a user’s posts.

  • Addded channel renaming to CLI.

Enterprise Edition 

  • Added the Global Relay Export CLI command.

  • Added support to search plugin contents.

Bug Fixes 

  • Fixed an issue where the “Switch Channel” shortcut (⌘K) didn’t work on dvorak layout on Mac.

  • Fixed an issue where the Custom Integrations section in the System Console was blank after role changes.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under “ServiceSettings”: in config.json:

    • Added "CorsExposedHeaders": "", to add a whitelist of headers that will be accessible to the requester.

    • Added "CorsAllowCredentials": false, to allow requests that pass validation to include the Access-Control-Allow-Credentials header.

    • Added "CorsDebug": false, to print messages to the logs to help when developing an integration that uses CORS.

  • Under “TeamSettings” in config.json:

    • Added "ViewArchivedChannels": true, to allow users to share permalinks and search for content of channels that have been archived.

    • Added "ExperimentalDefaultChannels": "", to allow choosing the default channels every user is added to automatically after joining a new team.

API Changes 

RESTful API v4 Changes 

  • deleteReaction API was added to send the correct value for post.HasReactions.

  • Support for add/delete and enable/disable plugins via CLI was added.

  • File download API was improved to stream files instead of loading them entirely into memory.

Websocket Changes 

  • Support for add/delete and enable/disable plugins via CLI was added.

Database Changes 

  • Two new columns were added in the OutgoingWebhooks table, “Username” and “IconURL”.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.1 - Feature Release 

Security Update 

Breaking Changes since the last release 

  • mattermost export CLI command is renamed to mattermost export schedule. Make sure to update your scripts if you use this command.

IMPORTANT: If you upgrade from another release than 5.0, please read the Important Upgrade Notes.

Highlights 

Gfycat integration 

  • Added easy access to sharing GIFs without leaving the Mattermost interface. System Admins can enable this feature in System Console > Customization > GIF.

Auto-linking plugin (Beta) 

  • Messages can now be formatted into Markdown links automatically before they are saved to the Mattermost database. See autolink plugin repository to learn more.

Support Mattermost on a subpath 

  • Added support for hosting Mattermost at any route (e.g., https://www.example.com/mattermost) with newly added subpath support.

CSV Compliance Export (Enterprise Edition E20) 

  • Extended compliance export feature with CSV format. See documentation to learn more.

Improvements 

Web User Interface 

  • Added highlighting for Elasticsearch results.

  • Renamed “Delete Channel” to “Archive Channel”. Channels can be unarchived from the commandline.

  • Added Channel Purpose as a searchable field in the “More Channels” menu.

Administration 

  • Added the ability to reset user emails in System Console > Users.

  • Server restart is no longer required to run the job server for the first time.

Command Line Interface (CLI) 

  • Made the permissions reset CLI command able to reset all custom-role related data.

  • When permanent delete user CLI command is used, all files uploaded by the user are now deleted as well.

  • export CLI command was updated to support scheduling exports via export schedule, and to export files in Actiance XML and CSV formats.

  • Running the CLI outside of the bin directory is now less error prone.

Enterprise Edition E20 

  • Added experimental support for certificate-based authentication (CBA) to identify a user or a device before granting access to Mattermost. See documentation to learn more.

Bug Fixes 

  • Fixed an issue where users could not reply to push notifications on iOS.

  • Fixed an issue with an incorrect system message after converting a public channel to private.

  • Fixed an issue with being unable to add emoji reactions after expanding the message details sidebar.

  • Fixed an issue where rate limiting settings could not be edited in the System Console, and weren’t displayed in the User Interface if configured via config.json.

  • Fixed an issue where deleted users shown as “Someone” in the Favorite Channels section could not be removed.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under “ExperimentalSettings:” in config.json:

    • Added "ClientSideCertEnable": false,, to enable client-side certification for your Mattermost server.

    • Added "ClientSideCertCheck": "secondary", to control whether email and password are required following client-side certification.

  • Under “ServiceSettings:” in config.json:

    • Added "ExperimentalLimitClientConfig": false, to limit the number of config settings sent to users prior to login. Supported on mobile apps v1.10 and later.

    • Added "EnableGifPicker": false,, "GfycatApiKey": 2_KtH_W5, and "GfycatApiSecret": 3wLVZPiswc3DnaiaFoLkDvB4X0IV6CpMkj4tf2inJRsBY6-FnkT08zGmppWFgeof, to enable a built-in GIF integration with Gfycat.

    • Added "EnableEmailInvitations": false, to disable email invitations on the system.

  • Under “SqlSettings:” in config.json:

    • Added "ConnMaxLifetimeMilliseconds": 3600000,, to configure the maximum lifetime for a connection to the database.

API Changes 

RESTful API v4 Changes 

  • A new matches field was added to POST teams/{team_id}/posts/search to return a list of matched terms within the post. This field will only be populated on servers running version v5.1 or greater with Elasticsearch enabled.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v5.0 - Feature Release 

  • v5.0.3, released 2018-08-07

  • v5.0.2, released 2018-07-16

  • v5.0.1, released 2018-07-09

    • Fixed an issue where large Global Relay exports could cause export jobs to fail completely.

  • v5.0.0, released 2018-06-16

    • Original 5.0.0 release

Breaking Changes since the last release 

  • All API v3 endpoints have been removed. See documentation to learn more about how to migrate your integrations to API v4. Ticket #8708.

  • platform binary has been renamed to mattermost for a clearer install and upgrade experience. You should point your systemd service file at the new mattermost binary. All command line tools, including the bulk loading tool and developer tools, have also been renamed from platform to mattermost. Ticket #9985.

  • A Mattermost user setting to configure desktop notification duration in Account Settings > Notifications > Desktop Notifications has been removed.

  • Slash commands configured to receive a GET request now have the payload encoded in the query string instead of receiving it in the body of the request, consistent with standard HTTP requests. Although unlikely, this could break custom slash commands that use GET requests incorrectly. Ticket #10201.

  • A new config.json setting to whitelist types of protocols for auto-linking has been added. Ticket #9547.

  • A new config.json setting to disable the permanent APIv4 delete team parameter has been added. The setting is off by default for all new and existing installs, except those deployed on GitLab Omnibus. A System Administrator can enable the API v4 endpoint from the config.json file. Ticket #9916.

  • An unused ExtraUpdateAt field has been removed from the channel model. Ticket #9739.

IMPORTANT: If you upgrade from another release than 4.10, please read the Important Upgrade Notes.

Highlights 

Plugin Intercept 

  • Adds support for plugins to intercept posts prior to saving them into the database.

  • Supports use cases such as auto-detecting and censoring restricted words, and auto-linking phrases. Read our forum post to learn more.

Permissions Schemes 

  • System Scheme now sets the default permissions inherited system-wide by System Admins, Team Admins, Channel Admins and everyone else.

  • Added new Team Schemes to override the default permissions in specific teams for Team Admins, Channel Admins and all other team members.

Increased Character Limit on Posts 

  • Increased character limit to 16,383 on new deployments to allow posting long messages and to allow better Markdown formatting, including tables.

  • For existing deployments, read how to migrate your system to support the increased character limit.

Combined Join/Leave Messages 

  • System messages related to joining, leaving, adding and removing people from channels and teams are combined into a single message to save space in channels.

Improvements 

Web User Interface 

  • Added a feature to collapse image upload using a collapse icon or using the /collapse command.

  • Added a whitelist for valid types of links when autolinking.

  • Updated the styling of default team icons.

Performance 

  • Fixed update_status cluster event being sent thousands of times on restart of app servers.

Integrations 

  • Slash commands configured to receive a GET request now have the payload encoded in the query string instead of receiving it in the body of the request.

  • Added ability for webhooks to actually be locked to a channel.

Notifications 

  • Updated email notification subject line and contents for Group Messages.

  • Updated the styling of push notifications.

System Console 

  • Added a System Console setting to disable the preview mode banner when email notifications are disabled.

Administration 

  • Added Password Requirements and Customer Branding to Team Edition.

  • Moved Themes per team to Team Edition.

Enterprise Edition 

  • Added LoginIdAttribute to allow LDAP users to change their login ID without losing their account.

Bug Fixes 

  • Fixed an issue where EnableUserCreation was set to false when not included in config.json.

  • Fixed an issue where a public channel made private did not disappear automatically from clients not part of the channel.

  • Fixed an issue where team icon did not get automatically saved when removed.

  • Fixed an issue where Town Square channel disappeared from channel list for a non-admin users when “ExperimentalTownSquareIsReadOnly” config.json was set to true in config.json.

Compatibility 

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under "ServiceSettings": in config.json:

    • Added "EnableAPITeamDeletion": false, to disable the permanent APIv4 delete team parameter.

    • Added "ExperimentalEnableHardenedMode": false to enable a hardened mode for Mattermost that makes user experience trade-offs in the interest of security.

  • Under "EmailSettings": in config.json:

    • Added "EnablePreviewModeBanner": true, to allow Preview Mode banner to be displayed so users are aware that email notifications are disabled.

  • Under "ClusterSettings": in config.json:

    • Added "MaxIdleConns": 100, to add the maximum number of idle connections held open from one server to all others in the cluster.

    • Added "MaxIdleConnsPerHost": 128, to add the maximum number of idle connections held open from one server to another server in the cluster.

    • Added "IdleConnTimeoutMilliseconds": 90000 to add the number of milliseconds to leave an idle connection open between servers in the cluster.

  • Under "TeamSettings": in config.json:

    • Added "ExperimentalHideTownSquareinLHS": false, to hide Town Square in the left-hand sidebar if there are no unread messages in the channel.

  • Under "DisplaySettings": in config.json:

    • Added "CustomUrlSchemes": [],, to add a list of URL schemes that are used for autolinking in message text.

  • Under "LdapSettings": in config.json:

    • Added "LoginIdAttribute": "", to add an attribute in the AD/LDAP server used to log in to Mattermost.

API Changes 

  • All APIv3 endpoints were removed.

  • Improved file upload API to stream files instead of loading them entirely into memory.

  • SAML login endpoints were moved out of API package.

  • context.go was moved out of Api4 and into web.

  • api4/handlers.go was created to create the API handlers using the Context and Handler from web.

  • web/handlers.go was added to define the Handler struct, the base ServeHTTP function and a single web handler.

WebSocket Changes 

  • Ping/pong and reconnection handling were added to Go WebSocket client.

  • Support was added for WebSocket custom dialer.

  • channel_converted WebSocket event was added, which is published team-wide whenever a channel is converted from public to private.

Known Issues 

  • Image proxy cannot be saved in the System Console UI. Configure the settings in your config.json file instead.

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v4.10 - ESR 

Highlights 

Convert Public Channels to Private 

  • Team and System Admins can now convert a channel to private from the user interface. System Admins can also convert channels back to public via the commandline.

Performance Improvements 

  • Decreased loading time by up to 90% for users with lots of direct and group message channels.

Environment Variables Support in GitLab Omnibus 

  • Simplified Mattermost administration by supporting environment variables in GitLab Omnibus. See documentation to learn more.

Improvements 

Web User Interface 

  • Removed support for transparent team icons to support any sidebar theme colors and added the ability to remove team icons.

  • Added an experimental setting that users can use to set a custom message that will be automatically sent in response to Direct Messages.

  • Added a loading animation for “Add Members” channel invite modal.

  • Made SHIFT+UP switch keyboard focus to right-hand side if it’s already open to the current thread.

  • Removed an unnecessary WebRTC end user setting to avoid user errors and confusion.

  • Added an on-hover effect for image link previews.

Plugins 

  • Added better plugin error handling and reporting.

Slash Commands 

  • Added /invite slash command to invite users to a channel.

  • Improved slash command error message when payload has invalid JSON.

Administration 

  • Added structured logging to more easily review server logs.

  • Users’ client no longer refreshes after changing a System Console or config.json setting.

Command Line Interface (CLI) 

  • Added /platform team list command to list all teams on the server..

Enterprise Edition E20 

  • Added cluster event types to Performance Monitoring.

Bug Fixes 

  • Fixed an issue where focus with CTRL/CMD+SHIFT+L was always set to the right-hand side when reply thread was open.

  • Fixed an issue where a user added to a channel wasn’t immediately removed from other users’ “Add Members” dialog.

  • Fixed an issue where ‘Copy Link’ context menu option was partially hidden when right-clicking a team in team sidebar.

  • Fixed an issue where a user could not log in to Mattermost when their login id (“authdata”) failed to migrate properly during migration from LDAP to SAML.

  • Fixed an issue where plugin configuration was not saved in the System Console.

  • Removed duplicate indexes accidentally created on the Channels, Emoji and OAuthAccessData tables.

Compatibility 

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under "TeamSettings" in config.json:

    • Added "ExperimentalEnableAutomaticReplies": false, to allow users to set a custom message that will be automatically sent in response to Direct Messages.

  • Under "LogSettings" in config.json:

    • Removed FileFormat and added "FileJson": true, and "ConsoleJson": true, to allow logged events to be written as a machine readable JSON format instead of the be printed as plain text.

API Changes 

RESTful API v4 Changes 

  • Support was added to RESTful API for sending ephemeral messages to users.

  • An APIv4 endpoint of POST /channels/{channel_id}/convert was added to convert a channel from public to private and to restrict this setting to team_admin.

  • An APIv4 endpoint of DELETE /teams/{team_id}/image was added to remove team icon and restrict it to team_admin.

Database Changes 

Users Table:

  • Migrates SAML AuthData to lowercase via "UPDATE Users SET AuthData=LOWER(AuthData) WHERE AuthService = 'saml'" query.

Channels Table:

  • Removed duplicate Name_2 index.

Emoji Table:

  • Removed duplicate Name_2 index.

OAuthAccessData Table:

  • Removed duplicate ClientId_2 index.

Upcoming Deprecated Features in Mattermost v5.0 

The following deprecations are planned for the Mattermost v5.0 release, which is scheduled for summer/2018. This list is subject to change prior to the release.

  1. All API v3 endpoints will be removed. See documentation to learn more about how to migrate your integrations to API v4. Ticket #8708.

  2. platform binary will be renamed to mattermost for a clearer install and upgrade experience. All command line tools, including the bulk loading tool and developer tools, will also be renamed from platform to mattermost. Ticket #9985.

  3. A Mattermost user setting to configure desktop notification duration in Account Settings > Notifications > Desktop Notifications will be removed.

  4. Slash commands configured to receive a GET request will have the payload being encoded in the query string instead of receiving it in the body of the request, consistent with standard HTTP requests. Although unlikely, this could break custom slash commands that use GET requests incorrectly. Ticket #10201.

  5. A new config.json setting to whitelist types of protocols for auto-linking will be added. Ticket #9547.

  6. A new config.json setting to disable the permanent APIv4 delete team parameter will be added. The setting will be off by default for all new and existing installs, except those deployed on GitLab Omnibus. A System Administrator can enable the API v4 endpoint from the config.json file. Ticket #9916.

  7. An unused ExtraUpdateAt field will be removed from the channel model. Ticket #9739.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Numbered lists can sometimes extend beyond the normal post area.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v4.9 - Feature Release 

  • v4.9.4, released 2018-06-04

  • v4.9.3, released 2018-05-15

    • Fixed an issue where plugin configuration got corrupted upon saving the configuration via the System Console.

  • v4.9.2, released 2018-05-04

    • Fixed an issue with permissions migration when AllowEditPost was set to “Always”.

  • v4.9.1, released 2018-04-27

    • Fixed an issue where System Console permissions settings displayed a false error when running High Availability mode.

    • Fixed a race condition on loading roles in the System Console.

    • Reverted a change causing significant performance degradation when loading posts.

    • Fixed a performance issue causing significant initial load time for the Desktop application.

  • v4.9.0, released 2018-04-16

    • Original 4.9.0 release

Highlights 

Channel Mute 

  • Added a /mute command, meaning that when a channel is muted, desktop, push and email notifications are not sent for the channel.

  • Channel Mute is also accessible via Channel Notification Preferences.

  • A muted channel gets sorted at the bottom of the left-hand sidebar section.

Teammate Name Display Setting 

  • Added the setting for rendering of at-mentions by the teammate name display back to the Account Settings.

Team Icons 

  • Added support for team icons in the team sidebar.

Global Relay (Beta) (Enterprise Edition E20 Add-On) 

  • Added export support for Global Relay as a compliance solution. Learn more here.

Improvements 

Web User Interface 

  • Users can now set their timezone in Account Settings > Timezone.

  • Cursor now returns to the reply thread input box after deleting a reply on the right-hand sidebar.

Performance 

  • Decreased channel load time by optimizing database queries used to fetch threads and parent posts in a channel.

  • Decreased load time of large channels with 5,000+ messages by up to 90% by optimizing many client functions related to rendering posts and threads.

  • Changing properties other than Site URL in /general/logging section will now require a server restart before taking effect.

Plugins (Beta) 

  • Plugins now have more flexibility to format text, emojis and Markdown.

  • Added support for plugins to add actions to the sidebar dropdowns.

Administration 

  • Added support for AWS Identity and Access Management (IAM) roles for Amazon S3 file storage.

  • Added a “Test Connection” button to test Amazon S3 connection.

Enterprise Edition 

  • When ExperimentalTownSquareIsReadOnly is set to true, non-admins can no longer react to messages, pin messages or update channel information.

  • Added cache invalidation totals to Performance Monitoring.

Bug Fixes 

  • Fixed server log 404 error messages “We couldn’t get the emoji” for numeric emojis.

  • Fixed an issue where cursor jumped to end of line when trying to edit text in the middle of search bar.

  • Fixed an issue where a download link opened images in a new tab instead of downloading them.

  • Fixed an issue where Direct Message channel with yourself did not show up in channel switcher.

  • Fixed an issue where deleting one username from “add member to a channel” field deleted all names.

  • Fixed an issue where View/Manage members should have been sorted by username, not online status.

  • Fixed an issue where a non-system-admin should not see Is Trusted option on OAuth 2.0 integrations.

  • Fixed an issue with being unable to click on pinned post, channel members, and so on with keyboard focus on search box.

  • Fixed an issue where Mattermost only imported first user during Slack import.

  • Fixed an issue where cleared search term reappeared after closing RHS.

  • Fixed an issue where a thumbnail appeared larger than expected in center channel when posting an image while the right hand side was open.

  • Fixed an issue with adding users to channels when the usernames contained periods.

  • Fixed an issue with a JavaScript error when using CMD/CTRL-K keyboard shortcut to change channels.

  • Fixed an issue with not being able to get past second page of /admin_console/users.

  • Fixed an issue where ALT+UP/DOWN caused error in console and then stopped working.

Compatibility 

Removed and Deprecated Features 

  • To improve the production use of Mattermost with Docker, the docker image is now running a as non-root user and listening on port 8000. Please read the upgrade instructions for important changes to existing installations.

  • Several configuration settings have been migrated to roles in the database and changing their config.json values no longer takes effect. These permissions can still be modified by their respective System Console settings as before. The affected config.json settings are:

    • RestrictPublicChannelManagement

    • RestrictPrivateChannelManagement

    • RestrictPublicChannelCreation

    • RestrictPrivateChannelCreation

    • RestrictPublicChannelDeletion

    • RestrictPrivateChannelDeletion

    • RestrictPrivateChannelManageMembers

    • EnableTeamCreation

    • EnableOnlyAdminIntegrations

    • RestrictPostDelete

    • AllowEditPost

    • RestrictTeamInvite

    • RestrictCustomEmojiCreation

For a list of past and upcoming deprecated features, see our website.

Upcoming Deprecated Features in Mattermost v5.0 

The following deprecations are planned for the Mattermost v5.0 release, which is scheduled for summer/2018. This list is subject to change prior to the release.

  1. All API v3 endpoints will be removed. See documentation to learn more about how to migrate your integrations to API v4. Ticket #8708.

  2. platform binary will be renamed to mattermost for a clearer install and upgrade experience. All command line tools, including the bulk loading tool and developer tools, will also be renamed from platform to mattermost. Ticket #9985.

  3. A new config.json setting to whitelist types of protocols for auto-linking will be added. Ticket #9547.

  4. A new config.json setting to disable the permanent APIv4 delete team parameter will be added. The setting will be off by default for all new and existing installs, except those deployed on GitLab Omnibus. A System Administrator can enable the API v4 endpoint from the config.json file. Ticket #9916.

  5. An unused ExtraUpdateAt field will be removed from the channel model. Ticket #9739.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under MessageExportSettings in config.json:

    • Added "CustomerType": "A9", to allow selecting the type of Global Relay customer account the user’s organization has.

    • Added "EmailAddress": "", to allow selecting the email address the user’s Global Relay server monitors for incoming compliance exports.

  • Under "SamlSettings" in config.json:

    • Added "ScopingIDPProviderId": "", to allow an authenticated user to skip the initial login page of their federated Azure AD server, and only require a password to log in.

    • Added "ScopingIDPName": "", to add the name associated with a user’s Scoping Identity Provider ID.

  • Under DisplaySettings" in config.json:

    • Added "ExperimentalTimezone": false, to allow selecting the timezone used for timestamps in the user interface and email notifications.

API Changes 

  • It is required that any new integrations use API v4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All API v3 endpoints have been deprecated and are scheduled for removal in Mattermost v5.0.

Database Changes 

Users Table:

  • Added Timezone column.

Teams Table:

  • Added LastTeamIconUpdate column.

Channels Table:

  • Removed idx_channels_displayname index.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Numbered lists can sometimes extend beyond the normal post area.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v4.8 - Feature Release 

  • v4.8.2, released 2018-06-04

  • v4.8.1, released 2018-04-09

    • Mattermost v4.8.1 contains multiple security fixes ranging from low to high severity. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed a performance issue by removing the DisplayName index on the Channels table.

  • v4.8.0, released 2018-03-16

    • Original 4.8.0 release

Security Update 

Highlights 

Enhanced compatibility with CloudFront 

  • Added support for configuring CloudFront to host Mattermost’s static assets.

  • Allows for improved caching performance and shorter load times for those members of your team geographically distributed throughout the world.

SAML Migration Command (Enterprise Edition E20) 

  • Added a CLI command to easily migrate users to SAML.

Improvements 

Web User Interface 

  • Added a web app build hash to About Mattermost dialog to tell what version of the web app is being used.

  • Switched search bar to a button in tablet view, to increase how much space is available in the channel header.

Performance 

  • Reduced load times by optimizing database queries and WebSocket events destined for a single user.

  • Created an iOS endpoint that enables users to upload files larger than 20MB.

  • Improved caching of getRootPosts call.

508 Compliance 

  • Added alt attribute to profile pictures.

Integrations 

  • Updated incoming webhooks to accept multipart/form-data content type such as that supplied by curl -F.

Notifications 

  • A system message is now posted when a channel is moved between teams by the CLI command.

Authentication 

  • Reduced OAuth SSO login errors by falling back to a constructed URL if Site URL is blank.

System Console 

  • Removed plugin upload setting from System Console UI and prevented switching the setting from the API.

  • Added paging to system console log viewer and set default value of per_paging for logs to 1000.

Bug Fixes 

  • Fixed an issue where sidebar unreads text setting was ignored in custom theme.

  • Fixed an issue where emoji picker had an empty line at the bottom of the list.

  • Fixed an issue with Markdown help wrapping on a second line in Edit Message dialog.

  • Fixed an issue where after leaving last team the “Logout” link did nothing.

  • Fixed an issue where focus was sometimes wrong on delete post modal.

  • Fixed an issue where the bulk import tool didn’t force Town Square membership.

  • Fixed duplicate calls of the “view” request when switching channels.

  • Fixed an issue where channel name was included in push notifications if someone posted only files with Push Notification Contents set to not include channel name.

  • Fixed an issue where attempting to preview an attached document failed to finish “loading” if the file extension didn’t match the actual file type.

  • Fixed an issue where focus was not set to input box after replying to a message in Classic Mobile App.

  • Fixed an issue where a username such as “user.name” gets a highlight only on “name” when @-icon is clicked.

  • Fixed an issue where the “More Unreads Above” indicator didn’t always work.

  • Fixed an issue where IE11 posted placeholder from hidden textbox.

  • Fixed an issue where last channel was not remembered after refresh when switching teams.

  • Fixed an issue with no auto-focusing into input text when attaching a file in Classic Mobile App.

  • Fixed an issue with not being able to type with composed characters (e.g. CJK) in View Team Members modal and channel switcher.

  • Fixed an issue where insecure images were loaded by sending client before proxying.

  • Fixed an issue with sandboxing support for CentOS and Bosh.

  • Fixed an issue where JIRA plugin posts were not properly truncated.

  • Fixed an issue where tall/wide emojis appeared stretched in emoji picker.

  • Fixed an issue where web app could not be built if not in a git repository.

  • Fixed an issue where jumping to a search result did not always load the context posts.

  • Fixed an issue where edit box changed size on switching to markdown preview in some languages.

Compatibility 

Removed and Deprecated Features 

  • All API v3 endpoints have been deprecated and are scheduled for removal in Mattermost v5.0.

  • An unused ExtraUpdateAt field will be removed from the channel model in Mattermost v5.0.

  • As Mattermost moves to a role-based permissions system in v4.9, a number of configuration settings will be migrated to roles in the database and changing their config.json values will no longer take effect. These permissions can still be modified by their respective System Console settings. The config.json settings to be migrated are:

    • RestrictPublicChannelManagement

    • RestrictPrivateChannelManagement

    • RestrictPublicChannelCreation

    • RestrictPrivateChannelCreation

    • RestrictPublicChannelDeletion

    • RestrictPrivateChannelDeletion

    • RestrictPrivateChannelManageMembers

    • EnableTeamCreation

    • EnableOnlyAdminIntegrations

    • RestrictPostDelete

    • AllowEditPost

    • RestrictTeamInvite

    • RestrictCustomEmojiCreation

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added AllowCookiesForSubdomains, to ensure that the domain parameter is set for cookies, which allows the browser to send the cookies to subdomains as well.

    • Added WebsocketURL, which allows the server to instruct clients where they should try to connect WebSockets to.

    • Changed EnableAPIV3 setting to false for new installs, as all API v3 endpoints have been deprecated and are scheduled for removal in Mattermost v5.0.

API Changes 

  • It is required that any new integrations use API v4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All API v3 endpoints have been deprecated and are scheduled for removal in Mattermost v5.0.

RESTful API v4 Changes 

  • Updated POST /files to support requests with only the channel_id and filename defined as query parameters with the contents of a single file in the body of the request.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • Numbered lists can sometimes extend beyond the normal post area.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

Release v4.7 - Feature Release 

  • v4.7.4, released 2018-04-09

    • Mattermost v4.7.4 contains multiple security fixes ranging from low to high severity. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed a performance issue by removing the DisplayName index on the Channels table.

  • v4.7.3, released 2018-03-09

  • v4.7.2, released 2018-02-23

    • Fixed an issue where message attachments didn’t render emojis.

    • Fixed an issue where channels with a name 26 characters long were inaccessible with a 404 error.

    • Fixed “We couldn’t get the emoji” server log messages.

    • Fixed an issue with being unable to switch to direct or group message channels via CTRL/CMD+K channel switcher or via “msg/groupmsg” slash commands.

    • Fixed an issue where clicking on “Send Message” from a user’s profile popover redirected to Town Square instead of the user’s direct message channel.

    • Fixed an issue where links to direct and group message channels opened in a new tab.

  • v4.7.1, released 2018-02-20

    • Fixed an issue with compliance export outputs, resulting in Failed to update ChannelMemberHistory table error messages in the log when a user joins or leaves a channel. Issue updates posted here.

  • v4.7.0, released 2018-02-16

    • Original 4.7.0 release

Security Update 

Highlights 

Client-Side Performance 

  • Added user-based rate limiting, in addition to rate limiting API access by IP address.

  • Decreased page load time by loading custom emojis asynchronously rather than all on first page load.

  • Optimized channel autocomplete (~) query by returning client-side results immediately.

  • Decreased the size of most image assets by more than 25% by running pngquant to remove unnecessary metadata from PNGs.

Image Proxy Support 

  • Image proxy servers increase performance through a layer of caching, and provide custom options to resize images.

  • Three new configuration keys, ImageProxyType, ImageProxyURL, ImageProxyOptions, ensure that posts served to the client will have their markdown modified such that all images are loaded through a proxy.

Updated Image Thumbnails 

  • Updated the appearance of image thumbnails, so that single thumbnails will now expand to a larger preview without clicking the image to open the preview window.

Experimental Setting for Unreads Sidebar Section 

  • Added an experimental setting to group unread channels in the channel sidebar. The setting must first be enabled by the System Admin, by replacing disabled with either default_off or default_on in config.json.

Improvements 

Web User Interface 

  • Added a status icon in the channel member list and sorted it by user status.

  • Added ability to preview images found in link previews.

  • Added a Copy Link option for sidebar channels in the Desktop App.

  • Added focus on the text box after hitting “Edit” on Account Settings options.

  • Improved formatting of quotes in the channel header.

  • Added a date separator for search results.

  • Channel names are now sorted correctly in the left-hand-side by taking non-alphabetical characters into consideration (e.g. brackets, hash sign, etc.)

Integrations 

  • Added username and profile picture to incoming webhook set up pages.

  • Added support for Slack attachments in outgoing webhook responses.

Emoji Picker 

  • Added the ability to navigate emoji picker with the keyboard.

  • Added paging and search of custom emojis to webapp emoji picker.

Channels 

  • Users are directed to the last channel they viewed in a team when switching to that team.

  • Changed URLs of Direct Messages to use the form of https://servername.com/messages/@username, letting users open a direct message with each other via URL.

Notifications 

  • Added a system message when a team is changed from public to private.

Plugins (Beta) 

  • Zoom plugin now supports on-premise Zoom servers.

Enterprise Edition 

  • Increased max length of User.Position field to 128 characters to meet LDAP max length.

  • Increased OAuth state parameter limit. Some systems may send a state longer than 128 characters.

Bug Fixes 

  • Fixed an issue where OAuth account creation error page was unformatted.

  • Fixed tab and alt-tab keyboard navigation for links on sign-in page.

  • Fixed an issue where plugin slash commands didn’t override username or icon.

  • Fixed an issue where pagination for team members modal showed a next button when there are no more users to show.

  • Fixed an issue where at-channel in /header should not trigger confirmation modal.

  • Fixed an issue where auto-generated SAML Service provider login URL had two slashes instead of one.

  • Fixed an issue where no unread mention appeared on non-mobile platform after receiving push notification.

  • Fixed an issue where the text box was hidden by the keyboard when replying to a post in mobile view.

  • Fixed username autocomplete not working with mixed cases.

  • Fixed not being able to type Korean quickly in some dialogs.

  • Fixed an issue where notification preference settings didn’t respect case sensitivity for mention highlighting.

  • Fixed where, after an ephemeral message, couldn’t use +:emoji: to react to the previous message.

  • Fixed Mattermost not loading on Firefox if the media.peerconnection.enabled setting in Firefox is set to false.

  • Fixed login screen sometimes flashing before Mattermost server loads.

  • Fixed an issue where bot messages from the Zoom plugin ignored the Zoom API URL field for on-prem Zoom servers.

  • Disabled pull-to-refresh feature on Android (Chrome) to prevent unwanted page refresh.

  • Fixed an issue where clicking Save in Rename Channel modal without changes did nothing.

  • Fixed emoji picker search being case-sensitive.

  • Fixed timestamp not being clickable in desktop mobile view.

  • Fixed an issue where deleting a team via the API broke the web user interface.

Compatibility 

Removed and Deprecated Features 

  • All API v3 endpoints have been deprecated, and scheduled for removal in Mattermost v5.0.

  • The mentionKeys prop in post type plugins is now removed to fix case sensitive mention highlighting. Plugins can retrieve the mentionKeys prop from the store as needed.

  • The permanent query parameter of the DELETE /teams/{team_id} APIv4 endpoint is not removed as previously announced, given customer and community feedback.

  • As Mattermost moves to a role based permissions system in v4.8, a number of configuration settings will be migrated to roles in the database, and changing their config.json values will no longer take effect. These permissions can still be modified by their respective System Console settings. The config.json settings to be migrated are:

    • RestrictPublicChannelManagement

    • RestrictPrivateChannelManagement

    • RestrictPublicChannelCreation

    • RestrictPrivateChannelCreation

    • RestrictPublicChannelDeletion

    • RestrictPrivateChannelDeletion

    • RestrictPrivateChannelManageMembers

    • EnableTeamCreation

    • EnableOnlyAdminIntegrations

    • RestrictPostDelete

    • AllowEditPost

    • RestrictTeamInvite

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition: 

  • Under ServiceSettings in config.json:

    • Added "ImageProxyType": "", "ImageProxyOptions": "", and "ImageProxyURL": "" to ensure posts served to the client will have their markdown modified such that all images are loaded through a proxy.

    • Added "ExperimentalGroupUnreadChannels": disabled to show an unread channel section in the webapp sidebar. The setting must first be enabled by the System Admin, by replacing disabled with either default_off or default_on.

    • Added "ExperimentalEnableDefaultChannelLeaveJoinMessages": true that allows disabling of leave/join messages in the default channel, usually Town Square.

  • Under RateLimitingSettings in config.json:

    • Added "VaryByUser": false, a user-based rate limiting, to rate limit on token and on userID.

API Changes 

  • It is required that any new integrations use API v4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All API v3 endpoints have been deprecated, and scheduled for removal in Mattermost v5.0.

RESTful API v4 Changes 

  • Added GetChannelByName and GetTeamByName to auto lowercase team and channel names in API requests. This ensures that the channel name is automatically lowercased for endpoints taking team or channel names as URL parameters.

  • Added POST /emoji/search, GET /emojis/name/{emoji_name}, and GET /emoji/autocomplete to add consistency with user search/autocomplete endpoints. These API endpoints ensure that the benefits of GET for important performance related actions such as autocompleting are included.

  • Added /users/tokens/search to allow System Admin to be able to find, manage and revoke personal access tokens as needed. This endpoint gets all tokens for all users if one has the manage_system permission.

WebSocket Event Changes 

  • Added delete_team web socket event to notify client whenever a team is deleted (e.g. via API call).

Database Changes 

Users Table:

  • Increased size of Position field from 35 to 128 characters.

OAuthAuthData Table:

  • Increased size of State field from 128 to 1024 characters.

ChannelMemberHistory Table:

  • Removed Email column.

  • Removed Username column.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

  • Numbered lists can sometimes extend beyond the normal post area.

  • Slack import through the CLI fails if email notifications are enabled.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • [WARN] plugin sandboxing is not supported. plugins will run with the same access level as the server log message is created when sandboxing isn’t enabled for plugins. If you don’t use plugins, you can ignore this message. If you have plugins enabled, learn how to enable sandboxing.

Release v4.6 - Feature Release 

  • v4.6.3, release date 2018-04-09

  • v4.6.2, release date 2018-02-23

  • v4.6.1, release date 2018-01-30

    • Fixed an issue where Let’s Encrypt certificates were broken on Mattermost servers. The cache will be deleted upon upgrade so your certificate will be immediately renewed. Moreover, port 80 must be forwarded through a firewall, with Forward80To443 config.json setting set to true, to complete the Let’s Encrypt certification.

  • v4.6.0, released 2018-01-16

    • Original 4.6.0 release

Highlights 

Client-Side Performance 

  • Decreased channel switching time up to 45% by reducing post mounting time.

  • Decreased up to 85% of the memory retained following a channel switch by fixing memory leaks of the post_time.jsx component.

  • Decreased size of the most used icons and logos by 70-80% by running pngquant to remove unnecessary metadata from PNGs.

Improvements 

Web User Interface 

  • Added a loading indicator while pinned posts and flagged posts lists are loading.

  • Added a loading indicator to MFA sign in button.

  • Added a tooltip for the ‘+’ button when adding emoji reactions.

  • Channel switcher (CTRL/CMD+K) now filters by usernames, full names and nicknames.

  • Channel links are now rendered in the channel header.

  • File names are now shown in attachment previews.

Plugins (Beta) 

  • Plugins now support slash commands.

Notifications 

  • Updated default notification settings for new accounts to provide a better onboarding experience. Each of these can be configured in Account Settings. In particular, the updated default settings include:

    • Desktop notifications only sent for mentions and direct messages.

    • Mobile push notifications only sent when the user is away or offline, not when online.

    • Mentions of the user’s first name doesn’t trigger mentions.

508 Compliance 

  • Default language is now declared in HTML for Mattermost webpages.

  • Position of status indicators and reply icons updated when no CSS is rendered.

  • Use programmatically identifiable headings for team and channel name.

Administration 

  • Incoming webhook display name is now included in the post.Props field for better auditing.

  • System Admins can now reset their own password from the System Console users list.

Bug Fixes 

  • Username updates are now immediately visible across all browser tabs.

  • Server logs no longer contain info messages about initializing plugins when plugins are disabled.

  • Fixed Mattermost not loading on Firefox v52.

  • Fixed issues with user at-mention autocomplete when using Tab multiple times.

  • Fixed an issue where typing an emoji reaction didn’t add it to recently used emojis list.

  • OAuth and SAML users can now be deactivated from the Mattermost System Console, assuming they are also deactivated in the SSO provider.

  • Fixed email address validation for Microsoft Outlook formatted email addresses.

  • Fixed an issue where posts sometimes didn’t send on iOS Classic app.

  • Team name can no longer be edited to be only one character long.

  • Editing a message to remove all text no longer deletes the message if it contains a file attachment.

  • Fixed an issue where searching for a channel using the second or third word in the name didn’t work.

  • Other users no longer see deleted GIF previews in reply threads.

  • Fixed an issue where channels with Japanese or Cyrillic characters couldn’t be created.

  • Fixed timestamp minute display for Zoom plugins.

  • Fixed an issue where page would load infinitely when trying to join a team with maximum capacity.

  • Fixed an issue where channel notification preferences reverted to defaults after updating preferences in one of the channels.

Compatibility 

Removed and Deprecated Features 

  • All API v3 endpoints are now deprecated, and scheduled for removal in Mattermost v5.0.

  • The permanent query parameter of the DELETE /teams/{team_id} APIv4 endpoint for permanently deleting a team is scheduled for removal in Mattermost v4.7.

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "EnableTutorial": true to control whether tutorial is shown to end users after account creation. This setting is experimental and may be replaced or removed in a future release.

  • Under TeamSettings in config.json:

    • Added "ExperimentalPrimaryTeam": "" to set the primary team of the server. This setting is experimental and may be replaced or removed in a future release.

  • Under EmailSettings in config.json:

    • Added "LoginButtonColor": "", "LoginButtonBorderColor": "" and "LoginButtonTextColor": "" to set the style of the email login button for white labelling purposes.

Additional Changes to Enterprise Edition:

  • Under LdapSettings in config.json:

    • Added "LoginButtonColor": "", "LoginButtonBorderColor": "" and "LoginButtonTextColor": "" to set the style of the LDAP login button for white labelling purposes.

  • Under SamlSettings in config.json:

    • Added "LoginButtonColor": "", "LoginButtonBorderColor": "" and "LoginButtonTextColor": "" to set the style of the SAML login button for white labelling purposes.

API Changes 

  • It is required that any new integrations use API v4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All API v3 endpoints are now deprecated, and scheduled for removal in Mattermost v5.0.

  • The permanent query parameter of the DELETE /teams/{team_id} APIv4 endpoint for permanently deleting a team is scheduled for removal in Mattermost v4.7.

RESTful API v4 Changes 

  • Added /users/{user_id}/auth to update a user’s authentication method. This can be used to change them to/from LDAP authentication, for example.

Plugin API Changes (Beta) 

  • Added RegisterCommand to register a custom slash command. When the command is triggered, your plugin can fulfil it via the ExecuteCommand hook.

  • Added UnregisterCommand to unregister a command previously registered via RegisterCommand.

  • Added GetChannelMember to get a channel membership for a user.

Plugin Hook Changes (Beta) 

  • Added ExecuteCommand hook to execute a command that was previously registered via the RegisterCommand plugin API.

Database Changes 

IncomingWebhooks Table:

  • Renamed PostUsername column to Username.

  • Renamed PostIconURL column to IconURL.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • Channel scroll position flickers while images and link previews load.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

  • Numbered lists can sometimes extend beyond the normal post area.

  • Slack import through the CLI fails if email notifications are enabled.

  • Letters are skipped in a few dialogs when using Korean keyboard in IE11.

  • Push notifications don’t always clear on iOS when running Mattermost in High Availability mode.

  • Deleting a team via the API breaks the user interface.

  • Bot messages from the Zoom plugin ignore the Zoom API URL field for on-prem Zoom servers.

Release v4.5 - Feature Release 

  • v4.5.2, release date 2018-02-23

  • v4.5.1, released 2018-01-16

    • Fixed an issue where Mattermost wouldn’t load on certain versions of Firefox, including v52-54 and v57 in private mode.

  • v4.5.0, released 2017-12-16

    • Original 4.5.0 release

Highlights 

Zoom Plugin (Beta) 

  • Zoom video calling and screensharing plugin. Learn more here.

  • Manage plugins from the System Console > Plugins (Beta) section.

Actiance Support (Beta) (Enterprise Edition E20 Add-On) 

  • Compliance export support for Actiance as a compliance solution. Learn more here.

  • Access compliance export from the System Console > Advanced > Compliance Export (Beta).

Improvements 

Web User Interface 

  • CTRL/CMD + / now toggles the keyboard shortcuts dialog.

  • Link previews now appear in the right-hand side in comment threads.

  • Timestamp permalinks now open in the current view on desktop and browser.

  • Pinned posts are now sorted newest to oldest.

  • Updated markdown to better handle non-Latin characters in URLs.

  • Added WebRTC call icon to desktop mobile view header.

  • Added a ‘+’ sign to quickly add emoji reactions to a post.

  • Added support for different emoji skintones.

  • Added inline playback for GIF attachments.

Integrations 

  • Added an option for an outgoing webhook to reply to the posted message as a comment.

  • JIRA plugin is now bundled as a pre-packaged plugin manageable from the System Console > Plugins > Management.

  • Added support for mentions with <@userid>, <!channel>, <!all> and <!here> in webhook posts.

  • Personal access tokens can now be temporarily deactivated in the Account Settings.

Channels 

  • Direct Message channels with deactivated users are now hidden in the sidebar and can be reopened from the More… Direct Messages list.

  • You can now open a direct message channel with yourself.

Notifications 

  • Removed unnecessary log messages posted when pending email notifications are deleted because a user comes online before the batch is sent.

  • Desktop notification icon has been updated on Edge browsers.

Keyboard Shortcuts 

  • Added a /groupmsg command to start a new group message channel.

  • Added CTRL+SHIFT+L to set focus to the message input box.

System Console 

  • Added a confirm modal to the Data Retention settings page.

  • Added settings pages for uploading and managing plugins in the System Console > Plugins (Beta) section.

  • Added the ability to revoke a user’s sessions from the System Console.

Bug Fixes 

  • Closing a direct or group message channel no longer purges channel preferences.

  • Users no longer get a blank page after hitting “x” on a deleted message in permalink view.

  • Fixed an issue where AmazonS3Region defaults to us-east-1 regardless of the value input.

  • Channel links render as expected when linking to a channel that the current user does not belong to.

  • Uppercase letter is no longer required for a password if the password requirement is set to at least 5 characters and a number.

  • Profile image updates are now visible in other active clients and the right-hand side after the change.

  • Plugins can no longer be uploaded if they have the same plugin ID.

  • Creating a channel with a name including a reserved word no longer breaks the user interface.

  • Fixed the AD/LDAP Test Connection button.

  • Fixed an issue causing invalid or expired session server logs.

  • Removed a duplicate error message on the login page after a password reset.

  • Fixed an issue where the OAuth ClientID and Secret values were missing after setup.

  • Emoji picker now works when the right-hand side is expanded.

  • Error messages in the System Console user list no longer breaks the user interface.

  • Fixed an issue where only System Admins could edit OAuth apps even if integration creation was not restricted to admins.

  • Fixed an issue where “New messages v” bubble didn’t always clear in a fresh direct message channel.

  • Fixed channel preferences not restoring after closing and reopening a direct or group message channel.

Compatibility 

Removed and Deprecated Features 

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "EnablePreviewFeatures": true to hide the Advanced > Preview re-release features section from Account Settings.

    • Added "CloseUnusedDirectMessages": false to hide inactive direct message channels from the sidebar.

    • Added "ExperimentalEnableAuthenticationTransfer": true to set whether users can change authentication methods.

  • Under EmailSettings in config.json:

    • Added "UseChannelInEmailNotifications": false to set whether email notifications contain the channel name in the subject line.

  • Under PluginSettings in config.json:

    • Added "ClientDirectory": "./client/plugins" to set the location of client plugins.

Additional Changes to Enterprise Edition:

  • Added MessageExportSettings in config.json:

    • Added "EnableExport": false to enable message export.

    • Added "DailyRunTime": "01:00" to set the time for the daily export job.

    • Added "ExportFromTimestamp": 0 to set the timestamp for which posts to include in the message export.

    • Added "FileLocation": "export" to set the message export location.

    • Added "BatchSize": 10000 to set how many new posts are batched together to a compliance export file.

API v4 Changes 

  • It is recommended that any new integrations use API v4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All API v3 endpoints are scheduled for removal on January 16, 2018.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Team sidebar doesn’t always show unreads from other teams on first load.

  • Team sidebar on desktop app does not update when channels have been read on mobile.

  • System Admin cannot reset their own password via the System Console.

  • Channel scroll position flickers while images and link previews load.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

  • Profile pictures and usernames don’t immediately update across tabs or in the right-hand side comment threads.

  • Numbered lists can sometimes extend beyond the normal post area.

  • Typing an emoji reaction does not add it to recently used emojis.

  • Server logs contain messages about initializing plugins even when plugins are disabled.

Contributors 

/mattermost-webapp

/mattermost-plugin-zoom

/mattermost-server

/mattermost-mobile

/docs

/mattermost-docker

/mattermost-load-test

/mattermost-redux

/mattermost-developer-documentation

/mattermost-plugin-jira

/mattermost-webrtc

/desktop

/mattermost-kubernetes

/mattermost-selenium

/mattermost-api-reference

/mattermost-ios-classic

/mattermost-developer-kit

/mattermost-build

/marked

Release v4.4.5 - Feature Release 

  • v4.4.5, release date 2017-12-11

  • v4.4.4, release date 2017-12-06

    • Added a config.json setting, ClientDirectory, to set the directory to write web app plugins to. Added to better support plugins in GitLab Omnibus.

  • v4.4.3, released 2017-12-05

  • v4.4.2, released 2017-11-23

    • Fixed an issue where AD/LDAP accounts get deactivated following an AD/LDAP sync if their email address between the AD/LDAP server and Mattermost don’t match case.

    • Fixed synchronization of SAML accounts with AD/LDAP.

    • Fixed AD/LDAP “Test Connection” button in the System Console not working when AD/LDAP login is disabled.

    • Fixed system messages not being translated into user’s language set in Account Settings > Display > Language.

    • Fixed system messages about channel header updates sometimes being incorrectly formatted.

  • v4.4.1, released 2017-11-16

    • Fixed an upgrade issue where an alternative config file location via --config flag is ignored.

  • v4.4.0, released 2017-11-16

    • Original 4.4.0 release

Highlights 

Plugins (Beta) 

  • Beta release of Mattermost plugins, which allow admins to more easily integrate with third-party systems, extend functionality and customize the user interface of your Mattermost server. See documentation to learn more.

Do Not Disturb Status 

  • Added “Do Not Disturb” status to temporarily turn off all desktop and mobile push notifications.

Support SAML sync via AD/LDAP (Enterprise Edition E20) 

  • Added support for periodically synchronizing SAML user attributes, including user deactivation and removal, from AD/LDAP. See documentation to learn more.

Improvements 

Web User Interface 

  • Added an experimental feature to hide direct and group message channels after 7 days with no new messages. To enable it set CloseUnusedDirectMessages in config.json to true.

  • Moved website previews out of beta, configurable in Account Settings > Display. Enable link previews in the System Console.

  • Made it easier to add a user to channel if mentioned user is not already a channel member.

  • Added “Edit Account Settings” link to the bottom of your own profile popover to more easily edit your settings.

  • URL address for internal links such as when hovering over the flag icon, is now hidden for better user experience.

  • URL addresses for channels on the left-hand sidebar are now hidden on the desktop app.

  • Added a loading spinner to Account Settings dialog after clicking the “Save” button.

  • Added full date tooltip to post timestamps in right-hand sidebar and search results.

  • Added “@” in front of the username field in user lists.

Performance 

  • Reduced load times by optimizing database queries and adding composite indexes for the Posts table.

  • Prevented sessions from being stuck in cache by clearing the session cache if permission is denied.

  • Improved Elasticsearch bulk indexing query performance.

Emoji Picker 

  • Added emoji picker to the Edit Message dialog.

  • Removed categorization when searching for emojis in the emoji picker.

Integrations 

  • Added the ability to edit OAuth 2.0 applications.

  • Added improvements for interactive message buttons, such as displaying your username in ephemeral messages triggered by the message buttons.

Slash Commands 

  • Added /remove and /kick slash commands to remove a user from the channel.

WebRTC Video and Audio Calls (Beta) 

  • When you have multiple browser tabs open and receive a video call, the ringtone stops in all tabs when you accept the call.

  • Multiple STUN and TURN servers are now supported.

System Console 

  • Added a setting to disable channel wide (@-channel, @-all) mention confirmation in channels with more than five members.

  • Admin now receives a prompt when leaving a System Console page with unsaved changes.

Elasticsearch (Enterprise Edition E20) 

  • Added support for batched live indexing for Elasticsearch.

  • Added a configurable timeout for Elasticsearch requests.

  • Added a table to Elasticsearch System Console page to monitor indexing jobs.

  • Elasticsearch connection is now asynchronous so that a broken Elasticsearch server cannot block the startup of the Mattermost server.

Bug Fixes 

  • Fixed mobile push notification settings not saving in the System Console.

  • Fixes to channel link (~) autocomplete, such as not being able to autocomplete ‘Town Square’.

  • Fixed an issue where System Console was sometimes temporarily accessible after demoting a user to a member.

  • Fixed failure to switch from email to SAML sign-in method if the user’s email address has a plus sign.

  • Fixed “More Channels” modal not showing the correct the page number when displaying search results.

  • Fixed an incorrect error message when trying to add a user to a direct or group message channel via the APIs.

  • Fixed an issue where downloading a file containing spaces didn’t preserve the name.

  • Fixed thumbnail image for .m4r file types.

  • Fixed an issue where search in Manage Members dialog didn’t update results when there were no matches.

  • Fixed an issue where in: autocomplete for text search didn’t display results after a hyphen in some servers.

  • Fixed a missing “No results” screen for Elasticsearch text search.

  • Fixed channel member count not updating until refresh when a user is added or removed.

  • Fixed timestamp links on desktop app opening permalink view in a new app window.

  • Fixed an error caused by creating a new direct message channel via the channel switcher (CTRL/CMD+K).

  • Fixed SVG thumbnails not showing a preview.

  • Fixed team sidebar showing unreads for deleted channels.

  • Fixed a missing indicator when a message is pending but not yet sent.

  • Fixed emoji autocomplete appearing when typing an emoticon like :-D.

  • Fixed emoji names matching usernames triggering mentions.

  • Fixed incorrect order of recent mentions when a hashtag is a word that triggers mentions.

  • Fixed webhook message attachments longer than 8000 characters failing to post by truncating them, or splitting to multiple posts if the message has multiple attachments.

  • Fixed /msg command arbitrarily switching teams.

  • Fixed mentions not appearing linked in message drafts when in preview mode.

  • Fixed an issue where an existing account could change their email address to one not in the restricted domain list.

  • Fixed emoji reactions being added to system messages when using the +:emoji: command.

  • Fixed an issue where message retention policy didn’t work in Postgres databases if there were emoji reactions to delete.

Compatibility 

Composite database indexes were added to the Posts table. This may lead to longer upgrade times for servers with more than 1 million messages.

Moreover, LDAP sync now depends on email. If you have AD/LDAP login enabled, make sure all users on your AD/LDAP server have an email address or that their account is deactivated in Mattermost.

Removed and Deprecated Features 

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "CloseUnusedDirectMessages": false to set whether users have the option to automatically close direct and group message channels older than 7 days.

  • Under TeamSettings in config.json:

    • Added "EnableConfirmNotificationsToChannel": true to set whether a confirmation is shown for channel wide (@-channel, @-all) mentions in channels with more than five members.

  • Under PluginSettings in config.json:

    • Added "Enable": true to set whether plugins are enabled on the server.

    • Added "EnableUploads": false to set whether manual plugin uploads are enabled on the server. Disabling will keep existing plugins, including pre-packaged Mattermost plugins, installed on the server.

    • Added "Directory": "./plugins" to specify the directory of where plugins are stored.

    • Added "Plugins": {} to list installed plugins on the Mattermost server.

    • Added "PluginStates": {} to set whether an installed plugin is active or inactive on the Mattermost server.

Additional Changes to Enterprise Edition:

  • Under SamlSettings in config.json:

    • Added EnableSync: false to set whether AD/LDAP synchronization is enabled.

  • Under LdapSettings in config.json:

    • Added EnableSyncWithLdap: false to set whether SAML user attributes, including deactivation, are periodically synchronized from AD/LDAP.

  • Under ElasticsearchSettings in config.json:

    • Added "LiveIndexingBatchSize": 1 to set how many new posts are batched together before they are added to the Elasticsearch index.

    • Added "RequestTimeoutSeconds": 30 to set the timeout in seconds for Elasticseaerch calls.

    • Added "BulkIndexingTimeWindowSeconds": 3600 to set the maximum time window for a batch of posts being indexed by the Bulk Indexer.

Database Changes 

Posts Table:

  • Added a composite index for ChannelId, DeleteAt, CreateAt

  • Added a composite index for ChannelId, UpdateAt

UserAccessTokens Table:

  • Added IsActive column

API v4 Changes 

  • It is recommended that any new integrations use API v4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All API v3 endpoints are scheduled for removal on January 16, 2018.

Added routes (API v4)

  • POST at /users/token/enable

    • Re-enables a personal access token that was previously disabled.

  • POST at /users/token/disable

    • Disables a personal access token and deletes any sessions that uses the token. The token can be re-enabled using /users/tokens/enable.

  • POST at /users/{user_id}/sessions/revoke/all

    • Revokes all user sessions from the provided user id and session id strings.

  • POST at /plugins

    • Uploads a plugin in a compressed .tar.gz.

  • GET at /plugins

    • Gets a list of active and inactive plugins.

  • DELETE at /plugins/{plugin_id}

    • Removes a previously uploaded plugin.

  • POST at /plugins/{plugin_id}/activate

    • Activates an installed plugin.

  • POST at /plugins/{plugin_id}/deactivate

    • Deactivates an active plugin.

  • GET at /plugins/webapp

    • Gets a list of plugin manifests for active plugins with webapp components.

Modified routes (API v4)

  • POST at /logs

    • Unauthenticated users can now log ERROR or DEBUG messages when ServiceSettings.EnableDeveloper is set to true.

Websocket Event Changes 

Added:

  • user_role_updated that occurs when a user role is updated.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Scrollbar is sometimes not visible in the left-hand sidebar after switching teams.

  • Certain code block labels don’t appear while scrolling on iOS mobile web.

  • Deleted message doesn’t clear unreads or unread mentions.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Channel links to channels that the current user does not belong to may not render correctly.

  • Team sidebar doesn’t always show unreads from other teams on first load.

  • Uppercase letter is required for a password if the password requirement is set to at least 5 characters and a number.

  • System Admin cannot reset their own password via the System Console.

  • Channel scroll position flickers while images and link previews load.

  • Closing a direct or group message channel, then re-opening later, doesn’t restore channel preferences.

  • CTRL/CMD+U shortcut to upload a file doesn’t work on Firefox.

  • Website previews are not displayed for comments on threads.

  • User gets a blank page after hitting “x” on a deleted message in permalink view.

  • Profile pictures don’t immediately update across tabs or in the right-hand side comment threads.

Release v4.3.4 - Feature Release 

  • v4.3.4, release date 2017-12-11

  • v4.3.3, released 2017-12-05

  • v4.3.2, released 2017-11-10

    • Fixed an issue where after creating a new direct message channel via channel switcher (CTRL/CMD+K), all messages fail to post until a page refresh.

  • v4.3.1, released 2017-10-20

    • Fixed an upgrade issue where the database schema would appear to be out of date and throw a log warning.

    • Fixed the Idle Timeout setting in config.json by changing the setting title from SessionIdleTimeout to SessionIdleTimeoutInMinutes.

    • Fixed a regression where slash commands were not functional in Direct or Group Messages.

    • Mattermost v4.3.1 contains a low severity security fix. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

  • v4.3.0, released 2017-10-16

    • Original 4.3.0 release

Security Update 

Highlights 

Data Retention Beta (Enterprise Edition E20) 

  • Automatically delete old messages and file uploads through custom data retention policies.

Languages 

  • Promoted Italian and Turkish out of beta to release-quality translations.

Improvements 

Web User Interface 

  • Clicking on “More Unreads” bubble on channel sidebar now scrolls you to the next unread channel.

  • Added status indicators to direct message channel header.

Search 

  • Improved user search that supports two character full names and usernames.

Integrations 

  • Ephemeral slash command responses now support attachements without text.

  • Added CLI command to move custom slash commands between teams.

Notifications 

  • Updating the channel header with channel-wide mentions no longer triggers notifications.

Performance 

  • Improved initial load of the emoji picker, now supporting thousands of custom emojis including GIFs.

Enterprise Edition 

  • Added tables in System Console for AD/LDAP sync, Elasticsearch and Data Retention to track the success of scheduled jobs.

  • Added an idle timeout setting to automatically log out users who are inactive for a specified amount of time.

  • Elasticsearch can now be used on a shared Elasticsearch cluster.

  • Added metrics for monitoring Elasticsearch system health and usage.

Bug Fixes 

  • Fixed an issue where closing brackets were ignored in URL links.

  • Fixed Leave Team icon size and inconsistent channel header icon hover effects on IE11 mobile view.

  • Fixed an issue where right side menu disappeared after viewing search results on IE11 mobile view.

  • Fixed other minor UI issues on IE11 desktop view.

  • Fixed an issue where system and ephemeral messages could be flagged.

  • Error text in Edit modal no longer overlaps with help text.

  • Integration message attachments without pretext no longer overlap with username in Compact view.

  • Fixed channel member list being sorted by username instead of teammate name display.

  • “Password updated successfully” bar is now displayed after resetting password.

  • Fixed a broken UI for an expired email verification link.

  • Fixed integration message attachments not always rendering in comment threads.

  • Fixed an issue where “Add Members” dialog would sometimes break.

  • Slash command responses now handle charset and boundary sets correctly.

  • Deactivated users are no longer counted in the Town Square member count.

  • iOS push notifications are now consistently cleared from the homescreen if all mentions are read on another device.

  • Webhooks no longer continue sending to the original channel if the target channel is changed.

  • Emails containing symbols now render correctly when switching to email authentication from other methods.

  • Attempting to open an invalid public file link no longer displays an unformatted error page.

  • Interactive message action buttons no longer disappear after updating the message.

  • Ticket links posted by the built-in JIRA plug-in are now correct if the JIRA URL has a custom context path.

  • Error message is now displayed in the System Console if the localization available languages does not include the default client language.

  • Fixed a race condition where bulk import sometimes fails to get team member when importing users.

  • Closing the channel switcher on mobile no longer sets focus to the text box.

  • Fixed an issue where the wrong channel name might appear in the right-hand side pinned post list.

  • Fixed team sidebar now always showing unreads from other teams on first load.

Compatibility 

Removed and Deprecated Features 

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "SessionIdleTimeoutInMinutes": 0 to specify how long to wait before logging out inactive users.

  • Under ElasticsearchSettings in config.json:

    • Added "IndexPrefix": "" to allow Elasticsearch to be used on a shared Elasticseearch cluster.

  • Under DataRetentionSettings in config.json:

    • Added "EnableMessageDeletion": false to enable message deletion.

    • Added "EnableFileDeletion": false to enable file deletion.

    • Added "MessageRetentionDays": 365 to set how long Mattermost keeps messages in channels and direct messages.

    • Added "FileRetentionDays": 365 to set how long Mattermost keeps file uploads in channels and direct messages.

    • Added "DeletionJobStartTime": "02:00" to specify when to start the data retention job.

API v4 Changes 

  • It is recommended that any new integrations use APIv4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

Added routes (API v4)

  • PUT at /oauth/apps/{app_id}

    • Update an OAuth 2.0 client application.

  • GET at /data_retention/policy

    • Gets the current data retention policy details from the server, including what data should be purged and the cutoff times for each data type that should be purged.

Modified routes (API v4)

  • POST at /channels/members/{user_id}/view

    • Response includes last_viewed_at_times for Mattermost server 4.3 and newer.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • Scrollbar is sometimes not visible in the left-hand sidebar after switching teams.

  • Certain code block labels don’t appear while scrolling on iOS mobile web.

  • Deleted message doesn’t clear unreads or unread mentions.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Channel links to channels that the current user does not belong to may not render correctly.

  • Missing an indication if a message is pending but not yet sent.

  • Recent mention results are not sorted correctly if hashtags is included in “words that trigger mentions”.

  • SVG thumbnails don’t preview in the posted thumbnail.

  • Emojis names matching usernames can trigger mentions.

  • Integration message attachment fails to post if attachment length exceeds 7900 characters.

  • Uppercase letter is required for a password if the password requirement is set to at least 5 characters and a number.

  • Message retention policy may not work in Postgres databases if there are emoji reactions to delete.

Release v4.2.2 - Feature Release 

Security Update 

Highlights 

Interactive Message Buttons 

  • Added message buttons to support user interactions with posts made by incoming webhooks and custom slash commands.

Mobile Support for AppConfig 

  • iOS and Android mobile apps now support Enterprise Mobility Management (EMM) solutions through integration with App Config. See documentation to learn more.

Improvements 

Web User Interface 

  • Redesigned the channel member list.

  • Redesigned the message input box.

  • Redesigned the keyboard shortcuts dialog (CTRL/CMD+/).

  • Added a loading indicator when selecting a team on team selection page.

  • Added an on hover effect for team icons in the team sidebar, and the channel name and favorite button in channel header.

  • Added an active state for the channel member icon in channel header.

  • Added a “+” icon next to the Direct Messages header on channel sidebar to open a new direct or group message.

  • Added a tooltip for Main Menu next to user profile picture.

  • Mouse cursor now changes to a “hand selector” when hovering over the paperclip icon to upload a file.

Mobile View 

  • Made hover effects consistent across all header icons.

  • Removed transparency of the […] menu in the right-hand sidebar.

  • Reduced opacity in channel info dialog.

  • Updated background color of search bar.

Integrations 

  • Added support for Slack-compatible delayed slash commands through the response_url parameter.

  • Improved handling of content-types for integrations.

Notifications 

  • Added support for plain text version of email notifications.

  • Added “Joined the channel” system message for the person who created the channel.

Administration 

  • Added a CLI command platform channel move to move a channel to another team.

  • CLI command platform team delete now lets you delete teams with no channels.

Enterprise Edition 

  • Removed the “Delete Channel” option for private channels, if you’re the last channel member and policy setting restricts channel deletion to admins only.

  • In multi-node cluster environment, scheduled tasks such as LDAP sync will only happen on a single node through leader election for increased performance.

  • Added direct message channels to compliance exports.

  • Added a CLI command platform channel modify to convert a public channel to private, and vice versa.

  • Elasticsearch indexes over a certain age can be aggregated as part of the daily scheduled job.

Bug Fixes 

  • Fixed permalinks not always loading in the channel.

  • Fixed an issue where a System Admin couldn’t scroll to the bottom of the System Console sidebar in Firefox.

  • Flag icon and the “x” icon to close website previews now properly aligned for replies in compact view.

  • Fixed expand/collapse arrows not being visible for YouTube videos when image links are expanded by default.

  • Fixed an issue where reacting to a post in the right-hand sidebar via emoji picker didn’t add the emoji to “Recently Used” section.

  • Pressing the ESC key no longer clears search box contents.

  • Fixed an issue where turning off email batching in the System Console resulted in no email notification option selected in Account Settings.

  • Fixed an issue where a user wasn’t able to scroll down in message preview mode when using Markdown headings.

  • Fixed an issue on Safari browsers where file thumbnails were sometimes blank.

  • Fixed an issue where quotes weren’t working inside URL links.

  • Fixed an error when the language set in Account Settings > Display was removed from available languages in System Console > Localization.

  • Fixed out-of-channel mentions for usernames with dashes and periods.

  • Fixed an issue where a missing config setting sometimes caused server panic.

  • Jumping to a group message channel from a flagged message list now adds the channel to the channel list.

  • Character limits are no enforced when renaming a channel via /rename.

  • Fixed channel header icons when WebRTC call is on-going.

  • Fixed webhook message attachments not appearing in search results or flagged messages list.

  • Timestamp on deleted, ephemeral, or pending posts is no longer a permalink, causing a blank page.

  • Fixed focus issues on iPad Classic app.

  • Fixed an issue where changing other user’s profile image as a System Admin via the API didn’t work.

  • Fixed mention notifications firing for mentions inside triple backticks.

  • Collapse and expand arrows no longer shown for image links when no image is available.

  • A single collapsed link preview now stays collapsed after page refresh.

  • With email batching enabled, if there is activity in Mattermost before email batch is sent, the email notification is not sent.

  • Fixed an issue where copying and pasting SVG files into message draft never finish uploading.

  • Autocomplete is no longer cut on the channel header modal.

  • Fixed email notifications settings appearing saved despite cancelling the change.

  • Notification confirmation message no longer appears when sending channel wide @-all and @-channel mentions in code blocks.

Compatibility 

Breaking Changes 

1 - Mattermost now handles multiple content types for integrations, including plaintext content type. If your integration suddenly prints the JSON payload data instead of rendering the generated message, make sure your integration is returning the application/json content-type to retain previous behavior.

2 - By default, user-supplied URLs such as those used for Open Graph metadata, webhooks, or slash commands will no longer be allowed to connect to reserved IP addresses including loopback or link-local addresses used for internal networks.

This change may cause private integrations to break in testing environments, which may point to a URL such as http://127.0.0.1:1021/my-command.

If you point private integrations to such URLs, you may whitelist such domains, IP addresses, or CIDR notations via the AllowedUntrustedInternalConnections config setting in your local environment. Although not recommended, you may also whitelist the addresses in your production environments. See documentation to learn more.

Push notification, OAuth 2.0 and WebRTC server URLs are trusted and not affected by this setting.

3 - Uploaded file attachments are now grouped by day and stored in /data/<date-of-upload-as-YYYYMMDD>/teams/... of your file storage system.

4 - Mattermost /platform repo has been separated to /mattermost-webapp and /mattermost-server. This may affect you if you have a private fork of the /platform repo. More details here.

Removed and Deprecated Features 

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

For a list of past and upcoming deprecated features, see our website.

config.json 

The following settings were unintentionally added to config.json and are removed in Mattermost 4.2.

  • Under SupportSettings in config.json:

    • "AdministratorsGuideLink": "https://about.mattermost.com/administrators-guide/"

    • "TroubleshootingForumLink": "https://about.mattermost.com/troubleshooting-forum/"

    • "CommercialSupportLink": "https://about.mattermost.com/commercial-support/"

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added AllowedUntrustedInternalConnections": "" to specify domains, IP address or CIDR notations for internal connections. Used in testing environments when developing integrations locally on a development machine. Not recommended for use in production.

  • Under TeamSettings in config.json:

    • Added EnableXToLeaveChannelsFromLHS: false to set if a user can leave a channel by clicking “X” next to a channel in the channel sidebar. This setting is Beta and may be replaced or removed in a future release.

  • Under FileSettings in config.json:

    • Added AmazonS3Trace: false to enable additional debugging for Amazon S3.

Additional Changes to Enterprise Edition:

  • Under ElasticsearchSettings in config.json:

    • Added AggregatePostsAfterDays": "" to specify the age at which indexes will be aggregated as part of the daily scheduled job

    • Added PostsAggregatorJobStartTime": "" to specify the start time of the daily scheduled aggregator job.

  • Under TeamSettings in config.json:

    • Added ExperimentalTownSquareIsReadOnly: false to set if Town Square is a read-only channel. Applies to all teams in the Mattermost server. This setting is Beta and may be replaced or removed in a future release.

  • Added ThemeSettings in config.json. These settings are Beta and may be replaced or removed in a future release.

    • Added "EnableThemeSelection": true to set whether end users can change their Mattermost theme.

    • Added "DefaultTheme": "default" to set default theme for new users.

    • Added "AllowCustomThemes": true to set whether end users can set a custom theme.

    • Added "AllowedThemes": [] to list which built-in Mattermost themes are available to users.

API v4 Changes 

  • It is recommended that any new integrations use APIv4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

Added routes (API v4)

  • POST at /posts/{post_id}/actions/{action_id}

    • To perform a post action, which allows users to interact with integrations through messages.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • Clicking on a channel during the tutorial makes the tutorial disappear.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • First load of the emoji picker is slow on low-speed connections or on deployments with hundreds of custom emoji.

  • Scrollbar is sometimes not visible in the left-hand sidebar after switching teams.

  • Certain code block labels don’t appear while scrolling on iOS mobile web.

  • Deleted message doesn’t clear unreads or unread mentions.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms.

  • Searching with Elasticsearch enabled may not always highlight the searched terms.

  • Channel links to channels that the current user does not belong to may not render correctly.

  • Pinned posts list header sometimes shows an incorrect channel name.

  • Missing an indication if a message is pending but not yet sent.

  • Searching for users with one or two-letter names doesn’t work.

Release v4.1.2 - Feature Release 

Security Update 

Highlights 

JIRA App 

  • Built-in JIRA integration that can post to multiple channels using a single webhook. See documentation

Personal Access Tokens 

  • Enables easier and more flexible integrations by authenticating against the REST API. See documentation

Updated iOS and Android Apps 

  • v1.1 of the Native iOS and Android Apps are released with support for search, group messaging, viewing emoji reactions and improved performance on poor connections.

Elasticsearch Beta (Enterprise Edition E20) 

  • Connect your Elasticsearch server to Mattermost, then build and manage your post index via the System Console interface.

  • Elasticsearch is a distributed, RESTful search engine supporting highly efficient database searches in a cluster environment.

Improvements 

Web User Interface 

  • Ephemeral messages now note that they are “(Only visible to you)” .

  • Navigating to an invalid team invite link will now redirect to an error page.

  • Cropping of image thumbnails now looks the same before and after posting.

  • Clicking on @mentions will now open the contact card for the user.

  • User lists now display full name and nickname.

  • Added over 500 new emoji.

  • Searching on slow connections now shows a loading spinner in the right-hand side.

  • Added a close button next to link previews.

  • Ephemeral messages will now always appear as parent posts.

  • Added […] menu to search results, pinned posts and flagged posts lists.

  • Clicking the username in a profile popover inserts the username to the message box.

Notifications 

  • Added an option to Push Notification Contents to send no channel name or message text

  • Updated the default email frequency to 15 minutes if email batching is enabled by the System Admin.

  • Users are now prompted from Account Settings to set Edge notification sounds in their browser settings.

  • Updated the desktop notification text for incoming webhooks to more accurately reflect the payload.

Files 

  • File uploads in a single message are ordered based on time of upload. When multiple files are selected, files are ordered in alphabetical order based on file name.

Administration 

  • No longer require a refresh after a user is promoted to a Team Admin.

  • Announcement banner now supports URLs.

  • Bulk importer now supports user preferences, including favorite channels, flagged posts and notification preferences.

  • Changed username to be the default name display setting in the System Console.

  • Channel member list now follows the Teammate name display configuration setting.

  • Added more debugging info to server logs for failed OAuth requests.

  • Added a new System Console push notification content setting to only display sender name.

  • Added support for unauthenticated, but encrypted SMTP connection.

Integrations 

  • Null values are now ignored in webhook attachments.

  • Outgoing webhooks can now fire if the post contains only an attachment.

  • Added /code built-in slash command to create a code block.

  • Added /purpose built-in slash command to set the channel purpose.

  • Added /rename built-in slash command to rename the channel.

  • Added /leave built-in slash command to leave a channel.

Enterprise Edition E20 

  • Added a System Console setting to disable file uploads and downloads on mobile.

  • Added a new Email Notification Content setting to specify the amount of detail sent in email notification.

  • Added support for server-side encryption of files in Amazon S3, using Amazon S3-managed keys.

Bug Fixes 

  • Fixed incorrectly rotated image thumbnails that were uploaded from mobile devices.

  • Adding or removing reactions from a post with an image preview no longer causes the preview to expand or collapse.

  • JavaScript error no longer thrown when file upload fails due to network interruption.

  • Error messages in Account Setting fields no longer stack.

  • Fixed Slack Import of non-ascii channel names.

  • Changing the search term in the More Direct Messages member list now resets the search.

  • Help text for the Channel Switcher (CTRL/CMD+K) is now shown on small desktop windows, and removed on mobile.

  • Keyboard shortcut for Account Settings (CTR/CMD+SHIFT+A) now toggles.

  • Fixed the Preview button in the text input box and message edit modal.

  • Fixed a JavaScript error when switching teams while uploading a file.

  • CLI tool to delete all users no longer requires a user argument.

  • CLI tool now deletes webhooks and slash commands when deleting teams and channels.

  • Custom slash commands no longer throw an error if used in a Direct Message channel.

  • System Console now reads and honors the Amazon S3 Region setting.

  • Fixed whitespace and trimming on code blocks and empty table cells.

  • Disabled the “Create Account” button after the first click so the system does not attempt to create the account twice.

  • More Channels modal no longer stops paging after the first two pages.

  • Editing channel names now correctly limits character count to 22.

  • Fixed broken links on the System Console > Mobile Push page.

  • /away and /offline ephemeral messages can no longer contain extra text posted with the slash command.

  • Fixed teams being sometimes incorrectly marked unread across tabs.

  • Fixed JavaScript error thrown when viewing a channel containing an invalid emoji reaction.

  • Periods after URLs are no longer added to the link.

  • Recent emoji in emoji picker no longer shows deleted custom emoji.

  • Fixed image thumbnails and previews on IE11.

  • Fixed message attachments in incoming webhooks and slash commands not always truncating properly.

  • Non-admins can now view their previously created integrations.

Compatibility 

Removed and deprecated features 

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

For a list of past and upcoming deprecated features, see our website.

config.json 

The following settings were unintentionally added to config.json and will be removed in Mattermost 4.2, released on September 16th.

  • Under SupportSettings in config.json:

    • "AdministratorsGuideLink": "https://about.mattermost.com/administrators-guide/"

    • "TroubleshootingForumLink": "https://about.mattermost.com/troubleshooting-forum/"

    • "CommercialSupportLink": "https://about.mattermost.com/commercial-support/"

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • "EnableUserAccessTokens": false to enable personal access tokens for integrations to authenticate against the REST API

  • Under EmailSettings in config.json:

    • Added "EnableSMTPAuth": false to support SMTP servers requiring no authentication

    • Added "EmailNotificationContentType": "full" to specify the amount of detail sent in email notification contents

Additional Changes to Enterprise Edition:

  • Under FileSettings in config.json:

    • Added "AmazonS3SSE": false to enable server-side encryption for files in Amazon S3.

    • Added "EnableMobileUpload": true to enable file uploads on mobile devices

    • Added "EnableMobileDownload": true to enable file downloads on mobile devices

  • Under JobSettings in config.json:

    • Added "RunJobs": true to enable running jobs on the jobs server

    • Added "RunScheduler": true to enable scheduling jobs on the job server

  • Under ElasticsearchSettings in config.json:

    • Added "ConnectionUrl": "http://dockerhost:9200" to set the URL of the Elasticsearch server

    • Added "Username": "" to specify the username to access the Elasticsearch server

    • Added "Password": "" to specify the password to access the Elasticsearch server

    • Added "EnableIndexing": false to enable Elasticsearch indexing

    • Added "EnableSearching": false to enable searching using Elasticsearch

    • Added "Sniff": true to enable sniffing on the Elasticsearch server

    • Added "PostIndexReplicas": 1 to specify how many replicas to use for each post index

    • Added "PostIndexShards": 1 to specify how many shards to use for each post index

Database Changes 

UserAccessToken Table:

  • Added table

JobStatuses Table:

  • Removed table

Jobs Table:

  • Added table

Users Table:

  • Modified Roles column maximum size from 64 to 256 characters

API v4 Changes 

  • Mattermost 4.0 has a stable release of API v4 endpoints. It is recommended that any new integrations use the v4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

Added routes (API v4) See api.mattermost.com for more details:

  • GET at api/v4/jobs

  • POST at api/v4/jobs

  • GET at api/v4/jobs/{job_id:[A-Za-z0-9]+}

  • POST at api/v4/jobs/{job_id:[A-Za-z0-9]+}/cancel

  • GET at api/v4/jobs/type/{job_type:[A-Za-z0-9_-]+}

  • POST at api/v4/elasticsearch/purge_indexes

  • POST at api/v4/users/{user_id:[A-Za-z0-9]+}/tokens

  • GET at api/v4/users/{user_id:[A-Za-z0-9]+}/tokens

  • GET at api/v4/users/{user_id:[A-Za-z0-9]+}/tokens/{token_id:[A-Za-z0-9]+}

  • POST at api/v4/users/{user_id:[A-Za-z0-9]+}/tokens/revoke

Known Issues 

  • Google login fails on the Classic mobile apps.

  • Clicking on a channel during the tutorial makes the tutorial disappear.

  • User can receive a video call from another browser tab while already on a call.

  • Jump link in search results does not always jump to display the expected post.

  • First load of the emoji picker is slow on low-speed connections or on deployments with hundreds of custom emoji.

  • Scrollbar is sometimes not visible in the left-hand sidebar after switching teams.

  • Certain code block labels don’t appear while scrolling on iOS mobile web.

  • A public channel doesn’t always show up in another browser tab or client until after refresh.

  • Deleted message doesn’t clear unreads or unread mentions.

  • Changing the search term in the More Direct Messages modal doesn’t reset the page.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Searching stop words in quotes with Elasticsearch enabled returns more than just the searched terms

  • Searching with Elasticsearch enabled may not always highlight the searched terms

  • Channels links to channels that the current user does not belong to may not render correctly

Contributors 

Many thanks to all our contributors. In alphabetical order:

/mattermost-server

/docs

/mattermost-mobile

/mattermost-push-proxy

/mattermost-redux

/mattermost-api-reference

/mattermost-kubernetes

/mattermost-docker

/mattermost-load-test

/mattermost-bot-sample-golang

Release v4.0.5 - Feature Release 

  • v4.0.5, released 2017-09-16

  • v4.0.4, released 2017-08-18

    • Mattermost v4.0.4 contains multiple security fixes ranging from low to high severity. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed issue when using single-sign-on with GitLab where using a non-English language option in System Console > Localization sometimes resulted in a login failure.

  • v4.0.3, released 2017-08-10

    • Fixed issue with AmazonS3Region config setting being ignored in Minio file storage setup.

    • Fixed issue when using high availability mode in Enteprise Edition E20 where the bind address wasn’t set correctly for the hashicorp memberlist.

  • v4.0.2, released 2017-07-31

    • Fixed issue when using single-sign-on with GitLab (and in Enterprise Edition with SAML, Office365 and G Suite), where using a non-English language option in Account Settings resulted in a login failure.

    • Fixed issue with custom slash commands not working in direct message channels.

    • Fixed issue with GitLab and SAML single sign-on in Mattermost mobile apps redirecting to a browser page.

  • v4.0.1, released 2017-07-18

    • Fixed issue where pinning or un-pinning messages didn’t work if AllowTimeLimit config setting is set to Never.

    • Fixed issue where uploading or removing the Service Provider Public Certificate file in System Console > SAML refreshed the page, losing all unchanged settings.

    • Fixed deactivated users appearing in channel member, team member and direct message lists.

    • Fixed PDF previews not loading.

  • v4.0.0, released 2017-07-16

    • Original 4.0.0 release

Security Update 

Highlights 

Native iOS and Android Apps 

Updated Web User Interface 

  • Updated the appearance of channel header and channel sidebar in the web user interface.

  • Updated the default theme, “Mattermost”. To try it, go to Account Settings > Display > Theme.

Emoji Picker 

  • The emoji picker offers quick access to emoji when composing messages or adding reactions.

  • Promoted from Beta, and enabled to all users by default.

Languages 

  • Added Italian translations to the user interface.

API v4 (Stable Release) 

  • Mattermost webapp moved to API v4 endpoints, which allow for more powerful integrations and server interaction.

  • API v3 endpoints are supported until January 16, 2018. To learn more about migrating to APIv4 endpoints, see https://api.mattermost.com/.

High Availability (Enterprise Edition E20) 

  • Mattermost servers are dynamically added and removed based on discovery and their cluster name using the hashicorp memberlist.

  • Added support for experimental gossip protocol, where the server will attempt to communicate via the gossip protocol over the gossip port.

Improvements 

Web User Interface 

  • Adjusted post spacing to be consistent across Markdown formatting, replies and consecutive posts.

  • On hover colour for pin and channel member icons now consistent with flag and recent mentions icons.

  • Emojis are now vertically aligned in post view.

  • Channel name, header and purpose now update in real time for all users.

  • For reply threads in the center channel, the “Commented on” phrase now respects the teammate name display config setting.

  • Code block language tag is no longer selectable making it easier to copy the code.

  • Aligned the search box with right-hand side reply thread.

  • New user profile pictures now update for other users upon refresh.

  • Improved rendering of @mention highlighting in message view.

Mobile Web 

  • Added “Create Team” and “Leave Team” options to the Main Menu.

  • Updated the look of Account Settings pages on mobile.

  • User profile popover no longer gets cropped in the center channel on iOS browser.

  • Link preview image now resizes correctly on iOS browser.

Notifications 

  • Unread messages and mentions now sync across browser tabs and devices.

  • Improved desktop notifications for webhook attachments.

Emoji Picker & Custom Emoji 

  • Newly created custom emoji immediately display to all users without requiring a refresh.

  • Improved position of the emoji picker near the top of the channel or the right-hand side comment thread.

Keyboard Shortcuts 

  • CTRL+SHIFT+K shortcut now toggles the Direct Message dialog open and closed.

  • SHIFT+UP now opens a reply thread for the most recent message posted by a user, skipping system messages.

Slash Commands 

  • Added the following built-in slash commands:

    • /header command to set the channel header.

    • /help command to open the Mattermost help page in a new browser tab.

    • /open command to switch or join a channel.

    • /search command to search text in messages.

    • /settings command to open the Account Settings dialog.

  • /invite_people slash command is now disabled when account creation is set to false.

  • If a message starts with a / but fails to send (either due to timeout or invalid command), the message is put back to the input box.

Bulk Import Tool 

  • Added support for Direct Message channels and posts to the bulk import tool.

Authentication 

  • User creation via OAuth (GitLab/Google/Office365) properly restricted to accepted domains, if specified.

  • Invite New Member dialog validates email addresses against accepted domains, if set.

New URL Routes 

  • Added the ability to Direct Message by email or username with the following new routes for Direct Message channels:

    • .../teamname/messages/@username

    • .../teamname/messages/email

    • .../teamname/messages/user_id (redirects to ...teamname/messages/@username)

    • .../teamname/messages/id1_id2 (redirects to ...teamname/messages/@username)

  • Also added a new route for Group Message channels:

    • .../teamname/messages/generated_id

Enterprise Edition 

  • When a SAML user uses a non-supported locale, the language now defaults to English, preventing login issues.

Bug Fixes 

  • Emoji picker now closes in Firefox when clicking outside of it.

  • […] menu no longer disappears in the comment thread when hovering over another post.

  • New direct messages received while in no teams do not show as unread after rejoining a team.

  • Fixed JavaScript errors when receiving messages when not belonging to a team.

  • An empty push notification no longer sent for messages only containing file attachments.

  • Custom emoji search results no longer filter by creator’s first and last name.

  • /expand and /collapse slash commands now properly collapse images in website link previews.

  • Group Message channels that are favorited can now be closed.

  • Deactivated users now properly listed in Direct and Group Message channels in the left-hand sidebar.

  • Fixed search in team and channel Manage Members dialog.

  • File upload cancelled if you click “x” on thumbnail while file is uploading in your message draft.

  • Status no longer appears offline after joining a new team.

  • An empty push notification is no longer sent for messages only containing file attachments.

  • Center channel maintains scroll position when new messages are received in the channel.

  • Deleting the focused post in permalink view now sends user to normal channel view.

  • Max Users per Team setting in System Console > Users and Teams no longer includes inactive users.

Compatibility 

Breaking Changes 

  • If you are using NGINX as a proxy for the Mattermost Server, replace the location /api/v3/users/websocket { line with location ~ /api/v[0-9]+/(users/)?websocket$ { in the /etc/nginx/sites-available/mattermost NGINX configuration file. See documentation to learn more.

  • If you are upgrading a High Availability Cluster: When upgrading from 3.10 or earlier to 4.0 or later, you must manually add new items to the ClusterSettings section of your existing config.json. For more information about this, see the Upgrading to Version 4.0 and Later section of :doc:../deployment/cluster.

  • Microsoft Edge v39 and earlier (EdgeHTML v14 and earlier) has an issue that may case errors during account creation, login and if MFA is enforced. We recommend upgrading to Edge v40 (or EdgeHTML v15).

Removed and deprecated features 

  • System Console settings in Files > Images removed. This includes:

    • Image preview height and width

    • Profile picture height and width

    • Image thumbnail height and width

  • Font setting in Account Settings > Display removed.

  • Account Settings option Display > Teammate Name Display moved to the System Console.

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "EnableEmojiPicker": true to control whether emoji picker is enabled on the server. Enabling the emoji picker with a large number of custom emoji may slow down performance.

    • Added "EnableChannelViewedMessages": true to control whether channel_viewed WebSocket event is sent, which syncs unreads across clients and devices. Setting to false can lead to higher performance in large deployments.

    • Added "EnableAPIv3": true to control whether version 3 endpoints of the REST API are allowed on the server. If the setting is disabled, integrations that rely on API v3 will fail and can then be identified for migration to API v4.

  • Under TeamSettings in config.json:

    • Added "TeammateNameDisplay": "username" to set how to display users’ names in posts and the Direct Messages list. Deployments with LDAP or SAML enabled will have this set to full_name by default for better experience.

  • Under FileSettings in config.json:

    • Removed System Console settings in Files > Images, including:

      • "ThumbnailWidth": 120

      • "ThumbnailHeight": 100

      • "PreviewWidth": 1024

      • "PreviewHeight": 0

      • "ProfileWidth": 128

      • "ProfileHeight": 128

  • Under SqlSettings in config.json:

    • Modified "QueryTimeout": 30 to also support query timeouts on PostgreSQL, in addition to MySQL.

Additional Changes to Enterprise Edition:

  • Under ClusterSettings in config.json:

    • Added "ClusterName": "" to set the cluster to join by name. Only nodes with the same cluster name will join together. This is to support Blue-Green deployments or staging pointing to the same database.

    • Added "OverrideHostname": "" to override the hostname of this server with this property. It is not recommended to override the Hostname unless needed.

    • Added "UseIpAddress": true to control whether the cluster attempts to communicate using the IP Address.

    • Added "UseExperimentalGossip": false to control whether the server attempts to communicate via the gossip protocol over the gossip port.

    • Added "ReadOnlyConfig": true to control whether changes made to settings in the System Console are ignored. When running in production it is recommended to set this value to true.

    • Added "GossipPort": 8074 to set the port used for the gossip protocol. Both UDP and TCP should be allowed on this port.

    • Added "StreamingPort": 8075 to set the port used for streaming data between servers.

    • Removed "InterNodeListenAddress": ":8075" as this setting is no longer used.

    • Removed "InterNodeUrls": [] as this setting is no longer used.

API v4 Changes 

  • Mattermost 4.0 has a stable release of API v4 endpoints. It is recommended that any new integrations use the v4 endpoints. For more details, and for a complete list of available endpoints, see https://api.mattermost.com/.

  • All APIv3 endpoints are scheduled for removal on January 16, 2018.

Added routes (API v4)

  • GET at /teams/invite/{invite_id}

    • To retrieve information about a team (including the name and id) corresponding to an invite_id.

Modified routes (API v4)

  • DELETE at /teams/{team_id}

    • Added an optional query parameter, permanent, to permanently delete a team for compliance reasons.

  • GET at /users

    • Added the sort query parameter to add basic sorting when selecting users on a team.

  • GET at /emoji

    • Added paging to the /emoji call for increased performance.

  • POST at /teams/{team_id}/import

    • Updated to return a JSON body with the import results under a results JSON field to allow more data to be returned in the future without breaking changes.

Websocket Event Changes 

Added:

  • channel_updated that occurs each time channel information is updated (such as name or header), so that the changes are propagated across clients.

  • channel_viewed that occurs each time you view a channel, propagating the event to all clients and devices and syncing unreads.

Known Issues 

  • Google login fails on the Classic mobile apps.

  • Edge overlays desktop notification sound and system notification sound.

  • Clicking on a channel during the tutorial makes the tutorial disappear.

  • User can receive a video call from another browser tab while already on a call.

  • Search autocomplete picker is broken on Classic Android app.

  • Jump link in search results does not always jump to display the expected post.

  • First load of the emoji picker is slow on low-speed connections or on deployments with hundreds of custom emoji.

  • Scrollbar is sometimes not visible in the left-hand sidebar after switching teams.

  • Certain code block labels don’t appear while scrolling on iOS mobile web.

  • Outgoing webhooks do not fire when posts have no text content.

  • A public channel doesn’t always show up in another browser tab or client until after refresh.

  • Null values in Slack attachments cause a 500 error for incoming webhooks.

  • Keyboard shortcut CTRL/CMD+SHIFT+A does not close Account Settings.

  • Deleted message doesn’t clear unreads or unread mentions.

  • Changing the search term in the More Direct Messages modal doesn’t reset the page.

  • Status may sometimes get stuck as away or offline in High Availability mode with IP Hash turned off.

  • Cannot delete or edit parent posts in right-hand side reply threads.

  • Empty cells in Markdown tables render incorrectly.

  • platform user deleteall CLI command expects a user as an argument.

Release v3.10.3 

  • v3.10.3, released 2017-08-18

    • Mattermost v3.10.3 contains multiple security fixes ranging from low to high severity. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed issue when using single-sign-on with GitLab where using a non-English language option in System Console > Localization sometimes resulted in a login failure.

  • v3.10.2, released 2017-07-18

  • v3.10.1, released 2017-07-16

    • Mattermost v3.10.1 contains a high severity security fix for an OAuth SSO vulnerability and two additional fixes for low severity security issues. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

  • v3.10.0, released 2017-06-16

    • Original 3.10 release

Highlights 

Languages 

  • Added Turkish translations for the user interface.

New and Improved Keyboard Shortcuts 

  • Redesigned the channel switcher (CTRL/CMD+K) for increased productivity.

  • Browse direct and group message channels (CTRL/CMD+SHIFT+K) and reply to the most recent message (SHIFT+UP) with new shortcuts.

Improvements 

Web User Interface 

  • Enter key now confirms deletion on the screens to delete a custom emoji and delete a channel.

  • Team and channel URLs now replace accented characters with their ASCII equivalents.

  • Recent mentions and flagged posts icons in the header are now highlighted when they are active in the right-hand sidebar.

  • Empty rows are now ignored in the Send Email Invite modal.

  • Enter key now confirms leaving a team from the Leave Team modal.

  • Profile popover now opens when clicking a username in mobile browser view.

  • /join now allows switching to a private channel to which the user has access.

  • Improved the formatting of Mattermost content when copying and pasting to other apps.

  • Added the ability for users to view and modify their online status from their profile picture in the header.

  • /loadtest command changed to /test.

  • Ephemeral messages are removed from the right-hand sidebar after it is reopened.

  • Added a markdown preview option to the message editing modal.

  • Status indicators are now shown in the Direct Messages list.

Notifications 

  • Added “@here” to the list of channel-wide mentions in Account Settings.

  • Added a reminder when your Mattermost window is refreshed if a status override slash command is used to set yourself as /away or /offline.

  • Users will see a confirmation dialog when attempting to use @all or @channel in a channel with over 5 users.

  • Messages for others being added to a channel no longer trigger channels to be unread.

Administration 

  • Added CLI tool for permanently deleting channels.

  • Channel Admins can now delete user’s messages within their channel if permitted in the System Console.

  • Errors are now logged when failing to load config through the command line.

  • Reduced unnecessary database reads and writes when bulk importing users.

System Console 

  • System Console main dropdown menu now has links to the Admin Guide, Troubleshooting Forum, Commercial Support Page and the About Mattermost dialog.

  • Added the ability to enable Legacy Signature (AWS Signature V2) with S3 compatible servers.

Authentication 

  • Added a redirect to the appropriate team, channel or post if navigating to a Mattermost URL when logged out.

  • Clicking a team invite link now joins the team in all active sessions.

Performance 

  • Upgraded GORP to support connection timeouts on MySQL and missing database columns on MySQL and Postgres.

Integrations 

  • Posts from webhooks that are greater than 4000 characters are now broken into multiple posts.

Enterprise Edition 

  • Added an announcement banner visible to all end users to make maintenance announcements across the system.

Bug Fixes 

  • Dragging and dropping a file onto the left-hand sidebar no longer navigates away from Mattermost to open the file in the browser.

  • Textbox will no longer overlap the center pane message area as it expands when typing.

  • Fixed an issue where statuses could get stuck online after quitting the desktop app or closing the browser window in some cases.

  • Profile pictures uploaded on mobile are now rotated in their correct orientation.

  • The System Console help text for Minimum Password Length no longer dynamically updates as the input is changed.

  • Fixed an issue where the autocomplete list may appear underneath a modal overlay.

  • Updated error text when uploading a profile picture that is in an unsupported image format.

  • Joined channels no longer appear in the “More…” channels list.

  • Wide markdown images no longer cause horizontal scrolling in the center pane.

  • Fixed theme styling for button active states.

  • Fixed an issue where channels sometimes did not appear read if the channel was in focus when a new message was received.

  • Fixed an issue where the autocomplete list would not close after using a slash command.

  • Removed the system warning message that appears if mentioning a user that is not a member of a group message.

  • Fixed an issue where wide embedded images produce horizontal scroll.

  • Fixed a Javascript error that would occur when opening the System Console > SAML page.

  • Removed the Channel Admin user interface in Team Edition since the policy restrictions are only available in Enterprise Edition.

  • Adding a reaction to an ephemeral message no longer throws a Javascript error.

  • Fixed an issue where clicking autocomplete suggestions would not populate the search box with the appropriate text.

  • Fixed an issue where the System Console users list ignored the search term after selecting a team from the filter.

  • Channel header messages no longer appear cut-off if using a slash.

  • Corrected the formatting of the “Edited” indicator in the right-hand sidebar.

  • Fixed the positioning of the pin icon and channel header on Edge.

Compatibility 

Removed and deprecated features 

  • System Console settings in Files > Images scheduled for removal in July 2017 release. This includes:

    • Image preview height and width

    • Profile picture height and width

    • Image thumbnail height and width

  • Font setting in Account Settings > Display scheduled for removal in July 2017 release.

  • Account Settings options for Display > Display Font and Display > Teammate Name Display are scheduled for removal in July 2017 release.

  • All APIv3 endpoints are scheduled for removal six months after APIv4 is stable.

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "GoroutineHealthThreshold": -1, to set a threshold for number of goroutines.

  • Under SqlSettings in config.json:

    • Added "QueryTimeout": 30 to set the number of seconds to wait for a response from the database after opening a connection and sending the query.

  • Under FileSettings in config.json:

    • Added "AmazonS3SignV2": false to enable Legacy Signature (AWS Signature V2) with S3 compatible servers.

Additional Changes to Enterprise Edition:

  • Under AnnoucementSettings in config.json:

    • Added "EnableBanner": false, to enable an announcement banner visible for all users.

    • Added "BannerText": "", to specify the text shown in the banner.

    • Added "BannerColor": "#f2a93b", to set the banner background color.

    • Added "BannerTextColor": "#333333", to set the banner text color.

    • Added "AllowBannerDismissal": true to set whether the banner can be dismissed by users.

API Changes 

  • Mattermost 3.10 has a release candidate of APIv4 endpoints. To see the complete list of available endpoints, see https://api.mattermost.com/v4/.

  • All APIv3 endpoints are scheduled for removal six months after APIv4 is stable.

Modified routes (APIv4)

  • /system/ping updated to return 500 Internal Server Error with {"status": "unhealthy"} in the response body when GoroutineHealthThreshold is set in config.json and the number of goroutines on the server exceeds that threshold. If the number of goroutines is below the threshold or GoroutineHealthThreshold is not set in config.json, 200 OK is returned with no response body.

Known Issues 

  • Google login fails on the mobile apps.

  • Edge overlays desktop notification sound and system notification sound.

  • Status appears offline briefly after joining a new team.

  • User popover can get cropped in the center channel on iOS.

  • Clicking on a channel during the tutorial makes the tutorial disappear.

  • Custom emoji search results filter by the creator’s first/last name in addition to the emoji name.

  • Reactions are displayed on messages deleted by other users.

  • User can receive a video call from another browser tab while already on a call.

  • Search autocomplete picker is broken on Android.

  • Jump link in search results does not always jump to display the expected post.

  • First load of the emoji picker is slow on low-speed connections.

  • Emoji picker for reactions doesn’t always position correctly.

  • Scrollbar is sometimes not visible in the left-hand sidebar after switching teams.

  • New direct messages received while in no teams do not show as unread after joining a team.

  • User is not logged out immediately when logging self out from Active Sessions list.

  • Certain code block labels don’t appear while scrolling on iOS mobile web.

  • CTRL+SHIFT+K doesn’t toggle modal open and closed.

  • Deactivated users do not appear in the Direct Message and Group Message sidebar channel list.

  • Outgoing webhooks do not fire when posts have no text content.

Contributors 

Many thanks to all our contributors. In alphabetical order:

/mattermost-server

/docs

/mattermost-api-reference

/mattermost-redux

/mattermost-mobile

/desktop

/mattermost-docker

/android

/mattermost-selenium

/gorp

/ios

/mattermost-kubernetes

Release v3.9.2 

  • v3.9.2, released 2017-07-18

  • v3.9.1, released 2017-07-16

    • Mattermost v3.9.1 contains a high severity security fix for an OAuth SSO vulnerability and two additional fixes for low severity security issues. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

  • v3.9.0, released 2017-05-16

    • Original 3.9 release

Security Update 

  • Mattermost v3.9.0 contains a low severity security update. Upgrading to Mattermost v3.9.0 is highly recommended.

Highlights 

Languages 

  • Added Polish translations for the user interface.

Redux 

  • Mattermost Webapp moved over to Redux for increased performance and more stable infrustructure.

APIv4 Release Candidate 

  • Mattermost HTTP REST APIs moved to v4 endpoints allowing for more powerful integrations and server interaction.

  • To learn more about the available APIv4 endpoints, see our documentation.

  • APIv3 endpoints are supported until six months after the stable release of APIv4 endpoints in Q3 of 2017.

Improvements 

Web User Interface 

  • Lower and upper vertical margins for posts are now equal.

  • Comments only containing a file attachment have a reduced vertical spacing in the center channel.

  • First line of message text is now aligned with username.

  • Added padding between timestamp and pinned posts badge in comment threads in compact view.

  • Added “View Members” option to Town Square.

  • Moved “Start Video Call” option to the bottom of the profile popover.

  • Added a confirmation dialog when leaving a private channel.

  • User preferences such as display settings now sync between browser tabs, between different browsers, and across devices.

Performance 

  • Added the ability to isolate searches to specific read-replicas for full text search queries for higher performance.

  • Added default read and write timeouts for MySQL datasource to prevent hub processing deadlock.

  • Added password field to the bulk import tool.

  • Added the ability to disable full text search queries and statuses via config.json for higher performance.

Emoji Picker (Beta) 

  • Enable the emoji picker in Account Settings > Advanced > Preview pre-release features.

  • Custom emoji now maintains aspect ratio in the emoji picker.

  • Improved user experience for closing the Emoji picker after reacting to a message.

Keyboard Shortcuts 

  • Added a link to keyboard shortcuts documentation via the team Main Menu.

  • Pressing ENTER once in the channel switcher (CTRL/CMD+K) now switches the channel.

  • Using a mouse to select a channel in the channel switcher (CTRL/CMD+K) now switches to the correct channel.

Markdown Text Formatting 

  • Added a margin for Markdown inline images.

  • Improved Markdown heading sizes in the desktop view.

On-Boarding 

  • Added “Already have an account? Click here to sign in” link to the sign up page.

  • Improved experience of joining a team using an invite link.

Files 

  • SVG files now render in file preview.

CLI Tool 

  • Added new CLI commands:

    • platform config validate for validating the config.json file.

    • platform user search for searching users based on username, email, or user ID.

OAuth 2.0 Service Provider 

  • OAuth 2.0 service provider now always returns the refresh token.

  • New refresh token now issued when granting a new access token.

System Console 

  • Added a confirmation dialog when deactivating a user.

  • Server logs are now always printed in English regardless of Default Server Language, for easier troubelshooting.

  • The AllowCorsFrom config setting (in System Console > Connections > Enable cross-origin requests from) now supports multiple domain names.

  • Added a setting to disable file and image uploads on messages.

Enterprise Edition 

  • Added new performance monitoring metrics for

    • The total number of connections to all the search replica databases

    • The total number of WebSocket broadcasts sent

Bug Fixes 

  • Long custom emoji names no longer float out of the emoji picker.

  • Deleted custom emojis no longer stay in “recently used” section of the emoji picker.

  • The maximum length of the “Position” field increased to 64 characters in the database. The previous limit caused problems with LDAP synchronization.

  • Pinning a post in center channel no longer changes pinned posts list in the right-hand sidebar.

  • Pinning a post in center channel now adds the pinned post badge to search results.

  • Fixed error message text for Edit URL field in channel creation dialog.

  • Disabled config file watcher while running from makefile.

  • Fixed Go client’s GetTeamByName() function.

  • Recent mentions search now properly includes @[username] in the search.

  • Updated error message when entering a password longer than maximum number of characters.

  • Don’t send the same message multiple times when hitting “Retry” on a failed post.

  • Fixed the help text for the channel purpose in private channels.

  • When ability to change the header is restricted, “Set a Header” option is no longer shown in the channel intro.

  • Mention notifications now trigger if the word is formatted in bold, italic or strikethrough, and won’t if it’s inside a code block.

  • In mobile view, Manage Members menu option no longer reads “View Members” for channel admins.

  • Usernames with dots now get mention notifications when followed by a comma or other symbol.

  • Deactivated users are no longer listed in the “Manage Members” modal.

  • Collapsible Account Setting menus now open properly in iOS Safari and Chrome browsers.

  • Removing an expired license now removes the blue bar header message.

  • “Next” button in More Channels list now takes you to the top of the next page, instead of the bottom.

  • Blue bar “Preview Mode” header message now disappears after enabling email notifications.

  • Full name is now editable in Account Settings if the first and last name attributes are not specified in System Console > Authentication > LDAP.

  • Added a back button to pinned posts list on the right-hand sidebar.

  • “Pinned” icon no longer overlaps text on consecutive posts or replies that have Markdown headings.

  • Uploading a profile picture on iOS no longer throws an error.

  • Fixed group message names in channel switcher (CTRL/CMD+K) for group messages that are not in your sidebar.

  • Channel notification preferences no longer appear saved when clicking Cancel.

  • Channel creation permissions aren’t set to channel admins when it doesn’t exist.

Compatibility 

Breaking changes: 

  • If you’re using NGINX as a proxy for the Mattermost Server, replace the location /api/v3/users/websocket { line with location ~ /api/v[0-9]+/(users/)?websocket$ { in the /etc/nginx/sites-available/mattermost NGINX configuration file. See documentation to learn more.

  • Existing email invite links, password reset links, and email verification links in emails generated by your Mattermost server will be invalidated after upgrading to v3.9.0.

  • Firefox ESR 45 has an end-of-life scheduled for June 13 and is therefore no longer supported. We recommend upgrading to Firefox ESR 52.

Removed and deprecated features 

  • System Console settings in Files > Images scheduled for removal in July 2017 release. This includes:

    • Image preview height and width

    • Profile picture height and width

    • Image thumbnail height and width

  • All APIv3 endpoints are scheduled for removal six months after APIv4 is stable.

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json, or the System Console when available.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "EnablePostSearch": true to control whether users can search messages. Disabling can lead to higher performance in large deployments.

    • Added "EnableUserStatuses": true to control whether user statuses are shown in the web user interface. Disabling can lead to higher performance in large deployments.

  • Under FileSettings in config.json:

    • Added "EnableFileAttachments": true to control whether users can upload files and images on messages.

  • Under EmailSettings in config.json:

    • Removed "PasswordResetSalt": "" given tokens are now used for signing of password reset emails.

  • Under SqlSettings in config.json:

    • Added "DataSourceSearchReplicas": [] to specify the connection strings for search replica databases for handling search queries.

Additional Changes to Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "LicenseFileLocation": "" to specify the path and filename of the Enterprise license file on disk. On startup, if Mattermost cannot find a valid license in the database from a previous upload, it will look for the file specified here.

Database Changes 

OAuthAccessData Table:

  • Added Scope column

PasswordRecovery Table:

  • Removed PasswordRecovery table and moved entries to a common token store

API Changes 

  • Mattermost 3.9 has a release candidate of APIv4 endpoints. To see the complete list of available endpoints, see https://api.mattermost.com/v4/.

  • All APIv3 endpoints to be removed six months after APIv4 endpoints are stable.

Websocket Event Changes 

  • Added preferences_changed and preferences_deleted to sync preferences between browser tabs, between different browsers, and across devices when a preference is changed or deleted.

Known Issues 

  • Google login fails on the mobile apps.

  • Slack import doesn’t add merged members/e-mail accounts to imported channels.

  • User can receive a video call from another browser tab while already on a call.

  • Sequential messages from the same user appear as separate posts on mobile view.

  • Search autocomplete picker is broken on Android.

  • Jump link in search results does not always jump to display the expected post.

  • First load of the emoji picker is slow at low connections.

  • Emoji picker for reactions doesn’t always position correctly.

  • Scrollbar is sometimes not visible in the left-hand sidebar after switching teams.

  • Emoji picker is sometimes cut off on comment threads on the right-hand sidebar.

  • User status can get stuck online after quitting the desktop app or closing the browser window.

  • New direct messages received while in no teams do not show as unread after joining a team.

  • Profile picture uploaded from mobile appears rotated.

  • User is not logged out immediately when logging self out from Active Sessions list.

  • Certain code block labels don’t appear while scrolling on iOS mobile web.

  • System Console user list filter does not show accurate results if applied after entering a search query.

Contributors 

Many thanks to all our contributors. In alphabetical order:

/mattermost-server

/docs

/mattermost-api-reference

/mattermost-redux

/desktop

/mattermost-mobile

/mattermost-docker

/mattermost-push-proxy

/mattermost-selenium

/mattermost-kubernetes

/gcm

Release v3.8.3 

Notes on Patch Release 

  • v3.8.3, released 2017-07-16

    • Mattermost v3.8.3 contains a high severity security fix for an OAuth SSO vulnerability and two additional fixes for low severity security issues. Upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

  • v3.8.2, released 2017-04-21

    • Changed the client to use window.location.origin instead of siteURL, fixing WebSocket connection issues with Mattermost 3.8 upgrade.

    • Fixed a few APIv4 endpoints in support of the next React Native mobile app release.

  • v3.8.1, released 2017-04-19

    • Mattermost v3.8.1 contains a security update and upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy.

    • Fixed an issue with Site URL sometimes breaking the OAuth2 login flow, including login using GitLab.

    • Reverted a change preventing LDAP usernames from beginning with a number.

    • Fixed a permission issue with group message channel creation.

  • v3.8.0, released 2017-04-16

    • Original 3.8 release

Security Update 

  • Mattermost v3.8.0 contains multiple security updates. Upgrading to Mattermost v3.8.0 is highly recommended.

Highlights 

Native iOS and Android Apps (Beta) 

Pinned Posts 

  • Important messages can be pinned to the channel for easy reference. Pinned posts are visible to all channel members.

Emoji Picker and Improved Emoji Reactions (Beta) 

  • The picker offers quick access to emoji when composing messages or adding reactions. Enable the emoji picker in Account Settings > Advanced > Preview pre-release features.

  • The picker is “Beta” while speed of the first load with lots of custom emoji is improved.

System Users List 

  • The System Console now consolidates all users into a system-wide list that can be filtered by team. The users list can be used to manage team membership and team roles for any user on the system.

Configure Using Environment Variables 

  • Override config.json settings using environment variables.

Improvements 

Web User Interface 

  • Date separators now appear between posts in the right-hand sidebar.

  • Non-square profile pictures are now cropped in the middle rather than being stretched.

  • Post timestamps now have an expanded date tooltip.

  • The “Add Members” modal now autofocuses on the search box when opened from the “Manage Members” modal.

  • Reduced the margins and line height in compact view.

  • There is now a confirmation dialog before deleting a custom emoji.

  • Updated the error page for invalid permalinks.

  • Updated the error page for “Private browsing not supported” in Safari.

Performance 

  • Added index and cache to reactions store

Search 

  • File attachments thumbnails are now shown in search results.

  • Flagged posts from other teams are no longer displayed.

Channels 

  • Favorite channels are now sorted alphabetically regardless of channel type.

  • Town Square now has a default channel purpose.

  • Users added to a group message are now removed from the Direct Messages search list.

  • “Private Groups” have been renamed to “Private Channels”.

Mobile 

  • Executing a search now closes the keyboard and removes the keyboard focus from the text box.

Integrations 

  • The integrations confirmation page can now be dismissed with the ENTER key.

Link Previews 

  • Updated the UI for link previews by removing an extra blue vertical bar.

  • Added support for link preview requests through a separate proxy.

Notifications 

  • Users can no longer configure email notification settings if the notifications are disabled for the system.

Onboarding 

  • Existing users on the server can now easily be added to a team via the Main Menu.

Enterprise Edition 

  • Policy controls for restricting permissions to add and remove members from private channels.

  • Added the ability to read the license file from the disk.

  • The configuration file is now reloaded after applying an Enterprise Edition license on startup.

Bug Fixes 

  • Fixed line wrapping of the timestamp in Account Settings > Security > View Access History.

  • Fixed an inconsistent error message when creating a channel with a display name of one or two characters.

  • Removed the duplicate “Back” button on the Team Creation page.

  • The AltGR key no longer triggers keyboard shortcuts.

  • Saving a team name without making changes no longer throws an error message.

  • Group messages are now sorted alphabetically with direct messages.

  • The “Create Channel” button will now only appear in the “More Channels” modal when the user has the permission to create channels.

  • The Town Square channel menu no longer has redundant dividers with certain combinations of System Console > Policy settings.

  • Fixed an issue where some conversations would not trigger the channel to appear unread in the left-hand sidebar.

  • Fixed an issue where usernames sometimes did not appear when hovering over reactions.

  • Fixed an issue where link previews would sometimes cause a horizontal scroll bar to appear.

  • iOS code blocks no longer wrap to the next line.

  • Removed an extra border in Markdown tables on iOS.

  • Usernames in the channel member list are now properly aligned.

  • Fixed a console error that was thrown when switching teams.

  • Fixed occasionial flickering of channel autocomplete.

  • Link preview images no longer appear outside of the preview container.

Compatibility 

Breaking changes: 

  • The System Console > Configuration > Site URL field is now mandatory. Set the Site URL in the System Console, or in the gitlab.rb file if you are using GitLab Mattermost.

  • Server logs are now written to the mattermost.log file located in the directory specified in System Console > Logging > File Log Directory. Set the directory name in the System Console, or in the gitlab.rb file if you are using GitLab Mattermost.

Removed and deprecated features 

  • Backwards compatibility with the old CLI tool is removed in v3.8. See documentation to learn more about the new CLI tool.

  • Deprecated APIv3 routes removed in v3.8:

    • GET at /channels/more (replaced by /channels/more/{offset}/{limit})

    • POST at /channels/update_last_viewed_at (replaced by /channels/view)

    • POST at /channels/set_last_viewed_at (replaced by /channels/view)

    • POST at /users/status/set_active_channel (replaced by /channels/view)

  • All APIv3 endpoints to be removed six months after APIv4 goes stable (replaced by APIv4 endpoints).

For a list of past and upcoming deprecated features, see our website.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

  • Under EmailSettings in config.json:

    • Added "SkipServerCertificateVerification": false to skip verification of smtp server certificates.

Additional Changes to Enterprise Edition:

  • Under TeamSettings in config.json:

    • Added "RestrictPrivateChannelManageMembers": all to set who can add and remove members from private groups.

Database Changes 

Posts Table:

  • Added IsPinned column

API Changes 

New routes (APIv3):

  • GET at /channels/{channel_id}/pinned

    • Returns the pinned posts in a channel

  • POST at /channels/{channel_id}/posts/{post_id}/pin

    • Pins a post to a channel

  • POST at /channels/{channel_id}/posts/{post_id}/unpin

    • Unpins a post from a channel

Removed routes (APIv3):

  • GET at /channels/more (replaced by /channels/more/{offset}/{limit})

  • POST at /channels/update_last_viewed_at (replaced by /channels/view)

  • POST at /channels/set_last_viewed_at (replaced by /channels/view)

  • POST at /users/status/set_active_channel (replaced by /channels/view)

Websocket Event Changes 

Added:

  • added_to_team that occurs when the current user is added to a team by another user.

Modified

  • Added a seq field to websocket events that increments with each event sent to the client.

Known Issues 

  • “Pinned” icon sometimes overlaps image posts.

  • Full name is not editable in Account Settings if the first and last name attributes are removed from System Console > Authentication > LDAP.

  • Usernames with dots do not get mention notifications when followed by a comma.

  • Slack import doesn’t add merged members/e-mail accounts to imported channels.

  • User can receive a video call from another browser tab while already on a call.

  • Sequential messages from the same user appear as separate posts on mobile view.

  • Search autocomplete picker is broken on Android.

  • Jump link in search results does not always jump to display the expected post.

  • Blue bar “Preview Mode” header message sometimes does not disappear after enabling email notifications.

  • Removing an expired license may not remove the blue bar header message until a refresh.

  • First load of the emoji picker is slow at low connections.

  • Emoji picker for reactions doesn’t always position correctly.

  • Deleted custom emoji stay in “recently used” section of the emoji picker.

  • Scrollbar is sometimes not visible in the left-hand sidebar after switching teams.

Contributors 

Many thanks to all our contributors. In alphabetical order:

/mattermost-server:

/docs:

/mattermost-redux:

/mattermost-api-reference:

/mattermost-mobile:

/mattermost-selenium:

/desktop:

/mattermost-docker:

/mattermost-kubernetes:

/mattermost-load-test:

Release v3.7.5 

Notes on Patch Release 

  • v3.7.5, released 2017-04-27

    • Fixed a number of low to moderate severity security issues, and upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy

      • Note: The System Console > Configuration > Site URL field is now mandatory. Set the Site URL in the System Console, or in the gitlab.rb file if you are using GitLab Mattermost.

  • v3.7.4, released 2017-04-13

  • v3.7.3, released 2017-03-23

  • v3.7.2, released 2017-03-17

    • Fixed an issue with LDAP, SAML, and OAuth logins where 1 and 2 character usernames displayed incorrectly

  • v3.7.1, released 2017-03-16

  • v3.7.0, released 2017-03-16

    • Original 3.7 release

Security Update 

  • Mattermost v3.7.0 contains a security update. Upgrading to Mattermost v3.7.0 is highly recommended.

Highlights 

Group Messaging 

  • Added support for multi-party direct messages, you can now quickly create conversations with a small group of people directly from the Direct Message list

Channel Push Notification Preferences 

  • Added channel notification preferences for mobile push to customize your notification settings

Bulk User Import Tool 

  • Convert your existing data into our new import format, and use this tool to import teams, channels, users and posts from other systems

Channel Admins (Enterprise E10 & E20) 

  • Added a new “Channel Admin” role to grant permissions for renaming and deleting a channel

SAML OneLogin (Enterprise E20) 

  • Added support for OneLogin authentication and account creation via SAML 2.0.

Improvements 

Performance 

  • Loading new users can now be run on a live system without a major impact on performance through the new bulk user import tool

  • Optimized SQL queries by adding index for PostId, removing ParentId from delete post queries, and fixing blank post queries

  • Increased performance for “user typing…” messages by moving the check from server to client

  • Increased performance for direct message channels by removing MakeDirectChannelVisible call and adding client handling

  • Moved channel permission checks back to using cache

  • Added caching for emoji, file info, profile images and website link previews

  • Adding index and caching to reactions

  • Increased performance when receiving messages by

    • removing the viewChannel requests when receiving a new post and only marking the channel as read when switching into it, out of it or when closing the app

    • removing the view_channel websocket event from the server

    • removing the getChannel and getTeamUnreads requests when receiving a new post

    • adding client handling for marking channels and teams unread

    • adding getMyChannelMembers request to web app when window becomes active after ten seconds

  • Increased time between database recycles

  • Improved mobile push proxy connections by disabling keep-alives

  • Fixed Minio not properly closing read objects

  • Fixed file info caching and emoji reaction issues on Aurora read replicas

  • Added reloading, removing and uploading of Enterprise license key to cache purge

Web User Interface 

  • Update status indicators shown in post view

  • Show (Edited) indicator if a message has been edited

  • (message deleted) placeholder is no longer shown to the user that deleted the message

  • Added a link to Manage Members modal from channel members list

  • Added support for image previews if the URL contains a custom query

  • Added support for all timecode formats for YouTube previews

  • System message is now posted after changing channel purpose

  • Reinstated the delete option on system messages

  • Clicking on timestamps on messages now open a permalink view

  • Removed new lines for system messages posted after updating channel header

  • Focus is set back to message box after uploading a file

  • Added machine-readable date and time to timestamps

  • Adjusted tablet view so the browser URL bar doesn’t overlap the message box

  • Channel header can now be up to 1024 characters long

  • Changed custom theme vector to a list of name value pairs to more easily add new theme colours

Mobile 

  • New push proxy server supports multiple apps (in preparation for the second generation mobile apps)

  • New push proxy server is backwards compatible with the old iOS and Android apps

  • Unread channels on the channel view are indicated with a red dot, and unread mentions with a red dot and mention count

  • Added floating timestamp to mobile right hand side

  • Send icon is disabled for messages and comments until a valid message is typed

  • Removed redundant search hint popover and updated search buttons

  • Removed “@”-symbol preceeding usernames and full names in push notifications

Text Formatting 

  • Added support for explicit image sizes in markdown

  • Terms such as _AAA_BBB_ now italicize correctly

  • First backslash is now truncated when posting file paths that start with \\

  • Markdown isn’t rendered for system messages posted after renaming a channel

  • Messages beginning with [some_text]: some_text now longer post as blank space

  • Pipe characters (|) in a Markdown table now work

Integrations 

  • Added edit screens for incoming and outgoing webhooks

  • When no username is set for a slash command response, the username of the person is now used instead of “webhook”

  • Added a confirmation dialog to prevent accidentally deleting an integration

Localization 

  • System messages are now localized based on language set in the Account Settings

Onboarding 

  • Clicking on email verification link now automatically fills in your email address on the sign in page

  • On login with GitLab SSO, Mattermost username and email are now synced with GitLab username and email

Slack Import 

  • Added support for Slack’s Markdown-like post formatting

  • Added support for topic & purpose system messages

  • Channels imported from Slack with the same name as a deleted channel now import successfully

  • Added support for users who don’t have a non-empty email address in Slack

System Console 

  • Added active users statistics to Site Statistics page

  • Focus is set to server log control in System Console > Reporting > Logs when loading the panel

Enterprise Edition 

  • Added WebSocket events, webhook events and cluster request time logging for Performance Monitoring

  • Added new policy settings to System Console > General > Policy to

    • restrict who can delete messages

    • restrict whether messages can be edited and for how long

Bug Fixes 

  • Fixed an error where a channel would no longer load after using a GitLab built-in Mattermost slash command /project issue show <number>

  • Outdated results in modal searches are now properly discarded

  • Fixed order of channels on the sidebar

  • Fixed search highlighting for wildcard searches and hashtags

  • Clicking “Send message” link in profile popover in a comment thread, now properly opens the direct message channel

  • Fixed channels missing from “More Channels” modal after leaving them

  • Fixed webhook messages not appearing in channels the creator wasn’t in

  • Angled brackets around mailto links now longer autolink

  • Fixed an issue where “New messages below” bubble didn’t disappear properly on mobile view

  • Fixed CLI panic on platform channel create command if team does not exist

  • Team invite link now directs user to a private team after account creation with LDAP

  • Create a New Team menu option is now in the Main Menu for System Admins when team creation is disabled

  • Fixed the response for malformed command execute request

  • New message indicator no longer appears for ephemeral posts

  • Fixed emoji aliases not showing up in autocomplete

  • Mention badge now properly updates on the team sidebar when switching teams

  • (at)-mention preceeded by a “#”-symbol now displays correctly

  • Don’t allow APIs to create user accounts that start with a number preventing them from signing in

  • Using a mouse to choose an emoji from the autocomplete now works

  • Fixed syntax highlighting on mobile

  • Fixed inconsistent styling of file uploads between mobile and desktop

  • Push notifications are no longer missing username when preferences set to “For all activity”

  • Fixed a bug where the Go driver was using a wrong URL for /users/claim/email_to_oauth route

Compatibility 

Removed and deprecated features 

  • Removed ServiceSettings: "SegmentDeveloperKey" setting in config.json

  • Backwards compatibility with the old CLI tool will be removed in Mattermost v3.8 April/2017 release. See documentation to learn more about the new CLI tool.

  • Deprecated APIv3 routes to be removed in Mattermost v3.8 April/2017 release:

    • GET at /channels/more (replaced by /channels/more/{offset}/{limit})

    • POST at /channels/update_last_viewed_at (replaced by /channels/view)

    • POST at /channels/set_last_viewed_at (replaced by /channels/view)

    • POST at /users/status/set_active_channel (replaced by /channels/view)

  • All APIv3 endpoints to be removed six months after APIv4 goes stable (replaced by APIv4 endpoints).)

For a list of past and upcoming deprecated features, see our website.

config.json 

Changes from v3.6 to v3.7:

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "TimeBetweenUserTypingUpdatesMilliseconds": 5000 to control how frequently the “user is typing…” messages are updated

    • Added "EnableUserTypingMessages": true to control whether “user is typing…” messages are displayed below the message box

    • Added "EnableLinkPreviews": false to control whether a preview of website content is displayed below the message

Additional Changes to Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Added "RestrictPostDelete": all to set who can delete messages

    • Added "AllowEditPost": always to set whether messages can be edited

    • Added "PostEditTimeLimit": 300 to set how long messages can be edited, if "AllowEditPost": time_limit is specified

    • Added "ClusterLogTimeoutMilliseconds": 2000 to control frequency of cluster request time logging for performance monitoring

Database Changes from v3.6 to v3.7 

Posts Table:

  • Added EditAt column

API Changes from v3.6 to v3.7 

New routes (APIv3):

  • POST at /channels/create_group

    • Creates a new group message channel

  • POST at /hooks/incoming/update

    • Updates an incoming webhook

  • POST at /hooks/outgoing/update

    • Updates an outgoing webhook

  • GET at /teams/{team_id}/...

    • Returns a post list, based on the provided channel and post ID.

  • POST at /channels/{channel_id}/update_member_roles

    • Updates the user’s roles in a channel

Websocket Event Changes from v3.6 to v3.7 

Added:

  • channel_create that occurs each time a channel is created

  • group_added that occures when a new group message channel is created

Removed:

  • view_channel that occurred when a new message was received

Known Issues 

  • Slack import doesn’t add merged members/e-mail accounts to imported channels

  • User can receive a video call from another browser tab while already on a call

  • Sequential messages from the same user appear as separate posts on mobile view

  • Edge overlays desktop notification sound with system notification sound

  • Search autocomplete picker is broken on Android

  • Jump link in search results does not always jump to display the expected post

  • Running CLI without access to logs causes panic

  • Switching channels with CTRL/CMD+K doesn’t work properly when using the mouse

  • Reacting to a deleted message in the right-hand sidebar throws an error

  • Sometimes no email verification is sent to the new email address after changing your email in Account Settings. A workaround is to sign in with the new email address and hitting “Resend Email” on the “Email not verified” page

  • Clicking “Load more messages” sometimes brings you to the bottom of the page

  • Switching to a channel with unreads sometimes doesn’t jump to the correct scrolling position

Release v3.6.7 

Notes on Patch Release 

  • v3.6.7, released 2017-04-27

    • Fixed a number of low to moderate severity security issues, and upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy

      • Note: The System Console > Configuration > Site URL field is now mandatory. Set the Site URL in the System Console, or in the gitlab.rb file if you are using GitLab Mattermost.

  • v3.6.6, released 2017-04-13

    • Fixed a number of low to high severity security issues, and upgrading is highly recommended. Details will be posted on our security updates page 14 days after release as per the Mattermost Responsible Disclosure Policy

    • Fixed an issue where Direct Messages list didn’t always properly update in the left-hand sidebar

    • Upgraded MySQL driver for better performance

  • v3.6.5, released 2017-03-23

  • v3.6.4, released 2017-03-16

  • v3.6.3, released 2017-03-16

  • v3.6.2, released 2017-01-31

  • v3.6.1, released 2017-01-19

    • Fixed a performance regression when sending many notifications at once (for example, when @all or @channel is used in a channel with many users)

    • Fixed an issue where the config flag for the CLI was not backwards compatible

    • Fixed an upgrade issue where for some databases, the Team Description index was not created properly

    • Fixed an issue with messages not showing up after computer wakes from sleep

  • v3.6.0, released 2017-01-16

    • Original 3.6 release.

Security Update 

Highlights 

Team Sidebar 

  • Added a new sidebar on left-hand side to improve cross-team notifications and team switching

  • New sidebar improves user experience on the Mattermost Desktop Apps when engaging with multiple teams

MFA Enforcement (Enterprise E10 & E20) 

  • Added support for MFA Enforcement. When set to true, all users with email or LDAP authentication are required to set up MFA for their accounts

Performance Monitoring (Enterprise E20) 

  • Added support for performance monitoring in large-scale deployments to help optimize systems for maximum performance using integrations with Prometheus and Grafana

  • Includes metrics for caching, database connections, processing, logins and messaging. See documentation to learn more

Improved Command Line Interface 

  • New version of CLI with a more intuitive interface, interactive help documentation, and some added functionality. See documentation to learn more

Improvements 

Performance 

  • Added server-based channel autocomplete, search and paging

  • Reduced lag on channel switcher (CTRL/CMD+K) and at-mention autocomplete

  • Improved on-boarding performance by removing new user event handling on the client

  • Improved channel switching performance by combining API events and only pulling user statuses the client doesn’t yet have

  • Added session cache directly to web connections

  • Added caching for files, user profiles and for the last 60 posts in a channel

  • Added ETag for user profile pictures and modified ETag for posts to improve caching validation

  • Added caching to post and channel calls

  • Fixed channel cache not being sent to a cluster

  • Added a configuration setting to disable intensive System Console statistics queries for maximum performance (Enterprise E10 & E20 only)

Notifications 

  • Desktop notifications no longer appear for the channel you are actively viewing

  • Push and email notifications now follow the setting for Teammate Name Display

  • Notifications for @mentions of your username can no longer be turned off

Account Settings 

  • Added a “Position” field, where users can add a job title to be shown in their profile popover

Team Settings 

  • Team description can be set by a Team Admin and is visible to all users on the join teams screen and in the tool tip over the team name

  • Slack Import can now import integration messages

Slash Commands 

  • Existing slash commands can now be edited by the creator or by Team and System Admins

  • Slash commands now work on the right-hand sidebar

  • Added support for slash commands to set the username and icon directly from the reply payload

Channels 

  • System message is now posted for all users when a channel or group is renamed

  • Any channel member can now remove other users from the channel

Messaging 

  • Added support for non-alphanumeric unicode characters in hashtags

  • Custom Emojis larger than 64kB can now be uploaded and they will be appropriately resized

User Interface 

  • Added a direct message link to the profile popover

  • Added an indicator to convey a new message is received when scrolled up in the center pane

  • Removed status indicators on posts by webhooks

  • Channel switcher (CTRL/CMD+K) search results for direct messages now match message autocomplete

  • Autocomplete is now case insensitive for @-mentions, emojis, slash commands and channel linking

Enterprise Edition 

  • Split out channel management permissions into separate settings for creation, deletion, and renaming a channel

  • Ability to set the maximum number of users in a channel that will disable @all and @channel notifications

  • Added ability to set a user’s Position field with LDAP sync or SAML

  • New option to purge all in-memory caches for sessions, accounts and channels

Bug Fixes 

  • Integrations that post to Direct Message channels now mark the channel as Unread

  • @mention autocomplete will now filter on Chinese, Japanese, Korean names

  • Text focus is now set on the text input area after channel creation

  • Editing old posts no longer causes them to repost for other members of the channel

  • Email invitation subject line no longer displays HTML characters in place of apostrophes in the team name

  • Current user is no longer displayed in the direct messages modal

  • Searching on direct messages modal now happens on typing rather than after hitting ENTER

  • More Channels modal now resets search when opening and closing the dialog

  • Channel switcher (CTRL/CMD+K) now works for direct message channels of users outside the team

  • Using the command line to invite users no longer sends an invalid join team link

  • Sleeping and waking your computer while logged into Mattermost no longer causes a console error

  • Searching for users in double in quotes in the direct message modal no longer throws an error

  • XML file preview no longer throws a JavaScript error

  • User autocomplete in message box no longer matches against email

  • Channel linking (with ~ shortcut) now works for channels you don’t belong to

  • Fixed statistics for websockets and database connections in System Console > Site Statistics to work in High Availability mode

  • Slash commands now work in newly created private channels without requiring a refresh

  • Zapier app channel dropdown selector works again

  • Fixed sign in errors for non-admin accounts when custom emojis are restricted to Team and System Admins

  • Fixed encoding of file names when downloading attachments

  • Unflagging or flagging a post in the right-hand sidebar no longer forces a scroll to the top of the flagged posts list

  • User list in System Console > Teams is no longer blank on first load

  • Fixed a bug where sometimes the right-hand sidebar would not display properly when switching to view another channel

Compatibility 

Changes from v3.5 to v3.6:

Special Upgrade Note: (Enterprise Edition) If you previously had values set for RestrictPublicChannelManagement and RestrictPrivateChannelManagement, the new settings for RestrictPublicChannelCreation, RestrictPrivateChannelCreation, RestrictPublicChannelDeletion, and RestrictPrivateChannelDeletion will take those settings as their default values.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

Deprecated Settings:

  • Under ServiceSettings in config.json:

    • "SegmentDeveloperKey" to be removed in v3.7

Additional Changes to Enterprise Edition:

The following config settings will only work on servers with an Enterprise License that has the feature enabled.

  • Under ServiceSettings in config.json:

    • Added ”EnforceMultifactorAuthentication": false to control whether MFA in enforced

  • Under TeamSettings in config.json:

    • Changed "RestrictPublicChannelManagement": "all" to only control who can edit the channel header, purpose, and name of public channels (previously it also controlled creation and deletion)

    • Changed "RestrictPrivateChannelManagement": "all" to only control who can edit the channel header, purpose, and name of private groups (previously it also controlled creation and deletion)

    • Added "RestrictPublicChannelCreation": "all" to control who can create public channels

    • Added "RestrictPrivateChannelCreation": "all" to control who can create private groups

    • Added "RestrictPublicChannelDeletion”: "all" to control who can delete public channels

    • Added "RestrictPrivateChannelDeletion": "all" to control who can delete private channels

    • Added "MaxNotificationsPerChannel": 1000 to set the maximum number of channel members for which @all and @channel notifications will be sent

  • Under LdapSettings in config.json:

    • Added "PositionAttribute": "" to select an LDAP attribute to synchronize for the user position (job title) field

  • Under SamlSettings in config.json:

    • Added "PositionAttribute": "" to select an LDAP attribute to synchronize for the user position (job title) field

  • Added MetricsSettings in config.json for performance monitoring settings:

  • Added AnalyticsSettings in config.json for analytics settings:

    • Added "MaxUsersForStatistics": 2500 to set the maximum number of users on the server before statistics for total posts, total hashtag posts, total file posts, posts per day, and active users with posts per day are no longer counted (use this setting to improve performance on large instances)

Database Changes from v3.5 to v3.6 

Posts Table:

  • Added HasReactions column

Teams Table:

  • Added Description column

Users Table:

  • Added Position column

Status Table:

  • Removed ActiveChannel column

API Changes from v3.5 to v3.6 

New routes:

  • Added POST at /commands/update

    • Updates a slash command

  • Added GET at /users/name/{username}

    • Returns a user matching the given username

  • Added GET at /users/email/{email}

    • Returns a user matching the given email

  • Added GET at /users/autocomplete

    • Returns a list of users on the system that have a username, full name, or nickname that match against the provided term

  • Added GET at /teams/name/{team_name}

    • Returns team object for a given team name

  • Added GET at /teams/{team_id}/channels/name/{channel_name}

    • Returns a channel for a given channel name

  • Added POST at /teams/{team_id}/channels/{channel_id}/members/ids

    • Returns channel member objects for the channel and user IDs specified

  • Added GET at /teams/members

    • Returns an array with the teams the current user belongs to

  • Added GET at /teams/unread

    • Returns an array containing the amount of unread messages and mentions for the teams the current user belongs to

  • Added POST at /teams/{team_id}/channels/view

    • Performs all actions related to viewing a channel, including marking channels as read, clearing push notifications, and updating the active channel

  • Added POST at /teams/{team_id}/channels/{channel_id}/posts/{post_id}/reactions/save

    • Saves an emoji reaction for a post, returns the saved reaction if successful

  • Added POST at /teams/{team_id}/channels/{channel_id}/posts/{post_id}/reactions/delete

    • Removes an emoji reaction for a post in the given channel, returns nil if successful

  • Added GET at /teams/{team_id}/channels/{channel_id}/posts/{post_id}/reactions'

    • Returns a list of all emoji reactions for a post

  • Added GET at /admin/invalidate_all_caches

    • Purge all the in-memory caches for things like sessions, accounts, channels; deployments using High Availability will attempt to purge all the servers in the cluster (this may adversely impact performance)

  • Added GET at /channels/more/{offset}/{limit}

    • Returns a page of public channels the user is not in based on the provided offset and limit

  • Added POST at /channels/more/search

  • Returns a list of public channels the user is not in that match the search criteria

  • Added GET at /channels/autocomplete

    • Returns a list of public channels that match the provided string

Deprecated routes:

  • GET at /channels/more (replaced by /channels/more/{offset}/{limit}) to be removed in v3.7

  • POST at /channels/update_last_viewed_at (replaced by /channels/view) to be removed in v3.8

  • POST at /channels/set_last_viewed_at (replaced by /channels/view) to be removed in v3.8

  • POST at /users/status/set_active_channel (replaced by /channels/view) to be removed in v3.8

Removed routes:

  • POST at /teams/create_from_signup

  • POST at /teams/signup

Changed routes:

  • Updated teams/{team_id}/commands/execute endpoint request body field from channelId to channel_id

Websocket Event Changes from v3.5 to v3.6 

Added:

  • update_team that occurs each time the team info is updated

  • reaction_added that occurs when an emoji reaction is added to a post

  • reaction_removed that occurs when an emoji reaction is removed from a post

Known Issues 

  • Slack Import doesn’t add merged members/e-mail accounts to imported channels

  • User can receive a video call from another browser tab while already on a call

  • Video calls do not work with Chrome v56 and later

  • Sequential messages from the same user appear as separate posts on mobile view

  • Edge overlays desktop notification sound with system notification sound

  • Deleting a message from a permalink view doesn’t show delete until refresh

  • Search autocomplete picker is broken on Android

Contributors 

Many thanks to all our contributors. In alphabetical order:

/mattermost-server

/docs

/mattermost-docker-preview

/desktop

/mattermost-mobile

/mattermost-load-test

/mattermost-driver-javascript

/android

/mattermost-webrtc

/mattermost-api-reference

/mattermost-docker

/ios

/mattermost-push-proxy

Thanks also to those who reported bugs that benefited the release, in alphabetical order:

Release v3.5.1 

Notes on Patch Release 

  • v3.5.1, released 2016-11-23

    • Security update to preventing cross-site scripting and remote code execution, thanks to Harrison Healey for reporting responsibly.

    • Fixed an issue where usernames would sometimes not appear beside posts and the reply arrow would throw an error.

    • The channel purpose is no longer cut off in the user interface of the More… channel menu.

    • Fixed a scroll issue where the center channel didn’t always scroll to the bottom when switching channels.

    • Fixed a server error that occurred when searching for users using an asterisk.

    • Fixed an issue where direct message channel headers would sometimes disappear.

    • “New Messages” indicator is fixed so it no longer remains visible after switching channels.

    • Fixed an issue where users could not join a public channel by navigating to the channel URL.

    • Email and push notifications are made asynchronous to fix a delay sending messages when HPNS was enabled.

    • Autocomplete timeout is decreased to make autocomplete more responsive to quick typing.

  • v3.5.0, released 2016-11-16

    • Original 3.5 release.

Security Update 

Highlights 

Languages 

  • Added Russian translations for the user interface.

  • Promoted Chinese (both simplified and traditional), German, French and Japanese to release-quality translations, removing beta tags.

Performance improvements for mobile and web experience 

  • Ability to download assets in parallel via HTTP2 support.

  • Reduced CPU bottlenecks and optimized SQL queries.

  • Reduced load times through paging controls, server-side search and on-the-fly data loading that requests data as the client needs it.

  • Added paging APIs for profiles, channels and user lists.

  • Added client-scaling for auto-complete and status indicators.

  • Added server-side in-memory caching to reduce DB reads/writes.

Connection Security 

  • TLS is now supported directly on the Mattermost server. Learn more in our documentation.

  • Support for automatically fetching certificates through Let’s Encrypt.

Minio File Storage 

  • Minio fully manages S3 API requests with automatic bucket location management across S3 regions.

Favorite Channels 

  • Added the ability to select Favorite Channels that appear at the top of the channels sidebar.

Video and Audio Calling (early-preview) 

  • Added early preview of video and audio calling option using self-hosted proxy.

  • Intended as working prototype for community development, not recommended for production.

  • Early preview does not include logging or detailed documentation.

Improved Slack Import 

  • Added the ability to import files from Slack (CLI command also supported).

  • Added the ability to import bot/integration messages, Join/Leave messages, and /me messages.

  • Duplicate users are now merged.

  • Channel topics, purpose, and users now import correctly.

  • Channel links now import correctly.

Improvements 

iOS Apps 

  • Channel settings, account settings, and channel header now render as full screen modals for better visibility

  • […] menu options now displayed larger for better usability

  • Keyboard doesn’t automatically close when sending a message, letting you quickly send several messages in succession

  • When the “Download” link is clicked on files, a “Back” button lets users get back to the app

Android Apps 

  • Channel settings, account settings, and channel header now render as full screen modals for better visibility

  • […] menu options now displayed larger for better usability

  • Disabled screen rotation

  • Fixed where clicking on download button for a file attachment did nothing

  • Keyboard doesn’t automatically close when sending a message, letting you quickly send several messages in succession

User Interface 

  • Text (.txt) files now show a preview in the image previewer

  • Status indicators are now visible in compact view

  • Clicking on a profile picture in center channel or right hand sidebar brings up profile popover

  • The “@” and flag icons next to search bar now toggles results

  • […] menu no longer displayed for system messages

  • Browser tab name now changes when switching to System Console or Integrations pages

  • A loading icon now shows on the team selection page

  • On mobile devices, the keyboard now stays open after sending a message to make sending multiple messages easier

Notifications 

  • Notification sound settings are now honored on the Mattermost Desktop Apps

  • Push notifications can now be received on more than one device

Channel Shortlinking 

  • Channels can be shortlinked using the ~ character.

  • Auto-complete works with both the channel handle and name

Integrations 

  • If a webhook is sent to a direct message channel that has not been created yet, the channel is now automatically created

Keyboard Shortcuts 

  • CTRL/CMD+SHIFT+M now toggles recent mentions results

Team Settings 

  • Team names are now restricted to be a minimum of two characters long, instead of four, to support abbreviated team names

System Console 

  • Maximum number of channels per team is now configurable

Enterprise Edition: 

  • Made the MFA secret key visible, so it’s possible to set up Google Authenticator without scanning the QR code

Bug Fixes 

  • Files can now be sent in Direct Messages across teams

  • Correct login method now shown in System Console user lists

  • Channel switcher (CTRL/CMD+K) no longer throws an error when switching to a user outside of your current team

  • Channel switcher (CTRL/CMD+K) now works for creating new Direct Message channels

  • Channels on the left hand side now sort numerically, alphabetically, and based on locale

  • Fixed incorrect error message when trying a team URL with one character

  • /join no longer throws an error for non-admin accounts

  • Added System Message when user joins Off-Topic channel

  • Added the “View Members” option to the channel menu on mobile

  • Send button is now visible on tablet sized screens

Compatibility 

Changes from v3.4 to v3.5:

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

  • Under ServiceSettings in config.json:

    • Removed "RestrictTeamNames": true that controlled whether newly created team names were restricted.

    • Added "ConnectionSecurity": "" to select the type of encryption between Mattermost and your server.

    • Added "TLSCertFile": "" to specify the certificate file to use.

    • Added "TLSKeyFile": "" to specify the private key to use.

    • Added "UseLetsEncrypt": false to enable automatic retreval of certificates from the Let’s Encrypt.

    • Added "LetsEncryptCertificateCacheFile": "./config/letsencrypt.cache" to specify the file to store certificates retrieved and other data about the Let’s Encrypt service.

    • Added "Forward80To443": false to enable forwarding of all insecure traffic from port 80 to secure port 443.

    • Added "ReadTimeout": 300 to specify the maximum time allowed from when the connection is accepted to when the request body is fully read.

    • Added "WriteTimeout": 300 to specify the maximum time allowed from the end of reading the request headers until the response is written.

  • Under FileSettings in config.json:

    • Addded AmazonS3SSL": true to allow insecure connections to Amazon S3.

  • Under RateLimitSettings in config.json:

    • Changed: "Enable": false to disable rate limiting by default

    • Added "MaxBurst": 100 to set the maximum number of requests allowed beyond the per second query limit

  • Under TeamSettings in config.json:

    • Added "MaxChannelsPerTeam": 2000 to set the maximum number of channels per team

  • Under WebrtcSettings in config.json

    • Added "Enable": false to enable one-on-one video calls.

    • Added "GatewayWebsocketUrl": "" to specify the websocket used to signal and establish communication between the peers.

    • Added "GatewayAdminUrl": "" to specify the URl to obtain valid tokens for each peer to establish the connection.

    • Added "GatewayAdminSecret": "" to specify your admin secret password to access the Gateway Admin URL.

    • Added "StunURI": "" to specify your STUN URI.

    • Added "TurnURI": "" to specify your TURN URI.

    • Added "TurnUsername": "" to specify your TURN username

    • Added "TurnSharedKey": "" to specify your TURN server shared key to created dynamic passwords to establish the connection.

Database Changes from v3.4 to v3.5 

FileInfo Table

  • Added FileInfo table

Posts Table

  • Added FileIds column

  • Added indexes for DeleteAt

Channels Table, Commands Table, Emoji Table, Teams Table, IncomingWebhooks Table, OutgoingWebhooks Table

  • Added indexes for CreateAt

  • Added indexes for UpdateAt

  • Added indexes for DeleteAt

TeamMembers Table

  • Added indexes for DeleteAt

Sessions Table

  • Added indexes for ExpiresAt

  • Added indexes for CreateAt

  • Added indexes for Last ActivityAt

Users Table

  • Added indexes for CreateAt

  • Added indexes for UpdateAt

  • Added indexes for DeleteAt

  • Added full text indexes for idx_users_all_txt: Username, FirstName, LastName, Nickname, Email

  • Added full text indexes for idx_users_names_txt:Username, FirstName, LastName, Nickname

API Changes from v3.4 to v3.5 

New routes:

  • Added POST at /users/search

    • Search for user profiles based on username, full name and optionally team id.

  • Added GET at /users/{offset}/{limit}

    • Retrieves a page of system-wide users

  • Added POST at /teams/{team_id}/update_member_roles

    • Update a user’s roles for the specified team.

  • Added GET at /teams/{team_id}/channels/{channel_id}/members/{user_id}

    • Retrieves the channel member for the specified user. Useful for fetching the channel member after updates are made to it. If the channel member does not exist, then return an error.

  • Added GET at /teams/{team_id}/stats

    • Returns stats for teams which includes total user count and total active user count.

  • Added GET at /teams/{team_id}/members/{offset}/{limit}

    • To page through team members

  • Added POST at /teams/{team_id}/members/ids

    • Retrieves a list of team members based on user ids

  • Added GET at /teams/{team_id}/members/{user_id}

    • Retrieves a single team member

  • Added GET at /teams/{team_id}/posts/{post_id}/get_file_infos

    • Retrieves file attachment info for a post

  • Added GET at /channels/{channel_id}/users/{offset}/{limit}

    • Retrieves profiles for users in the channel

  • Added GET at /channels/{channel_id}/users/not_in_channel/{offset}/{limit}

    • Retrieves profiles for users not in the channel

  • Added POST at /webrtc/token

    • Retrieves a valid token and servers to establish a webrtc connection between the peers

Moved routes:

  • Updated GET at /channels/{channel_id}/extra_info to /channels/{channel_id}/stats

    • No longer returns a list of channel members and only returns the member count

  • Updated POST at /users/profiles/{team_id} to /teams/{team_id}/users/{offset}/{limit}

    • Functionally performs the same, just moves it to match our other APIs that need a team ID.

  • Updated GET at /members/{team_id} to /teams/{team_id}/members/{offset}/{limit}

    • Allows paging through team members

Removed routes:

  • Removed GET at /users/direct_profiles

  • Removed GET at /users/profiles_for_dm_list/{team_id}/{offset}/{limit}

Modified Routes

  • Added POST at /users/{user_id}/update_roles

    • Only allows updating of system wide roles. If you want to update team wide roles, please use the new route /teams/{team_id}/update_member_roles

Changes to File Routes:

Routes used to get files and their metadata from the server have been changed substantially in 3.5 so that each file will be given a unique identifier to make them easier to use through the API. In addition, the Filenames field of each post has been deprecated in favor of the new FileIds field.

  • The response type of GET at /teams/{team_id}/files/upload has been changed to return more information about the uploaded file. See the documentation for this route on api.mattermost.com for more information

  • Split GET at /teams/{team_id}/files/get/{channel_id}/{user_id}/{filename} into:

    • GET at /files/{file_id}/get

      • Get a file

    • GET at /files/{file_id}/get_thumbnail

      • Get a small thumbnail for image files

    • GET at /files/{file_id}/get_preview

      • Get a medium-sized preview image for image files

  • Updated GET at /teams/{team_id}/files/get_info/{channel_id}/{user_id}/{filename} to /files/{file_id}/get_info

  • Updated GET at /teams/{team_id}/files/get_public_link to /files/{file_id}/get_public_link

  • Added GET at /public/files/{file_id}/get

    • Get a file without logging in

    • The previous route GET at /public/files/get/{team_id}/{channel_id}/{user_id}/filename has been deprecated, but will remain available for files that were uploaded prior to 3.5

Known Issues 

  • Channel autolinking with ~ only works if you are a member of the channel

  • Slack Import doesn’t add merged members/e-mail accounts to imported channels

  • User can receive a video call from another browser tab while already on a call

  • Video calls do not work with Chrome v56 and later

  • Sequential messages from the same user appear as separate posts on mobile view

  • Slash commands do not work in newly created private channels until a hard refresh

  • Edge overlays desktop notification sound with system notification sound

  • Pressing escape to close autocomplete clears the textbox on IE11

  • Channel switcher doesn’t work for users outside of your current team

  • Deleting a messages from a permalink view doesn’t show delete until refresh

  • Channel dropdown selector no longer works in the Zapier App but the Channel ID can still be entered manually

  • Search autocomplete picker is broken on Android

  • Channel push notification preferences do not work for the inactive teams if you have multiple teams on a single server.

Release v3.4.0 

Release date: 2016-09-16

Highlights 

Zapier Integration 

OAuth 2.0 Service Provider 

  • Users with an account on a Mattermost server can securely sign in to third-party applications with an OAuth 2.0 protocol. See documentation to learn more.

Improved Notifications and Status Indicators 

  • Users can now control how often email notifications are sent

  • Users can now control whether push notifications are sent when they are online, offline or away

  • Users can now set the display duration of a desktop notification

  • Email notifications now include channel names

  • Android push notifications are now cleared after the message is read somewhere else

  • /away, /online, /offline can now be used to manually set your status

  • Status indicators are now shown on the profile pictures in the centre channel and right hand side

Improvements 

Files and Images 

  • PDFs now show a preview in the image previewer on browsers, desktop apps, and mobile apps

Integrations 

  • After an integration is created, a confirmation screen now displays the relevant token, webhook URL or OAuth client secret

System Console 

  • Added connection security option PLAIN for SMTP

  • Salt settings in the config.json now ship blank and are autogenerated after install

  • Added Error and Diagnostics Reporting option to help Mattermost, Inc. improve reliability and performance for your deployment configuration.

Slack Import 

  • Slack import now imports @mentions mapped to user names

User Interface 

  • Improved design of signup pages when multiple account creation methods are enabled

  • User profile popover now shows both username and full name (if available)

  • @mention autocomplete now groups users according to who is in the channel

  • Channel URL no longer updates when the Channel Name changes

  • Markdown headings are now rendered in Compact View

  • A System Message now posts when new users join Town Square

Enterprise Edition: 

  • Added a CLI tool for creating channels

  • Added a display option to hide join/leave messages from view (user added and user removed messages still appear)

  • System Admins can now test their LDAP connection using a “Test Connection” button

  • FirstName and LastName fields are now optional for LDAP and SAML

Bug Fixes 

  • Old public links are now invalidated when the salt is regenerated.

  • Messages can now be flagged from the search results list

  • Count of unread mentions are no longer mixed when switching between multiple teams.

  • Recent Mentions search on mobile no longer contains @all

  • For those using the mobile view on desktop, CTRL+ENTER now sends messages on mobile web view

  • User removed from team now shows up in DM list under “Outside this team”

  • Mentions update properly when team is switched

Compatibility 

Changes from v3.3 to v3.4:

Special Note

(Only affects servers with public links enabled) After upgrading to v3.4, existing public links will no longer be valid. This is because in past versions, when the Public Link Salt was regenerated existing public links were not invalidated. Now, when the salt is regenerated, existing links are made invalid.

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

  • Under EmailSettings in config.json:

    • Added "EnableEmailBatching": false to enable batching of email notifications configurable in Account Settings. To enable email batching, the SiteURL field must be filled out and Enable under ClusterSettings must be set to false to disable high availability mode.

    • Added "EmailBatchingBufferSize": 256 to specify the maximum number of notifications batched into a single email.

    • Added "EmailBatchingInterval": 30 to specify the maximum frequency, in seconds, which the batching job checks for new notifications.

  • Under LogSettings in config.json:

Additional Changes to Enterprise Edition:

The following config settings will only work on servers with an Enterprise License that has the feature enabled.

  • Under LdapSettings in config.json:

    • "FirstNameAttribute": "" is no longer a required field

    • "LastNameAttribute": "" is no longer a required field

  • Under SamlSettings in config.json:

    • "FirstNameAttribute": "" is no longer a required field

    • "LastNameAttribute": "" is no longer a required field

Database Changes from v3.3 to v3.4 

Status Table

  • Added Manual column.

  • Added ActiveChannel column.

API Changes from v3.3 to v3.4 

New routes:

  • Added GET at /oauth/authorized

    • Returns the OAuth2 Apps authorized by the user. On success it returns a list of sanitized OAuth2 Authorized Apps by the user.

  • Added POST at /oauth/"+clientId+"/deauthorize

    • Deauthorizes a user on an OAuth 2.0 app, where clientId corresponds to the application. Returns status OK on success or an AppError on fail.

  • Added POST at /oauth/"+clientId+"/regen_secret

    • Generates a new OAuth App Client Secret, where clientId corresponds to the application. Returns an OAuth2 App on success. Must be authenticated as a user and the same user who registered the app or a System Admin.

  • Added POST at /admin/ldap_test

    • Will run a connection test on the current LDAP settings. It will return the standard OK response if settings work. Otherwise it will return an appropriate error.

  • Added POST at /users/status/set_active_channel

    • Sets the Status.ActiveChannel field which is used to tell if the user is actively viewing a channel or not.

  • Added GET at /admin/recently_active_users/{teamId}

    • Returns a list of recent active users.

Known Issues 

  • Upgrading from 3.2 to 3.4 will be incomplete due to a migration code not being run properly. You can either:

    • Upgrade from 3.2 to 3.3 and then from 3.3 to 3.4, or

    • Upgrade from 3.2 to 3.4, then run the following SQL query to make Mattermost rerun upgrade steps that were not properly completed: UPDATE Systems SET Value = '3.1.0' WHERE Name = 'Version';

  • Deleted messages don’t disappear from the channel for the user who deleted the message, if the message was previously edited and right hand sidebar is open.

  • A single collapsed link or image preview re-opens after refresh.

  • Files sent in private chat to members in a different team are not accessible.

  • YouTube video links show as “Video not found” on Desktop App if “Allow mixed content” is turned on.

  • “More” option under Direct Message list no longer shows count of team members not in your direct message list.

  • On Firefox, CTRL/CMD+U keyboard shortcut to upload a file doesn’t work.

  • Webhook attachments don’t show up in search results.

  • Messages sometimes don’t appear deleted until the page is refreshed.

  • When joining a channel from a public link, the page sometimes loads for a long time and requires a refresh.

Release v3.3.0 

Expected release date: 2016-08-16

Security Update 

Highlights 

Languages 

  • Added Dutch, Korean, Simplified Chinese and Traditional Chinese translations for the user interface.

  • Promoted Portuguese and Spanish to release-quality translations.

Flagged Messages 

  • Added the ability to flag a message for follow up, so users can track messages they want to go back to later.

Improved Statuses 

  • Improved response time of status indicator changing between online/offline/away.

  • Added status indicators to the Direct Message and Channel member lists.

  • Added @here to mention users who are online.

Google SSO (Enterprise E20) 

  • Users can sign in to Mattermost with their Google credentials and new Mattermost user accounts are automatically created on first login.

Office 365 SSO (Beta) (Enterprise E20) 

  • Users can sign in to Mattermost with their Office 365 credentials and new Mattermost user accounts are automatically created on first login.

High Availability Mode (Beta) (Enterprise E20) 

  • Support for highly available application servers configurable in the System Console and configuration files. See documentation for more details.

Improvements 

iOS app 

  • Fixed issue where “Refresh/Log out” was appearing frequently.

  • Fixed issue where center channel appears blank after initial page load.

  • Keyboard is now closed when a user executes a search.

Mobile (iOS and Android apps) 

  • Enter key now creates a new line instead of sending the message.

  • Added links to the mobile apps in the welcome email, tutorial, and main menu.

  • Added a landing page that informs users of the mobile app when they access the site on a mobile web browser.

  • Permalinks are now available on mobile.

  • Made it easier to click on the … menu when in the right-hand sidebar view.

  • Enable auto-complete for “from:” and “in:”.

User Interface 

  • Channel header is now added to the View Info modal.

  • Configured channel introduction to respect the full width and centred channel views.

  • Removed signup link from sign in page if all signup methods are disabled.

  • Improved channel header popover behaviour.

Authentication 

  • The username “matterbot” is now restricted from account creation.

  • Link to create an account is hidden on the login page if no account creation methods are turned on in the System Console.

  • All team members can View Members for the team or specific channels.

Notifications 

  • Mention notifications can be turned on for any new messages in comment threads that you participate in.

Keyboard Shortcuts 

  • Added icons next to channel names and improved sorting in the channel switcher (CTRL/CMD+K).

  • Keyboard shortcuts that open modals can now toggle them open and closed (CTRL/CMD+SHIFT+A, CTRL/CMD+K).

Integrations 

  • Added an option to trigger outgoing webhook if the first word starts with the specified trigger word.

System Console 

  • Username is now added to the System Console users list.

  • Legal and Support links are now hidden in the user interface if no link is specified in the System Console.

  • If the Terms of Service link is left blank in the System Console then it defaults to the “Mattermost Conditions of Use” page.

Enterprise E10, E20 

  • Added the ability to set different themes for each team.

  • Added a checkbox to apply theme settings to all teams of which you are a member.

  • Users disabled or removed from the AD/LDAP server are now made “Inactive” in Mattermost (previously their sessions were revoked and could no longer log in, but their account status was not set to “Inactive”).

  • Added the ability to force migrating authentication methods.

  • Added Site Description field to the System Console > Customization > Custom Branding section.

  • AD/LDAP Bindusername and Bindpassword fields in the System Console are now optional to support anonymous binding.

Bug Fixes 

  • The behavior of setting for Link Previews in Account Settings is no longer reversed.

  • Hitting the URL of a private team you used to belong to now redirects properly.

  • Search terms contained in hashtags are now highlighted in the search results.

  • Fixed an issue with quick typesetting on IE-11 and Edge.

  • Fixed an issue with uploading SAML certificates if the files were removed from config.json.

  • Multiple files can now be selected on the file upload dialog of the desktop app.

  • Fixed a scrolling issue with the channel switcher.

  • Fixed system messages showing a small empty white box.

  • Fixed a markdown formatting issue with multiple lists in a row.

  • Team Admins can no longer demote System Admins.

  • The channel header now respects the setting for Channel Display Mode.

  • The System Console no longer freezes if accessing via URL when not logged in.

  • Site Name is now restricted to 30 characters to avoid text overflow.

  • Error is no longer thrown when switching between teams in the System Console.

  • Invalid password error is thrown if System Admin resets a password to something that doesn’t meet the specified password requirements.

  • Fixed the percentage loading indicator on the image preview modal.

  • File upload overlay now appears on Edge.

  • Maximum Users per Team and Minimum Password Length now default to reasonable values if a bad input is saved.

  • Right-hand side now updates when a new profile picture is saved.

  • Channels in the Channel Switcher are sorted by their handle if their display name is identical.

  • Setting the length for mobile sessions is now fixed in the System Console.

  • The “Test Connection” button in the System Console > Notifications > Email section now properly uses the saved SMTP password.

  • System Admins no longer receive a JavaScript error if a new message is received while in the System Console.

  • Dropdown in the Manage Members modal is no longer empty for System Admins.

  • @all is now correctly highlighted if the trigger setting is selected in Account Settings.

  • Fixed unformatted error message on account creation page if no creation methods are enabled.

  • Corrected the formatting of some help text in the System Console.

  • Color picker in Custom Theme settings now disappears once setting has been saved on mobile.

  • System Console menu no longer cuts off long team names.

Compatibility 

Changes from v3.2 to v3.3:

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

  • Under a new section NativeAppSettings:

    • Added "AppDownloadLink": "https://mattermost.com/download/#mattermostApps" to point towards a download page for native apps.

    • Added "AndroidAppDownloadLink": "https://about.mattermost.com/mattermost-android-app/" to point towards the Android app.

    • Added "IosAppDownloadLink": "https://about.mattermost.com/mattermost-ios-app/" to point towards the iOS app.

  • Under ServiceSettings:

    • Added "SiteURL": "" to allow the server to overwrite the site_url.

  • Under TeamSettings:

    • Added "UserStatusAwayTimeout": 300 to specify the number of seconds before users are considered “away”.

Additional Changes to Enterprise Edition:

The following config settings will only work on servers with an Enterprise License that has the feature enabled.

  • Under TeamSettings:

    • Added "CustomDescriptionText": "" to set the site description shown in login screens and user interface.

  • Under GoogleSettings in config.json:

    • Changed: "Scope": "profile email" to set the standard setting for OAuth to determine the scope of information shared with OAuth client.

    • Changed: "AuthEndpoint": "https://accounts.google.com/o/oauth2/v2/auth" to set the authorization endpoint for Google SSO.

    • Changed: "TokenEndpoint": "https://www.googleapis.com/oauth2/v4/token" to set the token endpoint for Google SSO.

    • Changed: "UserApiEndpoint": "https://www.googleapis.com/plus/v1/people/me" to set the user API endpoint for Google SSO.

  • Under a new section Office365Settings:

    • Added "Enable": false to allow login using Office 365 SSO when set to true.

    • Added "Secret": "" to set the Client Secret received when registering the application with Google.

    • Added "Id": "" to set the Client ID received when registering the application with Google.

    • Added "Scope": "User.Read" to set the standard setting for OAuth to determine the scope of information shared with OAuth client.

    • Added "AuthEndpoint": "https://login.microsoftonline.com/common/oauth2/v2.0/authorize" to set the authorization endpoint for Office 365 SSO.

    • Added "TokenEndpoint": "https://login.microsoftonline.com/common/oauth2/v2.0/token" to set the token endpoint for Office 365 SSO.

    • Added "UserApiEndpoint": "https://graph.microsoft.com/v1.0/me" to set the user API endpoint for Office 365 SSO.

  • Under LdapSettings in config.json:

    • "BindUsername": "" and "BindPassword": "" are no longer required fields, so anonymous binding is possible.

  • Under a new section ClusterSettings:

    • Added "Enable": false to enable High Availability mode.

    • Added "InterNodeListenAddress": ":8075" to specify the address the server will listen on for communicating with other servers.

    • Added "InterNodeUrls": [] to specify the internal/private URLs of all the Mattermost servers separated by commas.

Database Changes from v3.2 to v3.3 

OAuthAccessData Table

  • Added ClientId column.

  • Added UserId column.

  • Removed AuthCode column.

  • Set Unique key on ClientId and UserId columns.

  • Removed index from idx_oauthaccessdata_auth_code column.

  • Added indexes to idx_oauthaccessdata_client_id, idx_oauthaccessdata_user_id and idx_oauthaccessdata_refresh_token columns.

OAuthApps Table

  • Added IconURL column.

OutgoingWebhooks Table

  • Added TriggerWhen column.

Status Table

  • Added Status table.

Users Table

  • Removed LastActivityAt column.

  • Removed LastPingAt column.

  • Removed ThemeProps column.

API Changes from v3.2 to v3.3 

Updated admin routes:

  • Changed users/status from POST to GET

New admin routes:

  • Added GET at /posts/flagged/{offset:[0-9]+}/{limit:[0-9]+}

    • Returns a list of posts that have been flagged by the user; offset is the offset to start the page at; limit is the max number of posts to return.

  • Added GET at /admin/cluster_status

    • Returns a json with a status of each of the reachable nodes in the cluster

  • Added GET at /oauth/list

    • Returns a list of OAuth 2.0 apps registered by the user

  • Added GET at /oauth/app/{clientId:""}

    • Returns a Sanitized OAuth 2.0 application where clientId corresponds to the application

  • Added POST at /oauth/delete

    • Returns status = OK if the OAuth 2.0 application owned by the current user was successfully deleted.

  • Added GET at /oauth/access_token

    • Returns the access token for OAuth 2.0 application

  • Added POST at /preferences/delete

    • Returns status = OK if the list of preferences owned by the current user were successfully deleted.

  • Added POST at /admin/remove_certificate

    • Returns a map[string]interface{} if removing the x509 base64 Certificates and Private Key files used with SAML exists on the file system.

Known Issues 

  • Desktop apps sometimes require a refresh to solve 404 errors.

  • Deleted messages don’t disappear from the channel for the user who deleted the message, if the message was previously edited and right hand sidebar is open.

  • After receiving an error for creating a channel with one character, updated channel name is not saved.

  • A single collapsed preview re-opens after refresh.

  • Removed user from team still appears in DM list from the team.

  • Files sent in private messages to members in a different team are not accessible.

  • YouTube videos show as “Video not found” on Desktop App.

  • “More” option under Direct Message list no longer shows count of team members not in your direct message list.

  • /join sometimes throws an error.

  • On Firefox, CTRL/CMD+U keyboard shortcut doesn’t work.

  • Sometimes only the last character typed in the channel switcher appears.

  • Webhook attachments don’t show up in search results.

  • Count of unread mentions are sometimes mixed when switching between multiple teams.

  • Office 365 login sometimes causes a bad token error.

  • Messages sometimes don’t appear deleted until the page is refreshed.

  • When joining a channel from a public link, the page sometimes loads for a long time and requires a refresh.

  • After leaving a team, joining or creating a team sometimes causes an error.

Contributors 

Many thanks to all our contributors. In alphabetical order:

/mattermost-server

/desktop

/android

/ios

/docs

/mattermost-docker

/mattermost-driver-javascript

/mattermost-bot-sample-golang

If we missed your name, please let us know at feedback@mattermost.com. Recognition is a manual process and mistakes can happen. We want to include anyone who’s made a pull request that got merged during the release.

Release v3.2.0 

Release date: 2016-07-16

Security Update 

Highlights 

Languages 

  • Added German translation for the user interface if enabled by the System Admin from System Console > Localization > Available Languages.

Custom Emoji 

  • Create Custom Emoji from the Main Menu > Custom Emoji when enabled from System Console > Customization > Custom Emoji.

  • Restrict the permissions required to create Custom Emoji (Enterprise).

Performance 

  • Gzip compression for static content files decreases time for first page load, enabled from System Console > Configuration.

  • Reduced the total Mattermost package size from 25.7MB to 18.9MB.

Policy (Enterprise E10, E20) 

  • Restrict the permission levels required to send team invitiations in System Console > Policy.

  • Restrict the permission levels required to manage public and private channels, including creating, deleting, renaming, and setting the channel header or purpose.

SAML Single Sign-On (Enterprise E20): 

  • Users can sign in to Mattermost with their SAML credentials and new Mattermost user accounts are automatically created on first login. Mattermost pulls user information from SAML, including first and last name, email and username.

  • Mattermost officially supports Okta and Microsoft ADFS as the identity providers (IDPs), but you may also try configuring SAML for a custom IDP.

Improvements 

On-Boarding and Off-Boarding

  • After account creation, users are automatically directed to the team where they were invited instead of the Team Selection page.

  • “Get Team Invite Link” is now accessible on mobile.

  • Users can now be removed from teams via the Main Menu > Manage Members modal.

System Console

  • Updated labeling of System Console settings in the UI for consistency and accuracy.

  • (Enterprise E20) High availability support via Reload Configuration from Disk and Recycle Database Connections buttons had help text added so they’re easier to understand.

  • Allow System Admins to create teams even if team creation is disabled via the System Console.

Notifications

  • Address displayed in the email notification footer is now configurable in the System Console.

  • Direct Message desktop notifications now display with a “Direct Message” title.

Web UI

  • Reply button and […] menu now appear in a hovering UI element to increase the available margin width in the center channel.

  • Right-hand sidebar can now be expanded when viewing threads or search results.

  • Text emoticons now show up as the first entries in the autocomplete list

  • @mention autocomplete now filters on nickname, full name, and username.

  • Added an online indicator to the header of Direct Message channels.

  • Added database type to the About Mattermost dialog.

  • Removed unnecessary resizing when opening and closing the right hand sidebar.

  • Removed jumping of the center channel when new messages are posted.

  • Updated the channel info dialog to be more user friendly.

Enterprise E10, E20

  • New command line tools added, such as adding and removing users from channels, and restoring previously deleted channels.

  • Added a button to manually trigger AD/LDAP synchronization.

  • Updating AD/LDAP Synchronization Interval to no longer require a server restart to take effect.

  • Improved logging for AD/LDAP synchronization.

  • Added validation to the AD/LDAP settings in the System Console so an error is triggered if required fields are missing.

Bug Fixes 

  • Privacy settings in the system console now refresh correctly when hiding email addresses or full names.

  • Fixed the cross contamination of new channels created on different teams in the same browser.

  • Updated the GitLab SSO error message for clarity if another Mattermost account is already associated with the GitLab account.

  • Team creation via GitLab SSO no longer throws an error if email domains are restricted.

  • Channel header no longer disappears after renaming a channel

  • Testing the email connection in the System Console no longer throws an error.

  • Multiline list items are now displayed correctly on new lines.

  • Error message is updated when switching from email to GitLab SSO authentication that is already used by another account.

  • Timestamps no longer require a page refresh when switching between 12h and 24h display formats.

  • Hashtags containing ¿ are now returned with proper highlighting in search results.

  • No longer require a page refresh before enabling compliance reporting in the System Console.

  • @all no longer sends mentions if unselected in Account Settings.

  • Users are no longer redirected to the switch teams page after changing authentication method from GitLab SSO to email.

  • Invalid MFA token error message now clears correcly from the UI.

  • Errors now correctly clear from the UI when changing passwords.

  • System Console users list no longer throws an error when trying to demote a member from a System Admin.

  • iOS radio buttons no longer stay selected when switching between options.

  • Email addresses now display for System Admins even if hidden in the System Console.

  • Code themes now save when updated via Account settings.

  • File name is now displayed instead of the full path to the file in code snippet previews.

  • Config settings are refreshed immediately when Reload Configuration from Disk is clicked.

  • Preview feature checkboxes now reset after changes are canceled.

  • Updated the markdown parser to fix poor handling of certain links.

  • Error box highlighting on the claim AD/LDAP account page is fixed to only highlight the invalid input box.

  • Errors in the system console are now properly aligned.

  • Button to resend verification email no longer throws an error when clicked.

  • Direct Messages modal loads faster since it is no longer cleared from memory each time it closes.

  • Graphs in the System Console > Site Statistics now have the same start date for comparison.

  • Fixed an issue where new languages are not added by default. Any server which is upgraded to Mattermost v3.1 will need to manually set System Console > Localization > Available Languages blank to have new languages added by default.

  • Previously, a few shortcuts that used CTRL were overwriting existing messaging shortcuts in Mac. This has been changed so they only work with CMD. See documentation for more details.

  • Email body now contains the siteURL when inviting a user by email via CLI (command line interface)

  • YouTube videos now stop playing when collapsed.

  • Fixed error when adding an incoming webhook to a public channel the user is currently not in.

  • Error merssage displayed on password reset page is now formatted correctly.

Compatibility 

Changes from v3.1 to v3.2:

config.json 

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

  • Under EmailSettings in config.json:

    • Added "FeedbackOrganization": "" to specify organization name and address, which will be displayed on email notifications from Mattermost.

  • Under ServiceSettings in config.json:

    • Added "EnableCustomEmoji": false. When set to true, enables Custom Emoji option in the Main Menu where users can create customized emoji.

  • Under LocalizationSettings in config.json:

    • Changed: "AvailableLocales": "" to allow new languages be added by default.

  • Under LogSettings in config.json:

    • Added "EnableWebhookDebugging": true. When set to true, contents of incoming webhooks are printed to log files for debugging.

Additional Changes to Enterprise Edition:

The following config settings will only work on servers with an Enterprise License that has the feature enabled.

  • Under TeamSettings in config.json:

    • Added "RestrictTeamInvite": "all" to set the permissions required to send team invites.

    • Added "RestrictPublicChannelManagement": "all" to set the permissions required to manage public channels.

    • Added "RestrictPrivateChannelManagement": "all" to set the permissions required to manage private channels.

  • Under ServiceSettings in config.json:

    • Added "RestrictCustomEmojiCreation": "all" to set the permissions required to create custom emoji.

  • Under SamlSettings in config.json:

    • Added "Enable": false to allow login using SAML. See documentation to learn more about configuring SAML for Mattermost.

    • Added "Verify": false to control whether Mattermost verifies the signature sent from the SAML Response matches the Service Provider Login URL.

    • Added "Encrypt": falseto control whether Mattermost will decrypt SAML Assertions encrypted with your Service Provider Public Certificate.

    • Added "IdpUrl": "" to set the SAML SSO URL where Mattermost sends a SAML request to start login sequence.

    • Added "IdpDescriptorUrl": "" to set the Identity Provider Issuer URL for the Identity Provider you use for SAML requests.

    • Added "AssertionConsumerServiceURL": "" to set the Service Provider Login URL.

    • Added "IdpCertificateFile": "" to set the public authentication certificate issued by your Identity Provider.

    • Added "PublicCertificateFile": "" to set certificate used to generate the signature on a SAML request to the Identity Provider for a service provider initiated SAML login, when Mattermost is the Service Provider.

    • Added "PrivateKeyFile": "" to set the private key used to decrypt SAML Assertions from the Identity Provider.

    • Added "FirstNameAttribute": "" to set the attribute in the SAML Assertion that will be used to populate the first name of users in Mattermost.

    • Added "LastNameAttribute": "" to set the attribute in the SAML Assertion that will be used to populate the last name of users in Mattermost.

    • Added "EmailAttribute": "" to set the attribute in the SAML Assertion that will be used to populate the email of users in Mattermost.

    • Added "UsernameAttribute": "" to set the attribute in the SAML Assertion that will be used to populate the username of users in Mattermost.

    • Added "NicknameAttribute": "" to set the attribute in the SAML Assertion that will be used to populate the nickname of users in Mattermost.

    • Added "LocaleAttribute": "" to set the attribute in the SAML Assertion that will be used to populate the language of users in Mattermost.

    • Added "LoginButtonText": "" set the text that appears in the login button on the login page.

  • Under LdapSettings in config.json:

    • "FirstNameAttribute": "", "LastNameAttribute": "", "BindUsername": "", and "BindPassword": "" are now required fields.

    • Added "MaxPageSize": 0 to set the maximum number of users that will be requested from the AD/LDAP server at one time.

Database Changes from v3.1 to v3.2 

TeamMembers Table

  • Added DeleteAt column.

Emoji Table

  • Added Emoji table.

Known Issues 

  • In System Console > Notifications > Email the “Test Connection” button does not properly use the saved SMTP password. The temporary workaround is to re-type your SMTP Server Password into the field prior to using the “Test Connection”, and then to “Save” afterwards.

  • The behavior of setting for Link Previews in Account Settings is reversed.

  • “More” option under Direct Message list no longer shows count of team members not in your direct message list.

  • Webhook attachments don’t show up in search results.

  • On Firefox, System Console sidebar completely disappears when an AD/LDAP setting is saved.

  • On Firefox, CTRL/CMD+U keyboard shortcut doesn’t work.

  • /join sometimes throws an error.

  • Sometimes only the last character typed in the channel switcher appears.

  • Formatting of multiple lists in a row breaks markdown.

  • Hitting the URL of a private team you used to belong to shows a blank Team Selection page.

  • Accessing the System Console URL when logged out causes the browser to hang.

  • Youtube videos show as “Video not found” on Desktop App

  • Search terms contained in hashtags are not highlighted in the search results.

  • Files sent in private messages to members in a different team are not accessible.

  • Center channel appears blank after initial page load on iOS.

Contributors 

Many thanks to all our contributors. In alphabetical order:

/mattermost-server

/ios

/desktop

/docs

/mattermost-driver-javascript

/mattermost-docker

/mattermost/push-proxy

If we missed your name, please let us know at feedback@mattermost.com. Recognition is a manual process and mistakes can happen. We want to include anyone who’s made a pull request that got merged during the release.

Release v3.1.0 

Release date: 2016-06-16

Security Update 

Highlights 

Keyboard shortcuts and channel switcher 

  • Added keyboard shortcuts for navigation, messages and files

  • Added channel switcher available from CTRL+K in Windows and CMD+K on Mac.

  • See shortcut documentation or use the /shortcuts slash command for details.

Upgraded System Console 

  • Re-organized System Console to make settings easier to find for new users.

  • Added setting to set default server and client languages.

Upgraded Push Notification options 

  • Added ability for mobile push notifications to trigger on only mentions, all activity and no activity, configurable from Account Settings > Notifications > Mobile push notifications

  • Added ability to trigger mobile push notifications while user is logged into Mattermost on desktop.

Compact View 

  • Added “Compact” view option to display more text on a smaller screen, configurable from Account Settings > Display > Message Display.

Improvements 

iOS App

  • Account Settings > Notifications option lets users to enable mobile push notifications for chosen activities.

  • Push notifications sent even if a user is online on desktop.

  • Removed auto-capitalization on login screen, so email is no longer capitalized.

Android App

  • Account Settings > Notifications option lets users to enable mobile push notifications for chosen activities.

  • Push notifications sent even if a user is online on desktop.

  • Removed auto-capitalization on login screen, so email is no longer capitalized.

User Interface

  • Account Settings > Display option lets users set channels to compact view.

  • Autocomplete closes with ESC button.

  • Sequential messages with a username also show profile pictures.

  • Channel introduction message conforms to the channel width chosen in Account Settings > Display.

  • The message ‘[user] is typing’ now uses the username instead of the display name.

  • Date markers now show absolute time.

Performance

  • Performance improvements to posting and replying.

  • Online status in Direct Message list updated on first load.

Notifications

  • @all mention added back with equivalent functionality to @channel.

  • An email notification is now sent when username is changed.

Channels

  • Removed the option to leave a channel for the last person in a private group, so private groups can no longer end up in an ownerless state.

Messaging

  • Move link preview toggle out of preview feature list and add /collapse and /expand.

Localization

  • New settings to configure localization options for teams, including default language.

  • Mattermost Translation Server upgraded to better support localization process.

Integrations

  • Integrations now support advanced formatting through message attachments.

  • Added support for sending @channel notifications by using <!channel>.

  • Added support for raw new lines in the text payload.

  • Added validation for command trigger words.

Onboarding

  • Slash command /invite_people [email address] sends an email invite to your Mattermost team.

Enterprise

  • (E10 and higher): Added AD/LDAP synchronization to automatically deactivate Mattermost accounts after AD/LDAP accounts are deactivated. Previous behavior only checked AD/LDAP credentials on sign-in. Synchronization time defaults to one hour and is configurable from System Console > Synchronization Interval.

  • (E20 and higher): Added support for high availability database configurations using read replicas and a manual failover process to deploy database reconfigurations without stopping the Mattermost server.

Bug Fixes 

  • Incoming webhooks have been made available in all public channels, and in private channels the user belongs to.

  • A space between two named emojis is no longer required for correct rendering.

  • Emojis now render inside parenthesis or brackets.

  • Links that are enclosed with a right parenthesis now work properly.

  • Search term highlighting now updates when search terms change but return the same posts.

  • Search results now properly highlight for searches containing @username, non-latin characters, terms inside Markdown code blocks, and hashtags containing a dash.

  • A single numbered item no longer resets numbering to 1.

  • Previews for removed YouTube videos no longer throw a 404 error.

  • Team and System Admins can now update channel settings after leaving and rejoining the channel.

  • After initial load on iOS, centre channel no longer appears blank.

  • When creating a team with a new account, channel introduction message is now displayed.

  • Sidebar notification for direct messages now clear once viewed, regardless of which team you are in.

  • Custom brand image size is now properly limited on IE11.

Compatibility 

Changes from v3.0 to v3.1:

config.json

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

  • Under LocalizationSettings in config.json:

    • Added "DefaultServerLocale": “en” to set default language for the system messages and logs

    • Added "DefaultClientLocale": “en” to set default language for newly created users and for pages where the user hasn’t logged in

    • Added "AvailableLocales": “en,es,fr,ja,pt-BR” to set which languages are available for users in Account Settings. The language specified in DefaultClientLocale should be included in this list.

Additional Changes to Enterprise Edition:

The following config settings will only work on servers with an Enterprise License that has the feature enabled.

  • Under LdapSettings in config.json:

    • Added "SyncIntervalMinutes": "60" to allow system admins adjust how frequently Mattermost performs AD/LDAP synchronization to update users

Known Issues 

  • “More” option under Direct Message list no longer shows count of team members not in your direct message list.

  • Emoji smileys ending with a letter at the end of a message do not auto-complete as expected.

  • Incorrect formatting when a new line is added directly after a list.

  • On Postgres databases, searching for websites and emails does not work properly and hashtags which end with an inverted questionmark aren’t properly highlighted.

  • On Firefox, search results for hashtags are not properly highlighted.

  • Clicking on a desktop notification from another team doesn’t open the team.

  • Webhook attachments don’t show up in search results.

  • On Firefox, System Console sidebar completely disappears when an AD/LDAP setting is saved

  • On Firefox, CTRL/CMD+U keyboard shortcut doesn’t work

  • Copying and pasting an image from a browser doesn’t work

  • Youtube videos continue playing when collapsed

  • Code theme under Account Settings > Display > Theme doesn’t save unless entered in vectorized form

  • /join sometimes throws an error

  • When upgrading to 3.X, syntax highlighting using Solarized code theme is lost

  • In Compact view, clicking on a file in the first post in the right hand sidebar attempts to download the file

  • Unable to leave a private channel in mobile view

  • @all notifications received even after being unselected from notification options

  • Channel header disappears after renaming a channel (fixed with channel switch)

  • Updates to System Console > Privacy settings for existing users requires a session update

  • Invalid config setting causes server to panic on start

Contributors 

Many thanks to all our contributors. In alphabetical order:

/mattermost-server

/ios

/android

/desktop

/docs

/mattermost-driver-javascript

/mattermost-docker

/mattermost/push-proxy

/mattermost/mattermost-docker-preview

If we missed your name, please let us know at feedback@mattermost.com. Recognition is a manual process and mistakes can happen. We want to include anyone who’s made a pull request that got merged during the release.

Release v3.0.3 

Release date: 2016-05-27

Notes on patch releases:

  • v3.0.3, released 2016-05-27

    • Fixed an error with AD/LDAP signup if user already existed.

    • Fixed an error where setting language to one of the supported langugages caused a blank page.

    • Fixed an error where upgrading team admins on the primary team with AD/LDAP and Gitlab accounts caused an error.

  • v3.0.2, released 2016-05-17

    • Security update to reduce information disclosure, thanks to Andreas Lindh for reporting responsibly

    • Fixed an error where, when using Postgres, attempting to log in with an AD/LDAP that has the same email address or username as an email-based account shows a confusing error message.

    • Fixed an error accounts using email authentation attempt to create new teams.

    • Fixed an error where if you upgrade having never previously saved config.json from System Console, saving from System Console will not work.

  • v3.0.1, released 2016-05-16

    • v3.0.1 fixed an error in GitLab SSO, thanks to ArthurHlt for the pull request fixing the issue.

  • v3.0.0, released 2016-05-16

    • Original 3.0 release.

Security Update 

Major Version Release 

Mattermost 3.0 is a new major version of Mattermost with fundamental changes affecting Mattermost 2.x deployments. An understanding of the upgrade process from 2.x to 3.0, including manual steps, is required to upgrade successfully.

Highlights 

Unified Accounts 

  • Users manage a single account across multiple teams

  • Users from different teams can share messages and files

  • Improved multi-team login and sign-up experience

Enterprise Edition Security, Authentication and Branding Upgrades 

  • Added multi-factor authentication

  • Added multiple Active Directory/LDAP upgrades (TLS, filters, custom labels, nickname support)

  • Added tools for custom branding

User Interface Upgrades 

  • New Emoji set

  • Added full width option for text display

  • Improved UI for managing webhooks and slash commands

iOS and Android mobile app improvements 

  • Added support for multiple teams

  • New option to include message snippets in push notifications

  • Added auto-correct

Languages 

  • Added Japanese translation for user interface.

Improvements 

iOS app

  • Added support for multiple teams on the same server.

  • Added autocorrect.

  • Note: Users of Mattermost 3.0 server need to install new iOS 3.0 app. iOS 2.x apps are not compatible with Mattermost 3.0 server. Also, iOS 3.0 app is not compatible with Mattermost 2.x server.

Android app

  • Added support for multiple teams on the same server.

  • Added autocorrect.

  • Note: Users of Mattermost 3.0 server need to install new Android 3.0 app. Android 2.x apps are not compatible with Mattermost 3.0 server. Also, Android 3.0 app is not compatible with Mattermost 2.x server.

User Interface

  • Switched to new emoji set.

  • Account Settings > Display option lets users set the channel view to full width.

  • Smoother overlay transition when opening sidebar on mobile.

  • Back and forward browser buttons can now move back and forward in channel history.

Integrations

  • Moved webhooks and slash command settings to a new “Integrations” page.

  • Added “Display Name” and “Description” to incoming and outgoing webhooks.

  • Changed webhooks to always show the username and profile picture, even if posts are consecutive.

  • Added a /msg command to open a direct message channel with another user.

Authentication

  • Changed the user model so accounts are per server instead of per team.

  • Updated the login flow so users can select which team to open after signing in.

  • Combined Email, Username, and AD/LDAP options into one login box so users can enter their credentials and the system will identify which kind of authentication to use.

  • GitLab SSO now creates an account from the “Sign In” button if an account previously did not exist.

Files and Attachments

  • Added a preview for code files in the image viewer.

Notifications

  • Added the option to enable full snippets in push notifications.

Search

  • Changed searches to connect terms with “AND” instead of “OR”.

Enterprise:

  • Added the ability to map nickname to an AD/LDAP field.

  • Added the ability to filter AD/LDAP users, so only users selected by the filter can log in to Mattermost.

  • Added the option to connect to AD/LDAP with TLS or STARTTLS

  • Added the option to replace the “AD/LDAP username” login field placeholder text with custom text.

  • Users can now switch between AD/LDAP and email login from Account Settings > Security > Sign-in Method.

  • Added the option to sign up with AD/LDAP on the “Get Team Invite” link and email invite sign up pages.

  • Added multi-factor authentication.

  • Added compliance reporting and the option to generate daily compliance reports.

  • Added custom branding, so System Admins can set a custom logo and text on the sign in page.

  • Added a command line option to upload a license file.

Bug Fixes 

  • Posts from webhooks now fire notifications to the user who created the webhook.

  • Edit post option no longer appears, but doesn’t work, on other users’ posts in the right-hand sidebar.

  • Text input box does not stay scrolled to the bottom when drafting a long message in Firefox.

  • Webhooks in search results now show the username/profile pic of the bot, instead of the user who set up the webhook.

  • Outgoing webhooks triggers now work when followed by any type of white space, instead of only spaces

  • “User is typing” message now follows Teammate Name Display setting

  • Log in with GitLab on mobile now works in the case where there is a space after the email address

  • Links in System Console > Legal and Support settings now open properly even if http or https is not included

  • Timestamps are displayed in 12-hour format when set to 24-hour format.

Compatibility 

Changes from v2.2 to v3.0:

iOS and Android

Mattermost iOS and Android app v3.0 requires Mattermost server v3.0 and higher.

APIs

Web Service API is upgraded to Version 3 and previous Version 1 API is no longer supported. Golang driver, Javascript driver, incoming and outgoing webhooks and Slash commands continue to function as in previous release

config.json

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

Changes to Team Edition and Enterprise Edition:

  • Under TeamSettings in config.json:

    • Added "EnableOpenServer": false to set whether users can sign up to the server without an invite.

    • Removed "EnableTeamListing": false since the team directory was replaced with new functionality.

  • Under EmailSettings in config.json:

    • Added "PushNotificationContents": "generic" to set whether push notifications send a generic message (generic) or send a snippet of the conversation (full)

  • Under SupportSettings in config.json, default support links were changed and need to be manually updated for existing installs:

    • Changed: "TermsOfServiceLink": "https://about.mattermost.com/default-terms/"

    • Changed: "PrivacyPolicyLink": "https://about.mattermost.com/default-privacy-policy/"

    • Changed: "AboutLink": "https://about.mattermost.com/default-about/"

    • Changed: "HelpLink": "https://about.mattermost.com/default-help/"

    • Changed: "ReportAProblemLink": "https://about.mattermost.com/default-report-a-problem/"

    • Changed: "SupportEmail": "feedback@mattermost.com"

Additional Changes to Enterprise Edition:

The following config settings will only work on servers with an Enterprise License that has the feature enabled.

  • Under ServiceSettings in config.json:

    • Added "EnableMultifactorAuthentication": false to enable Multifactor Authentication

  • Under TeamSettings in config.json:

    • Added "EnableCustomBrand": false to set whether custom branding of the login page is turned on.

    • Added "CustomBrandText": "" to set what text will show up on the login page, if "EnableCustomBrand": is set to true.

  • Under LdapSettings in config.json:

    • Added "ConnectionSecurity":"" to set the type of connection security Mattermost uses to connect to AD/LDAP. Options are "" (no security), TLS or STARTTLS.

    • Added "UserFilter": "" (optional) to set an AD/LDAP Filter to use when searching for user objects.

    • Added "NicknameAttribute": "" to set the attribute in the AD/LDAP server that will be used to populate the nickname field in Mattermost.

    • Added "SkipCertificateVerification": false to set whether the certificate verification step for TLS or STARTTLS connections is skipped. (For testing purposes only. Should be set to false in production.)

    • Added "LoginFieldName": "" to set the help text in the login box (for example, AD/LDAP username or Company username).

  • Added ComplianceSettings to config.json:

    • Added "Enable": false to set whether compliance reports are enabled.

    • Added "Directory": "./data/" to set where the reports are stored.

    • Added "EnableDaily": false to set whether Daily Reports are turned on.

Database Changes from v2.2 to v3.0 

Version 3.0 uses a different database than version 2.0. A one-way change to the database will be required when upgrading from v2.2 to v3.0.

Known Issues 

  • “More” option under Direct Message list no longer shows count of team members not in your direct message list.

  • Emoji smileys ending with a letter at the end of a message do not auto-complete as expected.

  • Incorrect formatting when a new line is added directly after a list.

  • Searching for a username or hashtag containing a dot now returns the correct results.

  • On Postgres databases, searching for websites, emails, and searching with quotations does not work properly.

  • Search term highlighting doesn’t update when search terms change but return the same posts.

  • Search results don’t highlight properly for searches containing @username, non-latin characters, terms inside Markdown code blocks, or hashtags containing a dash.

  • Custom brand image size isn’t properly limited on IE11.

Release v2.2.0 

Release date: 2016-04-16

Security Update 

Highlights 

New themes 

French language translation 

  • French language translation is now available.

TPNS and EAS options 

Languages 

  • Added French language translation (Beta) available from Account Settings > Display.

Improvements 

User Interface

Bug Fixes 

  • Characters in some posts will no longer display as HTML entities, such as &#39;

Known Issues 

  • Regression: Get Public Link downloads a file and does not product a public link.

  • Edit post option appears, but doesn’t work, on other users’ posts in the right-hand sidebar.

  • Text input box does not stay scrolled to the bottom when drafting a long message in Firefox.

  • File name tooltip stays open after clicking to download.

  • Unable to paste images into the text box on Firefox, Safari, and IE11.

  • Archived channels are not removed from the “More” menu for the person that archived the channel until after refresh.

  • First load of an empty channel does not display the introduction message.

  • Search results don’t highlight searches for @username, non-latin characters, or terms inside Markdown code blocks.

  • Searching for a username or hashtag containing a dot returns a search where the dot is replaced with the “or” operator.

  • Hashtags containing a dash incorrectly highlight in the search results.

  • Emoji smileys ending with a letter at the end of a message do not auto-complete as expected.

  • Incorrect formatting when a new line is added directly after a list.

  • Timestamps are displayed in 12-hour format when set to 24-hour format.

  • Syntax highlighting code block is missing the label for Latex documents.

  • Posts from webhooks do not fire notifications to the user who created the webhook.

  • Theme color vector is not updated after making custom changes to a default theme.

  • Search term highlighting doesn’t update on IE11 when search terms change but return the same posts.

  • Team creation via SSO fails when email domain is restricted.

Contributors 

Many thanks to all our external contributors. In no particular order:

Release v2.1.0 

Release date: 2016-03-16

Highlights 

  • New Android application now available.

  • New desktop applications for Windows, Mac and Linux now in beta.

  • Brazilian Portuguese translation added.

Security Update 

Mattermost v2.1.0 contains a security update for a cross-site scripting vulnerability in Mattermost v1.2, v1.3, v1.4 and v2.0. Upgrading to Mattermost v2.1.0 is highly recommended. Thanks to Luke Arntson for the RPD report.

New Features 

Android Application

Desktop Application

Languages

  • Added Portuguese language translation (Beta) available from Account Settings > Display.

Improvements 

System Console

  • Removed unused “Disable File Storage” option from the System Console as it is no longer relevant.

  • Added a warning message if a system admin demotes themselves.

  • System Console statistics now use a client store instead of fetching data and storing it in state.

Messaging

  • Custom slash commands now support temporary messages that appear only to the user that issued the command.

  • Username autocomplete list no longer suggests inactive users.

Mobile

  • Significant responsiveness and speed improvements using fastclick.

  • Team name and username are now shown in the LHS header.

  • Added a button to go back to the team URL page from the login page.

Files and Images

  • Increased the maximum size of image uploads to 24 megapixels.

User Interface

  • Custom theme color selectors are now organized into categories.

  • Add Members and Manage Members dialogs can now be filtered using a search bar.

  • Deactivated members no longer appear in the channel members list.

  • Keyboard focus is set to the text input box in the right-hand sidebar if a user clicks the reply icon.

  • Permalinks are now displayed in a Copy Permalink dialog instead of a popover.

  • Permalink option is now available from the […] menu on messages and comments in the right-hand sidebar.

  • Reply icon now only appears on-hover for messages that don’t have replies.

  • Scroll bar now appears in the center channel.

Bug Fixes 

  • System console user management tab now shows username and email on different lines.

  • Yellow text box error no longer appears when the system is connected.

  • Wildcard search on MySQL databases is now fixed.

  • Usernames in the center channel no longer appear as “…” on login.

  • Deleted messages now delete in the right-hand sidebar and center channel without requiring a page refresh.

  • Contact us email address in the footer of notification emails now uses the SupportEmail config setting instead of FeedbackEmail.

  • Email addresses are now required to have at least one letter before and after the @ sign.

  • Firefox desktop notifications are now fixed for some users experiencing missed notifications.

  • “User is typing” message containing long usernames no longer causes text wrapping.

  • Usernames appearing as “…” in the right-hand sidebar when performing a search is fixed.

  • Links that end in image extensions but do not actually link to raw images no longer generate a blank image preview.

  • Channel handle field in the Rename Channel dialog is now visible on themes with dark backgrounds.

  • Autolinked images no longer persist after the post containing the link is deleted.

  • Code theme selector on IE11 now only shows one dropdown arrow and clicking directly on the arrow opens the dropdown.

  • Save/Cancel buttons for language selection in Account Settings are now formatted the same as other settings.

  • Inconsistent field spacing in the Channel Info dialog is fixed.

  • Recent mentions icon no longer jumps to the left of the search bar when the right-hand sidebar is opened.

  • Custom slash command hints now show up in the autocomplete list.

  • GIF links inside code blocks no longer auto-post the GIFs.

  • Changing usernames no longer adds the old username to “words that trigger mentions”.

  • Notification email footer is now translated based on the sender’s language setting.

  • Slash command /me now posts as the user instead of a webhook message.

  • Logout slash command now forces logout.

  • Public links to file attachments on deleted posts no longer work.

  • Error message is now shown in IE11 when uploading more than 5 files or a file over 50 MB.

Compatibility 

Changes from v2.0 to v2.1:

Android

  • Mattermost Android Application is for use with Mattermost server v2.1 and higher.

config.json

  • The following setting was added and can be modified under ServiceSettings in config.json or the System Console.

    • "AllowCorsFrom": "" to allow the system to serve HTTP requests to other domains specified.

Known Issues 

  • Edit post option appears, but doesn’t work, on other users’ posts in the right-hand sidebar.

  • Text input box does not stay scrolled to the bottom when drafting a long message in Firefox.

  • Some characters in posts may display as HTML entities, such as &#39;. This can be fixed by switching to a different language and then back again.

  • File name tooltip stays open after clicking to download.

  • Unable to paste images into the text box on Firefox, Safari, and IE11.

  • Archived channels are not removed from the “More” menu for the person that archived the channel until after refresh.

  • First load of an empty channel does not display the introduction message.

  • Search results don’t highlight searches for @username, non-latin characters, or terms inside Markdown code blocks.

  • Searching for a username or hashtag containing a dot returns a search where the dot is replaced with the “or” operator.

  • Hashtags containing a dash incorrectly highlight in the search results.

  • Emoji smileys ending with a letter at the end of a message do not auto-complete as expected.

  • Incorrect formatting when a new line is added directly after a list.

  • Timestamps are displayed in 12-hour format when set to 24-hour format.

  • Syntax highlighting code block is missing the label for Latex documents.

  • Posts from webhooks do not fire notifications to the user who created the webhook.

  • Theme color vector is not updated after making custom changes to a default theme.

  • Search term highlighting doesn’t update on IE11 when search terms change but return the same posts.

  • Team creation via SSO fails when email domain is restricted.

Contributors 

Many thanks to all our external contributors. In no particular order:

Release v2.0.0 

Expected Release date: 2016-02-16

Highlights 

Incremented Version Number: Mattermost “2.0” 

  • Version number incremented from “1.x” to “2.x” indicating major product changes, including:

Localization 

  • Addition of localization support to entire user interface plus error and log messages

  • Added Spanish language translation (Beta quality) available from Account Settings > Display

Enhanced Support for Mobile Devices 

  • BREAKING CHANGE to APIs: New Android and updated iOS apps require Mattermost server 2.0 and higher

  • iOS added app support for GitLab single sign-on

  • iOS added app support for AD/LDAP single sign-on (Enterprise Edition only)

Upgrade and Deployment Improvements 

  • Mattermost v2.0 now upgrades from up to two previous major builds (e.g. v1.4.x and v1.3.x)

  • Added option to allow use of insecure TLS outbound connections to allow use of self-signed certificates

New Features 

Localization

  • Addition of localization support to entire user interface plus error and log messages

  • Added Spanish language translation (Beta quality) available from Account Settings > Display

Slash Commands

  • Added Slack-compatible slash commands to integrate with external systems

iOS

  • iOS app added support for GitLab single sign-on

  • iOS app added support for AD/LDAP single sign-on (Enterprise Edition only)

Android

  • New open source Android application compatible with Mattermost 2.0 and higher

System Console

  • Added Site Reports to view system statistics on posts, channels and users.

Improvements 

Upgrading

  • Mattermost v2.0 now upgrades from up to two previous major builds (e.g. v1.4.x and v1.3.x).

Files and Images

  • Public links to images and files created by users no longer expire

  • OGG attachments now play in preview window on Chrome and Firefox

Onboarding

  • “Get Team Invite Link” option is disabled from the main menu if user creation is disabled for the team

  • Tutorial colors improved to provide higher contrast with new default theme

Authentication

  • Added ability to sign in with username as an alternative to email address

  • Switching from email to SSO for sign in now updates email address to use the SSO email

System Console

  • Added option to allow use of insecure TLS outbound connections to allow use of self-signed certificates

  • Removed unused “Disable File Storage” option from System Console > File Storage

  • Added warning if a user demotes their account from System Administrator

Search

  • Hashtag search is no longer case sensitive

  • System messages no longer appear in search results

  • Date separator added to search results

  • Moved the recent mentions icon to the right of the search bar

Messaging

  • Changed the comment bubble to a reply arrow to make post replies and the right-hand sidebar more discoverable

  • Time stamp next to sequential posts made by users now shows HH:MM instead of on-hover timestamp

  • Code blocks now support horizontal scrolling if content exceeds the max width

User Interface

  • Away status added to note users who have been idle for more than 5 minutes.

  • Long usernames are now truncated in the center channel and right-hand sidebar

  • Added more favicon sizes for home screen icons on mobile devices

Bug Fixes 

  • Incorrect “Mattermost unreachable” error on iOS no longer appears

  • Dialog to confirm deletion of a post now supports hitting “ENTER” to confirm deletion.

  • Keyboard focus on the New Channel modal on IE11 is now contained within the text box.

  • LHS indicator for “Unread Posts Above/Below” now displays on IE11

  • Unresponsive UI when viewing a permalink is fixed if a user clicks outside the text on the “Click here to jump to recent messages” bar.

  • Dismissed blue bar error messages no longer re-appear on page refresh.

  • Console error is no longer thrown on first page load in Firefox and Edge.

  • Console error and missing notification is fixed for the first direct message received from any user.

  • Comment bubble in Firefox no longer appears with a box around it on-hover.

  • Home screen icons on Android and iOS devices now appear with the Mattermost logo.

  • Switching channels now clears the “user is typing” message below the text input box.

  • iOS devices are no longer detected as “unknown” devices in the session history.

Compatibility 

Changes from v1.4 to v2.0:

iOS

Mattermost iOS app v2.0 requires Mattermost server v2.0 and higher.

config.json

Multiple setting options were added to config.json. Below is a list of the additions and their default values on install. The settings can be modified in config.json or the System Console.

  • Under ServiceSettings in config.json:

    • "EnableCommands": false to set whether users can create slash commands from Account Settings > Integrations > Commands

    • "EnableOnlyAdminIntegrations": true to restrict integrations to being created by admins only.

    • "EnableInsecureOutgoingConnections": false sets whether outgoing HTTPS requests can accept unverified, self-signed certificates.

    • Optional: "WebsocketSecurePort" : 443 sets the port on which the secured WebSocket will listen using the wss protocol. If this setting is not present in config.json, it defaults to 443.

    • Optional: "WebsocketPort": 80 sets the port on which the unsecured WebSocket will listen using the ws protocol. If this setting is not present in config.json, it defaults to 80.

  • Under EmailSettings in config.json:

    • "EnableSignInWithEmail": true allows users to sign in using their email.

    • "EnableSignInWithUsername": false sets whether users can sign in with their username. Typically only used when email verification is disabled.

Localization

There are two new directories for i18n localization JSON files:

  • mattermost-server/i18n for server-side localization files

  • mattermost-webapp/i18n for client-side localization files

Database Changes from v1.4 to v2.0 

The following is for informational purposes only, no action needed. Mattermost automatically upgrades database tables from the previous version’s schema using only additions.

Users Table 

  1. Added Locale column

Licenses Table 

  1. Added Licenses Table

Commands Table 

  1. Added Commands Table

Known Issues 

  • Navigating to a page with new messages containing inline images added via markdown causes the channel to scroll up and down while loading the inline images.

  • Microsoft Edge does not yet support drag and drop for file attachments.

  • No error message on IE11 when uploading more than 5 files or a file over 50 MB.

  • File name tooltip stays open after clicking to download.

  • Scroll bar does not appear in the center channel.

  • Unable to paste images into the text box on Firefox, Safari, and IE11.

  • Importing from Slack fails to load channels in certain cases.

  • System Console > Teams > Statistics > Newly Created Users shows all users as created “just now”.

  • Username and email display on single line in System Console user management tab.

  • Searching for a phrase in quotations returns more than just the phrase on installations with a Postgres database.

  • Archived channels are not removed from the “More” menu for the person that archived the channel until after refresh.

  • First load of an empty channel does not display the introduction message.

  • Search results don’t highlight searches for @username, non-latin characters, or terms inside Markdown code blocks.

  • Searching for a username or hashtag containing a dot returns a search where the dot is replaced with the “or” operator.

  • Search term highlighting doesn’t update on IE11 when search terms change but return the same posts.

  • Hashtags less than three characters long are not searchable.

  • Hashtags containing a dash incorrectly highlight in the search results.

  • Users remain in the channel counter after being deactivated.

  • Permalinks for the second message or later consecutively sent in a group by the same author displaces the copy link popover or causes an error.

  • Emoji smileys ending with a letter at the end of a message do not auto-complete as expected.

  • Logout slash command does not force a logout.

  • Incorrect formatting when a new line is added directly after a list.

  • Timestamps are displayed in 12-hour format when set to 24-hour format.

  • GIF links inside code blocks auto-post the GIFs.

  • Syntax highlighting code block is missing the label for Latex documents.

  • Deleted messages don’t delete in the right-hand sidebar until a page refresh.

Contributors 

Special thanks to enahum for creating the Spanish localization!

Many thanks to all our external contributors. In no particular order:

Release v1.4.0 

Expected Release date: 2016-01-16

Release Highlights 

Data Center Support 

  • Deployment guides on Red Hat Enterprise Linux 6 and 7 now available

  • Legal disclosure and support links (terms of service, privacy policy, help, about, and support email) now configurable

  • Over a dozen new configuration options in System Console

Mobile Experience 

  • iOS reference app now available from iTunes, compiled from open source repo

  • Date headers now show when scrolling on mobile, so you can quickly see when messages were sent

  • Added “rapid scroll” support for jumping quickily to bottom of channels on mobile

New Features 

Mobile Experience

  • Date headers now show when scrolling on mobile, so you can quickly see when messages were sent

  • Added “rapid scroll” support for jumping quickily to bottom of channels on mobile

Authentication

  • Accounts can now switch between email and GitLab SSO sign-in options

  • New ability to customize session token length

System Console

  • Added Legal and Support Settings so System Administrators can change the default Terms of Service, Privacy Policy, and Help links

  • Under Service Settings added options to customize expiry of web, mobile and SSO session tokens, expiry of caches in memory, and an EnableDeveloper option to turn on Developer Mode which alerts users to any console errors that occur

Improvements 

Performance and Testing

  • Added logging for email and push notifications events in DEBUG mode

Integrations

  • Added support to allow optional parameters in the Content-Type of incoming webhook requests

Files and Images

  • Animated GIFs autoplay in the image previewer

Notifications and Email

  • Changed email notifications to display the server’s local timezone instead of UTC

User Interface

  • Updated the “About Mattermost” dialog formatting

  • Going to domain/teamname now goes to the last channel of your previous session, instead of Town Square

  • Various improvements to mobile UI, including a floating date indicator and the ability to quickly scroll to the bottom of the channel

Bug Fixes 

  • Fixed issue where usernames containing a “.” did not get mention notifications

  • Fixed issue where System Console did not save the “Send push notifications” setting

  • Fixed issue with Font Display cancel button not working in Account Settings menu

  • Fixed incorrect default for “Team Name Display” settings

  • Fixed issue where various media files appeared broken in the media player on some browsers

  • Fixed cross-contamination issue when multiple accounts log into the same team on the same browser

  • Fixed issue where color pickers did not update when a theme was pasted in

  • Increased the maximum number of channels

Compatibility 

Config.json Changes from v1.3 to v1.4 

Multiple settings were added to config.json. Below is a list of the changes and their new default values in a fresh install.

The following options can be modified in the System Console:

  • Under ServiceSettings in config.json:

    • Added: "EnableDeveloper": false to set whether developer mode is enabled, which alerts users to any console errors that occur

    • Added: "SessionLengthWebInDays" : 30 to set the number of days before web sessions expire and users will need to log in again

    • Added: "SessionLengthMobileInDays" : 30 to set the number of days before native mobile sessions expire

    • Added: "SessionLengthSSOInDays" : 30 to set the number of days before SSO sessions expire

    • Added: "SessionCacheInMinutes" : 10 to set the number of minutes to cache a session in memory

  • Added SupportSettings section to config.json:

    • Added: "TermsOfServiceLink": "/static/help/terms.html" to allow System Administrators to set the terms of service link

    • Added: "PrivacyPolicyLink": "/static/help/privacy.html" to allow System Administrators to set the privacy policy link

    • Added: "AboutLink": "/static/help/about.html" to allow System Administrators to set the about page link

    • Added: "HelpLink": "/static/help/help.html" to allow System Administrators to set the help page link

    • Added: "ReportAProblemLink": "/static/help/report_problem.html" to allow System Administrators to set the home page for the support website

    • Added: "SupportEmail":"feedback@mattermost.com" to allow System Administrators to set an email address for feedback and support requests

The following options are not present in the System Console, and can be modified manually in the config.json file:

  • Under FileSettings in config.json:

    • Added: "AmazonS3Endpoint": "" to set an endpoint URL for an Amazon S3 instance

    • Added: "AmazonS3BucketEndpoint": "" to set an endpoint URL for Amazon S3 buckets

    • Added: "AmazonS3LocationConstraint": false to set whether the S3 region is location constrained

    • Added: "AmazonS3LowercaseBucket": false to set whether bucket names are fully lowercase or not

Known Issues 

  • When navigating to a page with new messages as well as message containing inline images added via markdown, the channel may move up and down while loading the inline images

  • Microsoft Edge does not yet support drag and drop

  • No scroll bar in center channel

  • Pasting images into text box fails to upload on Firefox, Safari, and IE11

  • Public links for attachments attempt to download the file on IE, Edge, and Safari

  • Importing from Slack breaks @mentions and fails to load in certain cases with comments on files

  • System Console > TEAMS > Statistics > Newly Created Users shows all of the users are created “just now”

  • Favicon does not always become red when @mentions and direct messages are received on an inactive browser tab

  • Searching for a phrase in quotations returns more than just the phrase on Mattermost installations with a Postgres database

  • Deleted/Archived channels are not removed from the “More” menu of the person that deleted/archived the channel until after refresh

  • Search results don’t highlight searches for @username, non-latin characters, or terms inside Markdown code blocks

  • Searching for a username or hashtag containing a dot returns a search where the dot is replaced with the “or” operator

  • Hashtags less than three characters long are not searchable

  • After deactivating a team member, the person remains in the channel counter

  • Certain symbols (<,>,-,+,=,%,^,#,*,|) directly before or after a hashtag cause the message to not show up in a hashtag search

  • Security tab > Active Sessions reports iOS devices as “unknown”

  • Getting a permalink for the second message or later consecutively sent in a group by the same author displaces the copy link popover or causes an error

Contributors 

Many thanks to our external contributors. In no particular order:

Release v1.3.0 

Release date: 2015-12-16

Release Highlights 

iOS App 

Search Upgrades 

  • Jump to search results in archives using new message permalinks

  • It’s easier to find what you’re looking for with improved auto-complete in search

Advanced Formatting 

  • Express more in symbols, with new emoji auto-complete

  • Express more in numbers, with rendering of mathematical expressions using Latex (start code blocks with ```latex)

  • Personalize your look with new custom font settings under Account Settings > Display > Display Font

New Features 

Authentication

  • Added unofficial SSO support for GitHub.com and GitHub Enterprise using GitLab UI

Archives

  • Added permalink feature that lets users link to a post in the message archives

  • Added ability to “Jump” to archives from a search result

Account Settings

  • Added “Preview pre-release features” setting, to allow user to preview early features ahead of their official release

  • Added “Display font” setting, so users can select which font to use

Messaging & Comments

  • Added in-line previews for links from select websites and for URLs pointing to an image (enabled via Account Settings -> Advanced -> Preview pre-release features)

  • Added emoji autocomplete

Extras

Improvements 

Performance

  • Updated getProfiles service to return less data

  • Refactored several modals to use React-Boostrap

  • Refactored the center channel

Messaging & Comments

  • Added Markdown support for task lists

  • Added “Help” link for messaging

  • Added ability to preview a Markdown message before sending (enabled via Account Settings -> Advanced -> Preview pre-release features)

Onboarding

  • Minor upgrades to tutorial

User Interface

  • Visually combined sequential messages from the same user

  • Added ability to rename “Town Square”

  • Teammate name display option now applies to messages and comments

  • Menus and search improved on mobile UI

  • Switched to Emoji One style emojis

Bug Fixes 

  • Removed the @all mention to keep users from accidentally spamming team sites

  • Fixed bug where the member list only showed “20” members for channels with more than 20 members

  • Fixed bug where the channel sidebar didn’t order correctly on Postgres databases

  • Fixed bug where search results did not highlight when searching with quotation marks, wildcard, or in: and from: modifiers

  • Fixed bug with the cancel button not properly resetting the text in some account settings fields

  • Fixed bug where editing a post to be empty caused a 404 error

  • Fixed bug where logging out did not work properly on IE11

  • Fixed issue where refreshing the page with the right hand sidebar open caused “…” to show up in place of usernames

  • Fixed issue where invite to channel modal did not update properly when switching between channels

Compatibility 

Config.json Changes from v1.2 to v1.3 

Multiple settings were added to config.json. These options can be modified in the System Console, or manually updated in the existing config.json file. This is a list of changes and their new default values in a fresh install:

  • Under EmailSettings in config.json:

    • Removed: "ApplePushServer": "" which is replaced with SendPushNotifications and PushNotificationServer

    • Removed: "ApplePushCertPublic": "" which is replaced with SendPushNotifications and PushNotificationServer

    • Removed: "ApplePushCertPrivate": "" which is replaced with SendPushNotifications and PushNotificationServer

    • Added: "SendPushNotifications": false to control whether mobile push notifications are sent to the server specified in PushNotificationServer

    • Added: "PushNotificationServer": "" to specify the address of the proxy server that re-sends push notifications to their respective services like APNS (Apple Push Notification Services)

Known Issues 

  • System Console does not save Email Settings when “Save” is clicked

  • When navigating to a page with new messages as well as message containing inline images added via markdown, the channel may move up and down while loading the inline images

  • Microsoft Edge does not yet support drag and drop

  • Media files of type .avi .mkv .wmv .mov .flv .mp4a do not play properly

  • No scroll bar in center channel

  • Pasting images into text box fails to upload on Firefox, Safari, and IE11

  • Slack import @mentions break

  • Usernames containing a “.” do not get mention notifications

Contributors 

Many thanks to our external contributors. In no particular order:

Release v1.2.1 

  • Released: 2015-11-16

Security Notice 

Mattermost v1.2.1 is a Quality Release addressing a security issue in v1.2.0 affecting a newly introduced outgoing webhooks feature. Specifically, in v1.2.0 there was a check missing from outgoing webhooks, so a team member creating outgoing webhooks could in theory find a way to listen to messages in private channels containing popular words like “a”, “the”, “at”, etc. For added security, Mattermost v1.2.1 now installs with incoming and outgoing webhooks disabled by default.

To limit the impact of this security issue, Mattermost v1.2.0 has been removed from the source repo. It is recommended that anyone who’s installed v1.2.0 upgrade to v1.2.1 via the procedure described in the Mattermost Upgrade Guide.

Release Highlights 

Outgoing webhooks 

  • Mattermost users can now interact with external applications using outgoing webhooks

  • An application template demonstrating user queries sent to the Giphy search engine via Mattermost webhooks now available

  • A community application, Matterbridge, shows how to use webhooks to connect Mattermost with IRC

Search Scope Modifiers 

  • Adding search term in:[channel_url_name] now limits searches within a specific channel

  • Adding search term from:[username] now limits searches to messages from a specific user

Syntax Highlighting 

  • Syntax highlight for code blocks now available for Diff, Apache, Makefile, HTTP, JSON, Markdown, JavaScript, CSS, nginx, ObjectiveC, Python, XML, Perl, Bash, PHP, CoffeeScript, C, SQL, Go, Ruby, Java, and ini

Usability Improvements 

  • Added tutorial to teach new users how to use Mattermost

  • Various performance improvements to support teams with hundreds of users

  • Direct Messages “More” menu now lets you search for users by username and real name

Improvements 

Onboarding

  • New tutorial explaining how to use Mattermost for new users

Messaging and Notifications

  • Users can now search for teammates to add to Direct Message list via More menu

  • Users can now personalize Direct Messages list by removing users listed

  • Link previews - Adding URL with .gif file adds image below message

  • Added new browser tab alerts to indicate unread messages and mentions

Search

  • Adding search term in:[channel_url_name] now limits searches within a specific channel

  • Adding search term from:[username] now limits searches to messages from a specific user

  • Tip explaining search options when clicking into search box

Integrations

User Interface

  • Member list in Channel display now scrollable, and includes Message button to message channel members directly

  • Added ability to edit previous message by hitting UP arrow

  • Syntax highlighting added for code blocks

    • Languages include Diff, Apache, Makefile, HTTP, JSON, Markdown, Java, CSS, nginx, ObjectiveC, Python, XML, Perl, Bash, PHP, CoffeeScript, C, SQL, Go, Ruby, Java, and ini.

    • Use by adding the name of the language on the first link of the code block, for example: ```python

    • Syntax color theme can be defined under Account Settings > Appearance Settings > Custom Theme

  • Updated Drag & Drop UI

  • Added 24 hour time display option

Team Settings

  • Added Team Settings option to include account creation URL on team login page

  • Added Team Settings option to include link to given team on root page

  • Ability to rotate invite code for invite URL

Extras

  • Added /shrug KEYWORD command to output: ¯\_(ツ)_/¯ KEYWORD

  • Added /me KEYWORD command to output: KEYWORD

  • Added setting option to send a message on control-enter instead of enter

System Console

  • New statistics page

  • Configurable option to create an account directly from team page

Bug Fixes 

  • Various fixes to theme colors

  • Fixed issue with the centre channel scroll position jumping when right hand side was opened and closed

  • Added support for simultaneous login to different teams in different browser tabs

  • Incoming webhooks no longer disrupted when channel is deleted

  • You can now paste a Mattermost incoming webhook URL into the same field designed for a Slack URL and integrations will work

Compatibility 

  • IE 11 new minimum version for IE, since IE 10 share fell below 5% on desktop

  • Safari 9 new minimum version for Safari, since Safari 7 and 8 fell below 1% each on desktop

Config.json Changes from v1.1 to v1.2 

Multiple settings were added to config.json. These options can be modified in the System Console, or manually updated in the existing config.json file. This is a list of changes and their new default values in a fresh install:

  • Under TeamSettings in config.json:

    • Added: "RestrictTeamNames": true to control whether team names can contain reserved words like www, admin, support, test, etc.

    • Added: "EnableTeamListing": false to control whether teams can be listed on the root page of the site

  • Under ServiceSettings in config.json

    • Added: "EnableOutgoingWebhooks": false to control whether outgoing webhooks are enabled

    • Changed: "EnableIncomingWebhooks": true to "EnableIncomingWebhooks": false to turn incoming webhooks off by default, to increase security of default install. Documentation updated to enable webhooks before use.

Database Changes from v1.1 to v1.2 

The following is for informational purposes only, no action needed. Mattermost automatically upgrades database tables from the previous version’s schema using only additions. Sessions table is dropped and rebuilt, no team data is affected by this.

Channels Table 

  1. Renamed Description to Header

  2. Added Purpose column with type varchar(1024)

Preferences Table 

  1. Added Preferences Table

Teams Table 

  1. Added InviteId column with type varchar(32)

  2. Added AllowOpenInvite column with type tinyint(1)

  3. Added AllowTeamListing column with type tinyint(1)

  4. Added idx_teams_invite_id index

Known Issues 

  • When navigating to a page with new messages as well as message containing inline images added via markdown, the channel may move up and down while loading the inline images

  • Microsoft Edge does not yet support drag and drop

  • After upgrading to v1.2 existing users will see the newly added tutorial tips upon login (this is a special case for v1.2 and will not happen in future upgrades)

  • Channel list becomes reordered when there are lowercase channel names in a Postgres database

  • Member list only shows “20” members for channels with more than 20 members

  • Searches containing punctuation are not highlighted in the results (including in: or from: search modifiers and searches with quotations)

  • Media files of type .avi .mkv .wmv .mov .flv .mp4a do not play properly

  • Editing a post so that it’s text is blank (which should delete it) throws a 404

  • No scroll bar in centre channel

  • Theme color import from Slack fails to import the “Active Channel” selection color

  • Pasting images into text box fails to upload on Firefox and Safari

  • Users cannot claim accounts imported from Slack via password reset

  • Slack import @mentions break

Contributors 

Many thanks to our external contributors. In no particular order:

Release v1.2.0 (Redacted Release) 

  • Final release: 2015-11-16 (Note: This release was removed from public availability and replaced by v1.2.1 owing to a security issue with the new outgoing webhooks feature. See v1.2.1 Release Notes for details).

Release v1.1.1 (Quality Release) 

Released 2015-10-20

About Quality Releases 

This is a Quality Release (v1.1.1) and recommended only for users needing a fix to the specific issue listed below. All other users should use the most recent major stable build release (v1.1.0).

View more information on Mattermost release numbering.

Release Purpose 

Provide option for upgrading database from Mattermost v0.7 to v1.1 

Upgrading Mattermost v0.7 to Mattermost v1.1 originally required installing Mattermost v1.0 to upgrade from the Mattermost v0.7 database, followed by an install of Mattermost v1.1.

This was problematic for installing Mattermost with GitLab omnibus since GitLab 8.0 contained Mattermost v0.7 and GitLab 8.1 was to include Mattermost v1.1

Therefore Mattermost v1.1.1 was created that can upgrade the database in Mattermost v0.7 to Mattermost v1.1 directly.

Users who configured Mattermost v0.7 within GitLab via the config.json file should consult documentation on upgrading configurations from Mattermost v0.7 to Mattermost v1.1.

Removes 32-char limit on salts 

Mattermost v1.1 introduced a 32-char limit on salts that broke the salt generating in GitLab and this restriction was removed for 1.1.1.

Release v1.1.0 

Released: 2015-10-16

Release Highlights 

Incoming Webhooks 

Mattermost now supports incoming webhooks for channels and private groups. This developer feature is available from the Account Settings -> Integrations menu. Documentation on how developers can use the webhook functionality to build custom integrations, along with samples, is available at https://docs.mattermost.com/guides/integration.html.

Improvements 

Integrations

  • Improved support for incoming webhooks, including the ability to override a username and post as a bot instead

Documentation

  • Added documentation on config.json and System Console settings

  • Docker Toolbox replaces deprecated Boot2Docker instructions in container install documentation

Theme Colors

  • Improved appearance of dark themes

System Console

  • Client side errors now written to server logs

  • Added “EnableSecurityFixAlert” option to receive alerts on relevant security fix alerts

  • Various improvements to System Console UI and help text

Messaging and Notifications

  • Replaced “Quiet Mode” in the Channel Notification Settings with an option to only show unread indicator when mentioned

Bug Fixes 

  • Fixed regression causing “Get Public Link” on images not to work

  • Fixed bug where certain characters caused search errors

  • Fixed bug where System Administrator did not have Team Administrator permissions

  • Fixed bug causing scrolling to jump when the right hand sidebar opened and closed

Known Issues 

  • Slack import is unstable due to change in Slack export format

  • Uploading a .flac file breaks the file previewer on iOS

Compatibility 

Config.json Changes from v1.0 to v1.1 

Service Settings 

Multiple settings were added to config.json and System Console UI. Prior to upgrading the Mattermost binaries from the previous versions, these options would need to be manually updated in existing config.json file. This is a list of changes and their new default values in a fresh install:

  • Under ServiceSettings in config.json:

    • Added: "EnablePostIconOverride": false to control whether webhooks can override profile pictures

    • Added: "EnablePostUsernameOverride": false to control whether webhooks can override profile pictures

    • Added: "EnableSecurityFixAlert": true to control whether the system is alerted to security updates

Database Changes from v1.0 to v1.1 

The following is for informational purposes only, no action needed. Mattermost automatically upgrades database tables from the previous version’s schema using only additions. Sessions table is dropped and rebuilt, no team data is affected by this.

ChannelMembers Table 

  1. Removed NotifyLevel column

  2. Added NotifyProps column with type varchar(2000) and default value {}

Contributors 

Many thanks to our external contributors. In no particular order:

Release v1.0.0 

Released 2015-10-02

Release Highlights 

Markdown 

Markdown support is now available across messages, comments and channel descriptions for:

  • Headings - in five different sizes to help organize your thoughts

  • Lists - both numbered and bullets

  • Font formatting - including bold, italics, ~~strikethrough~~, code, links, and block quotes)

  • In-line images - useful for creating buttons and status messages

  • Tables - for keeping things organized

  • Emoticons - translation of emoji codes to images like :sheep: :boom: :rage1: :+1:

See documentation for full details.

Themes 

Themes as been significantly upgraded in this release with:

  • 4 pre-set themes, two light and two dark, to customize your experience

  • 18 detailed color setting options to precisely match the colors of your other tools or preferences

  • Ability to import themes from Slack

System console and command line tools 

Added new web-based System Console for managing instance level configuration. This lets IT admins conveniently:

  • access core settings, like server, database, email, rate limiting, file store, SSO, and log settings,

  • monitor operations, by quickly accessing log files and user roles, and

  • manage teams, with essential functions such as team role assignment and password reset

In addition new command line tools are available for managing Mattermost system roles, creating users, resetting passwords, getting version info and other basic tasks.

Run ./platform -h for documentation using the new command line tool.

New Features 

Messaging, Comments and Notifications

  • Full markdown support in messages, comments, and channel description

  • Support for emoji codes rendering to image files

Files and Images

  • Added ability to play video and audio files

System Console

  • UI to change config.json settings

  • Ability to view log files from console

  • Ability to reset user passwords

  • Ability for IT admin to manage members across multiple teams from single interface

User Interface

  • Ability to set custom theme colors

  • Replaced single color themes with pre-set themes

  • Added ability to import themes from Slack

Integrations

  • (Preview) Initial support for incoming webhooks

Improvements 

Documentation

  • Added production installation instructions

  • Updated software and hardware requirements documentation

  • Re-organized install instructions out of README and into separate files

  • Added Code Contribution Guidelines

  • Added new hardware sizing recommendations

  • Consolidated licensing information into LICENSE.txt and NOTICE.txt

  • Added markdown documentation

Performance

  • Enabled Javascript optimizations

  • Numerous improvements in center channel and mobile web

Code Quality

  • Reformatted Javascript per Mattermost Style Guide

User Interface

  • Added version, build number, build date and build hash under Account Settings -> Security

Licensing

  • Compiled version of Mattermost v1.0.0 now available under MIT license

Bug Fixes 

  • Fixed issue so that SSO option automatically set EmailVerified=true (it was false previously)

Compatibility 

A large number of settings were changed in config.json and a System Console UI was added. This is a very large change due to Mattermost releasing as v1.0 and it’s unlikely a change of this size would happen again.

Prior to upgrading the Mattermost binaries from the previous versions, the below options would need to be manually updated in your existing config.json file to migrate successfully. This is a list of changes and their new default values in a fresh install:

Config.json Changes from v0.7 to v1.0 

Service Settings 

  • Under ServiceSettings in config.json:

    • Moved: "SiteName": "Mattermost" which was added to TeamSettings

    • Removed: "Mode" : "dev" which deprecates a high level dev mode, now replaced by granular controls

    • Renamed: "AllowTesting" : false to "EnableTesting": false which allows the use of /loadtest slash commands during development

    • Removed: "UseSSL": false boolean replaced by "ConnectionSecurity": "" under Security with new options: None (""), TLS ("TLS") and StartTLS (‘“StartTLS”`)

    • Renamed: "Port": "8065" to "ListenAddress": ":8065" to define address on which to listen. Must be prepended with a colon.

    • Removed: "Version": "developer" removed and version information now stored in model/version.go

    • Removed: "Shards": {} which was not used

    • Moved: "InviteSalt": "gxHVDcKUyP2y1eiyW8S8na1UYQAfq6J6" to EmailSettings

    • Moved: "PublicLinkSalt": "TO3pTyXIZzwHiwyZgGql7lM7DG3zeId4" to FileSettings

    • Renamed and Moved "ResetSalt": "IPxFzSfnDFsNsRafZxz8NaYqFKhf9y2t" to "PasswordResetSalt": "vZ4DcKyVVRlKHHJpexcuXzojkE5PZ5eL" and moved to EmailSettings

    • Removed: "AnalyticsUrl": "" which was not used

    • Removed: "UseLocalStorage": true which is replaced by "DriverName": "local" in FileSettings

    • Renamed and Moved: "StorageDirectory": "./data/" to Directory and moved to FileSettings

    • Renamed: "AllowedLoginAttempts": 10 to "MaximumLoginAttempts": 10

    • Renamed, Reversed and Moved: "DisableEmailSignUp": false renamed "EnableSignUpWithEmail": true, reversed meaning of true, and moved to EmailSettings

    • Added: "EnableOAuthServiceProvider": false to enable OAuth2 service provider functionality

    • Added: "EnableIncomingWebhooks": false to enable incoming webhooks feature

Team Settings 

  • Under TeamSettings in config.json:

    • Renamed: "AllowPublicLink": true renamed to "EnablePublicLink": true and moved to FileSettings

    • Removed: AllowValetDefault which was a guest account feature that is deprecated

    • Removed: "TermsLink": "/static/help/configure_links.html" removed since option didn’t need configuration

    • Removed: "PrivacyLink": "/static/help/configure_links.html" removed since option didn’t need configuration

    • Removed: "AboutLink": "/static/help/configure_links.html" removed since option didn’t need configuration

    • Removed: "HelpLink": "/static/help/configure_links.html" removed since option didn’t need configuration

    • Removed: "ReportProblemLink": "/static/help/configure_links.html" removed since option didn’t need configuration

    • Removed: "TourLink": "/static/help/configure_links.html" removed since option didn’t need configuration

    • Removed: "DefaultThemeColor": "#2389D7" removed since theme colors changed from 1 to 18, default theme color option may be added back later after theme color design stablizes

    • Renamed: "DisableTeamCreation": false to "EnableUserCreation": true and reversed

    • Added: "EnableUserCreation": true added to disable ability to create new user accounts in the system

SSO Settings 

  • Under SSOSettings in config.json:

    • Renamed Category: SSOSettings to GitLabSettings

    • Renamed: "Allow": false to "Enable": false to enable GitLab SSO

AWS Settings 

  • Under AWSSettings in config.json:

    • This section was removed and settings moved to FileSettings

    • Renamed and Moved: "S3AccessKeyId": "" renamed "AmazonS3AccessKeyId": "", and moved to FileSettings

    • Renamed and Moved: "S3SecretAccessKey": "" renamed "AmazonS3SecretAccessKey": "", and moved to FileSettings

    • Renamed and Moved: "S3Bucket": "" renamed "AmazonS3Bucket": "", and moved to FileSettings

    • Renamed and Moved: "S3Region": "" renamed "AmazonS3Region": "", and moved to FileSettings

Image Settings 

  • Under ImageSettings in config.json:

    • Renamed: "ImageSettings" section to "FileSettings"

    • Added: "DriverName" : "local" to specify the file storage method, amazons3 can also be used to setup S3

EmailSettings 

  • Under EmailSettings in config.json:

    • Removed: "ByPassEmail": "true" which is replaced with SendEmailNotifications and RequireEmailVerification

    • Added: "SendEmailNotifications" : "false" to control whether email notifications are sent

    • Added: "RequireEmailVerification" : "false" to control if users need to verify their emails

    • Replaced: "UseTLS": "false" with "ConnectionSecurity": "" with options: None (""), TLS ("TLS") and StartTLS ("StartTLS")

    • Replaced: "UseStartTLS": "false" with "ConnectionSecurity": "" with options: None (""), TLS ("TLS") and StartTLS ("StartTLS")

Privacy Settings 

  • Under PrivacySettings in config.json:

    • Removed: "ShowPhoneNumber": "true" which was not used

    • Removed: "ShowSkypeId" : "true" which was not used

Database Changes from v0.7 to v1.0 

The following is for informational purposes only, no action needed. Mattermost automatically upgrades database tables from the previous version’s schema using only additions. Sessions table is dropped and rebuilt, no team data is affected by this.

Users Table 

  1. Added ThemeProps column with type varchar(2000) and default value {}

Teams Table 

  1. Removed AllowValet column

Sessions Table 

  1. Renamed Id column Token

  2. Renamed AltId column Id

  3. Added IsOAuth column with type tinyint(1) and default value 0

OAuthAccessData Table 

  1. Added new table OAuthAccessData

  2. Added AuthCode column with type varchar(128)

  3. Added Token column with type varchar(26) as the primary key

  4. Added RefreshToken column with type varchar(26)

  5. Added RedirectUri column with type varchar(256)

  6. Added index on AuthCode column

OAuthApps Table 

  1. Added new table OAuthApps

  2. Added Id column with type varchar(26) as primary key

  3. Added CreatorId column with type varchar(26)

  4. Added CreateAt column with type bigint(20)

  5. Added UpdateAt column with type bigint(20)

  6. Added ClientSecret column with type varchar(128)

  7. Added Name column with type varchar(64)

  8. Added Description column with type varchar(512)

  9. Added CallbackUrls column with type varchar(1024)

  10. Added Homepage column with type varchar(256)

  11. Added index on CreatorId column

OAuthAuthData Table 

  1. Added new table OAuthAuthData

  2. Added ClientId column with type varchar(26)

  3. Added UserId column with type varchar(26)

  4. Added Code column with type varchar(128) as primary key

  5. Added ExpiresIn column with type int(11)

  6. Added CreateAt column with type bigint(20)

  7. Added State column with type varchar(128)

  8. Added Scope column with type varchar(128)

IncomingWebhooks Table 

  1. Added new table IncomingWebhooks

  2. Added Id column with type varchar(26) as primary key

  3. Added CreateAt column with type bigint(20)

  4. Added UpdateAt column with type bigint(20)

  5. Added DeleteAt column with type bigint(20)

  6. Added UserId column with type varchar(26)

  7. Added ChannelId column with type varchar(26)

  8. Added TeamId column with type varchar(26)

  9. Added index on UserId column

  10. Added index on TeamId column

Systems Table 

  1. Added new table Systems

  2. Added Name column with type varchar(64) as primary key

  3. Added Value column with type varchar(1024)`

Contributors 

Many thanks to our external contributors. In no particular order:

Release v0.7.0 (Beta1) 

Released 2015-09-05

Release Highlights 

Improved GitLab Mattermost support 

Following the release of Mattermost v0.6.0 Alpha, GitLab 7.14 offered an automated install of Mattermost with GitLab Single Sign-On (co-branded as “GitLab Mattermost”) in its omnibus installer.

New features, improvements, and bug fixes recommended by the GitLab community were incorporated into Mattermost v0.7.0 Beta1–in particular, extending support of GitLab SSO to team creation, and restricting team creation to users with verified emails from a configurable list of domains.

Slack Import (Preview) 

Preview of Slack import functionality supports the processing of an “Export” file from Slack containing account information and public channel archives from a Slack team.

  • In the feature preview, emails and usernames from Slack are used to create new Mattermost accounts, which users can activate by going to the Password Reset screen in Mattermost to set new credentials.

  • Once logged in, users will have access to previous Slack messages shared in public channels, now imported to Mattermost.

Limitations:

  • Slack does not export files or images your team has stored in Slack’s database. Mattermost will provide links to the location of your assets in Slack’s web UI.

  • Slack does not export any content from private groups or direct messages that your team has stored in Slack’s database.

  • The Preview release of Slack Import does not offer pre-checks or roll-back and will not import Slack accounts with username or email address collisions with existing Mattermost accounts. Also, Slack channel names with underscores will not import. Also, mentions do not yet resolve as Mattermost usernames (still show Slack ID). These issues are being addressed in Mattermost v0.8.0 Migration Support.

New Features 

GitLab Mattermost

  • Ability to create teams using GitLab SSO (previously GitLab SSO only supported account creation and sign-in)

  • Ability to restrict team creation to GitLab SSO and/or users with email verified from a specific list of domains.

File and Image Sharing

  • New drag-and-drop file sharing to messages and comments

  • Ability to paste images from clipboard to messages and comments

Messaging, Comments and Notifications

  • Send messages faster with from optimistic posting and retry on failure

Documentation

  • New style guidelines for Go, React and Javascript

Improvements 

Messaging, Comments and Notifications

  • Performance improvements to channel rendering

  • Added “Unread posts” in left hand sidebar when notification indicator is off-screen

Documentation

  • Install documentation improved based on early adopter feedback

Bug Fixes 

  • Fixed multiple issues with GitLab SSO, installation and on-boarding

  • Fixed multiple IE 10 issues

  • Fixed broken link in verify email function

  • Fixed public links not working on mobile

Contributors 

Many thanks to our external contributors. In no particular order:

Special thanks to the GitLab Mattermost early adopter community who influenced this release, and who play a pivotal role in bringing Mattermost to over 100,000 organizations using GitLab today. In no particular order:

Extra special thanks to GitLab community leaders for successful release of GitLab Mattermost Alpha:

Release v0.6.0 (Alpha) 

Released 2015-08-07

Release Highlights 

  • Simplified on-prem install

  • Support for GitLab Mattermost (GitLab SSO, Postgres support, IE 10+ support)

Compatibility 

Note: While use of Mattermost Preview (v0.5.0) and Mattermost Alpha (v0.6.0) in production is not recommended, we document compatibility considerations for a small number of organizations running Mattermost in production, supported directly by Mattermost product team.

  • Switched Team URLs from team.domain.com to domain.com/team

New Features 

GitLab Mattermost

  • OAuth2 support for GitLab Single Sign-On

  • PostgreSQL support for GitLab Mattermost users

  • Support for Internet Explorer 10+ for GitLab Mattermost users

File and Image Sharing

  • New thumbnails and formatting for files and images

Messaging, Comments and Notifications

  • Users now see posts they sent highlighted in a different color

  • Mentions can now also trigger on user-defined words

Security and Administration

  • Enable users to view and log out of active sessions

  • Team Admin can now delete posts from any user

On-boarding

  • “Off-Topic” now available as default channel, in addition to “Town Square”

Improvements 

Installation

  • New “ByPassEmail” setting enables Mattermost to operate without having to set up email

  • New option to use local storage instead of S3

  • Removed use of Redis to simplify on-premise installation

On-boarding

  • Team setup wizard updated with usability improvements

Documentation

  • Install documentation improved based on early adopter feedback

Contributors 

Many thanks to our external contributors. In no particular order:

Release v0.5.0 (Preview) 

Released 2015-06-24

Release Highlights 

  • First release of Mattermost as a team communication service for sharing messagse and files across PCs and phones, with archiving and instant search.

New Features 

Messaging and File Sharing

  • Send messages, comments, files and images across public, private and 1-1 channels

  • Personalize notifications for unreads and mentions by channel

  • Use #hashtags to tag and find messages, discussions and files

Archiving and Search

  • Search public and private channels for historical messages and comments

  • View recent mentions of your name, username, nickname, and custom search terms

Anywhere Access

  • Use Mattermost from web-enabled PCs and phones

  • Define team-specific branding and color themes across your devices