⚠️ Potential Breaking Changes

Added multi-domain support for OAuth/OpenID (#26312) SSO callback URL generation and redirect validation now includes port matching to ensure redirects target the correct server.

Fixed getAsset returning all file fields instead of only those allowed by the users permissions (#25905) getAsset / GET /assets/:id now respects directus_files permissions when returning file based fields.

• @directus/app
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml) controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and has now been fully removed.
  • Removed the "Comment" tab from the activities page (#26440 by @Abdallah-Awwad)
• @directus/api
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml) controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and has now been fully removed.
  • Fixed getAsset returning all file fields instead of only those allowed by the users permissions (#25905 by @gaetansenn)
  • Added multi-domain support for OAuth/OpenID (#26312 by @gaetansenn)
  • Added a new AI_ENABLED environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
• @directus/system-data
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml) controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and has now been fully removed.
• @directus/specs
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml) controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and has now been fully removed.
• @directus/types
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml) controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and has now been fully removed.
• @directus/sdk
  • Removed the deprecated /webhooks functionality across the stack. This includes the API route and its related tests, (#26311 by @mobml) controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and has now been fully removed.

✨ New Features & Improvements

• @directus/app
  • Added a new AI_ENABLED environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
  • Added concurrency control for file uploads via a new FILES_MAX_UPLOAD_CONCURRENCY env variable (#26424 by @thomas-svrts)
  • Added nested validation rules to validation error notice (#26389 by @robluton)
  • Added Comparison modal wysiwyg diff highlighting (#26301 by @robluton)
  • Fixed an issue that would cause some drawer header icons from being displayed too large (#26442 by @kekekuli)
• @directus/api
  • Added concurrency control for file uploads via a new FILES_MAX_UPLOAD_CONCURRENCY env variable (#26424 by @thomas-svrts)
• @directus/env
  • Added multi-domain support for OAuth/OpenID (#26312 by @gaetansenn)

🐛 Bug Fixes & Optimizations

• @directus/app
  • Added multi-domain support for OAuth/OpenID (#26312 by @gaetansenn)
  • Improves behavior of the in-studio back button (#26427 by @rijkvanzanten)
  • Fixed disabled state for datetime, file, select-dropdown-m2o & collection-item dropdowns interfaces (#26365 by @ComfortablyCoding)
  • Fixed GraphQL error when duplicating M2A items with same name fields of conflicting types. (#26367 by @dstockton)
  • Enforces the eslint vue/no-undef-components rule in the sourcecode (#26390 by @rijkvanzanten)
  • Fixed incorrect initial slider fill position when the midpoint is not a valid stepped value (#26408 by @DamnItAzriel)
  • Fixed sticky column background in M2M list interface (#26401 by @vdr-smartdev-trinh)

📦 Published Versions

• @directus/app@15.0.0
• @directus/api@33.0.0
• @directus/composables@11.2.9
• create-directus-extension@11.0.25
• @directus/env@5.4.0
• @directus/extensions@3.0.16
• @directus/extensions-registry@3.0.16
• @directus/extensions-sdk@17.0.5
• @directus/memory@3.0.14
• @directus/pressure@3.0.14
• @directus/schema@13.0.5
• @directus/schema-builder@0.0.11
• @directus/specs@12.0.0
• @directus/storage-driver-azure@12.0.14
• @directus/storage-driver-cloudinary@12.0.14
• @directus/storage-driver-gcs@12.0.14
• @directus/storage-driver-s3@12.1.0
• @directus/storage-driver-supabase@3.0.14
• @directus/system-data@4.0.0
• @directus/themes@1.2.1
• @directus/types@14.0.0
• @directus/utils@13.1.1
• @directus/validation@2.0.14
• @directus/sdk@21.0.0