- Breaking changes: GraphQL mutations are now limited to single‑use and the /utils/hash/generate and /utils/hash/verify endpoints have been removed.
- Security hardening includes stricter upload path validation, fixes for stored XSS and LFI vulnerabilities, IPv4‑compatible address classification, and updates to address security advisories in dependencies.
- New features: added PROJECT_OWNER_ENABLED environment variable, UI enhancements (kbd component, tooltip redesign), and a new distroless Docker image variant alongside the hardened standard image.
v12.1.0
Official Directus changelog summary with source attribution, release tags, and community reactions.
Track this Directus release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Directus release note into a weekly digest for the tools you actually use.
Create digestMore Directus changelog updates
Fixed storage connection leaks for all drivers and made `exists()` throw on lookup failures, requiring error handling (breaking).
⚠️ Breaking: Minimal app access now restricts readable settings fields and the WYSIWYG editor switches from TinyMCE to Tiptap, dropping TinyMCE customizations.