OpenTalk v26.2.2
Component versions
| Category | Component | Version |
|---|---|---|
| Frontend | web-frontend | v2.9.5 |
| Services | controller | v0.34.7 |
| Services | obelisk | v0.22.4 |
| Services | recorder | v0.17.8 |
| Services | roomserver | v0.1.6 |
| Services | smtp-mailer | v0.18.1 |
| Services | orchestrator | v0.8.4 |
| Integrations | outlook-add-in | v0.4.2 |
| Deployment | ot-setup | v26.2.2 |
| Deployment | opentalk-compose | v26.2.2 |
| 3rd-Party Components | ot-spacedeck | v3.0.3 |
| 3rd-Party Components | ot-etherpad | v2.0.4-1 |
| 3rd-Party Components | livekit-server | v1.13.10 |
| 3rd-Party Components | keycloak | v26.8.1-1 |
| 3rd-Party Components | postgres | v17.11.0 |
| 3rd-Party Components | rabbitmq | v4.3.7 |
| 3rd-Party Components | redis | v8.10.2 |
| 3rd-Party Components | minio | RELEASE.2025-10-15T17-29-55Z-1 |
| 3rd-Party Components | traefik-proxy | v3.7.16 |
| 3rd-Party Components | ndt-server | v0.25.3-1 |
| 3rd-Party Components | garage | v2.3.0-1 |
web-frontend v2.9.5
🚀 New features
🐛 Bug fixes
- (whiteboard) Set Excalidraw asset path without an inline script (!3741, #3617)
- (whiteboard) Isolate font-subsetting workers in production (!3741, #3617)
📦 Dependencies
web-frontend v2.9.4
🐛 Bug fixes
- (room) Return participants to lobby when meeting closes (!3679, #3561)
- (notifications) Clear time-limit warnings when meetings end (!3679, #3561)
- (waiting-room) Keep media controls enabled after moving to waiting room (!3714, #3590)
- (whiteboard): Self-host Excalidraw fonts instead of using the CDN (!3718, #3594)
📦 Dependencies
web-frontend v2.9.3
🐛 Bug fixes
- (coffee-break) Stop audio tracks on start (!3617, #3513)
- Handle join blocked events (!3633, #3526)
- (popout) Prevent duplicate audio track subscription (!3640, #3529)
- (signaling) Keep the participant limit screen visible and survive unknown messages (!3664, #3547)
- Calculate role correctly (!3688, #3555)
📦 Dependencies
controller v0.34.7
🐛 Bug fixes
- (test)
sync_files_and_set_missing_to_zerochecks for the wrong asset count (!2831) - (docs) Add missing
/signaling/{token}endpoint (!2831) - (docs) Fix typo (!2831)
- (docs) Fix typos in keycloak docs (!2831)
- (api-actix-web) Typo in variable name (!2831)
- (cache) Correct spelling mistakes (!2831)
- (controller) Map errors when retrying roomserver token request (!2831)
📦 Dependencies
- (deps) Update roomserver to 0.1.6 (!2831)
- (deps) Lock file maintenance (!2831)
- (deps) Update tabled (!2831)
- (deps) Drop
rustls-pemfiledependency (!2831)
Test
- Mark db tests as serial for nextest (!2831)
controller v0.34.6
🚀 New features
🐛 Bug fixes
📚 Documentation
📦 Dependencies
- (deps) Update dependencies (including roomserver 0.1.5) (!2827)
obelisk v0.22.4
🐛 Bug fixes
- Obelisk fails to start when the configured
sip.addris a domain (!642)
📦 Dependencies
- (deps) Update opentalk-roomserver-types to v0.1.6 (!643, #334)
- (deps) Update tokio to v1.54.1 and ignore irrelevant RUSTSEC (!643)
obelisk v0.22.3
Security
- Update base images to mitigate compromised eMudhra intermediate certificates
🐛 Bug fixes
- Run with at least 8 worker threads to avoid stalling issue (!631)
- Select correct H.264 payload format based on packetization-mode (!634)
- (justfile) Use opentalk-git-cliff for update-changelog (!639)
📚 Documentation
📦 Dependencies
- (deps) Update chacha20 to 0.10.2 (!639)
- (deps) Update webpki-roots to v1.0.11 (!639)
- (deps) Update rustls to v0.23.46 (!639)
- (deps) Update rustls-webpki to v0.103.16 (!639)
- (deps) Update rtrb to v0.3.5 (!639)
- (deps) Update h2 to v0.4.20 (!639)
- (deps) Document RUSTSEC-2026-0367, RUSTSEC-2026-0368, RUSTSEC-2026-0369 and RUSTSEC-2026-0258 (!639)
recorder v0.17.8
📦 Dependencies
- (deps) Update opentalk-roomserver-types to v0.1.6 (!891, #286)
- (deps) Update tokio to v1.54.1 and ignore crypto-bigint RUSTSEC (!891)
recorder v0.17.7
Security
- Update base images to mitigate compromised eMudhra intermediate certificates
🐛 Bug fixes
📦 Dependencies
- (deps) Update rustls to 0.23.46 (!889)
- (deps) Update yoke-derive to 0.8.4 (!889)
- (deps) Update rustls-webpki to 0.103.16 (!889)
- (deps) Update webpki-roots to 1.0.10 (!889)
- (deps) Document RUSTSEC-2026-0367, RUSTSEC-2026-0368 & RUSTSEC-2026-0369 (!889)
⚙ Miscellaneous
- (just) Add
use-branch-tagsfor changelog building (!889)
recorder v0.17.6
🐛 Bug fixes
- (environment) Fix parsing and deprecate inconsistent double underscore prefix (#271)
📦 Dependencies
- (deps) Lock file maintenance (!880)
roomserver v0.1.6
🐛 Bug fixes
- (meeting_details) Hide meeting details from users (!1342, #363)
- (room) Conference role is not considered when determining if a user can skip the waiting room (!1342, #351)
- (room) Sending a participant to the waiting room does not revoke their moderator rights (!1342, #354)
- (moderation) Lobby and conference role drift when role is changed in the conference (!1342)
- (roomserver) Close empty rooms when the last waiting connection leaves (!1342, #360)
- (room) Do not hold the room open for service users (!1342, #361)
- (room) Start the time limit countdown on the first join (!1342, #362)
- (roomserver) Allow renaming of call-in participants (!1343, #364)
📦 Dependencies
- (deps) Lock file maintenance (!1343)
roomserver v0.1.5
🐛 Bug fixes
- (debrief) Prevent sending redundant waiting room notifications (!1321, #302)
- (chat) Correctly log token bucket size (!1321)
- (timer) Include ready state when switching breakout rooms (!1321, #327)
- (livekit-proxy) Forward websocket pings (!1321)
- Ensure all events are send even with invalid participants (!1321, #335)
- Don't send events to disconnected participants (!1321)
- (roomserver) Send join_blocked within the signaling event envelope (!1330, #340)
- (livekit) Include livekit service_url for service participants (!1332)
- (recording) Disable recording module when e2ee is enabled (!1334, #344)
- Send livekit service_url to call-in services (!1335)
- (excalidraw) Do not send participants their own (volatile) broadcasts (!1338, #347)
⚙ Miscellaneous
📦 Dependencies
- (deps) Update rustls to 0.23.45 (!1339))
smtp-mailer v0.18.1
Security
- Update base images to mitigate compromised eMudhra intermediate certificates
📦 Dependencies
- (deps) Lock file maintenance (!836)
orchestrator v0.8.4
🚀 New features
- Add admin documentation (!270)
🐛 Bug fixes
- Apply auth middleware on protected service routes (!271)
- (orchestrator) Forward authorization header in signaling proxy requests (!272, #61)
- Preserve path in public_url when joining 'roomserver/' (!272, #62)
🔨 Refactor
Security
- Update base images to mitigate compromised eMudhra intermediate certificates
📦 Dependencies
- (deps) Lock file maintenance (!272)
outlook-add-in v0.4.2
Security
- Update base images to mitigate compromised eMudhra intermediate certificates
📦 Dependencies
- (deps) Update i18next-http-backend@latest to 4.0.4 (!308)
outlook-add-in v0.4.1
🐛 Bug fixes
- (ci) Use corepack to pin pnpm version in addin container build (!303)
📚 Documentation
- (publiccode) Use approved add-in name for marketplace listing (!303)
📦 Dependencies
- (deps) Bump valibot version to 1.4.2 (!303)
ot-setup v26.2.2
Changed
- Update container image versions related to the product version v26.2.2.
opentalk-compose v26.2.2
📦 Dependencies
- (deps) Update OpenTalk web frontend version v2.9.5 (!256)
- (deps) Update OpenTalk product version v26.2.2 (!256)
ot-etherpad v2.0.4-1
Security
- Update base images to mitigate compromised eMudhra intermediate certificates
livekit-server v1.13.10
livekit-server v1.13.8
livekit-server v1.13.7
keycloak v26.8.1-1
keycloak v26.8.1
keycloak v26.8.0
rabbitmq v4.3.7
rabbitmq v4.3.6
redis v8.10.2
minio RELEASE.2025-10-15T17-29-55Z-1
traefik-proxy v3.7.16
traefik-proxy v3.7.13
traefik-proxy v3.7.11
ndt-server v0.25.3-1
garage v2.3.0-1
Generation of this document was supported by retoki.