# v0.104.0
> [!NOTE]
> If you enjoyed this release, consider showing a token of appreciation by:
> 
> *   Pressing the “Star” button on [GitHub](https://github.com/TriliumNext/Trilium) (top-right).
> *   Considering a one-time or recurrent donation to the [lead developer](https://github.com/eliandoran) via [GitHub Sponsors](https://github.com/sponsors/eliandoran) or [PayPal](https://paypal.me/eliandoran).

This release is the largest in Trilium's history, built around two big themes: **security** and **interoperability**. The attack surface has been dramatically reduced across the desktop app, the server, and shared notes — with 16 dedicated security fixes and a few deliberate breaking changes (backend scripting and the SQL console are now disabled by default), so please review the Breaking changes section before upgrading.

Getting notes in and out of Trilium is also much easier: new importers for OneNote, Notion, Google Keep, Anytype and Obsidian join a faster, more memory-efficient import/export pipeline and Spreadsheet now has XLSX and CSV import & export.

On top of that come a redesigned setup and login experience, better AI integration (including being able to use your **Claude Code subscription**), richer text editing (multi-state TODO lists, collapsible blocks, link previews), dashboard collections, and a huge wave of polish — roughly 86 bugfixes and 68 smaller improvements touching nearly every corner of the app. The sections below have the full details.

## 💡 Key highlights

1.  Setup was redesigned from scratch to be more modern (see details below).
2.  The LLM integration **can now use your Claude Code subscription**, without the need of an API key or additional cost.
3.  [Text notes: Customizable multi-state TODO lists](https://github.com/TriliumNext/Trilium/pull/9881) by @adoriandoran
4.  [Collapsible blocks](https://github.com/TriliumNext/Trilium/pull/9965) by @adoriandoran
5.  [Link previews](https://github.com/TriliumNext/Trilium/pull/9188) by @stexz01, @eliandoran and @adoriandoran
6.  [Toggle List (aka Accordion)](https://github.com/TriliumNext/Trilium/issues/9914) by @adoriandoran
7.  [Text notes: Collapsible bullets](https://github.com/TriliumNext/Trilium/issues/1850)
8.  Spreadsheet gains XLSX and CSV import & export
9.  A new experimental [Dashboard collection](https://docs.triliumnotes.org/user-guide/collections/dashboard).
10.  Auto theme switching for code blocks and code notes
11.  [Autocompletion (e.g. Intellisense) for Frontend & Backend code notes](https://github.com/TriliumNext/Trilium/issues/8013)
12.  Significant hardening of the desktop and server app by @perfectra1n and @eliandoran.
13.  A new import mechanism allows importing from multiple applications: [OneNote notebooks using the cloud API](https://docs.triliumnotes.org/user-guide/concepts/import-export/onenote), [Notion](https://docs.triliumnotes.org/user-guide/concepts/import-export/import-from-apps/notion), [Google Keep](https://docs.triliumnotes.org/user-guide/concepts/import-export/import-from-apps/keep), [Anytype](https://docs.triliumnotes.org/user-guide/concepts/import-export/import-from-apps/anytype), [Obsidian](https://docs.triliumnotes.org/user-guide/concepts/import-export/import-from-apps/obsidian)
14.  Significant improvements to the import/export process 1. Use a better buffering system so that the memory consumption never increases proportionally to the number of notes exported. 2. Display the progress of import/export. 3. Use a native mechanism on desktop so that the files being imported are not copied in memory. 4. Server now uses the disk to store imported files, reducing memory pressure. 5. Improved compression time by skipping already compressed files. 6. Improved import performance.
15.  Significant improvements to the LLM UI by @adoriandoran: Quote content, save AI responses as subnote, regenerate responses, delete & rename chats, printing, note-tooltip, scroll-to-bottom & performance tweaks.

## 🚨 Breaking changes

1.  [**Backend scripting is now disabled by default**](https://docs.triliumnotes.org/user-guide/scripts/Security).
    1.  If you make use of these scripts, see the documentation (`config.ini` change for server or desktop settings).
    2.  The goal of this change is to strengthen Trilium's security posture since backend scripts have dangerously powerful levels of access (e.g. full FS access). Front-end scripts are unaffected.
2.  [**SQL console access is disabled by default**](https://docs.triliumnotes.org/user-guide/scripts/Security)**.**
    1.  Similar to backend scripting, it can be reactivated from `config.ini`.
3.  [The desktop application (based on Electron) has been hardened against potential RCE attacks](https://docs.triliumnotes.org/user-guide/scripts/breaking-changes/disabling-node-integration). You might have to adapt your scripts if you have front-end scripts that depend on Electron remote or the Node.js integration.
4.  [The desktop application now no longer opens its port on the local network by default](https://docs.triliumnotes.org/user-guide/setup/desktop/network-access).
    1.  This can generally affect you only if you are using ETAPI or desktop-to-desktop sync with your desktop client (servers are unaffected).
    2.  This option can be changed in Options → Security.
5.  OPML v1 export was dropped from this release, v2 which preserves basic formatting has been kept instead. The v1 is still supported for import.

## 🐞 Bugfixes

This release lands roughly 86 bugfixes, with a strong focus on data integrity: several issues that could overwrite note content, corrupt the database during ZIP import, or leave sync in an inconsistent state have been resolved. The remainder is steady polish across the text editor, spreadsheets, Markdown import/export, canvas notes, sharing, authentication and mobile.

<details>
    <summary>All 86 bugfixes</summary>
    <ol>
        <li>Backend log doesn't respect the code color theme.</li>
        <li>Search: Wrong escape of highlighted tokens</li>
        <li>Desktop layout doesn't respect the bottom safe area.</li>
        <li>When refreshing the page, the sidebar shows up animated.</li>
        <li>“Upload attachment” not working on mobile.</li>
        <li>Text notes: Moving lines using keyboard shortcut sometimes not working</li>
        <li>Flickering note save indicator on desktop.</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9852">Revisions: “Diff isn't available” when viewing revisions of an empty note.</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/8322">Code block tries to link/create note when typing @, and suggests slash-commands when typing /</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9247">Recovered notes appear after interrupting a sync from a device that was long offline</a>
        </li>
        <li>Relation map:<ol><li><a href="https://github.com/TriliumNext/Trilium/issues/6929">Partially typed name being used as relation</a> by @Renatonet0</li><li><a href="https://github.com/TriliumNext/Trilium/issues/8676">Fix Chinese IME input</a> by @Dinis-Ou</li></ol></li>
        <li><code spellcheck="false">share*</code> labels are not filtered out during safe import.</li>
        <li>Geomap rendering raw HTML</li>
        <li><a href="https://github.com/TriliumNext/Trilium/issues/9757">Text Notes can not add lists that are not numbered (i.e. letters)</a> by @adoriandoran</li>
        <li>ETAPI YAML endpoint not accessible.</li>
        <li>Status bar: Code language switcher not showing the language if it was not enabled in settings.</li>
        <li>Spreadsheet:<ol><li><kbd>Ctrl</kbd>+<kbd>R</kbd> copies to the right, intercepting page refresh / Unnecessary save on refresh</li><li>Can't edit the same note in a split.</li><li>Save is sometimes done before recalculation, causing potential incorrect values.</li><li>Unnecessary save when first showing some spreadsheets.</li><li>Exporting as a single file results in a .undefined file with zero content.</li></ol></li>
        <li>Calendar collection not occupying 100% height.</li>
        <li>Formatting toolbar not showing after temporarily editing a note in the old layout.</li>
        <li>New layout: Note map not visible on text notes</li>
        <li>Not all notes in a split loading after a refresh.</li>
        <li>Background effects interfere with shadow on Linux.</li>
        <li>AI: Extended thinking not working in some models</li>
        <li>Markdown: colspans and rowspans are not preserved during editing</li>
        <li>Read-only Mermaid diagrams not always rendering</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9614">Notes being overwritten with another note</a>
        </li>
        <li>Changes to AI providers not refreshing the sidebar.</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10179">Markdown: wrong escape of dollar signs</a>
        </li>
        <li>TOTP: Entering a wrong password uses up the recovery code</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/7250">OIDC credentials are not checked for</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/6387">Current OpenID Connect Implementation is not compatible with Authelia</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10084">New checkbox rows are already prechecked when previous row was checked</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10104">Spreadsheet not localized</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10095">Move line up/down doesn't always work</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/8991">Scroll position is lost when the editor reinitializes.</a>
        </li>
        <li>Periodic hidden subtree checks causes the text editor to refresh.&nbsp;</li>
        <li>Missing blurred background for the icon switcher for the inline title.</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10236">Geomaps breaking with GPX (entire navigation breaks)</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/7263">Tree position resets to top when switching between tabs with different workspaces/hoisted notes.</a>
        </li>
        <li><a href="https://github.com/TriliumNext/Trilium/issues/10253">Formatting toolbar remains visible after changing note type</a> by @SiriusXT</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/8383">Markdown import: preserve heading hierarchy instead of flattening to H2</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10112">Exports: filename length is capped to 30 characters</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10268">Markdown rending issues when using multiple "$" in Code Block inside Blockquote</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10270">Tables not rendering properly in read-only after a Markdown import</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9751">The delete attachment confirmation dialog does not auto-select "OK"</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/5118">Misleading "Copy link to clipboard" for attachments</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9598">Backend crash on abrupt WS disconnect</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/8187">Allow creating notes from relation auto-complete</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/8330">Can't confirm inline note creation via keyboard</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/8497">Time offset in Log - 24 hours (timestamps today are showing as yesterday)</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/8323">Enabling showLoginInShareTheme does not enable login from base domain</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/7869">Docker deployment, when accessing the webpage, the following prompt appears: Share root not found. Please set up a note with #shareRoot label first.</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9752">Video/audio players' seek forward button has incorrect text</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/5818">Converting an attachment to a note breaks links</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9523">Built-in LaTeX editor generates \differentialD, which is not supported by the renderer</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/8318">Share: Table of contents scrolls to the wrong position for duplicate headings.</a>
        </li>
        <li>Importing a ZIP archive that contained a root note with content would corrupt the database.</li>
        <li><a href="https://github.com/TriliumNext/Trilium/pull/10315">ignore IME composition Enter when editing card and column titles</a> by @greymoth-jp</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9741">Zooming shortcut Ctrl+ doesn't work on German Keyboard</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9717">Shared note with a large code note freeze the server</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/6134">The checkbox and cursor in the to-do list are too close</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10347">Table: boolean column sorting not always working &amp; row number appear shuffled when sorting</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10340">Include note would render recursively for nested includes, causing performance concerns</a>
        </li>
        <li>Old layout: removed collection properties in the ribbon since they are duplicated with the collection bar.</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10406">Search does not find protected notes while being in protected session</a>
        </li>
        <li>Markdown import/export<ol><li><a href="https://github.com/TriliumNext/Trilium/issues/10418">Some equations containing HTML-like characters are broken</a></li><li>A table with no heading row but with heading columns will end up having an empty row when reimported.</li></ol></li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10407">Tree can crash in some rare circumstances while updating itself</a>
        </li>
        <li>“Blob not found” when deleting the active note.</li>
        <li>Table of contents becoming stale when switching between two notes with many headings.</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/7148">CTRL-Z with two Canvas notes will delete previous drawing</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/6447">Canvas notes sometimes fail to render</a>
        </li>
        <li>New layout: Note map not shown in empty note type switcher</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10115">Some protected notes and notes titles are still displayed after inactivity delay</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9754">JavaScript error while OCR processing existing image files</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/9565">Day notes title pattern replacements not working</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/3015">Template collision for Code note</a>
        </li>
        <li><a href="https://github.com/TriliumNext/Trilium/pull/10292">Fix calendar events that cross midnight not showing up</a> by @Glitch752</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10444">Mermaid images not visible in HTML or share export</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/3235">Electron can sometimes crash due to a connection error</a>
        </li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10478">Mindmap freezes on save on medium or larger notes</a>
        </li>
        <li><a href="https://github.com/TriliumNext/Trilium/issues/5669">Add link dialog fails to link if you press enter twice too quickly</a> by @mvanhorn &amp; @eliandoran</li>
        <li>PDF<ol><li><a href="https://github.com/TriliumNext/Trilium/pull/10048">PDF download: name not preserved</a> by @Excubitorum &amp; @eliandoran</li><li>Annotations are not saved immediately, only after closing the annotation tool.</li><li>Unnecessary confirmation screen when navigating a way after the annotations have already been saved.</li></ol></li>
        <li>When pasting an image, srcset bypasses Trilium's downloaded image.</li>
        <li><a href="https://github.com/TriliumNext/Trilium/issues/10493">Canvas notes zooms out to 10% when using flowchart keyboard shortcuts</a>.</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/10110">PDF viewer not showing properly in attachments</a>
        </li>
        <li><a href="https://github.com/TriliumNext/Trilium/pull/10292">Calendar events spanning day boundaries without an end date</a> by @Glitch752</li>
    </ol>
</details>

## ✨ Improvements

Beyond the headline features, 68 smaller improvements round off nearly every corner of the app. Several are worth calling out: **pinned tabs** and a reworked tab bar, a **right sidebar toggle handle with peek mode**, and **options that now open in a modal** by default instead of a new tab — changes you'll notice within minutes of upgrading. Media notes get a proper treatment too, with a **new gallery-style image viewer** (zoom, keyboard navigation) and an **overhauled media player** (previous/next, play modes, Media Session API integration), while **Include note** now renders collections, web views and saved searches interactively, and canvas notes can embed other notes and store images as attachments.

Markdown continues to become a first-class citizen: you can now **convert text notes to Markdown and back**, with snippets, code-block language autocompletion and cleaner "Copy as Markdown" output. The settings screens follow the setup redesign — the **keyboard shortcuts section** was rebuilt around a key recorder with conflict detection, and **multi-factor authentication** moved into _Password & auth_ with QR generation and TOTP validation. The rest is steady polish: the LLM assistant became noticeably smarter and smoother; spreadsheets, the backend log and the import/export dialogs all received meaningful upgrades; and the desktop app gained conveniences like tray hiding and start-on-login.

<details>
    <summary>All 68 improvements</summary>
    <ol>
        <li>Setup redesign<ol><li>Language selection screen.</li><li>Clarified the desktop to desktop sync.</li><li>Demo content can be optionally skipped if creating a new document.</li><li>Improve mobile support.</li><li>Background effects for Windows 11 and macOS.</li><li>Redesigned the login and set password screens as well.</li></ol></li>
        <li>Markdown: Minor improvements to slash commands.</li>
        <li>Import: Ignore macOS metadata when importing a ZIP</li>
        <li>Back-end log<ol><li>Customizable word wrap</li><li>Integrate with search</li><li>Add a dedicated download button.</li><li>Get rid of <code spellcheck="false">Slow 200 GET /api/backend-log with 19200316 bytes took 75ms</code>.</li></ol></li>
        <li><a href="https://github.com/TriliumNext/Trilium/pull/9840">Text notes: Increase blockquote padding</a> by @bigbangcmbr</li>
        <li>Improved the display of revisions in case a diff is not available or the revision is identical to the current note content.</li>
        <li><a href="https://github.com/TriliumNext/Trilium/pull/9881">Text editor: configurable multi-state todo list checkboxes</a> by @adoriandoran</li>
        <li>LLM<ol><li>Add an option to display history of chat notes</li><li>Backlink support, based on reference links used by the assistant and tool calls.</li><li>In-progress tool calls are also displayed.</li><li>Reference links can be inserted by the user using @-mention</li><li>Handle Gemini not supporting both note tools and note search</li><li>Improve skill loading and render note for some models</li><li>Smoother streaming effect</li><li>Improved the backend and frontend skills for the LLM.</li><li>Added a tool to search for icons.</li><li>Add Claude Sonnet 5 &amp; Fable.</li><li>Improved UX by @adoriandoran</li><li>Table of contents, text highlight support by @adoriandoran</li><li>Improved the “Add provider” screen.</li><li>Improved the model selector and fixed legacy models not showing in the sidebar.</li></ol></li>
        <li>Markdown<ol><li>Interpret Markdown in table of contents.</li><li>Improve table design and margins.</li></ol></li>
        <li>Toasts are now selectable</li>
        <li>Various UI improvements by @adoriandoran</li>
        <li>Add separate language code for plain JavaScript<br>Text notes no longer have frontend and backend-specific versions of JavaScript</li>
        <li>Spreadsheet<ol><li>Trim the saved data slightly.</li><li>Improved rendering in the share and printing (borders, colors, number and date formatting).</li><li><a href="https://github.com/TriliumNext/Trilium/issues/9851">Added support for images</a></li><li>Added support for mobile, making interaction much easier such as drag to pan instead of selection.</li></ol></li>
        <li><a href="https://github.com/TriliumNext/Trilium/pull/10025">Snippet support for code notes and Markdown notes</a> by @adoriandoran</li>
        <li>New image viewer by @adoriandoran with gallery-style navigation, zoom and keyboard navigation.</li>
        <li>Media Player improvements by @adoriandoran<ol><li>Add previous/next navigation for audio and video</li><li>Media Session API integration</li><li>Play mode options</li><li>Compact media player UI</li></ol></li>
        <li>Improve fit and layout of the print preview dialog.</li>
        <li>Print: improved the layout and design of footnotes</li>
        <li>Quick edit: Reference links now open in the same popup instead in the background</li>
        <li>Options<ol><li>Seamless transition when switching themes, fonts or editor layout</li><li>Improved the layout and appearance of backups and anonymized databases.</li><li>Options now open by default in a modal instead of in a new tab.</li></ol></li>
        <li>Show an indicator when loading a blob takes too much.</li>
        <li>Dedicated content badge for custom request handler</li>
        <li>
            <a href="https://github.com/TriliumNext/Trilium/issues/2710">Open tabs nearby instead of at the end</a>
        </li>
        <li>Allow viewing source of SVG files</li>
        <li>Include note now renders some note types interactively such as collections, webviews or saved searches.</li>
        <li>Canvas notes:<ol><li>Notes can now be embedded in a similar way to <em>Include note</em> in text notes.</li><li>Images for canvas notes are now saved as attachments which should reduce the performance hit when modifying canvases with large images.</li></ol></li>
        <li>Improved the design of included notes.</li>
        <li>Launch bar configuration now opens in a modal.</li>
        <li>Improved revision dialog layout on mobile.</li>
        <li>Added linters:<ol><li>Mermaid: reporting parsing errors &amp; improved error display.</li><li>JSON</li></ol></li>
        <li>Improved error tolerance for rendering math equations.</li>
        <li>Redesigned the keyboard shortcuts section with a key recorder instead of manual entry and conflict detection.</li>
        <li>Redesigned the multi-factor authentication section (including QR code generation and validation of TOTP) and integrated it directly in <em>Password &amp; auth</em>.</li>
        <li>Improved OAuth connection flow, including display of the OAuth provider info (URL, name, icon).</li>
        <li>Improved detection of the OAuth provider icon, instead of falling back to Google's.</li>
        <li>Removed the default key binding for “Switch to Last Tab" since it overlaps with “Reset zoom” (Ctrl+0).</li>
        <li>Script API (both front-end and back-end) now have bidirectional Markdown / HTML conversion (<code spellcheck="false">htmlToMarkdown</code>, <code spellcheck="false">markdownToHtml</code>) by @misch334 &amp; @eliandoran</li>
        <li>Notes can be toggled full-width from the note contextual menu (new layout only).</li>
        <li>Adjustments to the safe import for text notes: preserve underline text, list types, transparent table borders.</li>
        <li>Added a progress bar to the import notification.</li>
        <li><a href="https://github.com/TriliumNext/Trilium/pull/10237">Option to disable tree scroll-follows-navigation</a> by @kleutzinger</li>
        <li>Markdown:<ol><li>Added snippets for page-break and table.</li><li>Added auto-completion for code block language tags.</li><li>When exporting, format HTML-based tables with proper indentation &amp; newlines.</li></ol></li>
        <li>Spreadsheet: prevent jumping to the beginning/end when navigating at the edge</li>
        <li>The import dialog has been restructured to take into consideration support for new app-based imports (OneNote, Notion, AnyType).</li>
        <li>The export dialog has been simplified.</li>
        <li>Pressing enter in the note title will now focus the content and insert a new paragraph/line for text &amp; code notes.</li>
        <li>Calendar: add a button to pin the current date</li>
        <li>Tree: Prevent accidentally importing above/below the hoisted note.</li>
        <li>Turned a few info dialogs into toasts.</li>
        <li>Mermaid updated with three new diagram types: Cynefin, Swimlane &amp; Railroad</li>
        <li>Improve backend log with features such as syntax highlighting by @adoriandoran</li>
        <li>Various UI improvements by @adoriandoran</li>
        <li><a href="https://github.com/TriliumNext/Trilium/pull/8880">Calendar: Add slotDuration and slotLabelInterval, Add Day View</a> by @BeatLink</li>
        <li>Desktop installer: improved the installation animation on Windows and background on macOS</li>
        <li>Keyboard shortcuts now display localized names and macOS-specific glyphs.</li>
        <li>HTML &amp; Markdown export: remove redundant <code spellcheck="false">data-list-id</code> from list items.</li>
        <li>Code notes: add Nim language support by @dirtboll</li>
        <li><a href="https://docs.triliumnotes.org/user-guide/concepts/import-export/import-from-apps/evernote">Evernote</a> was enhanced with TODO list support, internal link detection and extended formatting such as admonitions.</li>
        <li>The desktop app gains two more features:<ol><li>Hiding to system tray when the last window is closed.</li><li>Automatically starting up on login.</li></ol></li>
        <li>Pinned tabs &amp; various tab bar improvements by @adoriandoran</li>
        <li>Right sidebar toggle handle &amp; peek mode by @adoriandoran</li>
        <li>Improvements to deleted notes dialog by @adoriandoran</li>
        <li>Icon pack preview by @adoriandoran</li>
        <li>Markdown: Convert text notes to Markdown and vice-versa by @adoriandoran</li>
        <li>Text notes:<ol><li>Undo &amp; Redo buttons for the fixed toolbar by @adoriandoran.</li><li>“Copy as Markdown” now renders more cleanly (fewer HTML attributes).</li></ol></li>
        <li>Contextual shortcut hints by @adoriandoran</li>
        <li>Improved error management for render notes and backend scripts.</li>
        <li>PDF: added support for drawn signatures</li>
        <li>New launch bar buttons by @adoriandoran<ol><li>Color scheme switcher</li><li>Deleted notes</li></ol></li>
    </ol>
</details>

## 🌍 Internationalization

*   Reach 100% coverage for Romanian.
*   Added Indonesian.

## 📖 Documentation

*   Clarify Script API context (`startNote`, `currentNote`, `originEntity`).
*   Documented some missing labels and relations.
*   Documented `color` attribute.
*   [Some links (to hidden notes or options pages) were broken.](https://github.com/TriliumNext/Trilium/issues/9646)
*   Documented the note title.
*   Documented new features.

## 🛠️ Technical updates

1.  Remove unnecessary boxicon assets.
2.  Cleaned up a few dependencies.
3.  Complete architectural change to allow for a new deployment mechanism: [standalone mode](https://github.com/orgs/TriliumNext/discussions/9733).
4.  Many dependency updates.
5.  [Opt-in to disable automatic DB migration](https://github.com/TriliumNext/Trilium/pull/9449) by @contributor
6.  Disable background effects while dev tools is attached to the same window
7.  Improved the loading time of the client by lazy loading libraries and dialogs
8.  Improved the loading time of the desktop slightly by loading the server at the same time as Electron starts.

## 🔒️ Security fixes

Security is a central theme of this release: 16 fixes systematically shrink Trilium's attack surface. Content is now sanitized on every path (HTML, SVG, collections, shared notes), injection vectors (SQL, path traversal, SSRF) have been hardened, sessions and cookies tightened, and the Electron desktop app locked down with strict permission, navigation and session-isolation policies. These fixes go hand in hand with the deliberate breaking changes above — together they make the default configuration significantly safer.

<details>
    <summary>All 16 security fixes</summary>
    <ol>
        <li><code spellcheck="false">require()</code> in backend scripts is now allow/block-listed</li>
        <li>Title templates &amp; bulk-rename no longer use <code spellcheck="false">eval()</code></li>
        <li>Note content is now HTML-sanitized on non-editor paths</li>
        <li>Table of Contents &amp; Highlights list strip block elements</li>
        <li>Improved SVG sanitization.</li>
        <li>Shared/published notes: CSP, and escaping<ul><li><strong>Custom </strong><code spellcheck="false"><strong>#shareTemplate</strong></code><strong> is ignored when backend scripting is disabled</strong> (EJS can run JS) — shared pages fall back to the default theme.</li><li><code spellcheck="false">#shareRaw</code> is now flagged <code spellcheck="false">isDangerous</code> in attribute UI; raw HTML shares are still intentionally served unrestricted (opt-in).</li></ul></li>
        <li>Session &amp; cookie hardening</li>
        <li>API keys for LLM agents are no now write-only through the options API.</li>
        <li>Backup name sanitization</li>
        <li>SSRF / local file disclosure via image download</li>
        <li>Path-traversal hardening on file-upload endpoints</li>
        <li>SQL injection hardening</li>
        <li>Sanitize content of Collections and Mind Maps.</li>
        <li>Hardened the optional MCP server against DNS rebinding attacks.</li>
        <li>Hardening of the Electron app<ul><li><code spellcheck="false">&lt;webview&gt;</code> attach vetting</li><li>Dedicated guest session partition: Web View notes now load in <code spellcheck="false">persist:webview</code> instead of sharing the renderer session, so embedded sites can never see Trilium cookies or resolve the <code spellcheck="false">trilium-app://</code> scheme.</li><li>Deny-by-default permission policy. App session allows <code spellcheck="false">clipboard-sanitized-write</code>, <code spellcheck="false">fullscreen</code>, <code spellcheck="false">notifications</code> (user scripts use <code spellcheck="false">new Notification()</code>); guests get <code spellcheck="false">fullscreen</code> only.</li><li>Scheme allowlist for external opens: <code spellcheck="false">window.open</code>/target=_blank URLs are validated before <code spellcheck="false">shell.openExternal</code></li><li>Global window-open &amp; navigation policy</li><li>Origin gate on <code spellcheck="false">trilium-app://</code> dispatch</li></ul></li>
        <li>Shared notes:<ul><li>Prevent accessing (encrypted, not plain text) protected attachments.</li><li>Improved filtering of some attributes.</li></ul></li>
    </ol>
</details>