Scanning, PDFs, office files and the paper a household still generates.
Paperless-ngx 3.4.0 lets workflow title templates use custom fields, adds relative date queries, and generates PDF thumbnails through poppler in the release that drops ImageMagick from the dependency list. Local 2FA is now skipped when an OIDC login carries a trusted AMR claim, and a set of quiet fixes covers re-index ordering, folder exports with --delete, and revoked task results.
Paperless-ngx published v3.3.4 on 22 October to update certifi for the eMudhra/emSign CA incident and to pick up security fixes in Pillow and aiohttp. The project calls all of it third-party dependency work and recommends updating for everyone; the documented Docker route is a backup, a stop, a pull and a foreground start.
A major release whose operator-facing parts are the defaults it changes: JWT on, WOPI hosts named explicitly, reworked converter tokens, new kill switches for the public APIs, and a 43-item security section that includes WOPI session hijacking.
Stirling Sign leaves alpha and turns on for new users, a faster Office converter arrives behind a beta flag, and the text editor learns to edit tables and OCRed PDFs.
An English-German mixture of experts, 78B total parameters and 3B active, Apache 2.0 with a vLLM plugin: built for regulated sectors and benchmarked against models with four times the active size.
The self-hosted ebook library turns four access-control problems into admin-only territory — a cross-user Kobo token flaw, unauthenticated service pages, spoofable internal endpoints and a guest-reachable EPUB fixer — and rewrites Kobo sync so large libraries stop spending up to 15 seconds per request.
Version 3.0 turns batch work into pipelines that watch folders, FTP and S3, keeps the AI features optional, and draws the free line for automated processing at 1,000 PDFs a month.
