New release: 5.9 ~ "Flight Facilities"

Announcements
1

What’s in Passbolt 5.9.0?

Passbolt 5.9 is a maintenance release focusing on stability, forward compatibility, and tightening a few important security edges, so upgrades stay predictable and daily use stays reliable.

Plan upgrades before they become urgent:

  • PHP 8.5 is now supported, helping teams validate upcoming runtime upgrades early.

  • PHP 8.2 remains supported until 2027, but it’s now in security maintenance planned to upgrade this year.

  • MariaDB 10.3 / 10.5 and MySQL 5 are now flagged as deprecated. Support for these versions is planned to end in January 2027. Health checks now surface these risks early, so you can align database upgrades with regular maintenance windows instead of reacting under pressure.

If you’re running one of these database versions, review the environment section carefully and schedule your upgrade.

Reduced account enumeration risk

The account recovery endpoint no longer reveals whether a user exists. This removes a signal attackers could use for email or username enumeration.

Stronger protection against clickjacking

Additional safeguards reinforce protection against UI overlay and clickjacking techniques, including edge cases where a compromised site could try to influence user interaction. Sensitive components must now be fully visible and clearly presented before interaction.

Clearer email digest behavior

  • Improved digest handling for large folder operations reduces unnecessary email churn.

  • The passbolt email_digest command now reports how many emails were sent and how many remain in the queue, making queue behavior easier to monitor and troubleshoot.

Ongoing stability improvements

Authentication-related applications continue migrating to the new UI framework as part of a broader effort to improve long-term stability and performance.

Changelogs

Platform: Browser Extension & API
Name: Flight Facilities | Browser Extension & API

Release notes: https://www.passbolt.com/changelog/api-bext/flight-facilities-browser-extension-api
Release Date: January 27, 2026
Song: :musical_notes:Flight Facilities :musical_notes:

Enjoy Passbolt? Leave us a :star::star::star::star::star: review:
Chrome | Firefox | Edge | iOS | Android | Windows

Thank you to everyone who tested, reported, and shaped this release.
Your feedback helps keep Passbolt simple, secure, and open. :heart:

1 Like
Question about new release announcements