paperless-ngx v2.20.14 released on 14-04-2026
paperless-ngx v2.20.14 is out now. It tightens access controls and share-link actions, fixes tag-hierarchy and workflow tag application, and adds deterministic ordering and stricter date validation to reduce incorrect matches and stale state.
See the project GitHub release page for the full notes and upgrade guidance before updating production instances.
What’s in this release
- Permissions and share-link action limits: non-owners can no longer submit permission changes and the share-link viewset has reduced actions to lower the risk of unauthorised permission changes.
- Tag hierarchy and workflow tag application: prevents duplicate parent tag IDs and stops deferring tag-change application inside workflows so tag hierarchies remain consistent and workflow-triggered tag changes apply immediately.
- Document ordering, date validation and mail matching: adds a fallback ordering by document ID after created for deterministic lists, validates date-type custom-field values in the serializer, and defaults mail-created correspondent matching to exact to reduce incorrect matches and duplicates.
Upgrade notes
- No database migrations are required; upgrade is recommended to close these access-control gaps and to obtain the fixes above. Review API clients and workflows for stricter date validation and any expectations of deferred tag application.
- If you need to roll back, revert the deployed code to the previous release; there are no schema changes to restore.
Share any feedback or problems on the project’s GitHub issues or community channels, and note whether the mail-correspondent matching change affects your mail imports.
