v0.104.0 Note If you enjoyed this release, consider showing a token of appreciation by:

• Pressing the “Star” button on GitHub (top-right).
• Considering a one-time or recurrent donation to the lead developer via GitHub Sponsors or PayPal. This release is the largest in Trilium's history, built around two big themes: security and interoperability. The attack surface has been dramatically reduced across the desktop app, the server, and shared notes — with 16 dedicated security fixes and a few deliberate breaking changes (backend scripting and the SQL console are now disabled by default), so please review the Breaking changes section before upgrading. Getting notes in and out of Trilium is also much easier: new importers for OneNote, Notion, Google Keep, Anytype and Obsidian join a faster, more memory-efficient import/export pipeline and Spreadsheet now has XLSX and CSV import & export. On top of that come a redesigned setup and login experience, better AI integration (including being able to use your Claude Code subscription), richer text editing (multi-state TODO lists, collapsible blocks, link previews), dashboard collections, and a huge wave of polish — roughly 86 bugfixes and 68 smaller improvements touching nearly every corner of the app. The sections below have the full details. 💡 Key highlights

1. Setup was redesigned from scratch to be more modern (see details below).
2. The LLM integration can now use your Claude Code subscription, without the need of an API key or additional cost.
3. Text notes: Customizable multi-state TODO lists by @adoriandoran
4. Collapsible blocks by @adoriandoran
5. Link previews by @stexz01, @eliandoran and @adoriandoran
6. Toggle List (aka Accordion) by @adoriandoran
7. Text notes: Collapsible bullets
8. Spreadsheet gains XLSX and CSV import & export
9. A new experimental Dashboard collection.
10. Auto theme switching for code blocks and code notes
11. Autocompletion (e.g. Intellisense) for Frontend & Backend code notes
12. Significant hardening of the desktop and server app by @perfectra1n and @eliandoran.
13. A new import mechanism allows importing from multiple applications: OneNote notebooks using the cloud API, Notion, Google Keep, Anytype, Obsidian
14. Significant improvements to the import/export process
    1. Use a better buffering system so that the memory consumption never increases proportionally to the number of notes exported.
    2. Display the progress of import/export.
    3. Use a native mechanism on desktop so that the files being imported are not copied in memory.
    4. Server now uses the disk to store imported files, reducing memory pressure.
    5. Improved compression time by skipping already compressed files.
    6. Improved import performance. 🚨 Breaking changes
15. Backend scripting is now disabled by default.
    1. If you make use of these scripts, see the documentation (config.ini change for server or desktop settings).
    2. The goal of this change is to strengthen Trilium's security posture since backend scripts have dangerously powerful levels of access (e.g. full FS access). Front-end scripts are unaffected.
16. SQL console access is disabled by default.
    1. Similar to backend scripting, it can be reactivated from config.ini.
17. The desktop application (based on Electron) has been hardened against potential RCE attacks. You might have to adapt your scripts if you have front-end scripts that depend on Electron remote or the Node.js integration.
18. The desktop application now no longer opens its port on the local network by default.
    1. This can generally affect you only if you are using ETAPI or desktop-to-desktop sync with your desktop client (servers are unaffected).
    2. This option can be changed in Options → Security.
19. OPML v1 export was dropped from this release, v2 which preserves basic formatting has been kept instead. The v1 is still supported for import. 🐞 Bugfixes This release lands roughly 86 bugfixes, with a strong focus on data integrity: several issues that could overwrite note content, corrupt the database during ZIP import, or leave sync in an inconsistent state have been resolved. The remainder is steady polish across the text editor, spreadsheets, Markdown import/export, canvas notes, sharing, authentication and mobile. All 86 bugfixes
20. Backend log doesn't respect the code color theme.
21. Search: Wrong escape of highlighted tokens
22. Desktop layout doesn't respect the bottom safe area.
23. When refreshing the page, the sidebar shows up animated.
24. “Upload attachment” not working on mobile.
25. Text notes: Moving lines using keyboard shortcut sometimes not working
26. Flickering note save indicator on desktop.
27. Revisions: “Diff isn't available” when viewing revisions of an empty note.
28. Code block tries to link/create note when typing @, and suggests slash-commands when typing /
29. Recovered notes appear after interrupting a sync from a device that was long offline
30. Relation map:
    1. Partially typed name being used as relation by @Renatonet0
    2. Fix Chinese IME input by @Dinis-Ou
31. share* labels are not filtered out during safe import.
32. Geomap rendering raw HTML
33. Text Notes can not add lists that are not numbered (i.e. letters) by @adoriandoran
34. ETAPI YAML endpoint not accessible.
35. Status bar: Code language switcher not showing the language if it was not enabled in settings.
36. Spreadsheet:
    1. Ctrl+R copies to the right, intercepting page refresh / Unnecessary save on refresh
    2. Can't edit the same note in a split.
    3. Save is sometimes done before recalculation, causing potential incorrect values.
    4. Unnecessary save when first showing some spreadsheets.
    5. Exporting as a single file results in a .undefined file with zero content.
37. Calendar collection not occupying 100% height.
38. Formatting toolbar not showing after temporarily editing a note in the old layout.
39. New layout: Note map not visible on text notes
40. Not all notes in a split loading after a refresh.
41. Background effects interfere with shadow on Linux.
42. AI: Extended thinking not working in some models
43. Markdown: colspans and rowspans are not preserved during editing
44. Read-only Mermaid diagrams not always rendering
45. Notes being overwritten with another note
46. Changes to AI providers not refreshing the sidebar.
47. Markdown: wrong escape of dollar signs
48. TOTP: Entering a wrong password uses up the recovery code
49. OIDC credentials are not checked for
50. Current OpenID Connect Implementation is not compatible with Authelia
51. New checkbox rows are already prechecked when previous row was checked
52. Spreadsheet not localized
53. Move line up/down doesn't always work
54. Scroll position is lost when the editor reinitializes.
55. Periodic hidden subtree checks causes the text editor to refresh.
56. Missing blurred background for the icon switcher for the inline title.
57. Geomaps breaking with GPX (entire navigation breaks)
58. Tree position resets to top when switching between tabs with different workspaces/hoisted notes.
59. Formatting toolbar remains visible after changing note type by @SiriusXT
60. Markdown import: preserve heading hierarchy instead of flattening to H2
61. Exports: filename length is capped to 30 characters
62. Markdown rending issues when using multiple "$" in Code Block inside Blockquote
63. Tables not rendering properly in read-only after a Markdown import
64. The delete attachment confirmation dialog does not auto-select "OK"
65. Misleading "Copy link to clipboard" for attachments
66. Backend crash on abrupt WS disconnect
67. Allow creating notes from relation auto-complete
68. Can't confirm inline note creation via keyboard
69. Time offset in Log - 24 hours (timestamps today are showing as yesterday)
70. Enabling showLoginInShareTheme does not enable login from base domain
71. Docker deployment, when accessing the webpage, the following prompt appears: Share root not found. Please set up a note with #shareRoot label first.
72. Video/audio players' seek forward button has incorrect text
73. Converting an attachment to a note breaks links
74. Built-in LaTeX editor generates \differentialD, which is not supported by the renderer
75. Share: Table of contents scrolls to the wrong position for duplicate headings.
76. Importing a ZIP archive that contained a root note with content would corrupt the database.
77. ignore IME composition Enter when editing card and column titles by @greymoth-jp
78. Zooming shortcut Ctrl+ doesn't work on German Keyboard
79. Shared note with a large code note freeze the server
80. The checkbox and cursor in the to-do list are too close
81. Table: boolean column sorting not always working & row number appear shuffled when sorting
82. Include note would render recursively for nested includes, causing performance concerns
83. Old layout: removed collection properties in the ribbon since they are duplicated with the collection bar.
84. Search does not find protected notes while being in protected session
85. Markdown import/export
    1. Some equations containing HTML-like characters are broken
    2. A table with no heading row but with heading columns will end up having an empty row when reimported.
86. Tree can crash in some rare circumstances while updating itself
87. “Blob not found” when deleting the active note.
88. Table of contents becoming stale when switching between two notes with many headings.
89. CTRL-Z with two Canvas notes will delete previous drawing
90. Canvas notes sometimes fail to render
91. New layout: Note map not shown in empty note type switcher
92. Some protected notes and notes titles are still displayed after inactivity delay
93. JavaScript error while OCR processing existing image files
94. Day notes title pattern replacements not working
95. Template collision for Code note
96. Fix calendar events that cross midnight not showing up by @Glitch752