v15.117.0

Features

• Autocomplete dropdowns now also search within option descriptions, letting you find items by typing words that appear in their description. (#41360)
• Adds the shared features used by CRM and Helpdesk to v16, so those apps can use forms, phone number fields, notifications, and activity history. (#41517)

Bug Fixes

• Restricts Report scripts to approved methods and blocks custom document code from using private methods. (#41356)
• Link fields now show a record’s title only when you have permission to view that record. (#41405)
• The Custom Field rename action now accepts POST requests only. This prevents field names from changing when the page is opened directly. (#41403)
• Prevents File from resaving an image when optimization leaves it unchanged. (#41353)
• Users can open only Notification Log entries addressed to them. Administrators can still open all Notification Log entries. (#41391)
• The File form checks the file path again before it loads content. This blocks invalid file paths from being used to open file content. (#41350)
• Outgoing emails show images only from assets/, files/, or private/files/. Images from other paths no longer appear in the email. (#41346)
• Downloads additional markup-related file types instead of opening them in the browser. (#41385)
• Adds a check so only users who can view a Prepared Report can export it as CSV. (#41383)
• Bulk submit, cancel, update, and workflow approval actions now accept only POST requests. Document title updates use the same rule, so they do not run from a simple page visit or link. (#41387)
• Cancelling a document now converts its ID to text before checking related records, preventing a crash for documents that use numeric IDs. (#41410)
• Viewing another user's Event entries now requires the System Manager role. Everyone else sees only their own events. (#41379)
• Restricts Dashboard Settings so only the user it belongs to can open it, while Administrator remains an exception. (#41393)
• Unpublished Web Forms no longer accept submit, delete, list, or form data requests, matching the form’s published status. (#41399)
• Updates Communication relink search to use the same list of document types on screen and behind the scenes, so it only shows options you can open. (#41431)
• Collapsible sections you open stay open as you edit fields, including in table rows. This keeps the field you're editing visible while you type. (#41414)
• Bulk delete now returns the records that could not be deleted, and the list only removes records that were actually deleted. This keeps failed deletions and deletions scheduled for later visible in the list. (#41523)
• Removes deleted records and updates renamed records in the app’s copy, so old names and deleted entries no longer appear after the change. When records are merged, the remaining record keeps its existing details. (#41529)
• Limits contact form submissions to 100 per hour from the same IP address and adds a Send Acknowledgement Email option in Contact Us Settings to turn the automatic reply on or off. The acknowledgement email now contains only a short thank-you message and no longer includes the submitted message. (#41511)
• Limits the requests used to get, revoke, or check tokens to POST, while the UserInfo endpoint accepts GET and POST. This blocks other request types from these endpoints. (#41553)
• Fixes a DuckDB sync error caused by an invalid parameter. Adds options to sync data all at once or in batches, with a cleanup option that can be turned on or off. (#41480)
• Regional language packs now keep their own translations even when apps are installed in a different order. This keeps regional wording from being replaced by another app’s base-language text. (#41500)
• Keeps the form menu available when the sidebar is turned off in Form Settings. (#41491)
• Print formats linked to a document type now stay separate from the Print Format form, so a refresh keeps the version already open instead of replacing it with the stored copy. Print preview and email composer also read that separate copy when choosing a format. (#41551)
• Updates File folder links so nested folders open with the correct folder path, and the breadcrumb no longer shows undefined. (#41579)
• Fixes a v15 update problem that could prevent the site from loading after an upgrade, and keeps existing notification email preferences from being reset. (#41577)

Other Changes

• Exports from reports keep linked values in their stored form instead of replacing them with the linked record’s display name. (#41335)

Authors: @ruthra-kumar, @diptanilsaha, @ankush, @ShrihariMahabal, @barredterra, @ps173, @RitvikSardana, @kaulith
Reviewers: @ruthra-kumar, @sokumon, @NagariaHussain, @barredterra, @iamejaaz, @sagarvora, @RitvikSardana, @surajshetty3416, @ankush

AI content

For these release notes, we used an LLM (OpenAI gpt-5.4-mini) to review and summarise the code changes, along with the associated issue and PR descriptions. It may contain typical errors and inaccuracies. You can read the prompt here.

Changes with the following labels were excluded:

• skip-release-notes

Changes with the following types were excluded:

• ci
• chore
• style
• docs
• refactor
• build
• test