Frappe and ERPNext changes, 26 Oct to 1 Nov 2026

feat Address a saved view by its key Saved views get a stable key, so renaming a view no longer breaks links and stars.

feat Assignment Rule's record page does what its v1 form script does Assignment Rule's record page gets the Field, Due Date and Document Type pickers it had in desk v1.

feat Duplicate a record from its record page Adds Duplicate to the record page's menu, copying the record and its child rows.

feat Rename a record from its record page Adds Rename to the record's menu, with an option to merge into an existing record.

feat Render markdown attachments in the timeline preview Markdown attachments render in the preview dialog instead of showing raw text.

feat Render an unplaced field on the record page Fields missing from a Form Layout row appear in an automatic "More fields" section.

feat Render a custom field at its anchor in a layout Custom fields render next to their insert_after anchor field.

feat Read Form Layout in the row dialog and a Single's generated block Child-table row dialogs and Single blocks use the DocType's Details layout.

feat Translate container labels on the record page Tab, section, column and side-panel labels are translated on the record page.

feat An app ships Form Layout rows as files; Contact ships Create layouts Apps can ship form layouts as files, and Contact gets email and phone on its Create layouts.

feat A Data field honours its options Email, URL, Phone and IBAN fields get their proper input type, and IBANs are shown in groups of four.

feat Shell.dialog with confirm and danger Shell scripts, including app acts, can ask the user to confirm an action.

feat A form script sets cannot_add_rows and cannot_delete_rows on a grid A form script can stop users adding or deleting rows in a grid.

feat Open a new chat with desk v2's palette text The palette's "Ask Flow" row opens a new Flow chat with the text in its box on desk v2.

feat Run an app page's handler file and the Client Scripts that name it App pages run their own handler file and the Client Scripts that target them.

feat A replacement page can name the apps it applies in A pages.json entry can name the apps where a replacement page applies.

feat Color control with v1's swatches, a hex input and the browser's color dialog feat(ui): Color control with v1's swatches, a hex input and the browser's color dialog

feat Color control, with a swatch in the panel and read-only views feat(desk-v2): Color control, with a swatch in the panel and read-only views

feat Component blocks declare the fields they own Component blocks in settings list the fields they own, so one block's save no longer carries another's refused field.

feat Fast data entry in the grid: arrow keys, paste, insert above or below, duplicate The grid supports arrow-key navigation, spreadsheet paste, insert above or below, and duplicate.

feat A record row shows the title field, with the name in gray feat(palette): a record row shows the title field, with the name in gray

feat Open places and records under the current app's prefix Go to and Recent rows stay inside the current app's prefix, so they no longer open a second document on another app's route.

feat Send a user with no desk role from /apps to /me A Website User who opens /apps is redirected to /me instead of landing on a "Not permitted" page.

feat A field the user cannot edit shows its formatted value Read-only fields show their formatted value in a borderless box in the form, grid and row dialog, while Link, Attach and similar fields keep their own read views.

feat Assign to… in the record menu, opened at the palette's argument step The record's ⋯ menu has an Assign to… item that opens the command palette at its Users step, and the palette's options now show icons or avatars.

feat Star a list or a saved view as a favourite A star beside the list title marks a list or a saved view as a favourite, using the same star as the record header.

feat Recent reads Route History; the localStorage recents go The palette's Recent list now comes from server-side Route History, so it matches across devices and is removed on logout.

feat The filter box searches like the palette, with results under the tiles The /apps filter box also searches Desk, Go to, Create and Records results beneath the app tiles.

feat Places in the palette, with Go to, Create and Tab to narrow to a doctype The palette reaches any doctype, app, sidebar row or settings pane the person can see, starts a New record, and narrows to one doctype with Tab.

feat The acts.js contribution kind for an app's global acts An app can ship a `frontend/acts.js` file to add global acts to the shell surface, lazily loaded.

feat The shell surface, its acts, and the menus drawn from them The rail's app menu, avatar menu and sidebar toggle become named acts, so scripts, keys and the palette can run them.

feat The command palette in the shell, on Mod+K and the rail Desk v2 gets a command palette on Mod+K listing the page's acts, the shell's acts, and recently opened places and records.

feat Arrange and hide the index tiles The /apps index tiles can be reordered by drag or keyboard, and hidden, with Reset to clear the choice.

feat V2 writes Route History, and the index shows Recent Desk v2 records visits to Route History and the index lists recently opened items.

feat Bind act keys through useKeyboardShortcut An act's key binding runs the act through the dispatcher, with the same checks a click gets.

feat The list surface and the list page's named acts Create, Customize Quick Filter and Delete on the list page become named acts that scripts and keys can run.

feat The index shows Favourites The /apps index shows the person's eight latest favourite records as chips, skipping any they can no longer read.

feat Component blocks and the after-save registry A settings component block loads its app's Vue file, and saves refresh the rail and page.

feat Search the settings dialog The settings dialog gets a search box that matches pane, block and field labels and descriptions.

feat The index page at /apps /apps becomes a full-page launcher with a filter box over one tile per app.

feat The act runtime — dispatcher, page.run, ActDenied and the act fields Scripts can run any header item, quick action or tab entry by name with `page.run`, and every click goes through one act dispatcher that checks the act first.

feat The settings dialog, its address, page.openSettings and the rail menu entries The settings dialog opens at a shareable address, and `page.openSettings()` opens it.

feat Generated settings blocks that load, edit and save a Single or Record binding Settings blocks load, edit and save a Single or Record binding in settings rows.

feat The not found state offers the app's home The not found state gets a "Go to app home" action, or "Go to all apps" on the /apps index.

feat One set of page states with a retry for home, list and record Home, list and record pages share one set of states, including offline and failed with Try again.

feat The index boot lists one tile per app The /apps index shows one tile per app that declares an `add_to_apps_screen` hook.

feat Vue Component fieldtype A display-only Vue Component fieldtype puts an app's island into a form and keeps it in step with the doc.

feat A Text Editor upload honours make_attachments_public Images added to a Text Editor field become public on save when the doctype sets `make_attachments_public`.

feat A Text Editor control on frappe-ui/editor, sharing the composer's kit Text Editor fields show a rich-text editor with a toolbar, instead of raw HTML in a one-line input.

feat The record page marks the fields a save refused A refused save marks each empty mandatory field, including child rows, with a "required" message.

perf Draw saved comments as sanitised HTML and load the editor only to edit Saved comments render as sanitised HTML, so record pages no longer load the 277 KB rich-text editor.

perf Link searches when its picker opens, not when it mounts Link fields search only when the picker opens or the user types, not on every page load.

perf Load the list's drag panels when they open The list's sort, column and quick filter panels load their drag code on first open, which brings the list page under its size budget.

perf Keep every cold-load module in one chunk beside the entry Cold-load modules go into one shell chunk beside the entry, cutting about 30 KB gzip of split chunks per desk page.

perf Paint the page frame within 100 ms of a click A route change redraws only what the new address changes, so the page frame paints quickly after a click.

fix InviteUser works for an app inviter who is not System Manager An app inviter without System Manager now gets user suggestions, pending invitation reads, and cancel and resend actions without a 403.

fix An empty JSON field is null, so a new row or a cleared field saves A new child row or a cleared JSON field saves instead of failing with a database error.

fix One row per act in This page, and Save gets an icon The palette's This page group shows each act once.

fix Edit full form and new-record acts open in the doctype's own app Edit full form and new-record actions from the Create dialog open in the doctype's own app instead of failing.

fix Hide the desk v2 fields on v1's Sidebar form while desk v2 is off Desk v1's Sidebar form no longer shows four desk v2 fields when desk v2 is off.

fix Hide Client Script's Record option in v1 while desk v2 is off Desk v1 Client Script no longer offers the Record option, whose scripts do nothing in v1.

fix A Link's redirectable prop is kept for Studio A Studio app that sets redirectable on a Link gets the arrow to the linked record back on desk-v2.

fix Compact cell padding in default report print Wide reports fit the printed page, since cell padding is reduced from 10px to 4px.

fix A field set back is no conflict, and the button names what it takes A settings field set back to its saved value no longer raises a false "Saved by someone else" conflict.

fix A component block shows a refusal on a field no block claims A refused save shows its reason instead of a bare "Did not save".

fix Keep a required field's message after the field is left "Field is required" stays on a cleared typed field after the user leaves it, instead of only showing Not saved.

fix Three draft edge cases in the settings dialog Fixes a stale Not saved mark on a field set back to its saved value, a refused autosave insert caused by a required field in another block, and a lost hold after a save.

fix Keep other blocks' unsaved edits when a conflict reloads Reload on a conflict resets only the fields the other save changed and keeps the binding's other unsaved edits.

fix A table another save only restamped no longer counts as changed Unsaved table edits no longer trigger a "Saved by someone else" prompt when another save only changed row timestamps and owners.

fix An autosave waits only on its own block's required fields An empty required field now holds only its own block, so the other blocks on the same record keep autosaving.

fix Ask for a reload when the site language changes Saving a language change in System Settings now shows the "Reload to apply" toast.

fix One Go to row per place, and tell near places apart A sidebar row and a doctype row pointing to the same address now show once, so "gen" no longer lists Gender twice.

fix Hide an item whose act right fails, on every surface Header, quick action and composer menu items are hidden for users who lack the act's right, instead of showing and then toasting a permission error.

fix Leave print format empty instead of Standard on the print page The report print page starts with a blank print format instead of a "Standard" option that is not a real format.

fix Keep Arrange mode on the logos' edges and show the selected chip Arrange mode on /apps fits the drag grid's width and the selected Favourites chip is easier to see.

fix Land an app's and a module's address on the first sidebar row Opening an app or module's bare address redirects to its first sidebar row instead of a developer page of tiles.

fix The new record page draws the shared page states The new record page shows the standard not found, no permission, offline and failed states, with a retry, instead of raw error text.

fix Change the address and the page frame at once Clicks update the address, sidebar and page frame immediately, with a skeleton while the page loads (under Refactors & Performance).

refactor Search_records moves to frappe/shell and returns the owner's address Record search moves into the shell module, and each record links to its owning app.

feat Expose gunicorn's web tier settings, and log no error for a busy answer Adds web_tier_settings() so apps can read gunicorn's resolved workers, threads and timeouts, and busy answers from concurrent_limit no longer write Error Log rows.

feat Limit a settings block to roles A settings block can be shown only to users with listed roles.

feat Read your own email accounts on desk v2 Users can read their own email accounts through a new endpoint, which the desk v2 Profile pane needs.

feat One read that lists the views a person can open Adds a single endpoint that lists the views a person can open, for the view switcher and palette.

feat Give record scripts the current app as page.app Record scripts can read page.app to tell whether they run on the desk or on CRM.

feat The shell hook Apps can attach to the desk v2 shell through a shell.js file, starting with a per-tab setup call.

feat Let apps ship triggers Apps can ship Flow triggers that are installed locked and switched on at migrate.

feat Make the list view and Kanban board work on phones and tablets Lists and Kanban fit mobile screens, and menus open as bottom sheets on phones.

feat Block Variants Studio blocks can hold named variants, and one variant is rendered at a time.

feat Report the deferred export's result to the saving user Export failures in developer mode reach the saving user.

feat Return the reason for each refused property change Customize Form returns which field and property was refused, and why.

feat Pick fields when reading one document in API v2 and MCP Document reads and writes accept a fields list, so callers receive only what they ask for.

feat Web search and helper model settings in /flow and the harness GUI System Managers set the web search provider and helper model in Flow settings, and the harness GUI gets the same options.

feat Web_search tool, DuckDuckGo by default or Brave, Tavily and Exa with a key Flow agents get a web_search tool that returns the top 10 results, using DuckDuckGo by default.

feat Save a tool result too big to show, for read and grep to open Large tool results are saved to the chat folder so the agent can page or search them.

feat Web_fetch tool, reading a public page as markdown Flow agents can read a public page as markdown. Private and local addresses are refused.

feat Suggest replies after a run, and a small model for titles After each run, Flow offers 2–4 suggested replies, and a small model writes chat titles.

feat Chrome is the default pdf generator on version 16 New sites use Chrome for PDFs, and new print formats follow Print Settings.

feat Validate query report filters on the server Reports can opt in to server-side filter validation, covering mandatory filters, options, links, and types.

feat Refuse desk v2 shell methods while enable_desk_v2 is off Desk v2 shell server methods answer with a 403 while desk v2 is switched off in System Settings.

feat ... GroupBy reads its grouped rows over API v2 The GroupBy hook reads its grouped rows through API v2, which desk v2 allows.

feat Refuse two component blocks without fields on one binding feat(settings): refuse two component blocks without fields on one binding

feat Global variables for html blocks in the print format editor Print format editors get a Global variables box, so values set once are reused by every HTML block.

feat Insert field values in the text block Typing / in a Text block opens a field picker, so a line can mix text with field values, including values from linked documents.

feat Custom paper size on print formats Print formats get a Custom paper size with width and height in mm, used by Chrome and PlutoPrint PDFs.

feat Export askReload on the app import list Apps can import askReload from the shell to show the same "Reload to apply" toast as desk's own after-save handlers.

feat Load the cloud settings UI as an ES module Same change as the backport, falling back to the classic script when the import fails.

feat The settings pane-list endpoint, its permission filter, label index and cache One GET returns the settings panes and blocks a user may see, with a search label index.

feat The Settings Dialog DocType and the settings component path Apps can declare settings panes and blocks in a Settings Dialog record, which the server merges into one pane list.

feat One-click Gmail, Yahoo and Yandex, shown only when Frappe Cloud has them on Add Email Account shows one-click sign-in only for providers that Frappe Cloud has turned on.

perf Support pypika terms in permission_query_conditions Permission hooks can return a query builder term as well as a SQL string.

perf Build without source maps or test tools in production Production builds drop source maps and test tools, cutting the shell from 21 MB to 6 MB.

perf Skip the desk v2 shell build for --app runs that add nothing to it Build runs that add nothing to the desk v2 shell skip the 13-second shell build.

perf Keep the sidebar panel built across sidebars The sidebar panel stays built when switching sidebars, and only its rows change.

perf Reuse island builds whose inputs have not changed Island builds whose inputs are unchanged reuse their output, so installing several apps no longer recompiles them each time.

perf Smaller pdfs and fewer queries per print (backport) Chrome PDFs with headers and footers are much smaller, and printing reads settings from the cache.

perf Emails rebuild the attached pdf for every recipient Emails build the attached PDF once and reuse it for every recipient, so a three-person email renders once.

perf Typst pdfs build an html print view they never use Typst formats skip the HTML print view and go straight to the builder renderer. One PDF drops from 13 to 4 queries.

perf Every print reloads print settings and the letter head Print settings, letter head and print style use the document cache, cutting queries per print.

perf Large pdfs recompress the same logo once per page Images are recompressed once each, not once per page, which cuts an 810-page PDF from 13s to 0.41s.

perf Bulk pdf downloads have no concurrency limit Bulk PDF download uses the same concurrency limit as single and report downloads.

perf A header or footer makes pdfs several times larger Pages are compressed before saving, so a 810-page text report drops from 35.3MB to 3.9MB.

fix Omit unreadable fields from document write responses Create, update, submit and workflow responses no longer return values of fields the user cannot read, and masked fields are masked.

fix Omit unreadable fields from write responses Backport of #45832 to version-16-hotfix, with the same response masking.

fix Update a single doctype field only when it holds the file Switching a file between private and public now updates a single doctype field only when that field still points at the file.

fix Update a single doctype field only when it holds the file Backport of #45943 to version-16-hotfix, which also adds the check for regular doctype fields.

fix Update a single doctype field only when it holds the file Backport of #45943 to version-15-hotfix, which also adds the check for regular doctype fields.

fix Omit unreadable fields from write responses Backport of #45832 to version-15, with the same response masking.

fix Bump pypdf to 6.21.4 on desk-v2 Upgrades pypdf from 6.21.2 to 6.21.4 to fix CVE-2026-119203 to 119209.

fix Feat(data-store)... / fix: read the web tier's size from gunicorn's own settings Concurrency limits now read gunicorn's workers and threads from its config file, so benches configured that way no longer allow only one request at a time.

fix Translate Add Column dialog options and new column label The From Document Type options and the new column header now show in the user's language.

fix Chart custom options only change the chart they belong to Custom options saved on a dashboard chart now change only that chart, not others.

fix Hold each view key with a unique index Two saved views saved at the same moment can no longer get the same key.

fix Bracket and escape rendered permission criteria A top-level OR in a permission hook no longer lets rows skip the other conditions, and values are escaped before they reach raw SQL.

fix Limit desk metadata endpoints to desk users The doctype, versions and installed-apps helpers now require a System User, and the roles helpers require read access on Role.

fix Bracket and escape rendered permission criteria The same permission-criteria fix for the version-16 hotfix branch.

fix Filter versions based on user's permitted fields Activity timeline versions are filtered by the user's field permissions before they are sent, so hidden field changes no longer reach the client.

fix Keep the caller's Node heap limit The frappe build keeps a NODE_OPTIONS heap limit set by the caller instead of overriding it.

fix Read snapshot reports from the latest complete DuckDB sync Snapshot reports skip incomplete syncs instead of showing partial data.

fix Restore the statement timeout after counting dashboard links The 1-second execution timeout is removed after the count, so later ALTER TABLE statements no longer fail.

fix Show title in links to users with select permission Users with only select permission see link titles in forms, reports and pickers.

fix Show Link titles for child table columns in Report Builder Report Builder shows the full name instead of the email for child-table Link columns.

fix Return 404 when a page raises PageDoesNotExistError while rendering Missing pages return a real 404 instead of the 404 page with HTTP 200.

fix Shortening a field length raises AttributeError Customize Form no longer crashes when a field length is made shorter.

fix Name the agents, skills and tools apps ship after their app Apps shipping the same agent or tool name no longer make migrate fail.

fix Stack dialogs opened over other dialogs A dialog opened over another dialog now appears on top and dims the one below.

fix Hide column resize handle when the user cannot save the width Users who cannot save a column width no longer see the resize handle, which raised a permission error.

fix Show the Flow sidebar only to Flow users and System Managers Desk users without Flow access no longer see an empty Flow workspace.

fix Skip form builder mount if form changed while bundle loads Web form builder changes are no longer saved to the wrong form when you switch forms during load.

fix List virtual DocTypes through their own get_list in API v2 API v2 and MCP list calls work for virtual and log DocTypes such as Error Log.

fix Build the API discovery cache on the default queue Discovery returns quickly when the long queue is busy, and the cache lasts 24 hours.

fix Route connection badge by field once linked names exceed the cap The connection badge filters by field when more than 100 names are linked.

fix User update_password Calling update_password without a reset key or old password returns a validation error instead of a 500.

fix Treat SQL comments as whitespace The export check missed `INTO OUTFILE`/`DUMPFILE` when SQL comments sat between the keywords. Comments are now stripped before matching.

fix Apply email account scope to single Communication access Open, delete, export and print of a single Communication now respect the email account scope, not just list queries.

fix Keep dashboard cards and charts private for users who cannot create them Users without create permission can no longer publish a card or chart, mark it standard, or create settings for other users.

fix Reject File URLs with dot or empty path segments Paths like `/private/files/./x.txt` are rejected so one file cannot be reached under a second spelling that skips the access check.

fix Match File rows on the exact file_url when serving a private file Private file lookup compares the URL exactly, since the database matches case-insensitively but files on disk do not.

fix Keep a saved not-equals filter out of the quick filter box A saved "not equals" Kanban filter no longer fills the quick filter box with its value, which had flipped it to "equals".

fix Typst pdfs cut the row lines short in bordered sections Row and column lines in bordered Typst PDF sections run edge to edge.

fix Read a phone's chat at one 15px text size Flow chat uses one readable text size on phones, and the composer no longer zooms on iPhone Safari.

fix Steady list, instant clear and desk fonts The combobox list stays steady while searching, Link fields get a clear button, and menu text uses the desk font.

fix Mock the imap connect in email receive test helpers Email receive test helpers mock the IMAP connect, which fixes eight failing tests.

fix User permission on a deleted doctype blocks login A user permission that points at a deleted doctype no longer blocks login. The row is skipped and kept, so restoring the doctype brings the restriction back.

fix Normalize file_url to prevent private-file access-check bypass File URLs are normalised before the access check, so a private file cannot be reached through another spelling of its path.

fix Reject `..` in file_url instead of collapsing it File URLs with a .. segment are refused instead of being collapsed.

fix Require read access to a document to see its submission status Background submission status is returned only to users who can read the document, and the form banner looks the same for everyone who can open it.

fix Search records only in doctypes Go to lists Records and Tab-to-narrow search only doctypes the person can read, have an address for, and can enter in their owner app.

fix Attach Text Editor files only on a desk v2 save A desk v1 save no longer adopts loose Files shown in a Text Editor field as attachments, and no longer makes them public.

fix Read a never-saved Single with include=users A Single that was never saved opens on the v2 record page instead of returning a 500.

fix V2 `include=users` skips a missing `modified_by` Same 500 on never-saved Singles, fixed where the users list is built.

fix Store blank JSON as NULL and refuse invalid JSON as a field error Blank JSON is stored as NULL, and invalid JSON gives a field error instead of a 500.

fix Keep a scoped app not on the bench and report no clash on the index A scoped pages.json entry for an app not yet on the bench is kept, so it applies once that app is installed.

fix Records survives a title field the person may not read One doctype with an unreadable title field no longer empties Records for every doctype.

fix One of two chrome pdfs started at once hangs forever When two Chrome PDFs start together, the second waits for Chrome's address and reuses the first one's, instead of hanging.

fix Read the frappe prefix by app, and ARCHITECTURE.md follows the apps index The return-visit and view-restore walks no longer crash before their first step.

fix Excel export fails on standard query reports with no .py Excel export works for standard query reports that have no Python file, using the default styles.

fix Error log hides the real error when imap connection fails The real IMAP connection error is logged instead of a generic attribute error, and the mail pull stops.

fix Show background tasks on the rail when the dock is pinned With a pinned dock, Background Tasks sits on the rail with Search, Notifications and Flow instead of alone at the top of the sidebar.

fix Print view pdfs of editor formats skip on_print_pdf PDFs downloaded from the print view of Print Format Editor formats run the on_print_pdf hooks, as emailed and bulk prints already do.

fix Skip live shared docinfo updates in desk v1 forms Desk v1 forms no longer change share rights live, which matches develop and refreshes them on reload.

fix Keep Contact's flat values only for desk v2's create With desk v2 off, a Contact insert no longer keeps flat email, phone or mobile values as primary rows.

fix General tab fails to load when a mapped field is a table fix(settings): general tab fails to load when a mapped field is a table

fix Pass the desk v2 server tests on Postgres Grouped counts and star lookups work on Postgres, with MariaDB and SQLite results unchanged.

fix A held field's older refusal gives way to the new one fix(settings): a held field's older refusal gives way to the new one

fix Remove tags with one bulk delete again Removing a tag is one bulk DELETE again, instead of running every app's on_trash hooks per tag.

fix Expect the App Page view in the Apply To spec fix(client_script): expect the App Page view in the Apply To spec

fix Change_settings leaves the setting changed when a test fails fix: change_settings leaves the setting changed when a test fails

fix Check write in Data Import start_import and User Invitation resend_invite Data Import start and User Invitation resend now check write permission on the document themselves, so a read-only user can no longer trigger them through the generic method endpoint.

fix Publishing a page deleted non-JSON files from studio_components Publishing no longer deletes hand-written .vue, .ts, .js or .css files in studio_components; only unused exported component JSON is cleaned up.

fix Download private files whose file name is an html-like type Private files whose File name has an html-like extension are forced to download instead of rendering inline.

fix An insert's added required fields count as sent In the settings dialog, a refused insert no longer leaves a stale error mark on a field or overwrites a hold's message.

fix Publishing a standard app with a hyphenated name built no assets Publishing a standard Studio app whose name has hyphens now builds its assets to the folder the renderer reads.

fix Print images of files served by storage apps Images stored by a storage app such as S3 now print in PDFs when the user can read the File; unreadable files stay blocked.

fix Build desk v1 before the v2 shell A failed desk v2 shell build no longer stops bench build before desk v1's assets are written.

fix The index's notices read the setup state themselves The index notices call the setup check themselves instead of reading a value from core boot, which fixes a failing boot budget test.

fix Add wait_for_job to the v16 test utils Adds wait_for_job to the v16 test utils so server tests run again on v16.

fix Reset the stub request after the resend and import permission tests Test cleanup resets a stub request that broke the server tests' teardown.

fix Keep the OIDC `sub` claim immutable after user creation A signed-in user with write access to their own User record could change their OIDC `sub` and be seen as another account. The `sub` is now re-asserted from the stored value on every save and can no longer be changed once generated.

fix Let nothing but the shell serve a path under /apps After migrate, a Studio App route can no longer take over /apps and the desk address.

fix Check only website routes against the /apps reservation A Studio page routed to /apps can be saved again; only real website routes reserve the path.

fix In-document links break with a header, footer or bulk print Internal PDF links point to their target page and position after a header, footer or bulk print merge.

fix Typst pdfs leave out the draft and cancelled heading Typst PDFs now print the DRAFT and CANCELLED heading the way Chrome does.

fix Saving a builder print format as custom format fails Ticking custom format on a builder print format and saving it no longer raises an AttributeError.

fix Print the label of an attach image field on the standard format An Attach Image field prints its label beside the image on the Standard print format.

fix Footer page numbers and print access logs (backport #45084, #45170) Chrome footers that wrap keep correct page numbers, and emailed and bulk prints run the on_print_pdf hooks and write access logs.

fix Match the text spacing of other inputs Link, Autocomplete and multiselect text uses the same letter spacing and font as Data and Select fields.

fix Show disable report button on standard reports The Disable Report and Enable Report button appears again for users who can edit reports.

fix Action result columns, centered loaders, Espresso buttons, lucide icons Flow action results show as table columns, loaders sit at the top, and icons are Lucide.

fix Type-check the desk with tsc and fix every error it reports The desk v2 frontend type-checks cleanly with tsc, and CI now runs it.

fix Skip Studio Cypress binary installation outside tests fix: skip Studio Cypress binary installation outside tests

fix Raise PermissionError when a non-manager edits a public workspace A non-manager editing a public workspace now gets a PermissionError, matching the private-workspace check, and a test covers it.

fix Dashboard view fixes from v16 Clears the page when a dashboard fails to load, shows the dashboard name in the title, escapes action labels, and adds a no-access message.

fix Bulk print leaves out failed documents without saying so A bulk print that skips a failed document now ends with a red message that links each missing document.

fix Approval emails fail when drafts can't be printed Workflow approval emails go out without the PDF when the draft can't be printed, instead of failing.

fix Emailed and bulk pdfs skip the access log and on_print_pdf Emailed and bulk PDFs now run the `on_print_pdf` hooks and write the access log, as the print view does.

fix Pdf with a password fails for typst print formats Typst PDFs are now encrypted with the password, the same way Chrome PDFs are.

fix Typst prints a rating as a number instead of stars Typst print formats draw rating fields as stars, with the same rounding as Chrome prints.

fix Footer skips some pages and shows the wrong page number Header and footer are measured at the width they print at, so a footer that wraps fits its space.

fix Chrome errors come back as a TypeError or no error at all Chrome failures now raise a clear RuntimeError, instead of a NoneType error or a silent timeout.

fix Large reports fail to download as PDF Query report PDF downloads now run on the server, which avoids the 413 error on reports over about 14k rows.

fix Align the filter row with the header and body columns In tables with 20 or more rows, the filter row now lines up with the header and body columns.

fix Keep each layout's own column widths when switching layouts Switching list layouts no longer carries over the previous layout's column widths.

fix Skip property setters that have not changed Migrate no longer deletes and re-adds unchanged property setters, so Deleted Document stops growing on every run.

fix Reset column width, sticky and added columns without a reload "Reset to default" in a child table's column settings now restores widths, sticky columns and added columns.

fix Honour print settings pdf generator for standard printing (backport) Standard printing follows Print Settings > PDF Generator, so Chrome formats work on servers without wkhtmltopdf.

fix Retry a slow chromium start once (backport) Chrome PDFs wait up to 10 seconds for a slow Chromium start and retry once. Crashes still fail immediately.

fix Honour landscape in the chrome renderer (backport) Landscape print formats come out landscape from the Chrome renderer.

fix Beta print PDFs drop overflowing table rows (backport) Beta print format PDFs print every table row, including rows that overflow the page.

fix Allow the pinned pypdf past the uv package age cutoff Lets CI install the pinned pypdf, which uv had refused because it was under 7 days old.

refactor Drop registerAfterSave from @shell Removes registerAfterSave from the shell's public exports; apps now register through their shell hook.

refactor Expect the view key on Recent rows Updates a palette test to expect the view key on Recent rows.

refactor Fix the flaky workflow field level read teardown Rolls back at the start of a test teardown, so cleanup no longer fails on a Workflow Action row.

refactor Vouch for itsdaveit Adds a vouch entry for itsdaveit.

refactor Remove the List View ADRs and fold them into component docs The List View ADRs are merged into the component docs and removed.

refactor Container in the desk glossary Adds a Container term to the desk glossary.

refactor Sharpen the default view in the glossary Updates the default view definition in the desk glossary.

refactor Views vocabulary in the desk glossary Adds a Views section to the desk glossary.

refactor Retry a failed uninstall without --force Test-only: the uninstall retry tests now check the app is still installed after a failure.

refactor Retry a failed GitHub API call in the develop status script The develop status script retries a failed GitHub call up to three times.

refactor Keep a branch failing while its failed run is re-running The status check stays red during a re-run, so a branch cannot merge while it is still failing.

refactor Fix the flaky account unlock and phone list scroll tests Makes two flaky tests wait for the state they depend on.

refactor Vouch trustedcomputer Adds a contributor to the vouched list.

refactor One rule for a record's title and one for an app's title Recent, Favourites and Records title records through one helper.

refactor Let the dashboard decide automatic reviews chore(guard): let the dashboard decide automatic reviews

refactor Add print format skill for agents docs: add print format skill for agents

refactor Skip generator-filled values in the canvas parity check test(print): skip generator-filled values in the canvas parity check

refactor Forward get_hooks arguments untouched in the acme gate stub test(palette): forward get_hooks arguments untouched in the acme gate stub

refactor Patch desk v2 in TestContactFlatValues test(contacts): patch desk v2 in TestContactFlatValues

refactor Pin desk v1 output of shared code refactored on desk-v2 test: pin desk v1 output of shared code refactored on desk-v2

refactor Realtime non blocking progress bar for bulk actions and prepared reports Bulk submit, cancel and update run in the background with a live progress bar, and prepared reports update their status in the background jobs sidebar.

refactor One exported page-engine builder; the record page builds on it Moves the page engine into one exported builder that app pages can use, and the record page is built on it with no change for readers.

refactor One cache key for DocType owners and the address table The shell's DocType owners and address table share one cache key, so each lookup reads the metadata version once.

refactor Add Guard review config Adds a .guard config with review rules and context files for the Frappe repo.

refactor Bump Pillow to 13.0.0 on v15 Reverts the Pillow bump on v15, which needs Python 3.11 and broke installs on the supported Python 3.10.

refactor A missing Record binding reads as new and logs nothing Adds a test that a missing Record binding opens as a new draft without console errors.

refactor Add page-JS and API-call baselines for the new record page Adds size and API-call baselines for the new record page and the list's Create dialog.

refactor Point the page.openSettings example at a block its pane holds Corrects the page.openSettings example in the scripting guide.

refactor Say the Enable Desk v2 setting is a preview The Enable Desk v2 setting's description now says it is a preview.

refactor Run the page-JS check and the server tests on every desk-v2 PR Runs the page-JS size check and server tests on every desk-v2 pull request that touches frontend files.

refactor Skip the docs check on pull requests with the no-docs label The docs check now also honours the no-docs label, not only the description text.

refactor Import @framework/ui only through named subpaths The desk imports the UI library only through named subpaths, which lint now enforces.

refactor The concept check counts internal ui/ names apart from gaps The desk structure check separates internal names from real gaps.

refactor The router gets every page by registration The router no longer imports any page; standard pages register at boot.

refactor Shell browser memory uses the per-user helper Shell sidebar and composer state use the per-user browser memory helper.

refactor Test desk-v2 like develop ci: test desk-v2 like develop

refactor Run only linters on desk-v2 prs ci: run only linters on desk-v2 prs

refactor Bring the desk-v2 status changes to desk-v2 ci: bring the desk-v2 status changes to desk-v2

refactor Add a desk-v2 status check for desk-v2 prs ci: add a desk-v2 status check for desk-v2 prs

refactor Wait for the cancelled run to stop before re-running it ci: wait for the cancelled run to stop before re-running it

refactor Remove the server and UI test impact maps Removes the impact-map test selection, and server and UI suites run in full again.

refactor Merge develop into desk-v2 Eighth sync of develop into the desk-v2 branch.

refactor Rename the develop status workflow to develop tests Renames the workflow so its jobs no longer look like the required check.

refactor Ignore cancelled develop runs in the develop status A cancelled develop run no longer turns the Develop status red.

refactor Turn develop green as soon as a passing fix merges Develop status now reflects passing fix merges, and its link opens the failed job.

refactor Fix flaky grid Link dropdown test The test clicks a static cell, so it no longer matches an element that becomes editable a moment later.

Frappe and ERPNext changes, 26 Oct to 1 Nov 2026

Breaking changes

Highlights