Skip to content

Changelog

NextPDF Core releases

Versions, dates, and engineering highlights from NextPDF Core releases.

Read release newsView active roadmap

2026

2026 releases

  1. 3.1.2Patch

    Loopback SSRF policy and registry snapshot controls

    • Loopback SSRF policy can be enabled explicitly for controlled local-service workflows.
    • ObjectRegistry snapshot and restore controls support deterministic isolation across document work.
  2. 3.1.1Patch

    DER length validation hardening

    • DER parsing enforces definite-length minimality for signed-data handling.
  3. 3.1.0Minor

    NextPDF Core 3.1

    • The 3.1 line advances the maintained Core package while preserving the 3.x public contract.
  4. 3.0.0Major

    Typed exceptions and a decomposed HTML parser

    • Typed, context-carrying domain exceptions make every failure a specific, catchable type with structured context for your logs.
    • The HTML parser moves from a 3,876-line monolith to a 1,523-line orchestrator with 14 focused collaborators.
    • PHP support is pinned to >=8.4 <9.0. GitHub Actions are SHA-pinned for supply-chain integrity, with RFC 6266/5987 filename sanitisation.
  5. 1.1.0Minor

    Flex rendering, radial gradients, and margin-box parsing

    • The release adds flex rendering, radial gradients, and margin-box parsing.
  6. 1.0.0Major

    General availability

    • NextPDF 1.0.0 marks the engine's general-availability release.