Appwrite 1.9.9 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: appwrite · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-10-31.

Compatibility not verified — check source notes

📄 .MD

✨ Features 1 🔧 Bug Fixes 2

⚡ Executive Summary (TL;DR)

Appwrite 1.9.9. Source highlight: Appwrite 1.9.9 is a precautionary maintenance release for self-hosted deployments on the 1.9 line. It moves the runtime to PHP 8.5.12. It retains Console 8.7.37 for compatibility with the 1.9 server APIs. Upgrading from 1.9.8 keeps the existing migration class and introduces no schema changes.

Visit Appwrite Official Site ↗ Official Release Source ↗ All Appwrite Releases 📡 Appwrite RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

✨ New Features & Capabilities (1)

Map 1.9.9 to migration V25, the same class as 1.9.8; no migration class is added.

🔧 Bug Fixes & Patches (2)

Update PHP to 8.5.12. PHP 8.5.12 fixes CVE-2026-109618 and CVE-2026-109619 ("PHP2Shell"). **Appwrite is not affected by either one:** it serves requests through Swoole rather than PHP's web SAPIs (mod_php, PHP-FPM, CGI). This release keeps the runtime on the patched version anyway.
**Runtime:** update the base image to `appwrite/base:1.4.5`, which ships PHP 8.5.12 (appwrite/docker-base#126, #14747).

📄 View Raw Release Notes (Original Developer Log)

Appwrite 1.9.9 is a precautionary maintenance release for self-hosted deployments on the 1.9 line. It moves the runtime to PHP 8.5.12. It retains Console 8.7.37 for compatibility with the 1.9 server APIs. Upgrading from 1.9.8 keeps the existing migration class and introduces no schema changes. ### Highlights - Update PHP to 8.5.12. PHP 8.5.12 fixes [CVE-2026-109618](https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w) and [CVE-2026-109619](https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp) ("PHP2Shell"). **Appwrite is not affected by either one:** it serves requests through Swoole rather than PHP's web SAPIs (mod_php, PHP-FPM, CGI). This release keeps the runtime on the patched version anyway. ### Fixes - **Runtime:** update the base image to `appwrite/base:1.4.5`, which ships PHP 8.5.12 (appwrite/docker-base#126, #14747). ### Under the hood - The new base image also includes the hardened ImageMagick resource policy from `appwrite/base:1.4.4`. - Map 1.9.9 to migration V25, the same class as 1.9.8; no migration class is added. ### Removed No environment variables, collections, or public APIs are removed. ### Install ```bash docker run -it --rm \ --publish 20080:20080 \ --volume /var/run/docker.sock:/var/run/docker.sock \ --volume "$(pwd)"/appwrite:/usr/src/code/appwrite:rw \ --entrypoint="install" \ appwrite/appwrite:1.9.9 ``` ### Upgrade Back up your database and persistent storage before upgrading. From the parent directory of an existing 1.9.8 installation, run: ```bash docker run -it --rm \ --publish 20080:20080 \ --volume /var/run/docker.sock:/var/run/docker.sock \ --volume "$(pwd)"/appwrite:/usr/src/code/appwrite:rw \ --entrypoint="upgrade" \ appwrite/appwrite:1.9.9 cd appwrite docker compose exec appwrite migrate ``` The patch reuses migration V25. No new configuration is required. **Full Changelog:** https://github.com/appwrite/appwrite/compare/1.9.8...1.9.9

← Older Version Appwrite 2.6.1 Newer Version → Appwrite 2.6.2