⚠️ Breaking Change
Impact Score: 7/10
Directus v11.14.1 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: directus · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
Breaking-change evidence from the source
⚠️ Potential Breaking Changes **Added multi-domain support for OAuth/OpenID ([#26312](https://github.com/directus/directus/pull/26312))**
⚡ Executive Summary (TL;DR)
Directus v11.14.1. Source highlight: ⚠️ Potential Breaking Changes
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
⚠️ Breaking Changes & Deprecations (1)
- ⚠️ Potential Breaking Changes **Added multi-domain support for OAuth/OpenID ([#26312](https://github.com/directus/directus/pull/26312))**
✨ New Features & Capabilities (6)
- Added multi-domain support for OAuth/OpenID (#26312 by @gaetansenn)
- Added a new `AI_ENABLED` environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
- Added a new `AI_ENABLED` environment variable to allow opting out of our AI chat feature (#26458 by @bryantgillespie)
- Added concurrency control for file uploads via a new `FILES_MAX_UPLOAD_CONCURRENCY` env variable (#26424 by @thomas-svrts)
- Added nested validation rules to validation error notice (#26389 by @robluton)
- Added Comparison modal wysiwyg diff highlighting (#26301 by @robluton)
🔧 Bug Fixes & Patches (6)
- Fixed `getAsset` returning all file fields instead of only those allowed by the users permissions (#25905 by @gaetansenn)
- Fixed an issue that would cause some drawer header icons from being displayed too large (#26442 by @kekekuli)
- Added multi-domain support for OAuth/OpenID (#26312 by @gaetansenn)
- Improves behavior of the in-studio back button (#26427 by @rijkvanzanten)
- Fixed disabled state for `datetime`, `file`, `select-dropdown-m2o` & `collection-item dropdowns` interfaces (#26365 by @ComfortablyCoding)
- Fixed GraphQL error when duplicating M2A items with same name fields of conflicting types. (#26367 by @dstockton)
📄 View Raw Release Notes (Original Developer Log)
### ⚠️ Potential Breaking Changes
**Added multi-domain support for OAuth/OpenID ([#26312](https://github.com/directus/directus/pull/26312))**
SSO callback URL generation and redirect validation now includes port matching to ensure redirects target the correct server.
**Fixed `getAsset` returning all file fields instead of only those allowed by the users permissions ([#25905](https://github.com/directus/directus/pull/25905))**
`getAsset` / `GET /assets/:id` now respects `directus_files` permissions when returning file based fields.
- **@directus/app**
- Removed the deprecated `/webhooks` functionality across the stack. This includes the API route and its related tests, ([#26311](https://github.com/directus/directus/pull/26311) by @mobml)
controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
has now been fully removed.
- Removed the "Comment" tab from the activities page ([#26440](https://github.com/directus/directus/pull/26440) by @Abdallah-Awwad)
- **@directus/api**
- Removed the deprecated `/webhooks` functionality across the stack. This includes the API route and its related tests, ([#26311](https://github.com/directus/directus/pull/26311) by @mobml)
controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
has now been fully removed.
- Fixed `getAsset` returning all file fields instead of only those allowed by the users permissions ([#25905](https://github.com/directus/directus/pull/25905) by @gaetansenn)
- Added multi-domain support for OAuth/OpenID ([#26312](https://github.com/directus/directus/pull/26312) by @gaetansenn)
- Added a new `AI_ENABLED` environment variable to allow opting out of our AI chat feature ([#26458](https://github.com/directus/directus/pull/26458) by @bryantgillespie)
- **@directus/system-data**
- Removed the deprecated `/webhooks` functionality across the stack. This includes the API route and its related tests, ([#26311](https://github.com/directus/directus/pull/26311) by @mobml)
controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
has now been fully removed.
- **@directus/specs**
- Removed the deprecated `/webhooks` functionality across the stack. This includes the API route and its related tests, ([#26311](https://github.com/directus/directus/pull/26311) by @mobml)
controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
has now been fully removed.
- **@directus/types**
- Removed the deprecated `/webhooks` functionality across the stack. This includes the API route and its related tests, ([#26311](https://github.com/directus/directus/pull/26311) by @mobml)
controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
has now been fully removed.
- **@directus/sdk**
- Removed the deprecated `/webhooks` functionality across the stack. This includes the API route and its related tests, ([#26311](https://github.com/directus/directus/pull/26311) by @mobml)
controller, and mocks, as well as the corresponding SDK commands and schema types, types and services, system fields and
collections, OpenAPI specifications, and App UI routes and components. This endpoint has been unused for over a year and
has now been fully removed.
### ✨ New Features & Improvements
- **@directus/app**
- Added a new `AI_ENABLED` environment variable to allow opting out of our AI chat feature ([#26458](https://github.com/directus/directus/pull/26458) by @bryantgillespie)
- Added concurrency control for file uploads via a new `FILES_MAX_UPLOAD_CONCURRENCY` env variable ([#26424](https://github.com/directus/directus/pull/26424) by @thomas-svrts)
- Added nested validation rules to validation error notice ([#26389](https://github.com/directus/directus/pull/26389) by @robluton)
- Added Comparison modal wysiwyg diff highlighting ([#26301](https://github.com/directus/directus/pull/26301) by @robluton)
- Fixed an issue that would cause some drawer header icons from being displayed too large ([#26442](https://github.com/directus/directus/pull/26442) by @kekekuli)
- **@directus/api**
- Added concurrency control for file uploads via a new `FILES_MAX_UPLOAD_CONCURRENCY` env variable ([#26424](https://github.com/directus/directus/pull/26424) by @thomas-svrts)
- **@directus/env**
- Added multi-domain support for OAuth/OpenID ([#26312](https://github.com/directus/directus/pull/26312) by @gaetansenn)
- Added a new `AI_ENABLED` environment variable to allow opting out of our AI chat feature ([#26458](https://github.com/directus/directus/pull/26458) by @bryantgillespie)
- Added concurrency control for file uploads via a new `FILES_MAX_UPLOAD_CONCURRENCY` env variable ([#26424](https://github.com/directus/directus/pull/26424) by @thomas-svrts)
- Added support for specifying a KMS Key ID in S3 storage when using `aws:kms` Server Side Encryption ([#26377](https://github.com/directus/directus/pull/26377) by @Joey92)
- **@directus/types**
- Added missing MCP settings types. ([#26469](https://github.com/directus/directus/pull/26469) by @bryantgillespie)
- **@directus/storage-driver-s3**
- Added support for specifying a KMS Key ID in S3 storage when using `aws:kms` Server Side Encryption ([#26377](https://github.com/directus/directus/pull/26377) by @Joey92)
### 🐛 Bug Fixes & Optimizations
- **@directus/app**
- Added multi-domain support for OAuth/OpenID ([#26312](https://github.com/directus/directus/pull/26312) by @gaetansenn)
- Improves behavior of the in-studio back button ([#26427](https://github.com/directus/directus/pull/26427) by @rijkvanzanten)
- Fixed disabled state for `datetime`, `file`, `select-dropdown-m2o` & `collection-item dropdowns` interfaces ([#26365](https://github.com/directus/directus/pull/26365) by @ComfortablyCoding)
- Fixed GraphQL error when duplicating M2A items with same name fields of conflicting types. ([#26367](https://github.com/directus/directus/pull/26367) by @dstockton)
- Enforces the eslint vue/no-undef-components rule in the sourcecode ([#26390](https://github.com/directus/directus/pull/26390) by @rijkvanzanten)
- Fixed incorrect initial slider fill position when the midpoint is not a valid stepped value ([#26408](https://github.com/directus/directus/pull/26408) by @DamnItAzriel)
- Fixed sticky column background in M2M list interface ([#26401](https://github.com/directus/directus/pull/26401) by @vdr-smartdev-trinh)
- Improved system permissions collection picker to support easier multi-selection ([#26410](https://github.com/directus/directus/pull/26410) by @thanhle98)
- Enforced PascalCase usage within app source code ([#26391](https://github.com/directus/directus/pull/26391) by @rijkvanzanten)
- Cleaned up header button inconsistencies ([#26375](https://github.com/directus/directus/pull/26375) by @rijkvanzanten)
- Replaced the local useLocalStorage composable with the VueUse equivalent ([#26303](https://github.com/directus/directus/pull/26303) by @tydung26)
- Disable text highlighting for draggable vue elements in Chrome and Firefox ([#26413](https://github.com/directus/directus/pull/26413) by @DanielRubianes)
- Fix markdown editor layout when a minimum input height is applied ([#26430](https://github.com/directus/directus/pull/26430) by @DamnItAzriel)
- Added image validation type for file image upload ([#25946](https://github.com/directus/directus/pull/25946) by @gaetansenn)
- **@directus/api**
- Updated `nodemailer` dependency from 7.0.10 to 7.0.11 ([#26288](https://github.com/directus/directus/pull/26288) by @dependabot)
- Added system index for revisions.activity ([#26479](https://github.com/directus/directus/pull/26479) by @br41nslug)
- Fixed `cockroachdb` failing on "Add Marketplace" migration ([#26467](https://github.com/directus/directus/pull/26467) by @ComfortablyCoding)
- Fixed password reset timing ([#26485](https://github.com/directus/directus/pull/26485) by @br41nslug)
- Fixed MySQL migration compatibility with sql_require_primary_key ([#26374](https://github.com/directus/directus/pull/26374) by @gaetansenn)
- Fix permission cache to respect `CACHE_SYSTEM_TTL` ([#26295](https://github.com/directus/directus/pull/26295) by @clintmoyer)
- Improved CockroachDB database introspection performance ([#26393](https://github.com/directus/directus/pull/26393) by @br41nslug)
- **@directus/types**
- Updated `nodemailer` dependency from 7.0.10 to 7.0.11 ([#26288](https://github.com/directus/directus/pull/26288) by @dependabot)
- **@directus/system-data**
- Added system index for revisions.activity ([#26479](https://github.com/directus/directus/pull/26479) by @br41nslug)
- Added a new `AI_ENABLED` environment variable to allow opting out of our AI chat feature ([#26458](https://github.com/directus/directus/pull/26458) by @bryantgillespie)
- **@directus/memory**
- Fix permission cache to respect `CACHE_SYSTEM_TTL` ([#26295](https://github.com/directus/directus/pull/26295) by @clintmoyer)
- **@directus/sdk**
- Added a new `AI_ENABLED` environment variable to allow opting out of our AI chat feature ([#26458](https://github.com/directus/directus/pull/26458) by @bryantgillespie)
- Fixed conversion of `fields` from object notation to dot syntax in SDK subscription queries ([#26397](https://github.com/directus/directus/pull/26397) by @bruno-costa)
- **@directus/schema**
- Improved CockroachDB database introspection performance ([#26393](https://github.com/directus/directus/pull/26393) by @br41nslug)
- **@directus/themes**
- Enforced PascalCase usage within app source code ([#26391](https://github.com/directus/directus/pull/26391) by @rijkvanzanten)
- **@directus/schema-builder**
- Fixed singleton support ([#26478](https://github.com/directus/directus/pull/26478) by @licitdev)
- **@directus/storage-driver-supabase**
- Fixed an issue where the Supabase storage driver would fail if the root folder is the empty string. ([#26384](https://github.com/directus/directus/pull/26384) by @aderugy)
### 📦 Published Versions
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`
- `@directus/[email protected]`