Directus v9.4.2 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: directus · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

✨ Features 4 ⚡ Improvements 4

⚡ Executive Summary (TL;DR)

Directus v9.4.2. Source highlight: For security reasons, we've enabled the `Content-Security-Policy` header by default. This won't change the normal operating behavior of the API, but be aware if you were doing some trickery before that might be affected by this header.

Visit Directus Official Site ↗ Official Release Source ↗ All Directus Releases 📡 Directus RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

✨ New Features & Capabilities (4)

#10778 Add warning when DB_CHARSET isn't explicitly configured (@rijkvanzanten)
:warning: #10776 Add Content-Security-Policy header by default (@rijkvanzanten)
#10765 Add ability to configure IP extraction (@rijkvanzanten)
#10761 Add link to Cleavr deployment guide (@armgitaar)

⚡ Performance & Enhancements (4)

#10773 Don't force commandTimeout in redis based caches (@rijkvanzanten)
#10762 Don't show badge when no revisions (@azrikahar)
#10760 style tweaks (@benhaynes)
#9224 Enable alpha channel in color selector (@adanielyan)

📄 View Raw Release Notes (Original Developer Log)

### ⚠️ Notice For security reasons, we've enabled the `Content-Security-Policy` header by default. This won't change the normal operating behavior of the API, but be aware if you were doing some trickery before that might be affected by this header. ### :rocket: Improvements - **API** - [#10778](https://github.com/directus/directus/pull/10778) Add warning when DB_CHARSET isn't explicitly configured ([@rijkvanzanten](https://github.com/rijkvanzanten)) - :warning: [#10776](https://github.com/directus/directus/pull/10776) Add Content-Security-Policy header by default ([@rijkvanzanten](https://github.com/rijkvanzanten)) - [#10773](https://github.com/directus/directus/pull/10773) Don't force commandTimeout in redis based caches ([@rijkvanzanten](https://github.com/rijkvanzanten)) - [#10765](https://github.com/directus/directus/pull/10765) Add ability to configure IP extraction ([@rijkvanzanten](https://github.com/rijkvanzanten)) - **App** - [#10762](https://github.com/directus/directus/pull/10762) Don't show badge when no revisions ([@azrikahar](https://github.com/azrikahar)) - [#10760](https://github.com/directus/directus/pull/10760) style tweaks ([@benhaynes](https://github.com/benhaynes)) - [#9224](https://github.com/directus/directus/pull/9224) Enable alpha channel in color selector ([@adanielyan](https://github.com/adanielyan)) ### :memo: Documentation - [#10761](https://github.com/directus/directus/pull/10761) Add link to Cleavr deployment guide ([@armgitaar](https://github.com/armgitaar)) - [#10622](https://github.com/directus/directus/pull/10622) `update_users_me` Alias for GraphQL API ([@w0ryn](https://github.com/w0ryn)) Directus refs/tags/v9.4.2

← Older Version Directus v9.4.1 Newer Version → Directus v9.4.3