Carbone Changelog — Stable

v5.4.5

Mon, 13 Apr 2026 00:00:00 +0000

• [On-Premise] Fixed Markdown file type detection to enable MD to PDF, MD to DOCX, MD to ODT, ...
• [On-Premise] Added Markdown support in the Studio
• Fixed Swiss QR code ( swissqrcode ) bugs related to accented characters
• Fixes for the :html formatter: Multiple arguments provided to the formatter were not recognised; now fully supported: Custom Heading and/or Table Themes and/or the "nospace" option. If the HTML contained a color as an inline style, it was not recognised when it contained space characters; it is now fully recognised.

v5.4.4

Wed, 08 Apr 2026 00:00:00 +0000

• Add the new optional tag {o.hardRefresh=true} to force a template to be processed by a converter (LibreOffice, etc.) even when the output file type is the same as the input file type. For example, it can be used to update XLSX formulas after Carbone injects the data.
• Add limits maxTemplateUncompressedSize (200 MB by default) for unzipped templates to improve resistance to zip bomb denial-of-service attacks
• [EE] Update to Node 22.22.2

v4.26.3

Tue, 07 Apr 2026 00:00:00 +0000

• [EE] Update to Node 20.20.2
• Add limits maxTemplateUncompressedSize (200 MB by default) for unzipped templates to improve resistance to zip bomb denial-of-service attacks

v3.8.2

Fri, 03 Apr 2026 00:00:00 +0000

• [EE] Update to Node 20.20.2
• Add limits maxTemplateUncompressedSize (200 MB by default) for unzipped templates to improve resistance to zip bomb denial-of-service attacks
• Node.js library only: Fix a critical security issue identified in a recent audit. This issue had already been fixed in all other versions. Align published version on npm with this version

v5.4.3

Mon, 30 Mar 2026 00:00:00 +0000

• Add new options that can be used in a template to force some parameters {o.timezone = Europe/Paris} : force the timezone {o.converter = L} : force the converter ( L : LibreOffice, O : OnlyOffice, C : Chrome) {o.lang = en-US} : force the language. Accepts uppercase or lowercase {o.exportFormattedValuesAsText = true} : force formatN to generate numbers as localized text instead of converting them to the XLSX number format. Available only for XLSX templates.
• Fix: after analysis, we noticed that the fix for object iteration introduced in v5.4.2 could break some poorly designed reports. Therefore, this version disables the fix by default. It can be enabled only by adding the pre-release tag {o.preReleaseFeatureIn=5004002} to the template.
• [Studio] Fix: avoid relying on the machine time to set the deployment timestamp
• [API]: POST and PATCH /template now return the deployedAt value saved by the backend. This is useful when the submitted object contains the constant value 42000000000 to set the deployment time to now.
• [Studio] Fix: Studio now automatically deploys a version if all versions of a template have deployedAt = 0 (no deployed template). This can happen if the template was created through the API without setting the deployedAt timestamp.
• [Studio] Fix: remove an unnecessary preview refresh when downloading a file too early, before the file is fully downloaded
• Enable the :appendTemplate formatter for Carbone Cloud

v5.4.2

Wed, 25 Mar 2026 00:00:00 +0000

• Fix: Support direct object access and iteration over the object at the same time: {d.myObj.id} {d.myObj[i].att} {d.myObj[i+1].att}
• Fix: Incorrect output when direct object access is used after iterating over the object at the same time
• Fix: Support :aggSum when the root d is an array with nested loops: {d[].sub[].val:aggSum}
• Fix: Scheduled metadata flush cron now works even when peerEndpoint is defined but no peers are available

v5.4.1

Wed, 18 Mar 2026 00:00:00 +0000
• [On-Premise] Fix the template metadata cron when no other peers are used.

v5.4.0

Tue, 17 Mar 2026 00:00:00 +0000
• ð We simplified the vocabulary across the documentation and logs to make Carbone easier to understand: "Stateful VS Stateless" becomes "With / Without template management" "Studio Web Component: embedded versioning vs embedded" becomes "Studio Web Component: With / Without template management" "With / Without versioning" becomes "With / Without template management" "With / Without database" becomes "With / Without template management" The term "Database" is replaced by "Template metadata" For new installations, the default filename stored on disk (or external storage) is metadata.db . Consider it as a special template file, stored like any other template in template storage.
• Renamed databaseName ( CARBONE_DATABASE_NAME ) to templateMetadataFile ( CARBONE_TEMPLATE_METADATA_FILE_NAME ). Default value is "metadata.db".
• databaseName ( CARBONE_DATABASE_NAME ) remains supported for backward compatibility and automatically enables templateManagement=true . If both old and new parameters are set, Carbone uses the new parameters in priority
• âï¸ Add a single boolean configuration parameter, templateManagement (or CARBONE_TEMPLATE_MANAGEMENT ), to enable the template management. It replaces the old method, which required setting a filename in databaseName (or CARBONE_DATABASE_NAME ).
• â¡ï¸ Adds the final missing features to fully support template management across a cluster of nodes or Docker containers, with high availability and no single point of failure Carbone now regularly flushes template metadata to /template as: .metadata.db.0 = current .metadata.db.1 = previous If template plugin hooks are implemented ( writeTemplate and readTemplate ), these files are also stored on external storage as: .metadata.db.0.backup = current .metadata.db.1.backup = previous Combined with the existing conflict-free synchronization ( peerPort and peerEndpoint ), this allows cluster nodes to start and stop dynamically while staying in sync without data loss… (read more: https://carbone.io/changelog.html#v5-4-0)

v5.3.0

Mon, 23 Feb 2026 00:00:00 +0000
• Remove unsupported/outdated conversion format: mediawiki (mediawiki), StarWriter (sdw3, sdw4, vor, vor3, vor4, vor5), AportisDoc (pdb), StarCalc (sdc, sdc3, sdc4), StarDraw (sxd3, sxd5), X PixMap (xpm), StarImpress (sda, sdd, sdd3, sdd4)
• [On-Premise only] Added new import/export formats supported by the latest LibreOffice version: Document: Markdown ( md ), SVG ( svg ), WEBP ( webp ), Apple Pages ( pages ) Spreadsheet: Apple Numbers ( numbers ), Parquet ( parquet ), JSON ( json ) Graphics: WEBP ( webp ), MS Publisher ( pub ), Corel Draw ( cdr ) HTML: JPEG ( jpeg ), JPG ( jpg ), WEBP ( webp ), PNG ( png ) Presentation: WEBP ( webp )
• Make Carbone compatible with LibreOffice v26.2, without losing compatibility with older versions.
• On macOS only, look for an external Python binary in /Applications/libreoffice-python/Resources/python and $HOME/libreoffice-python/Resources/python , because LibreOffice 25.2.4.2+ no longer allows running the embedded Python.
• [EE] Fixed: The :html formatter renders Heading Elements (
) with the default "Heading 1" through "Heading 6" styles in DOCX when no custom theme is specified. Previously, in some cases, headings were rendered with the Normal style.
• [EE] Watermarks improvements: Multiple watermarks can be defined (5 max), each with options for color, position, rotation, size, font, etc. Supports {#PAGE_NUMBER} and {#PAGE_TOTAL} variables for dynamic page numbering in watermarks. Automatic alignment based on the chosen anchor. Both the old Watermark (defaults: centered, 45Â°) and the new Watermarks fields can be used simultaneously. Up to 4 watermarks can be set at the same time. Example usage: { "convertTo" : { "formatName" : "pdf" , "formatOptions" : { // Legacy (backwards compatible): single centered watermark (string) "Watermark" : "Watermark Carbone.io" , // New: array of watermark objects "Watermarks" : [ { "text" : "Confidential Page {#PAGE_NUMBER} / {#PAGE_TOTAL}" , "anchor" :… (read more: https://carbone.io/changelog.html#v5-3-0)

v5.2.0

Mon, 09 Feb 2026 00:00:00 +0000
• Fix: the GET /templates/tags and GET /templates/categories endpoints now list only tags and categories from deployed templates (same logic as GET /templates ), sorted by name.
• Studio now automatically detects the base path when Carbone is served behind a reverse proxy under a subpath (for example, https:///sub/path )
• Fix: prevent a possible crash when a PDF form contains an invalid Carbone tag
• Fix: accept parsing of invalid PDF forms
• Array search expressions are now supported in all formatters. Example: :print(d.tables[searchExpression].id) . This feature is enabled only when the pre-release tag {o.preReleaseFeatureIn=5002000} is used. Supported searchExpression forms: Index lookup : [INTEGER] Selects the element at a numeric index. Example: {d[i].movies[i].id:print(..actors[10].name)} Current iterator lookup : [.i] Uses the current loop index. Example: {d.movies[i].id:print(..otherTable[.i].name)} [NEW] Equality lookup : [LEFT_OPERAND = RIGHT_OPERAND] Filters the target array and returns the first matching element. Rules: Only one equality expression is allowed per lookup. LEFT_OPERAND must be relative to the searched array items and must match types (e.g., integer cannot match string ). You can write id or .id (both are accepted). Example: in {d.movies[i].id:print(..actors[id=.actorId].name)} , id refers to a field on objects inside the actors array. Important: if you write something like d.sub.id , d is treated as a field on the searched array item, not an absolute root path. RIGHT_OPERAND can be either: a relative path from the main tag (starting with . ), or an absolute path starting with d. or c. . Example: {d.movies[i].id:print(..actors[id=.actorId].name)} where .actorId comes from the current movies item. If RIGHT_OPERAND does not start with d. , c. , or . , it is treated as a constant string. Limitation: constant strings cannot contain whitespace.
• [EE] HTML Formatter Improvements: New Beta Feature: The :html… (read more: https://carbone.io/changelog.html#v5-2-0)

v5.1.5

Wed, 21 Jan 2026 00:00:00 +0000
• Studio: Fix opening templates when all versions have deployedAt = 0 .

v5.1.4

Mon, 19 Jan 2026 00:00:00 +0000
• [EE] HTML Formatter Tables Improvements New Feature: Automatic Table Styling from Template Themes. For DOCX only, injected tables can now automatically inherit styling from existing Table Themes defined in the template. This feature is not supported for ODT templates. The priority order for theme application is: Explicitly passed theme name via the tabletheme argument (e.g., {d.content:html(tabletheme:GridTable2-Accent3)} ). Default theme set for the entire document. Instructions to set a default theme for the entire document: Open your DOCX template > Insert a table and navigate to the "Table Design" tab. > Right-click a theme and select "Set as Default" > "This Document Only". > Delete the temporary table and save the template. > This ensures all injected tables use the default theme unless overridden. Fallback theme: "TableGrid" (used if no other theme is specified). Fixed: DOCX templates now render tables at 100% of the document body width, preventing overflow. Fixed: ODT templates now render tables at 100% of the document body width consistently, resolving issues where complex tables were previously shrunk. Fixed: Column widths in DOCX and ODT templates are now consistent and evenly distributed. Improved: elements in DOCX and ODT templates now render as bold text, aligning with the HTML standard. Note: To enable HTML table rendering, use the pre-release tag: {o.preReleaseFeatureIn=5000009} .
• Accept Watermark with number value instead of string
• Disable tagged PDFs when the Chrome converter is used, to generate smaller and faster PDFs by default.
• Add the boolean option generate-tagged-pdf when converting from HTML to PDF using the Chrome converter ( converter: 'C' ). The default is false . < carbone-pdf-options generate-tagged-pdf = "true" />

v4.26.2

Mon, 19 Jan 2026 00:00:00 +0000
• Accept invalid input silently (as in v4.26.0 ) to avoid regressions.

v5.1.3

Sat, 17 Jan 2026 00:00:00 +0000
• Update dependencies
• â ï¸ Fix a critical security issue identified in a recent audit

v4.26.1

Sat, 17 Jan 2026 00:00:00 +0000
• Update dependencies
• â ï¸ Fix a critical security issue identified in a recent audit

v3.8.1

Sat, 17 Jan 2026 00:00:00 +0000
• Update dependencies + latest IANA database to manage correctly Daylight Saving Time
• â ï¸ Fix a critical security issue identified in a recent audit

v5.1.2

Wed, 14 Jan 2026 00:00:00 +0000
• In SVG templates, automatically replace ligatures to prevent Carbone tags from breaking. This addresses an issue where Affinity Designer and Adobe Illustrator tend to insert ligatures inside Carbone tags by default.
• Fix the download issue when calling GET /template/templateOrVersionId_sample.json (the second call always returned the template instead of the JSON sample).

v5.1.1

Wed, 07 Jan 2026 00:00:00 +0000
• Embedded Web Component Studio improvements Restored the previous studio.openTemplate(template, options) method from before 5.1.0 for easier migration . This function now displays a deprecation warning (superseded by openTemplateVersionId ). Removed the ambiguous studio.openTemplateWithVersioning API. Added studio.openTemplateId(id) to open a template by its 64-bit ID and automatically load all related versions. Added studio.openTemplateVersionId(versionId, type, defaultTemplateAttributes) to open a template by versionId. In embedded-versioning mode, this will automatically assign a unique 64-bit ID to the template.
• [On-Premise] Fix: In the template list, the Studio does not display the "Free tier" label or the call-to-action button to disable template auto-delete.

v5.1.0

Tue, 06 Jan 2026 00:00:00 +0000
• [EE] Fixed an issue with the :html formatter for ODT templates when a contained only one column.
• [EE] Fix XLSM processing
• Fix :formatR formatter: the country was not translated when Carbone was compiled as a binary package.
• Studio improvements Fix Online HTML editor encoding/decoding when editing HTML with accented characters
• Multiple Embedded Web Component Studio fixes and improvements: â ï¸ The Studio API has breaking changes. Please read this migration guide . Do not listen for navigation URL changes in embedded mode. Add the ability to customize the list of available Carbone API versions (it can be removed completely). Always use a valid data URI (instead of mixed base64/data URI) in API calls and template:updated events. Fix duplicated origin in some API calls when using a custom origin with studio.setConfig({ origin: "URL" }) . Add the ability to reset the Studio state with studio.reset() . Allow updating the Carbone theme and CSS at any time (even after init). Trigger the template:updated event from the Online HTML editor, and fix unnecessary events triggered with empty values. The template:updated event now contains 3 attributes: createdAt , dataURI , type . Clearly separate the two embedded Studio modes: embedded and embedded-versioning more info , and adapt the UI accordingly. Add the Studio mode off to start Studio silently and set state before making it visible. Trigger the options:updated event when currency, timezone, API version, or converter changes. The template:saved event returns a reference to the internal template object with all template attributes. Add the template:deployed event when embedded-versioning mode is used. Remove the Save button and the versioned file list in the default embedded mode. studio.setConfig() can be called multiple times with a sparse object (only provided attributes are updated; others stay unchanged). studio.setConfig() accepts new parameters to set Studio mode, theme, version,… (read more: https://carbone.io/changelog.html#v5-1-0)

v5.0.9

Fri, 19 Dec 2025 00:00:00 +0000
• Fix: :convCRLF now preserves whitespace in DOCX
• [On-Premise] Official multi-tenancy support: If req.tenantId is set in a global before middleware plugin, Carbone separates data by tenantId in the database. By default, without plugins, template files are stored on disk using the pattern tenantId-versionId . If storage plugins are used ( writeTemplate , readTemplate , deleteTemplate ), it is up to the developer to separate files per req.tenantId (different filename, bucket, etc.). All endpoints become tenant-sensitive (for example, GET /templates returns only the templates for that specific tenant). tenantId must be a non-negative 64-bit signed integer. Since JavaScript integers are limited to 53 bits, string values are accepted to fully use the full 64-bit range. ( '1' to '9223372036854775807' ). If this constraint is not respected, an error is returned. To enforce security, the bit-field securityLevel ( CARBONE_SECURITY_LEVEL ) parameter can be set to 0b00000010 (2) to enforce multi-tenancy and make tenantId mandatory. This disables Carboneâs default behavior when no tenantId is used, where templates are stored in the database with tenantId = 0 and template files are stored on disk without a tenant ID.
• [On-Premise] Return an error when a before middleware plugin is not a function.
• [EE] New Beta Feature: The :html formatter now supports rendering HTML tables in ODT/DOCX/PDF documents. You can inject all HTML markups supported by the formatter (e.g., images, lists, bold, paragraphs) within table cells. To enable this, use the pre-release tag: {o.preReleaseFeatureIn=5000009} . Without it, the table text is rendered into a single paragraph. Supported: Rows, columns, cells, colspan, and rowspan. Not supported:
, , and

tags. Default styling: Tables are rendered with a black solid border (custom styling is not available yet).

v5.0.8

Fri, 12 Dec 2025 00:00:00 +0000
• Studio: Fix incorrect base64 conversion when using the online HTML editors. It now correctly supports emojis, accented characters, etc. Fix invisible caret when pasting content with a white background. Update to the latest Squire editor to fix some other issues.
• Improved appendTemplate behavior: Better performance and no need to expose localhost for internal requests. Disallows a nested document from using appendTemplate , to avoid circular dependencies or complex dependency trees. Returns error messages from nested templates.

v5.0.7

Fri, 05 Dec 2025 00:00:00 +0000
• Fix leader election in a cluster of Carbone nodes for automatic deletion of expired templates

v5.0.6

Thu, 04 Dec 2025 00:00:00 +0000
• Automatically deletes expired templates A new parameter templateRetentionDaysAfterExpiry ( CARBONE_TEMPLATE_RETENTION_DAYS_AFTER_EXPIRY ) can be used to control the number of days after which expired templates are automatically deleted. If templateRetentionDaysAfterExpiry = 0 (default value), automatic deletion of expired templates is disabled. This operation is done asynchronously for all templates updated by the API with an expiration date ( POST /template or PUT /template ). Templates deleted with DELETE /template are still deleted synchronously for now, but this will become asynchronous in a future version for consistency. Only one peer, automatically elected (the one with the lowest peerId ), executes this asynchronous task daily at midnight.
• Studio: Fix: the refresh preview button was not shown if the data was modified while the preview was updating.

v5.0.5

Mon, 01 Dec 2025 00:00:00 +0000
• Fix crash in asynchronous jobs when reports download images/files, and return a timeout error just like in synchronous requests.

v5.0.4

Thu, 27 Nov 2025 00:00:00 +0000
• New formatter formatR(regionCode) to format a country/region code into a human-readable region name, in the report's language. It accepts ISO 3166-1 Alpha-3 (FRA, USA, ...), ISO 3166-1 Alpha-2 (FR, US, ...), and ISO 3166-1 Numeric codes (250, 840, ...).
• [On-Premise] Rename converterFactoryTimeout ( CARBONE_CONVERTER_FACTORY_TIMEOUT , CARBONE_EE_CONVERTERFACTORYTIMEOUT ) to maxGenerationTime ( CARBONE_MAX_GENERATION_TIME ). The old parameter can still be used for backward compatibility. If both are defined at the same time, the chosen value is not guaranteed. Use only one of them.
• Better management of document generation timeout/aborting. maxGenerationTime (formerly converterFactoryTimeout ) now covers the entire generation process, not only the document conversion step. For example, if downloading external images takes too long, the generation is cancelled. Previously, image downloads could continue even after the converterFactoryTimeout .
• Aborted report generations ( POST /render ) are now fully cancelled, including: pending image/file downloads, barcode and eCharts generation, queued conversion jobs, and the current conversion task. In some cases, Carbone may take an additional 5 seconds before cancelling the request and sending the response.
• [On-Premise] Improved startup message, showing a quick overview of all API limits and enabled security settings.
• [On-Premise] New parameters maxDownloadFileConcurrency ( CARBONE_MAX_DOWNLOAD_FILE_CONCURRENCY ) and maxDownloadImageConcurrency ( CARBONE_MAX_DOWNLOAD_IMAGE_CONCURRENCY ) to set the maximum number of concurrent requests for downloading images/files in a report. Default value is 15 (same as the cloud).
• [On-Premise] Fix for global server timeout: maxGenerationTime (formerly converterFactoryTimeout ) now accepts values above 60 seconds. Previously, the server closed the socket after 62 seconds.
• Improved timeout error messages in logs and API responses, now including more… (read more: https://carbone.io/changelog.html#v5-0-4)

v5.0.3

Fri, 14 Nov 2025 00:00:00 +0000
• Improved converter error handling to capture all errors in debug mode
• Fix: show correct metrics when files are injected into the template with appendFile in the Studio logs
• Added :appendTemplate(templateIdOrVersionId, position) formatter to append an external template to the generated document. It sends the data to another template, generates that template (as PDF), and appends the result to the current document. This can also be used inside loops to append multiple documents. It can optimize the generation of a PDF with 20,000 pages by concatenating many small, parallelized PDFs generation instead of generating one huge file. The following options are automatically forwarded to the appended template: lang , currency , enum , converter , translations , complement . Carbone returns an error if: The appended template fails during generation. The number of appended files exceeds maxDownloadFileCount . The combined size of appended files exceeds maxDownloadFileSizeTotal (MB). Carbone ignores the formatter and generates the main report normally if: The formatter receives null , undefined , or an empty string. The final report is not a PDF (only PDFs can be appended). Notes: Available only in Carbone On-Premise. No protection against infinite loops. Parameters: templateIdOrVersionId : The ID or version ID of the template to append. position : Insert position: "start" or "end" (default). Usage example: If the main template contains this loop: {d.myArray[i]:appendTemplate(110212)} {d.myArray[i+1]} The nested template will receive each object of the myArray as data under {d.} . Each object generates a new document that is appended to the main document.

v5.0.2

Fri, 07 Nov 2025 00:00:00 +0000
• The endpoints POST /render and POST /template accept templates in base64 format that are just below the maxTemplateSize limit (the base64 size is correctly converted to byte size).
• [On-Premise] Updates only the expireAt field if the message received on the WebSocket contains only versionId and expireAt .

v5.0.1

Tue, 04 Nov 2025 00:00:00 +0000
• [On-Premise] Fix: ignore iss in JWT tokens to accept tokens generated with Carbone v4.
• [On-Premise] Fix: in the systemd script, use KillMode=mixed to ensure that only the main process receives the SIGTERM signal. This allows Carbone to gracefully shut down its child processes (Chrome, LibreOffice, OnlyOffice). Following Linux recommendations, TimeoutSec=180 is set to let the OS send the final SIGKILL to all processes and child processes if Carbone does not exit automatically.

v5.0.0

Fri, 31 Oct 2025 00:00:00 +0000
• [Team] message Yes - here we are! ð This is the final v5 release of Carbone! ð The changelog below includes only the updates since the last public beta (v5.0.0-beta.21) . Weâll soon update our website with a full summary of the v5 release and migration tips ð. All AI-related features have been postponed to Carbone v5.2, and the first features will be publicly available for Christmas Day. ð Thank you all for your feedback!
• [Studio] Fixes and Improvements â¨ User Experience Improved the tag/category search dropdown on the template list page: no more duplicate names. Enhanced the search input placeholder to explain that users can search for or create a new tag or category. Made the template list more responsive by hiding less important columns on smaller screens. Show a progress icon while requests are running in the list. Increased the search field size to make copying/pasting versionId easier, and show the searched fields. Improved the style of switches and the home page button. Updated the welcome screen and added a message when no recent templates are available. Temporarily hide the AI Template Generator (coming back later). Improved pagination: now displays the total number of templates instead of page numbers. In the list, show templates created in the studio by default. Accept XLS exports. Added XHTML and XLS icons, and fallback to a generic icon for unknown formats. The preview now updates automatically when switching between embedded and default PDF viewers. [Cloud Edition only] Added a guided tour for new users. [Cloud Edition only] Managed paid/free feature visibility. ð§± Template Management Prevent users from deleting the deployed version in the template panel. (Deleting the deployed version would remove all versions) Added a button to view ephemeral templates in the list and remove their expiration. ð Bug Fixes Fix: translations are now correctly saved. Fix: "New" (upload) button now works in Firefox and Safari, with a warning… (read more: https://carbone.io/changelog.html#v5-0-0)

v4.26.0

Tue, 09 Sep 2025 00:00:00 +0000
• Fixed Carbone API authentication to return status code 401 instead of 500 when an API key has expired.
• Support for sending volatile templates using base64 with a data-URI prefix.