Trilium

v0.106.1

[!IMPORTANT] This is a security release for the server and Docker images. If you run Trilium as a server, especially one reachable from the internet, update as soon as possible.

🔒 Security

1. Updated Node.js in the Docker images to 24.22.1 (22.23.4 for the legacy image), taking in the Node.js security releases of 21 October 2026:
   1. Brotli decoder out-of-bounds write (CVE-2026-111497). Trilium decompresses Brotli-encoded request bodies before authentication, so on earlier versions any client that could reach the server could send a malicious request. Outbound requests (link previews, image downloads, web search) were also affected through the responses they receive.
   2. Revoked eMudhra/emSign certificate authorities. The certificate store bundled with Node.js trusted certificate authorities whose keys were compromised. This allowed a man-in-the-middle with the right network access to impersonate HTTPS servers that Trilium connects to (sync with another instance, link previews, LLM providers).
   3. Other fixes to TLS, HTTP and DNS handling from the same Node.js release.

[!TIP] If you enjoyed this release, consider showing a token of appreciation by:

• Pressing the “Star” button on GitHub (top-right).
• Considering a one-time or recurrent donation to the lead developer via GitHub Sponsors or PayPal.

[!IMPORTANT] The extension keeps working with older Trilium versions. A few features also need Trilium v0.107.0 or newer (not yet released, however a nightly can be used if desired), marked with 🆕 Trilium v0.107 below. Saving a PDF is the only one that refuses to run on an older server; it asks you to update Trilium instead.

For Chrome instructions: https://docs.triliumnotes.org/user-guide/setup/web-clipper#for-chrome The Firefox the instructions are out of date, there the process is just to click on the file and it will immediately ask whether to install it.

✨ What's new

👀 See what you save before saving it

The popup is redesigned around a preview card: the note's title (editable), the website, and a preview of the content.

• Modes, offered only when they apply: Selection when text is selected, Page when the page can be read, PDF on a PDF tab, and Bookmark always. The card opens on the most specific one.
• Article or whole page. Page mode has an Article / Whole page switch. Whole page keeps galleries, dashboards and card grids that article extraction would trim away (#9611). The keyboard shortcut and the context menu save the article, or the whole page when there is no article, instead of failing.
• A note about the page in every mode (#5350). A text box at the top of the card holds your note. It is placed above the clipped content as a note admonition. Ctrl+Enter saves from any field.
• Bookmark replaces "Link with a note". The title is a field of its own instead of being guessed from your note's first sentence, so titles no longer break on "e.g." or "v1.2".
• Code in the preview is styled like the share theme and set in JetBrains Mono (#2092). Embedded YouTube videos show as a chip instead of a player that cannot run.
• The outcome stays in the popup. "Saving to Trilium…", then Open note (and Close saved tabs after saving tabs), or the reason it failed. This also works where no notification can appear on the page: browser pages, extension stores and Firefox's PDF viewer.
• Pages the extension cannot read say so and offer what still works, instead of failing silently.

📄 Better page extraction

• Pages are now read with Defuddle instead of Readability. It keeps the lead image that news sites put outside the article body and drops duplicate responsive copies of the same picture (#2621).
• The extractor loads only when a page is actually read, not on every page you visit. The script that runs on each page is now 11 kB.
• Saving works in tabs that were open before the extension was installed or updated.

📸 Full-page screenshots

A new Full page capture, available from the popup, the context menu and a bindable shortcut.

• Fixed headers, cookie banners and chat buttons appear once, not in every slice. Sticky elements stay in place, and scrollbars are left out.
• Long pages are saved as several images of at most 8,192 px each, up to 100 captures. If a page is cut off, the clipper says so.
• In Firefox, the page is captured without scrolling through it.
• Screenshots are shrunk by width only, so a tall page is no longer squeezed into a thin strip. 🆕 Trilium v0.107
• The capture buttons are renamed after what they capture: Area, Visible, Full page and All tabs.

📑 Save PDFs (#1209)

On a tab showing a PDF, the popup offers a PDF mode. The PDF is downloaded with your cookies (so a PDF behind a login works) and saved as a file note, which Trilium opens in its PDF viewer and indexes for sea

v0.106.0

[!NOTE] If you enjoyed this release, consider showing a token of appreciation by:

• Pressing the “Star” button on GitHub (top-right).
• Considering a one-time or recurrent donation to the lead developer via GitHub Sponsors or PayPal.

[!TIP] For Linux users: Trilium is now available on Flathub!

[!IMPORTANT] For Docker users: If the Docker container appears unhealthy after the upgrade, recreate the container if you are using an auto-updater and check you have no healthcheck override in the Docker compose.

💡 Key highlights

📋 Kanban board overhaul by @adoriandoran

The board has been rebuilt to handle real projects. Give each column an icon, a color or a card limit, collapse the columns you're not working on, and archive them once they're done. New notes that don't belong to a column yet land in an optional Inbox column. Cards can be created from a template (e.g. a Bug template for a bug tracker), and Board properties controls which attributes the cards show and in what order. You can also switch the attribute the board is grouped by at any time, and each grouping keeps its own columns.

As a board grows, sort columns automatically by title, date or any attribute, and narrow the board with the filter box in the header, which accepts the full search syntax. Select several cards with Ctrl/Shift+click to move, edit or delete them together. Use Copy reference to link to a card or column from any note. The whole board works from the keyboard (Alt+F1 lists the shortcuts) and by touch on mobile, and a column with thousands of cards now stays smooth.

This concludes the phase two of the board collection, more features to come.

🔎 Significant improvements to search

1. Matching by @perfectra1n
   1. Punctuation-aware exact matching: =sync finds (sync), sync,, "sync" (#10616)
   2. Fuzzy tolerance now scales with term length (0/1/2 edits); a substring is no longer treated as a typo
   3. ~* matches fragments again; fuzzy fallback extended to note body content
   4. Link previews and reference-link target titles are indexed and searchable
   5. Diacritics normalized for highlighting too, not just matching
   6. Ranking: results ordered by match quality (exact phrase > proximity > word > prefix > substring > fuzzy), bounded so content never outranks a title match.
2. Results view by @perfectra1n
   1. Google-style snippet cards with breadcrumb and matched-attribute badges (#5667, #6225)
   2. Always-visible result count + synced 10/20/50/100 page-size option
   3. Fuzzy matches highlighted distinctly (dotted orange) from exact ones; %= regex terms highlight correctly (#5332)
3. Jump to match by @perfectra1n: clicking a result opens the note at the first match with the find bar pre-filled; collapsed sections expand automatically (#3098, #10616). Jump to Note stays a title-only navigator (no misleading content snippet).
4. Improved the speed of the jump-to-note significantly by optimizing the search itself, but also by honoring the option to disable fuzzy search in autocompletion (which was disabled by default but not used at all).

🗺️ Geomap now features a built-in location search, current position indicator and shapes

v0.105.0

[!IMPORTANT] If you enjoyed this release, consider showing a token of appreciation by:

• Pressing the “Star” button on GitHub (top-right).
• Considering a one-time or recurrent donation to the lead developer via GitHub Sponsors or PayPal.

The release that makes Trilium lighter, more visual and easier to organise: images shrink themselves, attributes get a home of their own, and your backups can finally be restored.

[!WARNING] Before you upgrade. This release contains changes that can break an existing setup.

1. MCP now requires authentication and can optionally be accessed over the network. → Reconfigure your existing MCP clients with credentials.
2. General HTML support in text notes is now disabled by default. This makes copy-paste from websites behave well, without grabbing unwanted tags such as input boxes. → Re-enable via Options → Text notes → Preserve unsupported HTML tags.
3. **<div>**s in text notes are now unwrapped instead of being preserved as-is, regardless of settings. This prevents broken behaviour when entering new paragraphs, and bugs such as being unable to exit a code block.

✨ Highlights

Know what's in your database — and take it back

Two new tools answer the same question from opposite ends: what is actually taking up all that room?

• Space Usage draws it as a treemap — notes, revisions and attachments sized by how much space they take — so the thing quietly eating your disk is visible at a glance instead of guessed at. The cleanup tool then acts on what you find: erase deleted notes, trim old revisions, drop unused attachments and compact the database.
• Compress images goes after the usual culprit, resizing oversized pictures and re-saving them smaller — from a note, the tree, the attachments list, the image viewer or the cleanup run itself. It tells you what it found before it starts and what it saved when it finishes.

Automatic compression on upload, paste and import now keeps PNGs as PNGs, leaves already-compressed pictures alone, and runs off the thread serving the app, so a large import no longer freezes Trilium. (@adoriandoran)

Attributes finally have a home

A dedicated Attributes sidebar tab shows owned, inherited and promoted attributes in one clear list, and lets you edit them in place. System attributes are marked with an icon in the sidebar and