RELEASE NOTES FOR KOHA 25.05.08

24 Feb 2026

Koha is the first free and open source software library automation package (ILS). Development is sponsored by libraries of varying types and sizes, volunteers, and support companies from around the world. The website for the Koha project is:

• Koha Community

Koha 25.05.08 can be downloaded from:

• Download

Installation instructions can be found at:

• Koha Wiki
• OR in the INSTALL files that come in the tarball

Koha 25.05.08 is a bugfix/maintenance release.

It includes 11 enhancements, 9 bugfixes, 1 security bugfix.

System requirements

You can learn about the system components (like OS and database) needed for running Koha on the community wiki.

Security bugs

• 41591 XSS vulnerability via file upload function for invoices

Bugfixes

Architecture, internals, and plumbing

Other bugs fixed

• 40995 Patron search autocomplete adds extraneous spacing and punctuation when patron lacks surname
• 41076 Perltidy config needs to be refined to not cause changes with perltidy 20250105

  26.05.00

ERM

Other bugs fixed

• 41001 Dismissing the "Run now" modal breaks functionality

OPAC

Critical bugs fixed

• 41662 CSRF-vulnerability in opac-patron-consent.pl.

Other bugs fixed

• 41128 ratings.js creating "undefined" text for screen readers and print output

REST API

Other bugs fixed

• 40219 Welcome Email Sent on Failed Patron Registration via API

  This fixes patron registrations using the API - a welcome email notice was sent even if there were validation failures.

Staff interface

Critical bugs fixed

• 41593 Authenticated SQL Injection in staff side suggestions

Templates

Other bugs fixed

• 41361 Incorrect markup in category code confirmation modal

  This fixes the "Confirm expiration date" dialog box that is shown when changing an individual patron's category:

  • The "No" option now works.
  • It is now formatted using our standard Bootstrap 5 styles.

  Sponsored by Athens County Public Libraries

Enhancements

Accessibility

Enhancements

• 39706 Accessibility: Missing text alternative for the star rating.

Architecture, internals, and plumbing

Enhancements

• 36674 Lazy load api-client JS files

Authentication

Enhancements

• 37711 IdP auto-register should work on the staff interface

  The 'auto-register' feature can now be enabled in the staff interface.

  Previously, this functionality was only available in the OPAC and could not be used from the staff side.

  Sponsored by ByWater Solutions

Command-line Utilities

Enhancements

• 40722 Add logging to reset of elastic mappings files when rebuilding elastic

MARC Bibliographic data support

Enhancements

• 29733 MARC21: Link 7xx linking fields to marc21_linking_section.pl value builder in sample frameworks
• 40272 Add an alert for incorrect (MARC21) fixed-length control fields

  This proposal adds an alert when opening the MARC basic editor while a control field (005-008) has an incorrect length.

OPAC

Enhancements

• 18148 Make list of lists in OPAC sortable

  When reviewing a list of public or private lists in the OPAC, users can now sort the list of lists by "List name" or "Modification date" in ascending or descending order.

Patrons

Enhancements

• 30568 Make patron name fields more flexible
• 32581 Update dateexpiry on categorycode change

Plugin architecture

Enhancements

• 40827 Update plugin wrapper to include context for method="report"

  This enhancement updates the plugin wrapper to include the reports menu and have the breadcrumbs list reports instead of admin or tools when method="report"

REST API

Enhancements

• 39816 Allow embedding days_late in baskets

  This development adds the ability to embed information on late days on the basket objects retrieved from the API.

Documentation

The Koha manual is maintained in Sphinx. The home page for Koha documentation is

• Koha Documentation As of the date of these release notes, the Koha manual is available in the following languages:

• English (USA)

• French (74%)
• German (90%)
• Greek (94%)
• Hindi (63%)

The Git repository for the Koha manual can be found at

• Koha Git Repository

Translations

Complete or near-complete translations of the OPAC and staff interface are available in this release for the following languages:

Partial translations are available for various other languages.

The Koha team welcomes additional translations; please see

• Koha Translation Info

For information about translating Koha, and join the koha-translate list to volunteer:

• Koha Translate List

The most up-to-date translations can be found at:

• Koha Translation

Release Team

The release team for Koha 25.05.08 is

• Release Manager: Lucas Gass

• QA Manager: Martin Renvoize

• QA Team:

  • Marcel de Rooy
  • Martin Renvoize
  • Jonathan Druart
  • Laura Escamilla
  • Lucas Gass
  • Tomás Cohen Arazi
  • Lisette Scheer
  • Nick Clemens
  • Paul Derscheid
  • Emily Lamancusa
  • David Cook
  • Matt Blenkinsop
  • Andrew Fuerste-Henry
  • Brendan Lawlor
  • Pedro Amorim
  • Kyle M Hall
  • Aleisha Amohia
  • David Nind
  • Baptiste Wojtkowski
  • Jan Kissig
  • Katrin Fischer
  • Thomas Klausner
  • Julian Maurice
  • Owen Leonard

• Documentation Manager: David Nind

• Documentation Team:

  • Philip Orr
  • Aude Charillon
  • Caroline Cyr La Rose

• Translation Manager: Jonathan Druart

• Wiki curators:

  • George Williams
  • Thomas Dukleth

• Release Maintainers:

  • 25.11 -- Jacob O'Mara
  • 25.05 -- Laura Escamilla
  • 24.11 -- Fridolin Somers
  • 22.11 -- Wainui Witika-Park (Catalyst IT)

• Release Maintainer assistants:

  • 25.11 -- Chloé Zermatten
  • 24.11 -- Baptiste Wojtkowski
  • 22.11 -- Alex Buckley & Aleisha Amohia

Credits

We thank the following libraries, companies, and other institutions who are known to have sponsored new features in Koha 25.05.08

We thank the following individuals who contributed patches to Koha 25.05.08

We thank the following libraries, companies, and other institutions who contributed patches to Koha 25.05.08

We also especially thank the following individuals who tested patches for Koha

We regret any omissions. If a contributor has been inadvertently missed, please send a patch against these release notes to koha-devel@lists.koha-community.org.

Revision control notes

The Koha project uses Git for version control. The current development version of Koha can be retrieved by checking out the main branch of:

• Koha Git Repository

The branch for this version of Koha and future bugfixes in this release line is 25.05.x-security.

Bugs and feature requests

Bug reports and feature requests can be filed at the Koha bug tracker at:

• Koha Bugzilla

He rau ringa e oti ai. (Many hands finish the work)

Autogenerated release notes updated last on 24 Feb 2026 21:16:58.