.mailmap

@@ -33,3 +33,5 @@ Philip Molares <philip.molares@udo.edu>      Philip Molares <git@molar.es>
 Yannick Bungers <git@innay.de>               Yannick Bungers <github@innay.de>
 
 Renovate Bot <bot@renovateapp.com>           renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
+
+Tobias Dillig <tobias.dillig@frachtwerk.de>  Tobi <tldev-de@users.noreply.github.com>

AUTHORS

@@ -9,6 +9,7 @@ Alex Garcia <alexsebastian.garcia@gmail.com>
 Alexander Hesse <alexander.hesse@sandstorm-media.de>
 Alexander Wellbrock <a.wellbrock@mailbox.org>
 Amolith <amolith@nixnet.xyz>
+Andre Julius <noromoron@gmail.com>
 Andreas Boesen <618847+Happy86@users.noreply.github.com>
 Antoine Aflalo <antoine@warrantymaster.com>
 aptalca <aptalca@users.noreply.github.com>
@@ -136,6 +137,7 @@ Nicolas Dietrich <nidi@mailbox.org>
 Nils VAN ZUIJLEN <nils.van-zuijlen@mailo.com>
 Norihito Nakae <norihito.n@gmail.com>
 NV <nvsofts@gmail.com>
+odpay <odpay@odpay.net>
 Oliver Herrmann <oliver@monoxane.com>
 Ondřej Slabý <kron258@gmail.com>
 oupala <oupala@users.noreply.github.com>
@@ -166,6 +168,7 @@ Salim B <salim@posteo.de>
 Sandro Jäckel <sandro.jaeckel@gmail.com>
 schneems <richard.schneeman@gmail.com>
 Sergio Valverde <svg153@users.noreply.github.com>
+Shivam Shukla <lucifer84670@gmail.com>
 Simeon Keske <git@n0emis.eu>
 Simon C <simonc@linux.com>
 Simon Fish <si@mon.fish>
@@ -186,6 +189,7 @@ Thor77 <thor77@thor77.org>
 Tilman Vatteroth <git@tilmanvatteroth.de>
 tkqubo <tk.qubo@gmail.com>
 tkykm <tkykm@users.noreply.github.com>
+Tobias Dillig <tobias.dillig@frachtwerk.de>
 Tobias Kremer <tobias.kremer@gmail.com>
 Tom Wyckhuys <tomwyckhuys@gmail.com>
 Toma Tasovac <ttasovac@humanistika.org>
@@ -195,6 +199,7 @@ VaiTon <eyadlorenzo@gmail.com>
 vazontang <31801725+vazontang@users.noreply.github.com>
 Victor Berger <victor.berger@m4x.org>
 Vojtěch Káně <vojtech.kane@gmail.com>
+Will Hawkins <whh8b@obs.cr>
 WilliButz <wbutz@cyberfnord.de>
 Wonder Chang <iwonder.tw@gmail.com>
 Xaver Maierhofer <xaver.maierhofer@xwissen.info>

docs/content/dev/openapi.yml

@@ -3,7 +3,7 @@ openapi: 3.0.1
 info:
   title: HedgeDoc
   description: HedgeDoc is an open source collaborative note editor. Several tasks of HedgeDoc can be automated through this API.
-  version: 1.11.0
+  version: 1.11.1
   contact:
     name: HedgeDoc on GitHub
     url: https://github.com/hedgedoc/hedgedoc

docs/content/setup/docker.md

@@ -29,7 +29,7 @@ services:
     restart: always
   app:
     # Make sure to use the latest release from https://hedgedoc.org/latest-release
-    image: quay.io/hedgedoc/hedgedoc:1.11.0
+    image: quay.io/hedgedoc/hedgedoc:1.11.1
     environment:
       - CMD_DB_URL=postgres://hedgedoc:password@database:5432/hedgedoc
       - CMD_DOMAIN=localhost

docs/content/setup/manual-setup.md

@@ -19,7 +19,7 @@
 
 1. Check if you meet the [requirements at the top of this document](#manual-installation).
 2. Download the [latest release](https://hedgedoc.org/latest-release/) and extract it.  
-   <small>Alternatively, you can use Git to clone the repository and checkout a release, e.g. with `git clone -b 1.11.0 https://github.com/hedgedoc/hedgedoc.git`.</small>
+   <small>Alternatively, you can use Git to clone the repository and checkout a release, e.g. with `git clone -b 1.11.1 https://github.com/hedgedoc/hedgedoc.git`.</small>
 3. Enter the directory and execute `bin/setup`, which will install the dependencies and create example configs.
 4. Configure HedgeDoc: To get started, you can use this minimal `config.json`:
    ```json
@@ -61,7 +61,7 @@ If you want to upgrade HedgeDoc from an older version, follow these steps:
    and the latest release.
 2. Fully stop your old HedgeDoc server.
 3. [Download](https://hedgedoc.org/latest-release/) the new release and extract it over the old directory.  
-   <small>If you use Git, you can check out the new tag with e.g. `git fetch origin && git checkout 1.11.0`</small>
+   <small>If you use Git, you can check out the new tag with e.g. `git fetch origin && git checkout 1.11.1`</small>
 5. Run `bin/setup`. This will take care of installing dependencies. It is safe to run on an existing installation.
 6. *:octicons-light-bulb-16: If you used the release tarball for 1.7.0 or newer, this step can be skipped.*  
    Build the frontend bundle by running `yarn install --immutable` and `yarn build`. The extra `yarn install --immutable` is necessary as `bin/setup` does not install the       build dependencies.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "HedgeDoc",
-  "version": "1.11.0",
+  "version": "1.11.1",
   "description": "The best platform to write and share markdown.",
   "main": "app.js",
   "license": "AGPL-3.0",

public/docs/release-notes.md

@@ -1,24 +1,29 @@
 # Release Notes
 
-## <i class="fa fa-tag"></i> 1.x.x <i class="fa fa-calendar-o"></i> UNRELEASED
+## <i class="fa fa-tag"></i> 1.11.1 <i class="fa fa-calendar-o"></i> 2026-07-24
 
 ### Enhancements
 
-- Added external link whitelist setting (`externalLinkWhitelist` in config.json or `CMD_EXTERNAL_LINK_WHITELIST`) to skip warning page for certain domains
 - Added external link warning setting (`externalLinkWarning` in config.json or `CMD_EXTERNAL_LINK_WARNING`) to disable the external link warning page entirely
+- Added external link whitelist setting (`externalLinkWhitelist` in config.json or `CMD_EXTERNAL_LINK_WHITELIST`) to skip warning page for certain domains
+- Added support for webp file uploads (for all backends except `imgur`, since that does not support these)
+
+### Bugfixes
+
 - Fixed external link warning for subpath instances
-- Enabled `.webp` for file uploads (for all backends but `imgur`, since it does not support it)
-- Removed unnecessary entries in the XSS whitelist
+- Restore native browser zoom-in keyboard shortcuts in the editor
+- Nested list items render properly again in the preview pane for slides
 
 ### Refactoring / Clean-up
 
 - Removed the old Temp database object and related API endpoints. This was used by a very old way of migrating the history and is no longer needed.
 - Removed unused `allowOrigin` (environment variable `CMD_ALLOW_ORIGIN`) config option.
+- Removed unnecessary/duplicate entries in the XSS filtering whitelist
 
-### Bugfixes
+### Contributors
 
-- Restore native browser zoom-in keyboard shortcuts in the editor ([#6244](https://github.com/hedgedoc/hedgedoc/issues/6244))
-- Nested list items render properly again in the preview pane for slides ([#6080](https://github.com/hedgedoc/hedgedoc/issues/6080))
+- [Shivam Shukla](https://github.com/Shivam-Shukla0)
+- [Tobi](https://github.com/tldev-de)
 
 ## <i class="fa fa-tag"></i> 1.11.0 <i class="fa fa-calendar-o"></i> 2026-06-18
 

yarn.lock

@@ -10374,9 +10374,9 @@ __metadata:
   linkType: hard
 
 "media-typer@npm:^1.1.0":
-  version: 1.1.0
-  resolution: "media-typer@npm:1.1.0"
-  checksum: 10/a58dd60804df73c672942a7253ccc06815612326dc1c0827984b1a21704466d7cde351394f47649e56cf7415e6ee2e26e000e81b51b3eebb5a93540e8bf93cbd
+  version: 1.1.1
+  resolution: "media-typer@npm:1.1.1"
+  checksum: 10/ceef972e43912621b846f816e8937c200dcd83d0bdd4fdd19f28be62a9334f4e6605d0c952fe804bfab7f63a07d14c0d1bea1d9357c35ad6d3b04b184f09e397
   languageName: node
   linkType: hard