New Update Notepad++ (Updates Thread)

Office, email and business apps
44 Replies 14,427 Views
I have not paid a lot of attention to my notepad++, I currently have 8.7.0.0 and it says there's available version 8.7.5 -- wondering do I have to pay $ to get 8.8.1?? :unsure:

EDIT the notepad++ website has 8.8.1 available so I installed it ok, just "odd" the update function in my 8.7 did not see it... :unsure:
This is a normal behavior from Notepad++, the auto-update is usually triggered 1–2 weeks after initial release, just in case there are major regressions that weren’t found during the internal testing and the release-candidate timeframe. After a sufficient time period, the developer then decides to trigger the auto-update when he has time to do the triggering.

Auto-Trigger​

If you used installation package when you originally installed, the Auto Update feature is active by default. Every 15 days auto-updater (WinGUp) will be launched for checking, and you will be notified if a new version is available. You are presented with the option of installing that newer version.

Upgrade On-Demand​

Using the ? > Update Notepad++ menu command. This will check whether there is a new version and whether the safety delay is over. If so, you are presented with the opportunity to download and install the newer version.
 
Notepad++ v8.8.2 regression-fixes, bug-fixes & new features:
  1. Fix regression of folding state not being remembered through sessions. (Fix #16597, #16670)
  2. Fix “Go To Settings” links in Style Configurator regression (from v8.8). (Fix #16592)
  3. Fix small regression of tab background (hovered) highlighting issue after drag&drop. (Fix #16559)
  4. Fix an unresponsive (hang) issue due to hide lines. (Fix #16316)
  5. Fix installer security issue by using the absolute path instead of an unspecified path (CVE-2025-49144). (commit, fix report on GitHub, fix #16744)
  6. Installer component “WinGUp”: update cURL to 8.13.0 for fixing cURL’s security issue CVE-2025-0167. (Fix #16531, #16515)
  7. Update to scintilla 5.5.7 & Lexilla 5.4.5. (Implement #16649)
  8. Add feature to update Notepad++ on exit. (Fix #16601, #13749, #10317, #8495, #8457, #3755)
  9. Add “/relaunchNppAfterSilentInstall” command argument for installer. (Fix #issue)
  10. Add feature to set read-only attribute on file so user can toggle (set/remove) read-only attribute of a file. (Fix #326, #4594, #6216, #7841, #12520, #15571, #16603)
  11. Add new plugin API: NPPM_GETTOOLBARICONSETMODE & NPPN_TOOLBARICONSETCHANGED to get toolbar icon set choice. (Fix #16547, #16646)
  12. Deprecate 3 APIs: Deprecate NPPM_GETOPENFILENAMES, NPPM_GETOPENFILENAMESPRIMARY & NPPM_GETOPENFILENAMESSECOND. (Fix #15997)
  13. Add new feature of using first line of untitled document for its tab name. (Fix #3994, #16584)
  14. Enhance NPPM_DARKMODESUBCLASSANDTHEME: Enable darkmode progress bar for plugins. (Fix #16675)
  15. Various dark mode enhancements. (Fix #16668, #16674, #16560, #16537, #issue)
  16. Fix right click on caption bar unhidding main menu. (Fix #16652)
  17. Fix rename tab error message when tab name is unchanged. (Fix #16661)
  18. Fix Python FunctionList absorbing next function issue if space after colon. (Fix #16636)
  19. Remove .log from errorlist lexer’s default extensions. (Fix #16627)
  20. Make raw string syntax highlighting work for Golang. (Fix #16609)
  21. Fix Notepad++ tray icon lost after Windows Taskbar crashing & being relaunched. (Fix #16588)
  22. Fix changing toolbar icon set not updating to matching panel icon set. (Fix #16595)
  23. Fix Windows dialog file list not react with keystroke (character match). (Fix #2239)
  24. Add “*” mark on modified file entries in “Windows” dropdown menu. (Fix #16542)
 
Notepad++ v8.8.3 security-fixes & new enhancement:
  1. Use self-signed certificate to sign new release binaries. (Implement commit)
  2. Fix uninstaller security issue (CVE-2025-49144). (Fix #16787)
  3. Enhance security for DLL loading. (Fix #13964)
Notepad++ v8.8.3 regression-fixes, bug-fixes & new features:
  1. Fix regression of folding state not being remembered through sessions. (Fix #16597, #16670)
  2. Fix “Go To Settings” links in Style Configurator regression (from v8.8). (Fix #16592)
  3. Fix small regression of tab background (hovered) highlighting issue after drag&drop. (Fix #16559)
  4. Fix an unresponsive (hang) issue due to hide lines. (Fix #16316)
  5. Fix installer security issue by using the absolute path instead of an unspecified path (CVE-2025-49144). (commit, fix report on GitHub, fix #16744)
  6. Installer component “WinGUp”: update cURL to 8.13.0 for fixing cURL’s security issue CVE-2025-0167. (Fix #16531, #16515)
  7. Update to scintilla 5.5.7 & Lexilla 5.4.5. (Implement #16649)
  8. Add feature to update Notepad++ on exit. (Fix #16601, #13749, #10317, #8495, #8457, #3755)
  9. Add “/relaunchNppAfterSilentInstall” command argument for installer. (Fix #issue)
  10. Add feature to set read-only attribute on file so user can toggle (set/remove) read-only attribute of a file. (Fix #326, #4594, #6216, #7841, #12520, #15571, #16603)
  11. Add new plugin API: NPPM_GETTOOLBARICONSETMODE & NPPN_TOOLBARICONSETCHANGED to get toolbar icon set choice. (Fix #16547, #16646)
  12. Deprecate 3 APIs: Deprecate NPPM_GETOPENFILENAMES, NPPM_GETOPENFILENAMESPRIMARY & NPPM_GETOPENFILENAMESSECOND. (Fix #15997)
  13. Add new feature of using first line of untitled document for its tab name. (Fix #3994, #16584)
  14. Enhance NPPM_DARKMODESUBCLASSANDTHEME: Enable darkmode progress bar for plugins. (Fix #16675)
  15. Various dark mode enhancements. (Fix #16668, #16674, #16560, #16537, #issue)
  16. Fix right click on caption bar unhidding main menu. (Fix #16652)
  17. Fix rename tab error message when tab name is unchanged. (Fix #16661)
  18. Fix Python FunctionList absorbing next function issue if space after colon. (Fix #16636)
  19. Remove .log from errorlist lexer’s default extensions. (Fix #16627)
  20. Make raw string syntax highlighting work for Golang. (Fix #16609)
  21. Fix Notepad++ tray icon lost after Windows Taskbar crashing & being relaunched. (Fix #16588)
  22. Fix changing toolbar icon set not updating to matching panel icon set. (Fix #16595)
  23. Fix Windows dialog file list not react with keystroke (character match). (Fix #2239)
  24. Add “*” mark on modified file entries in “Windows” dropdown menu. (Fix #16542)
 
Notepad++ v8.8.5 / v8.8.4
Notepad++ v8.8.5 regression-fix:
  1. Fix “Edit with Notepad++” context menu not being installed correctly regression. (Fix #16913)


Notepad++ v8.8.4 regression-fixes, bug-fixes & new features
  1. Fix -notabbar & asNotepad.xml stop hiding tabbar regression (from v8.7.9). (Fix #16794)
  2. Fix “Edit with Notepad++” not removed by uninstaller regression (from v8.8.3). (Fix #16896)
  3. Fix possible heap memory leak. (implement #16883)
  4. Increase search input length from 2046 to 16383. (Fix #1088, #16749)
  5. Add warning tip for the max length on search input (Find/Replace). (Fix #16749)
  6. Fix JavaScript listed twice in Language & Indent settings of Preferences issue. (Fix #4521, #16861, #16884)
  7. Fix external lexers showing several time in Indent settings issue. (Fix #16462)
  8. Add button to insert variables in the run dialog. (implement #16820)
  9. Enhance “Go to settings”: guide users to the related setting explicitly. (Fix #16846)
  10. Add a clear button for filter field in Shortcut Mapper. (Fix #15742)
  11. Make NFO font overridable by adding font name in Lexer “nfo” of stylers.xml. (Fix #16839)
 
Notepad++ 8.8.6
Notepad++ v8.8.6 new features & bug-fixes:
  1. Add capacity of pasting multiline into Find/Replace fields. (Fix #16952)
  2. Improve UAC in Notepad++ for seamless elevated operations. (Fix #886, #8655, #9561, #10302, #14990, #15008, #15137, #15323)
  3. Fix Pin Tab operation being too long with many opened documents. (Fix #16117)
  4. Add 2 new full-readonly modes via command line argument (-fullReadOnly & -fullReadOnlySavingForbidden). (Fix #15993, #16532)
  5. Add apply/remove read-only for all documents commands. (Fix #15993, #16532)
  6. Column Editor enhancement: GUI input fields now support radix to match the output format. (Fix #16912)
  7. Add Window dialog “File Modified Time” sorting capacity. (Fix #16953)
  8. Fix NPPN_CMDLINEPLUGINMSG not working issue & define the pluginMessage usage protocol. (Fix #17024, #17022)
  9. Fix pasting from column mode to multi-selection issue due to different EOL. (Fix #16889)
  10. Add NPPM_GETNPPSETTINGSDIRPATH message to get Notepad++ settings directory path. (Fix #16944)
  11. Enhance SQL function list parser. (Fix #16605)
  12. Fix C# function list not working with comments. (Fix issue)
  13. Add function list ability for CSS. (Implement #17006)
  14. Allow user to customize max selected chars to auto-fill “Find what” field. (Fix #16955)
  15. Restore undo/redo behaviour in Find/Replace fields after Copy/Paste or Ctrl-F. (Fix issue 1, issue 2)
  16. Fix text corruption issue caused by selection within multibyte characters. (Fix #16879)
  17. Fix DOCTYPE styling in xml and html. (Fix #17012)
  18. Fix double clicking on edit zone’s border creates a new tab issue. (Fix issue)
  19. Update cURL in WinGUp (Notepad++ updater) for fixing CVE-2025-5399. (Fix security issue)

If you find any regression or critical bug, please report here:
Notepad++ v8.8.6 Release

More information about Clarifying the CVE-2025-56383 Non-Issue
 
Notepad++ 8.8.7
With this release v8.8.7 Notepad++ is now signed by a legitimate certificate issued by GlobalSign. This is a major security milestone, and it should permanently resolve all concers regarding the authencity and integrity of Notepad++ releases.

It’s been a challenging few months, struggling with administrative hurdles and dealing with certificate authorities to make this happen. Essentially, for an open-source project to obtain a certificate under its name, it must be recongnized as a business entity. In our case, that meant creating and registering a nonprofit organization (NPO) with the project name in the maintainer’s country of residence. This process fullfilled the certificate company’s requirements.


Notepad++ v8.8.7 new enhancement & bug-fixes:
  1. Sign Notepad++ binaries with GlobalSign certificat to fix false-positive alerts. (Fix #16971, #16809, #16812, #16770, #16773, #16779, #16785, #17062)
  2. Fix Monitoring in one view affects selections and position in second view. (Fix #17046)
  3. Fix Shortcut Mapper memory leak issue. (Fix #17069)
  4. Enhance Perl FunctionList for class. (Fix #17043)
  5. Fix pressing Alt or Tab causes controls redrawing problem in UDL dialog. (Fix #17061)
 
Notepad++ v8.8.8

Notepad++ v8.8.8 new features, regression fixes & bug-fixes:
  1. Add Notepad++ MSI (x64) for enterprise IT deployment. (Fix #2326, #2368, #16767)
  2. Security enhancement: prevent Notepad++ Updater from being hijacked. (Implement #17116, commit)
  3. Fix multi-selection crash (regression) when smart highlighting is enabled. (Fix #17086, #17126)
  4. Add tab label length limitation option to have reasonable tab width. (Fix #3332, #5563, #12563, #16417)
  5. Improve the performance of saving session on exit. (Implement #17079)
  6. Fix Distraction free mode disabling tab bar hiding regression. (Fix #17102, #16831)
  7. Add text scale support. (Fix #16427, #17167, #17129)
  8. Fix switching among some encoding not working issue. (Fix #17033)
  9. Fix Notepad++ not handle system default code page UTF-8 well. (Fix #17057)
  10. Improve Rust handling: keywords and autoCompletion. (Fix #16904)
 
Notepad++ 8.8.9
  1. Vulnerability-fix: verify certificate & signature on downloaded update installer. (Implement Notepad++ commit, WinGUp commit)
  2. Fix corrupted file loading on Windows system using the full UTF-8 code page. (Fix #17234)
  3. Fix crashing when hashing SHA-256 for large files. (Fix #17243)
  4. Fix “Select & Find Next” command not working regression. (Fix #17200)
  5. MSI improvement: Add NOUPDATER option & suppress REBOOT. (Fix #ref1, #ref2)
  6. Fix Perl Function List causes Notepad++ to freeze on tab switch regression. (Fix #17152)
  7. Fix context menu truncated regression on localization change. (Fix #17249)
  8. Add ability to update users’ langs.xml & stylers.xml from model XML files. (Fix #17128)
  9. Update to Scintilla 5.5.8 & Lexilla 5.4.6. (Update #17191)
  10. Add feature to sort lines in a document by length. (Fix #15615, #17186)
  11. Undo & redo enhancement: restore vertical scroll position after undo & redo. (Fix #17194)
  12. Fix mouse wheel horizontal scrolling amount not respecting Windows setting. (Fix #9480)
  13. Fix document map regression with keyboard input. (Fix #17224)
  14. Fix wrong system font scaling on Windows 7. (Fix #17066)
  15. Update to nlohman json 3.11.3. (Update #15041)
 
Notepad++ v8.9
  1. Remove Notepad++ self-singed certificate signature, use only the certificate issued by GlobalSign. (Fix #16806)
  2. Security enhancement: Log security errors automatically in “%LOCALAPPDATA%\Notepad++\log\securityError.log” (Implement #17305, #WinGUp)
  3. Fix jarring color regression in dark mode (introduced in v8.8.9). (Fix #17289)
  4. Fix “/noUpdater” installer option not working if updater was previously installed. (Fix #17287)
  5. Fix column mode edit undo regression (introduced in v8.8.9). (Fix #17295, #17272, #16784)
  6. Fix issue where an empty file opened without encoding under a UTF-8 system codepage. (Fix #17258)
  7. Add makefile function list parser. (Fix #17293)
  8. Improve performance & add missing file ext. from langs.model.xml to langs.xml.(Fix #17290, implement #17314, implement #17306)
  9. Improve “Open containing folder in Explorer” command to avoid creating Explorer process. (Fix #17060)
  10. Allow updating mouse scroll amount according to OS settings changes. (Implement #17300)
 
Notepad++ v8.9.1
  1. Fix EOL duplication regression when playing back old recorded macros. (Fix issue)
  2. Remedy search failure for pasted text containing trailing invisible EOL character. (Fix #17124, #17187)
  3. Fix customized context menu regression where separator (id=“0”) escapes FolderName submenu. (Fix #17342)
  4. Fix issue where a single undo reverted multiple changes after macro execution. (Fix #9426)
  5. Fix visual glitch when dragging dockable dialogs on a 2nd monitor. (Fix #16805, #16155, #16077)
  6. Fix inconsistent automatic search mode switching (RegEx to Extended) in Find dialog. (Fix #17227)
  7. Fix incorrect URL parsing caused by Unicode special spaces. (Fix #16856)
  8. Update to Boost 1.90.0. (Implement #17326)
  9. Improve update themes feature: fix JavaScript.js edge case. (Fix issue)
  10. Update javascript.js to better match javascript (embedded) in all themes. (Fix issue, report)
  11. Function List: enhance for Perl & PHP; add for Nim. (Fix #17382, #17327, implement #17377)
  12. Fix comments and highlighting in TCL. (Fix #17315)
  13. Update perl syntax highliging keywords and autocomplete for 5.42. (Fix #17332)
  14. Improvement: display Find dialog status message with invisible characters warning. (Fix #17345)
 
Notepad++ v8.9.2 Release
  1. Security enhancement: Make updater check interity & authenticity of server-returned XML (XMLDsig). (Implement #17441 )
  2. Security enhancement: Fix untrusted search path vulnerability by launching explorer.exe (Fix CVE-2026-25926 )
  3. Security enhancement: Make auto-updater (WinGUp) even more secured. (Remove unsecured options , remove dll dependency , launch only signed program for plugin management )
  4. Fix a plugin installation crash due to incorrect processing catch. (Fix #issue )
  5. Add redact selection feature - Default: █ , Modifier (Shift + Click): ●. (Fix #17363 )
  6. Fix context menu shortcut localization not aligning to the right regression. (Fix #17467 )
 
“the XML returned by the update server is now signed (XMLDSig), and the certificate & signature verification will be enforced starting with upcoming v8.9.2, expected in about one month.“
As promised in the announcement Notepad++ Hijacked by State-Sponsored Hackers, this release strengthens the weakest links in Notepad++ update process.

This “double lock” design makes the Notepad++ update process robust and effectively unexploitable.
In addition to this major hardening, WinGUp (the auto-updater) has been also reinforced:
  1. Removed the libcurl.dll dependency to eliminate DLL side-loading risk.
  2. Removed 2 unsecured cURL SSL options: CURLSSLOPT_ALLOW_BEAST & CURLSSLOPT_NO_REVOKE.
  3. Restricted plugin management execution to program signed with the same certificate as WinGUp (i.e. only signed Notepad++).

Download Notepad++ v8.9.2 - Double‑Lock Update Security | Notepad++
 
Notepad++ release 8.9.3
  • Regression fix: a crash in User Defined Language. (Fix #17520 )
  • Regression fix: installing (or removing) plugin re-opens Notepad++ with permanent admin privilege (Fix #17540 )
  • Regression-fix: wrongly added parenthesis for some multi-bytes characters. (Fix #17521 , #17802 )
  • Regression-fix: incorrect function list text display for non-UTF8 documents. (Fix #17847 )
  • Regression-fix: ProjectPanel Workspace text localization issue. (Fix community report)
  • Regression-fix: Change History margin not enabled by default. (Fix comment repport )
  • Regression-fix: Notepad++ update & plugin download fail behind corporate MITM proxies. (Fix community report)
  • Security enhancement: Update cURL to v8.19.0 in auto-updater (WinGUp) to fix cURL security issue (CVE-2025-14819). (Fix #17869 )
  • Improve performance by migrating the XML parser from TinyXML to pugixml. (Fix #16175 )
  • Update Scintilla to 5.6.0 & Lexilla to 5.4.7. (Implement #17562 )
  • Fix the issue where printing caused Notepad++ to crash. (Fix #6126 , #12645 , community report #1, community report #2, community report #3)
  • Fix Find in Files failing to search file content on disk. (Fix #16177 , #17070 )
  • Add disableNppAutoUpdate.xml to disable auto-update when WinGUp (GUP.exe) is present. (Implement #17836 )
  • Fix a memory leak on exit. (Fix #17817 )
  • Fix installed auto-completion files not overwritten after update. (Fix #14749 )
  • Add model capacity of shortcuts.xml & contexMenu.xml for administration. (Fix #17872 )
  • Add an option to disable selected text drag-and-drop. (Fix #2571 , #11335 )
  • Fix wrong theme-writing path for non-ProgramFiles installations. (Fix comment repport )
  • Enhancement: prevent XML config files from being overwritten when updating portable package (copy/paste). (Fix #9755 , #14279 , #15120 )
  • Fix incomplete Find dialg tab translation when 1st opêned from Project Panels. (Fix community report)
  • Fix Notepad++ spawning a new Windows Explorer process in Task Manager. (Fix comment repport )
  • Add Function List & Autocompletion for D language. (Fix #17349 )
 
Notepad++ release 8.9.4
1.Fix crashes in FindInFiles when nativeLang.xml’s “find-result-hits” contains “%s”. (Fix #17960 )
2. Fix drop-file crash when file path length reaches 259 characters. (Fix #17921 )
3. Fix crash caused by undoing column editor bad input in virtual space. (Fix #17915 )
4. Fix bad column editor input in reverse-direction column selection on virtual space. (Fix #17915 )
5. Update to Scintilla 5.6.1 & Lexilla 5.4.8. (Fix #17920 , #17864 , #13522 , #11746 )
6. Fix EOL conversion to Windows format not working (Scintilla update related). (Fix #17920 )
7. Fix rendering corruption in .bat files (Lexilla update related). (Fix #17864 )
8. Fix quote escaping causing incorrect JSON syntax highlighting (Lexilla update related). (Fix #11746 , #13522 )
9. Fix MSI installation error due to context menu item registration. (Fix #17918 )
10. Fix NSIS installation stalling caused by context menu registration issue. (Fix #17308 , #17885 )
11. Add NPP_LANG property to install a specific localization file for MSI. (Fix issue reported in comment )
12. Fix MSI installer display random Hexadecimal number as name on UAC. (Fix #17967 )
13. Add version info into MSI file property (as value of “Comments”). (Fix #17803 )
14. Fix minimized window not restoring in administrator mode. (Fix #17945 )
15. Fix Unicode search mismatching ANSI character ‘?’. (Fix #17125 )
16. Fix Column Editor regression with empty fields. (Fix #17912 )
17. Fix floating dialog content not displaying in certain situations. (Fix #17563 )
18. Fix visual glitch when toggling group view in Document List. (Fix #14285 )
19. Support improved C++ 11 raw string literal handling. (Fix #17875 )
20. Fix visual glitch in the Mark dialog. (Fix #16084 , #17886 )
 
Notepad++ v8.9.5 release
  1. Fix updating issue where using v8.9.4 32-bits installer creates duplicate “Uninstall a program” entries. (Fix #17979)
  2. Fix v8.9.4 64-bits installer error message caused by MSIX on Win10. (Fix installer regression)
  3. Fix regression in UDL xml file EOL parsing issue. (Fix #18022)
  4. Update Scintilla to 5.6.2 & Lexilla to 5.4.9. (Implement #18011)
  5. Add option to synchronize zoom level across views. (Fix #17862)
  6. Fix MSI installer writting language info to HKCU instead of HKLM. (Fix MSI issue)
  7. Fix imported UDLs not appearing in the language menu without restarting Notepad++. (Fix #17909)
  8. Make “(?)” tooltip in preferences & Find in Files dialogs persitant & reduce display delay. (Fix #17995, #16961)
  9. Fix visual glitch in Mark dialog when in reduced mode. (Fix #17983)
 
Notepad++ release 8.9.6

Notepad++ v8.9.6 regression fixes, bug-fixes:​

  1. Fix vulnerability (CVE-2026-46710) of v8.9.4 & v8.9.5 installer. (Implement commit )
  2. Fix x86 installer regression of not showing installation entry in “Unstall a program” of Control Panel. (Fix community discussion)
  3. Fix x86 installer regression where context menu not installed or uninstalled correctly. (Fix community discussion)
  4. Fix UAC prompt display regression (“Notepad++ installer” instead of “Notepad++”) for Notepad++ v8.9.5. (Fix GitHub comment )
  5. Fix incorrect bevaviour when saving dirty read-only files. (Fix #17956 )
  6. Fix regression where saving a UDL file removed XML declaration. (Fix GitHub comment )
 
Notepad++ release 8.9.6.1

Notepad++ v8.9.6.1 vulnerability fixes:​

  1. Fix bad formed COPYDATASTRUCT makes Notepad++ crash (CVE-2026-48770 ).
  2. Fix arbitrary code execution vulnerability via config.xml (CVE-2026-48778 ).
  3. Fix arbitrary code execution vulnerability via shortcuts.xml (CVE-2026-48778 ).
 
Notepad++ release 8.9.6.2

Notepad++ v8.9.6.2 vulnerability fix:​

  1. Fix a bypass scenario in the previously fixed vulnerability (CVE-2026-48800) that was not fully addressed. (Implement commit )
 
Notepad++ release 8.9.6.4

Notepad++ v8.9.6.4 vulnerability fix, regression-fix & bug-fix:​

  1. Fix TOCTOU (Time-of-check to time-of-use) issue in HMAC implementation. (Fix TOCTOU )
  2. Fix MSI installer regression that leaves old version entry in Add/Remove Programs. (Fix #18071 )
  3. Fix “Open Containing Folder in Explorer” launching extra explorer processes. (Fix #17941 )
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top