Pre-Release Announcement

SecureDrop 2.9.0: Pre-Release Announcement

June 25, 2024

SecureDrop 2.9.0 is scheduled to be released on June 27, 2024. We will send out another notification through this blog, Mastodon, X, and the support portal when the release is live. Changes that journalists and administrators should be aware of are summarized in this blog post. A complete list of changes can be found on GitHub.

What’s coming in SecureDrop 2.9.0?

For administrators

For all users

  • Accessibility: Added expanded labels and descriptions to aid navigation for visually impaired users (Issue, Pull Request)
  • Security: Updated SecureDrop signing key with new expiry date of 2027-05-24 (Issue, Pull Request)
  • API feature: Support for HTTP range requests has been added to the Journalist API for the submissions and replies endpoints (Issue, Pull Request)

For developers

  • Quality of life: Added support for development virtualenv in Debian 12 (Issue, Pull Request)
  • Quality of life: Added random file generation in (Pull Request)
  • Bugfix: Fixed an issue with date generation in (Issue, Pull Request)
  • Quality of life: Added persistence for onion addresses created with make dev-tor (Issue, Pull Request)
  • Dependency changes:

What administrators will need to do

SecureDrop Application and Monitor Servers will be updated to SecureDrop 2.9.0 automatically within 24 hours of the release. As with previous releases, we will provide instructions for performing the workstation updates at the time of the release.

Questions and comments

If you have questions or comments regarding this release, please contact us:

We also encourage you to file nonsensitive issues you encounter in our GitHub repository (issue report form).

Thank you for using SecureDrop!

Return to News