Kiwi TCMS 15.1

security, improvements and new translations

Posted by Kiwi TCMS Team on Fri 24 October 2025 under releases

We're happy to announce Kiwi TCMS version 15.1!

IMPORTANT:

This is a minor version release which includes security related updates, several improvements, new API methods and new translations.

Recommended upgrade path:

15.0 -> 15.1

You can explore everything at https://public.tenant.kiwitcms.org!

---

Public container image (x86_64):

pub.kiwitcms.eu/kiwitcms/kiwi   latest  9b33a6e47c0f    696MB

IMPORTANT: version tagged and multi-arch container images are available only to subscribers!

Changes since Kiwi TCMS 15.0

Security

  • Update Django from 5.2.6 to 5.2.7, addressing one security vulnerability with severity “high” and one security vulnerability with severity “low”: CVE-2025-59681 and CVE-2025-59682

Improvements

  • Update jira from 3.8.0 to 3.10.5
  • Update psycopg[binary] from 3.2.10 to 3.2.11
  • Update python-gitlab from 6.3.0 to 6.5.0
  • Update uwsgi from 2.0.30 to 2.0.31
  • Display records count in TestPlan page. Fixes Issue #4110
  • Add 'Deactivate selected accounts' dropdown on /admin/auth/user/ page
  • Add 'Deactivate' button in 'Change user' admin page

API

  • Add User.deactivate() API method
  • Update documentation and tests for User.filter() method
  • Add new internal signal USER_DEACTIVATED_SIGNAL. Sent when account is deactivated

Refactoring and testing

  • Update actions/setup-node from 5 to 6
  • Update github/codeql-action from 3 to 4
  • Update isort from 6.0.1 to 6.1.0
  • Update locust from 2.34.1 to 2.42.0
  • Update node_modules/webpack from 5.101.3 to 5.102.1
  • Pin intermediate dependency Pillow to 11.3.0 to fix failing container build
  • Define a login_form template block in login.html
  • Update Bitbucket repository URL b/c the original repository has reached a limit of 10k issues and new ones cannot be created anymore
  • Add login tests for disabled accounts via browser
  • Add tests for API login and method calls from deactivated accounts
  • Collect logs from Postgres container during testing

Translations

Kiwi TCMS Enterprise v15.1-mt

  • Based on Kiwi TCMS v15.1
  • Update certbot from 4.2.0 to 5.1.0
  • Update kiwitcms-tenants from 4.2.0 to 4.3.0
  • Update sentry-sdk from 2.38.0 to 2.42.1
  • Update social-auth-app-django from 5.5.1 to 5.6.0
  • Redirect /admin/login/ to /accounts/login/
  • Add 'Export as CSV' dropdown on /admin/auth/user/ page
  • Add PASSWORD_LOGIN_ENABLED setting

Private container images

hub.kiwitcms.eu/kiwitcms/version          15.1 (aarch64)        c363e5d8b45c   24 Oct 2025      706MB
hub.kiwitcms.eu/kiwitcms/version          15.1 (x86_64)         994fde01a325   24 Oct 2025      696MB
hub.kiwitcms.eu/kiwitcms/enterprise       15.1-mt (aarch64)     377a5b6a6b8e   24 Oct 2025      976MB
hub.kiwitcms.eu/kiwitcms/enterprise       15.1-mt (x86_64)      6e897543a398   24 Oct 2025      955MB

IMPORTANT: version tagged, multi-arch and Enterprise container images are available only to subscribers!

How to upgrade

Follow the Upgrading instructions from our documentation.

Happy testing!

---

If you like what we're doing and how Kiwi TCMS supports various communities please help us grow!