LoginSign Up
← Back to all sparks
BigBlueButton logo

BigBlueButton

MEETINGS
Velocity5.0

Open-source web conferencing system for online learning

bigbluebutton.org ↗

BigBlueButton 4.0 rc.5 drops Etherpad and makes BlockNote the only notes editor.

video-conferencingopen-sourcelivekitblocknoteplugin-sdkrelease-candidate
◆Current state
BigBlueButton 4.0.0-rc.5 removes Etherpad, so upgrading uninstalls bbb-etherpad and bbb-pads and leaves BlockNote as the only shared-notes editor. It also moves Node components to Node.js 24, switches the client to the 1.0 pre-release plugin SDK, and redesigns the poll and quiz panels. It follows two security-only candidates, and the project still recommends 3.0.x for production.
◆Where it's heading
The 4.0 cycle is removing legacy components one by one: SIP.js audio went in beta.4, and Etherpad goes now. Between the removals, security-only candidates harden the new LiveKit audio and BlockNote notes surfaces. The plugin SDK reaching a 1.0 pre-release suggests the extension API is being frozen for GA.
◆Prediction
Expect at least one more candidate to settle the plugin SDK 1.0 change and Etherpad removal before 4.0.0 GA. The pace of security advisories makes the exact timing unclear.

◆Recent moves

  1. 21d ago

    BigBlueButton 4.0 rc.5 removes Etherpad and moves to Node.js 24

    Rc.5 completes the shared-notes migration by uninstalling Etherpad, so BlockNote is the only editor left. It also moves to Node.js 24 and the 1.0 pre-release plugin SDK, which changes which plugin manifests load. That is another legacy component gone before GA.

    View source ↗
  2. 28d ago

    BigBlueButton 4.0 rc.4 patches audio and notes security flaws

    A security-only candidate fixing command injection, unauthenticated audio access and shared-notes exposure. Several fixes touch the new audio and BlockNote surfaces, so administrators testing 4.0 should update.

    View source ↗
  3. 1mo ago

    BigBlueButton 4.0 rc.3 hardens LiveKit reconnection

    A stabilization candidate focused on LiveKit reconnection and recovery, bbb-web hardening and restoring tests to CI. Its one feature makes whiteboard wheel-zoom configurable again.

    View source ↗
  4. 1mo ago

    BigBlueButton 4.0 rc.2 fixes cross-meeting security flaws

    The first security-only candidate fixed cross-meeting presentation injection, a page IDOR and join-URL checksum pollution. It started the hardening phase after rc.1's architecture work.

    View source ↗
  5. 1mo ago

    BigBlueButton 4.0 rc.1 completes the LiveKit audio migration

    ⚡ SPARK

    The first release candidate completed the move to LiveKit as the audio state source, with multi-room sessions and token refresh. Every candidate since has hardened this architecture.

    View source ↗
  6. 2mo ago

    BigBlueButton 4.0 beta.5 overhauls mobile layout

    Beta.5 overhauled the mobile layout, added automatic light and dark themes, and introduced the bbbctl admin tool. It broadened 4.0's reach beyond the media-stack rewrite.

    View source ↗