Notepad++ v8.9.2 new security enhancements, feature, regression fix & bug-fix:

• Security enhancement: Make updater check interity & authenticity of server-returned XML (XMLDsig). (Implement #17441)
• Security enhancement: Fix untrusted search path vulnerability by launching explorer.exe (Fix CVE-2026-25926)
• Security enhancement: Make auto-updater (WinGUp) even more secured. (Remove unsecured options, remove dll dependency, launch only signed program for plugin management)
• Fix a plugin installation crash due to incorrect processing catch. (Fix #issue)
• Add redact selection feature - Default: █, Modifier (Shift + Click): ●. (Fix #17363)
• Fix context menu shortcut localization not aligning to the right regression. (Fix #17467)

Notepad++ v8.9.1 new security enhancement, features, regression fixes & bug-fixes:

• Fix EOL duplication regression when playing back old recorded macros. (Fix issue)
• Remedy search failure for pasted text containing trailing invisible EOL character. (Fix #17124, #17187)
• Fix customized context menu regression where separator (id=“0”) escapes FolderName submenu. (Fix #17342)
• Fix issue where a single undo reverted multiple changes after macro execution. (Fix #9426)
• Fix visual glitch when dragging dockable dialogs on a 2nd monitor. (Fix #16805, #16155, #16077)
• Fix inconsistent automatic search mode switching (RegEx to Extended) in Find dialog. (Fix #17227)
• Fix incorrect URL parsing caused by Unicode special spaces. (Fix #16856)
• Update to Boost 1.90.0. (Implement #17326)
• Improve update themes feature: fix JavaScript.js edge case. (Fix issue)
• Update javascript.js to better match javascript (embedded) in all themes. (Fix issue, report)
• Function List: enhance for Perl & PHP; add for Nim. (Fix #17382, #17327, implement #17377)
• Fix comments and highlighting in TCL. (Fix #17315)
• Update perl syntax highliging keywords and autocomplete for 5.42. (Fix #17332)
• Improvement: display Find dialog status message with invisible characters warning. (Fix #17345)