Notepad++ v8.9.3 release$$$2026-03-26$$$$$$In order to improve the performance of reading & writing Notepad++ configuration files; the migration of a new XML parser (pugixml) has been carried out over several versions; and it is now completed in this release. Several regressions detected in previous versions; caused by the XML parser migration; have also been fixed.$$$$$$Some bugs have been resolved and a few new improvements have been added in the 8.9.3 release.$$$$$$The full list of improvements for version 8.9.2; along with the download link; is available here:$$$$$$Notepad++ v8.9.3 regression fixes; bug-fixes & new improvements:**$$$Regression fix: a crash in User Defined Language. (Fix #17520)$$$Regression fix: installing (or removing) plugin re-opens Notepad++ with permanent admin privilege (Fix #17540)$$$Regression-fix: wrongly added parenthesis for some multi-bytes characters. (Fix #17521; #17802)$$$Regression-fix: incorrect function list text display for non-UTF8 documents. (Fix #17847)$$$Regression-fix: ProjectPanel Workspace text localization issue. (Fix community report)$$$Regression-fix: Change History margin not enabled by default. (Fix comment repport)$$$Regression-fix: Notepad++ update & plugin download fail behind corporate MITM proxies. (Fix community report)$$$Security enhancement: Update cURL to v8.19.0 in auto-updater (WinGUp) to fix cURL security issue (CVE-2025-14819). (Fix #17869)$$$Improve performance by migrating the XML parser from TinyXML to pugixml. (Fix #16175)$$$Update Scintilla to 5.6.0 & Lexilla to 5.4.7. (Implement #17562)$$$Fix the issue where printing caused Notepad++ to crash. (Fix #6126; #12645; community report #1; community report #2; community report #3)$$$Fix Find in Files failing to search file content on disk. (Fix #16177; #17070)$$$Add disableNppAutoUpdate.xml to disable auto-update when WinGUp (GUP) is present. (Implement #17836)$$$Fix a memory leak on exit. (Fix #17817)$$$Fix installed auto-completion files not overwritten after update. (Fix #14749)$$$Add model capacity of shortcuts.xml & contexMenu.xml for administration. (Fix #17872)$$$Add an option to disable selected text drag-and-drop. (Fix #2571; #11335)$$$Fix wrong theme-writing path for non-ProgramFiles installations. (Fix comment repport)$$$Enhancement: prevent XML config files from being overwritten when updating portable package (copy/paste). (Fix #9755; #14279; #15120)$$$Fix incomplete Find dialg tab translation when 1st opêned from Project Panels. (Fix community report)$$$Fix Notepad++ spawning a new Windows Explorer process in Task Manager. (Fix comment repport)$$$Add Function List & Autocompletion for D language. (Fix #17349)

Notepad++ v8.9.2 release - Double-Lock Update Security$$$2026-02-16$$$$$$“the XML returned by the update server is now signed (XMLDSig); and the certificate & signature verification will be enforced starting with upcoming v8.9.2; expected in about one month.“$$$As promised in the announcement Notepad++ Hijacked by State-Sponsored Hackers; this release strengthens the weakest links in Notepad++ update process.$$$$$$Below is an illustration of how the Notepad++ update mechanism was previously hijacked:$$$$$$thumbnail$$$With security enhancements introduced in v8.8.9 & v8.9.2 (this version); this vulnerability is now fully addressed:$$$$$$thumbnail$$$As shown in the diagram above; 2 independent signature & certificate vérifications are now performed:$$$$$$Verification of the signed XML returned by notepad-plus-plus.org - implemented in this release (v8.9.2).$$$Verification of the signed installer downloaded from github.com already implemented in v8.8.9.$$$This “double lock” design makes the Notepad++ update process robust and effectively unexploitable.$$$$$$In addition to this major hardening; WinGUp (the auto-updater) has been also reinforced:$$$$$$Removed the libcurl.dll dependency to eliminate DLL side-loading risk.$$$Removed 2 unsecured cURL SSL options: CURLSSLOPT_ALLOW_BEAST & CURLSSLOPT_NO_REVOKE.$$$Restricted plugin management execution to program signed with the same certificate as WinGUp (i.e. only signed Notepad++).$$$Of course; it’s always possible to exclude the auto-updater during the UI installation; or to deploy the MSI package using the following command:$$$msiexec /i npp.8.9.2.Installer.x64.msi NOUPDATER=1

Notepad++ v8.9.2 release - Double-Lock Update Security$$$2026-02-16$$$$$$“the XML returned by the update server is now signed (XMLDSig); and the certificate & signature verification will be enforced starting with upcoming v8.9.2; expected in about one month.“$$$As promised in the announcement Notepad++ Hijacked by State-Sponsored Hackers; this release strengthens the weakest links in Notepad++ update process.$$$$$$Below is an illustration of how the Notepad++ update mechanism was previously hijacked:$$$$$$thumbnail$$$With security enhancements introduced in v8.8.9 & v8.9.2 (this version); this vulnerability is now fully addressed:$$$$$$thumbnail$$$As shown in the diagram above; 2 independent signature & certificate vérifications are now performed:$$$$$$Verification of the signed XML returned by notepad-plus-plus.org - implemented in this release (v8.9.2).$$$Verification of the signed installer downloaded from github.com already implemented in v8.8.9.$$$This “double lock” design makes the Notepad++ update process robust and effectively unexploitable.$$$$$$In addition to this major hardening; WinGUp (the auto-updater) has been also reinforced:$$$$$$Removed the libcurl.dll dependency to eliminate DLL side-loading risk.$$$Removed 2 unsecured cURL SSL options: CURLSSLOPT_ALLOW_BEAST & CURLSSLOPT_NO_REVOKE.$$$Restricted plugin management execution to program signed with the same certificate as WinGUp (i.e. only signed Notepad++).$$$Of course; it’s always possible to exclude the auto-updater during the UI installation; or to deploy the MSI package using the following command:$$$msiexec /i npp.8.9.2.Installer.x64.msi NOUPDATER=1

Notepad++ v8.9.1$$$$$$Several regressions were fixed in release 8.9.1: playback of macros that dulicated EOL; no matches found when pasting from Excel into the Find what field; and a regression in the customized context menu where the separator (id=“0”) escapes FolderName submenu.$$$A long-standing bug was also fixed in this version: a single undo reverted multiple changes after macro execution.$$$$$$In addition to the fixed issues mentioned above; this release includes various bug-fixes & a few additional enhancements.$$$$$$Below are New security enhancement; features; regression fixes & bug-fixes$$$$$$Fix EOL duplication regression when playing back old recorded macros. (Fix issue)$$$Remedy search failure for pasted text containing trailing invisible EOL character. (Fix #17124; #17187)$$$Fix customized context menu regression where separator (id=“0”) escapes FolderName submenu. (Fix #17342)$$$Fix issue where a single undo reverted multiple changes after macro execution. (Fix #9426)$$$Fix visual glitch when dragging dockable dialogs on a 2nd monitor. (Fix #16805; #16155; #16077)$$$Fix inconsistent automatic search mode switching (RegEx to Extended) in Find dialog. (Fix #17227)$$$Fix incorrect URL parsing caused by Unicode special spaces. (Fix #16856)$$$Update to Boost 1.90.0. (Implement #17326)$$$Improve update themes feature: fix JavaScript.js edge case. (Fix issue)$$$Update javascript.js to better match javascript (embedded) in all themes. (Fix issue; report)$$$Function List: enhance for Perl & PHP; add for Nim. (Fix #17382; #17327; implement #17377)$$$Fix comments and highlighting in TCL. (Fix #17315)$$$Update perl syntax highliging keywords and autocomplete for 5.42. (Fix #17332)$$$Improvement: display Find dialog status message with invisible characters warning. (Fix #17345)

Notepad++ v8.9.1$$$$$$Several regressions were fixed in release 8.9.1: playback of macros that dulicated EOL; no matches found when pasting from Excel into the Find what field; and a regression in the customized context menu where the separator (id=“0”) escapes FolderName submenu.$$$A long-standing bug was also fixed in this version: a single undo reverted multiple changes after macro execution.$$$$$$In addition to the fixed issues mentioned above; this release includes various bug-fixes & a few additional enhancements.$$$$$$Below are New security enhancement; features; regression fixes & bug-fixes$$$$$$Fix EOL duplication regression when playing back old recorded macros. (Fix issue)$$$Remedy search failure for pasted text containing trailing invisible EOL character. (Fix #17124; #17187)$$$Fix customized context menu regression where separator (id=“0”) escapes FolderName submenu. (Fix #17342)$$$Fix issue where a single undo reverted multiple changes after macro execution. (Fix #9426)$$$Fix visual glitch when dragging dockable dialogs on a 2nd monitor. (Fix #16805; #16155; #16077)$$$Fix inconsistent automatic search mode switching (RegEx to Extended) in Find dialog. (Fix #17227)$$$Fix incorrect URL parsing caused by Unicode special spaces. (Fix #16856)$$$Update to Boost 1.90.0. (Implement #17326)$$$Improve update themes feature: fix JavaScript.js edge case. (Fix issue)$$$Update javascript.js to better match javascript (embedded) in all themes. (Fix issue; report)$$$Function List: enhance for Perl & PHP; add for Nim. (Fix #17382; #17327; implement #17377)$$$Fix comments and highlighting in TCL. (Fix #17315)$$$Update perl syntax highliging keywords and autocomplete for 5.42. (Fix #17332)$$$Improvement: display Find dialog status message with invisible characters warning. (Fix #17345)

Notepad++ v8.9 release: security enhancements$$$2025-12-27$$$$$$Though the version number is major; this release itself is not a major update; and it contains regression-fix & enhancements.$$$$$$The self-signed certificate is no longer used as of this release. Only the legitimate certificate issued by GlobalSign is now used to sign Notepad++ release binaries. We strongly recommend that users who previously installed the self-signed root certificate remove it.$$$$$$A log of security errors encountered during Notepad++ updates is now generated automatically. In case the auto-update process stops due to a signature or certificate verification failure - users can check the file located at ”%LOCALAPPDATA%$$$otepad++\log\securityError.log” to identify the issue and report it to the Notepad++ issue tracker.$$$$$$The jarring color regression in dark mode regression introduced in v8.8.9 has also been fixed in this release.$$$$$$In addition to the security enhancements & the regression-fix mentioned above; this release includes various bug-fixes & several additional enhancements

Notepad++ v8.9 release: security enhancements$$$2025-12-27$$$$$$Though the version number is major; this release itself is not a major update; and it contains regression-fix & enhancements.$$$$$$The self-signed certificate is no longer used as of this release. Only the legitimate certificate issued by GlobalSign is now used to sign Notepad++ release binaries. We strongly recommend that users who previously installed the self-signed root certificate remove it.$$$$$$A log of security errors encountered during Notepad++ updates is now generated automatically. In case the auto-update process stops due to a signature or certificate verification failure - users can check the file located at ”%LOCALAPPDATA%$$$otepad++\log\securityError.log” to identify the issue and report it to the Notepad++ issue tracker.$$$$$$The jarring color regression in dark mode regression introduced in v8.8.9 has also been fixed in this release.$$$$$$In addition to the security enhancements & the regression-fix mentioned above; this release includes various bug-fixes & several additional enhancements

Notepad++ v8.8.9 security enhancement; new features; regression fixes & bug-fixes:$$$$$$ 1. Security Enhancement: verify certificate & signature on downloaded update installer.$$$ 2. Fix corrupted file loading on Windows system using the full UTF-8 code page.$$$ 3. Fix crashing when hashing SHA-256 for large files.$$$ 4. Fix Select & Find Next command not working regression.$$$ 5. MSI improvement: Add NOUPDATER option & suppress REBOOT.$$$ 6. Fix Perl Function List causes Notepad++ to freeze on tab switch regression.$$$ 7. Fix context menu truncated regression on localization change.$$$ 8. Add ability to update users langs.xml & stylers.xml from model XML files.$$$ 9. Update to Scintilla 5.5.8 & Lexilla 5.4.6.$$$10. Add feature to sort lines in a document by length.$$$11. Undo & redo enhancement: restore vertical scroll position after undo & redo.$$$12. Fix mouse wheel horizontal scrolling amount not respecting Windows setting.$$$13. Fix document map regression with keyboard input.$$$14. Fix wrong system font scaling on Windows 7.$$$15. Update to nlohman json 3.11.3.

Notepad++ v8.8.9 security enhancement; new features; regression fixes & bug-fixes:$$$$$$ 1. Security Enhancement: verify certificate & signature on downloaded update installer.$$$ 2. Fix corrupted file loading on Windows system using the full UTF-8 code page.$$$ 3. Fix crashing when hashing SHA-256 for large files.$$$ 4. Fix Select & Find Next command not working regression.$$$ 5. MSI improvement: Add NOUPDATER option & suppress REBOOT.$$$ 6. Fix Perl Function List causes Notepad++ to freeze on tab switch regression.$$$ 7. Fix context menu truncated regression on localization change.$$$ 8. Add ability to update users langs.xml & stylers.xml from model XML files.$$$ 9. Update to Scintilla 5.5.8 & Lexilla 5.4.6.$$$10. Add feature to sort lines in a document by length.$$$11. Undo & redo enhancement: restore vertical scroll position after undo & redo.$$$12. Fix mouse wheel horizontal scrolling amount not respecting Windows setting.$$$13. Fix document map regression with keyboard input.$$$14. Fix wrong system font scaling on Windows 7.$$$15. Update to nlohman json 3.11.3.

Notepad++ v8.8.8 new features; regression fixes & bug-fixes:$$$Add Notepad++ MSI (x64) for enterprise IT deployment. (Fix #2326; #2368; #16767)$$$Security enhancement: prevent Notepad++ Updater from being hijacked. (Implement #17116; commit)$$$Fix multi-selection crash (regression) when smart highlighting is enabled. (Fix #17086; #17126)$$$Add tab label length limitation option to have reasonable tab width. (Fix #3332; #5563; #12563; #16417)$$$Improve the performance of saving session on exit. (Implement #17079)$$$Fix Distraction free mode disabling tab bar hiding regression. (Fix #17102; #16831)$$$Add text scale support. (Fix #16427; #17167; #17129)$$$Fix switching among some encoding not working issue. (Fix #17033)$$$Fix Notepad++ not handle system default code page UTF-8 well. (Fix #17057)$$$Improve Rust handling: keywords and autoCompletion. (Fix #16904)

Notepad++ v8.8.8 new features; regression fixes & bug-fixes:$$$Add Notepad++ MSI (x64) for enterprise IT deployment. (Fix #2326; #2368; #16767)$$$Security enhancement: prevent Notepad++ Updater from being hijacked. (Implement #17116; commit)$$$Fix multi-selection crash (regression) when smart highlighting is enabled. (Fix #17086; #17126)$$$Add tab label length limitation option to have reasonable tab width. (Fix #3332; #5563; #12563; #16417)$$$Improve the performance of saving session on exit. (Implement #17079)$$$Fix Distraction free mode disabling tab bar hiding regression. (Fix #17102; #16831)$$$Add text scale support. (Fix #16427; #17167; #17129)$$$Fix switching among some encoding not working issue. (Fix #17033)$$$Fix Notepad++ not handle system default code page UTF-8 well. (Fix #17057)$$$Improve Rust handling: keywords and autoCompletion. (Fix #16904)

Notepad++ v8.8.8 new features; regression fixes & bug-fixes:$$$Add Notepad++ MSI (x64) for enterprise IT deployment. (Fix #2326; #2368; #16767)$$$Security enhancement: prevent Notepad++ Updater from being hijacked. (Implement #17116; commit)$$$Fix multi-selection crash (regression) when smart highlighting is enabled. (Fix #17086; #17126)$$$Add tab label length limitation option to have reasonable tab width. (Fix #3332; #5563; #12563; #16417)$$$Improve the performance of saving session on exit. (Implement #17079)$$$Fix Distraction free mode disabling tab bar hiding regression. (Fix #17102; #16831)$$$Add text scale support. (Fix #16427; #17167; #17129)$$$Fix switching among some encoding not working issue. (Fix #17033)$$$Fix Notepad++ not handle system default code page UTF-8 well. (Fix #17057)$$$Improve Rust handling: keywords and autoCompletion. (Fix #16904)