LIFF v2.30.0 release, subsequent deprecation due to security flaw, and planned restriction

LINE DevelopersSecurityDeadline Nov 24, 2026

LIFF v2.30.0 added arguments to three friendship and permission methods, but was later deprecated due to a security issue with usage restrictions planned.

Required action

If you are using LIFF v2.30.0, update to LIFF v2.31.1 or later promptly.

Changes

  • LIFF v2.30.0 added argument support to liff.permission.requestAll(), liff.getFriendship(), and liff.requestFriendship() when multiple accounts are enabled on a LINE MINI App channel.
  • LIFF v2.30.0 was later deprecated due to a bug with potential security impact.
  • Usage restrictions on older LIFF SDK versions from v2.20.0 to v2.31.0 are planned around November 24, 2026.
  • Apps using the CDN edge path are updated automatically, while npm or yarn users update the @line/liff package.

Affected areas

liff.permission.requestAll()liff.getFriendship()liff.requestFriendship()複数アカウントを使用https://static.line-scdn.net/liff/edge/2/sdk.js@line/liff@2.30.0

Open official page

This summary is independently created by Release Radar and is not an official announcement from the vendor. Please read the official page for accurate details.

More updates