LIFF v2.29.1 release, deprecation due to a security bug, and planned usage restrictions

LIFF v2.29.1 was released with internal behavior changes, then deprecated due to a security issue with usage restrictions planned.

Required action

Update promptly to LIFF v2.31.1 or later if you are using LIFF v2.29.1.

Changes

  • LIFF v2.29.1 changed internal LIFF SDK behavior without changing features.
  • LIFF v2.29.1 was deprecated after a bug with potential security impact was confirmed.
  • Usage restrictions for LIFF SDK versions v2.20.0 to v2.31.0 are planned around November 24, 2026.
  • CDN edge path users were updated to v2.29.1 automatically, while npm package users updated by installing @line/liff@2.29.1.

Affected areas

@line/liff@2.29.1https://static.line-scdn.net/liff/edge/2/sdk.js

Open official page

This summary is independently created by Release Radar and is not an official announcement from the vendor. Please read the official page for accurate details.