https://releaseradar.jp/en/Official release notes and API changes from freee, kintone, SmartHR, LINE, and other Japanese SaaS products for AI builders.enhttps://releaseradar.jp/en/updates/line/60160a927799/https://releaseradar.jp/en/updates/line/60160a927799/Mon, 19 Oct 2026 15:00:00 GMTSecurityDue to an XSS vulnerability in older LIFF SDK versions, LINE plans to restrict the use of affected versions in external browsers. ・A cross-site scripting vulnerability (CVE-2026-112148) was confirmed in LIFF v2.20.0 through v2.31.0. ・Opening an endpoint URL from a malicious URL in an external or LINE in-app browser may allow arbitrary JavaScript execution. ・Usage restrictions on LIFF v2.20.0 through v2.31.0 are scheduled around November 24, 2026, and may be moved up without notice. ・After the restriction, LINE Login and other LIFF features may stop working when opening affected apps in external browsers. ・Apps using the CDN edge path (https://static.line-scdn.net/liff/edge/2/sdk.js) are automatically updated to v2.31.2 and need no action. https://developers.line.biz/ja/news/2026/10/20/liff-sdk-issue/https://releaseradar.jp/en/updates/line/74961e9d11da/https://releaseradar.jp/en/updates/line/74961e9d11da/Tue, 06 Oct 2026 15:00:00 GMTBreakingLIFF v2.31.2 changes how question marks in LIFF URL query parameter values are restored in the secondary redirect URL inside the LIFF browser. ・When opening a LIFF app in the LIFF browser, ? in LIFF URL query parameter values is preserved as ? instead of being replaced with & in the secondary redirect URL. ・Opening a LIFF app in an external browser is not affected by this change. ・When ? in a query parameter value is percent-encoded as %3F and accessed on iOS from outside the LINE app, the secondary redirect URL now receives ? instead of &. ・Users of the CDN edge path are automatically updated to v2.31.2, while users of a fixed CDN path or the @line/liff npm package must update the version manually. ・LIFF v2.20.0 through v2.31.0 are deprecated due to a bug with potential security implications. https://developers.line.biz/ja/news/2026/10/07/release-liff-2-31-2/https://releaseradar.jp/en/updates/line/5a9be1694217/https://releaseradar.jp/en/updates/line/5a9be1694217/Tue, 29 Sep 2026 15:00:00 GMTSecurityLIFF v2.31.1 fixes a potential security bug in the LIFF SDK, and versions v2.20.0 through v2.31.0 have been deprecated. ・Fixed an internal LIFF SDK issue that occurs when opening a LIFF app in an external browser from a URL with crafted query parameters ・Deprecated LIFF versions v2.20.0 through v2.31.0 due to potential security impact without changing LIFF app functionality ・Users of the CDN edge path are automatically updated to v2.31.1 and require no additional action https://developers.line.biz/ja/news/2026/09/30/release-liff-2-31-1/https://releaseradar.jp/en/updates/line/152ef74dcd1a/https://releaseradar.jp/en/updates/line/152ef74dcd1a/Sun, 30 Aug 2026 15:00:00 GMTBreakingFrom LIFF v2.31.2, the LIFF browser is scheduled to keep "?" in query parameter values instead of replacing it with "&" upon redirect. ・The target version was changed from LIFF v2.31.1 or later to LIFF v2.31.2 or later, scheduled for release on October 7, 2026 ・The change applies only when opening a LIFF app in the LIFF browser, with no change in behavior in external browsers ・When accessing a LIFF URL containing percent-encoded "%3F" from outside the LINE app on iOS, the secondary redirect URL value becomes "?" instead of "&" ・Behavior remains unchanged when accessing a LIFF URL containing "%3F" from the LINE app on iOS or from an Android device https://developers.line.biz/ja/news/2026/08/31/liff-query-parameter-change/https://releaseradar.jp/en/updates/line/3be13065df87/https://releaseradar.jp/en/updates/line/3be13065df87/Sun, 30 Aug 2026 15:00:00 GMTSecurityAfter LIFF v2.31.0 was released with internal behavior changes, it was deprecated due to a security bug and faces planned usage limits. ・LIFF v2.31.0 changed the internal behavior of the LIFF SDK without changing features. ・LIFF v2.31.0 was deprecated after a bug with potential security impact was confirmed. ・Usage restrictions for LIFF SDK versions v2.20.0 to v2.31.0 are planned around November 24, 2026. https://developers.line.biz/ja/news/2026/08/31/release-liff-2-31-0/https://releaseradar.jp/en/updates/line/ecdea045fc23/https://releaseradar.jp/en/updates/line/ecdea045fc23/Sun, 16 Aug 2026 15:00:00 GMTSecurityLIFF v2.30.0 added arguments to three friendship and permission methods, but was later deprecated due to a security issue with usage restrictions planned. ・LIFF v2.30.0 added argument support to liff.permission.requestAll(), liff.getFriendship(), and liff.requestFriendship() when multiple accounts are enabled on a LINE MINI App channel. ・LIFF v2.30.0 was later deprecated due to a bug with potential security impact. ・Usage restrictions on older LIFF SDK versions from v2.20.0 to v2.31.0 are planned around November 24, 2026. ・Apps using the CDN edge path are updated automatically, while npm or yarn users update the @line/liff package. https://developers.line.biz/ja/news/2026/08/17/release-liff-2-30-0/https://releaseradar.jp/en/updates/line/475f4c4b1a55/https://releaseradar.jp/en/updates/line/475f4c4b1a55/Thu, 30 Jul 2026 15:00:00 GMTSecurityLIFF v2.29.2 was released with internal SDK behavior changes, then deprecated due to a security issue with usage restrictions planned. ・LIFF v2.29.2 changed internal LIFF SDK behavior without functional changes. ・LIFF v2.29.2 was deprecated after a bug with potential security impact was confirmed. ・Usage restrictions for LIFF SDK versions v2.20.0 through v2.31.0 are planned around November 24, 2026. https://developers.line.biz/ja/news/2026/07/31/release-liff-2-29-2/https://releaseradar.jp/en/updates/line/f5dbb9b36ca0/https://releaseradar.jp/en/updates/line/f5dbb9b36ca0/Sun, 28 Jun 2026 15:00:00 GMTSecurityLIFF v2.29.1 was released with internal behavior changes, then deprecated due to a security issue with usage restrictions planned. ・LIFF v2.29.1 changed internal LIFF SDK behavior without changing features. ・LIFF v2.29.1 was deprecated after a bug with potential security impact was confirmed. ・Usage restrictions for LIFF SDK versions v2.20.0 to v2.31.0 are planned around November 24, 2026. ・CDN edge path users were updated to v2.29.1 automatically, while npm package users updated by installing @line/liff@2.29.1. https://developers.line.biz/ja/news/2026/06/29/release-liff-2-29-1/https://releaseradar.jp/en/updates/line/0939546cc490/https://releaseradar.jp/en/updates/line/0939546cc490/Mon, 18 May 2026 15:00:00 GMTImprovedIn LINE 26.7.0 and later, the appearance and behavior of header action and minimize buttons have changed in the LIFF browser. ・In LINE 26.7.0 and later, the action button icon changed from a multi-tab view icon to a vertical three-dot icon. ・Tapping the action button now displays a dropdown menu instead of the multi-tab view. ・The dropdown menu includes items such as reload and share, with displayed items varying by app type and verification status. ・For verified Mini Apps, the minimize button in the header changed to a close button, and the minimize button moved into the dropdown menu. https://developers.line.biz/ja/news/2026/05/19/liff-browser/https://releaseradar.jp/en/updates/line/c2997f65ee76/https://releaseradar.jp/en/updates/line/c2997f65ee76/Tue, 12 May 2026 15:00:00 GMTSecurityOlder LIFF SDK versions face planned usage restrictions due to vulnerabilities, requiring an update to v2.31.1 or later. ・Usage restrictions for LIFF SDK v2.20.0 to v2.31.0 are scheduled around November 24, 2026. ・LIFF v2.29.0 is deprecated due to a defect that may have security implications. ・LIFF v2.29.0 changed internal behavior without altering functionality. https://developers.line.biz/ja/news/2026/05/13/release-liff-2-29-0/https://releaseradar.jp/en/updates/line/1255c37c93ee/https://releaseradar.jp/en/updates/line/1255c37c93ee/Sun, 10 May 2026 15:00:00 GMTImprovedYou can now run LIFF APIs and get profiles properly when opening apps from LIFF browser by updating Android LINE to 26.6.2 or later. ・Profile retrieval and LIFF API calls failed on Android LINE 26.6.0 and 26.6.1 when launching apps from LIFF browser via intents or app links ・The issue occurred because the LIFF SDK referenced an invalid access token ・Navigating with location.href when launching the same or another LIFF or LINE mini app may avoid the issue ・Calling liff.login() after liff.logout() when detecting error code invalid_request may avoid the issue https://developers.line.biz/ja/news/2026/05/11/liff-outage/https://releaseradar.jp/en/updates/line/51063e089ef0/https://releaseradar.jp/en/updates/line/51063e089ef0/Mon, 27 Apr 2026 15:00:00 GMTNoticeAn outage causing LIFF SDK loading and app initialization failures in LIFF and LINE MINI App has been fully resolved. ・LIFF SDK loading failed in some cases between around 19:46 and 20:05 (UTC+9) on April 27, 2026 for apps using the CDN path ・Initialization with liff.init() failed in some cases between around 19:46 (UTC+9) on April 27, 2026 and 0:12 (UTC+9) on April 28, 2026, preventing normal app use ・The cause was a server failure https://developers.line.biz/ja/news/2026/04/28/liff-outage/https://releaseradar.jp/en/updates/line/9d63492296f8/https://releaseradar.jp/en/updates/line/9d63492296f8/Mon, 23 Mar 2026 15:00:00 GMTSecurityWhile you can now prompt users to add friends in LIFF v2.28.0, older SDK versions will be restricted due to a security vulnerability. ・Usage restrictions for older LIFF SDK versions (v2.20.0 to v2.31.0) are scheduled for around November 24, 2026. ・LIFF v2.28.0 has been deprecated due to a bug with potential security impacts. ・You can now use liff.requestFriendship() to display a subwindow prompting users to add the LINE Official Account as a friend or unblock it. https://developers.line.biz/ja/news/2026/03/24/release-liff-2-28-0/https://releaseradar.jp/en/updates/line/42ca7c0acddb/https://releaseradar.jp/en/updates/line/42ca7c0acddb/Wed, 11 Feb 2026 15:00:00 GMTBreakingEdge-to-edge in Android LINE extends the WebView to the screen bottom, which may overlap app content with the gesture navigation bar. ・Applies to all LIFF and LINE mini apps on Android LINE version 26.3.0 or later ・WebView area extends to the bottom of the screen during gesture navigation ・WebView area at the top status bar does not change ・Safe-area-inset and --android-safe-area-inset on the left and right are always set to 0 in landscape mode ・Use safe-area-inset-bottom for WebView 144 or later and --android-safe-area-inset-bottom for versions below 144 https://developers.line.biz/ja/news/2026/02/12/edge-to-edge-support/