Notepad++ v8.8.2 Release

donho

~~Notepad++ release 8.8.2 is available here:~~
Notepad++ release 8.8.2 virus scanner issue? Please check the following link:
https://notepad-plus-plus.org/news/v882-fix-security-issue/

Notepad++ v8.8.2 regression-fixes, bug-fixes & new features:

Fix regression of folding state not being remembered through sessions. (Fix #16597, #16670)
Fix “Go To Settings” links in Style Configurator regression (from v8.8). (Fix #16592)
Fix small regression of tab background (hovered) highlighting issue after drag&drop. (Fix #16559)
Fix an unresponsive (hang) issue due to hide lines. (Fix #16316)
Fix installer security issue by using the absolute path instead of an unspecified path (CVE-2025-49144). (commit, fix report on GitHub, fix #16744)
Installer component “WinGUp”: update cURL to 8.13.0 for fixing cURL’s security issue CVE-2025-0167. (Fix #16531, #16515)
Update to scintilla 5.5.7 & Lexilla 5.4.5. (Implement #16649)
Add feature to update Notepad++ on exit. (Fix #16601, #13749, #10317, #8495, #8457, #3755)
Add “/relaunchNppAfterSilentInstall” command argument for installer. (Fix #issue)
Add feature to set read-only attribute on file so user can toggle (set/remove) read-only attribute of a file. (Fix #326, #4594, #6216, #7841, #12520, #15571, #16603)
Add new plugin API: NPPM_GETTOOLBARICONSETMODE & NPPN_TOOLBARICONSETCHANGED to get toolbar icon set choice. (Fix #16547, #16646)
Deprecate 3 APIs: Deprecate NPPM_GETOPENFILENAMES, NPPM_GETOPENFILENAMESPRIMARY & NPPM_GETOPENFILENAMESSECOND. (Fix #15997)
Add new feature of using first line of untitled document for its tab name. (Fix #3994, #16584)
Enhance NPPM_DARKMODESUBCLASSANDTHEME: Enable darkmode progress bar for plugins. (Fix #16675)
Various dark mode enhancements. (Fix #16668, #16674, #16560, #16537, #issue)
Fix right click on caption bar unhidding main menu. (Fix #16652)
Fix rename tab error message when tab name is unchanged. (Fix #16661)
Fix Python FunctionList absorbing next function issue if space after colon. (Fix #16636)
Remove .log from errorlist lexer’s default extensions. (Fix #16627)
Make raw string syntax highlighting work for Golang. (Fix #16609)
Fix Notepad++ tray icon lost after Windows Taskbar crashing & being relaunched. (Fix #16588)
Fix changing toolbar icon set not updating to matching panel icon set. (Fix #16595)
Fix Windows dialog file list not react with keystroke (character match). (Fix #2239)
Add “*” mark on modified file entries in “Windows” dropdown menu. (Fix #16542)

Due to the installer security issue, auto-updater will be triggered to this release in 1 day.

Emnet Kahsay

I was reviewing the installer for Notepad++ v8.8.2 and ran the file has through VirusTotal & Hybrid Analysis-- at least 17 vendors marked the file as malicious. I also tested in Joe’s Sandbox and it came back maclicious again. Is this a known issue?

PeterJones

@Emnet-Kahsay ,

see this recent discussion, and the notes on the page that @donho linked at the top of this announcement.

Murray Sobol 1

Windows 11 Professional, downloading this: Installer | GPG Signature
When I try to download this update I get this message:

Is this because of the security issue??
Thanks
Murray

Ekopalypse

@Murray-Sobol-1 said in Notepad++ v8.8.2 Release:

Is this because of the security issue??

Rather because this binary is not signed.

Murray Sobol 1

@Murray-Sobol-1
I am now able to download the file ( a few hours later) but my virus program (Norton) rejects it.
I have submitted a FALSE positive report to Norton.
Murray

MrGrymReaper

@donho I sent you an email Yesterday which could help with aforementioned issue involving the code signing certificate.

Murray Sobol 1

@Murray-Sobol-1
Good news!! I re-downloaded the update and it installed with no issues!!
Thanks
Murray

donho

FYI, auto-updater has been triggered for this release.

mkupper

Microsoft’s Windows Defender was not allowing the npp.8.8.2.portable.7z file on my machine claiming:
Detected: Trojan:Win32/Suschil!rfn

One puzzle is is that if I expand npp.8.8.2.portable.7z into a folder that a full scan of that folder reports “0 threat(s) found.”

Windows Defender was using 1.431.348.0 created/updated on 07/02/2025 6:13 AM. I checked for updates and got 1.431.355.0 created/updated on 07/02/2025 11:10 AM. I re-ran the scanner and it reports no threats found.

I assume this is not related to the code signing issue as I assume Windows Defender would still detect viruses in and and quarantine signed files.

I’m guessing it was a false positive from Windows Defender’s 1.431.348.0 package that Microsoft has since fixed.

gdriggs

SignPath offers free code signing for open source projects: https://about.signpath.io/product/open-source

PeterJones

@gdriggs ,

SignPath was already suggested and rejected here, because the SignPath-based certificate would not bear the name “Notepad++”, whereas the self-signed certificate used for v8.8.3 release does use the name “Notepad++”.

donho

SignPath was already suggested and rejected here, because the SignPath-based certificate would not bear the name “Notepad++”, whereas the self-signed certificate used for v8.8.3 release does use the name “Notepad++”.

To clarify the situation, my clear preference is for the name Notepad++, as it aligns with the branding and ensures continuity of the project’s identity.

I avoid my personal name as signer because Notepad++ is a community project, I want its signature to remain separate from my individual identity - signing the release binaries under someone else’s name or a different brand would be an absurd option for me.

Both the brand name Notepad++ and the domain name notepad-plus-plus.org are acceptable. Since I own the domain name, it may be less challenging to validate.

FYI, DigiCert refused to issue a code signing certificate under the domain name notepad-plus-plus.org today.

If you know of any CA that can provide such a certificate, please let us know. If you’re having problem to create an account on the forum, feel free to cantact me via email: don.h@free.fr.

Craig Harbison

I have both 8.8.2 and 8.8.3 versions.
they both work fine on my Win10 laptop but neither will read or let me edit my json files on my new Win11 laptop.

Really sucks.

PeterJones

@Craig-Harbison said in Notepad++ v8.8.2 Release:

I have both 8.8.2 and 8.8.3 versions.
they both work fine on my Win10 laptop but neither will read or let me edit my json files on my new Win11 laptop.

Really sucks.

I can read and edit JSON just fine with both those versions. I doubt it’s a regression, but we can help you investigate what’s going wrong for you if you start a new Topic to discuss it. If it does end up finding a problem with Notepad++, we can then direct you to the right location to inform the developer.

If you really want help figuring out your problem, please go to the Help Wanted category, click New Topic, and write a detailed post: list your exact steps for how you are trying to read or edit JSON (ie, how you are opening the files, where the files are located, whether on your local drive, a USB drive, a network drive, etc) and what messages or circumstances indicate to you that the JSON file is not being read or edited? Please also go to your ? menu on the right of the Notepad++ menu bar, and click Debug Info, and Copy debug info to clipboard, and paste that in your new topic.