Notepad++ v8.9.2 release - Double‑Lock Update Security - Mander

> Notepad++ v8.9.2 new security enhancements, feature, regression fix & bug-fix: > > - Security enhancement: Make updater check interity & authenticity of server-returned XML (XMLDsig). (Implement #17441 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17441]) > - Security enhancement: Fix untrusted search path vulnerability by launching explorer.exe (Fix CVE-2026-25926 [https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-rjvm-fcxw-2jxq]) > - Security enhancement: Make auto-updater (WinGUp) even more secured. (Remove unsecured options [https://github.com/notepad-plus-plus/wingup/commit/14b6a1a5444ad68c78db009128c6f759f1871ed3], remove dll dependency [https://github.com/notepad-plus-plus/wingup/commit/c172e6874551d02814e1474cc6662fd4c9bd8eb2], launch only signed program for plugin management [https://github.com/notepad-plus-plus/wingup/commit/8894320b18f31ea551ce06406466ac4915683d6c]) > - Fix a plugin installation crash due to incorrect processing catch. (Fix #issue [https://github.com/notepad-plus-plus/nppPluginList/issues/873]) > - Add redact selection feature - Default: █, Modifier (Shift + Click): ●. (Fix #17363 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17363]) > - Fix context menu shortcut localization not aligning to the right regression. (Fix #17467 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17467]) > > Notepad++ v8.9.1 new security enhancement, features, regression fixes & bug-fixes: > > - Fix EOL duplication regression when playing back old recorded macros. (Fix issue [https://community.notepad-plus-plus.org/topic/27339/enter-key-duplicated-in-macros]) > - Remedy search failure for pasted text containing trailing invisible EOL character. (Fix #17124 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17124], #17187 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17187]) > - Fix customized context menu regression where separator (id=“0”) escapes FolderName submenu. (Fix #17342 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17342]) > - Fix issue where a single undo reverted multiple changes after macro execution. (Fix #9426 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/9426]) > - Fix visual glitch when dragging dockable dialogs on a 2nd monitor. (Fix #16805 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/16805], #16155 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/16155], #16077 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/16077]) > - Fix inconsistent automatic search mode switching (RegEx to Extended) in Find dialog. (Fix #17227 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17227]) > - Fix incorrect URL parsing caused by Unicode special spaces. (Fix #16856 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/16856]) > - Update to Boost 1.90.0. (Implement #17326 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17326]) > - Improve update themes feature: fix JavaScript.js edge case. (Fix issue [https://github.com/notepad-plus-plus/notepad-plus-plus/pull/17347#issuecomment-3753234119]) > - Update javascript.js to better match javascript (embedded) in all themes. (Fix issue [https://community.notepad-plus-plus.org/post/104325], report [https://github.com/notepad-plus-plus/notepad-plus-plus/pull/17299#issuecomment-3695060206]) > - Function List: enhance for Perl & PHP; add for Nim. (Fix #17382 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17382], #17327 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17327], implement #17377 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17377]) > - Fix comments and highlighting in TCL. (Fix #17315 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17315]) > - Update perl syntax highliging keywords and autocomplete for 5.42. (Fix #17332 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17332]) > - Improvement: display Find dialog status message with invisible characters warning. (Fix #17345 [https://github.com/notepad-plus-plus/notepad-plus-plus/issues/17345])