Changelog

1.4.5 (May 6, 2026)

  • Throw custom functions reload errors.

1.4.4 (Apr 25, 2026)

  • Maintenance release.

1.4.3 (Apr 17, 2026)

  • Fixed the static file hashing, which could lead to stale file caching (self-hosting).

1.4.2 (Apr 15, 2026)

  • Bug Fix: Move icons into a dedicated images/icons folder to exclude them from hashing so they can be referenced from the manifest.

1.4.1 (Apr 10, 2026)

  • Bug Fix: Calling await book.flush() could result in PropertyNotLoaded errors.

1.4.0 (Apr 5, 2026)

  • Added support for the new lazy API (xlwings Lite for now only).

1.3.5 (Mar 30, 2026)

  • Bug Fix: Fixed an issue with the Jinja template loader in connection with Starlette 1.0.

1.3.4 (Mar 18, 2026)

  • Improved error with Pyodide loading issues.

1.3.3 (Mar 14, 2026)

  • Improved the Pyodide configuration.

1.3.2 (Mar 13, 2026)

  • Made Pyodide CDN configurable.

1.3.1 (Feb 27, 2026)

  • Maintenance release.

1.3.0 (Feb 16, 2026)

1.2.0 and 1.2.1 (Feb 6, 2026)

  • Added the CLI command xlwings-server add iis, which adds support for deployment on Windows Server.

1.1.1 (Jan 26, 2026)

  • The xlwings-server migrate command now takes over the exact version of the dependencies from the legacy repository.

1.1.0 (Jan 25, 2026)

  • Added the CLI command xlwings-server add docker, which adds a Dockerfile, .dockerignore, and docker-compose.yaml to your project.

  • xlwings-server wasm was renamed to xlwings-server build wasm.

1.0.0 (Jan 22, 2026)

This major release provides xlwings-server as an installable package. See the migration guide for instructions how to upgrade. The minimum supported Python version is now 3.10.

0.12.2 (Jan 7, 2026)

  • Renamed remaining instances of lite into wasm due to rebranding from 0.10.3.

0.12.1 (Jan 6, 2026)

  • Added support for Python 3.14.

  • Fixed error: File not found: requirements-core.in that sometimes occurred with python run.py deps compile.

  • Upgraded dependencies incl. xlwings to 0.33.19.

0.12.0 (Sep 28, 2025)

  • There’s a new setting to set and override headers: XLWINGS_CUSTOM_HEADERS={"name1": "value1", "name2": "value2"}

  • The extensionBundle version for Azure functions has been updated in host.json from "version": "[2.*, 3.0.0)" to "version": "[4.*, 5.0.0)".

  • Breaking change: The setting XLWINGS_ADD_SECURITY_HEADERS doesn’t set the CSP header anymore. If you want the CSP header, add it via XLWINGS_CUSTOM_HEADERS.

  • Upgraded dependencies.

0.11.3 (Aug 5, 2025)

  • Enhanced the Task pane auth sample

  • Better logging for authorization issues

  • Turned main.js into a ES Module

  • Upgraded dependencies.

0.11.2 (Jul 10, 2025)

  • Make custom function retries configurable via XLWINGS_CUSTOM_FUNCTIONS_MAX_RETRIES (new default: 3, old default: 5) and XLWINGS_CUSTOM_FUNCTIONS_RETRY_CODES (new default: [500, 502, 504], old default: all error HTTP codes), see .env.template.

  • Added docs showing how to disable ribbon buttons during a request.

  • Improved docs for Azure Functions with regard to Azure devops and GitHub actions pipelines.

  • Bug Fix: The callback argument of app.alert has been fixed and the examples now show how to use it.

  • Upgraded dependencies incl. xlwings to 0.33.15.

0.11.1 (May 29, 2025)

  • Support multiple authentication providers. If you use a custom globalThis.getAuth in xlwings_server/static/js/auth.js, you will need to update it.

  • Enhanced NumPy serializer to respect dtype.

  • Bug fix: Fixed app.macro().

0.11.0 (May 3, 2025)

  • Simplified configuration for custom scripts via @script decorator instead of xw-config in HTML, see Configuration

  • Bug Fix: The .gitattributes setup so that changes to requirements-core.txt are pulled in.

  • Upgraded dependencies incl. xlwings to 0.33.14.

  • Breaking change: XLWINGS_CORS_ALLOW_ORIGINS now defaults to []. If you use the Office Scripts integration or custom functions with Excel on the web, you need to set this to [“*”].

  • Breaking change: The runPython call has to be changed when calling it directly from Office.js ribbon buttons, see Run Custom Scripts

0.10.11 (Apr 21, 2025)

  • Bug fix: don’t initialize buttons with the xw-click tag multiple times when using htmx (introduced with 0.10.9).

0.10.10 (Apr 17, 2025)

  • Range.font can now be set (bold, italic, color, size, name).

  • Polars DataFrame adn Series are now supported via native converter.

  • The add-in now shows an error message on versions of Excel that use an unsupported browser runtime.

  • Images aren’t selected anymore after inserting/updating.

  • Bug fix: Scripts wouldn’t run if e.g., a shape was selected.

  • Bug fix: Range.expand() was stopping at 0 values.

  • Upgraded dependencies incl. xlwings to 0.33.12.

0.10.9 (Apr 9, 2025)

  • Initialize buttons with xw-click when they are loaded via htmx partials.

  • Fix error messages that were showing [object Object].

  • Upgraded dependencies.

0.10.8 (Mar 17, 2025)

  • Enhancements to the pandas serializer used with object handles.

0.10.7 (Mar 14, 2025)

  • Further enhancements to the user model to make it more flexible with and without Entra ID.

0.10.6 (Mar 14, 2025)

  • Enhanced user model that allows the custom implementation of roles and offers the IP address, if available.

  • Make hot reload optional via a new setting XLWINGS_ENABLE_HOTRELOAD=true.

  • Bug fix: The XLWINGS_AUTH_ENTRAID_MULTITENANT was wrong in that true was interpreted as false.

0.10.5 (Mar 7, 2025)

  • Added support for Range.copy_from.

  • Allow dicts with datetime keys to be used with object handles.

  • Bug fix: After adding a sheet, it’s name didn’t appear in book.sheets/sheet_names.

  • Upgraded dependencies incl. xlwings to 0.33.11.

0.10.4 (Feb 26, 2025)

  • Introduced XLWINGS_REQUEST_TIMEOUT env var with a default of 5 minutes. Previously, requests running for longer than 1 minute were timing out on macOS. However, this also means that if you had requests on Windows/Web that were taking longer than 5 minutes, they will now hit a timeout if you don’t change the setting.

  • Various bug fixes.

0.10.3 (Feb 20, 2025)

  • The @script, @func, @ret, and @arg decorators can now be imported directly from xlwings instead of xlwings.server.

  • Rebranding: what was previously introduced as xlwings Lite is now called xlwings Wasm. xlwings Lite is now the official add-in available in the add-in store, which is built on top of xlwings Wasm.

  • There’s a new task pane example showing live form validation with htmx.

  • xlwings Wasm got rid of the PyScript dependency and uses Pyodide directly now.

  • Bug fix: htmx now properly respects the xw-book="true" tag.

  • Bug fix: dates weren’t formatted correctly with scripts.

  • Upgraded dependencies incl. xlwings to 0.33.9.

0.10.2 (Jan 19, 2025)

  • Fixed another issue with multi-range named ranges that caused This operation is not permitted for the current object error.

0.10.1 (Jan 17, 2025)

  • Fixed an issue with sheet-scoped named formulas that were causing the following error message: This operation is not permitted for the current object.

0.10.0 (Jan 9, 2025)

  • Datetime fixes both with custom scripts (day and month were misinterpreted with certain locales) and custom functions (the formatting of dates in custom functions now respects the specific format chosen on the system).

  • Added the -e/--env arg to the wasm CLI command.

  • Upgraded dependencies incl. xlwings to 0.33.6.

0.9.2 (Dec 9, 2024)

  • Custom functions reloading (introduced with 0.9.1) is now only done during development.

  • Fixed an issue with the manifest.xml when there was no function namespace used in the prod environment.

0.9.1 (Dec 8, 2024)

  • Custom functions are now automatically reloaded every time you edit them without having to restart Excel or reloading the add-in.

  • Fixed path handling issues on Windows with run.py CLI and .env. This fixes issues with run.py init, dev server reloading, and loading .env.

  • Office.js API versions are now printed in the dev tools console.

  • Upgraded dependencies.

0.9.0 (Nov 27, 2024)

  • Launched xlwings Wasm, allowing Python-based Office.js add-ins to be deployed as static websites. These add-ins run Python via WebAssembly (Wasm) in the add-in’s browser engine, so Python doesn’t need to be installed on neither the server nor the local machine. Learn more at xlwings Wasm.

  • The XLWINGS_PUBLIC_ADDIN_STORE setting is deprecated in favor of XLWINGS_CDN_OFFICEJS.

  • More script examples: show an error in the task pane and show a Matplotlib plot.

  • Upgraded dependencies incl. xlwings to 0.33.4.

0.8.0 (Nov 8, 2024)

  • The XLWINGS_APP_PATH settings has been improved to be independent of a specific setup of an external service such as nginx.

  • Enhanced TemplateResponse by making the context argument optional and by providing settings behind the scenes.

  • New task pane docs, additionally covering Jinja, Bootstrap, and Alpine.js.

  • Breaking change: If you were using XLWINGS_APP_PATH in connection with nginx, you’ll have to adjust your nginx config in line with nginx/nginx-apppath.conf.

0.7.0 (Oct 29, 2024)

  • The task pane can now interact with the Excel object model via htmx, see the docs.

  • Added a favicon to silence an error in the dev tools console (Windows).

  • Tests now additionally run with Python 3.13.

  • Moved Office.js JavaScript code from xlwings to xlwings-server.

  • Bug fix: Object handles now also work with varargs.

  • Upgraded dependencies.

0.6.3 (Oct 23, 2024)

  • Bug fix: Fixed Jinja templates rendering to ensure content escaping.

0.6.2 (Oct 21, 2024)

  • Function-specific RBAC: you can now use required_roles=["role1", "role2"] inside @script or @func decorators.

  • Code that uses the Alpine.js CSP build can now be registered in a simplified way by calling registerAlpineComponent("name", function). Also added an Alpine.js CSP build example.

  • Bug fix: object handles with 1-dimensional NumPy arrays are now fixed.

  • Bug fix: removed inline style in sample task pane to be CSP header compliant.

  • Upgraded dependencies incl. xlwings to 0.33.3.

0.6.1 (Oct 11, 2024)

  • Enhanced the task pane buttons that use the xw-click tag: they are now disabled and show a spinner while the request is in progress. Also, errors are now shown at the top of the task pane instead of via alert window.

  • Changed the <Version> tag in the manifest to have the format x.x.x.x instead of x.x.x. This might resolve issues with custom functions.

  • Put manifest.xml template on .gitattributes with the git merge strategy ours.

  • Upgraded dependencies incl. xlwings to 0.33.2.

0.6.0 (Oct 1, 2024)

  • Support buttons on sheets with Office.js add-ins.

  • Upgraded dependencies incl. xlwings to 0.33.1.

0.5.6 (Sep 25, 2024)

  • Object handles: added support for nested custom types, e.g., dicts containing pandas DataFrames.

  • Added an example that shows how to handle authentication with the task pane via htmx.

0.5.5 (Sep 23, 2024)

  • Added a button to the default task pane to set up a sheet with custom functions examples.

  • Introduced dedicated docs at https://server.xlwings.org.

  • docker compose up now also works without dev certificates

  • Fixed a CORS issue when using the Office Scripts integration.

  • Upgraded dependencies incl. xlwings to 0.33.0.

0.5.4 (Sep 11, 2024)

  • Fixed security headers so that Windows will show the icons on the ribbon correctly.

  • Made the HTTP port configurable in the default Dockerfile.

  • Upgraded dependencies incl. xlwings to 0.32.2.

0.5.3 (Aug 24, 2024)

  • Avoid merge conflicts in requirements files when merging in upstream.

0.5.2 (Aug 24, 2024)

  • Upstream GitHub Actions pipelines have been disabled on forks.

  • Simplified dependency management by getting rid of separate Windows requirements files.

0.5.1 (Aug 20, 2024)

  • Custom functions and custom scripts can now access the current user object by using a function parameter with the CurrentUser as type hint, see examples.

  • Custom functions now work with thousands of concurrent requests.

  • Upgraded dependencies incl. xlwings to 0.32.1.

0.5.0 (Aug 15, 2024)

  • Added support for object handles: https://docs.xlwings.org/en/latest/pro/server/officejs_custom_functions.html#object-handles

  • Added staging as additional environment name.

  • Dependencies are now split up into requirements-core.in, requirements-dev.in, and requirements.in and managed via python run.py deps, see README.

  • Added docker-compose production configuration under docker directory including Socket.IO and Redis services.

  • More custom function examples.

  • Bug fix: socket.io service now respects the XLWINGS_APP_PATH.

  • Added XLWINGS_SECRET_KEY setting.

  • Upgraded dependencies incl. xlwings to 0.32.0.

0.4.4 (Jul 11, 2024)

  • Fixed an issue with custom functions when using the setting XLWINGS_ENABLE_SOCKETIO=false.

  • Upgraded xlwings to 0.31.10.

0.4.3 (Jul 9, 2024)

  • Fixed utils.trigger_script() to only trigger the script 1x no matter how many times the file is open.

  • There is now an official Docker image available: https://hub.docker.com/repository/deployment/xlwings/xlwings-server

  • Open Office.js alerts are now closed before showing a new alert, which would otherwise cause an error.

  • Custom functions now show errors that happen outside the app, such as timeouts.

  • Upgraded dependencies incl. xlwings to 0.31.9.

0.4.2 (Jul 3, 2024)

  • If you set a valid license key as XLWINGS_DEVELOPER_KEY env var in your build env, building the docker container via docker compose build will automatically install a deploy key inside the container.

  • Fixed an issue when running the app with XLWINGS_ENABLE_EXAMPLES=false.

  • Upgraded dependencies incl. xlwings to 0.31.8.

0.4.1 (Jun 26, 2024)

  • Upgraded xlwings-bootstrap to 5.3.3-1 and xlwings to 0.31.7

0.4.0 (Jun 25, 2024)

  • Breaking change: replaced XLWINGS_ENTRAID_VALIDATE_ISSUER with XLWINGS_AUTH_ENTRAID_MULTITENANT

  • Breaking change: renamed XLWINGS_ENTRAID_CLIENT_ID with XLWINGS_AUTH_ENTRAID_CLIENT_ID and XLWINGS_ENTRAID_TENANT_ID with XLWINGS_AUTH_ENTRAID_TENANT_ID

  • Changed dependencies for validating the Entra ID JWT fro PyJWT to joserfc

  • Allows to provide an own function for retrieving the Entra ID JWKS (JSON Web Key Set), allowing to enable the Entra ID auth functionality on airgapped servers

  • Allow to use multiple auth providers on the backend. This is helpful if you want to use the same backend from Office.js via Entra ID and from Google Sheets via Google OAuth, for example.

  • Enabling auth now requires to set XLWINGS_AUTH_PROVIDERS, e.g., XLWINGS_AUTH_PROVIDERS=["entraid"]

  • Upgraded dependencies incl. xlwings to 0.31.6.

0.3.0 (Jun 18, 2024)

  • Introduced @script decorator and xw-click HTML tag, see app/custom_scripts/examples.py.

  • Introduced xlwings_server.utils.trigger_script() to trigger a custom script from within a custom function, see app/custom_functions/examples.py.

  • Bootstrap can now be disabled via XLWINGS_ENABLE_BOOTSTRAP=false.

  • python run.py now runs locally without certs, which allows it to be used with VBA or Office Scripts (Office.js always require certs).

  • Upgraded dependencies incl. xlwings to 0.31.5.

0.2.0 (Jun 4, 2024)

  • New settings XLWINGS_APP_PATH and XLWINGS_STATIC_URL_PATH that allow to mount the app on a non root-path such as https://my.domain.com/app.

  • New setting XLWINGS_DATE_FORMAT to override/fix the date format in custom functions.

  • Upgraded xlwings to 0.31.4.

0.1.0 (May 27, 2024)

  • First release.