Issues

• Web Push: a notification cannot link anywhere but the root — and the only way around it is replacing Vaadin's whole service worker

  vaadin/flow#26891 · Filter by author mstahv opened on Nov 6, 2026
  1

• Favicon request below a context path still creates a session

  vaadin/flow#26887 · Filter by author mcollovati opened on Nov 6, 2026
  1

• Put @EventData values that are not property paths into the bundle

  csp
  vaadin/flow#26881 · Filter by author mcollovati opened on Nov 6, 2026
  1

• Gradle: vaadinBuildFrontend serves a stale bundle when declared JavaScript in a dependency jar changes but the jar size does not

  buggradleImpact: LowSeverity: Minor
  Bug

  vaadin/flow#26862 · Filter by author mcollovati opened on Nov 5, 2026
  1

• [aw] Diagram Bot failed

  agentic-workflows
  vaadin/flow#26860 · Filter by author github-actions opened on Nov 5, 2026
  1

• TransferProgressAwareHandler.uiAccess throws UIDetachedException if the UI was closed during the transfer

  bugImpact: LowSeverity: Minorworkaround
  Bug

  vaadin/flow#26848 · Filter by author MarioTrappein opened on Nov 4, 2026
  4

• Push: "Failed to cancel resource" ERROR with IllegalStateException [TEXT_FULL_WRITING] when client closes WebSocket during async write

  bugImpact: LowpushSeverity: Minor
  Bug

  vaadin/flow#26847 · Filter by author MarioTrappein opened on Nov 4, 2026
  4

• NPE in AtmosphereRequestImpl.getSession during PushHandler.connectionLost (race when the push connection is closed)

  bugImpact: LowpushSeverity: Minor
  Bug

  vaadin/flow#26846 · Filter by author MarioTrappein opened on Nov 4, 2026
  3

• Add @JsReturnsFunction for JsFunction snippets that return the function itself

  csp
  Feature

  vaadin/flow#26834 · Filter by author totally-not-ai opened on Nov 3, 2026
  2

• HasValidation.bindErrorMessage(Signal<String>): one-way, and null means valid

  needs designsignals
  Feature

  vaadin/flow#26829 · Filter by author peholmst opened on Nov 2, 2026
  1

• Loading indicator not displayed for requests run via keyboard shortcuts

  bugImpact: HighregressionSeverity: Minor
  Bug

  vaadin/flow#26821 · Filter by author mpschweizer opened on Nov 2, 2026
  3

• vaadin-spring: @RouteScope beans are shared by all UIs with the same window.name (Spring twin of vaadin/cdi#526)

  bugImpact: LowSeverity: Majorspring
  Bug

  vaadin/flow#26820 · Filter by author DzmitryZaitsauIG opened on Nov 2, 2026
  3

• [aw] Failed jobs: Documentation Bot

  agentic-workflows
  vaadin/flow#26812 · Filter by author github-actions opened on Nov 2, 2026
  1

• [aw] Documentation Bot failed

  agentic-workflows
  vaadin/flow#26811 · Filter by author github-actions opened on Nov 2, 2026
  1

• Provide a NativeForm component (e.g. for custom login views)

  components
  Feature

  vaadin/flow#26803 · Filter by author stefanuebe opened on Nov 2, 2026
  5

• Document how to add JSpecify nullability annotations to existing public API

  documentation
  Task

  vaadin/flow#26792 · Filter by author totally-not-ai opened on Nov 2, 2026
  1

• Run the project's tests from the dev loop without restarting the app

  development modeDXneeds design
  Feature

  vaadin/flow#26783 · Filter by author peholmst opened on Oct 31, 2026
  1

• Dev Loop: status (or any command) spawns the daemon and locks the env, causing surprises

  development modeDXImpact: Low
  Bug

  vaadin/flow#26781 · Filter by author emarc opened on Oct 30, 2026
  4

• Add Support for relative URLs in Vaadin-Refresh

  documentation
  Task

  vaadin/flow#26780 · Filter by author knoobie opened on Oct 30, 2026
  5

• addEventData(Class) and addEventDetail(Class) ignore Jackson annotations such as @JsonProperty

  Impact: Lowneeds designSeverity: Minor
  Bug

  vaadin/flow#26733 · Filter by author mcollovati opened on Oct 28, 2026
  1

• Send the policy as Content-Security-Policy-Report-Only in csp warn mode

  csp
  Feature

  vaadin/flow#26696 · Filter by author totally-not-ai opened on Oct 27, 2026
  1

• First navigation into a Flow route from the client router reports PAGE_LOAD instead of the link trigger

  Impact: LowroutingSeverity: Minor
  Bug

  vaadin/flow#26691 · Filter by author totally-not-ai opened on Oct 27, 2026
  2

• Integrate the strict csp mode with Spring Security CSP headers

  cspneeds designspring
  Task

  vaadin/flow#26688 · Filter by author totally-not-ai opened on Oct 26, 2026
  1

• Provide events for connection status changes (push transport fallback, push connect/disconnect, online/offline)

  needs designpush
  Feature

  vaadin/flow#26680 · Filter by author totally-not-ai opened on Oct 26, 2026
  1

• Declare trigger API and element initializer JavaScript as snippets

  cspinternal improvement
  Task

  vaadin/flow#26668 · Filter by author totally-not-ai opened on Oct 24, 2026
  5