Releases: wekan/wekan
v8.03
v8.02
This release adds the following new features:
- Run database migrations when opening board. Not when upgrading WeKan.
Thanks to xet7. - Added Cron Manager to Admin Panel for long running jobs, like running migrations when opening board, copying or moving boards swimlanes lists cards etc.
Thanks to xet7. - If there is no cron jobs running, run migrations for boards that have not been opened yet.
Thanks to xet7. - Accessibility improvements.
Thanks to xet7. - Change list width by dragging between lists.
Thanks to xet7.
and adds the following updates:
- Updated dependencies.
Thanks to developers of dependencies.
and fixes the following bugs:
- Fixes to make board showing correctly.
Thanks to xet7. - Fix opening sidebar.
Thanks to xet7. - Fix Admin Panel menus "Attachment Settings" and "Cron Settings" and make them translateable.
Thanks to xet7. - Change Admin Panel "Attachment Settings" and "Cron Settings" options to be tabs, not submenu.
Part 1,
Part 2,
Part 3.
Thanks to xet7. - Fixed Error in migrate-lists-to-per-swimlane migration.
Thanks to xet7. - Fix Admin Panel Settings menu to show Attachments and Cron options correctly.
Part 1,
Part 2. - Fixed migrations.
Thanks to xet7. - Removed not needed console log message.
Thanks to xet7. - Updated mobile Bookmarks/Starred boards. Part 1. In Progress.
Thanks to xet7. - Fix drag drop reorder swimlanes.
Thanks to xet7. - Try to fix swimlane hamburger menu popup positioning. In progress.
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for their translations.
v8.01
This release adds the following new features:
- Made possible to start WeKan immediately without running any database migrations.
Thanks to xet7. - Add support for MongoDB 3-8 client, detecting which one is in use.
Thanks to xet7. - Add support for Snap MongoDB Server 3-8 support. Part 1.
Thanks to xet7. - Added attachments API and admin panel attachment management for file storage backends settings. Fixed drag drop upload attachments from file manager to minicard or opened card.
Thanks to xet7.
and fixes the following bugs:
- Fixed attachments migrations at Admin Panel to not use too much CPU while migrating attachments.
Thanks to xet7. - Fixed per-card and per-board settings of showing checkist at minicard.
Thanks to xet7. - Fix count of Orgs Teams People at Admin Panel.
Thanks to xet7. - Fixed attachments and minicard related bugs that prevented WeKan starting.
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for their translations.
v8.00
This release adds the following new features:
- Snap: Migrate MongoDB from 3 to 7 only when "snap set wekan migrate-mongodb='true'". Not automatically.
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for their translations.
v7.99
This release fixed the following bugs:
- Improve automatic Snap upgrades.
Thanks to xet7. - Also includes new security fixes that were mentioned at changelog of WeKan v7.98 but not included to release builds of v7.98.
Thanks to above GitHub users for their contributions and translators for their translations.
v7.98
This release adds the following CRITICAL SECURITY FIXES:
- Security Fix: IDOR CWE-639 that affected WeKan 7.80-7.93.
Thanks to Romain Korpas at apitech.fr and xet7. - Security Fix: Computational Resource Abuse in Export endpoints.
Thanks to Anynymous Security Researcher and xet7. - Security Fix FG-VD-22-078: Prevent SVG Billion Laughs Attack.
Thanks to Nguyen Thanh Nguyen of Fortinet's FortiGuard Labs and xet7. - Security Fix JVN#14269684: Broken access control.
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7. - Security Fix JVN#74210258: Stored XSS.
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7. - Security Fix JVN#86586539: Stored XSS.
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7. - Security Fix usd-2022-0041: CWE-284 Improper Access Control.
Thanks to Christian Pöschl of usd AG and xet7.
and adds the following new features:
- Mobile one board per row. Board zoom size percent. Board toggle mobile/desktop mode. In Progress.
Thanks to xet7. - [Drag any files from file manager to minicard or opened card.
Part 1,
Part 2.
Thanks to xet7. - Use attachments from old CollectionFS database structure, when not yet migrated to Meteor-Files/ostrio-files, without needing to migrate database structure.
Thanks to xet7. - Show console.log 'Legacy attachments route loaded' only when environment variable DEBUG=true.
Thanks to xet7. - Make possible for lists to have different names at different swimlanes. Make possible to drag list from one swimlane to another swimlane.
Thanks to xet7. - Add support for Docker/Compose Secrets for passwords to Docker/Snap/Bundle platforms.
Thanks to Roemer and xet7. - Add Snap automatic upgrades.
Part 1,
Part 2.
Thanks to xet7.
and fixes the following bugs:
- Fix DOMPurify paths.
Part 1,
Part 2,
Part 3,
Part 4.
Thanks to xet7. - Fix sizes of drag handles at desktop mode.
Thanks to xet7. - Fixed showing translations always, regardsless of is ROOT_URL set correctly or not.
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for their translations.
v7.97
This release fixes the following bugs:
- Fixed Collapse button not there when using clearlight board theme.
Thanks to seve12. - Fixed translation of "Change Language" at login page.
Thanks to xet7. - Some mobile and tablet fixes. Show drag handles at touch screens only. No toggle of drag handles anymore.
Thanks to xet7. - Removed white box that appeared when clicking something.
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for their translations.
v7.96
This release adds the following updates:
- Updated release script for new command of uploading snap package to Snap Store.
Thanks to xet7. - Updated to MongoDB 7.0.25 at Snap Candidate.
Thanks to MongoDB developers.
and fixes the following bugs:
- Added missing mobile drag drop image to docs from wekan.github.io git history.
Thanks to xet7. - Fix links in docker-compose.yml to point to doc in repo.
Thanks to Skylark13. - Fixed find.sh script errors about unmatched single quotes and binary files that are now ignored.
Thanks to xet7. - Fixed links at docs.
Thanks to xet7. - Added missing screenshots from wekan.github.io history to wekan/docs/Features/.
Thanks to xet7. - Some accessibility, saving, downloading and editor fixes.
Thanks to seve12. - Hide extra keyboard shortcuts toggle.
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for their translations.
v7.95
This release adds the following updates:
- Updated upgrade link at repo readme.
Thanks to xet7. - Fixed image link at docs.
Thanks to xet7. - More info about ToroDB, FerretDB, Turso, TigerBeetle, PostgreSQL, SQLite etc.
Thanks to xet7. - Added missing image to WeKan Multiverse page.
Thanks to xet7. - Added more info to Windows Offline docs about WRITABLE_PATH and ATTACHMENTS_STORE_PATH.
Thanks to sowwos. - Added PGP public key for sending encrypted email.
Thanks to xet7. - Updated dependencies.
Thanks to developers of dependencies. - Replace bitnami mongodb Helm chart by groundhog2k one.
Thanks to ariep.
Thanks to above GitHub users for their contributions and translators for their translations.
v7.94
This release adds the following new features:
- Feature: Accessibility page at /accessibility. Settings at Admin Panel. When enabled, link at right sidebar.
Thanks to xet7. - Feature: Added brute force login protection settings to Admin Panel/People/Locked Users.
Added filtering of Admin Panel/People/People: All Users/Locked Users Only/Active/Not Active.
Added visual indicators: red lock icon for locked users, green check for active users, and red X for inactive users.
Added "Unlock All" button to quickly unlock all brute force locked users.
Added ability to toggle user active status directly from the People page.
Moved lockout settings from environment variables to database so admins can configure the lockout thresholds directly in the UI.
Thanks to xet7. - Added docs for Windows SSL/TLS.
Part 1,
Part 2,
Part 3,
Part 4,
Part 5,
Part 6.
Thanks to xet7.
and adds the following updates:
- Update CHANGELOG.md platforms info at top.
Part 1,
Part 2,
Part 3,
Part 4,
Part 5,
Part 6,
Part 7,
Part 8. - Updated security email address.
Thanks to xet7. - Updated GitHub Docker Actions.
Part 1,
Part 2,
Part 3,
Part 4.
Thanks to Dependabot. - Added info about Sandstorm Radicale Calendar and Contacts.
Thanks to xet7. - Updated dependencies.
Thanks to developers of dependencies. - Reorganized Design Docs.
Part 1,
Part 2.
Thanks to xet7. - Added related link to design docs.
Thanks to xet7. - Upgraded to MongoDB 7.0.23 at Snap Candidate.
Thanks to MongoDB developers.
and fixes the following bugs:
- Fixes for building at macOS.
Thanks to xet7. - Improves accessibility by disabling custom Tab handling.
Thanks to seve12, co-maintainer of WeKan. - Comment out not used Tab code at accessibility related changes.
Thanks to xet7. - Fixed link at OpenShift docs.
Thanks to xet7. - Added FerretDB/PostgreSQL to changelog.
Thanks to xet7. - Accessibility:
Added product name to page titles, settings and global search.
More accessible header and layout templates, modal dialogs, DOM structure, color contrast.
Thanks to seve12. - Fixed uppercase K of WeKan.
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for their translations.