NodeBB - Package Updates

[Package Updates]

[2.19.2]

• Update NodeBB to 4.4.2
• Full Changelog
• add action:post-queue.save
• restrict access to ap.probe method to registered users, add rate limiting protection
• return 200 for non-implemented activities instead of 501
• closes #13458, check if plugin is system
• add try..catch around topics.post in note assertion logic
• don't throw on unknown post on Undo(Like)
• add try..catch wrapper around Announce(Like) call to internal method so as to not return a 500 just drop the Like activity
• browser title translation
• allow guests to load topic tools if they have privilege to view them
• closes #13454, align dropdowns to opposite side on rtl

[Package Updates]

[2.19.3]

• Update NodeBB to 4.4.3
• Full Changelog
• escape, query params (b02eb57)
• closes #13475, don't store escaped username (806e54b)

[Package Updates]

[2.19.4]

• Update NodeBB to 4.4.4
• Full Changelog
• link to post in preview timestamp
• Add live reload functionality with Grunt watch and Socket.IO (#13489)
• closes #13484, post preview changes
• sanitize svg when uploading site-logo, default avatar and og:image
• more edge cases
• #13484, clear tooltip if cursor leaves link

[Package Updates]

[2.20.0]

• checklist added to manifest

[Package Updates]

[2.20.1]

• Update NodeBB to 4.4.5
• Full Changelog
• add filter:post.getDiffs
• clearTimeout if item is evicted from cache
• use sharp to convert svg to png, closes #13534
• use filename to check for svg, tempPath doesn't always have extension
• apply sanitizeSvg to regular uploads and uploads from manage uploads acp page

[Package Updates]

[2.20.2]

• Update NodeBB to 4.4.6
• Full Changelog
• add new brite skin from bootswatch (567ed87)
• pass max-memory expose-gc as process args (d5f57af)

[Package Updates]

[2.21.0]

• Update NodeBB to 4.5.0
• Full Changelog
• use sbd to more intelligently put together a sub-500 character summary based on existing sentences in post content
• add sbd dependency to improve title generation (and for summary generation, later)
• send local posts out to established relays
• relay handshake logic, handle Follow/Accept, send back Accept.
• adding and removing relays from AP settings page in ACP
• apply auto-categorization logic
• ability to add/remove auto-categorization rules for incoming federated content
• re-jigger 'add category' button to allow addition of remote category to main index
• add Urdu localisation, thank you!
• add wordpress

[Package Updates]

[2.21.1]

• Update NodeBB to 4.5.1
• Full Changelog
• use _variables.scss overrides from acp in custom skins and bootswatch skins as well (0c48e0e)
• remove unused dependency (8d7e353)
• remove test for 1b12 announce on topic move (as this no longer occurs) (9221d34)
• use existing id if checkHeader returns false (e699684)
• regression that caused Piefed (or potentially others) content to be dropped on receipt (86d9016)
• remove faulty code that tried to announce a remote object but couldn't as the ID was not a number (7adfe39)

[Package Updates]

[2.21.2]

• Update NodeBB to 4.5.2
• Full Changelog
• add a term param to recent controller so it can be controller without req.query.term
• add a new hook to override generateUrl in navigator.js
• add topic templates per category, closes #13649
• skip header checking during note assertion if test runner is active
• update note assertion topic members check to simpler posts.exists check
• re-jig handling of ap tag values so that only hashtags are considered (not Piefed community tags, etc.)
• missing actor assertion on 1b12 announced upboat
• use parameterized query for key lookup
• add pre-processing step to title generation logic so sbd doesn't fall over so badly
• switch to action

[Package Updates]

[2.22.0]

• Update NodeBB to 4.6.0
• Full Changelog
• ability to nickname remote categories, closes #13677
• allow activities to be addressed to as:Public or Public to be treated as public content
• allow user auto-categorization rule
• add minor pre-processing step to better handle header elements in incoming html
• login handler to handle if non-confirmed email is entered
• allow quote-inline class in mocks sanitizer so quote-post fallback elements can be detected and removed during title generation, fixes #13688
• force outgoing page on direct access to /ap handler
• update outgoing page to match 404 design
• don't begin processing local login if the passed-in username isn't even valid
• #13667, record to instances:lastSeen instead of domains:lastSeen

[Package Updates]

[2.22.1]

• Update NodeBB to 4.6.1
• Full Changelog
• do not include image or icon props if they are falsy values (ecf95d1)
• #13705, don't cover link if preview is opening up (499c50a)
• logic error in image mime type checking (623cec9)
• omg what. (ec39989)

[Package Updates]

[2.22.2]

• Update NodeBB to 4.6.2
• Full Changelog
• #13779, svg uploads
• #13776, if plugin is in install/package.json use latest version from there
• category labels showing up on infinite scroll on category page
• crash in resolveInboxes
• log out user if session cookie resolves to non-existent uid
• make i18n test failure message easier to read
• wrong auto-categorization if group actor is explicitly included in audience
• order of operations when updating category handle
• closes #13729, fix filename encoding

[Package Updates]

[2.22.3]

• Update NodeBB to 4.6.3
• Full Changelog
• update validator dep. to get fix for CVE-2025-56200 (af477d0)
• missing logic in mocks.notes.private that precluded the use of emoji (76a07d5)
• tiny fix for IS when page is empty (12dab84)

[Package Updates]

[2.23.0]

• Update NodeBB to 4.7.0
• Full Changelog
• federate out undo(announce) when moving topics (832477f)
• native image appending for remote private notes (822f4ed)
• add isNumber to client-side helpers (172aabc)
• handle Move(Context) activity (8ca52c7)
• update Remove(Context) to use target instead of origin, federate out Move(Context) on topic move between local cids (d02e188)
• context removal logic (aka moving topics to uncategorized, and federating this to other NodeBBs) (34e95e6)
• add new setting to control posts uploads being shown as thumbs (97e59fb)
• handle Delete(Context) as a move to cid -1 if the remote context still exists (f98a721)

[Package Updates]

[2.23.1]

• Update NodeBB to 4.7.1
• Full Changelog
• stop extraneous vote and tids_read data from being saved for remote users (9f72996)
• add hreflang to buildLinkTag (ba85474)
• #​13790, allow ssl setup in psql (5bd1f7b)
• wrong increment value (b1fc5bf)
• increment progress on upgrade script (9f94a72)
• disallow inline viewing of unsafe files (#​13833) (5ae8d55)
• moving topic to cid=-1 will remove it from list (90a1513)
• show errors when saving settings (f49f540)
• closes #​13666, update category label (193aaf5)
• respect user pagination settings in infinite scroll (#​13765) (#​13788) (ebf2a2c)

[Package Updates]

[2.23.2]

• Update NodeBB to 4.7.2
• Full Changelog
• update data-isowner when changing is ownership (1f9f2df)
• bump 2factor (d031371)

[Package Updates]

[2.24.0]

• Update NodeBB to 4.8.0
• Full Changelog
• user crossposts federate as:Announce
• add missing files, minor changes to crossposts list modal
• introduce new front-end UI button for cross-posting, hide move on topics in remote cids
• disallow moving topics to and from remote categories, + basic tests for topic moving
• API v3 calls to crosspost and uncrosspost a topic to and from a category
• refactor out.announce.topic to allow user announces, refactor tests to accommodate
• stop extraneous vote and tids_read data from being saved for remote users
• support remote Dislike activity, federate out a Dislike on downvote, bwahahah
• expand postingRestrictedToMods mask testing, handle actor update for that prop
• setAddBulk (#13805)

[Package Updates]

[2.24.1]

• Update NodeBB to 4.8.1
• Full Changelog
• upgrade script to handle topics that were already pruned (03b7374)
• closes #​13899 (f98de3e)
• #​10682, fix all the other rss routes as well (385a4d0)
• protocol (da5605e)
• closes #​12986 (310e90c)
• #​13919 (b2c6fbe)
• use min (090b9f5)
• #​13918, make arrayLimit configurable increase default to 50 (d25e772)
• closes #​13258, dont mark digest as delivered if it fails (f29c9f0)
• wrap fields in quotes in user csv export (1b08aef)

[Package Updates]

[2.25.0]

• Update NodeBB to 4.9.0
• Full Changelog
• support the magic break string '' in content, such that if found, outbound federation will use all content up to (and including) that string in its summary (cd357aa)
• add a '[...]' to the end of the generated summary when federating out articles (fep-b2b8) (bf0f522)
• prune topics remote cids, closes #​13461 (20eb02f)
• change notif controls to toggles (523e3b4)
• add invitedBy to user info page, closes #​13972, closes #​13997 (1dae3d2)
• quick create on world page (5df2b8b)
• allow configuring unreadCutoff per user, closes #​6811 (8c6ce19)
• introduce new topics:crosspost privilege (5c35dc8)
• add guest-cta.tpl and lang strings (9da6747)
• track all caches created in acp (9ac507e)

[Package Updates]

[2.25.1]

• Update NodeBB to 4.9.1
• Full Changelog
• allow callers to parse topic teasers (92c0bd8)
• #​14032, fix regression in room creation (2d49da7)
• parent cid (04477f0)
• ordering nested categories (a1b77fa)
• text-nowrap on timestamps (117ae6a)
• fullscreen acp graphs (f1fa8f1)
• skip parsing of duplicate emoji tags (6f12916)