Weblate - Package Updates
-
[1.28.0]
- Update weblate to 5.11
- Full Changelog
- Added GET /api/units/(int:id)/translations/ to retrieve a list of all target translation units for the given source translation unit.
- Added DELETE /api/groups/(int:id)/roles/(int:role_id) to delete a role from a group.
- Webhook are now available as a add-on.
- Automattic components formatting check to validate placeholders in Automattic components.
- Inherited flags can now be discarded, see Customizing behavior using flags.
- Secondary languages can now be specified in Project configuration and Component configuration.
- Source strings for the machine translation can now be customized.
- Security: Cloning a component could leak component configuration into the URL (CVE-2025-32021).
- Fixed captcha verification when some time zone was configured.
- Improved translation propagation performance.
-
[1.29.0]
- Update weblate to 5.11.1
- Full Changelog
- Project level backups now include teams and categories.
- GitLab merge requests integration now detects mergerequest conflicts more robustly.
- Webhook is now enabled in Docker.
- Removing pending glossary terms.
-
[1.29.1]
- Update weblate to 5.11.3
- Full Changelog
-
[1.29.2]
- Update weblate to 5.11.4
- Full Changelog
- Webhook logs requests and responses.
- Webhook was not triggered in some situations.
-
[1.30.0]
- Update weblate to 5.12.1
- Full Changelog
- Added POST /api/units/(int:id)/comments/ to create a new comment for the given translation unit.
- Customize JSON output now has a configurable compact mode.
- Added Nonstandard characters in Kabyle quality check.
- Software Bill of Material is now being provided for Weblate.
- Added support for Compose Multiplatform resources.
- Added Translation Coordinator role.
- Slack Webhooks is now available as an add-on.
- Added GET /api/users/(str:username)/contributions/ to retrieve a list of all translations contributed by the user.
- Dashboard translations ordering when paginating.
- Honor DeepL API Free glossary limits in DeepL.
-
[1.30.1]
- Update weblate to 5.12.2
- Full Changelog
- DeepL integration now supports using next-gen LLM model.
- Restoring Project level backups with votes.
- Improved error handling in Apertium APy.
-
[1.31.0]
- Update weblate to 5.13
- Full Changelog
-
[1.32.0]
- Update weblate to 5.13.2
- Full Changelog
- Error reporting upon validation of the file upload method.
- Detailed language information in new language notifications.
- Sign-in could not be completed with LDAP.
- Nonspacing mark changes highlighting in history.
- Smarter retries of unwritable pending changes.
- Failed Two-factor authentication is visible in Audit log.
- Sign-in form not shown for LDAP.
- Access control for GET /api/users/(str:username)/.
- Inconsistent reStructuredText allows translatable reference names.
- File format parameters were not properly applied in some situations.
-
[1.32.1]
- Update weblate to 5.13.3
- Full Changelog
- Text on the registration page informs about possible use of users data in more detail.
- Clarified account removal view.
- Components pagination.
- Project level backups with same named components in different categories.
- Source string location display.
- Correctly track team adding via invitation in Audit log.
- Add missing languages no longer includes shared component languages.
- Azure DevOps pull requests API URL parsing.
-
[1.33.0]
- Update weblate to 5.14
- Full Changelog
- Flag updated translations from repository as Needs editing is now available as an add-on.
- DELETE /api/projects/(string:project)/labels/(int:label_id)/.
- Added multivalue CSV in Downloading translations for multivalue formats.
- New global permissions have been added to control viewing teams, users and roles without edit rights, see List of privileges.
- New
unit.bulk_editpermission for bulk editing operations, replacing the overloaded use oftranslation.autopermission, see List of privileges. - Searching for DATETIME fields.
- Last changed lookup in Searching for strings.
- Localization Threat Model documentation.
- Do not show glossary matches component setting.
- Screenshots now can be uploaded from a URL, see Visual context for strings.
-
[1.34.0]
- Update weblate to 5.14.1
- Full Changelog
- String context are now tracked in changes histoy and displayed when available.
- ICU MessageFormat correctly handles implicit plurals.
- Avoid storing inviting user information in the invited user audit log (CVE 2025-64326 / GHSA-gr35-vpx2-qxhc).
- Omit admin IP address from audit log.
- Counting outgoing commits in the repository status.
- Listing of other translations.
- Commit Policy could miss some changes in certain situations.
-
[1.34.1]
- Update weblate to 5.14.2
- Full Changelog
- Performance when adding strings.
- Adding terms to glossary was not working in some situations.
-
[1.34.2]
- Update weblate to 5.14.3
- Full Changelog
-
[1.35.0]
- Update weblate to 5.15
- Full Changelog
- Batch automatic translation can now be manually triggered at project language, category or component level, see Automatic translation.
- Added ability to completely disable the admin contact form by setting CONTACT_FORM to
"disabled". - Added new Ollama machinery tool for local Ollama AI model integration, see Ollama.
- Added GET /api/units/(int:id)/comments/ to get a list of comments for the given translation unit.
- Memory contents imported from TMX files include string context.
- XLIFF 2.0, Nextcloud Apps JSON files, JavaScript Resource Files (RESJSON), and TOML are now supported file formats.
- Fedora Messaging integration is now available as add-on.
- Added Laravel format quality check.
- Improper invitation validation upon accepting (CVE 2025-64725 / GHSA-m6hq-f4w9-qrjj).
- Server-Side Request Forgery while cloning repository (CVE 2025-66407 / GHSA-hfpv-mc5v-p9mm).
-
[1.36.0]
- Update weblate to 5.15.1
- Full Changelog
- Added GET /api/projects/(string:project)/languages/(string:language_code)/file/ to download a ZIP file of all component translations of a project for a specified language.
- Updated list of OpenAI models.
- Added Migrating to Weblate guide to help users migrate from other localization platforms.
- Gracefully handle unreachable authentication providers.
- Update language definitions to CLDR 48.
- Git config file overwrite remote code execution (CVE 2025-68398 / GHSA-8vcg-cfxj-p5m3).
- Arbitrary file read via symbolic links (CVE 2025-68279 / GHSA-g925-f788-4jh7).
- Locking error that prevented updating linked components.
- Invitations on sites with required authentication.
-
[1.36.1]
- Update weblate to 5.15.2
- Full Changelog
- Statistics generator is now triggered upon installation.
- Screenshots updated from the repository have proper history.
- reStructuredText syntax error now reports unintended list conversion.
- Unchanged translation check ignores AsciiDoc source code blocks.
- Information leak via screenshots (CVE 2026-21889 / GHSA-3g2f-4rjg-9385).
- Explanation sync in TermBase eXchange format.
- User interface fixes.
- Clarified needs editing/checking/rewriting states.
- Automatically translated flag with bulk approvals.
- GitHub forks no longer trigger actions.
