Wekan - Package Updates

[Package Updates]

[4.81.0]

• Update wekan to 8.05
• Full Changelog
• Show original positions of swimlanes, lists and cards
• Fix popups issues at Edit Avatar, Archive card confirm, etc.
• Changed wekan-boostrap-datepicker to HTML datepicker
• Replaced moment.js with Javascript date
• Convert Font Awesome to Unicode Icons. Part 1. In Progress
• Resize height of swimlane by dragging. Font Awesome to Unicode icons
• Removed not needed visible text from mobile desktop switch button
• Font Awesome to Unicode icons.

[Package Updates]

[4.82.0]

• Update wekan to 8.06
• Full Changelog
• At Public Board, drag resize list width and swimlane height. For logged in users, fix adding labels
• When opening board, migrate from Shared Lists to Per-Swimlane Lists
• Added Date Format setting to Opened Card
• Fix add and drag drop attachments to minicards and card
• Fix starred, archive and clone icons
• Fix Due dates to be color coded and have unicode icons.
• Fix unable to see My Due Cards
• Fix drag drop lists.
• Removed extra pipe characters
• Fix syntax error at migrations

[Package Updates]

[4.83.0]

• Update wekan to 8.07
• Full Changelog
• This release fixes the following bugs:
• Fix Snap Candidate WeKan 8.00-8.06 commit ae01ea5 database directory from /var/snap/wekan/common/wekan back to 8.07 /var/snap/wekan/common.
• When opening board, add missing lists.
• If Snap Candidate MongoDB raw database files were at SNAP_COMMON/wekan, migrate them back to SNAP_COMMON.

[Package Updates]

[4.84.0]

• Update wekan to 8.08
• Full Changelog
• Fix opening board migration of Shared Lists to Per-Swimlane lists to use ReactiveCache correctly without errors

[Package Updates]

[4.85.0]

• Update wekan to 8.11
• Full Changelog
• Fix duplicated lists.
• Prevent opened board re-migrating and reloading every 5 seconds.
• Fix Admin Panel / People editing and layout.

[Package Updates]

[4.86.0]

• Update wekan to 8.14
• Full Changelog
• Fix board reloading page every second.
• Fix Regression - unable to view cards by due date v8.11.
• Fix Regression - unable to rearrange tasks within a checklist - v8.11.
• Fix unable to add members to board.
• Removed not needed | at left side of minicard badges.
• Fix opened card Date Format to be used at dates popups.
• Fix UI issues of Right Sidebar / Subtasks Settings and Card Settings.

[Package Updates]

[4.87.0]

• Update wekan to 8.15
• Full Changelog
• Fix drag lists did not work

[Package Updates]

[4.88.0]

• Update wekan to 8.16
• Full Changelog
• Fix SECURITY ISSUE 1: File Attachments enables stored XSS (High) Thanks to Siam Thanat Hack (STH) and xet7.
• Fix SECURITY ISSUE 2: Access to boards of any Orgs/Teams, and avatar permissions Thanks to Siam Thanat Hack (STH) and xet7.
• Fix SECURITY ISSUE 3: Unauthenticated (or any) user can update board sort Thanks to Siam Thanat Hack (STH) and xet7.
• Fix SECURITY ISSUE 4: Members can forge others votes (Low). Bonus: Similar fixes to planning poker too done by xet7 Thanks to Siam Thanat Hack (STH) and xet7.
• Fix SECURITY ISSUE 5: Attachment API uses bearer value as userId and DoS (Low) Thanks to Siam Thanat Hack (STH) and xet7.
• List menu / More / Delete duplicate lists that do not have any cards Thanks to xet7.
• Disabled migrations that happen when opening board. Defaulting to per-swimlane lists and drag drop list to same or different swimlane Thanks to xet7.
• Fix changing swimlane color to not reload webpage Thanks to xet7.

[Package Updates]

[4.89.0]

• Update wekan to 8.17
• Full Changelog
• Feature: Workspaces, at All Boards page. Thanks to xet7.
• Fix 8.16: Switching Board View fails with 403 error. Thanks to xet7.
• Moved migrations from opening board to right sidebar / Migrations. Thanks to xet7.
• Fix 8.16 Lists with no items are deleted every time when board is opened. Moved migrations to right sidebar. Thanks to xet7.
• Remove old translations and code not in use anymore. Thanks to xet7.
• Fixed sidebar migrations to be per-board, not global. Clarified translations. Thanks to xet7.
• Fix star board. Thanks to xet7.
• Fix Card emoji issues. Thanks to xet7.
• Try to fix Edit Custom Fields button not working. Removed duplicate option from Boards Settings. Thanks to xet7.
• Fix Regression - calendar popup to set due date has gone. Thanks to xet7.

[jayonrails]

having installed 8.08, update to 4.85.0 is not working; I don't get displayed any newer version. any other persons having these issues?

[Package Updates]

[4.90.0]

• Update wekan to 8.18
• Full Changelog
• Gantt chart view to one board view menu Swimlanes/Lists/Calendar/Gantt.
• Number of cards per list and sum of custom number field in list head.
• New Board Permissions: NormalAssignedOnly, CommentAssignedOnly, ReadOnly, ReadAssignedOnly.
• More translations. Added support page to Admin Panel / Settings / Layout.
• Right top User Settings / Grey Icons. Also fixed Change Language popup.
• Collapse Swimlane, List, Opened Card. Opened Card window X and Y position can be moved freely from drag handle. Fix some dragging not possible. Fix iPhone Safari.
• Per-User and Board-level data save fixes. Per-User is collapse, width, height. Per-Board is Swimlanes, Lists, Cards etc.
• Fix Broken Strikethroughs in Markdown to HTML conversion.
• Fix checklist delete action (issue #​6020), link-card popup defaults, and stabilize due-cards ordering.

[Package Updates]

[4.91.0]

• Update wekan to 8.19
• Full Changelog
• Security Fix 1: IDOR in setCreateTranslation. Non-admin could change Custom Translation
• Security Fix 2: Private-only board setting can be bypassed
• Security Fix 3: Card comment author spoofing (IDOR) via API
• Security Fix 4: Cross-board card move without destination authorization
• Security Fix 5: Read-only roles can still update cards
• Security Fix 6: Checklist delete IDOR: checklist not verified against board/card
• Security Fix 7: Checklist create IDOR: cardId not verified against boardId
• Security Fix 8: Attachments publication leaks metadata without auth
• Security Fix 9: Attachment upload not scoped to card/board relationship
• Security Fix 10: LDAP filter injection in LDAP auth

[Package Updates]

[4.93.0]

• Update wekan to 8.21
• Full Changelog
• Security Fix 2: OrgsTeamsBleed
• Security Fix 3: ChecklistRESTBleed
• Security Fix 4: MigrationsBleed2
• Security Fix 5: PositionHistoryBleed
• Security Fix 6: SyncLDAPBleed
• Security Fix 7: AttachmentMigrationBleed
• Security Fix 8: MoveStorageBleed
• Security Fix 9: ListWIPBleed
• Security Fix 10: BoardTitleRESTBleed
• Security Fix 11: CardPubSubBleed

[Package Updates]

[4.93.1]

• Update wekan to 8.22
• Full Changelog
• Fixed Add member and @mentions

[Package Updates]

[4.95.0]

• Update wekan to 8.24
• Full Changelog
• Secure Sandbox for VSCode at Debian 13 amd64. Part 1, Part 2. Thanks to xet7.
• Updated build scripts and docs to Meteor 2.16. Thanks to xet7.
• Replace mquandalle:collection-mutations with collection helpers. Thanks to harryadel.
• Replace ongoworks:speakingurl with limax. Thanks to harryadel.
• Migrate createIndex to createIndexAsync. Thanks to harryadel.
• Remove idmontie:migrations. Thanks to harryadel.
• Remove mquandalle:autofocus. Part 1, Part 2. Thanks to harryadel.

[Package Updates]

[4.96.0]

• Update wekan to 8.25
• Full Changelog
• This release fixes the following CRITICAL SECURITY ISSUES of Floppybleed:
• Fix Filebleed of Floppybleed.
• Updated code counts.
• Updated FerretDB 2 / PostgreSQL docs location.
• Most Unicode Icons back to Font Awesome 4.7 for better accessibility. Less always visible buttons, More at Mnu.
• Updated to MongoDB 7.0.29 at Snap Candidate.
• Updated to MongoDB 7.0.29 at Helm Charts.
• Fix autofocus.

[Package Updates]

[4.97.0]

• Update wekan to 8.27
• Full Changelog
• Updated MongoDB to 7.0.29 at Windows install docs
• Fix async/await in copy/move card operations
• Migrate wekan-accounts-lockout to async API for Meteor 3.0
• Added Docs: Spreadsheet vs Kanban
• Updated dependencies
• Reduce visual overflow in Member Settings menu by extending container height
• Fix Card copy menu is not displayed
• Fix Bug: Rules view translation not is not shown correctly

[Package Updates]

[4.98.0]

• Update wekan to 8.28
• Full Changelog
• Updated meteor-node-stubs
• Fixed text truncation at quick-access board link bar
• Improved cardDetails.css for better UI
• Fixed Jade syntax at header
• Await async setDone before closing popup in copy/move dialogs

[Package Updates]

[4.99.0]

• Update wekan to 8.31
• Full Changelog
• Fix Copy Card and Move Card. Thanks to xet7.
• Reverted New UI Design of WeKan v8.29 and added more fixes and performance improvements. Thanks to xet7.

[Package Updates]

[4.100.0]

• Update wekan to 8.32
• Full Changelog
• Migrate wekan-oidc to async API for Meteor 3.0.
• Migrate wekan-accounts-sandstorm to async API for Meteor 3.0.
• Migrate wekan-accounts-cas to async API for Meteor 3.0.
• Updated to MongoDB 7.0.30 at Snap Candidate.
• Updated MongoDB to 7.0.30 at Helm Chart.