Weblate - Package Updates

[Package Updates]

[1.32.0]

• Update weblate to 5.13.2
• Full Changelog
• Error reporting upon validation of the file upload method.
• Detailed language information in new language notifications.
• Sign-in could not be completed with LDAP.
• Nonspacing mark changes highlighting in history.
• Smarter retries of unwritable pending changes.
• Failed Two-factor authentication is visible in Audit log.
• Sign-in form not shown for LDAP.
• Access control for GET /api/users/(str:username)/.
• Inconsistent reStructuredText allows translatable reference names.
• File format parameters were not properly applied in some situations.

[Package Updates]

[1.32.1]

• Update weblate to 5.13.3
• Full Changelog
• Text on the registration page informs about possible use of users data in more detail.
• Clarified account removal view.
• Components pagination.
• Project level backups with same named components in different categories.
• Source string location display.
• Correctly track team adding via invitation in Audit log.
• Add missing languages no longer includes shared component languages.
• Azure DevOps pull requests API URL parsing.

[Package Updates]

[1.33.0]

• Update weblate to 5.14
• Full Changelog
• Flag updated translations from repository as Needs editing is now available as an add-on.
• DELETE /api/projects/(string:project)/labels/(int:label_id)/.
• Added multivalue CSV in Downloading translations for multivalue formats.
• New global permissions have been added to control viewing teams, users and roles without edit rights, see List of privileges.
• New unit.bulk_edit permission for bulk editing operations, replacing the overloaded use of translation.auto permission, see List of privileges.
• Searching for DATETIME fields.
• Last changed lookup in Searching for strings.
• Localization Threat Model documentation.
• Do not show glossary matches component setting.
• Screenshots now can be uploaded from a URL, see Visual context for strings.

[Package Updates]

[1.34.0]

• Update weblate to 5.14.1
• Full Changelog
• String context are now tracked in changes histoy and displayed when available.
• ICU MessageFormat correctly handles implicit plurals.
• Avoid storing inviting user information in the invited user audit log (CVE 2025-64326 / GHSA-gr35-vpx2-qxhc).
• Omit admin IP address from audit log.
• Counting outgoing commits in the repository status.
• Listing of other translations.
• Commit Policy could miss some changes in certain situations.

[Package Updates]

[1.34.1]

• Update weblate to 5.14.2
• Full Changelog
• Performance when adding strings.
• Adding terms to glossary was not working in some situations.

[Package Updates]

[1.34.2]

• Update weblate to 5.14.3
• Full Changelog

[Package Updates]

[1.35.0]

• Update weblate to 5.15
• Full Changelog
• Batch automatic translation can now be manually triggered at project language, category or component level, see Automatic translation.
• Added ability to completely disable the admin contact form by setting CONTACT_FORM to "disabled".
• Added new Ollama machinery tool for local Ollama AI model integration, see Ollama.
• Added GET /api/units/(int:id)/comments/ to get a list of comments for the given translation unit.
• Memory contents imported from TMX files include string context.
• XLIFF 2.0, Nextcloud Apps JSON files, JavaScript Resource Files (RESJSON), and TOML are now supported file formats.
• Fedora Messaging integration is now available as add-on.
• Added Laravel format quality check.
• Improper invitation validation upon accepting (CVE 2025-64725 / GHSA-m6hq-f4w9-qrjj).
• Server-Side Request Forgery while cloning repository (CVE 2025-66407 / GHSA-hfpv-mc5v-p9mm).

[Package Updates]

[1.36.0]

• Update weblate to 5.15.1
• Full Changelog
• Added GET /api/projects/(string:project)/languages/(string:language_code)/file/ to download a ZIP file of all component translations of a project for a specified language.
• Updated list of OpenAI models.
• Added Migrating to Weblate guide to help users migrate from other localization platforms.
• Gracefully handle unreachable authentication providers.
• Update language definitions to CLDR 48.
• Git config file overwrite remote code execution (CVE 2025-68398 / GHSA-8vcg-cfxj-p5m3).
• Arbitrary file read via symbolic links (CVE 2025-68279 / GHSA-g925-f788-4jh7).
• Locking error that prevented updating linked components.
• Invitations on sites with required authentication.

[Package Updates]

[1.36.1]

• Update weblate to 5.15.2
• Full Changelog
• Statistics generator is now triggered upon installation.
• Screenshots updated from the repository have proper history.
• reStructuredText syntax error now reports unintended list conversion.
• Unchanged translation check ignores AsciiDoc source code blocks.
• Information leak via screenshots (CVE 2026-21889 / GHSA-3g2f-4rjg-9385).
• Explanation sync in TermBase eXchange format.
• User interface fixes.
• Clarified needs editing/checking/rewriting states.
• Automatically translated flag with bulk approvals.
• GitHub forks no longer trigger actions.

[Package Updates]

[1.37.0]

• Update weblate to 5.16
• Full Changelog