Wekan - Package Updates

[Package Updates]

[4.136.0]

• Update wekan to 10.51
• Full Changelog
• One release now publishes all three snaps: wekan, wekan-ondra and wekan-gantt-gpl. Thanks to xet7.
• The variant sync renames the snap in both snapcraft files, not just one. Thanks to xet7.
• The variant Docker images are published by hand, by retagging the released image. Thanks to xet7.
• A credential the release cannot read is not the Snap Store refusing it. Thanks to xet7.
• Every maintainer script in releases/ is now a menu entry in build.sh and build.bat. Thanks to xet7.
• Twelve one-line wrapper scripts became commands, and both menus gained a command line. Thanks to xet7.
• The Windows zip was never broken: a matched file was reported as missing, because of SIGPIPE. Thanks to xet7.
• The card-drag test measured the board's edge auto-scroll, which is a feature. Thanks to xet7.
• Release jobs now say what actually failed: no snap, no evidence hidden, no wrong secret blamed. Thanks to xet7.

[Package Updates]

[4.137.0]

• Update wekan to 10.53
• Full Changelog

[Package Updates]

[4.138.0]

• Update wekan to 10.56
• Full Changelog
• Every Linux platform FerretDB builds for is built, with a Node.js to match. Thanks to xet7.
• It builds again on every architecture that has no MongoDB server. Thanks to xet7.
• The left menu fits its column on a phone instead of lying over the boards. Thanks to xet7.
• The board counts line up in one column. Thanks to xet7.
• A remote snap build that never starts now says why it did not. Thanks to xet7.

[Package Updates]

[4.139.0]

• Update wekan to 10.57
• Full Changelog
• Import downloads validate every redirect hop instead of only the URL they were given. Thanks to RandomGenerator and xet7.
• IPv6 addresses are classified by their bytes, not by how they are spelled. Thanks to tonghuaroot and xet7.
• The Sandstorm bridge guard reads the page at the path it moved to. Thanks to xet7.
• Every platform page sits under what it is - an OS, container, cloud, hardware or package. Thanks to xet7.
• The links follow the move, including the ones inside the pages that moved. Thanks to xet7.
• Doc links written from the repository root resolve from the page holding them. Thanks to xet7.
• Platform logos are stored beside their page instead of fetched from another host. Thanks to xet7.
• Packager.io and Zenith Hosting have a page of their own. Thanks to xet7.
• The Zenith Hosting page reads as prose instead of a two-item list. Thanks to xet7.

[Package Updates]

[4.140.0]

• Update wekan to 10.67
• Full Changelog
• Docker images for linux/386 and linux/arm/v7, on a Debian base with Node from the fork. Thanks to xet7.
• The Docker image drops linux/arm/v7 too, which its Dockerfile has no Node 24 to install for. Thanks to xet7.
• A loong64 with no base image is skipped, not failed, so it stops skipping the Docker image build. Thanks to xet7.
• The Docker image drops linux/386, which its ubuntu:26.04 base cannot provide. Thanks to xet7.
• The Launchpad snap builds flatten history first, so the push to git.launchpad.net stops timing out. Thanks to xet7.
• Every native bundle ships a named, checksummed Node.js and FerretDB instead of the runner's node. Thanks to xet7.
• The base amd64/arm64 bundles are attached loudly and verified, not silently by softprops. Thanks to xet7.
• The release job checks out before downloading the bundles, so the checkout stops deleting them. Thanks to xet7.
• An admin report opened by its URL keeps the subscription its own count re-render used to cancel. Thanks to xet7.
• The release notes pass the CHANGELOG through the environment instead of inline into the shell. Thanks to xet7.

[Package Updates]

[4.141.0]

• Update wekan to 10.70
• Full Changelog

[Package Updates]

[4.142.0]

• Update wekan to 10.71
• Full Changelog

[Package Updates]

[4.143.0]

• Update wekan to 10.73
• Full Changelog
• PatternBleed: a string replacement that replaced a hyphen with itself, and a guard for the whole class. Thanks to GitHub CodeQL code scanning and xet7.
• Groups may live in their own subtree, not only under the user base. Thanks to leandro-cyberproject and xet7.

[Package Updates]

[4.144.0]

• Update wekan to 10.74
• Full Changelog
• PathBleed: an avatar could name any file on disk, and board export read it. Thanks to Alpastx and xet7.
• RevokeBleed: revoking an org, team or domain share did not revoke it. Thanks to Alpastx and xet7.
• ParentBleed: one card id bridged a private board into another board's feed. Thanks to Alpastx and xet7.
• CommentBleed: the REST API let any board member delete anyone's comment. Thanks to Alpastx and xet7.
• Canary tokens record who tried to override permissions, and from where. Thanks to xet7.
• The database marks the operations WeKan never issues, so an operator sees them. Thanks to xet7.
• A daily paced check of every stored file's name, date and four hashes. Thanks to xet7.
• React as yourself, not as somebody else. Thanks to xet7.
• Fix the two bugs the Database problems page was reporting. Thanks to xet7.
• Security tests say which vulnerability they guard, and the list is checked. Thanks to xet7.

[Package Updates]

[4.145.0]

• Update wekan to 10.78
• Full Changelog
• Build the other two architectures an AppImage runtime exists for. Thanks to xet7.
• Attach full build provenance at every site that pushes an image. Thanks to xet7.
• libcurl4 does not exist on armhf, so name the package noble ships. Thanks to xet7.
• Three good snaps were reported as FAILED by the step that saves their logs. Thanks to xet7.
• Every row appeared twice, amd64 appeared not at all, and six platforms said "latest". Thanks to xet7.
• Attach the built AppImages to the release again. Thanks to xet7.
• Flatpak: attach the bundles to the release, and only the bundles. Thanks to xet7.
• Pin that every bundled binary is fetched as the newest one. Thanks to xet7.
• Release every snap, every architecture, to all four channels. Thanks to xet7.
• Say which six architectures are snaps, and why i386 and armv7 are not. Thanks to xet7.

[Package Updates]

[4.146.0]

• Update wekan to 10.81
• Full Changelog
• Connect with directConnection=true, so a fresh docker compose up starts. Thanks to Dandrass and xet7.
• The board list scrolls to its last board, the Table view scrolls at all, and the tiles are their own size. Thanks to mimZD and xet7.
• The retired Mac runner, the jobs a cancellation skipped, and the armv6 userland. Thanks to xet7.
• An optional part was ending every Launchpad build. Thanks to xet7.
• Report the releases the chart index is missing, and repair its duplicates. Thanks to xet7.
• The chart-index report is a Release menu entry in build.sh and build.bat. Thanks to xet7.
• Version is one table with combined category rows, over two 50% columns. Thanks to xet7.
• Problems / Filesystem integrity showed a blank page. Thanks to xet7.
• A database this snap cannot read stops and says so, instead of serving 502 forever. Thanks to Philippe-Bentegeac, JDeepix, imlit and xet7.
• Build a win-arm64 bundle. Thanks to xet7.

[Package Updates]

[4.147.0]

• Update wekan to 10.83
• Full Changelog
• PassBleed: the export authorised against one board and read a card from another. Thanks to TWPaMWang and xet7.
• Ask the request who it is, because Meteor.userId() cannot. Thanks to markusst1982 and xet7.
• Honour the boardId parameter the client has been sending all along. Thanks to markusst1982 and xet7.
• WhereBleed: eight Admin Panel handlers ran the caller's selector unchecked. Thanks to TungNGo02 and xet7.
• Checklists and card feature groups collapse, on the opened card and on the minicard. Thanks to czinkos, MikeRatcliffe, JannetGen and xet7.
• A new snap revision is a new chance, so the MongoDB 4.2 reader actually gets to run. Thanks to Philippe-Bentegeac, JDeepix, imlit and xet7.
• The notification tray is capped, so SQLite is not rewriting an ever-growing array. Thanks to Nissulya and xet7.
• Clicking an open card closes it, and a focused checkbox is not drawn as a diamond. Thanks to csonkaoszimt, Heart1010 and xet7.
• A typed two-digit year is refused instead of stored as the year 26. Thanks to xet7.
• Dragging a card down scrolls the list, not the whole board. Thanks to markusst1982 and xet7.

[Package Updates]

[4.148.0]

• Update wekan to 10.85
• Full Changelog
• Font Awesome: state the bounding box each glyph actually has. Thanks to xet7.
• Snap: a started mongod is not a used mongod, so stop calling the live copy stale. Thanks to lukechao, markusst1982 and xet7.
• The three new Version-pane and checklist strings, in 133 languages. Thanks to xet7.

[Package Updates]

[4.149.0]

• Update wekan to 10.89
• Full Changelog
• A snap ends up on FerretDB, whatever it was running before. Thanks to xet7.
• There is no database setting on the snap any more, and nothing to type. Thanks to xet7.
• Only the wekan Docker image is published; the two variant names are commented out. Thanks to xet7.
• A path that stops resolving when the step changes directory, and the last bare downloads. Thanks to xet7.
• A release script the job cannot see, and an hour of build thrown away at the push. Thanks to xet7.

[Package Updates]

[4.150.0]

• Update wekan to 10.91
• Full Changelog
• Clicking a minicard again really closes the card, wherever the card was opened from. Thanks to Heart1010, csonkaoszimt and xet7.
• All Boards tiles can take the theme's lighter colour, and a highlighted popup row follows the theme too. Thanks to khuongsatou and xet7.
• A snap waiting for its database says so in the browser, instead of timing out. Thanks to Alishara and xet7.
• A restart is not a crash, and a reverse proxy is not a spoofer. Thanks to xet7.
• The pages shown when there is no database use the product name and the dashboard's colours. Thanks to xet7.
• The status report says which copy of the data is being served, and how to compare them. Thanks to waltermhl and xet7.
• Two open issues answered by reading the code, and pinned so they stay answered. Thanks to xet7.

[Package Updates]

[4.151.0]

• Update wekan to 10.98
• Full Changelog
• JamBleed: the account lockout counted an attacker's failures against the victim. Thanks to daniais and xet7.
• The release version is no longer built into a regular expression. Thanks to xet7.
• Increasing delays after a wrong password, per source address. Thanks to xet7.
• One summary row per problem, with who tried it and how often. Thanks to xet7.
• Who logs in from where, with each account as its initials or avatar. Thanks to xet7.
• Problems / Offices groups those logins into the places they come from. Thanks to xet7.
• Problems / API: who called which endpoint, and how often. Thanks to xet7.
• The lockout package is server-only: it was breaking every page in the browser. Thanks to xet7.
• The reachability graph must read Meteor's module.link, not only require(). Thanks to Heart1010 and xet7.
• People shows who is locked again, and why. Thanks to xet7.

[Package Updates]

[4.152.0]

• Update wekan to 10.99
• Requested By and Assigned By can select board members. Thanks to xet7.
• The new people pickers have titles and stay below their buttons. Thanks to xet7.
• A new subtask is created even before its helper-board cache refreshes. Thanks to xet7.
• Board Excel exports now use the detailed card layout they request. Thanks to xet7.
• Every PDF and detailed Excel scope carries the complete card fields. Thanks to xet7.
• The export popup's checkboxes can be changed, and they say what they are. Thanks to Heart1010 and xet7.
• A card sent to PDF came back as an HTML file. Thanks to Heart1010 and xet7.
• PDF exports carry their JPEG and PNG attachment previews. Thanks to xet7.
• PDF and Excel exports preserve every language and share one card layout. Thanks to xet7.
• A user's avatar is avatar-sized, in every pane that names one. Thanks to xet7.