Wekan - Package Updates

[Package Updates]

[4.166.0]

• Update wekan to 11.48
• Full Changelog
• Remove the Starred controls' outline. Thanks to xet7.
• Remove the Mobile/Desktop toggle's frame. Thanks to xet7.
• Keep the selected mode icon white. Thanks to xet7.
• Show only the current Mobile/Desktop mode icon. Thanks to xet7.
• Align Add Board four pixels higher. Thanks to xet7.
• Remove the Custom Fields layout selector's frame. Thanks to xet7.
• Show one Custom Fields layout icon. Thanks to xet7.
• Match the Custom Fields layout and menu icon colours. Thanks to xet7.
• Share ordinary board-theme CSS. Thanks to xet7.
• Compact the lazy language registry. Thanks to xet7.

[Package Updates]

[4.167.0]

• Update wekan to 11.49
• Full Changelog
• It carries a checksummed copy of the win64 ZIP instead of a virtual filesystem. Thanks to xet7.
• It reads the bundle from inside itself instead of unpacking 39,035 files. Thanks to xet7.
• It drops the native prebuilds the target platform can never open. Thanks to xet7.
• Moving a list to a swimlane binds it to that swimlane. Thanks to TawsTm and xet7.

[Package Updates]

[4.168.0]

• Update wekan to 11.53
• Full Changelog
• Remove incomplete sanitizer test doubles. Thanks to GitHub CodeQL and xet7.
• Enforce Amiga-safe filenames on every read. Thanks to xet7.
• Stop creating SCRAM-SHA-1 credentials. Thanks to GitHub CodeQL and xet7.
• Secure and resume import/export operations. Thanks to xet7.
• Validate XLSX sheet colors before CSS serialization. Thanks to rbbjinioeq and xet7.
• Add verified recovery and low-load integrity audits. Thanks to xet7.
• A file WeKan refuses to serve is no longer served by Meteor-Files instead. Thanks to xet7.
• The universal change history is built, and Ctrl+Z reads it instead of positions alone. Thanks to xet7.
• Every card group is recorded, and History is one table opened from every menu. Thanks to xet7.
• Copying a list copies its cards, into a new list. Thanks to xet7.

[Package Updates]

[4.169.0]

• Update wekan to 11.58
• Full Changelog
• Now that builds have been fixed, new release with those fixes included.
• Fixed are builds of FerretDB, node-patches, mongo-tools-patces and mongosh-patches.
• Fix alltests fixtures and HTTP cookie assertions. Thanks to xet7.
• Restore independent swimlane and card control colors. Thanks to Alishara and xet7.
• Keep upgraded session profiles without a duplicate login. Thanks to Alishara and xet7.
• Revert Legacy HTML4. Thanks to xet7.
• Lazy-load browser export code and share its ZIP implementation. Thanks to xet7.
• Keep profiles and preferences through session upgrades. Thanks to Alishara and xet7.
• Fix authentication form keyboard navigation. Thanks to xet7.
• Store searchable document text and GIF attachment previews. Thanks to xet7.

[Package Updates]

[4.170.0]

• Update wekan to 11.63
• Full Changelog
• Stop release-all.sh from inheriting and widening a version-number gap. Thanks to xet7.
• Add test-menu.sh and checked-in example inputs for docs/Features. Thanks to xet7.
• Reorder the Board View menu and add its not-yet-built views. Thanks to xet7.
• Fix OIDC auto-redirect looping until the provider rate-limits it. Thanks to Alishara and xet7.
• Hardcode list width to 240px and remove the width/height set-value popups. Thanks to xet7.
• Add Markdown import/export and give GitHub-style import loss reporting. Thanks to xet7.
• Fix the Windows single-EXE smoke test failing with no error message. Thanks to xet7.
• Revert branding and board background images to external URLs. Thanks to xet7.
• Fix dependency lines and collapsed lists bleeding past a resized swimlane. Thanks to xet7.
• Fix a wrapped changelog summary line. Thanks to xet7.

[Package Updates]

[4.171.0]

• Update wekan to 11.67
• Board export to .zip (with attachments) answered a bare 500 error on every request; the archiver dependency's v8 API change was missed in one of the two places WeKan builds a zip on the server. Issue #6681 (OIDC redirect-style login loop) is confirmed already fixed and closed.
• Unauthenticated Arbitrary File Write via Path Traversal in Attachment Upload namingFunction. Thanks to xet7.
• Unauthenticated DDP Methods Allow Instance-Wide Deletion of Attachments and Avatars. Thanks to xet7.
• Add the protected callback the download library needs to gate them. Thanks to xet7.
• serveLegacyAvatar Serves Legacy CollectionFS Avatars Without Any Authentication. Thanks to xet7.
• Relocate the AppImage's own mount from /tmp to WRITABLE_PATH/app. Thanks to xet7.
• Revert "Hardcode list width to 240px and remove the width/height set-value popups". Thanks to xet7.
• Add board-wide list-width/swimlane-height resize locks (#6680). Thanks to Hallsie and xet7.
• Add a header-icons collapse toggle beside the board title (#6680 follow-up). Thanks to xet7.
• Allow storing Infinity/-Infinity doubles, matching MongoDB. Thanks to xet7.

[Package Updates]

[4.172.0]

• Update wekan to 11.72
• Full Changelog
• Fix board JSON exports containing HTML. Thanks to xet7.
• Design: how an attachment is deleted, shown in the card history, restored and purged. Thanks to xet7.

[Package Updates]

[4.173.0]

• Update wekan to 11.73
• Full Changelog
• Add member-selected calendars and accessible date/time controls. Thanks to mimZD and xet7.
• Show full-width calendars directly in date popups. Thanks to xet7.
• Fit date controls and add bottom-right popup resizing. Thanks to xet7.
• Restrict OAuth2 login by email domain. Thanks to xet7.
• Keep shared-list cards scoped during partial-profile loading and impersonation. Thanks to gleneindre and xet7.
• Restore first-user CSS and hide unrequested 2FA prompts. Thanks to xet7.
• Fix undeclared body-parser import with Rspack 2. Thanks to xet7.
• Upgrade Meteor and Rspack build dependencies. Thanks to xet7.
• Playwright 1.62.1 1.63.0. Updates the browser-test runner and lockfile. Thanks to dependabot.
• Mirror configured organizations with linked attachments and offline HTML/CSV indexes. Thanks to xet7.

[Package Updates]

[4.174.0]

• Update wekan to 11.80
• Full Changelog
• Add checklist deadlines and expose item dates in REST
• Apply labels and members from the clicked row
• Enforce private-only board visibility in server methods
• Require write capability for board mutations
• Bind comments to the authorized card board
• Require administrators for REST board management
• Bind button rules to a writable board and its card
• Correct Swedish Due Cards meaning
• Repair Valencian reflexive imperative and validate settings
• Fix Thai rule action linking-word composition

[Package Updates]

[4.175.0]

• Update wekan to 11.83
• Full Changelog
• Load custom logos first and upload them to Default Storage. Thanks to xet7.
• Stop using archive.org for mirror linked files. Thanks to xet7.
• Check translation language lists before tagging. Thanks to xet7.