Wekan - Package Updates

[Package Updates]

[4.168.0]

• Update wekan to 11.53
• Full Changelog
• Remove incomplete sanitizer test doubles. Thanks to GitHub CodeQL and xet7.
• Enforce Amiga-safe filenames on every read. Thanks to xet7.
• Stop creating SCRAM-SHA-1 credentials. Thanks to GitHub CodeQL and xet7.
• Secure and resume import/export operations. Thanks to xet7.
• Validate XLSX sheet colors before CSS serialization. Thanks to rbbjinioeq and xet7.
• Add verified recovery and low-load integrity audits. Thanks to xet7.
• A file WeKan refuses to serve is no longer served by Meteor-Files instead. Thanks to xet7.
• The universal change history is built, and Ctrl+Z reads it instead of positions alone. Thanks to xet7.
• Every card group is recorded, and History is one table opened from every menu. Thanks to xet7.
• Copying a list copies its cards, into a new list. Thanks to xet7.

[Package Updates]

[4.169.0]

• Update wekan to 11.58
• Full Changelog
• Now that builds have been fixed, new release with those fixes included.
• Fixed are builds of FerretDB, node-patches, mongo-tools-patces and mongosh-patches.
• Fix alltests fixtures and HTTP cookie assertions. Thanks to xet7.
• Restore independent swimlane and card control colors. Thanks to Alishara and xet7.
• Keep upgraded session profiles without a duplicate login. Thanks to Alishara and xet7.
• Revert Legacy HTML4. Thanks to xet7.
• Lazy-load browser export code and share its ZIP implementation. Thanks to xet7.
• Keep profiles and preferences through session upgrades. Thanks to Alishara and xet7.
• Fix authentication form keyboard navigation. Thanks to xet7.
• Store searchable document text and GIF attachment previews. Thanks to xet7.

[Package Updates]

[4.170.0]

• Update wekan to 11.63
• Full Changelog
• Stop release-all.sh from inheriting and widening a version-number gap. Thanks to xet7.
• Add test-menu.sh and checked-in example inputs for docs/Features. Thanks to xet7.
• Reorder the Board View menu and add its not-yet-built views. Thanks to xet7.
• Fix OIDC auto-redirect looping until the provider rate-limits it. Thanks to Alishara and xet7.
• Hardcode list width to 240px and remove the width/height set-value popups. Thanks to xet7.
• Add Markdown import/export and give GitHub-style import loss reporting. Thanks to xet7.
• Fix the Windows single-EXE smoke test failing with no error message. Thanks to xet7.
• Revert branding and board background images to external URLs. Thanks to xet7.
• Fix dependency lines and collapsed lists bleeding past a resized swimlane. Thanks to xet7.
• Fix a wrapped changelog summary line. Thanks to xet7.

[Package Updates]

[4.171.0]

• Update wekan to 11.67
• Board export to .zip (with attachments) answered a bare 500 error on every request; the archiver dependency's v8 API change was missed in one of the two places WeKan builds a zip on the server. Issue #6681 (OIDC redirect-style login loop) is confirmed already fixed and closed.
• Unauthenticated Arbitrary File Write via Path Traversal in Attachment Upload namingFunction. Thanks to xet7.
• Unauthenticated DDP Methods Allow Instance-Wide Deletion of Attachments and Avatars. Thanks to xet7.
• Add the protected callback the download library needs to gate them. Thanks to xet7.
• serveLegacyAvatar Serves Legacy CollectionFS Avatars Without Any Authentication. Thanks to xet7.
• Relocate the AppImage's own mount from /tmp to WRITABLE_PATH/app. Thanks to xet7.
• Revert "Hardcode list width to 240px and remove the width/height set-value popups". Thanks to xet7.
• Add board-wide list-width/swimlane-height resize locks (#6680). Thanks to Hallsie and xet7.
• Add a header-icons collapse toggle beside the board title (#6680 follow-up). Thanks to xet7.
• Allow storing Infinity/-Infinity doubles, matching MongoDB. Thanks to xet7.

[Package Updates]

[4.172.0]

• Update wekan to 11.72
• Full Changelog
• Fix board JSON exports containing HTML. Thanks to xet7.
• Design: how an attachment is deleted, shown in the card history, restored and purged. Thanks to xet7.

[Package Updates]

[4.173.0]

• Update wekan to 11.73
• Full Changelog
• Add member-selected calendars and accessible date/time controls. Thanks to mimZD and xet7.
• Show full-width calendars directly in date popups. Thanks to xet7.
• Fit date controls and add bottom-right popup resizing. Thanks to xet7.
• Restrict OAuth2 login by email domain. Thanks to xet7.
• Keep shared-list cards scoped during partial-profile loading and impersonation. Thanks to gleneindre and xet7.
• Restore first-user CSS and hide unrequested 2FA prompts. Thanks to xet7.
• Fix undeclared body-parser import with Rspack 2. Thanks to xet7.
• Upgrade Meteor and Rspack build dependencies. Thanks to xet7.
• Playwright 1.62.1 1.63.0. Updates the browser-test runner and lockfile. Thanks to dependabot.
• Mirror configured organizations with linked attachments and offline HTML/CSV indexes. Thanks to xet7.

[Package Updates]

[4.174.0]

• Update wekan to 11.80
• Full Changelog
• Add checklist deadlines and expose item dates in REST
• Apply labels and members from the clicked row
• Enforce private-only board visibility in server methods
• Require write capability for board mutations
• Bind comments to the authorized card board
• Require administrators for REST board management
• Bind button rules to a writable board and its card
• Correct Swedish Due Cards meaning
• Repair Valencian reflexive imperative and validate settings
• Fix Thai rule action linking-word composition

[Package Updates]

[4.175.0]

• Update wekan to 11.83
• Full Changelog
• Load custom logos first and upload them to Default Storage. Thanks to xet7.
• Stop using archive.org for mirror linked files. Thanks to xet7.
• Check translation language lists before tagging. Thanks to xet7.

[Package Updates]

[4.176.0]

• Update wekan to 11.85
• Full Changelog
• Add an admin date format override for everyone. Thanks to Mathia2 and xet7.
• Honor scoped notification subscriptions and settings. Thanks to Nissulya and xet7.
• Hide empty card field groups and their separators. Thanks to fabiosalles and xet7.
• Restore card popups on My Cards and My Attachments. Thanks to Mathia2 and xet7.
• Make WIP group list checkboxes visible and editable. Thanks to Mahgozar and xet7.
• Submit checklist creation once per user action. Thanks to rmb82 and xet7.
• Verify LDAP session restoration with a large directory. Thanks to Nissulya and xet7.
• Align historical translation repairs and card visibility guards. Thanks to xet7.

[Package Updates]

[4.177.0]

• Update wekan to 11.86
• Full Changelog
• Recover interrupted Snap builds and bound release attachments. Thanks to xet7.

[Package Updates]

[4.178.0]

• Update wekan to 11.87
• Full Changelog
• Add cleaner minicard and checklist options and date-only formats. Thanks to xet7.
• Restore dragging after expanding collapsed lists. Thanks to Nich01asFox and xet7.
• Restore visible, selectable comment mention suggestions. Thanks to bbyszio and xet7.
• Improve ordering, destination dialogs, keyboard controls and scaled layouts. Thanks to xet7.
• Remove the obsolete Summernote integration and editor setting. Thanks to xet7.
• Fix Launchpad recovery, ref indexing and artifact downloads. Thanks to xet7.
• Verify muted-board fixes through actual SMTP delivery. Thanks to Nissulya and xet7.

[Package Updates]

[4.179.0]

• Update wekan to 11.90
• Full Changelog
• Retry temporary Snap Store upload failures. Thanks to Copilot and xet7.
• Check file status, incomplete metadata and recovery evidence in Problems. Thanks to xet7.
• Run Dev server nobuild from the current source checkout. Thanks to xet7.
• Provide full MIME detection across server platforms. Thanks to xet7.
• Fix document indexing and image dependency lookup in production. Thanks to xet7.
• Reject recurring foreign-language and audited bad values from Transifex. Thanks to xet7.
• Measure delayed headers after Blaze renders them. Thanks to xet7.
• Read current destination documents when selecting a board. Thanks to xet7.
• Show the unread notification alert without loading drawer details. Thanks to xet7.
• Restore the requested page after cookie authentication. Thanks to xet7.