Loomio - Package Updates
-
[1.20.1]
- Update loomio to 3.3.1
- Full Changelog
- Fix: Escape discussion and poll titles when displaying revision history
- Fix: Exclude User API keys from group exports and rotate every existing key
- Fix: Preserve discussion tags when editing a discussion or a poll in its thread
- See GHSA-8g3m-wppv-2mfq.
- See GHSA-8vf6-75f8-99p6.
-
[1.20.2]
- Update loomio to 3.3.2
- Full Changelog
- Fix: Enforce each poll type's complete score, choice-count, and ranking rules before storing a ballot
- Fix: Reject negative choice scores in the application and database
- New: Keep emailed sign-in links and codes valid for 24 hours by default
-
[1.20.3]
- Update loomio to 3.3.999
- Full Changelog
- New: Add notification occurrence, delivery, and consolidation-state tables without replacing legacy tables
- New: Allow notification history to be consolidated online in resumable batches before upgrading to Loomio 3.4
-
[1.21.0]
- Update loomio to 3.4.1
- Full Changelog
- Fix: Block private IPv4 destinations represented as IPv4-mapped IPv6 addresses
- Fix: Render fetched link-preview titles and descriptions as plain text
- Fix: Prevent rich-text media and task attributes from being reparsed as HTML
- New: Separate topic timeline items from notification processing
- New: Record each in-app, email, and chatbot delivery for its recipient and channel
eventable_typeandeventable_idbecomeitemable_typeanditemable_id.- Nested parents use
parent_topic_itemsinstead ofparent_events. - Timeline items no longer include
custom_fieldsorrecipient_message. - Group JSON exports contain
topic_itemsinstead ofevents, and includenotification_deliveriesalongside logicalnotifications. - The Rails
Eventmodel andeventstable are replaced byTopicItemandtopic_items.
-
[1.21.1]
- Update loomio to 3.4.2
- Full Changelog
- New: Select a parent group or related subgroup as the source audience when inviting people to a group
- New: Use Loomio in Belarusian
- Fix: Notify only newly added participants when expanding an anonymous poll's electorate
- Fix: Apply the correct permissions when announcing to groups
- Fix: Recheck group access before rendering previously cached group data
- Fix: Complete client reload recovery without reporting a second route error
- Fix: Restore the option to save and refresh Chargify-backed subscriptions
- Fix: Return the correct topic-item response after editing a poll response in place
-
[1.22.0]
- Update loomio to 3.5.1
- Full Changelog
- Fix: Restrict thread email and push notification audiences to current group members and invited thread guests
- Fix: Clarify email-only notification labels in thread navigation
- New: Install Loomio from supported browsers and open it in its own window
- New: Enable browser push notifications and test each browser's connection
- New: Choose separate email and push notification levels for account defaults, groups, and threads
- New: Receive unseen notifications in daily, every-second-day, or weekly catch-up emails
- New: Customize the sidebar help link with optional environment variables
- Fix: Keep email unsubscribe links working with the new notification settings
- Fix: Ask coordinators to select reminder recipients after reopening a poll instead of announcing it automatically
- Fix: Open standalone poll search results, unavailable document previews, tasks, tags, and announcement forms reliably
-
[1.23.0]
- Update loomio to 3.6.0
- Full Changelog
- Fix: Escape user-controlled notification values in email, Matrix, Slack, and Markdown chatbot output
- Fix: Reject unsafe URL schemes produced by server-rendered Markdown
- Fix: Limit stored reaction values while retaining complex Unicode emoji sequences
- Fix: Keep web push available without promoting app installation or reload prompts
- New: Create a complete Oatmilk Cooperative demo workspace when demo groups are enabled
- New: Show recent visible activity on user profiles
- Fix: Stop discarded groups pending permanent deletion from accepting activity or delivering pending notifications
- Fix: Make group deletion, account merging, and legacy-data cleanup safer and more recoverable
- Fix: Support Safari 16 in current client builds
- There are no intended breaking B2 or B3 API changes. Operators with custom database maintenance or reporting that refers directly to removed legacy tables or the old
groups.archived_atcolumn must update it before deployment.
-
[1.23.1]
- Update loomio to 3.6.1
- Full Changelog
- Fix: Display mention suggestions above the edit-comment dialog
- Fix: Keep ranked-choice minimum and maximum selections valid when poll options change
- Fix: Import topic item parents before their dependent records when restoring group exports
- Fix: Retain Rails-compatible JSON cookie decoding
- New: Include complete poll and reaction details in copied thread Markdown
-
[1.24.0]
- Update loomio to 3.8.1
- Full Changelog
- New: Follow updates from an open group without becoming a member
- New: Decline a membership request with a reason and let the applicant submit a corrected request
- Fix: Show notification content only once in catch-up emails
- Fix: Keep required voting bounds aligned with the current options in meeting polls
- Fix: Keep long attachment filenames within the editor
- New: Discover groups, search visible content, and manage outgoing group webhooks through the User API
- New: Select users in the instance administration panel and bulk deactivate, redact, or destroy them as spam
- New: Automatically add new accounts to an operator-configured onboarding group
- Fix: Submit editors and forms with modified Enter without inserting a line break
- Loomio 3.7.1 fixes HTTP 500 errors when loading pending poll responses and other member lists after upgrading to 3.7.0. LOOMIO-K0
-
[1.24.1]
- Update loomio to 3.8.2
- Full Changelog
- Fix: Export closed anonymous STV ballots in BLT format
- Fix: Require topic admin permission before moving thread items
- Fix: Bug inviting everyone in the parent group to a subgroup, or everyone in a subgroup to another subgroup
- Fix: Preserve manually selected time zones when editing time polls
- Fix: Prevent time picker validation from hanging the browser
- Fix: Upload the avatar file selected in the profile form
- Fix: Keep demo group creation working when automatic translation quota is exhausted
-
[1.25.0]
- Update loomio to 3.9.0
- Full Changelog
- New: Sign in with a passkey without entering an email address, and manage passkeys from your profile
- Fix: Prevent account enumeration through ordinary sign-in, sign-in code requests, and account-merge verification
- Fix: Block deactivated sessions, enforce password attempt limits, and protect pending SSO identity links
- Fix: Show moved poll comments immediately when opening their destination discussion
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login