Wekan - Package Updates

Package Updates

[4.180.0]

Update wekan to 11.93
Full Changelog
Bound OAuth fixture parsing and hide login exception details. Thanks to GitHub CodeQL and xet7.
Refresh reviewed telemetry inventory and detect stale reviews locally. Thanks to xet7.
Distinguish known dependency keyword false positives from new findings. Thanks to xet7.
Update release runtime discovery and fix Windows source resolution. Thanks to xet7.
Accept valid GitHub SSH origins in release launchers. Thanks to xet7.
Add release menus and automated dependency risk checks. Thanks to xet7.

Package Updates

[4.181.0]

Update wekan to 11.99
Full Changelog
Patch Rsdoctor and restore dependency updates. Thanks to xet7.
Recover stage-package download failures in Snap builds. Thanks to xet7.
Validate release notes before version changes and tagging. Thanks to xet7.
Move Date directly below Change Background Image. Thanks to xet7.
Match Swimlane and List settings icons to the header Board View menu. Thanks to xet7.
Finish Mac smoke tests after successful startup. Thanks to xet7.
Include the missing libatomic runtime library. Thanks to Nissulya, PetitManchot and xet7.
Carry libatomic through every Linux packaging path. Thanks to Nissulya, PetitManchot and xet7.
Accept sidebar invitations without triggering an account block. Thanks to Nissulya and xet7.
Verify Mac archives and keep foreign addons out of platform bundles. Thanks to xet7.

Package Updates

[4.182.0]

Update wekan to 12.04
Enforce account deactivation across authentication and existing sessions. Thanks to esbrito81 and xet7.
Select or unselect all settings in a board settings column. Thanks to xet7.
Choose which objects can be dragged on each board. Thanks to xet7.
Move mixed selections of cards, lists, swimlanes and checklist content. Thanks to xet7.
Show checklist progress and support item dragging on minicards. Thanks to xet7.
Fix checklist item reordering. Thanks to AmigaAbattoir and xet7.
Configure SAML in Admin Panel / People. Thanks to xet7.
Stop repeated automatic OIDC login after a failed callback. Thanks to Alishara and xet7.
Fix Files Report attachment previews and downloads. Thanks to xet7.
Align the S3 client with its upload library. Thanks to xet7.

Package Updates

[4.183.0]

Update wekan to 12.06
Move card-free board duplication to multiselection. Thanks to xet7.
Add five flow reports and reversible dependency history. Thanks to sojournerc and xet7.
Preserve time records and add reversible move reasons. Thanks to ladistrupl, zombah and xet7.
Add swimlane placement and board tile actions. Thanks to bentiss and xet7.
Add label AND/OR filtering and retain filter text. Thanks to Trunkslike, TheBigBloodyB, Roemer and xet7.
Preserve private new-card title drafts. Thanks to TutloTutlo and xet7.
Allow linked-card mirrors on the same board. Thanks to RinTheCatato, mohamed-aziz-chamakh and xet7.
Undo list deletion together with its cards. Thanks to rawwerks and xet7.
Open cards directly beside their minicards. Thanks to xet7.
Keep card windows still when saving dates. Thanks to xet7.

Package Updates

[4.184.0]

Update wekan to 12.08
Full Changelog
Enforce assigned-only permissions in exporter authorization. Thanks to xet7.
Enforce current access on universal History reads and restores. Thanks to xet7.
Reject empty LDAP user credentials in every login path. Thanks to kta1kri and xet7.
Enforce LDAP and CAS login-group restrictions. Thanks to xet7.
Require single-use SAML request correlation. Thanks to xet7.
Choose which structure and data to duplicate from selected boards. Thanks to xet7.
Show a single comment in the minicard badge tooltip. Thanks to lonix1 and xet7.
Filter subtasks by their parent card. Thanks to robinvd and xet7.
Use available width for popup menus and Card settings. Thanks to xet7.
Make text editors multiline and resizable, honor the Enter preference, and restore themed button text. Thanks to xet7.

Package Updates

[4.185.0]

Update wekan to 12.09
Full Changelog
Protect admin-only custom-field reads, writes and exports. Thanks to Hama1cco and xet7.
Accept node-saml response IDs and display popup failures. Thanks to xet7.
Record daily Scrum observations without inventing missing history. Thanks to xet7.
Display measured daily scope and remaining work in Sprint Report. Thanks to xet7.
Keep request secrets out of unhandled API failure diagnostics. Thanks to xet7.
Coordinate Sync runs and settings saves across server processes. Thanks to xet7.
Restore target-language meanings and retain valid downloaded translations. Thanks to xet7.
Copy cards automatically with a rule. Thanks to javen9881, phaseshift3r, gugmt15 and xet7.
Match advanced filters against the named field's own value. Thanks to xet7.
Confirm accepted rule email offline without resending. Thanks to xet7.

Package Updates

[4.186.0]

Update wekan to 12.11
Full Changelog
Restore card update effects and repair EVERYTHING test failures. Thanks to xet7.
Restore locale key structure and accurate translation checks. Thanks to xet7.
Restrict card-copy overrides to text and preserve the source. Thanks to xet7.
Refuse board-copy properties that could replace the source board's identity. Thanks to xet7.
Let a card be a subtask of several parent cards. Thanks to ikomhoog and xet7.
Add a Map board view: cards as markers on an uploaded image. Thanks to javen9881 and xet7.
Add semi-open boards, visible to every signed-in user. Thanks to relikd and xet7.
Archive cards automatically after a chosen number of days without activity. Thanks to xet7.
Copy boards with custom fields again by cloning definitions before cards. Thanks to xet7.
Deliver board invitations to the invitee's notification bell. Thanks to CondensedTea and xet7.

Package Updates

[4.187.0]

Update wekan to 12.12
Full Changelog
Resolve partially accepted rule emails: resend to the unconfirmed only, mark sent or drop. Thanks to xet7.
Review legacy rule emails: re-bind from the current card or discard. Thanks to xet7.
The Rules page uses the board's right sidebar instead of its own. Thanks to xet7.
Bring the GitLab importer and Sync source up to the format contract. Thanks to gotjoshua and xet7.
Import OpenProject watchers and Asana followers as card watchers. Thanks to xet7.
Export to GitLab with the people, dates and comments its importer reads. Thanks to xet7.
Import and export boards as todo.txt. Thanks to xet7.
Apply a raced undo or redo once instead of once per caller. Thanks to xet7.
Embed the GitLab fixture's comment so it stays a complete import. Thanks to xet7.
Keep Sync's rule, notification and webhook effects off unless enabled. Thanks to xet7.

Package Updates

[4.188.0]

Update wekan to 12.14
Full Changelog
Alert 547: check the Trello link in a translation test by its parsed host. Thanks to GitHub CodeQL and xet7.
dompurify 3.4.15 3.4.16 the HTML sanitizer that cleans card text, comments and activity text (the update).
Attribute email replies to the recipient the reply address was sent to. Thanks to alex131125 and xet7.
Give every Scrum record a lifetime incarnation and refuse retries against another lifetime. Thanks to xet7.
Give every activity a lifetime incarnation that notification recovery checks. Thanks to xet7.
Run manual and scheduled Sync through the durable journal, with replay. Thanks to xet7.
Make showing dependencies each user's own choice, and add My Dependencies. Thanks to nalilord and xet7.
Say how many dependency lines were already there after an All Boards import. Thanks to nalilord and xet7.
Show image previews on cards again: a real cover picture, and a neutral attachment tile. Thanks to xet7.
Link Sync History rows to the chain when they are written, not planned. Thanks to xet7.

Package Updates

[4.189.0]

Update wekan to 12.15
Full Changelog
Attachments and avatars are private, revalidated responses, never shared-cacheable. Thanks to alham-rizvi and xet7.
Requests go through the SSRF guard, and errors carry no response text. Thanks to alham-rizvi and xet7.
A CAS callback is accepted only from the browser that started that login. Thanks to xet7.
Password guessing is braked per account without locking the owner out. Thanks to xet7.
LDAP server certificates are verified by default again. Thanks to xet7.
Assigned-only members see only their own cards on every read path. Thanks to xet7.
Boards with sprints, releases or events export and copy again. Thanks to xet7.
Dependency lines show on instance boards to every signed-in user. Thanks to xet7.
A login lockout never disables the account being guessed. Thanks to xet7.
Rule, webhook and custom-field documents cannot be moved to another board. Thanks to xet7.

Package Updates

[4.190.0]

Update wekan to 12.17
Full Changelog
Bind SAML accounts to their original identity. Thanks to alham-rizvi and xet7.
Verify the native ZIP decompression report is already fixed. Thanks to alham-rizvi and xet7.
Isolate Firefox app data for macOS browser tests. Thanks to xet7.
A card copy carries only the subtasks the copier may copy. Thanks to xet7.
A card insert may not name another board's list or swimlane. Thanks to xet7.
A rule may not name another board's trigger, and rules match on their own board. Thanks to xet7.
A date custom field's tooltip names the field instead of saying "Starts on" (#6737). Thanks to rmb82 and xet7.
Its diagnostics print in production when LDAP logging is on. Thanks to rholighaus and xet7.
A moved card or swimlane no longer points at the old board's sprint and release. Thanks to xet7.
Admin Panel / Attachments / Continuous backup streams the database, files and logs. Thanks to xet7.

Package Updates

[4.191.0]

Update wekan to 12.18
Full Changelog
Sharp 0.35.4 0.35.5 image processing.
Chai 6.2.2 6.3.0 test assertions.
@typescript-eslint/parser 8.70.1 8.71.0 TypeScript parsing for lint checks.
@typescript-eslint/eslint-plugin 8.70.1 8.71.0 TypeScript lint rules.

Package Updates

[4.192.0]

Update wekan to 12.19
Full Changelog
Override every login environment variable in Admin Panel / People, one section per login method. Thanks to xet7.
The Admin Panel can override DEFAULT_AUTHENTICATION_METHOD, and Default gives the variable back. Thanks to xet7.
Read LDAP_AUTHENTIFICATION_PASSWORD_FILE and OAUTH2_SECRET_FILE at login. Thanks to Roemer, CrashOverride-lab, ww-daniel-mora and xet7.
Accept members of nested Active Directory groups with LDAP_GROUP_FILTER_NESTED. Thanks to rmb82 and xet7.
Admin Panel LDAP settings are used, and Test connection exists. Thanks to xet7.
CAS_VALIDATE_URL, PROPAGATE_OIDC_DATA=false and three snap help keys work as documented. Thanks to xet7.
Attach each release file from the job that built it, also when cancelled. Thanks to xet7.

Package Updates

[4.193.0]

Update wekan to 12.20
Full Changelog
Confirm the board domains REST route is site-admin only; GHSA-r3c4-5xwp-vf54 does not apply. Thanks to a25370 and xet7.
A card open no longer re-renders every card: lists and cards read only the user fields they use. Thanks to markusst1982 and xet7.
A card opened or closed by its address no longer rebuilds the whole board. Thanks to markusst1982 and xet7.
Closing a card no longer makes every card re-read the current board. Thanks to markusst1982 and xet7.
Drag-and-drop options are set only when they change. Thanks to markusst1982 and xet7.
Opening a card no longer leaves a subscription running after it closes. Thanks to markusst1982 and xet7.
The snap now defaults cards-loading to auto, so big boards load only their visible cards. Thanks to markusst1982 and xet7.

Package Updates

[4.194.0]

Update wekan to 12.22
Full Changelog
D opens the Due date editor of the opened card. Thanks to mimZD and xet7.
Today's day stands out in the date popup and the board Calendar view. Thanks to mimZD and xet7.
pbkdf2 3.1.3 3.1.7 key derivation in the browser crypto stubs that meteor-node-stubs bundles; fixes long passwords being hashed again on every iteration, GHSA-477h-4r7f-fvrx.
A database connection refused by AppArmor is named at once, with the fix. Thanks to fabiosalles and xet7.
Every service log no longer starts with four snapctl get errors. Thanks to fabiosalles and xet7.
The Set color to action can pick any card color, not only green. Thanks to titver968 and xet7.
Select all and Unselect all visibly tick and untick every rule. Thanks to titver968 and xet7.
Card More and multi-selection list every board for a user without a templates board. Thanks to xet7.
Filter matches follow a member's access even when the board observer stalls. Thanks to xet7.
Backup and restore start the database first, and every wait says why it fails. Thanks to fabiosalles and xet7.

Package Updates

[4.195.0]

Update wekan to 12.25
Full Changelog
Every provider login uses a full-page redirect by default instead of a popup. Thanks to xet7.
Caddy sends each WeKan container and Sandstorm the visitor's real address. Thanks to xet7.
Boards import and export as Todoist project templates (CSV). Thanks to xet7.
Boards import and export as OPML outlines from Workflowy, Dynalist, Logseq and others. Thanks to xet7.
Boards import and export as Org mode outlines. Thanks to xet7.
A rule can set and clear assignees, and needs no title. Thanks to xeruf and xet7.
A rule can fire when a card moves forward to a later list or back to an earlier one. Thanks to rlach and xet7.
Header login is set by the environment only, and shown read-only in the Admin Panel. Thanks to xet7.
Automatic logout with LOGOUT_WITH_TIMER and the LOGOUT_* settings works again. Thanks to xet7.
Translation tests check links by their parsed host, not as substrings. Thanks to GitHub CodeQL and xet7.

Package Updates

[4.196.0]

Update wekan to 12.27
Full Changelog
FerretDB answers a $group with several accumulators, $min/$max and capped max like MongoDB. Thanks to xet7.
EVERYTHING compares MongoDB 8 and MongoDB 9 too, queried directly. Thanks to xet7.
MongoDB 6 and 7 are compared too: all eight databases answer all 110 cases the same. Thanks to xet7.
build.bat runs Mocha, guards, Playwright, builds and Setup the same way as build.sh. Thanks to xet7.
A link title or URL in an import file can no longer end its link early. Thanks to GitHub CodeQL and xet7.
Sheet names are read in linear time, and the manual test pages pin their CDN script. Thanks to GitHub CodeQL and xet7.
The import and export docs test escapes headings, and identity replacements are found in regex form too. Thanks to GitHub CodeQL and xet7.
Card close from 4 s to 0.1 s on a 4,000-card board; only visible data loads. Thanks to markusst1982 and xet7.
Attach a card to a card, as Trello's card attachments, and import them from Trello. Thanks to ricardoboss and xet7.
Calendar Mode, Trello's calendar, below Calendar in the view menu. Thanks to tripledee and xet7.

Package Updates

[4.197.0]

Update wekan to 12.38
Full Changelog
End-tag patterns also match tags that carry attributes. Thanks to GitHub CodeQL and xet7.
It says why an existing account could not be linked, and finds it by email. Thanks to xet7.
Private starred boards show in the Favorites popup. Thanks to Raymond-Voogt and xet7.
A dragged list shows clearly where it will land. Thanks to mimZD and xet7.
Repair target builds and release asset checks. Thanks to xet7.
Bun builds install Rspack before compiling. Thanks to xet7.
Bun setup accepts the selected runtime version. Thanks to xet7.
Package scanning and generated code handle unsafe input. Thanks to GitHub CodeQL and xet7.
Builds cover every supported OS and CPU. Thanks to dupontbertrand and xet7.
No pattern is built from an unescaped value, and no escape stops at the first match. Thanks to GitHub CodeQL and xet7.

Package Updates

[4.198.0]

Update wekan to 12.39
Full Changelog
It no longer installs docker-cli, whose Go 1.24 filled the scans. Thanks to xet7.
Eight npm packages inside Meteor's packages are raised to fixed releases. Thanks to xet7.
They are built with Go 1.27.2 and golang.org/x/net v0.60.0. Thanks to xet7.
SAML logs in a binding that lacks the optional qualifiers. Thanks to xet7.
Android and FreeBSD build, and windows-arm64 no longer shows a false error. Thanks to xet7.
The Docker job checks the bundle version again. Thanks to xet7.
The build script parity guard passes again. Thanks to xet7.

Package Updates

[4.199.0]

Update wekan to 12.46
Full Changelog
SQRL's sqrlonly and hardlock lock an account to SQRL. Thanks to xet7.
Windows single sign-on with Kerberos or NTLM. Thanks to nikalasmd and xet7.
WeKan's changes are written back to GitLab. Thanks to gotjoshua and xet7.
Planka, Microsoft To Do, KanbanFlow, Basecamp, Google Tasks and Google Keep import from their APIs. Thanks to xet7.
Channels are the cards with a conversation on every board, with unread counts. Thanks to xet7.
Batch undo and redo of a large sprint is 2.6 times faster. Thanks to xet7.
Two changes saved at the same moment no longer fork a board's History chain. Thanks to xet7.
The email view renders its subjects and previews as Markdown. Thanks to xet7.
Version Control, the activity feed and the email list render titles as Markdown. Thanks to xet7.
The activity feed names the checklist, item, lists and people it is about. Thanks to xet7.

Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.

Cloudron Forum

Wekan - Package Updates