Wekan - Package Updates

[Package Updates]

[4.182.0]

• Update wekan to 12.04
• Enforce account deactivation across authentication and existing sessions. Thanks to esbrito81 and xet7.
• Select or unselect all settings in a board settings column. Thanks to xet7.
• Choose which objects can be dragged on each board. Thanks to xet7.
• Move mixed selections of cards, lists, swimlanes and checklist content. Thanks to xet7.
• Show checklist progress and support item dragging on minicards. Thanks to xet7.
• Fix checklist item reordering. Thanks to AmigaAbattoir and xet7.
• Configure SAML in Admin Panel / People. Thanks to xet7.
• Stop repeated automatic OIDC login after a failed callback. Thanks to Alishara and xet7.
• Fix Files Report attachment previews and downloads. Thanks to xet7.
• Align the S3 client with its upload library. Thanks to xet7.

[Package Updates]

[4.183.0]

• Update wekan to 12.06
• Move card-free board duplication to multiselection. Thanks to xet7.
• Add five flow reports and reversible dependency history. Thanks to sojournerc and xet7.
• Preserve time records and add reversible move reasons. Thanks to ladistrupl, zombah and xet7.
• Add swimlane placement and board tile actions. Thanks to bentiss and xet7.
• Add label AND/OR filtering and retain filter text. Thanks to Trunkslike, TheBigBloodyB, Roemer and xet7.
• Preserve private new-card title drafts. Thanks to TutloTutlo and xet7.
• Allow linked-card mirrors on the same board. Thanks to RinTheCatato, mohamed-aziz-chamakh and xet7.
• Undo list deletion together with its cards. Thanks to rawwerks and xet7.
• Open cards directly beside their minicards. Thanks to xet7.
• Keep card windows still when saving dates. Thanks to xet7.

[Package Updates]

[4.184.0]

• Update wekan to 12.08
• Full Changelog
• Enforce assigned-only permissions in exporter authorization. Thanks to xet7.
• Enforce current access on universal History reads and restores. Thanks to xet7.
• Reject empty LDAP user credentials in every login path. Thanks to kta1kri and xet7.
• Enforce LDAP and CAS login-group restrictions. Thanks to xet7.
• Require single-use SAML request correlation. Thanks to xet7.
• Choose which structure and data to duplicate from selected boards. Thanks to xet7.
• Show a single comment in the minicard badge tooltip. Thanks to lonix1 and xet7.
• Filter subtasks by their parent card. Thanks to robinvd and xet7.
• Use available width for popup menus and Card settings. Thanks to xet7.
• Make text editors multiline and resizable, honor the Enter preference, and restore themed button text. Thanks to xet7.

[Package Updates]

[4.185.0]

• Update wekan to 12.09
• Full Changelog
• Protect admin-only custom-field reads, writes and exports. Thanks to Hama1cco and xet7.
• Accept node-saml response IDs and display popup failures. Thanks to xet7.
• Record daily Scrum observations without inventing missing history. Thanks to xet7.
• Display measured daily scope and remaining work in Sprint Report. Thanks to xet7.
• Keep request secrets out of unhandled API failure diagnostics. Thanks to xet7.
• Coordinate Sync runs and settings saves across server processes. Thanks to xet7.
• Restore target-language meanings and retain valid downloaded translations. Thanks to xet7.
• Copy cards automatically with a rule. Thanks to javen9881, phaseshift3r, gugmt15 and xet7.
• Match advanced filters against the named field's own value. Thanks to xet7.
• Confirm accepted rule email offline without resending. Thanks to xet7.

[Package Updates]

[4.186.0]

• Update wekan to 12.11
• Full Changelog
• Restore card update effects and repair EVERYTHING test failures. Thanks to xet7.
• Restore locale key structure and accurate translation checks. Thanks to xet7.
• Restrict card-copy overrides to text and preserve the source. Thanks to xet7.
• Refuse board-copy properties that could replace the source board's identity. Thanks to xet7.
• Let a card be a subtask of several parent cards. Thanks to ikomhoog and xet7.
• Add a Map board view: cards as markers on an uploaded image. Thanks to javen9881 and xet7.
• Add semi-open boards, visible to every signed-in user. Thanks to relikd and xet7.
• Archive cards automatically after a chosen number of days without activity. Thanks to xet7.
• Copy boards with custom fields again by cloning definitions before cards. Thanks to xet7.
• Deliver board invitations to the invitee's notification bell. Thanks to CondensedTea and xet7.

[Package Updates]

[4.187.0]

• Update wekan to 12.12
• Full Changelog
• Resolve partially accepted rule emails: resend to the unconfirmed only, mark sent or drop. Thanks to xet7.
• Review legacy rule emails: re-bind from the current card or discard. Thanks to xet7.
• The Rules page uses the board's right sidebar instead of its own. Thanks to xet7.
• Bring the GitLab importer and Sync source up to the format contract. Thanks to gotjoshua and xet7.
• Import OpenProject watchers and Asana followers as card watchers. Thanks to xet7.
• Export to GitLab with the people, dates and comments its importer reads. Thanks to xet7.
• Import and export boards as todo.txt. Thanks to xet7.
• Apply a raced undo or redo once instead of once per caller. Thanks to xet7.
• Embed the GitLab fixture's comment so it stays a complete import. Thanks to xet7.
• Keep Sync's rule, notification and webhook effects off unless enabled. Thanks to xet7.

[Package Updates]

[4.188.0]

• Update wekan to 12.14
• Full Changelog
• Alert 547: check the Trello link in a translation test by its parsed host. Thanks to GitHub CodeQL and xet7.
• dompurify 3.4.15 3.4.16 the HTML sanitizer that cleans card text, comments and activity text (the update).
• Attribute email replies to the recipient the reply address was sent to. Thanks to alex131125 and xet7.
• Give every Scrum record a lifetime incarnation and refuse retries against another lifetime. Thanks to xet7.
• Give every activity a lifetime incarnation that notification recovery checks. Thanks to xet7.
• Run manual and scheduled Sync through the durable journal, with replay. Thanks to xet7.
• Make showing dependencies each user's own choice, and add My Dependencies. Thanks to nalilord and xet7.
• Say how many dependency lines were already there after an All Boards import. Thanks to nalilord and xet7.
• Show image previews on cards again: a real cover picture, and a neutral attachment tile. Thanks to xet7.
• Link Sync History rows to the chain when they are written, not planned. Thanks to xet7.

[Package Updates]

[4.189.0]

• Update wekan to 12.15
• Full Changelog
• Attachments and avatars are private, revalidated responses, never shared-cacheable. Thanks to alham-rizvi and xet7.
• Requests go through the SSRF guard, and errors carry no response text. Thanks to alham-rizvi and xet7.
• A CAS callback is accepted only from the browser that started that login. Thanks to xet7.
• Password guessing is braked per account without locking the owner out. Thanks to xet7.
• LDAP server certificates are verified by default again. Thanks to xet7.
• Assigned-only members see only their own cards on every read path. Thanks to xet7.
• Boards with sprints, releases or events export and copy again. Thanks to xet7.
• Dependency lines show on instance boards to every signed-in user. Thanks to xet7.
• A login lockout never disables the account being guessed. Thanks to xet7.
• Rule, webhook and custom-field documents cannot be moved to another board. Thanks to xet7.

[Package Updates]

[4.190.0]

• Update wekan to 12.17
• Full Changelog
• Bind SAML accounts to their original identity. Thanks to alham-rizvi and xet7.
• Verify the native ZIP decompression report is already fixed. Thanks to alham-rizvi and xet7.
• Isolate Firefox app data for macOS browser tests. Thanks to xet7.
• A card copy carries only the subtasks the copier may copy. Thanks to xet7.
• A card insert may not name another board's list or swimlane. Thanks to xet7.
• A rule may not name another board's trigger, and rules match on their own board. Thanks to xet7.
• A date custom field's tooltip names the field instead of saying "Starts on" (#6737). Thanks to rmb82 and xet7.
• Its diagnostics print in production when LDAP logging is on. Thanks to rholighaus and xet7.
• A moved card or swimlane no longer points at the old board's sprint and release. Thanks to xet7.
• Admin Panel / Attachments / Continuous backup streams the database, files and logs. Thanks to xet7.

[Package Updates]

[4.191.0]

• Update wekan to 12.18
• Full Changelog
• Sharp 0.35.4 0.35.5 image processing.
• Chai 6.2.2 6.3.0 test assertions.
• @typescript-eslint/parser 8.70.1 8.71.0 TypeScript parsing for lint checks.
• @typescript-eslint/eslint-plugin 8.70.1 8.71.0 TypeScript lint rules.

[Package Updates]

[4.192.0]

• Update wekan to 12.19
• Full Changelog
• Override every login environment variable in Admin Panel / People, one section per login method. Thanks to xet7.
• The Admin Panel can override DEFAULT_AUTHENTICATION_METHOD, and Default gives the variable back. Thanks to xet7.
• Read LDAP_AUTHENTIFICATION_PASSWORD_FILE and OAUTH2_SECRET_FILE at login. Thanks to Roemer, CrashOverride-lab, ww-daniel-mora and xet7.
• Accept members of nested Active Directory groups with LDAP_GROUP_FILTER_NESTED. Thanks to rmb82 and xet7.
• Admin Panel LDAP settings are used, and Test connection exists. Thanks to xet7.
• CAS_VALIDATE_URL, PROPAGATE_OIDC_DATA=false and three snap help keys work as documented. Thanks to xet7.
• Attach each release file from the job that built it, also when cancelled. Thanks to xet7.