Wekan - Package Updates

[Package Updates]

[4.191.0]

• Update wekan to 12.18
• Full Changelog
• Sharp 0.35.4 0.35.5 image processing.
• Chai 6.2.2 6.3.0 test assertions.
• @typescript-eslint/parser 8.70.1 8.71.0 TypeScript parsing for lint checks.
• @typescript-eslint/eslint-plugin 8.70.1 8.71.0 TypeScript lint rules.

[Package Updates]

[4.192.0]

• Update wekan to 12.19
• Full Changelog
• Override every login environment variable in Admin Panel / People, one section per login method. Thanks to xet7.
• The Admin Panel can override DEFAULT_AUTHENTICATION_METHOD, and Default gives the variable back. Thanks to xet7.
• Read LDAP_AUTHENTIFICATION_PASSWORD_FILE and OAUTH2_SECRET_FILE at login. Thanks to Roemer, CrashOverride-lab, ww-daniel-mora and xet7.
• Accept members of nested Active Directory groups with LDAP_GROUP_FILTER_NESTED. Thanks to rmb82 and xet7.
• Admin Panel LDAP settings are used, and Test connection exists. Thanks to xet7.
• CAS_VALIDATE_URL, PROPAGATE_OIDC_DATA=false and three snap help keys work as documented. Thanks to xet7.
• Attach each release file from the job that built it, also when cancelled. Thanks to xet7.

[Package Updates]

[4.193.0]

• Update wekan to 12.20
• Full Changelog
• Confirm the board domains REST route is site-admin only; GHSA-r3c4-5xwp-vf54 does not apply. Thanks to a25370 and xet7.
• A card open no longer re-renders every card: lists and cards read only the user fields they use. Thanks to markusst1982 and xet7.
• A card opened or closed by its address no longer rebuilds the whole board. Thanks to markusst1982 and xet7.
• Closing a card no longer makes every card re-read the current board. Thanks to markusst1982 and xet7.
• Drag-and-drop options are set only when they change. Thanks to markusst1982 and xet7.
• Opening a card no longer leaves a subscription running after it closes. Thanks to markusst1982 and xet7.
• The snap now defaults cards-loading to auto, so big boards load only their visible cards. Thanks to markusst1982 and xet7.

[Package Updates]

[4.194.0]

• Update wekan to 12.22
• Full Changelog
• D opens the Due date editor of the opened card. Thanks to mimZD and xet7.
• Today's day stands out in the date popup and the board Calendar view. Thanks to mimZD and xet7.
• pbkdf2 3.1.3 3.1.7 key derivation in the browser crypto stubs that meteor-node-stubs bundles; fixes long passwords being hashed again on every iteration, GHSA-477h-4r7f-fvrx.
• A database connection refused by AppArmor is named at once, with the fix. Thanks to fabiosalles and xet7.
• Every service log no longer starts with four snapctl get errors. Thanks to fabiosalles and xet7.
• The Set color to action can pick any card color, not only green. Thanks to titver968 and xet7.
• Select all and Unselect all visibly tick and untick every rule. Thanks to titver968 and xet7.
• Card More and multi-selection list every board for a user without a templates board. Thanks to xet7.
• Filter matches follow a member's access even when the board observer stalls. Thanks to xet7.
• Backup and restore start the database first, and every wait says why it fails. Thanks to fabiosalles and xet7.

[Package Updates]

[4.195.0]

• Update wekan to 12.25
• Full Changelog
• Every provider login uses a full-page redirect by default instead of a popup. Thanks to xet7.
• Caddy sends each WeKan container and Sandstorm the visitor's real address. Thanks to xet7.
• Boards import and export as Todoist project templates (CSV). Thanks to xet7.
• Boards import and export as OPML outlines from Workflowy, Dynalist, Logseq and others. Thanks to xet7.
• Boards import and export as Org mode outlines. Thanks to xet7.
• A rule can set and clear assignees, and needs no title. Thanks to xeruf and xet7.
• A rule can fire when a card moves forward to a later list or back to an earlier one. Thanks to rlach and xet7.
• Header login is set by the environment only, and shown read-only in the Admin Panel. Thanks to xet7.
• Automatic logout with LOGOUT_WITH_TIMER and the LOGOUT_* settings works again. Thanks to xet7.
• Translation tests check links by their parsed host, not as substrings. Thanks to GitHub CodeQL and xet7.

[Package Updates]

[4.196.0]

• Update wekan to 12.27
• Full Changelog
• FerretDB answers a $group with several accumulators, $min/$max and capped max like MongoDB. Thanks to xet7.
• EVERYTHING compares MongoDB 8 and MongoDB 9 too, queried directly. Thanks to xet7.
• MongoDB 6 and 7 are compared too: all eight databases answer all 110 cases the same. Thanks to xet7.
• build.bat runs Mocha, guards, Playwright, builds and Setup the same way as build.sh. Thanks to xet7.
• A link title or URL in an import file can no longer end its link early. Thanks to GitHub CodeQL and xet7.
• Sheet names are read in linear time, and the manual test pages pin their CDN script. Thanks to GitHub CodeQL and xet7.
• The import and export docs test escapes headings, and identity replacements are found in regex form too. Thanks to GitHub CodeQL and xet7.
• Card close from 4 s to 0.1 s on a 4,000-card board; only visible data loads. Thanks to markusst1982 and xet7.
• Attach a card to a card, as Trello's card attachments, and import them from Trello. Thanks to ricardoboss and xet7.
• Calendar Mode, Trello's calendar, below Calendar in the view menu. Thanks to tripledee and xet7.

[Package Updates]

[4.197.0]

• Update wekan to 12.38
• Full Changelog
• End-tag patterns also match tags that carry attributes. Thanks to GitHub CodeQL and xet7.
• It says why an existing account could not be linked, and finds it by email. Thanks to xet7.
• Private starred boards show in the Favorites popup. Thanks to Raymond-Voogt and xet7.
• A dragged list shows clearly where it will land. Thanks to mimZD and xet7.
• Repair target builds and release asset checks. Thanks to xet7.
• Bun builds install Rspack before compiling. Thanks to xet7.
• Bun setup accepts the selected runtime version. Thanks to xet7.
• Package scanning and generated code handle unsafe input. Thanks to GitHub CodeQL and xet7.
• Builds cover every supported OS and CPU. Thanks to dupontbertrand and xet7.
• No pattern is built from an unescaped value, and no escape stops at the first match. Thanks to GitHub CodeQL and xet7.

[Package Updates]

[4.198.0]

• Update wekan to 12.39
• Full Changelog
• It no longer installs docker-cli, whose Go 1.24 filled the scans. Thanks to xet7.
• Eight npm packages inside Meteor's packages are raised to fixed releases. Thanks to xet7.
• They are built with Go 1.27.2 and golang.org/x/net v0.60.0. Thanks to xet7.
• SAML logs in a binding that lacks the optional qualifiers. Thanks to xet7.
• Android and FreeBSD build, and windows-arm64 no longer shows a false error. Thanks to xet7.
• The Docker job checks the bundle version again. Thanks to xet7.
• The build script parity guard passes again. Thanks to xet7.

[Package Updates]

[4.199.0]

• Update wekan to 12.46
• Full Changelog
• SQRL's sqrlonly and hardlock lock an account to SQRL. Thanks to xet7.
• Windows single sign-on with Kerberos or NTLM. Thanks to nikalasmd and xet7.
• WeKan's changes are written back to GitLab. Thanks to gotjoshua and xet7.
• Planka, Microsoft To Do, KanbanFlow, Basecamp, Google Tasks and Google Keep import from their APIs. Thanks to xet7.
• Channels are the cards with a conversation on every board, with unread counts. Thanks to xet7.
• Batch undo and redo of a large sprint is 2.6 times faster. Thanks to xet7.
• Two changes saved at the same moment no longer fork a board's History chain. Thanks to xet7.
• The email view renders its subjects and previews as Markdown. Thanks to xet7.
• Version Control, the activity feed and the email list render titles as Markdown. Thanks to xet7.
• The activity feed names the checklist, item, lists and people it is about. Thanks to xet7.

[Package Updates]

[4.200.0]

• Update wekan to 12.48
• Full Changelog
• Assigned-only members get only their own cards' files and document text. Thanks to crypto-nidh and xet7.
• No expressions in scripts, every action pinned, and write access only where it is used. Thanks to Qlty and xet7.
• The Windows bundles build again: release scripts read their files as UTF-8. Thanks to xet7.
• The NetBSD bundle builds again: node-gyp finds pkgsrc's Python. Thanks to xet7.
• It imports new users again and keeps the sync interval it is given. Thanks to tromlet and xet7.
• Caddyfile examples are Caddy 2, and Caddy proxies to where WeKan listens. Thanks to Group-Deed and xet7.
• List Sync works from a Sandstorm grain. Thanks to xet7.
• The import brings closed sprints, rebuilt from the issues. Thanks to xet7.
• Jira, Deck, OpenProject, Asana and GitLab imports bring their attachment files. Thanks to xet7.
• A sync interval in milliseconds no longer stops WeKan. Thanks to B2RN, tromlet and xet7.

[Package Updates]

[4.201.0]

• Update wekan to 12.49
• Full Changelog
• Board role permissions apply to every board view and every path to a card. Thanks to crypto-nidh, binary-lover and xet7.
• Board roles: how a role applies to every board view, the API and every write. Thanks to xet7.
• Custom roles from the Admin Panel apply in every board view as built-in roles do, verified for every combination. Thanks to xet7.

[Package Updates]

[4.202.0]

• Update wekan to 12.52
• Full Changelog
• Release builds - the Android, musl and single-file builds of v12.51, and the guards of the dependency updates.
• The guards follow freebsd-vm 1.5.9 and qrcode-generator 2.0.4. Thanks to dependabot and xet7.
• Android bundles: the checkout belongs to Termux's user, so npm may chmod. Thanks to xet7.
• musl bundles carry libstdc++ and libgcc_s, so their Node.js starts on a bare Alpine. Thanks to xet7.
• Single files: a Node.js that LIEF cannot inject is skipped with the reason, not failed. Thanks to xet7.
• A due date typed at the end of a card title becomes its due date. Thanks to xet7.
• Similar cards and possible duplicates while adding a card and on the opened card. Thanks to xet7.
• Rules suggests rules from what people keep doing by hand. Thanks to xet7.
• Board menu: Summary, what each person did in the last day or week. Thanks to xet7.
• The web login no longer tells by its response time whether a username exists. Thanks to xet7.