Greenlight - Package Updates

[Package Updates]

[1.10.0]

• Update greenlight to 3.8.0
• Full Changelog
• Contains multiple security fixes that will not be be made public before April 3, 2026
• Display protected recording formats only if a recording is protectable (#​6196)
• Multiple gem + package updates
• Add optional Accessibility Statement Link (#​6184)
• Allow Admins to send password reset emails for local users (#​6197)
• Add RTL support (#​6187)
• Add disableFormControls functionality to JoinCard (#​6217)
• Language Updates

[Package Updates]

[1.10.1]

• Update greenlight to 3.8.2
• Full Changelog
• Reverted connection_pool gem for compatibility reasons
• Hide + New Room if the user has reached their room limit
• Allow setting a users name when inviting them (Join by Invitation)
• Autocomplete users name and email when clicking on an invitiation link
• Auto verify the users account when joining by invitation

[Package Updates]

[1.10.2]

• Update greenlight to 3.8.2.1
• Full Changelog
• Add env variable to bypass host configuration

[Package Updates]

[1.11.0]

• Run db:migrate:with_data on normal startup as well

[Package Updates]

[1.11.1]

• Update greenlight to 3.8.2.2
• Full Changelog
• Allow html tags in maintenance banner

[Package Updates]

[1.11.2]

• Update greenlight to 3.8.2.3
• Full Changelog
• Multiple gem updates
• Language Updates

[Package Updates]

[1.11.3]

• Update greenlight to 3.8.2.4
• Full Changelog
• Multiple gem updates
• Language Updates

[Package Updates]

[1.12.0]

• Update greenlight to 3.9.0.1
• Full Changelog
• Add missing library that caused app to crash on startup
• URL_HOST is now a required .env variable. Any deployment that does not have it set, will not start up.
• Multiple security fixes (will be made public sometime in the future)
• Multiple gem updates
• Fixed issue with Maintenance Banner not showing correctly on smaller screens
• Fixed issue with user signup failing if avatar is too big
• Increased timeout for connecting to email server

[Package Updates]

[1.13.0]

• Update node-base | final to 24-20261021
• security: fix eMudhra cert compromise

[Package Updates]

[1.13.1]

• Update greenlight to 3.9.1
• Full Changelog
• This release fixes a critical vulnerability. All administrators should upgrade immediately.
• Fixed: arbitrary file read/write through image uploads (Critical).\
• Greenlight processes uploaded avatars and presentations with ImageMagick. Through GHSA-f3w6-w445-fwh9 in Rails' Active Storage, a user who can upload a file could read or write files on the server. This release upgrades to Rails 8.0.5.2, which applies a restrictive ImageMagick security policy to all image processing
• If your instance stores uploads on local disk (the default, i.e. you have not configured S3 or Google Cloud Storage), assume that secrets readable by the application may have been exposed, and rotate them:
• SECRET_KEY_BASE. Changing it signs every user out.
• Database password (DATABASE_URL)
• BIGBLUEBUTTON_SECRET
• SMTP, OpenID Connect, S3/GCS and any other credentials in your environment