Etherpad Lite - Package updates

[girish]

[3.1.0]

• Update Etherpad to 1.8.5
• Full changelog
• IMPORTANT DROP OF SUPPORT: Drop support for IE. Browsers now need async/await.
• IMPORTANT SECURITY: Rate limit Commits when env=production
• SECURITY: Non completed uploads no longer crash Etherpad
• SECURITY: Log authentication requests
• FEATURE: Support ES6 (migrate from Uglify-JS to Terser)
• FEATURE: Improve support for non-cookie enabled browsers
• FEATURE: New hooks for index.html
• FEATURE: New script to delete sessions.
• FEATURE: New setting to allow import withing an author session on a pad
• FEATURE: Checks Etherpad version on startup and notifies if update is available. Also available in /admin interface.
• FEATURE: Timeslider updates pad location to most recent edit

[girish]

[3.1.1]

• Update Etherpad to 1.8.6
• Full changelog
• SECURITY: Fix authentication bypass vulnerability
• API: Update version to 1.2.15
• FEATURE: Add copyPadWithoutHistory API (#4295)
• FEATURE: Package more asset files to save http requests (#4286)
• MINOR: Improve UI when reconnecting

[girish]

[3.2.0]

• Disable non-sso mode since it's not working

[girish]

[3.3.0]

• Set trustProxy to true, so that etherpad detects the correct IP from reverse proxy
• Update ep_cloudron packages

[nebulon]

[3.4.0]

• Update Etherpad to 1.8.11
• Update base image to version 3

[nebulon]

[3.4.1]

• Update Etherpad to 1.8.12
• Fixed a regression in v1.8.11 which caused some pad names to cause Etherpad to restart.
• Fixed a bug in the dirty database driver that sometimes caused Node.js to crash during shutdown and lose buffered database writes.
• Fixed a regression in v1.8.8 that caused "Uncaught TypeError: Cannot read property '0' of undefined" with some plugins (#4885)
• Less warnings in server console for supported element types on import.
• Support Azure and other network share installations by using a more truthful relative path.

[nebulon]

[3.4.2]

• Update Etherpad to 1.8.13
• Fixed a bug in the safeRun.sh script (#4935)
• Don't create sessions on some static resources (#4921)
• Fixed issue with non-opening device keyboard on smartphones (#4929)
• Add version string to iframe_editor.css to prevent stale cache entry (#4964)
• Refactor pad loading (no document.write anymore) (#4960)
• Improve import/export functionality, logging and tests (#4957)
• Refactor CSS manager creation (#4963)
• Better metrics
• Add test for client height (#4965)

[girish]

[3.5.0]

• ep_cloudron - authFailure is deprecated
• ep_cloudron - Add preAuthorize hook for non-authenticate routes
• ep_cloudron - do not use admin/ for plugin auth
• ep_cloudron - remove unused authorize hook

[nebulon]

[3.5.1]

• Update Etherpad to 1.8.13
• Fixed a persistent XSS vulnerability in the Chat component
• Full changelog

[nebulon]

[3.5.2]

• Update ep_clouron to 4.2.2

[nebulon]

[3.5.3]

• Update ep_cloudron to 4.2.4
• Allows for better use of requireAuthentication=false

[nebulon]

[3.5.4]

• Update Etherpad to 1.8.15
• Full changelog

[nebulon]

[3.5.5]

• Update Etherpad to 1.8.16
• Full changelog

[girish]

[3.5.6]

• Update base image to 3.2.0

[nebulon]

[3.5.7]

• Update to new ep_cloudron@4.2.5

[nebulon]

[3.5.8]

• Update Etherpad to 1.8.17
• Full changelog
• Fixed a vunlerability in the CHANGESET_REQ message handler that allowed a user with any access to read any pad if the pad ID is known.
• Fixed a bug that caused all pad edit messages received at the server to go through a single queue. Now there is a separate queue per pad as intended, which should reduce message processing latency when many pads are active at the same time.

[girish]

[3.5.9]

• Update Etherpad to 1.18.18
• Full changelog
• Upgraded ueberDB to fix a regression with CouchDB

[girish]

[3.6.0]

• Use base image 4.0.0

[nebulon]

[3.7.0]

• Update Etherpad to 1.19.0
• Full changelog

[girish]

[3.7.1]

• Update Etherpad to 1.19.1
• Full changelog