Wekan - Package Updates

Package Updates

[4.168.0]

Update wekan to 11.53
Full Changelog
Remove incomplete sanitizer test doubles. Thanks to GitHub CodeQL and xet7.
Enforce Amiga-safe filenames on every read. Thanks to xet7.
Stop creating SCRAM-SHA-1 credentials. Thanks to GitHub CodeQL and xet7.
Secure and resume import/export operations. Thanks to xet7.
Validate XLSX sheet colors before CSS serialization. Thanks to rbbjinioeq and xet7.
Add verified recovery and low-load integrity audits. Thanks to xet7.
A file WeKan refuses to serve is no longer served by Meteor-Files instead. Thanks to xet7.
The universal change history is built, and Ctrl+Z reads it instead of positions alone. Thanks to xet7.
Every card group is recorded, and History is one table opened from every menu. Thanks to xet7.
Copying a list copies its cards, into a new list. Thanks to xet7.

Package Updates

[4.169.0]

Update wekan to 11.58
Full Changelog
Now that builds have been fixed, new release with those fixes included.
Fixed are builds of FerretDB, node-patches, mongo-tools-patces and mongosh-patches.
Fix alltests fixtures and HTTP cookie assertions. Thanks to xet7.
Restore independent swimlane and card control colors. Thanks to Alishara and xet7.
Keep upgraded session profiles without a duplicate login. Thanks to Alishara and xet7.
Revert Legacy HTML4. Thanks to xet7.
Lazy-load browser export code and share its ZIP implementation. Thanks to xet7.
Keep profiles and preferences through session upgrades. Thanks to Alishara and xet7.
Fix authentication form keyboard navigation. Thanks to xet7.
Store searchable document text and GIF attachment previews. Thanks to xet7.

Package Updates

[4.170.0]

Update wekan to 11.63
Full Changelog
Stop release-all.sh from inheriting and widening a version-number gap. Thanks to xet7.
Add test-menu.sh and checked-in example inputs for docs/Features. Thanks to xet7.
Reorder the Board View menu and add its not-yet-built views. Thanks to xet7.
Fix OIDC auto-redirect looping until the provider rate-limits it. Thanks to Alishara and xet7.
Hardcode list width to 240px and remove the width/height set-value popups. Thanks to xet7.
Add Markdown import/export and give GitHub-style import loss reporting. Thanks to xet7.
Fix the Windows single-EXE smoke test failing with no error message. Thanks to xet7.
Revert branding and board background images to external URLs. Thanks to xet7.
Fix dependency lines and collapsed lists bleeding past a resized swimlane. Thanks to xet7.
Fix a wrapped changelog summary line. Thanks to xet7.

Package Updates

[4.171.0]

Update wekan to 11.67
Board export to .zip (with attachments) answered a bare 500 error on every request; the archiver dependency's v8 API change was missed in one of the two places WeKan builds a zip on the server. Issue #6681 (OIDC redirect-style login loop) is confirmed already fixed and closed.
Unauthenticated Arbitrary File Write via Path Traversal in Attachment Upload namingFunction. Thanks to xet7.
Unauthenticated DDP Methods Allow Instance-Wide Deletion of Attachments and Avatars. Thanks to xet7.
Add the protected callback the download library needs to gate them. Thanks to xet7.
serveLegacyAvatar Serves Legacy CollectionFS Avatars Without Any Authentication. Thanks to xet7.
Relocate the AppImage's own mount from /tmp to WRITABLE_PATH/app. Thanks to xet7.
Revert "Hardcode list width to 240px and remove the width/height set-value popups". Thanks to xet7.
Add board-wide list-width/swimlane-height resize locks (#6680). Thanks to Hallsie and xet7.
Add a header-icons collapse toggle beside the board title (#6680 follow-up). Thanks to xet7.
Allow storing Infinity/-Infinity doubles, matching MongoDB. Thanks to xet7.

Package Updates

[4.172.0]

Update wekan to 11.72
Full Changelog
Fix board JSON exports containing HTML. Thanks to xet7.
Design: how an attachment is deleted, shown in the card history, restored and purged. Thanks to xet7.

Package Updates

[4.173.0]

Update wekan to 11.73
Full Changelog
Add member-selected calendars and accessible date/time controls. Thanks to mimZD and xet7.
Show full-width calendars directly in date popups. Thanks to xet7.
Fit date controls and add bottom-right popup resizing. Thanks to xet7.
Restrict OAuth2 login by email domain. Thanks to xet7.
Keep shared-list cards scoped during partial-profile loading and impersonation. Thanks to gleneindre and xet7.
Restore first-user CSS and hide unrequested 2FA prompts. Thanks to xet7.
Fix undeclared body-parser import with Rspack 2. Thanks to xet7.
Upgrade Meteor and Rspack build dependencies. Thanks to xet7.
Playwright 1.62.1 1.63.0. Updates the browser-test runner and lockfile. Thanks to dependabot.
Mirror configured organizations with linked attachments and offline HTML/CSV indexes. Thanks to xet7.

Package Updates

[4.174.0]

Package Updates

[4.175.0]

Update wekan to 11.83
Full Changelog
Load custom logos first and upload them to Default Storage. Thanks to xet7.
Stop using archive.org for mirror linked files. Thanks to xet7.
Check translation language lists before tagging. Thanks to xet7.

Package Updates

[4.176.0]

Update wekan to 11.85
Full Changelog
Add an admin date format override for everyone. Thanks to Mathia2 and xet7.
Honor scoped notification subscriptions and settings. Thanks to Nissulya and xet7.
Hide empty card field groups and their separators. Thanks to fabiosalles and xet7.
Restore card popups on My Cards and My Attachments. Thanks to Mathia2 and xet7.
Make WIP group list checkboxes visible and editable. Thanks to Mahgozar and xet7.
Submit checklist creation once per user action. Thanks to rmb82 and xet7.
Verify LDAP session restoration with a large directory. Thanks to Nissulya and xet7.
Align historical translation repairs and card visibility guards. Thanks to xet7.

Package Updates

[4.177.0]

Update wekan to 11.86
Full Changelog
Recover interrupted Snap builds and bound release attachments. Thanks to xet7.

Package Updates

[4.178.0]

Update wekan to 11.87
Full Changelog
Add cleaner minicard and checklist options and date-only formats. Thanks to xet7.
Restore dragging after expanding collapsed lists. Thanks to Nich01asFox and xet7.
Restore visible, selectable comment mention suggestions. Thanks to bbyszio and xet7.
Improve ordering, destination dialogs, keyboard controls and scaled layouts. Thanks to xet7.
Remove the obsolete Summernote integration and editor setting. Thanks to xet7.
Fix Launchpad recovery, ref indexing and artifact downloads. Thanks to xet7.
Verify muted-board fixes through actual SMTP delivery. Thanks to Nissulya and xet7.

Package Updates

[4.179.0]

Update wekan to 11.90
Full Changelog
Retry temporary Snap Store upload failures. Thanks to Copilot and xet7.
Check file status, incomplete metadata and recovery evidence in Problems. Thanks to xet7.
Run Dev server nobuild from the current source checkout. Thanks to xet7.
Provide full MIME detection across server platforms. Thanks to xet7.
Fix document indexing and image dependency lookup in production. Thanks to xet7.
Reject recurring foreign-language and audited bad values from Transifex. Thanks to xet7.
Measure delayed headers after Blaze renders them. Thanks to xet7.
Read current destination documents when selecting a board. Thanks to xet7.
Show the unread notification alert without loading drawer details. Thanks to xet7.
Restore the requested page after cookie authentication. Thanks to xet7.

Package Updates

[4.180.0]

Update wekan to 11.93
Full Changelog
Bound OAuth fixture parsing and hide login exception details. Thanks to GitHub CodeQL and xet7.
Refresh reviewed telemetry inventory and detect stale reviews locally. Thanks to xet7.
Distinguish known dependency keyword false positives from new findings. Thanks to xet7.
Update release runtime discovery and fix Windows source resolution. Thanks to xet7.
Accept valid GitHub SSH origins in release launchers. Thanks to xet7.
Add release menus and automated dependency risk checks. Thanks to xet7.

Package Updates

[4.181.0]

Update wekan to 11.99
Full Changelog
Patch Rsdoctor and restore dependency updates. Thanks to xet7.
Recover stage-package download failures in Snap builds. Thanks to xet7.
Validate release notes before version changes and tagging. Thanks to xet7.
Move Date directly below Change Background Image. Thanks to xet7.
Match Swimlane and List settings icons to the header Board View menu. Thanks to xet7.
Finish Mac smoke tests after successful startup. Thanks to xet7.
Include the missing libatomic runtime library. Thanks to Nissulya, PetitManchot and xet7.
Carry libatomic through every Linux packaging path. Thanks to Nissulya, PetitManchot and xet7.
Accept sidebar invitations without triggering an account block. Thanks to Nissulya and xet7.
Verify Mac archives and keep foreign addons out of platform bundles. Thanks to xet7.

Package Updates

[4.182.0]

Update wekan to 12.04
Enforce account deactivation across authentication and existing sessions. Thanks to esbrito81 and xet7.
Select or unselect all settings in a board settings column. Thanks to xet7.
Choose which objects can be dragged on each board. Thanks to xet7.
Move mixed selections of cards, lists, swimlanes and checklist content. Thanks to xet7.
Show checklist progress and support item dragging on minicards. Thanks to xet7.
Fix checklist item reordering. Thanks to AmigaAbattoir and xet7.
Configure SAML in Admin Panel / People. Thanks to xet7.
Stop repeated automatic OIDC login after a failed callback. Thanks to Alishara and xet7.
Fix Files Report attachment previews and downloads. Thanks to xet7.
Align the S3 client with its upload library. Thanks to xet7.

Package Updates

[4.183.0]

Update wekan to 12.06
Move card-free board duplication to multiselection. Thanks to xet7.
Add five flow reports and reversible dependency history. Thanks to sojournerc and xet7.
Preserve time records and add reversible move reasons. Thanks to ladistrupl, zombah and xet7.
Add swimlane placement and board tile actions. Thanks to bentiss and xet7.
Add label AND/OR filtering and retain filter text. Thanks to Trunkslike, TheBigBloodyB, Roemer and xet7.
Preserve private new-card title drafts. Thanks to TutloTutlo and xet7.
Allow linked-card mirrors on the same board. Thanks to RinTheCatato, mohamed-aziz-chamakh and xet7.
Undo list deletion together with its cards. Thanks to rawwerks and xet7.
Open cards directly beside their minicards. Thanks to xet7.
Keep card windows still when saving dates. Thanks to xet7.

Package Updates

[4.184.0]

Update wekan to 12.08
Full Changelog
Enforce assigned-only permissions in exporter authorization. Thanks to xet7.
Enforce current access on universal History reads and restores. Thanks to xet7.
Reject empty LDAP user credentials in every login path. Thanks to kta1kri and xet7.
Enforce LDAP and CAS login-group restrictions. Thanks to xet7.
Require single-use SAML request correlation. Thanks to xet7.
Choose which structure and data to duplicate from selected boards. Thanks to xet7.
Show a single comment in the minicard badge tooltip. Thanks to lonix1 and xet7.
Filter subtasks by their parent card. Thanks to robinvd and xet7.
Use available width for popup menus and Card settings. Thanks to xet7.
Make text editors multiline and resizable, honor the Enter preference, and restore themed button text. Thanks to xet7.

Package Updates

[4.185.0]

Update wekan to 12.09
Full Changelog
Protect admin-only custom-field reads, writes and exports. Thanks to Hama1cco and xet7.
Accept node-saml response IDs and display popup failures. Thanks to xet7.
Record daily Scrum observations without inventing missing history. Thanks to xet7.
Display measured daily scope and remaining work in Sprint Report. Thanks to xet7.
Keep request secrets out of unhandled API failure diagnostics. Thanks to xet7.
Coordinate Sync runs and settings saves across server processes. Thanks to xet7.
Restore target-language meanings and retain valid downloaded translations. Thanks to xet7.
Copy cards automatically with a rule. Thanks to javen9881, phaseshift3r, gugmt15 and xet7.
Match advanced filters against the named field's own value. Thanks to xet7.
Confirm accepted rule email offline without resending. Thanks to xet7.

Package Updates

[4.186.0]

Update wekan to 12.11
Full Changelog
Restore card update effects and repair EVERYTHING test failures. Thanks to xet7.
Restore locale key structure and accurate translation checks. Thanks to xet7.
Restrict card-copy overrides to text and preserve the source. Thanks to xet7.
Refuse board-copy properties that could replace the source board's identity. Thanks to xet7.
Let a card be a subtask of several parent cards. Thanks to ikomhoog and xet7.
Add a Map board view: cards as markers on an uploaded image. Thanks to javen9881 and xet7.
Add semi-open boards, visible to every signed-in user. Thanks to relikd and xet7.
Archive cards automatically after a chosen number of days without activity. Thanks to xet7.
Copy boards with custom fields again by cloning definitions before cards. Thanks to xet7.
Deliver board invitations to the invitee's notification bell. Thanks to CondensedTea and xet7.

Package Updates

[4.187.0]

Update wekan to 12.12
Full Changelog
Resolve partially accepted rule emails: resend to the unconfirmed only, mark sent or drop. Thanks to xet7.
Review legacy rule emails: re-bind from the current card or discard. Thanks to xet7.
The Rules page uses the board's right sidebar instead of its own. Thanks to xet7.
Bring the GitLab importer and Sync source up to the format contract. Thanks to gotjoshua and xet7.
Import OpenProject watchers and Asana followers as card watchers. Thanks to xet7.
Export to GitLab with the people, dates and comments its importer reads. Thanks to xet7.
Import and export boards as todo.txt. Thanks to xet7.
Apply a raced undo or redo once instead of once per caller. Thanks to xet7.
Embed the GitLab fixture's comment so it stays a complete import. Thanks to xet7.
Keep Sync's rule, notification and webhook effects off unless enabled. Thanks to xet7.

Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.

Cloudron Forum

Wekan - Package Updates