Wekan - Package Updates

[Package Updates]

[4.191.0]

• Update wekan to 12.18
• Full Changelog
• Sharp 0.35.4 0.35.5 image processing.
• Chai 6.2.2 6.3.0 test assertions.
• @typescript-eslint/parser 8.70.1 8.71.0 TypeScript parsing for lint checks.
• @typescript-eslint/eslint-plugin 8.70.1 8.71.0 TypeScript lint rules.

[Package Updates]

[4.192.0]

• Update wekan to 12.19
• Full Changelog
• Override every login environment variable in Admin Panel / People, one section per login method. Thanks to xet7.
• The Admin Panel can override DEFAULT_AUTHENTICATION_METHOD, and Default gives the variable back. Thanks to xet7.
• Read LDAP_AUTHENTIFICATION_PASSWORD_FILE and OAUTH2_SECRET_FILE at login. Thanks to Roemer, CrashOverride-lab, ww-daniel-mora and xet7.
• Accept members of nested Active Directory groups with LDAP_GROUP_FILTER_NESTED. Thanks to rmb82 and xet7.
• Admin Panel LDAP settings are used, and Test connection exists. Thanks to xet7.
• CAS_VALIDATE_URL, PROPAGATE_OIDC_DATA=false and three snap help keys work as documented. Thanks to xet7.
• Attach each release file from the job that built it, also when cancelled. Thanks to xet7.

[Package Updates]

[4.193.0]

• Update wekan to 12.20
• Full Changelog
• Confirm the board domains REST route is site-admin only; GHSA-r3c4-5xwp-vf54 does not apply. Thanks to a25370 and xet7.
• A card open no longer re-renders every card: lists and cards read only the user fields they use. Thanks to markusst1982 and xet7.
• A card opened or closed by its address no longer rebuilds the whole board. Thanks to markusst1982 and xet7.
• Closing a card no longer makes every card re-read the current board. Thanks to markusst1982 and xet7.
• Drag-and-drop options are set only when they change. Thanks to markusst1982 and xet7.
• Opening a card no longer leaves a subscription running after it closes. Thanks to markusst1982 and xet7.
• The snap now defaults cards-loading to auto, so big boards load only their visible cards. Thanks to markusst1982 and xet7.

[Package Updates]

[4.194.0]

• Update wekan to 12.22
• Full Changelog
• D opens the Due date editor of the opened card. Thanks to mimZD and xet7.
• Today's day stands out in the date popup and the board Calendar view. Thanks to mimZD and xet7.
• pbkdf2 3.1.3 3.1.7 key derivation in the browser crypto stubs that meteor-node-stubs bundles; fixes long passwords being hashed again on every iteration, GHSA-477h-4r7f-fvrx.
• A database connection refused by AppArmor is named at once, with the fix. Thanks to fabiosalles and xet7.
• Every service log no longer starts with four snapctl get errors. Thanks to fabiosalles and xet7.
• The Set color to action can pick any card color, not only green. Thanks to titver968 and xet7.
• Select all and Unselect all visibly tick and untick every rule. Thanks to titver968 and xet7.
• Card More and multi-selection list every board for a user without a templates board. Thanks to xet7.
• Filter matches follow a member's access even when the board observer stalls. Thanks to xet7.
• Backup and restore start the database first, and every wait says why it fails. Thanks to fabiosalles and xet7.

[Package Updates]

[4.195.0]

• Update wekan to 12.25
• Full Changelog
• Every provider login uses a full-page redirect by default instead of a popup. Thanks to xet7.
• Caddy sends each WeKan container and Sandstorm the visitor's real address. Thanks to xet7.
• Boards import and export as Todoist project templates (CSV). Thanks to xet7.
• Boards import and export as OPML outlines from Workflowy, Dynalist, Logseq and others. Thanks to xet7.
• Boards import and export as Org mode outlines. Thanks to xet7.
• A rule can set and clear assignees, and needs no title. Thanks to xeruf and xet7.
• A rule can fire when a card moves forward to a later list or back to an earlier one. Thanks to rlach and xet7.
• Header login is set by the environment only, and shown read-only in the Admin Panel. Thanks to xet7.
• Automatic logout with LOGOUT_WITH_TIMER and the LOGOUT_* settings works again. Thanks to xet7.
• Translation tests check links by their parsed host, not as substrings. Thanks to GitHub CodeQL and xet7.

[Package Updates]

[4.196.0]

• Update wekan to 12.27
• Full Changelog
• FerretDB answers a $group with several accumulators, $min/$max and capped max like MongoDB. Thanks to xet7.
• EVERYTHING compares MongoDB 8 and MongoDB 9 too, queried directly. Thanks to xet7.
• MongoDB 6 and 7 are compared too: all eight databases answer all 110 cases the same. Thanks to xet7.
• build.bat runs Mocha, guards, Playwright, builds and Setup the same way as build.sh. Thanks to xet7.
• A link title or URL in an import file can no longer end its link early. Thanks to GitHub CodeQL and xet7.
• Sheet names are read in linear time, and the manual test pages pin their CDN script. Thanks to GitHub CodeQL and xet7.
• The import and export docs test escapes headings, and identity replacements are found in regex form too. Thanks to GitHub CodeQL and xet7.
• Card close from 4 s to 0.1 s on a 4,000-card board; only visible data loads. Thanks to markusst1982 and xet7.
• Attach a card to a card, as Trello's card attachments, and import them from Trello. Thanks to ricardoboss and xet7.
• Calendar Mode, Trello's calendar, below Calendar in the view menu. Thanks to tripledee and xet7.

[Package Updates]

[4.197.0]

• Update wekan to 12.38
• Full Changelog
• End-tag patterns also match tags that carry attributes. Thanks to GitHub CodeQL and xet7.
• It says why an existing account could not be linked, and finds it by email. Thanks to xet7.
• Private starred boards show in the Favorites popup. Thanks to Raymond-Voogt and xet7.
• A dragged list shows clearly where it will land. Thanks to mimZD and xet7.
• Repair target builds and release asset checks. Thanks to xet7.
• Bun builds install Rspack before compiling. Thanks to xet7.
• Bun setup accepts the selected runtime version. Thanks to xet7.
• Package scanning and generated code handle unsafe input. Thanks to GitHub CodeQL and xet7.
• Builds cover every supported OS and CPU. Thanks to dupontbertrand and xet7.
• No pattern is built from an unescaped value, and no escape stops at the first match. Thanks to GitHub CodeQL and xet7.

[Package Updates]

[4.198.0]

• Update wekan to 12.39
• Full Changelog
• It no longer installs docker-cli, whose Go 1.24 filled the scans. Thanks to xet7.
• Eight npm packages inside Meteor's packages are raised to fixed releases. Thanks to xet7.
• They are built with Go 1.27.2 and golang.org/x/net v0.60.0. Thanks to xet7.
• SAML logs in a binding that lacks the optional qualifiers. Thanks to xet7.
• Android and FreeBSD build, and windows-arm64 no longer shows a false error. Thanks to xet7.
• The Docker job checks the bundle version again. Thanks to xet7.
• The build script parity guard passes again. Thanks to xet7.