NodeBB - Package Updates

[Package Updates]

[2.18.1]

• Update NodeBB to 4.3.1
• Full Changelog

[Package Updates]

[2.18.2]

• Update NodeBB to 4.3.2
• Full Changelog
• sql injection in sortedSetScan
• escape flag filters
• #13407, don't restart user jobs
• closes #13405, catch errors in ap.verify
• send proper accept header for outgoing webfinger requests
• wrap generateCollection calls in try..catch to send 404 if thrown
• #13397, null values in category sync list
• #13392, regression from c6f2c87, unable to unfollow from pending follows
• #13397, update getCidByHandle to work with remote categories, fix sync with handles causing issues with null entries

[Package Updates]

[2.19.0]

• Update NodeBB to 4.4.0
• Full Changelog
• removal of deprecated privilege hooks (8ea377a)
• removal of filter:flags.getFilters (547fb48)
• removal of filter:user.verify.code (7e25946)
• removal of filter:post.purge (df5c1a9)
• removal of filter:post.purge (c84b72f)
• removal of filter:router.page (9d8061e)
• removal of filter:email.send (b73a8d3)
• adjust Peertube-specific handling to shove mp4 into post attachments, #13324 (799b08d)
• #13081, don't add mention when you are replying to yourself (d586561)
• add announces to postdataobject schema (0f576a4)

[Package Updates]

[2.19.1]

• Update NodeBB to 4.4.1
• Full Changelog
• save width and height values into post attachment
• use local date string for digest subject
• openapi schema to handle additional attachments field in postsobject
• group edit url
• add attachments to getpostsummaries call in search, #13324
• bring back auto-categorization if group and object are same-origin, handle Peertube putting channel names in attributedTo
• #13419, handle remote content with mediaType text/markdown

[Package Updates]

[2.19.2]

• Update NodeBB to 4.4.2
• Full Changelog
• add action:post-queue.save
• restrict access to ap.probe method to registered users, add rate limiting protection
• return 200 for non-implemented activities instead of 501
• closes #13458, check if plugin is system
• add try..catch around topics.post in note assertion logic
• don't throw on unknown post on Undo(Like)
• add try..catch wrapper around Announce(Like) call to internal method so as to not return a 500 just drop the Like activity
• browser title translation
• allow guests to load topic tools if they have privilege to view them
• closes #13454, align dropdowns to opposite side on rtl

[Package Updates]

[2.19.3]

• Update NodeBB to 4.4.3
• Full Changelog
• escape, query params (b02eb57)
• closes #13475, don't store escaped username (806e54b)

[Package Updates]

[2.19.4]

• Update NodeBB to 4.4.4
• Full Changelog
• link to post in preview timestamp
• Add live reload functionality with Grunt watch and Socket.IO (#13489)
• closes #13484, post preview changes
• sanitize svg when uploading site-logo, default avatar and og:image
• more edge cases
• #13484, clear tooltip if cursor leaves link

[Package Updates]

[2.20.0]

• checklist added to manifest

[Package Updates]

[2.20.1]

• Update NodeBB to 4.4.5
• Full Changelog
• add filter:post.getDiffs
• clearTimeout if item is evicted from cache
• use sharp to convert svg to png, closes #13534
• use filename to check for svg, tempPath doesn't always have extension
• apply sanitizeSvg to regular uploads and uploads from manage uploads acp page

[Package Updates]

[2.20.2]

• Update NodeBB to 4.4.6
• Full Changelog
• add new brite skin from bootswatch (567ed87)
• pass max-memory expose-gc as process args (d5f57af)