NodeBB - Package Updates

Package Updates

[2.18.1]

Package Updates

[2.18.2]

Update NodeBB to 4.3.2
Full Changelog
sql injection in sortedSetScan
escape flag filters
#13407, don't restart user jobs
closes #13405, catch errors in ap.verify
send proper accept header for outgoing webfinger requests
wrap generateCollection calls in try..catch to send 404 if thrown
#13397, null values in category sync list
#13392, regression from c6f2c87, unable to unfollow from pending follows
#13397, update getCidByHandle to work with remote categories, fix sync with handles causing issues with null entries

Package Updates

[2.19.0]

Update NodeBB to 4.4.0
Full Changelog
removal of deprecated privilege hooks (8ea377a)
removal of filter:flags.getFilters (547fb48)
removal of filter:user.verify.code (7e25946)
removal of filter:post.purge (df5c1a9)
removal of filter:post.purge (c84b72f)
removal of filter:router.page (9d8061e)
removal of filter:email.send (b73a8d3)
adjust Peertube-specific handling to shove mp4 into post attachments, #13324 (799b08d)
#13081, don't add mention when you are replying to yourself (d586561)
add announces to postdataobject schema (0f576a4)

Package Updates

[2.19.1]

Update NodeBB to 4.4.1
Full Changelog
save width and height values into post attachment
use local date string for digest subject
openapi schema to handle additional attachments field in postsobject
group edit url
add attachments to getpostsummaries call in search, #13324
bring back auto-categorization if group and object are same-origin, handle Peertube putting channel names in attributedTo
#13419, handle remote content with mediaType text/markdown

Package Updates

[2.19.2]

Update NodeBB to 4.4.2
Full Changelog
add action:post-queue.save
restrict access to ap.probe method to registered users, add rate limiting protection
return 200 for non-implemented activities instead of 501
closes #13458, check if plugin is system
add try..catch around topics.post in note assertion logic
don't throw on unknown post on Undo(Like)
add try..catch wrapper around Announce(Like) call to internal method so as to not return a 500 just drop the Like activity
browser title translation
allow guests to load topic tools if they have privilege to view them
closes #13454, align dropdowns to opposite side on rtl

Package Updates

[2.19.3]

Package Updates

[2.19.4]

Package Updates

[2.20.0]

Package Updates

[2.20.1]

Package Updates

[2.20.2]

Package Updates

[2.21.0]

Update NodeBB to 4.5.0
Full Changelog
use sbd to more intelligently put together a sub-500 character summary based on existing sentences in post content
add sbd dependency to improve title generation (and for summary generation, later)
send local posts out to established relays
relay handshake logic, handle Follow/Accept, send back Accept.
adding and removing relays from AP settings page in ACP
apply auto-categorization logic
ability to add/remove auto-categorization rules for incoming federated content
re-jigger 'add category' button to allow addition of remote category to main index
add Urdu localisation, thank you!
add wordpress

Package Updates

[2.21.1]

Update NodeBB to 4.5.1
Full Changelog
use _variables.scss overrides from acp in custom skins and bootswatch skins as well (0c48e0e)
remove unused dependency (8d7e353)
remove test for 1b12 announce on topic move (as this no longer occurs) (9221d34)
use existing id if checkHeader returns false (e699684)
regression that caused Piefed (or potentially others) content to be dropped on receipt (86d9016)
remove faulty code that tried to announce a remote object but couldn't as the ID was not a number (7adfe39)

Package Updates

[2.21.2]

Update NodeBB to 4.5.2
Full Changelog
add a term param to recent controller so it can be controller without req.query.term
add a new hook to override generateUrl in navigator.js
add topic templates per category, closes #13649
skip header checking during note assertion if test runner is active
update note assertion topic members check to simpler posts.exists check
re-jig handling of ap tag values so that only hashtags are considered (not Piefed community tags, etc.)
missing actor assertion on 1b12 announced upboat
use parameterized query for key lookup
add pre-processing step to title generation logic so sbd doesn't fall over so badly
switch to action

Package Updates

[2.22.0]

Update NodeBB to 4.6.0
Full Changelog
ability to nickname remote categories, closes #13677
allow activities to be addressed to as:Public or Public to be treated as public content
allow user auto-categorization rule
add minor pre-processing step to better handle header elements in incoming html
login handler to handle if non-confirmed email is entered
allow quote-inline class in mocks sanitizer so quote-post fallback elements can be detected and removed during title generation, fixes #13688
force outgoing page on direct access to /ap handler
update outgoing page to match 404 design
don't begin processing local login if the passed-in username isn't even valid
#13667, record to instances:lastSeen instead of domains:lastSeen

Package Updates

[2.22.1]

Package Updates

[2.22.2]

Package Updates

[2.22.3]

Update NodeBB to 4.6.3
Full Changelog
update validator dep. to get fix for CVE-2025-56200 (af477d0)
missing logic in mocks.notes.private that precluded the use of emoji (76a07d5)
tiny fix for IS when page is empty (12dab84)

Package Updates

[2.23.0]

Update NodeBB to 4.7.0
Full Changelog
federate out undo(announce) when moving topics (832477f)
native image appending for remote private notes (822f4ed)
add isNumber to client-side helpers (172aabc)
handle Move(Context) activity (8ca52c7)
update Remove(Context) to use target instead of origin, federate out Move(Context) on topic move between local cids (d02e188)
context removal logic (aka moving topics to uncategorized, and federating this to other NodeBBs) (34e95e6)
add new setting to control posts uploads being shown as thumbs (97e59fb)
handle Delete(Context) as a move to cid -1 if the remote context still exists (f98a721)

Cloudron Forum