HumHub - Package Updates

Package Updates

[1.9.0]

Update humhub to 1.18.0
Full Changelog
Bootstrap 5 is the default CSS framework, which may require migration of custom modules or themes.
Caching must now be configured via the configuration file, with FileCache as the default.
Fix #7921: Alert widget broken since beta.6
Fix #7925: Space Members dropdown menu
Fix #7924: Admin Pending Approvals buttons layout
Fix #7928: Top menu: long usernames overlap notification buttons for md screen sizes
Fix #7930: Remove bottom margin to RichText Create Input fields
Fix #7937: Spaces and Marketplace layouts are missing fluid container
Fix #7932: Fix content default visibility after form submit

Package Updates

[1.9.1]

Update humhub to 1.18.1
Full Changelog
Fix #8003: Migration::foreignIndexExists() doesn't find tables in braces
Fix #8002: Comment dropdowns truncated (e.g. to select a title)
Fix #8007: Fix unsaved changes warning on Profile Edit page
Fix #8008: Space Tour Wrong Target for "Preferences" menu
Fix #8013: Fix error displaying on update a module
Fix #8009: Administration Group label misplaced
Fix #8012: Modal backdrop over the account deletion modal for new Users
Enh #8017: Exclude vendor from module i18n extract
Fix #8020: Some email notifications are missing auto-contrast for the button text color
Fix #8027: Cannot register if showRegistrationForm is disabled

Package Updates

[1.9.3]

Package Updates

[1.9.4]

Update humhub to 1.18.4
Full Changelog
Enh #8170: Handle controllers with using external modules
Enh #8176: Upgrade Twig package to v3.26.0
Fix #8189: Scroll to highlighted comment when navigating from Last Activities
Fix #8188: AutoContrast and Sign In Footer Links
Fix #8193: Fix rendering of the widget AuthChoice
Fix #8195: Improve permalink error handling for guest users
Fix #8197: Don't use the setting "Allow individual topics" for user and space tags
Fix #8264: Update Twig to 3.28.0 (GHSA-529h-vh3j-85hq / CVE-2026-46636 - sandbox allow-list bypass on cached templates)
Enh #8300: Update composer package web-token/jwt-library to 4.1.7 (GHSA-3prj-6hqw-cm82, GHSA-jc38-x7x8-2xc8)
Enh #8307: Add public and standalone file flags for module-managed files (e.g. config images) with explicit access semantics

Package Updates

[1.9.5]

Update humhub to 1.18.5
Full Changelog
Fix #8340: Defer module update opcache_reset() to the end of the request to avoid interrupting the update in worker runtimes (e.g. FrankenPHP)
Fix #8357: Cast app name to string (This fixes the issue of instances with names consisting of numbers not being able to be added to the mobile app)
Enh #8346: Force Select2 dropdowns to always open below the field instead of flipping above when there's not enough space
Fix #8359: Display user sub name on invite after space creating
Fix #8361: Prevent non-creators from attaching or deleting another user's unassigned file
Fix #8365: Encode deletion reason in comment and content deletion notifications
Fix #8374: Ensure adding group members is restricted to groups the current user manages
Fix #8373: Ensure the oEmbed consent prompt encodes the requested URL so embedded markup stays inert
Fix #8381: Limit request supplied membership and friendship button options to presentation values, so titles, urls and action attributes stay server generated, and encode the membership button markup in the membership request response so it cannot break out of the script context
Fix #8376: Ensure space member role changes are limited to assignable roles

Cloudron Forum