All Versions
26
Latest Version
Avg Release Cycle
113 days
Latest Release
969 days ago
Changelog History
Page 1
Changelog History
Page 1
-
v9.2.7 Changes
February 07, 2022๐ This release fixes a security issue:
- ๐ Fix setting the article password from the Admin #1044
-
v9.2.6 Changes
January 07, 2022๐ This release fixes a minor security issue:
- Rate-limit Devise logins and password resets
โ Additionally, it includes the following change:
- โ Add documentation about use of the media library
-
v9.2.5 Changes
October 11, 2021๐ This release fixes several security issues:
- ๐ฎ Force session cookie to be secure in production
- Block ability to switch themes using a GET request; use a POST instead
- Disallow user self-registration rather than hiding it
- ๐ป Let the browser not cache admin pages
- Limit the set of allowed mime types for uploaded media
- Limit allowed HTML in articles, pages and notes
โ Additionally, it includes the following changes:
- ๐ Fix resource size display in admin resource list
- Trigger download of media in the Media Library in admin instead of displaying them directly
-
v9.2.4 Changes
October 02, 2021- ๐ Require at least version 1.12.5 of nokogiri to avoid a security issue
- โฌ๏ธ Drop support for Ruby 2.4 since it is incompatible with nokogiri 1.12.5
-
v9.2.3 Changes
May 22, 2021- โฌ๏ธ Bump Rails dependency to 5.2.6
-
v9.2.2 Changes
March 21, 2021- Fix the
publify:textile_to_markdown
task. This task failed on feedback and pages.
- Fix the
-
v9.2.1 Changes
March 20, 2021๐ This release updates dependencies due to security issues.
- โฌ๏ธ Bump minimum Rails version to 5.2.4.5
- โก๏ธ Update
activerecord-session_store
dependency to 2.0.0
-
v9.2.0 Changes
January 17, 2021๐ฅ Breaking changes
- โฌ๏ธ Upgrade to Rails 5.2 (mvz)
- โฌ๏ธ Drop support for custom mail.yml configuration. Mail settings should now be configured in config/environments/production.rb (mvz)
- โฌ๏ธ Drop support for custom timezone.yml configuration. If relevant, the timezone can be set in config/application.rb (mvz)
- โฌ๏ธ Drop support for Ruby 2.2 and 2.3 (mvz)
- โฌ๏ธ Drop support for humans.txt (mvz)
- ๐ Deprecate use of Textile. The admin will warn about any content that uses Textile formatting. A task has been added to convert this content to Markdown. The next release of Publify will drop Textile support entirely (mvz)
Other changes
- ๐ Fix comment preview (mvz)
- ๐ Fix gravatar request URL (mvz)
- ๐ Fix various issues with the bootstrap-2 theme (mvz)
- โ Add support for Ruby 2.7 (mvz)
- โก๏ธ Update dependencies (mvz)
- ๐ Allow rake tasks to be loaded when only production gems are present (mvz)
-
v9.1.0 Changes
April 19, 2018 -
v9.0.1 Changes
August 31, 2017๐ This is a bug fix release. It provides the following updates:
- ๐ Enforce use of at least Rails 5.0.4.
- The email field is handled correctly when users sign up (#819)
- The sign-up and login forms use the correct layout (#819)
- Theme-related JavaScript files are served correctly (#823)
- โก๏ธ Russian translations have been updated (#820)
- The link_to_author setting that no longer had an interface has been removed (#816)
- โก๏ธ Dependencies were updated (#815)