Bot releases are visible (Hide)

framework - v1.0.3

Published by luceos over 3 years ago

Changed

Removed [forum] prefix from Request Password and Email Confirmation emails (a4a81c0)
Adopt huntr.dev for handling our security vulnerability reports (https://github.com/flarum/core/pull/2918)
Maintenance handler can now be replaced through the service container (ioc) (4acff91)
The colors on the auto generated avatars are now based on the Display Name of the user (https://github.com/flarum/core/pull/2873)

Fixed

Avatar in notifications list are incorrectly aligned (https://github.com/flarum/core/pull/2906)
FilesystemManager is not compatible with upstream Laravel implementation (https://github.com/flarum/core/pull/2936)

framework - v1.0.2

Published by davwheat over 3 years ago

Fixed

Critical XSS vulnerability (https://github.com/flarum/core/security/advisories/GHSA-5qjq-69w6-fg57 / CVE-2021-32671)

framework - v1.0.1

Published by luceos over 3 years ago

Fixed

Installation fails on environments without proc_* functions enabled or mysql client binary (https://github.com/flarum/core/issues/2890)

framework - v1.0.0

Published by luceos over 3 years ago

Added

Task scheduling
load() method on ApiController extender to allow eager loading of relations (https://github.com/flarum/core/pull/2724)
Installation supports enabling a set of extensions (https://github.com/flarum/core/pull/2757)
RequestUtil helper class added to abstract the logic of the actor, session, locale and route name from the request (https://github.com/flarum/core/pull/2449)
Code scanning action with GitHub CodeQL (https://github.com/flarum/core/pull/2744)
The Formatter extender now has an unparse method to allow extensions to hook into the unparsing of content (https://github.com/flarum/core/pull/2780)
A Filesystem extender allows direct modification and addition of filesystem disks (https://github.com/flarum/core/pull/2732)
A slug driver based on the User ID was introduced (https://github.com/flarum/core/pull/2787)
An extensible users list was added to the admin area (https://github.com/flarum/core/pull/2626)
Headers hardened by adding Referer Policy, Xss Protection and Content type (https://github.com/flarum/core/pull/2721)
Tooltip component (https://github.com/flarum/core/pull/2843)
Moved insertText and styleSelectedText from markdown to core (https://github.com/flarum/core/pull/2826)
A squashed database schema install dump to speed up new installs (https://github.com/flarum/core/pull/2842)
Pagination in the canonical URL for discussion pages (https://github.com/flarum/core/pull/2853)
PaginatedListState for the DiscussionList and to support paginated lists in the frontend (https://github.com/flarum/core/pull/2781)
Introduce the new webpack config and flarum-tsconfig for typehinting (https://github.com/flarum/core/pull/2856)

Changed

Now tracking bundle sizes to keep an eye on web performance (https://github.com/flarum/core/pull/2695)
Eager load relations on ListPostsController to improve performance (https://github.com/flarum/core/pull/2717)
Replace classList with clsx library (https://github.com/flarum/core/pull/2760)
Replaced the javascript based loading spinner with a pure CSS version (https://github.com/flarum/core/pull/2764)
Route names now have to be unique (https://github.com/flarum/core/pull/2771)
ActorReference is now available from the error handler middleware (https://github.com/flarum/core/pull/2410)
The migrations table now has an Auto Increment ID (https://github.com/flarum/core/pull/2794)
Assets and avatars are now managed using Laravel filesystem disks (https://github.com/flarum/core/pull/2729)
Extracted asset publishing (php flarum assets:publish) from migrating (https://github.com/flarum/core/pull/2731)
Assets were compiled in the format <asset>-<revision>.<js|css>, this is now <asset>.<js|css>?v=<revision> (https://github.com/flarum/core/pull/2805)
The powered by header can now be configured in the config under headers (https://github.com/flarum/core/pull/2777)
Switched to the ICU format for translation files (https://github.com/flarum/core/pull/2759)
Allow extend and override to apply to multiple methods in one call
Notifications dropdown and list refactored (https://github.com/flarum/core/pull/2822)
Updated validation locale strings based on Laravel 8 changes (https://github.com/flarum/core/pull/2829)
Caching of permissions is now taken care of centrally, reducing code duplication (https://github.com/flarum/core/pull/2832)
Replaced lodash-es by throttle-debounce to reduce bundle size (https://github.com/flarum/core/pull/2827)
Internal API requests are now executed through middleware (https://github.com/flarum/core/pull/2783)
Permission changes: viewDiscussions to viewForum and viewUserList to searchUsers (https://github.com/flarum/core/pull/2854)

Fixes

Javascript is shown when editing the title of a discussion (https://github.com/flarum/core/pull/2693)
Canonical url logic uses request object which causes wrong URL's when a different page is default (https://github.com/flarum/core/pull/2674)
Dropdown toggle has no aria label (https://github.com/flarum/core/pull/2668)
Nav drawer is focusable when off-screen on small viewports (https://github.com/flarum/core/pull/2666)
Search input has no aria-label and no role (https://github.com/flarum/core/pull/2669)
Code duplication exists between SendConfirmationEmailController and AccountActivationMailer (https://github.com/flarum/core/pull/2493)
When setting tags as homepage default, visiting a tag will show all posts (https://github.com/flarum/core/pull/2754)
Locale cache is cleared twice when cache clearing (https://github.com/flarum/core/pull/2738)
When cache clearing fails an exception can be thrown due to a partial flush (https://github.com/flarum/core/pull/2756)
Database migrations rely on MyISAM even though the eventual migrated database does not use it (https://github.com/flarum/core/pull/2442)
Discussion search result is not sorted by relevance by default (https://github.com/flarum/core/pull/2773)
Extensions cannot register custom searcher classes (https://github.com/flarum/core/pull/2755)
Searching discussion titles is not possible (https://github.com/flarum/core/pull/2698)
Boot errors due to failing extenders throw a generic error (https://github.com/flarum/core/pull/2740)
Required argument to Component.$() isn't really required (https://github.com/flarum/core/pull/2844)
Component does not allows use of all mithril lifecycle functionality (https://github.com/flarum/core/pull/2847)

Removed

The make:migration command has been removed (https://github.com/flarum/core/pull/2686)
Background fade on the header has been removed (https://github.com/flarum/core/pull/2685)
Remove vendor prefixes in less (https://github.com/flarum/core/pull/2766)
The session is no longer available from the User class (https://github.com/flarum/core/pull/2790)
The mail key is removed from the laravel related config (https://github.com/flarum/core/pull/2796)

framework - v0.1.0-beta.16

Published by tankerkiller125 over 3 years ago

Added

Allow event subscribers (https://github.com/flarum/core/pull/2535)
Allow Settings extender to have a default value (https://github.com/flarum/core/pull/2495)
Allow hooking into the sending of notifications before being send (https://github.com/flarum/core/pull/2533)
PHP 8 support (https://github.com/flarum/core/pull/2507)
Search extender (https://github.com/flarum/core/pull/2483)
User badges to post preview (https://github.com/flarum/core/pull/2555)
Optional extension dependencies allow a booting order (https://github.com/flarum/core/pull/2579)
Auth extender (https://github.com/flarum/core/pull/2176)
X-Powered-By header added to allow indexers easier data aggregation of Flarum adoption (https://github.com/flarum/core/pull/2618)

Changed

Run integration tests in transaction (https://github.com/flarum/core/pull/2304)
Allow policies to return a boolean for simplified allow/deny (https://github.com/flarum/core/pull/2534)
Converted highlight helper to typescript (https://github.com/flarum/core/pull/2532)
Add accessibility attributes to Mark as Read button (https://github.com/flarum/core/pull/2564)
Dismiss errors on change email modal upon a new request (00913d5)
Disabled extensions now are marked with a red circle instead of a red dot (https://github.com/flarum/core/pull/2562)
Extension dependency errors now show the extension title instead of the ID (https://github.com/flarum/core/pull/2563)
Change mutate method on ApiSerializer extender to attributes (https://github.com/flarum/core/pull/2578)
Moved locale files to the core from the language pack (https://github.com/flarum/core/pull/2408)
AdminPage extensibility and generic improvements (https://github.com/flarum/core/pull/2593)
Remove entry of authors, link to https://flarum.org/team (https://github.com/flarum/core/pull/2625)
Search and filtering are split (https://github.com/flarum/core/pull/2454)
Move IP identification into a middleware (https://github.com/flarum/core/pull/2624)
Editor Driver abstraction introduced (https://github.com/flarum/core/pull/2594)
Allow overriding routes (https://github.com/flarum/core/pull/2577)
Split user edit permissions into permissions for editing of user credentials, username, groups and suspending (https://github.com/flarum/core/pull/2620)
Reduced number of admin extension categories (https://github.com/flarum/core/pull/2604)
Move search related classes to a dedicated Query namespace (https://github.com/flarum/core/pull/2645)
Rewrite common helpers into typescript (https://github.com/flarum/core/pull/2541)
TextEditor is moved to the common namespace for use in the admin frontend (https://github.com/flarum/core/pull/2649)
Update Laravel/Illuminate components to 8 (https://github.com/flarum/core/pull/2576)
Eager load relations in discussion listing to improve performance (https://github.com/flarum/core/pull/2639)
Adopt flarum/testing package (https://github.com/flarum/core/pull/2545)
Replace user gambit with author gambit (612a57c)
Posts page of on user profile loads posts using username instead of id (30017ee)

Fixed

Transform css breaks iOS scroll functionality (https://github.com/flarum/core/pull/2527)
Composer header is hidden on mobile devices (https://github.com/flarum/core/pull/2279)
Cannot delete a post or discussion of a deleted user (https://github.com/flarum/core/pull/2521)
DiscussionListPane jumps around not keeping the scroll position (https://github.com/flarum/core/pull/2402)
Infinite scroll on notifications dropdown broken (https://github.com/flarum/core/pull/2524)
The show language selector switch remains toggled on (9347b12)
Model Visibility extender throws exception on extensions that aren't installed or enabled (https://github.com/flarum/core/pull/2580)
Extensions are marked as enabled when enabling fails to unmet extension dependencies (https://github.com/flarum/core/pull/2558)
Routes to admin extension pages without a valid ID break the admin page (https://github.com/flarum/core/pull/2584)
Disabled fieldset use an incorrect CSS property disallowed (https://github.com/flarum/core/pull/2585)
Scrolling to a post that is already loaded the Load More button shows and does not trigger (https://github.com/flarum/core/pull/2388)
Opening discussions on some mobile devices require a double tap (https://github.com/flarum/core/pull/2607)
iOS devices show erratic behavior in the post stream while updating (https://github.com/flarum/core/pull/2548)
Small mobile screens partially hides the composer when the keyboard is open (https://github.com/flarum/core/pull/2631)
Clearing cache does not clear the template cache in storage/views (https://github.com/flarum/core/pull/2648)
Boot errors show critical information (https://github.com/flarum/core/pull/2633)
List user endpoint discloses last online even if user choose against it (https://github.com/flarum/core/pull/2634)
Group gambit disclosed hidden groups (https://github.com/flarum/core/pull/2657)
Search results on small windows not fully visible (https://github.com/flarum/core/pull/2650)
Composer goes off screen on Safari when starting to type (https://github.com/flarum/core/pull/2660)
A search that has no results shows the search results dropdown (b88a7cb)
The composer modal moves around when typing on Safari (a64c398)

Removed

Deprecated CSRF wildcard path match
Deprecated policy and visibility scoping events
Deprecated post types event
Deprecated validation events
Deprecated notification events
Deprecated floodgate
Deprecated user preferences event
Deprecated formatting events
Deprecated api events
Deprecated bootstrap.php support
PHP 7.2 support (https://github.com/flarum/core/pull/2507)
Bidi attribute in the rendered HTML (https://github.com/flarum/core/pull/2602)
AccessToken::find, use AccessToken::findValid instead (https://github.com/flarum/core/pull/2651)

Deprecated

GetModelIsPrivate event (https://github.com/flarum/core/pull/2587)
CheckingPassword event (https://github.com/flarum/core/pull/2176)
event() helper (https://github.com/flarum/core/pull/2608)
AccessToken::generate argument $lifetime (https://github.com/flarum/core/pull/2651)
Rememberer::remember argument $token should receive an instance of RememberAccessToken with AccessToken being deprecated (https://github.com/flarum/core/pull/2651)
Rememberer::rememberUser (https://github.com/flarum/core/pull/2651)
SessionAuthenticator::logIn argument $userId, should be replaced with AccessToken (https://github.com/flarum/core/pull/2651)
TextEditor has been moved to common (https://github.com/flarum/core/pull/2649)
UserFilter (91e8b56)

framework - v0.1.0-beta.15

Published by luceos almost 4 years ago

Added

Slug drivers support (https://github.com/flarum/core/pull/2456).
Notification type extender (https://github.com/flarum/core/pull/2424).
Validation extender (https://github.com/flarum/core/pull/2102).
Post extender (https://github.com/flarum/core/pull/2101).
Notification channel extender (https://github.com/flarum/core/pull/2432).
Service provider extender (https://github.com/flarum/core/pull/2437).
API serializer extender (https://github.com/flarum/core/pull/2438).
User preferences extender (https://github.com/flarum/core/pull/2463).
Settings extender (https://github.com/flarum/core/pull/2452).
ApiController extender (https://github.com/flarum/core/pull/2451).
Model visibility extender (https://github.com/flarum/core/pull/2460).
Policy extender (https://github.com/flarum/core/pull/2461).

Changed

Time helpers converted to Typescript (https://github.com/flarum/core/pull/2391).
Improved the formatter extender (https://github.com/flarum/core/pull/2098).
Improve wording on installer when facing file permission issues (https://github.com/flarum/core/pull/2435).
Background color of checkbox toggles improved for better usability (https://github.com/flarum/core/pull/2443).
Route resolving refactored (https://github.com/flarum/core/pull/2425).
Administration panel UX refactored (https://github.com/flarum/core/pull/2409).
Floodgate moved to middleware and extender added (https://github.com/flarum/core/pull/2170).
DRY up image uploading logic (https://github.com/flarum/core/pull/2477).
Process isolation on testing (https://github.com/flarum/core/commit/984f751c718c89501cc09857bc271efa2c7eea8c).
Forum and admin javascript exports namespaced (https://github.com/flarum/core/pull/2488).

Fixed

Web updater does not take into account subfolder installations (https://github.com/flarum/core/pull/2426).
Callables handling in extenders failed (https://github.com/flarum/core/pull/2423).
Scrolling on mobile from PostSteam changes didn't work correctly (https://github.com/flarum/core/pull/2385).
Side pane covers part of the discussion page due to app.discussions being empty (https://github.com/flarum/core/commit/102e76b084bf47fdfb4c73f95e1fbb322537f7aa).
Change email modal keeps showing the previous error message even on success (https://github.com/flarum/core/pull/2467).
Comment count not updated when discussions are deleted (https://github.com/flarum/core/pull/2472).
goToIndex in PostStream does not trigger an xhr to retrieve new data (https://github.com/flarum/core/commit/09e2736cbcc267594b660beabbd001d9030f9880).
On refresh the post number is reduced by one (https://github.com/flarum/core/pull/2476).
Queue worker would instantiate a new Queue factory, not the bound one (https://github.com/flarum/core/pull/2481).
Header accidentally has a border bottom (https://github.com/flarum/core/pull/2489).
Namespace mentioned in docblock is incorrect (https://github.com/flarum/core/pull/2494).
Scrolling inside longer discussions (especially Firefox) skips posts (https://github.com/flarum/core/commit/210a6b3e253d7917bd1eacd3ed8d2f95073ae99d).
Uploading avatars that are jpg/jpeg fails with a validation error (https://github.com/flarum/core/pull/2497).

Removed

MomentJS alias (https://github.com/flarum/core/pull/2428).
Deprecated user events GetDisplayName and PrepareUserGroups (https://github.com/flarum/core/pull/2428).
AssertPermissionTrait (https://github.com/flarum/core/pull/2428).
Path related helpers and methods in Application (https://github.com/flarum/core/pull/2428).
Backward compatibility layers from the frontend rewrite (https://github.com/flarum/core/pull/2428).

Deprecated

CheckingForFlooding (https://github.com/flarum/core/commit/8e25bcb68f86cc992c46dfa70368419fe9f936ac).

framework - v0.1.0-beta.14

Published by tankerkiller125 almost 4 years ago

Cairns Birdwing

Added

Check dependencies before enabling / disabling extensions (https://github.com/flarum/core/pull/2188)
Set up temporary infrastructure for TypeScript in core (https://github.com/flarum/core/pull/2206)
Better UI for request error modals (https://github.com/flarum/core/pull/1929)
Display name extender, tests, frontend UI (https://github.com/flarum/core/pull/2174)
Scroll to post or show alert when editing a post from another page (https://github.com/flarum/core/pull/2108)
Feature to test email config by sending an email to the current user (https://github.com/flarum/core/pull/2023)
Allow searching users by group ID using the group gambit (https://github.com/flarum/core/pull/2192)
Use liveHumanTimes helper to update times without reload/rerender (https://github.com/flarum/core/pull/2208)
View extender, tests (https://github.com/flarum/core/pull/2134)
User extender to replace PrepareUserGroups (https://github.com/flarum/core/pull/2110)
Increase extensibility of skeleton PHP (https://github.com/flarum/core/pull/2308, https://github.com/flarum/core/pull/2318)
Pass a translator instance to getEmailSubject in MailableInterface (https://github.com/flarum/core/pull/2244)
Force LF line endings on windows (https://github.com/flarum/core/pull/2321)
Add a Link component for internal and external links (https://github.com/flarum/core/pull/2315)
ConfirmDocumentUnload component
Error handler middleware can now be manipulated by the middleware extender

Changed

Update to Mithril 2 (https://github.com/flarum/core/pull/2255)
Stop storing component instances (https://github.com/flarum/core/issues/1821, https://github.com/flarum/core/issues/2144)
Update to Laravel 6.x (https://github.com/flarum/core/issues/2055)
Flarum\Foundation\Application no longer implements Illuminate\Contracts\Foundation\Application (#2142)
Flarum\Foundation\Application no longer inherits Illuminate\Container\Container (#2142)
paths have been split off from Flarum\Foundation\Application into Flarum\Foundation\Paths, which can be injected where needed (#2142)
Flarum\User\Gate no longer implements Illuminate\Contracts\Auth\Access\Gate (https://github.com/flarum/core/pull/2181)
Improve Group Gambit performance (https://github.com/flarum/core/pull/2192)
Switch to dayjs from momentjs (https://github.com/flarum/core/pull/2219)
Don't create a bio column in users for new installations (https://github.com/flarum/core/pull/2215)
Start converting core JS to TypeScript (https://github.com/flarum/core/pull/2207)
Make Carbon an explicit dependency (https://github.com/flarum/core/commit/3b39c212e0fef7522e7d541a9214ff3817138d5d)
Use Symfony's translator interface instead of Laravel's (https://github.com/flarum/core/pull/2243)
Use newer versions of fontawesome (https://github.com/flarum/core/pull/2274)
Use URL generator instead of app()->url() where possible (https://github.com/flarum/core/pull/2302)
Move config from config.php into an injectable helper class (https://github.com/flarum/core/pull/2271)
Use reserved TLD for bogus and test urls (https://github.com/flarum/core/commit/6860b24b70bd04544dde90e537ce021a5fc5a689)
Replace m.stream with flarum/utils/Stream (https://github.com/flarum/core/pull/2316)
Replace affixedSidebar util with AffixedSidebar component
Replace m.withAttr with flarum/utils/withAttr
Scroll Listener is now passive, performance improvement (https://github.com/flarum/core/pull/2387)

Fixed

generate:migration command for extensions (https://github.com/flarum/core/commit/443949f7b9d7558dbc1e0994cb898cbac59bec87)
Container config for UninstalledSite (https://github.com/flarum/core/commit/ecdce44d555dd36a365fd472b2916e677ef173cf)
Tooltip glitch on page chang (https://github.com/flarum/core/issues/2118)
Using multiple extenders in tests (https://github.com/flarum/core/commit/c4f4f218bf4b175a30880b807f9ccb1a37a25330)
Header glitch when opening modals (https://github.com/flarum/core/pull/2131)
Ensure SameSite is explicitly set for cookies (https://github.com/flarum/core/pull/2159)
Ensure Flarum\User\Event\AvatarChanged event is properly dispatched (https://github.com/flarum/core/pull/2197)
Show correct error message on wrong password when changing email (https://github.com/flarum/core/pull/2171)
Discussion unreadCount could be higher than commentCount if posts deleted (https://github.com/flarum/core/pull/2195)
Don't show page title on the default route (https://github.com/flarum/core/pull/2047)
Add page title to All Discussions page when it isn't the default route (https://github.com/flarum/core/pull/2047)
Accept '0' as false for flarum/components/Checkbox (https://github.com/flarum/core/pull/2210)
Fix PostStreamScrubber background (https://github.com/flarum/core/pull/2222)
Test port on BaseUrl tests (https://github.com/flarum/core/pull/2226)
UrlGenerator can now generate urls with optional parameters (https://github.com/flarum/core/pull/2246)
Allow less to be compiled independently of Flarum (https://github.com/flarum/core/pull/2252)
Use correct number abbreviation (https://github.com/flarum/core/pull/2261)
Ensure avatar html uses alt tags for accessibility (https://github.com/flarum/core/pull/2269)
Escape regex when searching (https://github.com/flarum/core/pull/2273)
Remove unneeded semicolons inserted during JS compilation (https://github.com/flarum/core/pull/2280)
Don't require a username/password for SMTP (https://github.com/flarum/core/pull/2287)
Allow uppercase entries for SMTP encryption validation (https://github.com/flarum/core/pull/2289)
Ensure that the right number of posts is returned from list posts API (https://github.com/flarum/core/pull/2291)
Fix a variety of PostStream bugs (https://github.com/flarum/core/pull/2160, https://github.com/flarum/core/pull/2160)
Sliding discussion glitch on mobile (https://github.com/flarum/core/pull/2324)
Sliding discussion button in wrong place (https://github.com/flarum/core/pull/2330, https://github.com/flarum/core/pull/2383)
Sliding discussion glitch on mobile (https://github.com/flarum/core/pull/2381)
Fix PostStream for posts with top margins, and scrubber position when scrolling below posts (https://github.com/flarum/core/pull/2369)

Removed

Flarum\Event\AbstractConfigureRoutes event class
Flarum\Event\ConfigureApiRoutes event class
Flarum\Event\ConfigureForumRoutes event class
Flarum\Console\Event\Configuring event class
Flarum\Event\ConfigureModelDates event class
Flarum\Event\ConfigureLocales event class
Flarum\Event\ConfigureModelDefaultAttributes event class
Flarum\Event\GetModelRelationship event class
Flarum\User\Event\BioChanged event class
Flarum\Database\MigrationServiceProvider moved into Flarum\Database\DatabaseServiceProvider
Unused admin/components/Widget component (admin/component/DashboardWidget should be used instead)
Mandrill mail driver (https://github.com/flarum/core/commit/bca833d3f1c34d45d95bf905902368a2753b8908)

Deprecated

Flarum\User\Event\GetDisplayName event class
Global path helpers, Flarum\Foundation\Application path methods (https://github.com/flarum/core/pull/2155)
Flarum\User\AssertPermissionTrait (https://github.com/flarum/core/pull/2044)

framework -

Published by franzliedke over 4 years ago

Stability fixes for the beta.8 line

Fixed

InnoDB is now specified as the default table type to prevent SQL errors on foreign keys
Setting a meta description in the admin Basics tab will no longer generate an empty tag
If Likes fail to load properly, a discussion page will still function and not crash
Pusher is now functional again when creating new discussions
Admin users created by installation will have a valid join date
Searching the text inside posts will now work even with a database prefix
php flarum migrate:reset commands will now run without warnings

See https://discuss.flarum.org/d/17745-flarum-0-1-0-beta-8-released/128.

framework -

Published by franzliedke over 4 years ago

Fixed

Installation / update problems due to FontAwesome upgrade (more details)

framework - v0.1.0-beta.11.1

Published by franzliedke over 4 years ago

Fixed

Saving custom CSS in admin panel failed. (more details)

framework - v0.1.0-beta.13

Published by luceos over 4 years ago

Flying Fox

Added

Console extender (#2057)
CSRF extender (#2095)
Event extender (#2097)
Mail extender (#2012)
Model extender (#2100)
Posts by users that started a discussion now have the CSS class .Post--by-start-user
PHPUnit 8 compatibility
Composer 2 compatibility
Permission groups can now be hidden (#2129)
Confirmation popup when hiding or deleting posts (#2135)

Changed

Updated less.php dependency version to 3.0
Updated JS dependencies
All notifications and other emails now processed through the queue, if enabled (#978, #1928, #1931, #2096)
Simplified uploads, removing need to store intermediate files (#2117)
Improved date handling for dates older than 1 year (#2034)
Linting and automatic formatting for JS (#2099)
Translation files from Language Packs are only loaded for extensions that are enabled (#2020)
PHP extenders' properties are now private instead of protected, intentionally making it harder to extend these classes (#1958)
Preparation for upgrading Laravel components to 5.8 and then 6.0 (#2055, #2117)
Allowed permission checks based on model classes in addition to instances (#1977)

Fixed

Users can no longer restore discussions hidden by admins (#2037)
Issues of the Modal not showing or auto hiding (#1504, #1813, #2080)
Columnar layout on admin extensions page was broken in Firefox (#2029, #2111)
Non-dismissible modals could still be dismissed using the ESC key (#1917)
New discussions were added to the discussion list above unread sticky posts (#1751, #1868)
New discussions not visible to users when using Pusher (#2076, #2077)
Permission icons were aligned unevenly in admin permissions list (#2016, #2018)
Notification bubble not inversed on mobile with colored header (#1983, #2109)
Post stream scrubber clicks jumped back to first post (#1945)
Loading state of Switch toggle component was hard to see (#2039, #1491)
Flarum\Extend\Middleware: The methods insertBefore() and insertAfter() did not work as described (#2063, #2084)

Removed

Support for PHP 7.1 (#2014)
Zend compatibility bridge (#2010)
SES mail support (#2011)
Backward compatibility layer for Flarum\Mail\DriverInterface, new methods from beta.12 are now required
Flarum\Util\Str helper class
Flarum\Event\ConfigureMiddleware event

Deprecated

Flarum\Event\AbstractConfigureRoutes event class
Flarum\Event\ConfigureApiRoutes event class
Flarum\Event\ConfigureForumRoutes event class
Flarum\Event\ConfigureLocales event class

framework - v0.1.0-beta.12

Published by luceos over 4 years ago

Koala Relief

Added

Full support for PHP 7.4 (#1980)
Mail settings: Configure region for the Mailgun driver (#1834, #1850)
Mail settings: Alert admins about incomplete settings (#1763, #1921)
New permission that allows users to post without throttling (#1255, #1938)
Basic transliteration of discussion "slugs" / pretty URLs (#194, #1975)
User profiles: Render basic content on server side (#1901)
New extender for configuring middleware (#1919, #1952, #1957, #1971)
New extender for configuring error handling (#1781, #1970)
Automated tests for PHP extenders to guarantee their backwards compatibility

Changed

Profile URLs for non-existing users properly return HTTP 404 (#1846, #1901)
Confirmation email subject no longer contains the forum title (#1613)
Improved error handling during Flarum's early boot phase (#1607)
Updated deprecated "Zend" libraries to their new "Laminas" equivalents (#1963)

Fixed

Update page did not work when installed in subdirectories (#1947)
Avatar upload did not work in IE11 / Edge (#1125, #1570)
Translation fallback was ignored for client-rendered pages (#1774, #1961)
The success alert when posting replies was invisible (#1976)

framework - v0.1.0-beta.11

Published by luceos almost 5 years ago

Redback Spider

Added

Comments have an additional class Post--by-actor when posted by the user (#1927)

Changed

Improved support for URL identification during installation (#1861)
KeyboardNavigatable now has a callback ability (#1922)
Links are no longer opened with target _blank but in the same window (#859)
Links now have nofollow ugc by default as their rel attribute (#859, #1884)
Improved performance of the full text gambit when searching for users (#1877)
The Queue implementation is now available under its Illuminate contract

Fixed

No error handling was possible in the console/cli (#1789)
Enable scrollbars in log in modals so it fits for GitHub (#1716)
Reduce log in modal for SSO so it fits for Facebook (#1727)
Deleting discussions permanently did not delete its posts (#1909)
Fixed the queue:restart command (#1932)
Deleted posts were visible to all visitors (#1827)
Old avatars weren't being deleted when replaced (#1918)
The search performance regression was reverted (#1764)
No profile background could be set for remote images (#445)
Back button sends to home even though it could actually go back (#1942)
Debug button no longer visible (#1687)
Modals on smaller screens use the whole width of the page

framework - v.0.1.0-beta.10

Published by luceos about 5 years ago

New Holland

Added

Initial queue support: Infrastructure for offloading long-running tasks (e.g. email sending) to background workers (#1773)
Notifications can now be marked as read without visiting a discussion (#151)
SEO: The discussion list now has a rel="canonical" meta tag, preventing duplicate content (#1134, #1814)
The "Edit User" permission can now be edited in the UI (#1845)
New status message and redirect after user deletion (#1750, #1777)
Errors in Flarum's boot process are now presented with more detailed information (#1607)

Changed

Better, more detailed and extensible error handling (#1641, #1843)
Error pages in debug mode now return the same HTTP status codes as in production (#1648)
Tweak HTTP status codes for authentication / authorization errors (#1854)
Already-used links from account activation emails now show a better error message (#1337)

Fixed

Security vulnerabilities in dependencies
Performance: High CPU usage when scrolling in a discussion (#1222)
Special characters crashed the search (#1498)
Missing declarations for language and text direction in HTML output (#1772)
Private messages were counted in user post counts (#1695)
Extensions could not change the forum's default page (#1819)
API requests authenticated using access tokens needed to provide a CSRF token (#1828)
Accessibility: Screenreaders did not read the "Back to discussion list" link (#1835)

framework - v0.1.0-beta.9

Published by franzliedke over 5 years ago

Leafy Seadragon

See the release announcement.

Added

New hasPermission() helper method for Group objects (9684fbc)
Expose supported mail drivers in IoC container (208bad3)
More test for some API endpoints (1670590)
The Formatter\Rendering event now receives the HTTP request instance as well (0ab9fac)
More and better validation in installer UIs
Check and enforce minimum MariaDB (7ff9a90)
Revert publication of assets when installation fails (ed9591c)
Benefit from Laravel's database reconnection logic in long-running tasks (e0becd0)
The "vendor path" (where Composer dependencies can be found) can now be configured (5e1680c)

Changed

Performance: Actually cache translations on disk (0d16fac)
Allow per-site extenders to override extension extenders (ba594de)
Do not resolve objects from the IoC container (in service providers and extenders) until they are actually used
Replace event subscribers (that resolve objects from the IoC container) with listeners (that resolve lazily)
Use custom service provider for Mail component (ac5e26a)
Update to Laravel 5.7, revert custom logic for building database index names
Refactored installer, extracted Installation class and pipeline for reuse in CLI and web installers (790d5be)
Use whitelist for enabling pre-installed extensions during installation (4585f03)
Update minimum MySQL version (7ff9a90)

Fixed

Signing up via OAuth providers was broken (67f9375)
Group badges were overlapping (16eb1fa)
API: Endpoint for uninstalling extensions returned an error (c761802)
Documentation links in installer were outdated (b58380e)
Event posts where counted when aggregating user posts (671fdec)
Admins could not reset user passwords (c67fb2d)
Several down migrations were invalid
Validation errors on reset password page resulted in HTTP 404 (4611abe)
is:unread gambit generated an invalid query (e17bb0b)
Entire forum was breaking when the custom_less setting was missing from the database (bf2c5a5)
Dropdown icon was not showing in user card when on user page (12fdfc9)
Requests were missing the original* attributes, which broke installations in subfolders (56fde28)
Special characters such as % and _ could return incorrect results (ee3640e)
FontAwesome component package changed paths in version 5.9.0 (5eb69e1)
Some server environments had problems accessing the system-wide tmp path for storing JS file maps (54660eb)
Content length of posts.content was not migrated to mediumText in 2017 (590b311)
An error occurred when going to the previous route if there was no previous route found (985b87da)

Removed

php flarum install --defaults - this was meant to be used in our old development VM (44c9109)
Obsolete id attributes in JSON-API responses (ecc3b5e and 7a44086)

framework - v0.1.0-beta.8

Published by tobyzerner almost 6 years ago

See the release announcement.

Added

PHP Extender API (docs)
Add ItemList#isEmpty method (#1218)
Allow setting the raw content of a CommentPost (084f749)
Allow full URLs to be used as the avatar path (c31c1ea)
Add user display names API (#1246)
Add apiKey request attribute (096e552)
Allow configuring cookie attributes (87bf84e)
Add LESS variable to configure expansion of sideNav dropdowns (2754a8c)
Add drag and drop avatar uploading (#1261)
New design for Reset Password page (9392e1b)
Add log out confirmation if CSRF token is invalid (e8a4e5e)
New design for error pages (b7c1cc5)
Basic implementation of admin dashboard widgets (1ef9217)
Add infinite scrolling in the notifications list (77c25ab)
Add custom footer HTML setting (#1315)
Automatically load an extend.php file at the forum root (#1559)
Add console configuration event (#1349)
Improve search performance and design (#1339, 7e95b80)
Allow notification methods to be extended (#1361)
Add flarum migrate:reset command (#1363)
Add message to exceptions thrown in DispatchRoute middleware (#1376)
Warn about debug mode in flarum info command (0cf351e, 5374f8a)
JS Extender API foundation (#1468)
Add support for JS sourcemaps (#1471)
Add canonical URL to discussion HTML (551ca23)
Add event to override floodgate behaviour (#1411)
Use ItemList for signup and login modals (#1420)
Display extensions in a table in flarum info command (#1562)
Add oldUsername parameter to User\Event\Renamed (#1563)
Live output of migrator notes in console (9e487b4)
Use ItemList for edit group modal (#1625)
Use ItemList for edit user modal (#1593)
Track API key last activity and allow keys to reference specific users (#1622)
Add a toolbar area to the TextEditor component (c13dfa2)
Add a tooltip to the Preview button (bf3934d)
Add database indices (#1577)
Log errors that occur in the API stack (222e3c3)
Add "clear cache" button to admin dashboard (2ef66ac)
New extensions page layout (#1496)

Changed

Upgrade to Laravel 5.5 (#1252)
PHP namespace restructure (#1308)
Performance: Don't include post content in the "basic" serializer (37cf95f)
Only apply custom CSS and header HTML on forum frontend, not admin (40ebc13)
Performance: Load only basic information about terminal/relevant posts (dedcbae)
Performance: Load only basic information about post discussion/users (3c80612)
Organise views into directories (479e44d)
Use more sensible installation default data (b760d11)
Manage Composer height with overridable methods (#1272)
Rename AbstractPolicy::after to can to reflect removal of event priorities (ae2e07e)
Overhaul model visibility scoping (#1342)
Remove - separator in discussion URL if there is no slug (#1351)
API: Provide forum info under / (f0cea11)
Upgrade to Font Awesome 5 (#1372)
Upgrade to zend-stratigility v2.2 (9d30be1)
Use Illuminate Session component instead of Symfony (#1366)
Use PSR-15 middleware standard (#1441, #1443)
Simplify interface of migration-related classes (#1445)
Rename Api\Controller\TokenController to CreateTokenController (#1451)
Replace gulp with webpack and npm scripts for JS compilation (#1367)
Rename database columns and JSON-API attributes (#1344)
Refactor frontend code (#1471, edaca31)
Remove need for page reload if JS application will not boot (#1471)
Split permission for editing and deleting posts (#1466)
Upgrade to TextFormatter 1.2 (#1457)
Require PHP 7.1 (0278d52)
Rename extension bootstrap.php to extend.php (#1556)
Use default system font instead of Open Sans (07298e1)
Change composer submit button icon to paper plane (bf3934d)
New heading styles in posts (6fadc0b)

Removed

Remove user bio feature (#1214)
Remove FastClick (a8826dc)
Remove server-side JavaScript minification, because it is done by Webpack (#1471)
Remove the "debug" button from request error alerts (64686ef)
Remove fileinfo dependency (105dd09)

Fixed

Fix dropdown menu icon width (7ec9281)
Fix user online indicator spacing (57f828b)
Remove faulty default value for forum description (a2e0dae)
Fix scrubber icon alignment (287085d)
Don't hardcode admin URL (c037658)
Update zend-diactoros to v1.6 to fix Content-Length problems (1e8399c)
Security: Remove execute permissions from .php/.less files (#1338)
Fix post contentHtml sometimes breaking script parsing (ea4d889)
Make sure components receive all children properly (42ecee4)
Fix extractText breaking in some cases (f3b4d35)
Revert color input type (257ee93)
Make sure dropdowns don't go above the edge of the screen (3be98b9)
Improve mobile composer behaviour (a8826dc, 094345d)
Fix Composer textarea losing its height across route changes (1a10276)
Performance: Assign parent discussion to posts so it doesn't have to be reloaded (5f7060f)
Performance: Cache translation catalogue to avoid reparsing YAML (9cc67fe)
Fix email gambit (0aa74c9)
Fix users not being listed properly when searching (7796580)
Fix crash when post's user has been deleted (1a239ee)
Filter out notifications with non-existent subjects (a0c95e6)
Dispatch user events after password reset (#1340)
Only display pagination link if necessary (6913e8f)
Add pagination link for previous page (8c47095)
Prevent editing fields in sign up modal according to identification data (#1330)
Refactor MIME type guessing to work without any PHP extensions (ba96f31)
Fix modal title background on phone media (#1378)
Always return a promise in PostStream#update (#1392)
Fix absence of variable reference in Notification\Sending event (f51e29f)
Update doctrine/dbal to v2.7 to fix MariaDB compatibility (d42205a)
Escape string used in LIKE query (569e6c9)
Make ExtensionManager a singleton (050496a)
Fix discussion posts not being initialized correctly (#1455)
Prevent undefined class names from being rendered (#1456)
Fix asset recompilation issues (#1471)
Fix unread notifications badge appearing fuzzy (fb9a89f)
Fix generation of next/previous URLs in discussion HTML (3d845d5)
Prevent invalid custom CSS from crashing forum (#1471)
Fix profile page posts jumping when scrolling (6a6b9ac)
Fix git errors displaying in flarum info command (#1562)
Fix guests encountering permission errors when searching (#1527)
Add tokenizer to PHP extension requirements (c16ddf2)
Installer: add check for file existence and fix path resolving (#1397)
Change tab title after renaming discussion (#1543)
Fix post composer width bug on profile (#1541)
Fix wrong permission check in UserPolicy#find (#1536)
Fix registration errors when debug mode is on (5ce702a)
Sort user discussion list correctly (184ffcd)
Fix group badge misalignment if there is no group icon (c32af65)
Fix dropdown menu hidden by PermissionsPage header when going up (#1627, 3b630cb)
Fix scrubber index exceeding post count (#1634)
Perform visibility checks on notification subjects at the query level (6d14d0c)
Delete associated notifications when deleting discussions, posts, and users (bf8bc02)
Clear the search loading indicator after pressing Enter (b474843)

Security

Always invalidate all user email tokens (66607a5)

Also see the 0.1.0-beta.8 release notes for: akismet approval auth-facebook auth-github auth-twitter bbcode emoji lang-english flags likes lock markdown mentions pusher sticky subscriptions suspend tags

framework -

Published by tobyzerner almost 6 years ago

Security

Fix leak of private information when updating users. (more details)

framework -

Published by tobyzerner almost 7 years ago

Security

Fixed a vulnerability that allows an attacker to bypass the email verification step during registration. (@clarkwinkelmann) (more details)

framework -

Published by tobyzerner about 7 years ago

Added

Add "remember me" checkbox in login from.
Update notification count when discussion list refresh button is clicked. (@datitisev)
Add event to allow custom user password validation.
Support module prefixing of locale resources.
Allow accessing the session via the actor.
Add group gambit to support search user by group name. (@liji)
Ability to manually activate users. (@renyuneyun)
Add dir and lang attribute in app.blade.php. (@datitisev)
Prevent crawlers from indexing nojs pages.
Add option to hide the language selector. (@datitisev)
Add link() and setCanonicalUrl() methods to the WebAppView.
Add viewUserList permission. (@datitisev)
Allow JSON config to be used for command-line installation. (@dav-is)
Add API for extensions to mark discussions and posts as private. (@Luceos)
Improve password reset validation/error handling.
Added a migration helper for adding default permissions.
Turn Rename Discussion dialog into a modal. (@datitisev)

Fixed

Prevent deletion of default locale. (@dav-is)
Prevent overwriting of user attributes on authenticated registration. (@dav-is)
Prevent notice if bootstrapping app in command line environment.
Make Add Extension modal's title translatable. (@milescellaro)
Fix asset path when unpublishing. (@clarkwinkelmann)
Update affix sidebars when window is resized.
Fix login remember in MS EDGE.
Prevent reverting editable user bio on click.
Fix API sorting of users by post count.
Support PNG avatars with transparent backgrounds and fix EXIF rotation. (@oanhnn, @Zeokat)
Fix /api/posts returning 500. (@datitisev)
Make extension event attributes public.
Prevent admins from demoting themselves through the API. (@datitisev)
Fix incorrect migration notes for extensions without any migrations.

Changed

Upgrade s9e\TextFormatter to 0.8.1. (@JoshyPHP)
Upgrade zendframework/zend-stratigility to 1.3.
Update minimum required PHP version to 5.6.
Add specific error message for username validation.
Remove fa-fw class from all icons. Manually apply the fa-fw class or other styles if needed.
Simplify global back button behaviour and appearance.

Also see the release notes for: approval flags lock mentions sticky suspend tags

framework - v0.1.0-beta.6

Published by tobyzerner about 8 years ago

Added

Allow separation of public and base directories. (@bmalex88)
Introduce superficial permission dependency tree to make UI more intuitive.
Add specific error message when an email address is not found in forgot password modal. (@datitisev)
Pull in FontAwesome as a Composer dependency, and update to 4.6.
Add ability to view the IP address for a post in its meta dropdown. (@dav-is)
Show an upload icon instead of a user's default avatar on their own profile. (@datitisev)
Add admin pane to configure SMTP settings. (@datitisev)
Add ability to upload forum logo and favicon.
Add ability to add custom HTML above the Flarum header.
Log exceptions in error handler middleware.
Add CLI installer option to write the config file to a different path.
Allow extensions to add default model attributes.
Add Server extend API to allow skeleton to customise the Application instance.
Automatically support basic HTML tags in translations.
Add cache:clear CLI command.

Changed

Updated s9e\TextFormatter to 0.5.0. (@JoshyPHP)
Improve inline code styling. (@datitisev)
Use group ID instead of name in generated class names.
Scroll to reply preview immediately when opening composer.
Change post edited icon into text. (@datitisev)
Clean up discussion renamed posts to only show the new title.
Extract list keyboard navigation code from search into a reusable class.
Improve text contrast, especially in dark mode.
Change permission logic priorities; change policy catch-all method from before to after.
Simplify deleted post toggle CSS.
Refactor web app bootstrapping code.