NodeBB

Release build (patch) of NodeBB @ 2023-09-12T13:38:33.894Z

v3.4.2 (2023-09-12)

Bug Fixes

• deps: bump 2factor (6bc2b6c5)
• move database call used to associate a NodeBB session UUID to its express session id into user.auth.addSession, which is the only time it is called (e1bced8c)
• toMid to posts you cant see (53106c00)
• closes #11982, fix element in prepEdit (e4ecb96f)
• prep edit so textarea isn't below text input (f2c4041f)

Refactors

• reduce socket.emits for typing (aebd9278)

Tests

• remove errant .only() (9dc9d5ef)
• fix room count (66251166)

Release build (patch) of NodeBB @ 2023-09-06T15:54:21.143Z

v3.4.1 (2023-09-06)

Chores

• up dbsearch (8357bb2e), fix chat message search in psql

Bug Fixes

• #11981, post immediately when canceling scheduling (19b7cdb2)

Release build (minor) of NodeBB @ 2023-09-06T13:41:30.849Z

v3.4.0 (2023-09-06)

New Features

• typing user list in chat (60035744)
• add data-allow-dupe and data-navigator-ignore (92f5c146)
• add a filter hook to login (a3d6dba6)
• use all events in addTopicEvents (4bc21a2e)
• add socket.data.uid on connect (f026e740)
• #11949, show alert if posts is going to be queued (731466e5)
• #6021 add min:rep-post-links (#11938) (979f24b1)
• add new notif type for public rooms (b65d8e82)
• better acp sidebar in dark mode (c92ecfb4)
• check mute when messaging, closes #11932 (9534f9b9)
• log roomId/roomName on delete (b958a39a)

Bug Fixes

• don't create tooltips on mobile (ded596fe)
• always return string from helper (bdeca049)
• double escape issue, body is escaped in composer-default (6ae0d207)
• make selector stricter (9f7a39c5)
• #11969, match the server side behaviour for filters (887dfd7d)
• remove og:image value (#11966) (90ac82d0)
• don't try to parse response if request is head #11960 (440299e6)
• pinned msgs when switching chats (acee6777)
• deleted chat messages (#11962) (1a1fd64d)
• closes #11954, fix custom skins with spaces (965780b7)
• dont show chat notif if you are already in the room (3d6668e7)
• #11947, make user message has a numeric timestamp (dc0fb81b)
• #11944, dont refresh page when uninstalling (f5baca14)
• closes #11921 (e3969706)
• bookmark scroll doing ajaxify (2e0964e6)
• closes #11937, add dropup early based on position on screen (a7a266d7)
• improper SSO format (regression), update openapi schema (4a846803)
• return empty array for 'sso' otherwise (db15e7c4)
• #11906, remove retrieval of SSO data in getAllData internal method, only retrieve for calling user or admins, and only on edit page (a6c98de6)
• language string (4e0c6329)
• admins should see public chats (aeb27f4b)
• show access denied instead of internal error (7dd143e1)

Other Changes

• remove unused translator (34242e7a)
• fix spec (c0eefe72)

Refactors

• use map/get (98c3d2e9)
• add targetUid to email-change event (4e5340d2)
• how admins change emails (#11973) (8db13d8e)

Tests

• one more fix (8b533d54)
• fix tests, dont hang if payload is string (6b09b7c7)
• fix redirect test (35e689cf)

Release build (patch) of NodeBB @ 2023-08-25T02:39:17.975Z

v3.3.9 (2023-08-25)

Chores

• up mentions (4ec3a480)

Bug Fixes

• isPrivilegeGroup not capturing admin privileges (d13e7cd3)

Tests

• add some tests for isPrivilegeGroup (d5c8bf9e)

Release build (patch) of NodeBB @ 2023-08-23T22:34:15.771Z

v3.3.8 (2023-08-23)

Bug Fixes

• msg ref (4ba76338)
• #11947, make sure message has a numeric timestamp (2d62a772)

Release build (patch) of NodeBB @ 2023-08-23T17:15:59.802Z

v3.3.7 (2023-08-23)

Bug Fixes

• closes #11945, fix skins loading if there are no custom skins (438c4c89)

Release build (patch) of NodeBB @ 2023-08-22T23:15:00.237Z

v3.3.6 (2023-08-22)

Chores

• up deps (db55f18a)

security release

security release

Release build (patch) of NodeBB @ 2023-08-20T04:14:33.512Z

v3.3.4 (2023-08-20)

Bug Fixes

• upgrade script, get rid of nested processSortedSet (78a7cfe9)

Release build (patch) of NodeBB @ 2023-08-19T01:24:16.854Z

v3.3.3 (2023-08-19)

Bug Fixes

• one more fix (51587ca3)
• one more upgrade script fix (b5d1e917)
• post preview on skins remove clearfix and floats (5a8e6af4)

Refactors

• add connectionTimeout to psql (90f29571)

Release build (patch) of NodeBB @ 2023-08-18T20:29:02.655Z

v3.3.2 (2023-08-18)

Bug Fixes

• upgrade script (c02f1d70)

Release build (patch) of NodeBB @ 2023-08-18T17:36:28.696Z

v3.3.1 (2023-08-18)

New Features

• #11930, ability to set custom skins as default (db07ab15)

Bug Fixes

• some more upgrade script fixes (f23b0b5b)
• #11906, userData.sso — don't serve deauthUrl or non-associated url if caller uid is not same as target uid (19e047e2)
• include latin-ext subset of fonts in admin styles (#11918) (556a1c48)

Other Changes

• fix lint (d1949cee)

Release build (minor) of NodeBB @ 2023-08-16T14:42:43.050Z

v3.3.0 (2023-08-16)

Chores

• deps:

  • update dependency smtp-server to v3.13.0 (#11913) (7f6865cc)
  • update dependency lint-staged to v14 (#11909) (ee78b418)
  • update dependency lint-staged to v13.3.0 (#11908) (6f3b7bc8)
  • update dependency eslint to v8.47.0 (#11904) (af3c5e54)
  • update dependency @commitlint/cli to v17.7.1 (#11896) (1d44b004)
  • update commitlint monorepo to v17.7.0 (#11892) (d1d38097)
  • update dependency sass-embedded to v1.64.2 (#11858) (c9c23513)
  • update dependency eslint to v8.46.0 (#11852) (8a761ff7)
  • update dependency sass-embedded to v1.64.1 (#11833) (1cca1760)
  • update commitlint monorepo to v17.6.7 (#11817) (ac65ab42)
  • update dependency sass-embedded to v1.64.0 (#11821) (560bb29c)
  • update actions/setup-node action to v3 (#10347) (c8387828)
  • update mongo docker tag to v6 (#10889) (f2715979)
  • update dependency eslint to v8.45.0 (#11800) (b53da688)
  • update coverallsapp/github-action action to v2.2.1 (#11795) (adfde1d4)
  • update redis docker tag to v7.0.12 (#11789) (40477c85)
  • update dependency eslint to v8.44.0 (#11771) (0bad8578)

• i18n:

  • fallback strings for new resources: nodebb.admin-dashboard (80ea4eb0)
  • fallback strings for new resources: nodebb.admin-settings-chat, nodebb.error (e27d1743)
  • fallback strings for new resources: nodebb.modules (ab668617)
  • fallback strings for new resources: nodebb.global (bee5a9b4)
  • fallback strings for new resources: nodebb.error (eca28302)
  • fallback strings for new resources: nodebb.admin-dashboard (ac355acd)
  • fallback strings for new resources: nodebb.admin-dashboard (62b7be1c)
  • fallback strings for new resources: nodebb.admin-menu (ad9d8f77)
  • fallback strings for new resources: nodebb.admin-admin, nodebb.admin-manage-categories (f075e12a)
  • fallback strings for new resources: nodebb.modules (2c54e362)
  • fallback strings for new resources: nodebb.admin-manage-users (9284b7e4)
  • fallback strings for new resources: nodebb.modules (4ed0ed45)
  • fallback strings for new resources: nodebb.topic (9c0b98df)
  • fallback strings for new resources: nodebb.email (3613d1e6)
  • fallback strings for new resources: nodebb.modules (a7dae508)
  • fallback strings for new resources: nodebb.admin-settings-guest (640e32d4)
  • fallback strings for new resources: nodebb.error, nodebb.modules (2710037c)
  • fallback strings for new resources: nodebb.admin-admin (58bdedaf)

New Features

• closes #11902, ability to clear search history (7a79fed8)
• #11897, show guest handles in post queue and after using POST /compose (76fde8ef)
• #11881, limit room names (9349cb63)
• add toMid to chat messages (0316f324)
• add category selector to analytics page (acef5e33)
• middleware.handleMultipart, applies on API routes — invokes multipart middleware based on content-type header (bcc4b82c)
• #11868 apply blacklist to routes (#11873) (23404ad1)
• add icon to invite/accept notifs (78c5dfdc)
• add flags link to acp manage menu, closes #11867 (99c22942)
• move to npm fontawesome dependency and support fa pro (#11820) (b709ed9e)
• password check hook (#11853) (8ac34f8e)
• #11850, chat msg search (11bfeaf1)
• #11814, dont check content len for admins (f359a767)
• closes #11843, refresh search after changing filters (907c5fa6)
• #11842, ability to change reputation of users (ac027387)
• closes #11812, add unread public rooms into digest (eb0fcd32)
• allow multiple room owners, closes #6503 (91642cb3)
• show online users at the top of userlist and update (911ef058)
• simplified api module handler logic, content-type detection/parsing (2d016af8)
• allow FormData object to be passed in to the API module (ed99ea20)

Bug Fixes

• if you send message scrollToBottom (223c85e4)
• clicking on email consent form label checks the wrong box (2fe93361)
• clicking on email consent form label checks the wrong box (514af5d6)
• copy FA fonts to build directory instead of serving them directly (#11891) (ac4623ee)
• use config.undoTimeout instead of hardcoded value (850cfb33)
• add missing id/for to all checkboxes (ae747875)
• #11875, simplify alerts and show progress (881a28eb)
• bug where api module would throw if response contained no content-type header (007d735f)
• chat mark read regression (f4e2e617)
• fix escaped characters in tooltips, fix priv checks in tooltips (82562bec)
• #11855, remove superfluous password challenge on admin email update (unless they're updating their own) (4ca71f63)
• register abort can error on weird session state (#11854) (c9511915)
• #11847, typo in markNotification (5a8b4125)
• #11837, use userslug for check (e2fa8cf3)
• #11841, use unique nid per user who flagged (17783440)
• reset_code.tpl card block expanding to bottom of container (2792d771)
• closes #11825, user icons in global privileges (dae4f9f7)
• fallback for room timestamp (77550a50)
• dont error if timestamp is missing (6cc86b6e)
• topic postercount field if owner is changed (00be053e)
• updateOwner (16fe1eb9)
• unread notif filter (3e7ca4f2)
• closes #11806, fix code blocks (165b0f85)
• allow escape to close chat modals (4c311502)
• on leave/kick remove matching sockets from rooms (a766f74f)
• spec (79fae26d)
• lint (1e38a16b)
• client side js crash (adb3a5e6)
• #11797, update title on chat switch (840792ae)
• always return empty array if its not set (5c208610)
• mobile back button (9149a9a2)
• clear cache on sort (e03fdcd6)
• #11787 (bf2c429a)
• fetch handler not passing back errors or success payloads (8a531826)
• group membership methods for guests/spiders (2791eb8a)

Other Changes

• new filter to filter skins (c1361ee5)
• //github.com/NodeBB/NodeBB/issues/11818 (f7ae8963)
• //github.com/NodeBB/NodeBB/issues/11818 (0dce4c46)

Performance Improvements

• faster upgrade script (43060f3c)

Refactors

• ip blacklist.test (38c0c8de)
• dont load all tokens in verify token (2fe193d6)
• dont sleep if iteration is done on first one (0136e924)
• use fetch() throughout, instead of jQuery .ajax() (7415b16d)

Tests

• fix test if ip is invalid (38377982)
• fix tests to use regular uid (d615273d)
• fix tests since nid format changed (e41042ee)
• fix test (9e574e07)
• log e11000 errors (934df69e)
• fix spec (b63cd548)
• fix (e31f5c42)

backport
https://github.com/NodeBB/NodeBB/commit/9ec7ab4afc6f860e818f9e5ab8eb8586b2358544

Backport security fixes to 1.x branch

• https://github.com/NodeBB/NodeBB/commit/1d1639d46f15c5a9c84d3ccfc7a334244c28039a
• https://community.nodebb.org/topic/17029/nodebb-2-8-7-security-update
• https://community.nodebb.org/topic/16882/nodebb-2-8-1-security-update
• https://community.nodebb.org/topic/17200/nodebb-2-8-13-3-1-3-security-releases
• https://community.nodebb.org/topic/16829/nodebb-2-6-1-security-update

Release build (patch) of NodeBB @ 2023-07-19T16:08:16.790Z

v3.2.3 (2023-07-19)

Chores

• downgrade harmony to correct version (7c94506b)

Bug Fixes

• typo in replied to link (3024dac1)
• logs page whitespace (2a3d6d5c)
• version alert in acp (05c9cca7)
• #11804, fix direction of dropdown on rtl (a4dba8d3)
• #11802, fix anchor ids in acp settings (562e4d6e)
• #11803, fix rtl in acp (a0478c70)

Release build (patch) of NodeBB @ 2023-07-12T14:56:08.509Z

v3.2.2 (2023-07-12)

Bug Fixes

• #11787 (6ae0df4f)
• #11786 fix selector for upgradable plugins (bf114c11)

Release build (patch) of NodeBB @ 2023-07-05T19:36:29.295Z

v3.2.1 (2023-07-05)

Bug Fixes

• #11766, allow privileged users to vote and chat (1bda9073)
• #11775, trim -rtl from targetSkin (0183e5f8)
• #11773, fix create token button (64d30182)
• add ?page= to canonical urls (4045681a)
• group membership methods for guests/spiders (7d5fe20b)
• deps: update dependency nodebb-plugin-emoji to v5.1.3 (#11777) (a1110f10)

Release build (minor) of NodeBB @ 2023-06-28T15:54:25.953Z

v3.2.0 (2023-06-28)

Chores

• deps:

  • update dependency lint-staged to v13.2.3 (#11762) (26af152a)
  • update commitlint monorepo to v17.6.6 (#11750) (a19e7b5c)
  • update dependency sass-embedded to v1.63.6 (#11742) (8a961794)
  • update dependency sass-embedded to v1.63.5 (#11738) (94d1dbc7)
  • update dependency eslint to v8.43.0 (#11722) (7beadb6b)
  • update coverallsapp/github-action action to v2.2.0 (#11690) (9282bc58)
  • update dependency eslint to v8.42.0 (#11672) (55e5467d)
  • update commitlint monorepo to v17.6.5 (#11648) (3b53f415)
  • update dependency jsdom to v22.1.0 (#11640) (9a5d39c0)
  • update dependency smtp-server to v3.12.0 (#11628) (57e3f999)
  • update dependency eslint to v8.41.0 (#11616) (70bb50cd)
  • update redis docker tag to v7 (#10830) (f1e2342d)
  • update dependency jquery to v3.7.0 (#11591) (12c03130)

• i18n:

  • fallback strings for new resources: nodebb.admin-appearance-skins (7ca85c60)
  • fallback strings for new resources: nodebb.admin-advanced-cache, nodebb.admin-advanced-errors, nodebb.admin-development-logger (fa8e656d)
  • fallback strings for new resources: nodebb.admin-appearance-customise (0863afd0)
  • fallback strings for new resources: nodebb.user (195b09d5)
  • fallback strings for new resources: nodebb.admin-manage-users (934b6792)
  • fallback strings for new resources: nodebb.themes-harmony (619c4ff7)
  • fallback strings for new resources: nodebb.topic (639eeb44)
  • fallback strings for new resources: nodebb.admin-appearance-customise, nodebb.admin-appearance-skins, nodebb.admin-appearance-themes, nodebb.admin-settings-api (d508772c)
  • fallback strings for new resources: nodebb.admin-manage-groups (e53929fc)
  • fallback strings for new resources: nodebb.users (1ffc9221)
  • fallback strings for new resources: nodebb.modules (54a683bb)
  • fallback strings for new resources: nodebb.themes-harmony (0aef9a91)
  • fallback strings for new resources: nodebb.admin-settings-api (78bc71aa)

New Features

• closes #11747, add pagination to tokens page (4b11cd0d)
• add vote privs to topic (#11734) (86faed6f)
• custom skins panel in acp (556fd65d)
• add req and socket to als, closes https://github.com/NodeBB/NodeBB/pull/10304 (68ddca1e)
• #11714, add page title (1a5e18cd)
• #11714, add registrationQueue flag (3080eb7e)
• do not show the replies container in a post's footer if the only reply present is the next post (da02361b)
• add new tab to define bs variables (de68f749)
• bring back noskin option (2edfe0ef)
• add not validated/expired (5fae09f3)
• closes #11671, allow custom classes on body (e89cfd44)
• upgrade fonts (392a7d28)
• allow more params to app.newTopic/newReply (325c1955)
• update progress bar more frequently (99aaa9f1)
• closes #11630 (8c9ab01f)
• add hidden-empty utility (63ae03b4)
• translate bodyShort (ed15cbb0)
• add lang string and drag fix (db9b807c)
• center chat modal attr (4833a2b9)
• token rolling API for admins (4f524e9f)
• token editing and deletion (ce23caf7)
• api token migration, new ACP tokens list, token creation (e4888dea)
• internal utility functions for token management (creation, deletion, etc) (7b8bffd7)

Bug Fixes

• #11761, don't escape topic title twice (01c36f8b)
• use btn instead of icon (aefef763)
• rollback ace-builds 1.23.0 doesnt work (ea150162)
• #11756, fix unique visitor stats in acp table (e45f513b)
• dont overwrite postIndex (c21d7dbc)
• closes #11731, set postIndex on pagination (cbd98c1b)
• pinned topic ordering if parent element has non topic elements (cfedd087)
• delete events not working (281078f5)
• if reply is in different topic dont hide in parent (9ee1d7b0)
• web (6d5f6a15)
• var name (b48a6e26)
• error toast on lost connection (2c89d784)
• dont send 200 status on admin upload errors (#11707) (8ca65b0c)
• #11702, don't escape backgroundImage twice (6740a51e)
• closes #11697, remove min attribute from rep thresholds (4a6249a4)
• skins page revert (33a6b3e1)
• dont add deleted users to users:online (d0e9eb2c)
• #11679, fix username change (db3bff09)
• closes #11673, topic search for harmony (ee8cb378)
• #11664, dont create backlinks for quotes (d3c5a79d)
• wrap on events page (a5b080ea)
• app.newTopic usage (9f3bdf75)
• rtl fixes for code and long text (05460d8e)
• topic count in tools after purge closes #11651 (1974abeb)
• add loadingMore flag to chat infinite load (e0300ab7)
• #11619, fix selector (cdeaef6b)
• text area height calculation in chats (c52916de)
• textarea on error (c77b6224)
• closes #11612 (3cef2535)
• edge case in category filter (5daaa5ea)
• #11572 (29303f4a)
• browser title if options.title is undefined (adf14ea5)
• lang strings (d6ead3d4)
• #11594 (11d315df)
• relocated upgrade script, removed outdated code that called core.api for tokens (3e6dd78d)

Other Changes

• fix whitespace (4768d06b)
• fix unused (dcc2bb10)
• //github.com/NodeBB/NodeBB/issues/11612 (cf7d9334)
• up peace (0da8b506)
• use csrf_token in ws handshake (#11573) (63b859f0)
• closes #11577 (ad1ae291)

Performance Improvements

• make less db calls to load indices (0b2feb9e)

Refactors

• show both emails in user list (daa5ac85)
• move async call to promise.all (e56e44ab)
• remove script (2360d296)
• remove log (9522951f)
• remove log (32f60df1)
• use new params (2cf865e8)
• use app.parseAndTranslate (b1fbc194)
• remove return (e0149462)

Reverts

• remove emoji email css (7b8ebd0a)

Tests

• fix spec (94f06301)
• make email requirement flag changes more explicit in tests, so cases do not rely on variable values from other cases (a8399aa2)
• fix another test (c638186b)
• fix email tests @julianlam (64718d0c)
• openapi (2f94eb21)
• openapi (bc74afaf)
• remove is touch test (1ab0faa4)
• remove socket.io test (366b18e0)
• log socket.io error (3cb4edf1)
• fix another test (12e75ff4)
• fix test (c201bf45)
• add back missing tests (031ffe49)
• add missing tests (a75fd636)
• fix digest test (aff6d20f)
• add email (4bfebc81)
• digest (61563b01)
• additional tests for .roll() (6765d053)
• fix authentication tests to use new token saving utility functions (f42b636a)