Changelog for dokuwiki-2024.02.06b-lp155.2.1.noarch.rpm :

* Sat Oct 12 2024 Stefan Jakobs - Hotfix 2024-02-06b
* fix XSS vulnerability in metadata export 4305
* Wed Mar 20 2024 Stefan Jakobs - Release 2024-02-06a
* :!: DokuWiki requires at least PHP 7.4 now
* Further fixes for warnings in PHP8+
* Complete Overhaul of the Remote API and introduction of the JSONRPC transport (see Patreon Post)
* Introduction of Token Auth
* Automatic pruning of logs (see Configuration Setting: logretain)
* Plugin authors can now set an update message to be shown in extension manager
* Refactored feed generation
* Better baseurl detection when running behind reverse proxy
* :!: developers now need to install dev dependencies via composer
* Automatic loading of vendor/autoload.php for plugins
* SameSite=Lax cookie attribute is set by default now (see Configuration Setting: samesitecookie)
* The default dokuwiki template now supports a SVG logo. The logo height is now fixed to 64px :!:
* Lots of coding style fixes
* Various bug fixes and smaller tweaks- Hotfix 2024-02-06a
* fix problem with parsing uneven table columns 4186
* fix logo aspect ratio in dokuwiki template when using PNG logo 4187
* re-add missing FEED_DATA_PROCESS event 4191
* fix error handling for plugins with missing info 4193
* fix doubly declared cache class error 4200
* fix content-type header for feeds 4203
* ignore decryption errors on old cookies 4198
* Thu Jun 01 2023 Stefan Jakobs - Hotfix 2023-04-04a
* fix an XSS security vulnerability in RSS handling. Issue: 3967
* Tue Apr 18 2023 Stefan Jakobs - A lot of fixes for warnings in PHP8+
* A new feature flag hidewarnings will suppress the output of warnings, if PHP is configured to show warnings to the end user- The options to embed HTML and PHP have been completely removed for security reasons :!:
* Forum discussion
* Plugin alternative- Fixes
* quicksearch with UTF-8 chars
* basic auth header parsing
* old revisions for pages with dots
* feed titles
* handling of unknown config options
* relaxed media CSP headers for PDF and SVG handling
* relaxed browseruid check for better browser compatibility
* compatibility updates for mail sending- Unit Tests use php-dom-wrapper instead of phpquery now :!:- Improved error logging- Dependency Updates
* Sun Sep 25 2022 Stefan Jakobs - Release 2022-07-31a
* fix an XSS security vulnerability 3761- Release 2022-07-31 \"Igor\"
* Fix various errors in PHP8 support
* Drop support for PHP versions earlier than 7.2
* SVG-based smileys replace GIF versions
* :!: may require template update 3344
* :!: plugins directly embedding SVG may need CSS adjustments 3690
* Allow “revert” action for logged in users only
* Various translation updates
* Add a class .logo to the h1 title to let administrators remove the h1 around the logo 3408
* Use Slika library for image resizing and cropping, with:
* auto rotation based on EXIF tags
* support for WEBP
* Refactored logging mechanism 3230, 3203 and logviewer
* Refactored media manager 3372 and lazy loading of images
* Support for SVG images
* New form events used. :!: Plugins should implement them, because the old form events are not triggered anymore
* Some smaller security fixes
* Sun Aug 09 2020 Stefan Jakobs - Release 2020-07-29 “Hogfather”
* Lots of internal refactoring to make the code base more modern and robust. You can read a bit more on the background here.
* Defer the loading of JavaScript to improve initial page loads :!: (Some plugins needs to temporary disable the defer_js feature flag)
* PHP 7.4 compatibility and some preparations for the upcoming PHP8
* New trustedproxy setting for installations behind a reverse proxy :!:
* New command line script for managing extensions
* RSS Feed can now show new items only
* A whole ton of smaller bug fixes and improvements
* Lots of translation upgrades
* Note: because of various internal changes, not all plugins or templates may be compatible with this release. It is recommended to check the documentation of the plugins you use before upgrading. As always a backup is recommended before upgrading.
* Thu Feb 28 2019 Stefan Jakobs - Release 2018-04-22b Hotfix
* Hotfix 2018-04-22a - fix missing “you are here” 2329 - readd missing password reset interface 2349 - fix page unlocking when canceling edits 2350 - better support for creating pages from search 2355 - problems with installing plugin zips on some systems 2361 - fixed draft recovering
* Hotfix 2018-04-22b - fix PHP 7.3 compatibility 2622 - fix ACL check https://github.com/splitbrain/dokuwiki/pull/2609
* Sat May 05 2018 projectsAATTlocalside.net- Release 2018-04-22 Release “Greebo”
* This release requires PHP 5.6 at least!
* PHP 7.2 Support and improvements for PHP 7.3 support
* New form on search page with more search tools :!: Plugins which modified that page may need adjustments, e.g. tagging Plugin
* ability to filter and sort results by time! 🎉
* Sending now a manifest.json to let the user add DokuWiki to the homescreen
* Re-factored section edit. :!: Plugins which insert own section edit buttons need adjustments, e.g. wrap Plugin
* updated LESS compiler :!: Template authors may experience some incompatibilities
* new Action Dispatcher :!: Plugin authors handling ACTION_ACT_PREPROCESS may encounter slight differences
* new Command Line Plugins
* new Menu system :!: template authors may want to integrate them (see Menu)
* improved features in bin/wantedpage.php CLI
* better cursor handling when inserting multiple images from media popup
* additional options for GeShi syntax highlighting- Hotfix 2018-04-22a
* fix missing “you are here” 2329
* readd missing password reset interface 2349
* fix page unlocking when canceling edits 2350
* better support for creating pages from search 2355
* problems with installing plugin zips on some systems 2361
* fixed draft recovering
* Tue Aug 29 2017 projectsAATTlocalside.net- fixes sanitation of $language 2080; fixes RSS syntax XSS 2081- fixes rendering null $language going to GeSHi 2088
* Mon Aug 21 2017 projectsAATTlocalside.net- fixes reflected XSS issue 2061
* Wed Mar 22 2017 projectsAATTlocalside.net- fixes security token 1883- fixes media manager overwrite issue 1864.
* Mon Mar 06 2017 projectsAATTlocalside.net- fixes installation issue 1852 and media overwrite issue 1853.
* Sun Feb 19 2017 projectsAATTlocalside.net- new Admin screen with plugins being able to add their own icons :!: 3rd party templates need adjustments- jQuery 3 (IE Support for versions <9 dropped) :!: plugins may need updates. eg. be sure to update gallery before upgrading- better cache management and CDN support for jQuery- PHP 7.1 support and PHP 7.0 bugfixes- improvements to the internal Form mechanism- File usage list in media manager- Various improvements, language updates and bug fixes
* Fri Jul 22 2016 projectsAATTlocalside.net- New authPDO plugin, authmysql and authpgsql are deprecated :!:- :!: Access check is performed before pages are shown in sidebars of recent templates. (e.g. dokuwiki, starter, writr)- PHP 7 compatibility fixes- Internet Explorers 8 (and older) are no longer supported, workarounds have been removed- Improvements to the new form class, auto loading of plugin classes and other improvements for plugin developers- Show size changes in recent changes- Better RTL (Arabic, Hebrew) support in Mediamanager- Support for PHP\'s builtin web server- Various improvements, language updates and bug fixes- Hotfix 2016-06-26a: fixes 1616 issue with authad.
* Mon Jan 11 2016 projectsAATTlocalside.net- do not replace apache config.- extend apache config to support apache 2.4
* Thu Aug 27 2015 projectsAATTlocalside.net- This release now requires PHP 5.3.3 at least- New Style Manager to adjust template variables like colors- Experimental new Form class usable for plugin developers- Use Composer to add third party libraries- Various deprecated code has been removed- The Extension Manager can now remove old files when updating extensions- Allow unsetting default acronyms, schemes, entities, etc. in local config- PHP 7 compatibility fixes- Page titles now reflect the current action better- Add event to let plugin authors send their own popularity data- Changed all submit buttons from input to button to improve their stylability.- Various improvements and bug fixes- Hotfix 2015-08-10a: fix for issue 1296 with Extension Manager which prevented installing tarballs and issue 1302 which prevented links to Windows Shares to work
* Sun Mar 29 2015 projectsAATTlocalside.net- Security Hotfix 2014-09-29d: fixes a XSS vulnerability in the user manager
* Thu Feb 26 2015 projectsAATTlocalside.net- Security Hotfix 2014-09-29c: fixes privilege escalation in RPC API
* Wed Dec 17 2014 projectsAATTlocalside.net- update version to 2014-09-29b- include dokuwiki_cleanup.sh