diff --git a/.snap-meteor-1.8/package-lock.json b/.snap-meteor-1.8/package-lock.json index de06db8e6..8682fb2dd 100644 --- a/.snap-meteor-1.8/package-lock.json +++ b/.snap-meteor-1.8/package-lock.json @@ -1,6 +1,6 @@ { "name": "wekan", - "version": "v3.80.0", + "version": "v3.81.0", "lockfileVersion": 1, "requires": true, "dependencies": { diff --git a/.snap-meteor-1.8/package.json b/.snap-meteor-1.8/package.json index a5897c32d..ae1c0ea5c 100644 --- a/.snap-meteor-1.8/package.json +++ b/.snap-meteor-1.8/package.json @@ -1,6 +1,6 @@ { "name": "wekan", - "version": "v3.80.0", + "version": "v3.81.0", "description": "Open-Source kanban", "private": true, "scripts": { diff --git a/CHANGELOG.md b/CHANGELOG.md index d430f6728..c5cc92450 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,10 +1,34 @@ -# Upcoming Wekan release +# v3.81 2020-03-01 Wekan release -This release tries to fix the following bugs: +This release [fixes](https://github.com/wekan/wekan/commit/aac7c380c8c389b0683b2bd64e2cc856993f0e30) the following CRITICAL SECURITY VULNERABILITIES and other bugs: + +- Fix critical and moderate security vulnerabilities reported at 2020-02-26 with + responsible disclosure by [Dejan Zelic](https://twitter.com/dejandayoff), + Justin Benjamin and others at [Offensive Security](https://twitter.com/offsectraining), + that follow standard 90 days before public disclosure. + Thanks to xet7. +- Fix webhook error that prevented some card etc deleting from web UI of board. + Thanks to xet7. +- Add missing Font Awesome icon to Board Settings Menu. + Thanks to xet7. +- Remove autofocus from many form input boxes so that they would not cause warnings. + Thanks to xet7. + +and does the following upgrades: + +- [Upgrade Meteor to 1.10-rc.2](https://github.com/wekan/wekan/commit/26b521e86e6ac40b7ba25bbe8dac7bf4d48d43ce). + Thanks to xet7. +- [Try to make Meteor build time shorter by excluding legacy and cordova. This was made possible by + Meteor 1.10-rc.2](https://github.com/wekan/wekan/commit/0d3002f69d97e646fa7368bfdade4f78c51e9884). + Thanks to xet7. + +and fixes the following bugs: - [Try to fix afterwards loading of cards by adding fallback when requestIdleCallback is not available](https://github.com/wekan/wekan/commit/2b9540ce02de604bf84ea082f2dcb1d01673708c). Thanks to xet7. +- [Make profile.initials available in publications](https://github.com/wekan/wekan/pull/2948). + Thanks to NicoP-S. Thanks to above GitHub users for their contributions and translators for their translations. diff --git a/Stackerfile.yml b/Stackerfile.yml index 8b544acef..80d3733d5 100644 --- a/Stackerfile.yml +++ b/Stackerfile.yml @@ -1,5 +1,5 @@ appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928 -appVersion: "v3.80.0" +appVersion: "v3.81.0" files: userUploads: - README.md diff --git a/package-lock.json b/package-lock.json index 53a819181..d141fbc77 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,6 @@ { "name": "wekan", - "version": "v3.80.0", + "version": "v3.81.0", "lockfileVersion": 1, "requires": true, "dependencies": { diff --git a/package.json b/package.json index 19bc387e8..e771e0dc7 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "wekan", - "version": "v3.80.0", + "version": "v3.81.0", "description": "Open-Source kanban", "private": true, "scripts": { diff --git a/public/api/wekan.html b/public/api/wekan.html index ed25869ea..e50da96d8 100644 --- a/public/api/wekan.html +++ b/public/api/wekan.html @@ -1524,7 +1524,7 @@ var n=this.pipeline.run(e.tokenizer(t)),r=new e.Vector,i=[],o=this._fields.reduc