diff --git a/CHANGELOG.md b/CHANGELOG.md index 13504c6ab..6f73b6204 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -26,8 +26,6 @@ Those are fixed at WeKan 8.07 where database directory is back to /var/snap/weka This release fixes the following CRITICAL SECURITY ISSUES of [Snowbleed](https://wekan.fi/hall-of-fame/snowbleed/): -- [Security Fix 1: There was not enough permission checks. Moved migrations to Admin Panel/Settings/Cron](https://github.com/wekan/wekan/commit/cbb1cd78de3e40264a5e047ace0ce27f8635b4e6). - Thanks to [Joshua Rogers](https://joshua.hu) of [Aisle Research](https://aisle.com) and xet7. - [Security Fix 2: ](https://github.com/wekan/wekan/commit/). Thanks to [Joshua Rogers](https://joshua.hu) of [Aisle Research](https://aisle.com) and xet7. - [Security Fix 3: ](https://github.com/wekan/wekan/commit/). @@ -55,6 +53,13 @@ This release fixes the following CRITICAL SECURITY ISSUES of [Snowbleed](https:/ - [Security Fix 14: ](https://github.com/wekan/wekan/commit/). Thanks to [Joshua Rogers](https://joshua.hu) of [Aisle Research](https://aisle.com) and xet7. +# v8.20 2026-01-16 WeKan ® release + +This release fixes the following CRITICAL SECURITY ISSUES of [Snowbleed](https://wekan.fi/hall-of-fame/snowbleed/): + +- [Security Fix 1: There was not enough permission checks. Moved migrations to Admin Panel/Settings/Cron](https://github.com/wekan/wekan/commit/cbb1cd78de3e40264a5e047ace0ce27f8635b4e6). + Thanks to [Joshua Rogers](https://joshua.hu) of [Aisle Research](https://aisle.com) and xet7. + and adds the following features: - [Added back feature: Toggle Drag Handles. Improved positions of Add List etc buttons](https://github.com/wekan/wekan/commit/5cb712bee4cf46c6fe13d7dacf4b62298152b894). diff --git a/Dockerfile b/Dockerfile index d322f66f1..72abbf987 100644 --- a/Dockerfile +++ b/Dockerfile @@ -249,9 +249,9 @@ cd /home/wekan/app # Remove legacy webbroser bundle, so that Wekan works also at Android Firefox, iOS Safari, etc. #rm -rf /home/wekan/app_build/bundle/programs/web.browser.legacy #mv /home/wekan/app_build/bundle /build -wget "https://github.com/wekan/wekan/releases/download/v8.19/wekan-8.19-amd64.zip" -unzip wekan-8.19-amd64.zip -rm wekan-8.19-amd64.zip +wget "https://github.com/wekan/wekan/releases/download/v8.20/wekan-8.20-amd64.zip" +unzip wekan-8.20-amd64.zip +rm wekan-8.20-amd64.zip mv /home/wekan/app/bundle /build # Put back the original tar diff --git a/Stackerfile.yml b/Stackerfile.yml index fb8614872..481c50eb9 100644 --- a/Stackerfile.yml +++ b/Stackerfile.yml @@ -1,5 +1,5 @@ appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928 -appVersion: "v8.19.0" +appVersion: "v8.20.0" files: userUploads: - README.md diff --git a/docs/Platforms/Propietary/Windows/Offline.md b/docs/Platforms/Propietary/Windows/Offline.md index 583bdd931..7a9f6ba4b 100644 --- a/docs/Platforms/Propietary/Windows/Offline.md +++ b/docs/Platforms/Propietary/Windows/Offline.md @@ -10,7 +10,7 @@ This is without container (without Docker or Snap). Right click and download files 1-4: -1. [wekan-8.19-amd64-windows.zip](https://github.com/wekan/wekan/releases/download/v8.19/wekan-8.19-amd64-windows.zip) +1. [wekan-8.20-amd64-windows.zip](https://github.com/wekan/wekan/releases/download/v8.20/wekan-8.20-amd64-windows.zip) 2. [node.exe](https://nodejs.org/dist/latest-v14.x/win-x64/node.exe) @@ -22,7 +22,7 @@ Right click and download files 1-4: 6. Double click `mongodb-windows-x86_64-7.0.28-signed.msi` . In installer, uncheck downloading MongoDB compass. -7. Unzip `wekan-8.19-amd64-windows.zip` , inside it is directory `bundle`, to it copy other files: +7. Unzip `wekan-8.20-amd64-windows.zip` , inside it is directory `bundle`, to it copy other files: ``` bundle (directory) diff --git a/package-lock.json b/package-lock.json index 84107f1de..19f6ee5d8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,6 @@ { "name": "wekan", - "version": "v8.19.0", + "version": "v8.20.0", "lockfileVersion": 1, "requires": true, "dependencies": { diff --git a/package.json b/package.json index e5507389b..4ec708b75 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "wekan", - "version": "v8.19.0", + "version": "v8.20.0", "description": "Open-Source kanban", "private": true, "repository": { diff --git a/sandstorm-pkgdef.capnp b/sandstorm-pkgdef.capnp index 72a42f536..efc801b16 100644 --- a/sandstorm-pkgdef.capnp +++ b/sandstorm-pkgdef.capnp @@ -22,10 +22,10 @@ const pkgdef :Spk.PackageDefinition = ( appTitle = (defaultText = "Wekan"), # The name of the app as it is displayed to the user. - appVersion = 819, + appVersion = 820, # Increment this for every release. - appMarketingVersion = (defaultText = "8.19.0~2025-12-29"), + appMarketingVersion = (defaultText = "8.20.0~2026-01-16"), # Human-readable presentation of the app version. minUpgradableAppVersion = 0, diff --git a/snapcraft.yaml b/snapcraft.yaml index aeef629b0..a135c4290 100644 --- a/snapcraft.yaml +++ b/snapcraft.yaml @@ -1,5 +1,5 @@ name: wekan -version: '8.19' +version: '8.20' base: core24 summary: Open Source kanban description: | @@ -166,9 +166,9 @@ parts: # Cleanup mkdir .build cd .build - wget https://github.com/wekan/wekan/releases/download/v8.19/wekan-8.19-amd64.zip - unzip wekan-8.19-amd64.zip - rm wekan-8.19-amd64.zip + wget https://github.com/wekan/wekan/releases/download/v8.20/wekan-8.20-amd64.zip + unzip wekan-8.20-amd64.zip + rm wekan-8.20-amd64.zip cd .. ##cd .build/bundle ##find . -type d -name '*-garbage*' | xargs rm -rf