This commit is contained in:
Lauri Ojansivu 2026-03-05 22:35:43 +02:00
parent 2cd702f48d
commit ca87e5c3cf
8 changed files with 27 additions and 22 deletions

View file

@ -30,9 +30,14 @@ Upgrading to Meteor 3 progress:
- https://www.linkedin.com/posts/harryadel_dev-diary-24-wekan-migration-journey-activity-7426683776547811328-jS9h/
- https://forums.meteor.com/t/anyone-still-using-meteor-2/64402/4
# Upcoming WeKan ® release
# v8.35 2026-03-05 WeKan ® release
This release adds the following updates:
This release adds the following CRITICAL SECURITY FIXES of [Integrationbleed](https://wekan.fi/hall-of-fame/integrationbleed/):
- [Fix Integrationbleed](https://github.com/wekan/wekan/commit/2cd702f48df2b8aef0e7381685f8e089986a18a4).
Thanks to Rodolphe GHIO and xet7.
and adds the following updates:
- [Bump minimatch from 3.1.3 to 3.1.5](https://github.com/wekan/wekan/pull/6167).
Thanks to dependabot.
@ -64,17 +69,17 @@ Thanks to above GitHub users for their contributions and translators for their t
# v8.34 2026-02-20 WeKan ® release
This release adds the following CRITICAL SECURITY FIXES:
This release adds the following CRITICAL SECURITY FIXES of [Anchorbleed](https://wekan.fi/hall-of-fame/anchorbleed/):
- [Fix GHSL-2026-035_Wekan](https://github.com/wekan/wekan/commit/1c8667eae8b28739e43569b612ffdb2693c6b1ce).
- [Fix GHSL-2026-035_Wekan CursorBleed of Anchorbleed](https://github.com/wekan/wekan/commit/1c8667eae8b28739e43569b612ffdb2693c6b1ce).
Thanks to GHSL and xet7.
- [Fix GHSL-2026-036_Wekan](https://github.com/wekan/wekan/commit/8c00adc6b865653bd717a946dd646eb54ac78c9c).
- [Fix GHSL-2026-036_Wekan WatchBleed of Anchorbleed](https://github.com/wekan/wekan/commit/8c00adc6b865653bd717a946dd646eb54ac78c9c).
Thanks to GHSL and xet7.
- [Fix GHSL-2026-037_Wekan](https://github.com/wekan/wekan/commit/1ee9b2e917104f54c035f6426169a28fedecbdb6).
- [Fix GHSL-2026-037_Wekan GlobalBleed of Anchorbleed](https://github.com/wekan/wekan/commit/1ee9b2e917104f54c035f6426169a28fedecbdb6).
Thanks to GHSL and xet7.
- [Fix GHSL-2026-044_Wekan](https://github.com/wekan/wekan/commit/73eb98c57afd3d72377a1f7160a52450ab0eeb8b).
- [Fix GHSL-2026-044_Wekan CustomFieldBleed of Anchorbleed](https://github.com/wekan/wekan/commit/73eb98c57afd3d72377a1f7160a52450ab0eeb8b).
Thanks to GHSL and xet7.
- [Fix GHSL-2026-045_Wekan](https://github.com/wekan/wekan/commit/62216e36c15f55d4ef6cb97313db3aa54fc77fe0).
- [Fix GHSL-2026-045_Wekan ImportBleed of AnchorBleed](https://github.com/wekan/wekan/commit/62216e36c15f55d4ef6cb97313db3aa54fc77fe0).
Thanks to GHSL and xet7.
and adds the following new features:

View file

@ -197,9 +197,9 @@ ln -sf $(which bsdtar) $(which tar)
# WeKan Bundle Installation
mkdir -p /home/wekan/app
cd /home/wekan/app
wget "https://github.com/wekan/wekan/releases/download/v8.34/wekan-8.34-${WEKAN_ARCH}.zip"
unzip "wekan-8.34-${WEKAN_ARCH}.zip"
rm "wekan-8.34-${WEKAN_ARCH}.zip"
wget "https://github.com/wekan/wekan/releases/download/v8.35/wekan-8.35-${WEKAN_ARCH}.zip"
unzip "wekan-8.35-${WEKAN_ARCH}.zip"
rm "wekan-8.35-${WEKAN_ARCH}.zip"
mv /home/wekan/app/bundle /build
# Restore original tar

View file

@ -1,5 +1,5 @@
appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928
appVersion: "v8.34.0"
appVersion: "v8.35.0"
files:
userUploads:
- README.md

View file

@ -10,7 +10,7 @@ This is without container (without Docker or Snap).
Right click and download files 1-4:
1. [wekan-8.34-amd64-windows.zip](https://github.com/wekan/wekan/releases/download/v8.34/wekan-8.34-amd64-windows.zip)
1. [wekan-8.35-amd64-windows.zip](https://github.com/wekan/wekan/releases/download/v8.35/wekan-8.35-amd64-windows.zip)
2. [node.exe](https://nodejs.org/dist/latest-v14.x/win-x64/node.exe)
@ -22,7 +22,7 @@ Right click and download files 1-4:
6. Double click `mongodb-windows-x86_64-7.0.30-signed.msi` . In installer, uncheck downloading MongoDB compass.
7. Unzip `wekan-8.34-amd64-windows.zip` , inside it is directory `bundle`, to it copy other files:
7. Unzip `wekan-8.35-amd64-windows.zip` , inside it is directory `bundle`, to it copy other files:
```
bundle (directory)

2
package-lock.json generated
View file

@ -1,6 +1,6 @@
{
"name": "wekan",
"version": "v8.34.0",
"version": "v8.35.0",
"lockfileVersion": 1,
"requires": true,
"dependencies": {

View file

@ -1,6 +1,6 @@
{
"name": "wekan",
"version": "v8.34.0",
"version": "v8.35.0",
"description": "Open-Source kanban",
"private": true,
"repository": {

View file

@ -22,10 +22,10 @@ const pkgdef :Spk.PackageDefinition = (
appTitle = (defaultText = "Wekan"),
# The name of the app as it is displayed to the user.
appVersion = 834,
appVersion = 835,
# Increment this for every release.
appMarketingVersion = (defaultText = "8.34.0~2026-02-20"),
appMarketingVersion = (defaultText = "8.35.0~2026-03-05"),
# Human-readable presentation of the app version.
minUpgradableAppVersion = 0,

View file

@ -1,5 +1,5 @@
name: wekan
version: '8.34'
version: '8.35'
base: core24
summary: Open Source kanban
description: |
@ -166,9 +166,9 @@ parts:
# Cleanup
mkdir .build
cd .build
wget https://github.com/wekan/wekan/releases/download/v8.34/wekan-8.34-amd64.zip
unzip wekan-8.34-amd64.zip
rm wekan-8.34-amd64.zip
wget https://github.com/wekan/wekan/releases/download/v8.35/wekan-8.35-amd64.zip
unzip wekan-8.35-amd64.zip
rm wekan-8.35-amd64.zip
cd ..
##cd .build/bundle
##find . -type d -name '*-garbage*' | xargs rm -rf