diff --git a/CHANGELOG.md b/CHANGELOG.md index a0bdf7216..59af9c3d4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -30,9 +30,14 @@ Upgrading to Meteor 3 progress: - https://www.linkedin.com/posts/harryadel_dev-diary-24-wekan-migration-journey-activity-7426683776547811328-jS9h/ - https://forums.meteor.com/t/anyone-still-using-meteor-2/64402/4 -# Upcoming WeKan ® release +# v8.35 2026-03-05 WeKan ® release -This release adds the following updates: +This release adds the following CRITICAL SECURITY FIXES of [Integrationbleed](https://wekan.fi/hall-of-fame/integrationbleed/): + +- [Fix Integrationbleed](https://github.com/wekan/wekan/commit/2cd702f48df2b8aef0e7381685f8e089986a18a4). + Thanks to Rodolphe GHIO and xet7. + +and adds the following updates: - [Bump minimatch from 3.1.3 to 3.1.5](https://github.com/wekan/wekan/pull/6167). Thanks to dependabot. @@ -64,17 +69,17 @@ Thanks to above GitHub users for their contributions and translators for their t # v8.34 2026-02-20 WeKan ® release -This release adds the following CRITICAL SECURITY FIXES: +This release adds the following CRITICAL SECURITY FIXES of [Anchorbleed](https://wekan.fi/hall-of-fame/anchorbleed/): -- [Fix GHSL-2026-035_Wekan](https://github.com/wekan/wekan/commit/1c8667eae8b28739e43569b612ffdb2693c6b1ce). +- [Fix GHSL-2026-035_Wekan CursorBleed of Anchorbleed](https://github.com/wekan/wekan/commit/1c8667eae8b28739e43569b612ffdb2693c6b1ce). Thanks to GHSL and xet7. -- [Fix GHSL-2026-036_Wekan](https://github.com/wekan/wekan/commit/8c00adc6b865653bd717a946dd646eb54ac78c9c). +- [Fix GHSL-2026-036_Wekan WatchBleed of Anchorbleed](https://github.com/wekan/wekan/commit/8c00adc6b865653bd717a946dd646eb54ac78c9c). Thanks to GHSL and xet7. -- [Fix GHSL-2026-037_Wekan](https://github.com/wekan/wekan/commit/1ee9b2e917104f54c035f6426169a28fedecbdb6). +- [Fix GHSL-2026-037_Wekan GlobalBleed of Anchorbleed](https://github.com/wekan/wekan/commit/1ee9b2e917104f54c035f6426169a28fedecbdb6). Thanks to GHSL and xet7. -- [Fix GHSL-2026-044_Wekan](https://github.com/wekan/wekan/commit/73eb98c57afd3d72377a1f7160a52450ab0eeb8b). +- [Fix GHSL-2026-044_Wekan CustomFieldBleed of Anchorbleed](https://github.com/wekan/wekan/commit/73eb98c57afd3d72377a1f7160a52450ab0eeb8b). Thanks to GHSL and xet7. -- [Fix GHSL-2026-045_Wekan](https://github.com/wekan/wekan/commit/62216e36c15f55d4ef6cb97313db3aa54fc77fe0). +- [Fix GHSL-2026-045_Wekan ImportBleed of AnchorBleed](https://github.com/wekan/wekan/commit/62216e36c15f55d4ef6cb97313db3aa54fc77fe0). Thanks to GHSL and xet7. and adds the following new features: diff --git a/Dockerfile b/Dockerfile index b056b18a2..8e697ccc3 100644 --- a/Dockerfile +++ b/Dockerfile @@ -197,9 +197,9 @@ ln -sf $(which bsdtar) $(which tar) # WeKan Bundle Installation mkdir -p /home/wekan/app cd /home/wekan/app -wget "https://github.com/wekan/wekan/releases/download/v8.34/wekan-8.34-${WEKAN_ARCH}.zip" -unzip "wekan-8.34-${WEKAN_ARCH}.zip" -rm "wekan-8.34-${WEKAN_ARCH}.zip" +wget "https://github.com/wekan/wekan/releases/download/v8.35/wekan-8.35-${WEKAN_ARCH}.zip" +unzip "wekan-8.35-${WEKAN_ARCH}.zip" +rm "wekan-8.35-${WEKAN_ARCH}.zip" mv /home/wekan/app/bundle /build # Restore original tar diff --git a/Stackerfile.yml b/Stackerfile.yml index 9f750c6ae..e8d065119 100644 --- a/Stackerfile.yml +++ b/Stackerfile.yml @@ -1,5 +1,5 @@ appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928 -appVersion: "v8.34.0" +appVersion: "v8.35.0" files: userUploads: - README.md diff --git a/docs/Platforms/Propietary/Windows/Offline.md b/docs/Platforms/Propietary/Windows/Offline.md index aed200d21..836e8fe74 100644 --- a/docs/Platforms/Propietary/Windows/Offline.md +++ b/docs/Platforms/Propietary/Windows/Offline.md @@ -10,7 +10,7 @@ This is without container (without Docker or Snap). Right click and download files 1-4: -1. [wekan-8.34-amd64-windows.zip](https://github.com/wekan/wekan/releases/download/v8.34/wekan-8.34-amd64-windows.zip) +1. [wekan-8.35-amd64-windows.zip](https://github.com/wekan/wekan/releases/download/v8.35/wekan-8.35-amd64-windows.zip) 2. [node.exe](https://nodejs.org/dist/latest-v14.x/win-x64/node.exe) @@ -22,7 +22,7 @@ Right click and download files 1-4: 6. Double click `mongodb-windows-x86_64-7.0.30-signed.msi` . In installer, uncheck downloading MongoDB compass. -7. Unzip `wekan-8.34-amd64-windows.zip` , inside it is directory `bundle`, to it copy other files: +7. Unzip `wekan-8.35-amd64-windows.zip` , inside it is directory `bundle`, to it copy other files: ``` bundle (directory) diff --git a/package-lock.json b/package-lock.json index ff9e675d8..039ca7b28 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,6 @@ { "name": "wekan", - "version": "v8.34.0", + "version": "v8.35.0", "lockfileVersion": 1, "requires": true, "dependencies": { diff --git a/package.json b/package.json index b2d407a9d..c69e5fa06 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "wekan", - "version": "v8.34.0", + "version": "v8.35.0", "description": "Open-Source kanban", "private": true, "repository": { diff --git a/sandstorm-pkgdef.capnp b/sandstorm-pkgdef.capnp index bde9394ec..a2ecf44ef 100644 --- a/sandstorm-pkgdef.capnp +++ b/sandstorm-pkgdef.capnp @@ -22,10 +22,10 @@ const pkgdef :Spk.PackageDefinition = ( appTitle = (defaultText = "Wekan"), # The name of the app as it is displayed to the user. - appVersion = 834, + appVersion = 835, # Increment this for every release. - appMarketingVersion = (defaultText = "8.34.0~2026-02-20"), + appMarketingVersion = (defaultText = "8.35.0~2026-03-05"), # Human-readable presentation of the app version. minUpgradableAppVersion = 0, diff --git a/snapcraft.yaml b/snapcraft.yaml index 8ea59394f..a6a9008ec 100644 --- a/snapcraft.yaml +++ b/snapcraft.yaml @@ -1,5 +1,5 @@ name: wekan -version: '8.34' +version: '8.35' base: core24 summary: Open Source kanban description: | @@ -166,9 +166,9 @@ parts: # Cleanup mkdir .build cd .build - wget https://github.com/wekan/wekan/releases/download/v8.34/wekan-8.34-amd64.zip - unzip wekan-8.34-amd64.zip - rm wekan-8.34-amd64.zip + wget https://github.com/wekan/wekan/releases/download/v8.35/wekan-8.35-amd64.zip + unzip wekan-8.35-amd64.zip + rm wekan-8.35-amd64.zip cd .. ##cd .build/bundle ##find . -type d -name '*-garbage*' | xargs rm -rf