NodeBB

Release build (patch) of NodeBB @ 2026-08-05T01:25:13.982Z

v4.14.7 (2026-08-05)

New Features

• add a middleware to require reauth on api routes (69e749a1)

Bug Fixes

• use renderCategory for move event (6972b70f)
• closes #14550, closes #14549 (5f6ddbda)
• closes #14548, wait for parsing of input elements before selecting (0d67eddb)
• hide URL profile upload when uploads are disabled (#14547) (fafced7c)
• use isSafeHref on user.url and category.url (26333b88)
• privileges: route ActivityPub URIs to fediverse pseudo-user check (ab954458)
• activitypub: enforce attributedTo origin check in inbox handlers (f93507a6)

Refactors

• use api method for admins (db8fef92)
• use write api route for admin/remove admin (e6f7c259)
• 2 more href checks (1d922dbb)

Tests

• fix relative_path test (766e9179)
• allow component in span/a/img for now (a990ba7f)
• update schema tests for 401 (e709ce9e)