Wekan

Updates Sharp image processing and various development dependencies, including the MongoDB driver, Chai, and TypeScript ESLint tooling.

Fixes the SamlSubjectBleed security vulnerability by binding SAML accounts to original identities and confirms a fix for ZipBombBleed.

Introduces configurable board views, continuous backup, Taskwarrior and Focalboard imports, enhanced Scrum settings, and expanded language translations.

Security release addressing multiple vulnerabilities including CacheBleed and SyncBleed, while improving LDAP verification, password guessing protection, and user permissions.

This release updates the DOMPurify sanitizer to 3.4.16 and improves Trello link validation in translation tests to resolve a CodeQL alert.

This release fixes the ReplyBleed security vulnerability, implements various system maintenance updates, and introduces user-specific dependency visibility and image preview fixes.

This release introduces email rule resolution tools, todo.txt and GitLab import/export support, improved watcher mapping for OpenProject and Asana, and updated sync/history coordination.

This update improves card hooks, browser compatibility for controls, adds portable image fixtures and Docker mail connections, and restores missing locale fallback keys.

This release introduces security enhancements for data disclosure, expanded import capabilities for multiple platforms, and improvements to Pulse, Rules, and SAML support.

This release enhances security for admin custom fields, improves SAML login and project syncing, adds Scrum tracking features, and refines API diagnostics and rule emails.

This release addresses several security vulnerabilities in LDAP and SAML authentication, introduces comprehensive Scrum planning and reporting features, enhances Jira integration, and improves board duplication and synchronization.

Updated the language selection display and enhanced text editors with multiline support and resizable windows.

Introduces a new action to duplicate multiple selected boards without their cards and removes the hamburger menu from board tiles.

This release introduces five new flow analytics pages, expanded activity history tracking, improved card and list management, and enhanced board filters and swimlanes.

Fixes the InactiveBleed vulnerability by ensuring disabled accounts cannot obtain new sessions or use existing revoked credentials across REST, API, and LDAP authentication.

Introduces independent board drag settings, mixed multi-selection, and enhanced checklist functionality including progress visibility and drag-and-drop reordering.

Updated the Admin Panel with expanded email and login settings, modified SSO callback behavior, and refreshed login button styling.

Site administrators can now preview and download Files Report attachments regardless of board membership, with improved ZIP previews and table cell layouts.

Fixed dependency installation issues following an S3 upload library update and performed test maintenance for the UI, documentation, and translations.

Updates Rsdoctor to fix a security vulnerability and restores dependency updates by patching Meteor Node stubs and Dependabot configuration.

Snap builds now include a retry mechanism to recover from stale package URLs during stage-package downloads and base setup.

Restores the missing v11.96 summary to enable release note generation and platform builds.

Fixed Mac app build smoke tests and updated the Board Settings layout for better consistency.

This release includes updates to Linux packages, board invitations, and fixes for release packaging across Mac and Docker platforms.

Improved login error security, updated OAuth header validation, unified release menus, and refined automated dependency checks.

GitHub release workflows now handle temporary Snap store server errors without failing, while still failing on invalid uploads or credential issues.

Snap Store uploads now include automatic retries for temporary server failures across all release paths.

Introduces a source-based development server, various UI and navigation fixes, expanded test coverage, improved translation handling, and enhanced document indexing and MIME detection.

This release improves Launchpad Snap builds, fixes various UI regressions, and adds optional board display settings.

Interrupted Snap builds now recover existing Launchpad work and GitHub snap attachments include bounded retry time limits.

Admins can now set a universal date format and disable the personal date-format selector on cards.

Improvements to notification scopes, card fields, WIP groups, checklist submissions, and FerretDB oplog performance.

Introduced custom logo support for login and board pages and updated repository mirroring to check linked files via live URLs.

Release preparation now verifies translation-language metadata before tagging to detect incomplete language lists locally.

This release introduces checklist deadlines with a shared-calendar date picker and REST access, fixes multi-selection label application, and updates translations across numerous languages.

Veps translations for server-error prose were added to ensure consistency with existing troubleshooting wording.

This release addresses multiple critical security vulnerabilities related to board policies, role capabilities, and object boundaries, alongside various translation updates for Tamazight, Bambara, Fulah, Dzongkha, and Ewe.

Fixes the assignee view build using native date formatting, adds a release notes check to the release script, and updates Tamazight translations.

This release introduces independent calendar selection, email-domain restrictions for OAuth2/OIDC login, improved translation tooling, and updates to Meteor and organization mirrors.

Fixed Board JSON exports to correctly handle cards with HTML and attachments and improved error reporting for interrupted downloads.

Version 11.71 introduces soft deletes for attachments, customizable board and card field ordering, expanded REST API endpoints, and a fix for MongoDB 8.2 crash loops after disk space exhaustion.

This release introduces multiple new login methods including Google, GitHub, Facebook, X, and passwordless email, adds Admin Panel overrides for these providers, and fixes a release bump job failure.

This release fixes a 500 error during board export to .zip caused by an archiver API mismatch and confirms a fix for OIDC redirect login loops.

This release updates bundled build tooling, including Node.js diagnostics, expanded MongoDB Database Tools targets, and telemetry removal for mongosh, with no changes to application code.

Fixes critical security vulnerabilities involving path traversal, unauthorized file deletion, and anonymous avatar access, and relocates the AppImage mount point to prevent /tmp overflow.

Restores resizable list width and swimlane height, adds board-wide resize locks, reorganizes board settings, and updates FerretDB with infinity-value support and a gRPC security fix.

This release fixes a version-numbering bug in the release script, updates the CHANGELOG.md structure, and removes the Docker Hub/Quay.io registry-overview sync.

This release introduces Markdown import/export, a new Time view, and an updated Board View menu, while hardcoding list width to 240px and fixing several bugs including an OIDC login loop.

Restores support for external image URLs for logos and board backgrounds and introduces a new interactive test menu script for developers.

Release v11.58 provides updated bundles with fixes for FerretDB, node-patches, mongo-tools-patches, and mongosh-patches builds across multiple platforms.

Release v11.56 repairs test assumptions for generated artifacts, Finnish translations, report labels, and HTTP/HTTPS session cookies without changing application behavior.

Version 11.55 reverts Legacy HTML4 to restore the standard Meteor interface, introduces local GIF storage for branding and document previews, and improves authentication form keyboard navigation.

v11.53 implements Amiga-safe filename sanitization, enhances problem reporting with proxy-aware diagnostics and usernames, and fixes security-related test doubles.

Release v11.52 introduces enhanced security sanitization for imports/exports, verified FerretDB recovery audits, improved Windows build manifests, and various stability and regression fixes.

WeKan v11.51 improves Windows single EXE builds, ensures Meteor version consistency in website releases, adds a release-critical version validation gate, and enhances Git mirror update scripts across platforms.

Introduces a universal change history with a new History view and improved Undo functionality, fixes several security vulnerabilities, and resolves various bugs across minicards, swimlanes, and API reporting.

Version 11.49 improves the Windows EXE by replacing the virtual filesystem with a checksummed ZIP mount, reduces bundle size via native prebuild trimming, and fixes list-to-swimlane binding.

WeKan v11.48 introduces the Less Code programme to reduce codebase size, optimizes UI controls for the header and Custom Fields, and improves developer tooling and browser regression tests.

WeKan v11.47 introduces a lazy-loaded, read-only attachment viewer for DOCX, XLSX, and PPTX files with strict memory and size limits for security.

WeKan v11.46 updates the Meteor framework and associated packages from beta to release candidate version 3.5.2-rc.0.

WeKan v11.45 updates the qs dependency to 6.16.0 to resolve two denial-of-service vulnerabilities and improve query-string parsing and serialization.

WeKan v11.44 introduces isolated KVM testing for Fedora and Ubuntu Asahi, updates FerretDB to Go 1.27, and refreshes MongoDB Database Tools with the latest upstream master source.

This release introduces the ability to configure custom SMTP and Nodemailer services via the Admin Panel, while maintaining MAIL_URL as the default configuration.

v11.42 fixes an issue with persistent session login tokens in nested arrays and improves cross-database conformance for logical OR behavior.

Version 11.41 implements critical MimeBleed security defenses, fixes board sorting persistence, resolves a high-memory allocation bug in FerretDB, and improves multi-user session testing.

v11.40 improves board view synchronization, fixes swimlane scoping and drag-and-drop bugs, and enhances full-stack testing reliability for Docker and Flatpak.

This release ensures notifications respect muted board settings and improves card placement and layout persistence in board views.

WeKan v11.38 improves persistence for member settings and enables reactive switching between board views (Calendar and Gantt) without full page reloads.

Version 11.37 restores explicit network configuration for packaged releases, removing automatic network endpoint discovery to prevent service downtime.

This release fixes Snap startup issues by replacing the host timeout command with a shell-native process monitor and improving handling of disabled comparisons and unset polling values.

Version 11.35 improves Snap database connectivity for problem reports and fixes a service hang caused by abandoned endpoint locks.

WeKan v11.34 updates bundled binaries, including FerretDB to v1.64.0 and Node.js to v24.20.0 across multiple platforms.

Release v11.32 fixes a CodeQL security alert regarding incomplete escaping, improves Windows PDFKit path resolution, and adds retry logic for Snap LXD installations.

v11.31 improves user session persistence via HttpOnly cookies, adds admin version checks, and implements automatic IPv4 endpoint discovery for packaged startup and Docker Compose.

Custom fields can now be removed from cards backed by FerretDB, resolving an issue where deselected fields remained due to improper $pull operand matching.

WeKan v11.29 updates build tooling, dependency versions, browser test session models, and Helm chart memory budgets.

This release addresses critical security vulnerabilities by fixing HTML injection in notification emails and moving persistent authentication tokens to secure HttpOnly cookies.

This release addresses the SearchBleed critical security vulnerability by fixing a global-search authorization bypass that allowed unauthorized access to cards across board boundaries on MongoDB deployments.

Fixes Windows single-EXE CI smoke test port-binding errors and corrects GitHub issue-closing metadata for the persistent-login fix.

WeKan v11.25 restores persistent login for FerretDB deployments and updates binary handling for Docker and Helm to ensure compatible database versions are used.

Notification title structure has been moved to server code to prevent translators from accidentally modifying executable tokens and layouts.

This release fixes Snap assembly migration helper paths and improves reliability for extra-architecture builds by adding retries for Docker registry manifest requests.

Version v11.22 fixes a critical security vulnerability (RuleBleed) preventing unauthorized card creation on private boards and improves test isolation for rule authorization checks.

This release addresses three critical security vulnerabilities, optimizes FerretDB performance and database reactivity, introduces DEBUGSPEED diagnostics, and fixes various UI and registration bugs.

This release fixes command-injection security vulnerabilities in translation tools, enables real-time updates for large boards, and optimizes Launchpad snap assembly process.

Version 11.19 improves HostnameBleed security test coverage, enhances test-matrix reliability and local Node discovery, and refines the translation workflow to better prioritize human translations over machine fills.

Release v11.18 ensures archived subtask helper boards remain visible in the Archive and restores the ability to remove card locations via the X button.

Release v11.17 fixes a security issue in translation tests, improves card title interactions, updates REST user deletion responses, and expands language translations.

This release fixes a critical security issue regarding search pagination session reuse and improves 32-bit AppImage packaging and card detail layouts.

WeKan v11.13 introduces a responsive Board Table view, resolves multiple FerretDB security findings, and improves LDAP/OIDC authentication, accessibility, and mobile navigation.

WeKan v11.12 improves FerretDB board loading and database search performance, fixes LDAP profile display names, and completes translations for Cherokee, Central Kurdish, Chuvash, Dzongkha, and Ewe.

This release addresses five security and privacy gaps, improves board creation and filtering, updates dependencies, and provides extensive translation updates and new language support.

This release fixes a critical security vulnerability (ImportBleed) by requiring authentication for board imports, updates developer tooling for E2E login, and expands multi-language translation support for reports.

This release improves developer tooling by updating Playwright authentication to wait for resumed users and adding retry logic for local WebKit renderer failures.

WeKan v11.08 hardens REST authorization and board ownership, improves build and release tooling for multiple Linux distributions and macOS zsh, and updates several core dependencies.

Release v11.07 addresses security vulnerabilities regarding tenant and board permissions (TenantBleed, AssignedBleed, CalendarBleed) and fixes bugs in card history, destination picking, and riscv64 builds.

WeKan v11.06 improves card detail placement and labeling, enhances LDAP profile name normalization, and updates developer regression suites for accessible icons and card dates.

Fixes a bug preventing opened cards with saved dates from rendering and remaining editable, and improves Launchpad snap build reliability and artifact preservation.

Version v11.03 introduces significant accessibility improvements, expanded card detail controls, enhanced admin panel reporting, and updated developer tooling for Rspack and Flatpak.

Release v11.02 updates the bundled FerretDB binary to v1.54.0 across multiple platforms.

Introduces a Global Admin permanent-delete gate for archived boards, enhanced multi-selection controls across board sections, improved audit logging in Recovery, and database-level pagination for better performance.

This release fixes a security issue, improves mobile scrolling, enhances Snap database recovery, optimizes Helm container memory, and updates card date and minicard editing.

Version 10.99 introduces board member selection for Requested By and Assigned By fields, enhances PDF and Excel exports with shared layouts and multilingual support, and improves various UI elements and documentation.

v10.98 fixes a critical account lockout security flaw (JamBleed), reworks login security with per-address tracking, improves Admin Panel problem reporting, and optimizes release bundles.

Fixes a boot crash caused by missing source maps, resolves snap database comparison issues causing downtime, prunes 61 MiB of unreachable npm packages, and implements a guard for lazy-loaded translations.

Fixes a critical security flaw where disabled registration was bypassed via the REST API, switches default transport to sockjs, and significantly reduces bundle sizes by removing uWebSockets.js and source maps.

This release improves diagnostic reporting and pruning for Sandstorm .spk builds to address 1 GiB uncompressed size limit failures.

v10.94 restores Windows bundles by fixing a spawnSync npm ENOENT error and improves Sandstorm .spk build debugging by adding size reporting for oversized packages.

Fixes a critical issue where Docker containers were stuck on a database waiting page due to a missing MongoDB driver and incorrect connection options.

This release fixes critical REST API security vulnerabilities, improves board export/import functionality, introduces in-place card title editing, and optimizes database performance with new indexes.

WeKan v10.91 improves admin reporting accuracy, adds theme options for board tiles, fixes card closing behavior, and introduces a dedicated waiting page for database connectivity issues.

v10.90 fixes critical bugs including reappearing archived cards, broken Excel exports, attachment renaming issues, and watch popup failures, while adding new snap database recovery commands.

WeKan v10.89 transitions the snap to run exclusively on FerretDB, removes the database setting, and improves migration reliability and Docker release workflows.

v10.88 improves release tooling by adding robust retries for network outages and fixing browser test session handling.

Fixed a browser console issue where Firefox logged numerous warnings due to incorrect Font Awesome glyph bounding boxes.

Fixes a snap bug where MongoDB was incorrectly identified as the newer database version and adds translations for three new interface strings in 133 languages.

v10.83 fixes a critical security vulnerability (PassBleed) regarding unauthorized Excel exports and resolves issues with broken avatar images and public board avatar visibility.

Fixes a critical security issue (WhereBleed) involving remote JS execution via $where, introduces collapsible checklists and card feature groups, and resolves several performance and stability bugs.

This release fixes critical startup bugs related to FerretDB connectivity, resolves mobile UI scrolling and layout issues, and repairs multiple release pipeline and Helm chart indexing failures.

WeKan v10.80 reorganizes the Admin Panel Version pane, fixes a blank Problems page, improves snap database migration with MongoDB 4.2 support, and updates translations for 113 languages.

Adds support for win-arm64 and armv6 platforms, improves Snap build reliability, reorganizes the Admin Panel Version page, and expands CPU platform documentation.

This release improves AppImage and Flatpak workflows, adds full SLSA provenance to Docker images, fixes snap build failures, and ensures bundled binaries are always fetched as the newest versions.

Version 10.76 improves performance by reducing database round-trips for bulk label changes, global search, and FerretDB SQL query generation.

WeKan v10.75 fixes a linked-card caching bug in board publications and improves build script parity and functionality for Windows.

Version 10.73 fixes a PatternBleed security issue identified by GitHub CodeQL in the test suite and adds a new test guard to prevent similar identity replacement errors.

WeKan v10.72 updates Meteor, jQuery 4, and @babel/parser 8, fixes server boot crashes, resolves card movement and LDAP group issues, and improves build scripts and snap builds.

Updated bundled MongoDB Database Tools to source from wekan/mongo-tools-patches and improved release script compatibility with macOS bash 3.2.

WeKan v10.70 updates the Node.js sourcing strategy to use official, unofficial, and patched builds in a specific order and improves build handling for unsupported platforms.

Version 10.69 fixes a bug in the native embed helper to correctly resolve Node.js fork tags from pinned major versions, ensuring amd64 bundles build correctly.

This release hardens the multi-platform release assembly process, improves binary provenance and verification, and fixes a data display bug in the Admin Panel reports.

This release fixes a build issue where AppImage and Flatpak packages were unnecessarily rebuilt due to incorrect checksum filename extensions.

This release fixes a build pipeline issue where release bundles were being deleted before attachment, resolving 404 errors for snap, Docker, and AppImage downloads.

This release focuses on fixing release-build pipeline issues across Windows, macOS, and various architectures, including improvements to Docker, AppImage, and Snap packaging workflows.

This release fixes the release workflow by passing the CHANGELOG through environment variables to prevent shell injection and ensure successful publishing of release notes.

This release fixes critical SSRF vulnerabilities related to redirect hops and IPv6 address validation, reorganizes platform documentation, and hosts platform logos locally.

This release expands platform support to i386, armhf, and loong64, fixes mobile UI layout issues in the All Boards menu, and improves snap build reliability and logging.

This is a dependency release updating typescript-eslint, sinon, and docker/login-action with no changes to browser or server functionality.

A major UI redesign featuring a new header bar, foldable and resizable left menus, nested workspaces, a Table view for boards, and a read-only Public Boards page.

This release fixes bugs related to card window positioning, member propagation to boards, and the loss of custom field IDs when moving cards between boards.

This release fixes a startup crash in Yandex Browser, implements automatic retries for busy database writes, and improves the reporting of database errors in the Admin Panel.

This release improves the publishing process for snap and Docker variant packages, enhances maintainer scripts in build.sh and build.bat, and fixes release-workflow credential handling.

This release fixes a bug where SWC helpers were removed by the bundler and resolves several flaky test-harness faults.

This release fixes various LDAP, OAuth2, and database bugs, improves FerretDB compatibility with MySQL and MariaDB, and enhances the snap installation and test harness.

This release introduces comprehensive database conformance testing to ensure consistent query results across different SQL dialects via FerretDB.

This release introduces Docker Compose files for various FerretDB v1 backends, improves admin panel reporting and pagination, and enhances release tooling and database documentation.

This release fixes UI spacing issues, corrects file upload mime-checking, resolves image display bugs for migrated cards, and improves test harness stability.

This release fixes a server crash caused by removed DDP sessions, standardizes icons using Font Awesome, and expands the test suite coverage.

This release fixes various UI layout issues on mobile and desktop, resolves a server-crashing bug related to subscriptions, and improves the build scripts for testing.

This release fixes several UI and layout bugs, particularly for mobile and narrow window views, and updates the changelog and documentation formats.

This release addresses critical security vulnerabilities, introduces multitenancy, reorganizes the Admin Panel, and includes numerous UI improvements and bug fixes.

This release addresses security vulnerabilities through CodeQL fixes, updates several npm dependencies to resolve CVEs, and improves security reporting tooling.

This release fixes several bugs, including profile image management issues, iPad Safari runtime error overlays, and board bar layout and responsiveness improvements.

This release fixes bugs related to board copying, mobile header layout, and upgrade-related data corruption, while updating developer build tools and Playwright tests.

This release introduces admin panel improvements for repairing broken cards and monitoring CPU usage, extensive mobile UI responsiveness enhancements, and adds touch support for HTML5 drag-and-drop reordering.

This release fixes bugs related to list header card counts in swimlanes and restores mouse drag-scrolling functionality when swimlanes or lists render.

This release fixes critical client build errors, resolves OAuth login redirection issues, removes unused packages, and improves the translation workflow.

This release fixes login navigation issues and prevents the automatic board repair tool from incorrectly unbinding per-swimlane lists.

This release updates the bundled FerretDB fork to improve OpLog indexing across backends and fixes a bug causing per-swimlane lists to be unbound during board repair.

This release introduces external database support for the Snap package via FerretDB and implements a new machine translation process that preserves human translations.

This release fixes several bugs, including user remapping issues, card rendering errors, and performance bottlenecks specifically affecting FerretDB users.

This release fixes two crashes occurring during the 'map users later' import workflow and user profile saving in the Admin Panel.

This release fixes a critical bug where the Admin panel would fail to load on fresh installations due to an infinite reactive loop.

Fixes a performance bug where boards on FerretDB v1 performed full collection scans instead of index seeks when loading cards.

This release fixes a regression in the board import process, restoring the member mapping step and ensuring unmapped members are imported as virtual users.

This release addresses critical security vulnerabilities including stored XSS in HTML board exports and improves HTML sanitization in filename displays.

This release ensures card links remain valid after moving cards between boards and improves the reliability of the copy-code-block button in the card viewer.

Fixes a bug where anonymous users could drag lists on public read-only boards, hindering mobile navigation.

Fixed a bug where moving cards between boards via the REST API could result in incomplete moves.

This release fixes bugs related to member propagation in the Admin Panel, team membership synchronization on boards, and data loss when using the Tab key in the add-card form.

This release fixes bugs in due-date reminder emails to correctly handle midnight reminders and notify card assignees.

This release reduces FerretDB CPU usage by defaulting to polling-only and ensures the UI remains readable by statically bundling default English translations.

This release fixes bugs related to rule member removal, card placement in List view swimlanes, and member autocomplete case-sensitivity.

This release addresses several security vulnerabilities, updates dev dependencies, and introduces case-insensitive label autocomplete in card titles.

This release fixes FerretDB high CPU usage, resolves a Sandstorm embedding error during migration, and ensures the recovery maintenance page works consistently across all FerretDB platforms.

This release fixes layout issues on the mobile All Boards view to prevent board titles and workspace names from being cut off.

This release fixes layout issues on phone-sized touch screens for the All Boards page and resolves a loading hang in the Files admin report.

This release fixes bugs related to list widths on public boards and improves the stability of the files admin report.

This release fixes bugs related to the Files admin report, the Statistics board view rendering, and mobile scrolling for the All Boards list.

This release fixes a CPU usage issue for FerretDB users by disabling change streams and resolves a bug in the Files admin report.

This release fixes high CPU usage and card loading issues with FerretDB and ensures board view switching persists correctly.

This release introduces hardened filename handling, CPU usage monitoring, adaptive card loading, and a new statistics board view, alongside various bug fixes for rules and admin reports.

This release fixes several critical security vulnerabilities (SSRF, XSS, and auth bypass), introduces a security remediation logging system and Problems panel, and optimizes FerretDB performance via OpLog tailing.

This release introduces comprehensive new developer documentation for installation and updates across multiple platforms, reorganizes existing docs, and adds release automation for various app stores.

This release introduces optional Enter-to-save settings, resizable board sidebars, and fixes for data migration, UI layout, and localization.

This release introduces translation support for 154 languages, per-user theme and font customization, soft delete for lists with undo/redo capabilities, a home board setting, and various UI layout polish and bug fixes.

This release fixes a critical LDAP connection leak, updates FerretDB to resolve SQLite connection pooling issues, and adds timeout diagnostics for FerretDB startup in Snap installations.

This release addresses security vulnerabilities related to incomplete string escaping in tests and biased random ID generation during schema upgrades.

This release introduces self-healing attachment repairs, a non-blocking startup schema upgrade system, improved migration speeds, and numerous bug fixes across OAuth2, LDAP, and board management.

This release introduces a new CPU emulation helper for better hardware compatibility, optimizes FerretDB performance, restores classic desktop UI density, and fixes various bugs across subtasks, rules, and LDAP synchronization.

This release fixes several critical bugs related to FerretDB migration, including login loops, migration data loss, and disk space issues, and automates Snap Store stable releases.

This release improves Snap database management by making the database setting authoritative and enhancing the MongoDB to FerretDB migration process to handle failures and GridFS collections more reliably.

Adds new snap commands for forced FerretDB migration and maintenance mode, while fixing critical database readiness checks and migration logic for Snap installations.

This release fixes multiple Snap-specific bugs related to MongoDB and FerretDB startup, memory allocation, and migration reliability.

Adds a migration dashboard with live progress and disk-space guards for Snap/Sandstorm, expands i18n language support, and fixes various bugs related to migration and security settings.

This release fixes a critical XSS vulnerability related to file-upload MIME-type validation and introduces new admin privacy controls for imports, exports, and rich text rendering.

This release fixes a critical security vulnerability (SortBleed) that allowed low-privilege members to escalate to board admin and updates Sandstorm WeKan information.

This release focuses on extensive fixes and feature enhancements for Sandstorm and Snap builds, including improved migration paths from MongoDB 3 to FerretDB and refined grain navigation and authentication.

This release fixes a bug that prevented normal users from moving cards between swimlanes.

This release includes several bug fixes and infrastructure improvements, including updating FerretDB binary distribution, replacing mongosh with a Node.js wrapper, and updating MongoDB Database Tools sources.

Updates the default Docker setup to FerretDB v1 with SQLite, reorganizes development scripts, adds Sandstorm migration tools, and improves database detection and snap build stability.

This release introduces FerretDB (SQLite) as an alternative database, adds low-memory streaming for backups and board exports, implements lazy card loading for large boards, and includes a MongoDB to FerretDB migration tool.

This release fixes a regression in the swimlane REST API by correctly awaiting the asynchronous board.swimlanes() call.

This release includes numerous bug fixes addressing automated rules, board backgrounds, date filters, LDAP authentication, card editing, and UI layout issues across desktop and mobile.

Introduces alphabetical card sorting in link popups, REST API list editing, a custom color-wheel picker with contrast logic, and enhanced date units for Rules, along with numerous bug fixes.

This release introduces pagination, sorting, and search to the Admin Panel Domains table, fixes linked-card cover image display, and resolves date-picker visibility issues on scrolled pages.

This release fixes bugs related to custom board sorting, minicard checklist item addition, board-wide label filtering across swimlanes, and flaky server-side tests.

{"HC{"description":"This release fixes several bugs, including sign-up errors, member management in linked cards and boards, numeric custom field searching, notification cleanup crashes, and board visibility issues in rules.","breaking_changes":false}

This release updates the Code of Conduct and adds a retry mechanism for snapcraft installations in the release job.

This release includes multiple bug fixes addressing notification email links, swimlane duplication, card drag flicker, authentication environment variables, card linking cycles, and board loading flickers.

This release addresses a critical security vulnerability (ScannerBleed) by fixing a remote code execution flaw caused by shell injection in the external antivirus scanner path.

This release fixes critical SSRF and access control security vulnerabilities, updates to Meteor 3.5, and improves the test suite and overall stability.

This release fixesC fixes several mobile UI issues, including oversized elements on iPhone 12 mini and improvingC scrolling malfunctions across various pages and authenticationC layouts.

This release fixes a crash in the api.py addcustomfieldtoboard command and resolves oversized UI scaling issues on mobile devices.

Introduces sorting, searching, and pagination for the All Boards page, adds a unified list width toggle, and fixes various bugs related to localization, email notifications, and API errors.

This release focuses on bug fixes, including improvements to board and card copying, member management, and performance optimizations for checklist duplication.

This release fixes various REST API bugs related to card members and board creation, resolves issues with copied card comments, and improves performance when deleting cards.

This release introduces multi-forge mirroring tools, improves mobile responsiveness and E2E test reliability, updates Meteor to 3.5-rc.2, and fixes several data loss and UI bugs.

This release improves list width management, fixes administrative editing bugs, resolves REST API errors, and addresses various UI and stability issues.

This release introduces threaded comment replies, Google Calendar .ics import, and improved board administration settings, alongside extensive bug fixes for mobile UI, OIDC logout, and sub-task management.

This release fixes a critical security vulnerability called ChecklistBleed that allowed unauthorized cross-board writing of checklist data and corrects a Docker pre-build version guard failure.

This release implements self-healing version substitutions in the build and release process to prevent stale version numbers on the install page and in configuration files.

{"CB{"description":"Fixed a Docker build issue where images were incorrectly tagged and reported an outdated version in the Admin Panel.","breaking_changes":false}

This release fixes GitHub release upload failures for specific platforms by explicitly setting the GH_REPO environment variable.

This release optimizes the build pipeline by removing armv7l support and rearranging platform release dependencies.

Fixed duplicate mapping keys in the generated OpenAPI specification to resolve API documentation rendering issues.

This release fixes issues related to Docker builds.

This release updates the dompurify dependency to version 3.4.11 for improved XSS protection.

This release fixes snap build upload failures and adds server bundle support for s390x, ppc64le, and armv7l architectures.

This release updates dependencies, improves documentation, adds a 'Show at Minicard' option for completion toggles, and fixes a bug where Card Settings changes required a page refresh.

Fixed a bug where Playwright end-to-end tests failed due to the Meteor global being missing from the browser window scope.

This release fixes a critical cross-site scripting security vulnerability related to HTML sanitization and resolves a UI bug in the card details popup.

This release enhances the Board Table view with new columns, date formatting, inline date editing, and improved layout for labels and card details access.

This release improves the Board Table view by enabling markdown rendering for specific cells and adding word-wrap to prevent text overflow.

Fixed a bug where the Board Table view failed to load due to missing template imports.

Introduces a new Board Table view with sorting and searching, non-experimental docker settings, and several UI fixes for scrolling and resizing.

Toda's release introduces "Red Strings" for visualizing card dependencies, an Admin "Shared Templates" view, and significant developer tooling improvements for parallel testing, alongside various bug fixes and security updates. {"description": "Introduces card dependency visualization (Red Strings), an Admin Shared Templates view, enhanced parallel testingL testing tools for developers, and variousHPBTHS various bug fixes.", "breaking_changes":T": false}

This release fixes a critical security vulnerability (ProxyBleed), introduces a comprehensive board automation rules system, expands import/export capabilities for multiple platforms, and improves overall accessibility.

Improved the 'Release All Platforms' snap build by adding retries to handle transient Launchpad failures.

This release introduces full right-to-left (RTL) UI support across all pages using CSS logical properties and adds corresponding tests and CI fixes.

Adds a location detection feature in the Add/Edit popup that supports various map providers with automatic coordinate conversion and customizableCMN custom map link preferences.

This release significantly enhances Trello imports, adds board background storage, introduces card stickers and multiple locations, and improves the card interface and import stability.

This release introduces pagination and search functionality to the Admin Panel Reports and fixes pagination for Organizations and Teams.

This release fixes an issue with releasing Helm Charts.

This release fixes an issue related to building the Docker image.

This release fixes bugs related to the Docker image, Admin Panel People View, and invite email links.

This release fixes a critical security vulnerability (BoardBleed) that allowed authenticated users to bypass access controls and move items into private boards.

This release fixes critical security vulnerabilities regarding unauthenticated token minting and introduces extensive REST API expansions, including bulk operations, improved card numbering concurrency, and new board management endpoints.

This release delivers critical security fixes for several authorization vulnerabilities, enhances attachment storage migration and management, and improves system stability during MongoDB startup and upgrades.

This release fixes a bug in the Admin Panel where all boards were listed when moving attachments.

This release improves mobile and touch device compatibility and introduces configurable attachment storage backends with a bulk migration tool.

This release addresses several critical security vulnerabilities including SSRF, authorization bypasses, and OIDC account takeover, while adding new board access role management for admins.

This release addresses critical security vulnerabilities, adds header login functionality, upgrades Meteor to 3.5-beta.12, and includes various dependency updates and bug fixes.

This release includes fixes for Snap build LXD container network access and updates to release scripts for using locally cached files.

This release includes a fix for Snap and updates to dependencies.

Updated the arm64 build script and corrected dependency versions to fix Snap.

This release includes bug fixes for Snap local builds and removes pebble from the final Docker container to address vulnerability warnings.

Updated Docker and Snap to use Ubuntu 26.04 base and optimized Snap builds using a local npm package cache.

This release includes a fix for Snap issues.

Updates local IP address in build scripts and fixes the Snap pidFilePath bug.

This release addresses a critical security vulnerability (BFLABleed), introduces build script enhancements, and fixes various bugs including filter and minicard display issues.

This release introduces Docker upgrade and backup scripts, enhances backup capabilities for attachments and avatars, and includes various bug fixes and documentation updates.

This release updates version scripts, adds Meteor 3 Docker documentation, sets changeStreams and uws as defaults, and fixes sudden logouts.

This release updates build scripts and fixes bugs related to attachment paths, default communication protocols, and MongoDB indexes.

This release includes numerous bug fixes for boards, cards, and notifications, updates various dependencies, and improves the development build process.

This release updates build and release scripts and addresses an issue with Parallel Snap paths.

This release addressesL fixes an issue with Parallel Snap MongoDB ports.

This update includes a fast-uri dependency bump and bug fixes for login/registration, card attachments, and MongoDB port paths in Parallel Snap.

This release updates the release script to include a required file and fixes a bug related to userId and user validation.

Fixed bugs related to MongoDB ReplicaSet reinitialization and index restoration.

This release fixes a bug to ensure MongoDB starts before the Node.js process in the Snap candidate.

Fixed the common directory path for Parallel Snap.

This release fixes issues with attachment cursor handling and board access checks.

This release addresses the critical AuthBleed security vulnerability, updates SECURITY.md documentation, improves GitHub Actions build bundles, and adds new Playwright tests.

Updated release scripts for the Snap Store and upgraded to Meteor 3.5-beta.10.

This release addresses critical security vulnerabilities related to AvatarBleed and fixes a bug in the CleanDark theme.

This release updates documentation for LXC commands, firewall configurations, and Manual Parallel Snap, while fixing directory permissions for Snap Candidate WRITABLE_PATH.

This release updates the version script and dependencies and fixes Snap Candidate attachment paths for parallel installs.

This release upgrades MongoDB to version 7.0.32 and fixes several bugs related to checklist editing, deletion, and card title spacing.

This release adds a missing board-attachments API endpoint and updates the version script.

Fixes a crash in MongoDB on Ubuntu 24.04 caused by a missing libcrypto.so.1.1 library in the snap package.

This release includes Docker platform updates, documentation fixes, repository restructuring for charts and website, and a fix for the Snap MongoDB port.

This release updates various dependencies and CI/CD actions, improves release scripts, and fixes several bugs including UI hangs, data loss, and MongoDB replicaset setup.

This release updates release scripts to detect newer Node.js and MongoDB versions and reorganizes documentation and website files for GitHub Pages publishing.

This release updates release scripts to clean GitHub cache and fixes GitHub Actions builds.

This release updates dompurify and fixes a MongoDB Index error preventing the latest docker image from starting.

This release fixes an issue with SSO login.

This release updates Helm Charts versions and adds missing sudo to the snap build in GitHub Actions.

This release fixes Snap building in GitHub Actions and updates the Helm Chart URL in the readme.

This release introduces GitHub Actions builds for Docker and Snap, consolidates Helm Charts into the main repository, and removes unused jam methods to reduce database usage.

This release fixes a bug related to the jam:offline keepAll setting during collection creation.

This release improves database performance by disabling jam:offline keepAll to prevent full-collection scans and ensuring standard GridFS indexing on attachment chunks.

This release includes bug fixes for Snap, improved ROOT_URL environment variable handling, and a UI enhancement for the quick access menu boards list.

This release includes a bug fix for the Snap package.

This release includes a fix for Snap.

This release makes Helm Chart probes configurable and fixes issues with SSO Login OIDC and OpenID Connect.

This release updates release scripts by removing armhf support and fixes the Node.js 24.x download URL for Snap builds.

This release includes updates to release scripts and bumps versions for GitHub Actions and Docker build-push tools.

This release updates dependencies, adds schema migration documentation, disables armhf builds, and fixes several bugs related to activity visibility, exports, and UI overflows.

This release fixes a bug preventing Card Data from being saved.

This release fixes several bugs, including issues with LDAP login, card date saving, member assignment, and board activity tracking.

This release fixes avatar display issues when impersonating users, corrects MongoDB storage engine and Oplog status in the admin panel, and updates several GitHub Actions.

This release fixes a bug by adding a missing null check to notifications.

This release fixes bugs by converting upsert calls to async in authentication.js.

This release fixes a bug to ensure Snap starts the MongoDB OpLog correctly.