8000 Releases · hedgedoc/hedgedoc · GitHub
[go: up one dir, main page]
Skip to content

Releases

HedgeDoc 1.8.0

HedgeDoc 1.8.0

Choose a tag to compare

View all tags
@davidmehren davidmehren released this 03 May 20:53
1.8.0
f48e36d
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

This release fixes multiple security issues. We recommend upgrading as soon as possible.

Please note: This release dropped support for Node 10, which is end-of-life since April 2021. You now need at least Node 12 to run HedgeDoc, but we recommend running the latest LTS release.

Security Fixes

We also published an advisory for CVE-2021-29475: PDF export allows arbitrary file reads,
which has already been fixed since HedgeDoc 1.5.0.

Features

  • Database migrations are now automatically applied on application startup
    The separate .sequelizerc configuration file is no longer necessary and can be safely deleted
  • A Prometheus-endpoint is now available at /metrics, exposing the same stats as /status
    in addition to various Node.js performance figures
  • Add a config option to require authentication in FreeURL mode (#755 by @nidico)

Enhancements

  • Removed dependency on external imgur library
  • HTML language tags are now set up in a way that stops Google Translate from translating note contents while editing
  • Removed yahoo.com from the default content security policy
  • New translations for Bulgarian, Persian, Galician, Hebrew, Hungarian, Occitan and Brazilian Portuguese
    Updated translations for Arabic, English, Esperanto, Spanish, Hindi, Japanese, Korean, Polish, Portuguese, Turkish and Traditional Chinese
    Thanks to all translators!
  • Various dependency updates

Bugfixes

  • Improve readability of diagrams & embeddings in night-mode
  • Use the default template for new notes in FreeURL mode
  • Fix frontend-crash in slide-mode if no slideOptions are present in the frontmatter
  • Return 404 on the /download route for non-existent notes in FreeURL mode
  • Properly clean up the UNIX socket on application exit
  • Don't overwrite existing notes on POST-requests to /new/<alias> in FreeURL mode

Contributors

  • Amit Upadhyay (translator)
  • Atef Ben Ali (translator)
  • Edi Feschiyan (translator)
  • Gabriel Santiago Macedo (translator)
  • Longyklee (translator)
  • Nika. zhenya (translator)
  • Nicolas Dietrich
  • Nis (translator)
  • rogerio-ar-costa (translator)
  • sanami (translator)
  • Tom Dereszynski (translator)
  • 상규 (translator)
  • uıʞǝʇuɐϽ (translator)
  • UwYFmLpoKtYn (translator)
Loading

HedgeDoc 1.8.0 Release Candidate 1

HedgeDoc 1.8.0 Release Candidate 1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@davidmehren davidmehren released this 26 Apr 20:24
1.8.0-rc1
90a8aeb
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

This release fixes a security issue. We recommend upgrading as soon as possible.

Please note: This release dropped support for Node 10, which is end-of-life since April 2021. You now need at least Node 12 to run HedgeDoc, but we recommend running the latest LTS release.

Security Fixes

We also published an advisory for CVE-2021-29475: PDF export allows arbitrary file reads,
which has already been fixed since HedgeDoc 1.6.0.

Features

  • Database migrations are now automatically applied on application startup
    The separate .sequelizerc configuration file is no longer necessary and can be safely deleted
  • A Prometheus-endpoint is now available at /metrics, exposing the same stats as /status
    in addition to various Node.js performance figures
  • Add a config option to require authentication in FreeURL mode (#755 by @nidico)

Enhancements

  • Removed dependency on external imgur library
  • HTML language tags are now set up in a way that stops Google Translate from translating note contents while editing
  • Removed yahoo.com from the default content security policy
  • New translations for Bulgarian, Persian, Galician, Hebrew, Hungarian, Occitan and Brazilian Portuguese
    Updated translations for Arabic, English, Esperanto, Spanish, Hindi, Japanese, Korean, Polish, Portuguese, Turkish and Traditional Chinese
    Thanks to all translators!
  • Various dependency updates

Bugfixes

  • Improve readability of diagrams & embeddings in night-mode
  • Use the default template for new notes in FreeURL mode
  • Fix frontend-crash in slide-mode if no slideOptions are present in the frontmatter
  • Return 404 on the /download route for non-existent notes in FreeURL mode
  • Properly clean up the UNIX socket on application exit
  • Don't overwrite existing notes on POST-requests to /new/<alias> in FreeURL mode

Contributors

  • Amit Upadhyay (translator)
  • Atef Ben Ali (translator)
  • Edi Feschiyan (translator)
  • Gabriel Santiago Macedo (translator)
  • Longyklee (translator)
  • Nika. zhenya (translator)
  • Nicolas Dietrich
  • Nis (translator)
  • rogerio-ar-costa (translator)
  • sanami (translator)
  • Tom Dereszynski (translator)
  • 상규 (translator)
  • uıʞǝʇuɐϽ (translator)
  • UwYFmLpoKtYn (translator)
Loading

HedgeDoc 1.7.2

HedgeDoc 1.7.2

Choose a tag to compare

View all tags
@davidmehren davidmehren released this 15 Jan 20:55
1.7.2
d0547a0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

This release fixes a security issue. We recommend upgrading as soon as possible.

Security Fixes

Bugfixes

  • Ensure the last line of the markdown editor is not covered by the status bar (thanks to @mhdrone for reporting!)
Loading

HedgeDoc 1.7.1

HedgeDoc 1.7.1

Choose a tag to compare

View all tags
@davidmehren davidmehren released this 27 Dec 21:12
1.7.1
5b3d62e
This commit was signed with the committer’s verified signature.
davidmehren David Mehren
GPG key ID: 185982BA4C42B7C3
Verified
Learn about vigilant mode.

This release fixes two security issues. We recommend upgrading as soon as possible.

Security Fixes

Loading

HedgeDoc 1.7.0

HedgeDoc 1.7.0

Choose a tag to compare

View all tags
@davidmehren davidmehren released this 21 Dec 21:57
1.7.0
287e88b
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

We have renamed to HedgeDoc! 🎉
Many thanks to Éric Gaspar who designed our new logo!
Have a look at our new website (which also explains the reasoning behind the renaming) at https://hedgedoc.org

This is probably the last release in the 1.x series. Stay tuned for 2.0, scheduled for release next year.

Please note: This release dropped support for Node 8, which is end-of-life since January 2020. You now need at least Node 10.13 to run HedgeDoc, but we recommend running the latest LTS release.

Please note: If you use a reverse proxy and TLS, make sure it sets the X-Forwarded-Proto header correctly,
otherwise you will encounter login-issues.
Our docs have example configs for common reverse proxies.

Enhancements

  • Our release tarballs now contain the frontend bundle. This saves users from building the frontend themselves, which was an issue on memory-constrained systems.
  • Add OIDC scopes for email & profile retrieval (#278 & #419 by @elespike & @vberger)
  • Allow to set a SAML client certificate (#350 by @n0emis & @em0lar)
  • Add YunoHost docs (#431 by @ericgaspar)
  • Set OAuth2 state parameter (#407 & #541 by @dalcde & @haslersn)
  • Various documentation improvements (by @oupala, @autra & @AdamWorley)
  • Add migration script for minio (#499 by @pierreozoux)
  • Add authorization for OAuth (#595 by @joachimmathes)
  • Improvements to our cookie handling
  • Compatibility with Node 14
  • Translation updates
  • Various dependency updates

Bugfixes

  • Fix compatibility with upper-case MIME-types (#509 by @pierreozoux)
  • Add fix for missing deletion of notes on user-deletion request
  • Fix relative path for fetching the style when set
  • Fix broken redirect on login
  • CSS fixes for slide mode
  • Do not create new notes with null as content
  • Fix crash when OAuth2 config parameters are missing (thanks to @vberger for reporting!)
  • Handle broken SequelizeMeta table on MySQL/MariaDB (thanks to @titulebolide for reporting!)

Contributors

Loading

HedgeDoc 1.7.0 Release Candidate 2

HedgeDoc 1.7.0 Release Candidate 2 Pre-release
Pre-release

Choose a tag to compare

View all tags
@davidmehren davidmehren released this 02 Dec 22:28
1.7.0-rc2
81e4632
This commit was signed with the committer’s verified signature.
davidmehren David Mehren
GPG key ID: 185982BA4C42B7C3
Verified 10000
Learn about vigilant mode.

Changes since 1.7.0-rc1:

Bugfixes

  • Fix crash when OAuth2 config parameters are missing (thanks to @vberger for reporting!)
  • Handle broken SequelizeMeta table on MySQL/MariaDB (thanks to @titulebolide for reporting!)
Loading

HedgeDoc 1.7.0 Release Candidate 1

HedgeDoc 1.7.0 Release Candidate 1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@davidmehren davidmehren released this 29 Nov 16:46
1.7.0-rc1
116fddd
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

We have renamed to HedgeDoc! 🎉
Many thanks to Éric Gaspar who designed our new logo!
Have a look at our new website (which also explains the reasoning behind the renaming) at https://hedgedoc.org

This is probably the last release in the 1.x series. Stay tuned for 2.0, scheduled for release next year.

Please note: This release dropped support for Node 8, which is end-of-life since January 2020. You now need at least Node 10.13 to run HedgeDoc, but we recommend running the latest LTS release.

Enhancements

  • Our release tarballs now contain the frontend bundle. This saves users from building the frontend themselves, which was an issue on memory-constrained systems.
  • Add OIDC scopes for email & profile retrieval (#278 & #419 by @elespike & @vberger)
  • Allow to set a SAML client certificate (#350 by @n0emis & @em0lar)
  • Add YunoHost docs (#431 by @ericgaspar)
  • Set OAuth2 state parameter (#407 & #541 by @dalcde & @haslersn)
  • Various documentation improvements (by @oupala, @autra & @AdamWorley)
  • Add migration script for minio (#499 by @pierreozoux)
  • Add authorization for OAuth (#595 by @joachimmathes)
  • Improvements to our cookie handling
  • Compatibility with Node 14
  • Translation updates
  • Various dependency updates

Bugfixes

  • Fix compatibility with upper-case MIME-types (#509 by @pierreozoux)
  • Add fix for missing deletion of notes on user-deletion request
  • Fix relative path for fetching the style when set
  • Fix broken redirect on login
  • CSS fixes for slide mode
  • Do not create new notes with null as content

Contributors

Loading

CodiMD 1.6.0

CodiMD 1.6.0

Choose a tag to compare

View all tags
@SISheogorath SISheogorath released this 17 Feb 23:27
1.6.0
This tag was signed with the committer’s verified signature. The key has expired.
SISheogorath Sheogorath
GPG key ID: C9B1C80737B9CE18
Expired
Verified
Learn about vigilant mode.
8ce7b28
This commit was signed with the committer’s verified signature. The key has expired.
SISheogorath Sheogorath
GPG key ID: C9B1C80737B9CE18
Expired
Verified
Learn about vigilant mode.

Announcements

  • After the 1.6 release we will start to develop Version 2.0, which will introduce breaking changes. But we will take care of making your way to 2.0 easy.
  • Since Node version 8 is EOL since January 2020, 1.6 will be the last version with support for Node version 8
  • useCDN is now false by default. This feature is deprecated already and will be removed in 2.0.

Enhancements

  • Add AWS endpoint configuration options
  • Add ability to add an imprint using ./public/docs/imprint.md
  • Improve documentation in various sections
  • Add ability to create note based on alias in free-url-mode
  • Add security note describing the preferred way for responsible disclosures
  • Extend forbiddenNoteIds to prevent conflicts with resource directories
  • Add OpenGraph metadata support
  • Add slovak language
  • Add API documentation
  • Allow different reference-url styles
  • Add automatic focus username field in login modal
  • Add ability to limit google-auth to own domain
  • Upgrade revealJS to version 3.9.2
  • Upgrade mermaid to version 8.4.6
  • Update translations (zh-cn, zh-TW, en, de, id, pl, ar, ca, fr, it, sk, sv, ja, nl, pt, ru, es)

Fixes

  • Fix docker secrets support
  • Fix sequlize-cli dependency location
  • Fix crash in lutim integration
  • Fix manage_users CLI handling of non-existing user
  • Fix ability to serve CodiMD from different urlpath than /
  • Fix change from gravatar to libravatar in privacy policy example
  • Fix missing browser icons in README

Refactors

  • Refactor note creation handling
  • Improve webpack documentation
  • Split note actions into own files
  • Refactor returnTo handling for auth

Removals

  • Legacy handling of socket.io connections
  • Node 8 CI jobs

Contributors

Loading

CodiMD 1.5.0

CodiMD 1.5.0

Choose a tag to compare

View all tags
@SISheogorath SISheogorath released this 15 Aug 21:32
1.5.0
This tag was signed with the committer’s verified signature. The key has expired.
SISheogorath Sheogorath
GPG key ID: 1F05CC3635CDDFFD
Expired
Verified
Learn about vigilant mode.
9c1665a
This commit was signed with the committer’s verified signature. The key has expired.
SISheogorath Sheogorath
GPG key ID: 1F05CC3635CDDFFD
Expired
Verified
Learn about vigilant mode.

Announcements

  • There is a new docker image available by LinuxServer.io providing an ARM container
  • Disabling PDF export due to security problems

Enhancements

  • Add migration guide for Node version 6
  • Add functionality to respect Do-Not-Track header
  • Add Arabian translation

Fixes

  • Fix styling in slide preview
  • Fix some lint warning
  • Upgrade Sequelize to version 5
  • Add Linuxserver.io setup instructions for CodiMD
  • Update translations for DE, SV, ID
  • Add ability to upload SVGs
  • Add dbURLconfig as docker secret
  • Upgrade meta-marked - Fixes DOS capability in CodiMD (ba6a24a)
  • Fix variable names in docker secrets config library

Refactors

  • Refactor debug logging in various places

Deprecations

Contributors

Loading

CodiMD 1.4.0

CodiMD 1.4.0

Choose a tag to compare

View all tags
@SISheogorath SISheogorath released this 30 May 23:21
1.4.0
This tag was signed with the committer’s verified signature. The key has expired.
SISheogorath Sheogorath
GPG key ID: 1F05CC3635CDDFFD
Expired
Verified
Learn about vigilant mode.
51d69d9
This commit was signed with the committer’s verified signature. The key has expired.
SISheogorath Sheogorath
GPG key ID: 1F05CC3635CDDFFD
Expired
Verified
Learn about vigilant mode.

Announcements

  • CodiMD now has a Mastodon account
  • CodiMD now has a community forum
  • With CodiMD 1.4.0 we're dropping node 6 support. That version of node.js is discontinued and no longer receives any security updates. We would like to encourage you to upgrade node 8 or later. Node 8 will continue to be supported at least until its end-of-life in January 2020.

Enhancements

  • Use libravatar instead of Gravatar
  • Fix language description capitalization
  • Move upload button into the toolbar
  • Clean up Heroku configurations
  • Add new screenshot to README and index page
  • Add link to community call to README
  • Update languages (pl, sr, zh-CN, fr, it, ja, zh-TW, de, sv, es)
  • Change edit link to both view
  • Hide minio default ports
  • Add missing passport-saml configuration
  • Add lutim support
  • Update dependencies
  • Add documentation for keycloak
  • Add tests for user model
  • Add Mastodon link
  • Add config for toobusy middleware
  • Add vietnamese language

Fixes

  • Fix missing space in footer
  • Fix various possible security vulnerabilities in dependencies
  • Fix broken dependency js-sequence-diagrams
  • Fix XSS in graphviz error message rendering
  • Fix toolbar night mode
  • Fix hidden header on scroll
  • Fix missing pictures for OpenID
  • Fix statusbar hiding text in edit view

Refactors

  • Refactor README and documentation
  • Integrate the old wiki into documentation section
  • Refactor headers on Features page
  • Replace js-url with wurl
  • Refactor scrypt integration

Removals

  • Remove sass-loader

Contributors

Loading
0