2.9.0.beta14: Security fix, new import script, API tracking, and more

AI-generated summary

Discourse 2.9.0.beta14 introduces a security fix for CVE-2022-46150, which filters tags in user notifications to improve visibility. New features include API request tracking, deletion of chat messages when a user and their posts are removed, and an import script for Elgg. Plugin updates include dependency updates for Chart, holiday handling in Calendar, expanded category filters in Docs, and a fixed settings link in Gamification. Additional bug fixes address upload errors, hashtag autocomplete, PM unread counts, hover states, date/time formatting, chat message flagging, audio playback, and sidebar toggling. UX improvements include aligning dismiss buttons, adding email instructions, refining chat and channel indexes for mobile, and ensuring consistent narrow desktop width. For a complete list of changes, users are encouraged to review the Additional Features and Fixes section. jomaxro notes that while key updates are highlighted, many more changes are included in this release.

New features in 2.9.0.beta14

Security Updates

This beta includes 1 security fix for issues reported by our community and HackerOne.

New Features

  • Track API and user API requests
  • Deleting a user with their posts also deletes chat messages.
  • Add import script for Elgg

Even more!

But wait, there’s more! We do our best to highlight new features and changes for you, but there’s always too many changes to detail. For a full list of new features, bug fixes, UX improvements, and more, be sure to review the Additional Features and Fixes listed below.

Plugin improvements

Chart

Bug Fixes
  • Update dependencies

Calendar

New Features
  • Handle subsequent and intersected holidays
Bug Fixes
  • Handle localised automatic group names in event validation

Docs

UX Changes
  • Expand category filters even when already filtered

Gamification

Bug Fixes
  • Settings link

Additional Features and Fixes

Click to expand

Bug Fixes

  • Show error message if no uploads are allowed
  • Allow hashtag autocomplete at start of line
  • Consistent narrow desktop width
  • PMs displaying outdated unread counts when read status is processing
  • Do not apply hover state to non capable devices
  • Ensures date/time don’t linebreak
  • Unsilence users on chat message flag disagree.
  • Prevents audio to play when appended
  • Toggle sidebar when back from narrow screen

UX Changes

  • Align user page dismiss notifications btn with new navigation
  • Add instructions for multiple category emails
  • Chat index UX fixes
  • Reworks channel index (drawer and mobile)
11 Likes