# 2.8.4: Security and Minor Patch Release

**URL:** https://meta.discourse.org/t/2-8-4-security-and-minor-patch-release/229852
**Category:** Announcements
**Tags:** release-notes
**Created:** [June 13, 2022, 9:10pm UTC](https://meta.discourse.org/t/2-8-4-security-and-minor-patch-release/229852 "2022-06-13T21:10:27Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [June 13, 2022, 9:10pm UTC](https://meta.discourse.org/t/2-8-4-security-and-minor-patch-release/229852/1 "2022-06-13T21:10:27Z")

</div>

## Discourse 2.8.4 Stable Release

Discourse strongly recommends that all sites follow the default tests-passed branch of Discourse. The “stable” branch is more focused on _lack of change_ than _lack of bugs_ - all releases, including those on tests-passed and beta are production ready.

### Changes

#### Security:

- Remove auto approval when redeeming an invite
- Do not expose banner data in login\_required sites

#### Bug Fix:

- Approves user when redeeming an invite for invites only sites
- Ensure theme JavaScript cache get consistent SHA1 digest
- Ensure values are escaped in select-kit dropdowns
- Buggy topic scrolling on iOS 12

#### Developer:

- Cleanup `body.scrollTop` usage
- Fix auto start for wizard qunit tests