Discourse 2.5.0.beta4 Release Notes

Announcements
2

Security Updates

This beta includes 1 security fix for issues reported by our community and HackerOne.

  • Update onebox to add rel=“noopener”

Plugin improvements

All plugins

  • Bug fixes
    • We’ve patched numerous bugs in many of our plugins

SAML

  • Security fix

Subscriptions

  • Initial Release

Onebox

  • Security fix

Canned Replies

  • Security Fixes

OAuth2 Basic

  • Add detailed OAuth2 request and response logs when debug auth is enabled
  • Allow disabling request_body authentication for token endpoint

Additional Features and Fixes

Click to expand

New Features

  • Unconditionally notify on edits at least once a day
  • Allows to limit visible reports and tabs in dashboard
  • Add setting to controle the Expect header on S3 calls
  • Allow user creation with admin api when local logins disabled
  • Add user_profile to user_archive CSV export
  • Redesign discourse-presence to track state on the client side.
  • Allows to to style published page with themes/plugins
  • Support SSO website and location overrides
  • Optionally show local time for user in card
  • Dismiss first notification on click anywhere
  • When blocking emails prefer blocking canonical
  • Don’t display new/unread notification for muted topics
  • Digital Ocean Spaces compatibility for Object Storage
  • Add class to <aside> quote block when quoting an ignored user

Bug Fixes

  • Shows filter if there’s no notifications to show after filter
  • Do not use cached settings during theme compilation
  • Clear theme caches after database transaction has committed
  • Missing edit notifications in some rare cases
  • Do not apply only-emoji margin for excluded cases
  • Unassign user titles when a badge is deleted
  • Save bookmark reminder on tap unless custom
  • An <a> with a target of _blank wants a new window
  • Ensures an anonymous shortcut fn can be used globally
  • Bookmark UI tweaks
  • Do not raise error if ‘class’ attribute is not found.
  • Change base importer to create new Bookmark records
  • The muted message should be sent after edit
  • Sprockets was broken when node_modules was present
  • Server-side HtmlToMarkdown improvements
  • Better detection of hidden elements when converting HTML to Markdown
  • Take into account the ‘allowed_href_schemes’ site setting when converting HTML <a> to Markdown
  • Added support for ‘mailto:’ scheme when converting <a> from HTML to Markdown
  • Added support for <img> dimensions when converting from HTML to Markdown
  • Added support for <dl>, <dd> and <dt> when converting from HTML to Markdown
  • Added support for multilines emphases, strongs and strikes when converting from HTML to Markdown
  • Added support for <acronym> when converting from HTML to Markdown
  • Rename all instances of bookmarkWithReminder to just bookmark
  • Temporarily disable event listener for dismissing the first notification
  • Ensures widget dropdown doesn’t overflow document
  • Make lazyYT crawler-friendly
  • Hide browser update notice in print view
  • Enter selected link with ‘o’ on full page search
  • S3 rake task can ignore yarn.lock
  • Copyedit for “You were logged out” modal
  • Correctly hides timeline scroller for short posts
  • Ensures card cloak is removed
  • Discourse-presence breaks composer for users.
  • Correctly account for direct replies with presence
  • Change bookmarks-with-reminders URL back to bookmarks for user activity
  • Remove timezone in brackets from user card
  • Do not save bookmark if close (X) on modal is clicked
  • Error customizing text for badges from plugins
  • Makes tracking shortcuts working when tracking button is not visible
  • Improves tag-list setting
  • Include default notification level in category serializer
  • Improve clearing store cache
  • Published pages couldn’t be routed from inside discourse
  • Avoid exception when rendering a poll in a trashed post
  • Remove unsuppored rake task
  • Topic user bookmarked column logic was not correct
  • CurrentUser might be undefined
  • Local time not updating between user cards
  • Keep scroll position when minimizing composer in iOS
  • Correctly shows no bookmark message
  • Improves bookmark shortcut reliability and other minor issues
  • Only show the review page to users that can see it. Do not publish the reviewable count update message to everyone.
  • Add additional checks for automatic theme script CSP
  • Apply category priority for empty query
  • Use absolute URL for YouTube thumbnail images.
  • Raise a 4xx error instead of a 5xx if draft data is invalid
  • Do not override all title elements with page title
  • Reenable draft check modal and fix focus on iOS for PMs
  • Removes inheriting as it’s too random and can be very hard to track
  • Make sure new user narrative returns toggleBookmark promise
  • Copying image markdown for secure media loading full image
  • Site settings dropdown can be 440px width
  • Removes rounding correction as it can be in either direction
  • Do not set title attribute on header-topic-info widget
  • Inner content of a row could have no max-width and be very large
  • Update GitHub screen_name on login via GitHub
  • Fails gracefully if :scope is not handled by a browser
  • Prevents constant composer reloading
  • Don’t throw 500 for invalid website url input
  • Ignore removed column
  • Multisite spec was failing in parallel environment
  • Composer problem on the categories page
  • Don’t log an error to logster if a topic could not be updated.

UX Changes

  • Use created_at as the default order when viewing reviewed items or everything
  • Change the user merge button’s label and icon.
  • Collapse extra files when browsing a theme component
  • Display info about extra files and uploader
  • Adds title attribute to widget dropdown header
  • Add margin when displaying unlisted details in composer.
  • Improve discobot random menion copy
  • Fix dashboard version panel width by removing extra wrapper
  • Translating poll chart types wasn’t possible
  • Right align notification item time, adjust mobile space, consolodate
  • Better spacing for composer toggle buttons on mobile
  • Replace closed topic icon with discourse-no-entry
  • Let’s try X for the closed topic icon instead of a \
  • Rework date time input range
  • Do not attempt to full width sk on mobile
  • Drop the automatic_membership_retroactive column from groups model.
  • Add comment-plus icon for reopening topics

Performance

  • Remove database query when publishing to staff users.
  • Refactor decorateCooked to run in a detached DOM
  • Stop firing superfluous onSelectionChange
25 Likes