# Discourse 2.6.0.beta2 Release Notes

**URL:** https://meta.discourse.org/t/discourse-2-6-0-beta2-release-notes/161549
**Category:** Announcements
**Tags:** release-notes
**Created:** [August 20, 2020, 9:55pm UTC](https://meta.discourse.org/t/discourse-2-6-0-beta2-release-notes/161549 "2020-08-20T21:55:56Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [August 20, 2020, 9:55pm UTC](https://meta.discourse.org/t/discourse-2-6-0-beta2-release-notes/161549/2 "2020-08-20T21:55:56Z")

</div>

### Security Updates

This beta includes 3 security fixes for issues reported by our community and [HackerOne](https://hackerone.com/discourse).

- 413 for GET, HEAD or DELETE requests with payload.
- Bound the amount of work that embed#topics can do
- Add content-disposition: attachment for SVG uploads

# Plugin improvements

### Many plugins

- Bug fix
  - We’ve patched numerous bugs in many of our plugins

### Code Review

- Custom theme for code review categories

### Graphviz

- Upgrade to version 2.44 from 2.40

### Knowledge Explorer

- Add keyboard shortcut
- Move route to `/docs`

### Akismet

- Add a task to cleanup the database before uninstalling

### Checklist

- Remove support for checkboxes other than `[]`, `[x]`, and `[X]`

### Docker Manager

- Add plugin compatibility check support

### Encrypt

- Add setting to auto-enable encryption
- Decrypt notification titles before rendering

### Translator

- Security Fix

### [Data Explorer](https://meta.discourse.org/t/32566?silent=true)

- Add support for soft deleting (hiding) queries

### Chat Integration

- Add Microsoft Teams support

### Subscriptions

- Plugin made official
- Allow one-time purchases of products
- Support 3D Secure payments
- New UX style
- Cancel payments at the end of subscription, not immediately
- Show renewal date on active subscriptions

### Assign

- New Assignment Summary page for groups

### Calender

- Additional events functionality and improvements

# Additional Features and Fixes

> **Click to expand**
>
> ### New Features
> 
> - Ensure posts are rebaked when missing is fixed
> - Autoplay oneboxed twitter GIF media
> - Allow group membership to unmute categories and tags
> - Don’t notify about changed tags for a private message
> - Introduce tasks for dealing with legacy broken uploads
> - Group category permissions tab
> - Block vibration in Firefox Android
> - Use PG `ts_headline` for highlighting topic title in search.
> - Add advanced order to search
> - Notification for vote plugin
> - Set notification levels when added to a group
> - Poll breakdown 2.0
> - Add category\_id to TopicViewWordpressSerializer
> - New plugin outlet for category-heading
> - Invite emails to groups from add member modal
> - Add expandable muted categories ui to `/categories` page.
> - Show login button on error page if user is not logged in
> - G,j and g,k to navigate to next and prev topic
> - Allow picture HTML element in posts
> - Allows to display charts by day/week/month
> - Allow the specification of an arbitrary unicorn listen address
> - Support converting HEIF images to JPEG
> - Add tracked filter to topic lists
> - Submit post from mobile composer preview
> - Add query params to staff action logs
> - Add support for `top` filter in tag page.
> - Add “delete on owner reply” bookmark functionality
> - Trigger `user_updated` event if email changed.
> - Improve header meta alignment and truncation with css grid
> - Load hidden posts in segments
> - Allow video tag attributes for video gifs
> - Add search to user bookmark list
> - Add global rate limit for anon searches
> - Parse images in email signatures
> - Add “smallest” option to user text size preferences
> - Add reply\_as\_new\_group\_message composer action
> - Create SQL-only backup if there are no uploads
> - Optionally skip the create account popup for external auth
> - Sso\_overrides\_(email|username|name) for all auth methods
> - Trigger `user_updated` event if username is changed.
> - Site setting to always show category definitions
> - Allow disabling of extra term injection in search
> 
> ### Bug Fixes
> 
> - `user_option` option can be `nil` for new users.
> - User titles from translated badge names were automatically revoked
> - SiteSettings::LocalProcessProvider didn’t work on multisite
> - Default\_tags\_muted setting should work for anonymous users too.
> - Sending a PM through a flag on a deleted post
> - Error message when setting enforce 2fa with social logins
> - Delete unused tags shouldn’t delete tags belonging to tag groups
> - Unlike own posts on ownership transfer
> - Polls can be quoted and loaded
> - Do not cancel search early in tests
> - Display label when theme uses default color scheme
> - Do not override logo markup when loading page in dark mode
> - Fix css var issues
> - Makes group\_show\_serializer#is\_group\_owner follow standards
> - Always wait for promise when loading a topic
> - More efficient and resilient widget-dropdown body
> - Add bookmark-list component
> - Composer upload icon regression because of HEIC
> - When destroying uploads clear card and profile background
> - Add playsinline to twitter GIFs
> - Allow safari to load and autoplay videos in posts
> - Refactor broke wizard
> - Skip rendering twitter video if matching format not found
> - Broken when iconList missing
> - Replace iframe with `<video>` for twitter videos
> - Clicking on category autocomplete row
> - Prevents errors on /tags when a tag `constructor` exists
> - This leaves an empty example group in TRAVIS mode
> - Ensure auto close notice is posted with system locale
> - Mobile group add dropdown was broken
> - Defer topic was broken
> - `application` controller is not used by the card
> - DEV: Introduce `@bind` decorator
> - A paste event listener was re-added instead of being removed
> - Add script asset locations to worker-src CSP directives
> - Generate\_topic\_thumbnails job infinitely running for corrupted images
> - Update preview when autocomplete is clicked
> - Prevent `LockOn` conflicts
> - Move queryParams to each discovery controller rather than shared
> - Refreshing was not working
> - Preserve anchors in permalink transitions
> - Remove other category which is not used
> - Improved specs to ensure that revise was succesful
> - Generate topic excerpt when moving posts to new topic.
> - Make sure user preference to open external links in new tab works for bookmark list excerpts
> - Do not require tagging to be enabled for IMAP archive and delete
> - Allow plugin pinning to fetch missing commits
> - AWS S3 errors don’t necessarily include a message
> - Change the controller method name to match its new name.
> - Heisentest with topic timings
> - Allow mods to choose restricted categories as parent category.
> - Color scheme selection with non-default theme
> - Expose PG headline highlighting for all search results.
> - Limit PG headline based search blurb generation to 200 characters.
> - Try to make topic\_tracking\_state\_spec stable
> - IOS/iPadOS freezing when changing notification level in topic footer
> - Use correct site setting when uploading images
> - Invalidate cache when updating color scheme colors
> - Ensure load more directory items has a .json url
> - Return 422 when creating topics with tags w/out permission
> - Include secure media URLs when linking post uploads
> - Update colors for presence plugin
> - Smaller header font size for published page
> - Include both name and id in color scheme stylesheet filename slugs
> - Sync reviewable count when opening the hamburger menu
> - Removes persistedQueryParams as it should work out of the box
> - Specify config when generating tsquery using `ts_headline`.
> - PM participants list refreshing after inviting
> - Missing bottom border in select-kit color list settings
> - User preferences tests didn’t always have pretender called
> - Stop sync of tracking state when list is filtered
> - Only raise proper `"error"` messages
> - Pretender errors were being swallowed
> - Raise errors for broken pretender responses in test mode
> - Replace `fullPath` while rewriting the `/my/` URLs.
> - Ensures shadow has last\_posted\_at before comparing to site setting
> - Attempt to output a useful error message
> - Shows all\_results if current settings category has no results
> - Disable concurrent migration for `multisite:migrate`.
> - Don’t run seeds if multisite migration fails.
> - Excerpts larger than 999 are not supported
> - Topic map was incorrectly counting assign actions
> - Show “group members forbidden” message on mobile
> - Rewrite of `/my/`URL should work on sub directory site too.
> - Allows to change a user group notification level
> - Previous fix comitted the wrong thing and was broken ☹
> - Exclude shared drafts from digests
> - Current value of flair icon missing in group manage UI
> - Load base color scheme when default theme is not set
> - Check if selectable avatar with SHA1
> - IMAP archive fix and group list mailbox code unification
> - Discobot inappropriate flag section
> - Bug with sharing when used outside a topic
> - Get correct selectable avatar from URL
> - Exclude `DELETE` methods from invalid request with payload.
> - Reset max\_posts query parameter
> - Respect query params for latest.rss
> - Set mailing\_list\_mode to false when unsubscribing from all
> - IMAP sync email update uniqueness across groups and minor improvements
> - Removes an error in the console in test mode
> - Should allow non-ASCII slugs for category pages.
> - Reset ‘filter’ query parameter when clicking on a nav-item
> - Keep category name in URL when filtering
> - Allow ‘c’ as a tag
> - Define s3\_helper in EnsureS3UploadsExistence job
> - Rename delete\_when\_reminder\_sent? bookmark method to avoid conflict with AR
> - Add protection when removing auto delete on post bookmarks
> - Ensure topic user bookmarked synced on bookmark auto-delete
> - Allow playsinline for videos in posts
> - Ensure correct locale is set during RenderEmpty responses
> - Reduces charts height
> - Prevents group show serializer to override basic group serializer
> - Computed property deprecation
> - Page:changed was sometimes reporting the wrong URL
> - Add back group redirects
> - Bump onebox to 2.0.1 for engine priority fix
> - Cooked snippet of raw in `Topic.similar_to`.
> - Handle case where `Post#raw` is blank in `Topic.similar_to`.
> - Improve `Topic.similar_to` with better `Topic#title` matches.
> - Improve allowed\_path column migration
> - Resolve issue where deleted spam topics marked as Not Spam were not being recovered
> - Avoid validation error when deleting users with locked trust level
> - Uses topic title for published page head title
> - Reduce number of terms injected for host lexeme.
> - Improve regexp for matching version lexeme.
> - Don’t inject extra terms for version lexeme.
> - Add a translation for reaction notification
> - Reserve id for reaction notifications
> - Use allowlist and blocklist terminology
> - Tests that used the olds paths
> - Uploads was not testing properly
> - Pass `siteSettings` through in more places
> - Add enable\_email\_sync\_demon global variable and disable EmailSync demon by default
> - Add strip\_secure\_urls method to GroupSmtpMailer
> - Do not show Email tab for group settings unless IMAP + SMTP enabled
> - Tests for reindex\_search\_spec pass regardless of seed
> - Display correct status on unsubscribe page
> - Move consts and translations for bookmark auto delete prefs
> - Restore navigation-bar on tag topic list
> - Include resolved locale in anonymous cache key
> - Make set\_locale an around\_action to avoid leaking between requests
> - Improve email styling of code blocks
> - Remove iOS trick to prevent scrolling when focusing on input
> - Reviews that are auto-hidden by a trusted spam flagger should always have enough weight.
> - Remove the border from YT thumbnail placeholder
> - Apply video preview trick for Safari to stream only
> - Add system fonts to wizard
> - Allow user to recover/delete post if they can review the topic
> - Typo in `NotificationsController#index` not caught by tests.
> - Ignore removed delete\_when\_reminder\_sent bookmarks column
> - Stop double prepending of window.location.origin on media URLs
> - Test for fillGapBefore
> - Remove `username_lower` from admin serializer
> - Keep by\_users check in S3 inventory
> - Delete synonyms in topics if target tag is already added.
> - Improve S3 inventory logic
> - Undefined method on nil class error in forking servers.
> - Gives emojis a width/height to prevent lazy loading warning
> - Handle PG readonly mode in `Auth::DefaultCurrentUserProvider`.
> - Don’t raise error when adding to cache fails in readonly mode.
> - Trigger before upload event after saving and before uploading it, so we are sure that the upload is valid.
> - Users should be able to delete their own queued posts
> - Focus tests are unreliable in qunit
> - Our test build of highlight.js was broken
> - Raw jQuery usage in tests
> - `deleted` is a computed property of Topic
> - Report was overwriting a CP
> - `category-drop` tests were broken and overwriting CPs
> - Overwritten computed properties
> - Missing favicon in test
> - Listing topics with muted mixed-case tags
> - Missing application backtrace in chained loggers."
> - Incorrectly rescuing from `PG::ServerError`.
> - Correct stream counter when load more posts
> - Fewer broken image paths in tests
> - Don’t use prototype extensions like `.observes`
> - Tests involving dates were logging warnings
> - `passwordRequired` is a computed property
> - Poll tests were overwriting a couple of computed properties
> - More 404 image requests in test
> - Error in test mode with missing `topic`
> - Don’t load images that don’t exist in test
> - Tooltip is no longer used
> - `Discourse.Site` is deprecated
> - Show background images for both slug formats
> - Missing title when inserting hyperlinks
> - Bookmark search fixes
> - Reindex posts when `Topic#title` or `Category#name` changes.
> - Add topic title back to choose-topic
> - Update meh-o icon to far-meh
> - Be sure to use same units when comparing thumbnail size
> - Fewer 404s in JS tests
> - More errors being logged in tests
> - Deprecation `usernames` is now `recipients`
> - Remove more computed properties being set
> - Deprecation - `usernames` is now `recipients`
> - Overwriting more computed properties
> - Remove computed property setting from hamburger test
> - Don’t use jQuery directly in a test
> - Setting computed properties in tests
> - Removal of i18nPrefix deprecations
> - Remove user\_deleted when staff recovers post
> - : trigger `user_updated` event only if email changed after user creation.
> - `in:title` search should only search through topic first posts.
> - Search page bulk-select button position
> - Count new and unread respects muted categories
> - Prevent thumbnail gen if image too large
> - Apply video preview workaround to iOS
> - Regression in secure URL generation, followup to 36bad0c
> - Preload metadata for audio/video when secure media enabled
> - Trick Safari into loading video previews
> - Off-by-one-slash error in topic.notifications.reasons
> - Add noindex header to user summary page.
> - Don’t overwrite `maxlength` computed property
> - `loaded` is a CP and can’t be overwritten
> - Silence route-recognizer source map errors in development mode
> - Silence ember-qunit source map warning
> - Add popper sourcemap
> - Properly load ember source map in development mode
> - Can’t set `url` on topics, it is calculated from slugs
> - Error with `currentCategory`
> - FilterPlaceholder is a computed property
> - `topic.details` is not a plain JS Object
> - Allow highlightjs-worker to be compiled successfully
> - Ignore document length in search when ranking by relevance.
> - Prevent redirect when image scale btn is inside a link.
> - Search by relevance may return incorrect post number.
> - Add protection just in case topic is not set
> - Correct user profile URLs in `/about` crawler view
> - Strip query from URLs when indexing for search.
> - Inject extra lexemes for host lexeme.
> - Search for whole URLs wasn’t working.
> - Improvements for vanilla bulk import
> - Ensure that aggregating search shows the post with the higest rank.
> - Various improvements to bookmark modal UI
> - Incorrect search blurb when advanced search filters are used take2
> - Get only the correct collapse title in emails
> - Don’t strip `noopener` from oneboxes
> - Don’t award new user of the month in the wrong month
> - Remove social sharing icons from private contexts
> - Check if last poster exists before using it
> - Set the lang/xml:lang html attrs in emails
> - Skip whisper posts when updating topic like count
> - Slightly reduce fake delay of discobot user.
> - Last visit bar regression
> - Allow signup when auth provider supplies no email
> - Replace links to removed uploads from reviewables with a placeholder
> - Do not display enabled inputs when username/name are locked
> - Sync client and server side behavior for category hashtag lookup
> - Post menu bookmark icon and attributes not refreshing on notification click
> - Migrate topic\_users.bookmarked to false when it is incorrectly true
> - Test output related to `Discourse::VERSION`
> - Flaky test
> - Flaky tests
> - Incorrect fix for invites breaking when no group is selected
> - Invites when no group is selected
> - Catch all kinds of exceptions when processing email
> - Short URL resolution in cook-text
> - Force ActiveRecord reading role if Redis is down take 2.
> - Force ActiveRecord reading role if Redis is down.
> - Do not send system emails to suspended users
> - `getURL` deprecation
> - ‘resend all invite’ button was not working as expected
> - Cap bookmark name at 100 chars and truncate existing names
> - Stop updating bookmarked column from TopicUser.update\_post\_action\_cache
> - Incorrect search blurb when advanced search filters are used.
> - Disable security keys at same time as TOTP 2FA
> - Only offer disabling 2FA to admins
> - Bookmarks shortcut goes to new bookmarks with reminders
> - Do not highlight large code blocks
> - Set default value for poll result field
> - Redirect user to the URL with the correct category slug
> - Ensures category order keeps consistent
> - Add table CSS rules to normalize
> - Fix race condition when resolving tag and category hashtags
> - Improve category hashtag lookup
> - Improve category hashtag lookup
> - Sub-sub-categories can be mentioned using only two levels
> - Remove support for three-level hashtags
> - Set default value for poll result field
> - Generate Topic Thumbnails nil to Array error
> - Handle the case where upload goes missing during downsizing
> - Do not rerender widget-dropdown on all clicks
> - CookText may be gone before promise resolves
> - `OptimizedImage#filesize`
> - Make Email::Styles operate on html documents instead of fragments
> - Ensures seconds are displayed when used with dates
> - Update normalize css from 3.0.1 to 8.0.1
> - Skip hidden posts while generating canonical url.
> - Uploading an existing image as a site setting
> - Uploading an image as a site setting
> - Emoji autocomplete not triggering correctly
> - Increase time of DOWNLOAD\_URL\_EXPIRES\_AFTER\_SECONDS to 5 minutes
> - Negative limit values shouldn’t cause error 500
> - Filter read/unread notifications on the server side
> - Delete related search data when record has been deleted.
> - Return cdn url for uploads if available.
> - Support root paths that omit the trailing slash and have QPs
> - Search was not multisite aware
> - Hide publish\_read\_state option from non-admin users
> - Sometimes not all output of psql was logged during restores
> - Emoji\_autocomplete\_min\_chars failing when not 0
> - Update theme fields when updating from ThemesInstallTask
> - Uploads cannot be mapped due to the cook-text’s element attr being null
> - Identify slug-less topic urls everywhere
> - Correct version comparison logic when comparing stable to beta
> - Serialize an empty array if no suggested topics exist
> - Seed needs to run before optimizing site icons.
> - Published-page-header should be a sibling to published-page-body not a parent
> - Broken specs
> - Remove paths from robots.txt in favor of noindex header
> - Match discobot triggers on cooked version
> - Invalid urls should not break store.has\_been\_uploaded?
> - Avoid marking notifications as seen in readonly mode.
> 
> ### UX Changes
> 
> - Better wording when there are no unused tags to delete
> - Help users understand the meaning of each scope.
> - Use the same formatting for both user and group card bios
> - Preload muted categories list to prevent rendering delay.
> - Ensures search results wrap on mobile
> - Set silence\_reason using the system locale
> - Update header background color in mobile app webview
> - Ensure CSS vars are loaded in the Wizard stylesheet
> - Refactor pikaday month prev/next button styling
> - Refactor lightbox hover drop shadow
> - Uniform focus styles for composer inputs/textarea
> - Allows to navigate widget dropdown with tab and enter
> - Fix spacing of composer preview on mobile
> - Shrink composer consistently when pressing Done in iOS
> - Improve alignment and consistency on full page search
> - Fix quote sharing button spacing
> - Better error message if moderator is not allowed to invite to group
> - Do not show invite to group option if mod is not owner of any group
> - Fix missing icon when merging selected posts
> - Use group-chooser in invite modal
> - Fix layout for long bookmark notes
> - Simplifies editing email templates by always having a default
> - Add link to user email preferences in admin view
> - Remove extra space added by img resize controls in composer preview
> - Restore table borders
> - Hide login button during externally authenticated account creation
> - Suppress “in reply to” section in emails by default
> - Truncate long badge names in the mobile usercard
> - Add Login button on 403 error page if user is not logged in
> 
> ### Performance
> 
> - Drop index idx\_regular\_post\_search\_data concurrently
> - Drop idx\_regular\_post\_search\_data during migration
> - Improve performance of post\_search\_data migration
> - Ensure transaction is of minimal size
> - Add partial index for non-pm search.
> - Prefer joins over subquery for `User#private_posts_for_user`.
> - Remove extra subquery in search.
> - Switch to ActiveRecord’s upsert in `SearchIndexer`.
> - Faster TL3 promotion replies needed calculation
> - I improved the performance of the ‘notify\_reviewable’ job by doing only 1 query
> - Limit characters used to generate headline for search blurb.
> - Use PG headlines for blurb generation and highlighting for search.
> - Replace video and audio links in search blurb while indexing.
> - Optimize `ActionView::Helpers::TextHelper#excerpt`.
> - Release post\_upload records when downloaded image is removed
> - Move URI regexp in `GroupSearchResults.blurb_for` into constant
> - Remove one extra call to Redis when searching.
> - Preload S3 inventory data for multisite clusters
> - Avoid parsing `Post#cooked` with Nokogiri for every search.
> - Combine avatar\_lookup and primary\_group\_lookup into user\_lookup
> - Reduce size of search payload by removing unused topic attributes.
> - Move highlightjs to a background worker, and add result cache
> - Topic\_view participant post count: don’t send back ID list
> - Cache user summary data
> - Add user\_id condition so we can use another index in the query
> - Load topic bookmarks for the user in user\_post\_bookmarks
> - Remove post\_upload recovery in daily EnsureS3UploadsExistence job
> - Do not include thumbnail information in default topic list payload
> - Use post number to create canoncial path in mega topics.
> - Only update etag when it changes
> - Refactor lightbox decorator to use querySelectorAll
> - Check for modal visibility in a more efficient way
> - Exclude `image_url` and `thumbnails` from `SearchTopicListItemSerializer`.
> - Cache all metadata for 60 seconds
> - Memoize cooked triggers
> - Stop adding more topics to search when not needed

---

_[View the full topic](https://meta.discourse.org/t/discourse-2-6-0-beta2-release-notes/161549)._