Community

1.14.0 Breaking Changes

NodeBB Development

Suggested Topics

  • julianJ
    ●

    Critical Security Vulnerability (for versions v2.0.0 and anything older than 1.19.8)

    NodeBB Development
    3 Votes
    1 Posts
    125 Views

    julianJ

    Hello all,

    We are notifying you today about a security vulnerability that was present in older versions of NodeBB. We were notified of these vulnerabilities on 25 May 2022, and have patched and released fixed versions of NodeBB, v2.0.1 and v1.19.8, three days later, on 28 May.

    The specifics of this vulnerability are available upon request, but they are considered critical and affect the security of any site running an affected version of NodeBB. Admins are urged to upgrade to these patched versions as soon as possible.

    Alternatively, the following changesets can be cherry-picked into your installation of NodeBB in lieu of a full upgrade:

    v2.x https://github.com/NodeBB/NodeBB/commit/e802fab87f94a13f397f04cfe6068f2f7ddf7888 v1.19.x https://github.com/NodeBB/NodeBB/commit/81e3c1ba488d03371a5ce8d0ebb5c5803026e0f9

    As always, the NodeBB team is available at your disposal to answer any questions or provide assistance in implementing these changesets.

    For more information on the security vulnerability, please visit the GitHub Security Advisory page for this disclosure
  • julianJ
    ●

    v1.6.1 Launch Planning

    NodeBB Development
    2 Votes
    1 Posts
    726 Views

    julianJ

    Just a quick note for you all to let you know that v1.6.1 will be dropping next Tuesday, the 10th of October to include some bug fixes as well as a minor security fix that was reported recently.

    We're also using this patch release as an opportunity to address any issues that people have run into after trying to upgrade to v1.6.0.

    We do not expect any breaking changes, as this is merely a patch release.

    Feature freeze comes into effect 3rd of October, code freeze Friday 6th of October.

  • barisB
    ●

    0.8.0 Breaking Changes

    NodeBB Development
    1 Votes
    1 Posts
    1950 Views

    barisB

    Hook changes Filter filter:user.custom_fields removed see this commit filter:user.delete deprecated, use static:user.delete instead, now It is passed { uid: uid } instead of just uid, and is fired before user data is actually deleted, so you have one last chance to look up stuff if needed. Other changes Theme developers should now explicitly set the baseTheme in their theme.json if their theme is not based on Persona. Set this value to nodebb-theme-vanilla TBD 💔
  • barisB
    ●

    0.6.0 Breaking Changes

    NodeBB Development
    3 Votes
    25 Posts
    13513 Views

    barisB

    Updated with header.tpl changes, relevant thread https://community.nodebb.org/topic/3488/header-tpl-changes

  • julianJ
    ●

    Gotchas for 0.6.0

    NodeBB Development
    0 Votes
    1 Posts
    1320 Views

    julianJ

    I know I made a promise to have the 0.5.x branch last more than 2 releases, but we added more breaking changes again, and 0.5.0 hasn't even been released yet 😆

    In any case, for those plugin developers who are interested:

    Notification pushed action hook (action:notification.pushed) incoming data has changed: From: An object containing the notification data To: This object -- {notification: notification, uids: uids});

    As always, this list will be updated as new breaking changes are added. In the case of this list -- don't commit and publish your change to npm yet, as 0.6.0 has not launched. We recommend you maintain these changes in a separate branch until then.

| | | |
Copyright © 2023 NodeBB | Contributors