diff options
| author | David Mehren | 2021-05-06 22:31:39 +0200 | 
|---|---|---|
| committer | GitHub | 2021-05-06 22:31:39 +0200 | 
| commit | 71841d7d35808982b712c928d35a1df75317c8a6 (patch) | |
| tree | da7af6d4ff8fb5d39cc075885805fb2fa50a3d2b | |
| parent | d9604ce1341b13604f33ede8eb0b6b898f8d85fd (diff) | |
| parent | a897ef7dea1fd3d0ef7415bff5b3312e5fb3828a (diff) | |
Merge pull request #1239 from hedgedoc/release/1.8.1
| -rw-r--r-- | config.json.example | 11 | ||||
| -rw-r--r-- | docs/content/dev/openapi.yml | 2 | ||||
| -rw-r--r-- | docs/content/setup/docker.md | 2 | ||||
| -rw-r--r-- | docs/content/setup/manual-setup.md | 4 | ||||
| -rw-r--r-- | package.json | 6 | ||||
| -rw-r--r-- | public/docs/release-notes.md | 19 | 
6 files changed, 31 insertions, 13 deletions
| diff --git a/config.json.example b/config.json.example index 258643a9..42dac856 100644 --- a/config.json.example +++ b/config.json.example @@ -8,17 +8,15 @@      },      "development": {          "loglevel": "debug", -        "hsts": { -            "enable": false -        },          "db": {              "dialect": "sqlite",              "storage": "./db.hedgedoc.sqlite"          }, -        "linkifyHeaderStyle": "gfm" +        "domain": "localhost", +        "urlAddPort": true      },      "production": { -        "domain": "localhost", +        "domain": "change this",          "loglevel": "info",          "hsts": {              "enable": true, @@ -126,7 +124,6 @@          {            "connectionString": "change this",            "container": "change this" -        }, -        "linkifyHeaderStyle": "gfm" +        }      }  } diff --git a/docs/content/dev/openapi.yml b/docs/content/dev/openapi.yml index 1a734451..45585e8a 100644 --- a/docs/content/dev/openapi.yml +++ b/docs/content/dev/openapi.yml @@ -3,7 +3,7 @@ openapi: 3.0.1  info:    title: HedgeDoc    description: HedgeDoc is an open source collaborative note editor. Several tasks of HedgeDoc can be automated through this API. -  version: 1.8.0 +  version: 1.8.1    contact:      name: HedgeDoc on GitHub      url: https://github.com/hedgedoc/hedgedoc diff --git a/docs/content/setup/docker.md b/docs/content/setup/docker.md index bc8b3ac9..41daac84 100644 --- a/docs/content/setup/docker.md +++ b/docs/content/setup/docker.md @@ -28,7 +28,7 @@ services:      restart: always    app:      # Make sure to use the latest release from https://hedgedoc.org/latest-release -    image: quay.io/hedgedoc/hedgedoc:1.8.0 +    image: quay.io/hedgedoc/hedgedoc:1.8.1      environment:        - CMD_DB_URL=postgres://hedgedoc:password@database:5432/hedgedoc        - CMD_DOMAIN=localhost diff --git a/docs/content/setup/manual-setup.md b/docs/content/setup/manual-setup.md index 26882ba2..bbd73f79 100644 --- a/docs/content/setup/manual-setup.md +++ b/docs/content/setup/manual-setup.md @@ -16,7 +16,7 @@  1. Check if you meet the [requirements at the top of this document](#manual-installation).  2. Download the [latest release](https://hedgedoc.org/latest-release/) and extract it.   -   <small>Alternatively, you can use Git to clone the repository and checkout a release, e.g. with `git clone -b 1.8.0 https://github.com/hedgedoc/hedgedoc.git`.</small> +   <small>Alternatively, you can use Git to clone the repository and checkout a release, e.g. with `git clone -b 1.8.1 https://github.com/hedgedoc/hedgedoc.git`.</small>  3. Enter the directory and execute `bin/setup`, which will install the dependencies and create example configs.  4. Configure HedgeDoc: To get started, you can use this minimal `config.json`:     ```json @@ -58,7 +58,7 @@ If you want to upgrade HedgeDoc from an older version, follow these steps:     and the latest release.  2. Fully stop your old HedgeDoc server.  3. [Download](https://hedgedoc.org/latest-release/) the new release and extract it over the old directory.   -   <small>If you use Git, you can check out the new tag with e.g. `git fetch origin && git checkout 1.8.0`</small> +   <small>If you use Git, you can check out the new tag with e.g. `git fetch origin && git checkout 1.8.1`</small>  5. Run `bin/setup`. This will take care of installing dependencies. It is safe to run on an existing installation.  6. *:octicons-light-bulb-16: If you used the release tarball for 1.7.0 or newer, this step can be skipped.*       Build the frontend bundle by running `yarn run build`. diff --git a/package.json b/package.json index 30dd3788..0b9dc600 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@  {    "name": "HedgeDoc", -  "version": "1.8.0", +  "version": "1.8.1",    "description": "The best platform to write and share markdown.",    "main": "app.js",    "license": "AGPL-3.0", @@ -131,6 +131,10 @@        "name": "Christoph (Sheogorath) Kern",        "email": "codimd@sheogorath.shivering-isles.com",        "url": "https://shivering-isles.com" +    }, +    { +      "name":"David Mehren", +      "email": "hedgedoc@herrmehren.de"      }    ],    "repository": { diff --git a/public/docs/release-notes.md b/public/docs/release-notes.md index d3173450..307c8e68 100644 --- a/public/docs/release-notes.md +++ b/public/docs/release-notes.md @@ -1,4 +1,21 @@  # Release Notes +## <i class="fa fa-tag"></i> 1.8.1 <i class="fa fa-calendar-o"></i> 2021-05-06 +### Enhancements +- Speed up `yarn install` in production mode (as performed by `bin/setup`) by marking frontend-only dependencies as dev-dependencies. +  This also reduces the size of the docker container +- Speed up the frontend-build by using `esbuild` instead of `terser` to minify JavaScript +- Improve behavior of the 'Quote', 'List', 'Unordered List' and 'Check List' buttons in the editor to automatically +  apply to the complete first and last line of the selection + +### Bugfixes +- Correct the 1.8.0 release notes to state that CVE-2021-29475 has been fixed since HedgeDoc 1.5.0. +- Fix crash on startup when `useSSL` or `csp.upgradeInsecureRequests` is enabled (thanks to [@mdegat01](https://github.com/mdegat01) for reporting) +- Automatically enable `protocolUseSSL` when `useSSL` is also enabled +- Fix the 'Quote', 'List', 'Unordered List' and 'Check List' buttons in the editor to not duplicate content +  when only parts of a line are selected (thanks to [@AnomalRoli](https://github.com/AnomalRoil) for reporting) +- Fix click handler for numbered task lists (thanks to [@xoriade](https://github.com/xoriade) for reporting) + +  ## <i class="fa fa-tag"></i> 1.8.0 <i class="fa fa-calendar-o"></i> 2021-05-03  This release fixes multiple security issues. We recommend upgrading as soon as possible. @@ -11,7 +28,7 @@ This release fixes multiple security issues. We recommend upgrading as soon as p    This issue allowed an attacker to hang HedgeDoc by inserting a malicious string into a note. Thanks to Ralph Krimmel for reporting!  We also published an advisory for [CVE-2021-29475: PDF export allows arbitrary file reads](https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-pxxg-px9v-6qf3),   -which has already been fixed since HedgeDoc 1.6.0. +which has already been fixed since HedgeDoc 1.5.0.  ### Features  - Database migrations are now automatically applied on application startup   | 
