diff options
| -rw-r--r-- | config.json.example | 11 | ||||
| -rw-r--r-- | docs/content/dev/openapi.yml | 2 | ||||
| -rw-r--r-- | docs/content/setup/docker.md | 2 | ||||
| -rw-r--r-- | docs/content/setup/manual-setup.md | 4 | ||||
| -rw-r--r-- | package.json | 6 | ||||
| -rw-r--r-- | public/docs/release-notes.md | 19 |
6 files changed, 31 insertions, 13 deletions
diff --git a/config.json.example b/config.json.example index 258643a9..42dac856 100644 --- a/config.json.example +++ b/config.json.example @@ -8,17 +8,15 @@ }, "development": { "loglevel": "debug", - "hsts": { - "enable": false - }, "db": { "dialect": "sqlite", "storage": "./db.hedgedoc.sqlite" }, - "linkifyHeaderStyle": "gfm" + "domain": "localhost", + "urlAddPort": true }, "production": { - "domain": "localhost", + "domain": "change this", "loglevel": "info", "hsts": { "enable": true, @@ -126,7 +124,6 @@ { "connectionString": "change this", "container": "change this" - }, - "linkifyHeaderStyle": "gfm" + } } } diff --git a/docs/content/dev/openapi.yml b/docs/content/dev/openapi.yml index 1a734451..45585e8a 100644 --- a/docs/content/dev/openapi.yml +++ b/docs/content/dev/openapi.yml @@ -3,7 +3,7 @@ openapi: 3.0.1 info: title: HedgeDoc description: HedgeDoc is an open source collaborative note editor. Several tasks of HedgeDoc can be automated through this API. - version: 1.8.0 + version: 1.8.1 contact: name: HedgeDoc on GitHub url: https://github.com/hedgedoc/hedgedoc diff --git a/docs/content/setup/docker.md b/docs/content/setup/docker.md index bc8b3ac9..41daac84 100644 --- a/docs/content/setup/docker.md +++ b/docs/content/setup/docker.md @@ -28,7 +28,7 @@ services: restart: always app: # Make sure to use the latest release from https://hedgedoc.org/latest-release - image: quay.io/hedgedoc/hedgedoc:1.8.0 + image: quay.io/hedgedoc/hedgedoc:1.8.1 environment: - CMD_DB_URL=postgres://hedgedoc:password@database:5432/hedgedoc - CMD_DOMAIN=localhost diff --git a/docs/content/setup/manual-setup.md b/docs/content/setup/manual-setup.md index 26882ba2..bbd73f79 100644 --- a/docs/content/setup/manual-setup.md +++ b/docs/content/setup/manual-setup.md @@ -16,7 +16,7 @@ 1. Check if you meet the [requirements at the top of this document](#manual-installation). 2. Download the [latest release](https://hedgedoc.org/latest-release/) and extract it. - <small>Alternatively, you can use Git to clone the repository and checkout a release, e.g. with `git clone -b 1.8.0 https://github.com/hedgedoc/hedgedoc.git`.</small> + <small>Alternatively, you can use Git to clone the repository and checkout a release, e.g. with `git clone -b 1.8.1 https://github.com/hedgedoc/hedgedoc.git`.</small> 3. Enter the directory and execute `bin/setup`, which will install the dependencies and create example configs. 4. Configure HedgeDoc: To get started, you can use this minimal `config.json`: ```json @@ -58,7 +58,7 @@ If you want to upgrade HedgeDoc from an older version, follow these steps: and the latest release. 2. Fully stop your old HedgeDoc server. 3. [Download](https://hedgedoc.org/latest-release/) the new release and extract it over the old directory. - <small>If you use Git, you can check out the new tag with e.g. `git fetch origin && git checkout 1.8.0`</small> + <small>If you use Git, you can check out the new tag with e.g. `git fetch origin && git checkout 1.8.1`</small> 5. Run `bin/setup`. This will take care of installing dependencies. It is safe to run on an existing installation. 6. *:octicons-light-bulb-16: If you used the release tarball for 1.7.0 or newer, this step can be skipped.* Build the frontend bundle by running `yarn run build`. diff --git a/package.json b/package.json index 30dd3788..0b9dc600 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "HedgeDoc", - "version": "1.8.0", + "version": "1.8.1", "description": "The best platform to write and share markdown.", "main": "app.js", "license": "AGPL-3.0", @@ -131,6 +131,10 @@ "name": "Christoph (Sheogorath) Kern", "email": "codimd@sheogorath.shivering-isles.com", "url": "https://shivering-isles.com" + }, + { + "name":"David Mehren", + "email": "hedgedoc@herrmehren.de" } ], "repository": { diff --git a/public/docs/release-notes.md b/public/docs/release-notes.md index d3173450..307c8e68 100644 --- a/public/docs/release-notes.md +++ b/public/docs/release-notes.md @@ -1,4 +1,21 @@ # Release Notes +## <i class="fa fa-tag"></i> 1.8.1 <i class="fa fa-calendar-o"></i> 2021-05-06 +### Enhancements +- Speed up `yarn install` in production mode (as performed by `bin/setup`) by marking frontend-only dependencies as dev-dependencies. + This also reduces the size of the docker container +- Speed up the frontend-build by using `esbuild` instead of `terser` to minify JavaScript +- Improve behavior of the 'Quote', 'List', 'Unordered List' and 'Check List' buttons in the editor to automatically + apply to the complete first and last line of the selection + +### Bugfixes +- Correct the 1.8.0 release notes to state that CVE-2021-29475 has been fixed since HedgeDoc 1.5.0. +- Fix crash on startup when `useSSL` or `csp.upgradeInsecureRequests` is enabled (thanks to [@mdegat01](https://github.com/mdegat01) for reporting) +- Automatically enable `protocolUseSSL` when `useSSL` is also enabled +- Fix the 'Quote', 'List', 'Unordered List' and 'Check List' buttons in the editor to not duplicate content + when only parts of a line are selected (thanks to [@AnomalRoli](https://github.com/AnomalRoil) for reporting) +- Fix click handler for numbered task lists (thanks to [@xoriade](https://github.com/xoriade) for reporting) + + ## <i class="fa fa-tag"></i> 1.8.0 <i class="fa fa-calendar-o"></i> 2021-05-03 This release fixes multiple security issues. We recommend upgrading as soon as possible. @@ -11,7 +28,7 @@ This release fixes multiple security issues. We recommend upgrading as soon as p This issue allowed an attacker to hang HedgeDoc by inserting a malicious string into a note. Thanks to Ralph Krimmel for reporting! We also published an advisory for [CVE-2021-29475: PDF export allows arbitrary file reads](https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-pxxg-px9v-6qf3), -which has already been fixed since HedgeDoc 1.6.0. +which has already been fixed since HedgeDoc 1.5.0. ### Features - Database migrations are now automatically applied on application startup |