Differences

This shows you the differences between two versions of the page.

--- changes [2015-08-12 06:29] – 37.200.79.4
+++ changes [2024-02-12 13:14] (current) – hotfix released andi
@@ Line 1: / Line 1: @@
 ====== Changelog ======
-This page contains a summary of changes between the official [[DokuWiki]] releases. Only the biggest changes are listed here. A complete and detailed log of all changes is available through the [[http://github.com/splitbrain/dokuwiki/commits/master|GitHub Repository Browser]].
+This page contains a summary of changes between the official [[DokuWiki]] releases. Only the biggest changes are listed here. A complete and detailed log of all changes is available through the [[https://github.com/dokuwiki/dokuwiki/commits/master|GitHub Repository Browser]]. (This log on Github is only authoritative for major releases. Hotfixes often contain only one or few security fixes.)
-Changelogs for releases older than the ones listed here are available at [[Old Changes]]. Plugin and template developers should read and subscribe to the [[devel:releases|detailed change log]].
+Changelogs for releases older than the ones listed here are available at [[Old Changes]].
+Plugin and template developers should read and subscribe to the [[devel:releases|detailed change log]].
 There is some information regarding the [[install:upgrade|upgrade]]-process.
-Changes marked with :!: need some attention on upgrading!
+**Changes marked with :!: need some attention on upgrading!**
-===== Release 2015-08-10 "Detritus" =====
+===== Release 2024-02-06a “Kaos” =====
-  * This release now requires PHP 5.3.3 at least
+  * :!: DokuWiki requires at least PHP 7.4 now
-  * New [[plugin:styling|Style Manager]] to adjust template variables like colors
+  * Further fixes for warnings in PHP8+
-  * Experimental new Form class usable for plugin developers
+  * Complete Overhaul of the [[devel:Remote API]] and introduction of the [[devel:JSONRPC]] transport (see [[https://www.patreon.com/posts/96036243|Patreon Post]])
-  * Use [[http://getcomposer.org|Composer]] to add third party libraries
+  * Introduction of [[devel:Authentication#Token Auth]]
-  * Various deprecated code has been removed
+  * Automatic pruning of logs (see [[config:logretain|Configuration Setting: logretain]])
-  * The [[plugin:extension|Extension Manager]] can now remove old files when updating extensions
+  * Plugin authors can now set an update message to be shown in extension manager
-  * Allow unsetting default acronyms, schemes, entities, etc. in local config
+  * Refactored [[syndication|feed generation]]
-  * PHP 7 compatibility fixes
+  * Better baseurl detection when running behind reverse proxy
-  * Page titles now reflect the current action better
+  * :!: developers now need to install dev dependencies via [[devel:composer]]
-  * Add [[devel:event:plugin_popularity_data_setup|event to let plugin authors send their own popularity data]]
+  * Automatic loading of [[devel:autoloader#vendor_autoload|vendor/autoload.php]] for plugins
-  * Changed all submit buttons from ''input'' to ''button'' to improve their stylability. :!:
+  * ''SameSite=Lax'' cookie attribute is set by default now (see [[config:samesitecookie|Configuration Setting: samesitecookie]])
-  * Various improvements and bug fixes
+  * The default [[template:dokuwiki]] template now supports a SVG logo. The logo height is now fixed to ''64px'' :!:
+  * Lots of [[devel:coding style]] fixes
+  * Various bug fixes and smaller tweaks
-===== Release 2014-09-29d "Hrun" =====
+=== Hotfix ===
-  * It's now possible to customize single strings of the [[localization#changing_some_localized_texts_and_strings_in_your_installation|localization]]
+  * 2024-02-06a
-  * New history function to see how a wiki looked at a certain time (no user interface yet, details at [[date at]])
+    * fix problem with parsing uneven table columns [[issue>4186]]
-  * Security fix for AD/LDAP auth plugin related problem ([[http://www.freelists.org/post/dokuwiki/Fwd-Dokuwiki-maybe-security-issue-Null-byte-poisoning-in-LDAP-authentication|Details here]])
+    * fix logo aspect ratio in ''dokuwiki'' template when using PNG logo [[issue>4187]]
-  * Some caching in the database auth plugins
+    * re-add missing [[devel:event:feed_data_process|FEED_DATA_PROCESS]] event [[issue>4191]]
-  * Improved CLI interface for better command line tools
+    * fix error handling for plugins with missing info [[issue>4193]]
-  * Support for external Audio/Video sources
+    * fix doubly declared ''cache'' class error [[issue>4200]]
-  * Various improvements and bug fixes
+    * fix content-type header for feeds [[issue>4203]]
+    * ignore decryption errors on old cookies [[issue>4198]]
+===== Release 2023-04-04a “Jack Jackrum” =====
-Note: When you had disabled the [[config:compress|'compress' config setting]], you would enable it again since this release.
+  * A lot of fixes for warnings in PHP8+
+    * A new feature flag [[config:hidewarnings]] will suppress the output of warnings, if PHP is configured to show warnings to the end user
+  * The options to embed HTML and PHP have been **completely removed** for security reasons :!:
+    * [[https://forum.dokuwiki.org/d/20628-after-igor-htmlok-and-phpok-will-no-longer-be-included-in-the-dokuwiki-core|Forum discussion]]
+    * [[plugin:htmlok|Plugin alternative]]
+  * Fixes
+    * quicksearch with UTF-8 chars
+    * basic auth header parsing
+    * old revisions for pages with dots
+    * feed titles
+    * handling of unknown config options
+    * relaxed media CSP headers for PDF and SVG handling
+    * relaxed browseruid check for better browser compatibility
+    * compatibility updates for mail sending
+  * Unit Tests use php-dom-wrapper instead of phpquery now :!:
+  * Improved error logging
+  * Dependency Updates
-  * Hotfix 2014-09-29a: fixes for login problems caused by certain PCRE versions and changes in the recent Chrome release
+=== Hotfix ===
-  * Security Hotfix 2014-09-29b: prevents XSS attack via SWF uploads
-  * Security Hotfix 2014-09-29c: fixes privilege escalation in RPC API
-  * Security Hotfix 2014-09-29d: fixes a XSS vulnerability in the user manager
-===== Release 2014-05-05e "Ponder Stibbons" =====
+  * Hotfix 2023-04-04a
+    * fix an XSS security vulnerability in RSS handling [[issue>3967]]
+===== Release 2022-07-31b “Igor” =====
-  * [[plugin:Extension]] Manager
+  * Fix various errors in PHP8 support
-  * [[wiki:syntax#supported_media_formats|Audio & video]] support
+  * Drop support for PHP versions earlier than 7.2
-  * New and more file icons (as e.g. seen on [[:mime]])
+  * SVG-based smileys replace GIF versions
-  * Show login form at denied access
+    * :!: may require template update [[pr>3344]]
-  * Show a domain dropdown when [[plugin:authad#other_options|multiple AD domains]] are configured
+    * :!: plugins directly embedding SVG may need CSS adjustments [[issue>3690]]
-  * Added user page linking by adding the [[config:showuseras]] config option: "Full name as interwiki user link". Configurable via the [[interwiki]] configuration
+  * Allow "revert" action for logged in users only
-  * Added a more versatile Revision selection to the diff page of articles
+  * Various translation updates
-  * :!: Fallback of old date format removed: early wikis need to update their [[config:dformat]] config setting
+  * Add a class ''.logo'' to the ''h1'' title to let administrators remove the ''h1'' around the logo [[pr>3408]]
+  * Use [[https://github.com/splitbrain/slika | Slika library]] for image resizing and cropping, with:
+    * auto rotation based on EXIF tags
+    * support for WEBP
+  * Refactored logging mechanism [[pr>3230]], [[pr>3203]] and [[.:plugin:logviewer]]
+  * Refactored media manager [[pr>3372]] and lazy loading of images
+  * Support for SVG images
+  * New form events used. :!: Plugins should implement them, because the old form events are not triggered anymore
+  * Some smaller security fixes
+  * :!: On [[farms|farm setups]] a log dir needs to be created manually in animals
+=== Hotfix ===
-:!: When the layout seems broken, you may be affected by an [[https://github.com/splitbrain/dokuwiki/issues/683|issue in the CSS compressor]]. Please try disabling the [[config:compress|'compress' config setting]].
+  * Hotfix 2022-07-31a
+    * fix an XSS security vulnerability [[issue>3761]]
+  * Hotfix 2022-07-31b
+    * fix an XSS security vulnerability in RSS handling [[issue>3967]]
-===Hotfix===
+===== Release 2020-07-29a “Hogfather” =====
-  * Security Hotfix 2014-05-05a for [[https://github.com/splitbrain/dokuwiki/issues/765|Issue 765]].
+  * Lots of internal refactoring to make the code base more modern and robust. You can read a bit [[https://www.patreon.com/posts/18685665|more on the background here]].
-  * Security Hotfix 2014-05-05b for AD/LDAP auth plugin related problem ([[http://www.freelists.org/post/dokuwiki/Fwd-Dokuwiki-maybe-security-issue-Null-byte-poisoning-in-LDAP-authentication|Details here]])
+  * Defer the loading of JavaScript to improve initial page loads :!: (Some plugins needs to temporary disable the [[config:defer_js]] feature flag)
-  * Security Hotfix 2014-05-05c: prevents XSS attack via SWF uploads
+  * PHP 7.4 compatibility and some preparations for the upcoming PHP8
-  * Security Hotfix 2014-05-05d: fixes privilege escalation in RPC API
+  * New [[config:trustedproxy]] setting for installations behind a reverse proxy :!:
-  * Security Hotfix 2014-05-05e: fixes a XSS vulnerability in the user manager
+  * New [[plugin:extension#command_line_interface|command line script]] for managing extensions
-===== Release 2013-12-08 "Binky" =====
+  * [[syndication#show_new_items_only|RSS Feed]] can now show new items only
+  * A whole ton of smaller bug fixes and improvements
+  * Lots of translation upgrades
-  * improved random generator for more secure passwords
+:!: Note: because of various internal changes, not all plugins or templates may be compatible with this release. It is recommended to check the documentation of the plugins you use before upgrading. As always a backup is recommended before upgrading. :!:
-  * Added capability to import and export users in [[plugin:usermanager|User Manager]] via CSV files
-  * Implemented [[devel:less|LESS]] compiler for CSS
-  * The old [[template:default|'default' template]] was removed :!:
-  * Users can delete their own account now
-  * Improvements for RTL languages/scripts, accessibility (WAI-ARIA) and [[:farms]]
-  * Many, many translation updates and smaller bugfixes
-===== Release 2013-05-10a "Weatherwax" =====
+Please also read:
-  * Introduction of [[devel:Auth Plugins]] :!: If you used an authentication backend, you will need to adjust your [[config:authtype]] configuration by prefixing it with ''auth''. Eg ''mysql'' becomes ''authmysql'' and ''plain'' becomes ''authplain''. A compatibility mechanism will smooth upgrade, but care should be given to update your settings and test your wiki after the upgrade.
+  * [[https://www.patreon.com/posts/38090834|Hogfather Plugin Compatibility]]
-  * This release finalizes our jQuery migration and the deprecated compatibility functions were removed. :!: this might break plugins that have not been updated for the last year
+  * [[https://forum.dokuwiki.org/d/17863-quick-reminder-what-to-do-when-a-plugin-doesnt-work-on-hogfather|Quick Reminder: What to do when a plugin doesn't work on Hogfather]]
-  * Various updates and fixes to the new template introduced in Adora Belle, especially to mobile mode
+  * [[https://www.patreon.com/posts/19048874|DokuWiki Recovery Script]]
-  * Refactored email subscriptions
-  * Upgrade to jQuery 1.9.0 and jQuery-UI 1.9.2
-  * Refactored tar file library
-  * A security enhancement for fetch to reduce its susceptibility to DDOS attacks. :!: Plugins which use fetch to display images and construct their own urls maybe be incompatible with the change - [[weatherwax_fetchchange_plugins|list of affected plugins]]
-  * removal of [[plugin:info#infoversion|~~INFO:version~~]]
-  * The hotfix released 2013-06-16 contains the following fixes
-    * Several fixes related to the new Auth-Plugins (especially LDAP, AD and MySQL)
-    * Improvements to the random password generator and introduction of [[devel:event:auth_password_generate|AUTH_PASSWORD_GENERATE]]
-    * Better password reset tokens
-    * A fix for image rescaling (Precondition failed problem)
-    * A fix related to Internet Explorer's compatibility mode
-===== Release 2012-10-13 "Adora Belle" =====
+And please also ;
+  * Search the [[https://forum.dokuwiki.org|Forum]] when you encounter problems, chances are high that there are already solutions available
+  * If you have no clue where the issue originates, check the [[bugs#server_php_error_logs|log files of your webserver]].
-**Usage enhancements**
+=== Hotfix ===
-  * A [[template:dokuwiki|new default dokuwiki template]] is distributed with this release. This new template is HTML5 compliant and comes with sidebar and mobile support. The old template is still available with this release, but will be deprecated. :!: The new template is activated by default. Special thanks to Clarence Lee for the initial design.
+  * Hotfix 2020-07-29a
-  * The TOC and the search results have been rewritten and improved. This impacts templates: :!: all templates need to be adjusted to work properly. See [[github>d5acc30d]] and [[github>91b05b6b]] for details of the changes and what needs to be done in each template.
+    * fix an XSS security vulnerability [[issue>3761]]
-  * Several fixes and enhancements have been made to the media manager
-  * RTL has been given some particular attention
-  * Several fixes of the subscription mechanism have been integrated
-**Setup & Administration**
+===== Release 2018-04-22c “Greebo” =====
-  * Multiple LDAP servers is now available
+  * This release requires **PHP 5.6** at least! (Red Hat Enterprise Linux does not support beyond PHP 5.5)
-  * Wiki farms is in the core of DokuWiki: all the farm code is grouped in a farm.php file which can be included through the preload.php to activate farming
+  * PHP 7.2 Support and improvements for PHP 7.3 support
-  * ACL now support a %GROUP% wildcard. This works like the %USER% wildcard, but for groups. :!: %USER% and %GROUP% cannot be mixed on an ACL line
+  * New form on search page with more search tools :!: Plugins which modified that page may need adjustments, e.g. [[plugin:tagging]] Plugin
-  * Notification mail are now sent as HTML formatted mails. :!: This feature is enabled by default.
+    * ability to filter and sort results by time! 🎉
-  * Resending password has been reworked. :!: Now DokuWiki honors the autopasswd setting: passwords are resent if $conf['autopasswd'] is enabled. If $conf['autopasswd'] is disabled a token is sent allowing password reset. Theses tokens are valid only during a limited time.
+  * Sending now a ''manifest.json'' to let the user add DokuWiki to the homescreen
-  * XMLRPC settings in the config file are renamed: xmlrpc and xmlrpcuser become remote and remoteuser. :!: You *must* rename these settings in your local.php config file if you were using them.
+  * Re-factored section edit. :!: Plugins which insert own [[devel:section_editor|section edit buttons]] need adjustments, e.g. [[plugin:wrap]] Plugin
-  * Added support for local [[devel:css#style.ini]]s
+  * updated LESS compiler :!: [[devel:templates|Template]] authors may experience some incompatibilities
+  * new Action Dispatcher :!: Plugin authors handling [[devel:event:ACTION_ACT_PREPROCESS]] may encounter slight differences
+  * new [[https://www.patreon.com/posts/command-line-15335339|Command Line Plugins]]
+  * new [[https://www.patreon.com/posts/menus-14160215|Menu system]] :!: template authors may want to integrate them (see [[devel:menus|Menu]])
+  * improved features in bin/wantedpage.php CLI
+  * better cursor handling when inserting multiple images from media popup
+  * [[syntax_highlighting|additional options]] for GeShi syntax highlighting
-**Integration & Development**
+=== Hotfix ===
-  * Several fixes when using Active Directory as backend
+  * Hotfix 2018-04-22a
-  * DokuWiki now uses PHPUnit as its test framework
+    * fix missing "you are here" [[issue>2329]]
-  * Sidebar inclusion is now provided in the new default template. (The Release Candidate included a ''tpl_sidebar()'' which was removed again to avoid conflicts with many popular templates.)
+    * readd missing password reset interface [[issue>2349]]
-  * The DOKU_TPL* constants are deprecating: :!: template authors are encouraged to integrate that change.
+    * fix page unlocking when canceling edits [[issue>2350]]
-  * [[devel:releases|More details about changes]] related to programmers.
+    * better support for creating pages from search [[issue>2355]]
+    * problems with installing plugin zips on some systems [[issue>2361]]
+    * fixed draft recovering
+  * Hotfix 2018-04-22b
+    * fix PHP 7.3 compatibility [[issue>2622]]
+    * fix ACL check [[PR>2609]]
+  * Hotfix 2018-04-22c
+    * fix an XSS Vulnerability [[issue>3044]]
-**And also**
+===== Release 2017-02-19g “Frusterick Manners” =====
-  * Over 20 language updates
+  * new Admin screen with plugins being able to add their own icons :!: 3rd party templates need adjustments
-  * Over 60 issues were fixed
+  * jQuery 3 (IE Support for versions <9 dropped)
+  * :!: some plugins may need an update.
+    * [[plugin:Gallery]]: Make sure to update the gallery plugin before you upgrade DokuWiki. Versions before 2016-12-22 render all pages in Frusterick Manners virtually unusable. This includes the login and the admin forms. (Rescue manoeuvre if you happened to fall into the trap: Use regular file tools to move the folder '$DOKUWIKIROOT/lib/plugins/gallery' out of the way.)
+    * [[plugin:ODT]]: Versions before 2016-09-10 do not supply the file 'inc/ZipLib.class.php' which is required in Frusterick Manners.
+  * better cache management and CDN support for jQuery
+  * PHP 7.1 support and PHP 7.0 bugfixes
+  * improvements to the internal Form mechanism
+  * File usage list in media manager
+  * Various improvements, language updates and bug fixes
+  * :!: XMLRPC is only available for PHP 5.4 and higher due to [[issue>1947|usage of certain PHP syntax]]
-===== Release 2012-01-25c “Angua” =====
+=== Hotfix ===
-**Usage enhancements**
+  * Hotfix 2017-02-19a: fixes installation issue [[issue>1852]] and media overwrite issue [[issue>1853]].
+  * Hotfix 2017-02-19b: fixes security token [[issue>1883]] and media manager overwrite issue [[issue>1864]].
+  * Hotfix 2017-02-19c: fixes reflected XSS issue [[issue>2061]]
+  * Hotfix 2017-02-19d: fixes sanitation of $language [[issue>2080]]; fixes RSS syntax XSS [[issue>2081]]
+  * Hotfix 2017-02-19e: fixes rendering null $language going to GeSHi [[issue>2088]]
+  * Hotfix 2017-02-19f: fixes PHP 7.3 compatibility [[issue>2622]] and ACL check [[PR>2609]]
+  * Hotfix 2017-02-19g: fixes an XSS Vulnerability [[issue>3044]]
-  * Version handling of media files, just like pages. Old versions are saved and change history available in "recent changes" list as well as in RSS. This and the new media manager are the result of the Google Summer of Code project of Kate Arzamastseva. :!: Be careful when upgrading, some directories need be created (see [[:install:upgrade]])
+===== Release 2016-06-26e “Elenor of Tsort” =====
-  * Drag & drop support in media manager to speed up adding new files (only works in Firefox and Chrome). And improved multiple file upload (only works in Firefox, Chrome and Safari). This was made possible by replacing the old flash uploader with [[http://valums.com/ajax-upload/|valums Ajax Upload]].
-  * A powerful, AJAX-enhanced [[fullscreen_mediamanager|fullscreen media manager]] is introduced in addition to the standard pop-up manager.  :!: All templates must be updated to support the new manager. :!: Template authors need to [[template:starter:changes|add a media manager button and CSS]].
-**Setup & Administration**
+  * New [[plugin:authPDO]] plugin; [[plugin:authmysql]] and [[plugin:authpgsql]] are deprecated :!:
+  * :!: Access check is performed before pages are shown in sidebars of recent templates. (e.g. dokuwiki, starter, writr)
+  * PHP 7 compatibility fixes
+  * Internet Explorers 8 (and older) are no longer supported, workarounds have been removed
+  * Improvements to the new [[devel:form]] class, [[devel:autoloader|auto loading]] of plugin classes and other improvements for plugin developers
+  * Show size changes in recent changes
+  * Better RTL (Arabic, Hebrew) support in Mediamanager
+  * Support for PHP's builtin web server
+  * Various improvements, language updates and bug fixes
+  * Old authentication configurations are not loaded anymore. Requires for some a manual update of configuration settings. (You need to change e.g. ''$conf['auth']['ldap']'' -> ''$conf['plugin']['authldap']'' and ''$conf['authtype'] = 'ldap''' -> ''$conf['authtype'] = 'authldap'''.) [[issue>1535]]
-  * Better farming with cascading configuration for plugin enabling/disabling, this was developed as part of the new extension manager Google Summer of Code project of Piyush Mishra. (see [[tips:farm|farm]] & [[config]])
+=== Hotfix ===
-  * Performance enhancement by using data uris. This will transfer small images together with the CSS, thus reducing the number of needed HTTP requests and avoiding the HTTP header overhead. Turn on [[:config:cssdatauri]] for a more efficient install.
-**Integration & Development**
+  * Hotfix 2016-06-26a: fixes [[issue>1616]] issue with authad.
+  * Hotfix 2016-06-26b: fixes security issue [[issue>1883]], and adjusts session ID check to specification.
+  * Hotfix 2016-06-26c: fixes reflected XSS issue [[issue>2061]]
+  * Hotfix 2016-06-26d: What changed???
+  * Hotfix 2016-06-26e: fix rendering null $language going to GeSHi [[issue>2088]]
-  * The core code now uses the [[http://jquery.com|jQuery]] JavaScript framework offering powerful features to plugin & template developers. The old, now deprecated JavaScript API is kept for plugin compatibility. Plugin and template authors are encouraged to migrate their JavaScript code to use jQuery instead of the old API ([[devel:jqueryfaq|jQuery FAQ]]).
+===== Release 2015-08-10a “Detritus” =====
-  * XML-RPC has been polished fixing some auth & login issues.
-  * [[devel:releases|More details about changes]] related to programmers.
+  * This release now requires PHP 5.3.3 at least
+  * New [[plugin:styling|Style Manager]] to adjust template variables like colors
+  * Experimental new Form class usable for plugin developers
+  * Use [[https://getcomposer.org/|Composer]] to add third party libraries
+  * Various deprecated code has been removed
+  * The [[plugin:extension|Extension Manager]] can now remove old files when updating extensions
+  * Allow [[issue>1158|unsetting default]] acronyms, schemes, entities, etc. in local config
+  * PHP 7 compatibility fixes
+  * Page titles now reflect the current action better
+  * Add [[devel:event:plugin_popularity_data_setup|event to let plugin authors send their own popularity data]]
+  * Changed all submit buttons from ''input'' to ''button'' to improve their stylability. :!:
+  * Various improvements and bug fixes
-**Finally**
+=== Hotfix ===
-  * 25 reported issues were fixed.
+  * Hotfix 2015-08-10a: fix for issue [[issue>1296]] with Extension Manager which prevented installing tarballs and issue [[issue>1302]] which prevented links to Windows Shares to work
-  * Various smaller bug fixes and enhancements.
-  * Thank you Kate and Piyush for their GSoC work and to Google for sponsoring it!
-**Hotfixes**
-  * XSS security issue [[bug>2561]]
-  * XSS security issue [[bug>2487]]
-Previous releases are on [[Old Changes]].
+Previous releases are on **[[Old Changes]].**