4.1.3

Security

• Fix multiple denial-of-service security vulnerabilities in indirect dependencies

4.0.3

Fixed

• Fix the package shipping with .jade.js files built from the 5.0.x releases

4.0.2

Security

• Fix multiple denial-of-service security vulnerabilities in indirect dependencies

5.0.1 beta 0

This release was a private beta due to the security fixes being slightly risky for stability.

The relevant security bugs were publicly disclosed on October 1st, 2017.

Security

• Fix multiple denial-of-service security vulnerabilities in indirect dependencies

5.0.0

No changes from 5.0.0 beta 1.

5.0.0 beta 1

Fixed

• Original posts no longer show "shared by" (#1427)
• Fixed some minor inaccuracies in README.md's documentation of defaults

Changed

• Upgrade to dompurify@1.0.1

5.0.0 beta 0

Improved

• Node 7 and 8 are now supported
• Documented the bounce and logLevel config options
• The web UI more clearly shows shares
• Worker process deaths are sent to the error log stream, not the warning stream

Changed

• Removed 0.10/0.12-specific hacks
• Internal refactoring to use newer ES6 features

Fixed

• Fixed crash in an endpoint which prevented "login with remote account" from working (#1281)

Breaking

• Dropped support for Node.js 0.10 and 0.12 (#1234)
• Added a period and space after the footer text; if you use appendFooter please adjust accordingly (#1349)
• Switched from Glyphicons to Font Awesome (affects web UI template modifications) (#1351)
• Upgraded Backbone to 1.3.3 (ditto) (#1382)
• Switched from Underscore to Lodash (ditto) (#1326)
• Enabled many systemd security restrictions in the systemd service file (#1346, #1257)

4.1.2

Improved

• Backported some improved error messages to assist in debugging a bug

4.1.1

Fixed

• Backported fix for crash in an endpoint which prevented "login with remote account" from working (#1281)

4.1.0

No changes from 4.1.0 beta 0. This will be the last release to support Node.js 0.10 and 0.12.