Releases: clearflask/clearflask
Releases · clearflask/clearflask
2.3.0
Changes:
- Kubernetes Helm Chart deployment
- Add copy-to-clipboard button for post external link
Fixes:
- Correct GIF frame reading in image normalization
- Respect newCommentsAllowed prop in CommentList
- Re-index parent idea after post merge
- Update mod status in sessions instead of revoking
Security fixes:
- Sanitize fontFamily to prevent CSS injection
- Validate session ID format in cookie values
- Use sessionStorage for OAuth CSRF tokens
We are also introducing a new team member: Claude Code
2.2.0
Changes:
- Self-hosting now uses mariadb:10.5 instead of mysql:5.7 (Only applies to new installations)
Fixes:
- Page footer missing when using embed
- Fix href not available in connect test
- Don't bcc if no bcc addresses exist
- Make it clearer whether search indexing is enabled or not
- Improve handling of ApiException logging
- Suppress 'Event Subject was not initialized' durint tomcat war reload
- Fix do not unload externalized method beans as it conflicts during tomcat war reload
- Free Trial Ending email text change
Anti-spam changes:
- Bulk delete accounts API
- Do not index projects with account in trial/blocked status
- Use Castle anti-spam
2.1.9
Changes:
- Update Docker image with fix for Kernel-JDK incompat JDK-8287073
- Fix up weekly digest email, NPE in bcc construction
- Fix up trial ending reminder, sync account status if not matching with subscription
- Fix up project deletion, wait 30 days after reminder email
2.1.7
Changes:
- Email reminder for users that their projects are soon to be deleted due to non-payment
- Refresh account status after trial end to transition ACTIVE to NOPAYMENTMETHOD
- Allow recovering overdue accounts
- Suppressing KillBill errors
- Re-adding old growth2-monthly plan
2.1.6
Changes:
- DataSpray integration
- Added trial ending reminders and improved email content
- Added company about us page
- Updated French translation
Fixes: - Binding without valid data
- Deleted admin account id leftover in Project's adminsAccountIds field
- Upcoming GH Action cache deprecation migrated
2.1.4
Changes:
- Enable Weekly Digest for all legacy plans
- Disable telemetry via configuration
Fixes:
- Fix NPE during signup email
2.1.3
Fixes:
- Legacy self-host plan had its Weekly Digest emails disabled
2.1.2
Fixes:
- Fixed Bouncy Castle dependency in self-hosted Docker image
- Suppress AWS SDK deprecation and Jooq version compatibility warnings
2.1.1
Fixed Github integration:
- Bouncy Castle dependency added to Tomcat lib
- Base GH event class is now abstract, couldn't be json deserialized
2.1.0
Upgraded all dependencies that were possible for both back-end (Java, Maven) and front-end (Typescript, PNPM) to address potential security vulnerabilities.