Releases: sveltia/sveltia-cms
v0.105.4
v0.105.3
v0.105.2
v0.105.1
v0.105.0
sanitize_preview option for the Markdown widget is now set to true by default in Sveltia CMS. This follows a report of a XSS vulnerability in Decap CMS.
The discovered vulnerability itself does not affect Sveltia CMS, as our entry preview implementation is completely different. However, the Markdown widget was potentially vulnerable to XSS attacks because the sanitize_preview option was set to false by default for compatibility with Netlify/Decap CMS. This behaviour is documented and is not a bug, but it’s definitely not secure. In this release, we changed the default value to true, assuming that most users would prefer security over compatibility.
Full Changelog: v0.104.3...v0.105.0
Follow us on Bluesky!
v0.104.3
- Updated the OpenAI translation model from GPT-3.5 Turbo to GPT-4o mini.
Full Changelog: v0.104.2...v0.104.3
Follow us on Bluesky!
v0.104.2
v0.104.1
v0.104.0
⚠️ POTENTIAL BREAKING CHANGE: Sveltia CMS has replaced Moment.js with Day.js for date handling, following Decap CMS. Since Day.js tokens are not 100% compatible with Moment.js tokens, this could be a breaking change in certain cases. Check yourformat,date_formatandtime_formatoptions for DateTime fields, as well as any date formatting in summary string transformations. If you have migrated from Decap CMS 3.1.1 or later, you may already be using Day.js tokens.- The personal access token (PAT) sign-in dialog now displays a link to create a new token with the necessary permissions. This follows a recent improvement by GitHub.
Full Changelog: v0.103.0...v0.104.0
Follow us on Bluesky!
v0.103.0
- It’s now possible to allow users to explicitly edit the entry slug in an initial entry draft by adding
{{fields._slug}}to theslugcollection option. This will display a special slug editor UI that looks like a standard string field, but the value will be used as the entry slug. To make the slug localizable, use{{fields._slug | localize}}. This solves #499 and effectively solves decaporg/decap-cms#377. - Added Anthropic’s Claude Haiku 3.5 model as a new translator option. This solves #438 (reply in thread).
- Bug fixes and improvements.
Full Changelog: v0.102.0...v0.103.0
Follow us on Bluesky!