The 2.5 series brings in file inclusion in Muse documents, which is detailed in its own page.
There are no upgrade or backcompatibility issues.
Fix /api/latest missing critical key
Fix /p/xxx sitemap and robots
Add experimental routes p/xxx mapping to repo/site_files/public/xxx to
build arbitrary custom pages.
add /api/latest exposing the title info as JSON
Deny access to git pull logs to anonymous users. This fixes a potential information disclosure (git logs) when using the pulling with a system user. [SECURITY]
Fix theme-switcher persistence for non-logged in (reported by
anelki on the #amusewiki channel)
Fix crash on debian package when temporary process is gone (GH#373)
Increase paper size values
Prevent db insertion crash on #uid too long (GH#376)
New restricted option preventing redirection on aliases to canonical (GH#377)
New restricted option to inject nginx configuration snippets into site stanza (GH#378)
Theme switcher (dark/light toggler) (GH#379)
Display the fail details on compilation failure (GH#371)
Support arbitrary margin in the bookbuilder (GH#372)
Update texlive install script for TeXlive! 2021
[SECURITY] When pulling a remote git, remove symlinks pointing outside the tree. This is a security patch against potential symlink-based attacks coming from remote repository, tricking the application to access files outside the site root.
To be exploited, the flaw, fixed in this release, requires a malicious or naive site administrator pulling from a malicious repository.
Serve symlinks if they point inside the tree.
New option to toggle the display of latest entries on special pages
Fix bug with links which URI doesn't understand (reported by
anelki on the #amusewiki channel)
Do not rely on Freenode for the webchat. Instead, make the iframe
url editable. Nothing by default. The iframe with the webchat
didn't seem to work anyway. At some point it stopped working. If
you set a webchat url, the link to the page with the embedded
iframe will always appear in the dropdown menu. On the other hand,
the default with the #amusewiki channel has been removed. Site
admins need to find and set one.
Update i18n strings
AMW-Meta: Implement OPDS
Update i18n: el
Refresh the shared repo's hook when the site is reconfigured
Add Greek I18N
Do not trigger Xapian suggestions if not enabled (GH#366)
Add support for images in the API
Add option to keep the layout always fluid
Update I18N: RU (thanks to @link2xt)
Carry on ETag and X-Robots-Tag when serving static files from nginx
Return 410 when the text is deleted without a redirection.
Add /remote/edit/library/xxx and /remote/edit/special/xxx to API
Support sc and sf inline tags via new Text::Amuse
Store and display isbn, publisher, series info, copyright info if provided by the muse document. These fields are documented and display in the generated formats, but were not in the web app.
Save instructions to compile a format into the site repo under bin
Add function to check mailing
Add new imposition schema duplex2up (2up variant)
Make Authen::SASL a requirement (for SMTP)
Fix an old bug with the amusewiki restart command not killing the children.
Improve logging for the /git route
Improve sorting for revisions page
Add pagination to OPDS category routes (and added custom categories)
Cache /opds/crawlable which was too slow
Updated I18N: PL
Updated i18n: BG
Fix support for BG.
Updated i18n (added BG)
Fix access permissions to whitelisted IPs to /git and /mirror
Support file inclusion GH#53)