24 August 2024 - ongoing |--------|----- | Repo | Hash |--------|----- | {rP} | TBD | {rARC} | TBD == Highlights == IMPORTANT: Phorge now requires PHP version 7.2.25+ IMPORTANT: A known DoS exploit against Aphlict requires manual mitigation, even after following normal upgrade flows. See {J6} for details. Additionally, see the Breaking Changes, Database Upgrades, and Proposed Maintenance sections. == General == | Change summary (with main Tag) | Patch | Main Task | |----------------------------------------------------------------------------------|--------|-----------| | #Auth: Send the Phorge URI as User-Agent string in OAuth and GitHub authentication requests (to avoid captchas when using CDNs) | D25758 | T15848 | | #Diffusion: Reduce verbosity of commits in web feeds | D25824 | T15489 | | #Diffusion: Show the disclaimer of {nav icon=times,name=Delete Repository} to all curious users|D25843|T15964| | #Diffusion: Better support of non-English POSIX environments (especially for SVN) | D25846 | T15966 | | #UX: Allow to submit forms in new tab with CTRL+enter |D25773 |T15914| | #UX: Allow zooming pages on mobile |D25827 |T15945| | #UX: Show table of contents on wide screens |D25790, D25873|T15920| | #UX: Strike through archived projects in navigation crumbs in project view |D25774|T15890| | #projects, #maniphest: Strip surrounding whitespace when setting/editing titles |D25835 | | | Tokens: Allow to filter /token/given/ by type of token | D25865 | T15988 | | #spam_mitigation in #People: Limit length of "Real name"|D25841 |T15962| | #spam_mitigation in #Diffusion: Expand identities with //verified// emails by default|D25845|T15965| | #Remarkup: Improve how we match project names |D25838|T15371| | #Policy: Allow setting default edit policy in Phurl app |D25850|T15970| | #Phame: in blog posts, show their code (Jxxx) in the title, only for logged-in users | D25022 | T15050 | | #Herald actions: Allow setting subtype on tasks |D25913|T16022| | #bug_reports: Increased compatibility with PHP 8.1+ | | T15064 | | #bug_reports: Leave fullscreen editor when displaying "Upload File" and "Meme" dialogs | D25764 | T15901 | | #bug_reports: Fix Packages base URI and add a Console | D25881 | | | #bug_reports: Corrected invalid CSS values | D25918, D25919, D25920, D25921, D25922, D25923, D25924, D25925, D25972, D25973 | | | Vendor-prefixed CSS for pre-2013 browsers removed | D25914, D25915, D25916, D25927, D25928, D25929, D25930, D25970, D25971 | | | Update mimemailparser library version for incoming mail to upstream 8.0.4 |D25829 |T15940| | Increased minimum PHP version from 5.2.3 to 7.2.25 | D25815, D25946, D25947, D25948, D25950, D25956, D25957 | T15047 | | #Aphlict: Increased minimum NodeJS ws version from 7.5.0 to 7.5.10 | D25967 | T16037 | == Breaking Changes == * Phorge now requires PHP version 7.2.25 (released November 2019). Phorge previously required PHP version 5.2.3 (released May 2007). The newer version is needed to support PHP version 8.4 which requires syntax introduced in PHP 7.1. See T15047#19338 for details. * Some non-standard CSS needed by older web browsers released before 2014 was removed. == Database Upgrades == NOTE: As usual, follow [[ https://we.phorge.it/book/phorge/article/upgrading/ | Upgrading Phorge ]]. In short, don't forget `./bin/storage upgrade`. | Database Script | Rationale | Details | |-----------------------------------------|-----------|---------| | [[ /source/phorge/browse/master/resources/sql/autopatches/20250227.paste.01.mailkey.php | 20250227.paste.01.mailkey.php ]], [[ /source/phorge/browse/master/resources/sql/autopatches/20250227.paste.02.mailkey.sql | 20250227.paste.02.mailkey.sql ]] | Migrate onboard "mailKey" from Paste table to Metamta_mailproperties | D25900 | == Proposed Maintenance == After the update, to cleanup some potential legacy spam in Diffusion identities (page `/diffusion/identity/`) and especially if you have a Phorge with open registration, we suggest to run this one-shoot command: ```bash ./bin/repository rebuild-identities --all-identities ``` The command is safe to be executed also probably when your Phorge is running and, as usual, will not touch any manually-assigned identity. It will just avoid to propose //unverified// emails as automatic identities (T15965). == Visual Changes == === Form Submission in New Tab === Forms can now be submitted in a new tab with CTRL+enter. Proudly by keyboard hackers. {F2670828} Discussion and credits: T15914 === Show Table of Contents on Large Screens === A wild table of contents now appears on your left, to surf your documents like an hero on wide screens. | Before | After | |--------------------|--------------------| |{F2408032,size=full}|{F2490442,size=full}| Discussion and credits: T15920 === Less Verbose Commits === We save hackers' concentration by not duplicating anymore the commit title from the feed title and its body. | Before | After | |---------------------|---------------------| | {F313288,size=full} | {F313289,size=full} | Discussion and credits: T15489