Page MenuHomePhorge

2025.18
Updated TodayPublic

24 August 2024 - 2 May 2025

NOTE: This is a Release Candidate, not yet officially stable.

Highlights

IMPORTANT: Phorge now requires PHP version 7.2.25+
IMPORTANT: A known DoS exploit against Aphlict requires manual mitigation, even after following normal upgrade flows. See Blog Post: DoS attack against Aphlict for details.

Additionally, see the Breaking Changes, Database Upgrades, and Proposed Maintenance sections.

General

Change summary (with main Tag)PatchMain Task
Auth: Send the Phorge URI as User-Agent string in OAuth and GitHub authentication requests (to avoid captchas when using CDNs)D25758T15848
Diffusion: Reduce verbosity of commits in web feedsD25824T15489
Diffusion: Show the disclaimer of Delete Repository to all curious usersD25843T15964
Diffusion: Better support of non-English POSIX environments (especially for SVN)D25846T15966
UX: Allow to submit forms in new tab with CTRL+enterD25773T15914
UX: Allow zooming pages on mobileD25827T15945
UX: Show table of contents on wide screensD25790, D25873T15920
UX: Strike through archived projects in navigation crumbs in project viewD25774T15890
Projects, Maniphest: Strip surrounding whitespace when setting/editing titlesD25835
Tokens: Allow to filter /token/given/ by type of tokenD25865T15988
Spam mitigation in People: Limit length of "Real name"D25841T15962
Spam mitigation in Diffusion: Expand identities with verified emails by defaultD25845T15965
Remarkup: Improve how we match project namesD25838T15371
Policy: Allow setting default edit policy in Phurl appD25850T15970
Phame: in blog posts, show their code (Jxxx) in the title, only for logged-in usersD25022T15050
Herald actions: Allow setting subtype on tasksD25913T16022
Bug Reports: Increased compatibility with PHP 8.1+T15064
Bug Reports: Leave fullscreen editor when displaying "Upload File" and "Meme" dialogsD25764T15901
Bug Reports: Fix Packages base URI and add a ConsoleD25881
Bug Reports: Corrected invalid CSS valuesD25918, D25919, D25920, D25921, D25922, D25923, D25924, D25925, D25972, D25973
Vendor-prefixed CSS for pre-2013 browsers removedD25914, D25915, D25916, D25927, D25928, D25929, D25930, D25970, D25971
Update mimemailparser library version for incoming mail to upstream 8.0.4D25829T15940
Increased minimum PHP version from 5.2.3 to 7.2.25D25815, D25946, D25947, D25948, D25950, D25956, D25957T15047
Aphlict: Increased minimum NodeJS ws version from 7.5.0 to 7.5.10D25967T16037

Breaking Changes

  • Phorge now requires PHP version 7.2.25 (released November 2019). Phorge previously required PHP version 5.2.3 (released May 2007). The newer version is needed to support PHP version 8.4 which requires syntax introduced in PHP 7.1. See T15047#19338 for details.
  • Some non-standard CSS needed by older web browsers released before 2014 was removed.

Database Upgrades

NOTE: As usual, follow Upgrading Phorge. In short, don't forget ./bin/storage upgrade.
Database ScriptRationaleDetails
20250227.paste.01.mailkey.php, 20250227.paste.02.mailkey.sqlMigrate onboard "mailKey" from Paste table to Metamta_mailpropertiesD25900

Proposed Maintenance

After the update, to cleanup some potential legacy spam in Diffusion identities (page /diffusion/identity/) and especially if you have a Phorge with open registration, we suggest to run this one-shoot command:

./bin/repository rebuild-identities --all-identities

The command is safe to be executed also probably when your Phorge is running and, as usual, will not touch any manually-assigned identity. It will just avoid to propose unverified emails as automatic identities (T15965).

Visual Changes

Form Submission in New Tab

Forms can now be submitted in a new tab with CTRL+enter. Proudly by keyboard hackers.

Discussion and credits: T15914

Show Table of Contents on Large Screens

A wild table of contents now appears on your left, to surf your documents like an hero on wide screens.

BeforeAfter
image.png (762×1 px, 155 KB)
image.png (862×1 px, 267 KB)

Discussion and credits: T15920

Less Verbose Commits

We save hackers' concentration by not duplicating anymore the commit title from the feed title and its body.

BeforeAfter
Diffusion feed before.png (307×718 px, 24 KB)
Diffusion feed after.png (307×718 px, 21 KB)

Discussion and credits: T15489

Tags
None
Referenced Files
F313289: Diffusion feed after.png
Fri, May 2, 11:35
F313288: Diffusion feed before.png
Fri, May 2, 11:35
F2490442: image.png
Fri, May 2, 11:35
File Not Attached
F2408032: image.png
Fri, May 2, 11:35
File Not Attached
F2670828: meow2.mp4
Fri, May 2, 11:35
Subscribers
None
Last Author
avivey
Last Edited
Fri, May 2, 11:35

Event Timeline

avivey changed the title from Next Up to 2025.18.Fri, May 2, 11:35
avivey edited the content of this document. (Show Details)