v3.0.0
What's Changed
- Bump version to 3.0.0dev by @DogukanUrker in #179
- Move UI assets and templates to root static and templates by @DogukanUrker in #182
- class based setting control by @DogukanUrker in #183
- Add authors field to pyproject.toml by @DogukanUrker in #186
- Remove secret values from logs by @DogukanUrker in #188
- Fix XSS vulnerabilities and integrate safe Markdown by @DogukanUrker in #189
- Add theme selection feature with multiple themes by @DogukanUrker in #192
- Add abstract support for posts by @DogukanUrker in #191
- Convert category buttons to dropdown by @DogukanUrker in #193
- Update forms to DaisyUI v5 components by @DogukanUrker in #194
- Continue work on DaisyUI on
mainbranch; removeepic/daisyUIbranch by @DogukanUrker in #195 - Migrate flash alerts to DaisyUI v5 by @DogukanUrker in #197
- Implement pagination for posts, admin sections and search by @DogukanUrker in #196
- refactor post editor name by @DogukanUrker in #198
- Fix: Update Tamga init parameters to match v1.4.0 by @ancientlaw0 in #201
- feat: add Hindi translation by @ancientlaw0 in #203
- EPIC:
camelCase-->snake_caseby @DogukanUrker in #199 - migrate from raw sqlite to sqlalchemy by @DogukanUrker in #210
- replace and restructure agent documentation by @DogukanUrker in #211
- remove unused dependencies by @DogukanUrker in #212
- feat: migrate to daisyui by @DogukanUrker in #213
- ref: remove recaptcha feature completely by @DogukanUrker in #219
- feat(tests): add tests for auth flow by @DogukanUrker in #220
- feat: create .precommit file by @DogukanUrker in #224
- feat: add makefile for standardized development commands by @DogukanUrker in #226
- add .env file support for application settings by @DogukanUrker in #229
- feat: add docker support by @DogukanUrker in #230
- Bump playwright from 1.57.0 to 1.58.0 in /app by @dependabot[bot] in #231
- Bump ruff from 0.14.14 to 0.15.0 in /app by @dependabot[bot] in #232
- Fix broken post URL helper and remove dead code by @DogukanUrker in #233
- fix: scope email verification code to the user session by @GoodVaibhs in #255
- fix: enforce CreatePostForm validation on post creation by @GoodVaibhs in #257
- fix: redirect anonymous commenters to login instead of crashing by @GoodVaibhs in #256
- Fix IDOR in post/comment deletion, add admin authorization, disable debug by default by @saaa99999999 in #252
- Bump requests from 2.32.5 to 2.33.0 in /app in the uv group across 1 directory by @dependabot[bot] in #248
- Bump markdown2 from 2.5.4 to 2.5.5 in /app by @dependabot[bot] in #246
- [Security] Fix 6 vulnerabilities: Gmail Credentials, Default Admin, Auth Bypass, Open Redirect (CWE-798, CWE-1392, CWE-862, CWE-601) by @saaa99999999 in #251
- chore(deps): consolidate dependency updates by @DogukanUrker in #263
- feat(tests): improve test coverage by @DogukanUrker in #234
- fix(#261): safe session language access by @DogukanUrker in #268
- fix(#265): use invalid_credentials translation key for auth failures by @DogukanUrker in #270
- fix(test): resolve parallel E2E database locks and timeouts by @DogukanUrker in #271
- fix: address multiple security vulnerabilities by @DogukanUrker in #273
- test: comprehensive e2e test coverage for remaining flows by @DogukanUrker in #274
New Contributors
- @ancientlaw0 made their first contribution in #201
- @GoodVaibhs made their first contribution in #255
- @saaa99999999 made their first contribution in #252
Full Changelog: 2.8.1...3.0.0