6.4.0

Changes

Passkeys in Hypha! Set WEBAUTHN_RP_ID to activate in production, see settings/base.py.

You want to permanently clear out old submission but keep some stats about them? Set SUBMISSION_ANONYMIZATION_ENABLED to true.

🚀 Features

• Add support for passkeys to Hypha (#4772) @frjo
• Add author updated feature to submission (#4380) @sandeepsajan0
• Add anonymizing of user applications feature (#4702) @wes-otf

⚙️ Enhancements

• Replace author Edit button with new window link icon (#4856) @wes-otf
• Secure cookies on production, check next redirect, permission checks for partials (#4843) @frjo
• Add missing translated strings (#4789) @frjo
• Align submission and project detail pages styling (#4820) @frjo
• Move strings from js to data attributes so they become translatable. (#4813) @frjo

🐛 Bug Fixes

• Retrieve reviewforms by sort_order explicitly. (#4859) @frjo
• Do not use custom password field template for wagtail admin. (#4845) @frjo
• Added upload (and debug) to whitelisted URLs (#4858) @wes-otf
• Bug fix for wagtail admin user save (#4848) @frjo
• Fix render of MultiInputCharFieldBlock when no value set so it does not leave tags unclosed (#4814) @frjo

🔧 Maintenance

• Python updates 2026-06-01. Bump Hypha version. (#4860) @frjo
• Memory use improvements (#4837) @frjo
• Python updates 2026-05-20. (#4855) @frjo
• Update uv-lock after adding setting exclude-newer. (#4850) @frjo
• Replace pre-commit/action that uses outdated node version with direct install and call of pre-commit (#4849) @frjo
• Set a min-release-age to 3 days for both npm and uv. (#4846) @frjo
• Python updates 2026-05-09. (#4842) @frjo
• Bump fast-uri from 3.0.6 to 3.1.2 (#4838) @dependabot[bot]
• Bump @babel/plugin-transform-modules-systemjs from 7.29.0 to 7.29.4 (#4840) @dependabot[bot]
• Remove old django-heroku and scout-apm (#4836) @frjo
• Python updates 2026-05-05. (#4835) @frjo
• Bump postcss from 8.5.6 to 8.5.13 (#4834) @dependabot[bot]
• The clear_cache command is part of django-extensions so move it back to production (#4833) @frjo
• Permission improvements (#4831) @frjo
• Removed a number of unused or very sparsly used packages. (#4830) @frjo
• Update locales. (#4829) @frjo
• Python updates 2026-04-22. (#4828) @frjo
• Retire jQuery (#4818) @frjo
• Updated pre-commit conf. (#4825) @frjo
• Remove some unused sass styles (#4811) @frjo
• Python updates 2026-04-16. (#4823) @frjo
• Update requirements files. (#4819) @frjo
• Switch from awesome-pages v2 to awesome-nav v3 (renamed). (#4812) @frjo
• Python updates 2026-04-14. (#4817) @frjo

📜 Documentation

• Update docs production/stand-alone to use uv etc. (#4847) @frjo

Contributors to this release: @dependabot[bot], @frjo, @sandeepsajan0, @wes-otf and dependabot[bot]

Full changelog: v6.3.0...v6.4.0