Skip to content

Latch v0.3.0.12

Choose a tag to compare

@YeOK YeOK released this 04 Jul 19:38

Latch v0.3.0.12

Security hardening, OSS test gates, phpBB import v1, and documentation updates.

Added

  • phpBB import (Phase 6 v1)bin/latch import phpbb with --dry-run / --confirm (JSON bundle) and --export --from-mysql= (requires pdo_mysql)
  • Phase 5 test gatesbin/latch test --smoke and test --security with optional live HTTP probes (--url=)
  • Outbound URL guard — webhook SSRF mitigation
  • Plugin enable gate — audit warnings block enable
  • MARKUP.md — post markup author reference

Fixed

  • OIDC registration respects signup limits when registration is disabled
  • md-import + image-upload BodyGuard fixes
  • md-import admin form reliability

Changed

  • Locale switch via POST /locale with CSRF
  • TOTP enrollment requires security.encryption_key
  • CSRF rotation on login and sensitive mutations

Install

sha256sum -c SHA256SUMS
tar -xzf latch-0.3.0.12.tar.gz && cd latch-0.3.0.12-stage/source
composer install --no-dev
php bin/latch install --url=https://forum.example.com --name="My Forum"

Upgrade: extract over your install tree and run bash scripts/update.sh from the stage root.

Full changelog: CHANGELOG.md