v2.1.0 Form Logic

New

• Form logic. Questions can have rules. A rule checks answers to other questions (equals, not equals, contains, does not contain, lower than, greater than; joined with and/or) and then shows or hides the question, or jumps to another one. (#176)
• Richer block text. Headings, lists, inline code and images (by URL) in block text. The completion page is rich text too. (#171)
• Docs in the repo. The documentation site now lives in docs/. (#188)

Security

• Fixes access checks between teams. A logged-in user could change form data of other teams through the API. All installs should update. (#189)
• Updates Laravel to 11.57 and Symfony to the latest 6.4/7.4 patch releases, including the fix for webhook requests to internal addresses. (#192)

Changes you may notice

• A member removed from a team loses access to the forms they created in that team. Submission mails then go to the team owner.
• New forms, questions and answers get a random 16-character id. Existing ids and links keep working.
• Importing a template keeps the form's own avatar and background images.
• The answer id of a question must be unique within its form, and use only letters, numbers, - and _ (max 36 characters).

Upgrade

Pull the new image and restart. Migrations run on start.

Thanks to @tonghuaroot for reporting a security issue.

Full Changelog: v2.0.1...v2.1.0