Repository navigation
Releases: geekitycom/cms
Releases · geekitycom/cms
Release list
v0.50.1
0.50.1 (2026-10-31)
Bug Fixes
- cms: answer asset ranges and conditionals as RFC 9110 describes (8fee789)
- cms: answer every unrecorded avatar key with the placeholder (3aa98c3)
- cms: cap avatar fetches and skip sweep ticks while one runs (0cddde0)
- cms: cap the pixels a derived image is decoded from (63aff93)
- cms: clamp variant widths to the encoder and remember sources that cannot be derived (4bc53b5)
- cms: compress no body over 2 MiB and none for a HEAD request (0696bd3)
- cms: connect public fetches to the address the check resolved (19f2737)
- cms: derive icons only from the site icon, as one shared set (13f7109)
- cms: hold the widest jpeg variant to the encoder's 65500 pixels (468c294)
- cms: keep avatars written while the sweep runs (bff7ba4)
- cms: link site icons only once they have been drawn (c77a3c7)
- cms: mark a derived file immutable only for the bytes it came from (d86ef43)
- cms: notice a deleted font file behind a memoised stylesheet (60fe3ad)
- cms: open asset files when the response body is first read (4b7876a)
- cms: percent-encode each segment of a variant url (fd8dd16)
- cms: plan the variant set before deriving for an unknown name (4cf2956)
- cms: queue a font fetch again after a failed job (c2866a9)
- cms: read a quoted > inside an img tag as part of the attribute (ce9ccaa)
- cms: read asset request paths once and refuse dot and empty segments (0fa2ad6)
- cms: serve a static file only when its real path is inside its root (bf4949b)
- cms: serve only recorded variant and icon names from the derived route (7f88eb8)
- cms: serve uploads outside the upload media types as inert files (33853aa)
- cms: stop serving derived files once their upload is gone (2dacbae)
- cms: treat ipv6 prefixes that embed an ipv4 address as private (1d9d792)
v0.50.0
v0.49.0
v0.48.1
v0.48.0
0.48.0 (2026-10-30)
⚠ BREAKING CHANGES
- @geekity/cms, @geekity/md2gemini and the plugin packages now require Node 26 or newer.
Features
- cms: add the admin Wiki screens and MCP wiki tools (027538e)
- cms: add the wiki base permalink setting (d468060)
- cms: highlight wiki links in the editor and flag missing targets (7b10c0b)
- cms: let pluginSettle set how long the plugins folder must stand still (e2b789d)
- cms: offer signed-in writers a create button on a missing wiki page (2ba253d)
- cms: render [[wiki links]] in posts, pages and wiki pages (18f4895)
- cms: report the port Gemini is listening on now (183320e)
- cms: serve the wiki index at the wiki base (e1aa0aa)
- cms: serve wiki pages under the wiki base (0516637)
Bug Fixes
- cms: call a wiki page a wiki page in the editor's restore offer (a656a94)
- cms: depend on whatever md2gemini the workspace holds (0718ffc)
- cms: print the serving line once the supervisor takes the worker on (a050868)
Performance Improvements
- cms: apply every pending migration in one transaction (87b16b0)
- cms: hash the unknown-user dummy password on first use, not at import (cfeafa4)
- cms: sign the test admin in with a minimum-cost argon2 hash (266f67a)
Build System
- require Node 26, the active LTS, and drop Node 24 (7a7f2d8)