What's changed
The most important new features in this version include:
- Several security hardenings around the settings that may be supplied in the app's URL and around archive source verification
- Fix to the Library fallback for older browsers
- Accessibility support added throughout
- JQuery and Bootstrap's JavaScript bundle have been removed entirely (saving some 150KB of minified JavaScript)
- Fix for clearing the app cache on reset
- "Bypass AppCache" option is now called "Developer Mode"
Detail is given per interim update below (those updates were pushed only to the browser-extension PWA).
Log of PRs since v4.3.0
- Fix Windows CI: Install IEDriver explicitly, disable Selenium Manager by @Jaifroid with @Copilot in #1400
- Fix error detecting availability of PWA implementation by @Jaifroid in #1399
- Bump qs from 6.14.0 to 6.14.1 by @dependabot[bot] in #1406
- Rename SSH key secret by @kelson42 in #1407
- Fix breaking IE11 Ray Charles tests by @Jaifroid in #1415
- update codeql to v4 in actions by @adit-0132 in #1412
- Bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #1416
- Bump rollup from 4.37.0 to 4.59.0 by @dependabot[bot] in #1417
- Bump minimatch by @dependabot[bot] in #1418
- Fix typo in URI param by @infinityanant in #1420
- fix: prevent white flash on startup by pre-applying dark theme by @infinityanant in #1410
- Bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in #1425
- Bump picomatch by @dependabot[bot] in #1427
- Bump vite from 6.4.1 to 6.4.2 by @dependabot[bot] in #1430
- Bump follow-redirects from 1.15.9 to 1.16.0 by @dependabot[bot] in #1435
- Bump postcss from 8.5.3 to 8.5.12 by @dependabot[bot] in #1438
- Update release/nightly uploads for new destination by @rgaudin in #1436
- Fix : Properly clear App Cache and IndexedDB on Resetfix reset btn to clear cache #1136 by @infinityanant in #1413
- Bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4 by @dependabot[bot] in #1441
- Allow more permissive CSP to frame kiwix.org sites in library iframe by @Jaifroid in #1443
- Bump qs from 6.14.2 to 6.15.2 by @dependabot[bot] in #1445
- Bump tmp from 0.2.5 to 0.2.7 by @dependabot[bot] in #1446
- Bump esbuild, @vitejs/plugin-legacy and vite by @dependabot[bot] in #1447
- Bump form-data from 4.0.4 to 4.0.6 by @dependabot[bot] in #1448
- Bump uuid and nyc by @dependabot[bot] in #1450
- Add Docker Compose configuration and documentation by @subhrat123 in #1452
- Bump postcss from 8.5.15 to 8.5.25 by @dependabot[bot] in #1454
- Bump ws from 8.18.3 to 8.21.1 by @dependabot[bot] in #1455
- Update javascript-libzim binaries to v0.95 by @Jaifroid in #1458
- Remove jQuery completely including Bootstrap dependency, and add a11y features #1233 by @Jaifroid in #1460
- Fix fallback library URL for old browsers by @Jaifroid in #1463
- Restrict and validate the parameters that can be set from the querystring #1466 by @Jaifroid in #1467
- Fix contentInjectionMode handling: trust gate in ServiceWorkerLocal mode, and value validation #1469 by @Jaifroid in #1470
- Fix ServiceWorker-unavailable boot loop, and unblock "Bypass AppCache" in Restricted mode #1465 by @Jaifroid in #1472
- Rename "Bypass AppCache" option to "Developer Mode" #1459 by @Jaifroid in #1473
- Follow HTML redirect stubs in Restricted mode #1405 by @Jaifroid in #1475
- Fix flaky Gutenberg author search tests by @soumyajoshi009 in #1471
- Pin workflow actions to immutable refs, and add Dependabot for the actions ecosystem #1478 by @Jaifroid in #1479
- Bump: Bump openzim/docker-publish-action from 8 to 10 by @dependabot[bot] in #1480
- Update CHANGELOG for v4.4.0 by @Jaifroid in #1477
New Contributors
- @Jaifroid with @Copilot made their first contribution in #1400
- @adit-0132 made their first contribution in #1412
- @infinityanant made their first contribution in #1420
- @subhrat123 made their first contribution in #1452
- @soumyajoshi009 made their first contribution in #1471
Full Changelog: 4.3.0...4.4.0
Contributors
rgaudin, kelson42, and 6 other contributors