6102 Commits
Author SHA1 Message Date
Dan Brown 31d94dd8b9 Updated version and assets for release v26.09.1 v26.09.1 2026-09-29 15:22:59 +01:00
Dan Brown e6535531b9 Merge branch 'development' into release 2026-09-29 15:11:44 +01:00
Dan Brown 066240e833 Updated translator & dependency attribution before release v26.09.1 2026-09-29 15:11:25 +01:00
Dan Brown d9989d7b50 ZIP Imports: Removed redundant fallback values, as per phpstan 2026-09-29 15:03:08 +01:00
Dan Brown aa6f42e929 Deps: Updated PHP package versions 2026-09-29 14:59:24 +01:00
Dan Brown ea7113aff3 Merge pull request 'Updated translations with latest changes from Crowdin' (#6229) from l10n_development into development
Reviewed-on: https://codeberg.org/bookstack/bookstack/pulls/6229
2026-09-29 15:58:11 +02:00
Dan Brown 849ed6f1ec ZIP Imports: Validated ZIP contents actual size against reported size
When uncompressing file data from a ZIP, limits are now placed on the
amount of bytes read, based on the reported file sizes.
For files, we then check and error if the read size is over the reported
uncompressed file size in the ZIP, instead of relying on the reported
ZIP size from metadata.
Added test to cover.
2026-09-29 14:44:07 +01:00
Crowdin Bot 4cab4faf19 New Crowdin translations by GitHub Action 2026-09-29 04:31:13 +00:00
Dan Brown a09aa8aac6 API: Fixed attachment list showing items on deleted pages
List endpoint would show attachments for pages which were in the recycle
bin. This adds a deleted_at filter for related pages to the core
permission application query.
Added test to cover.

For #6194
2026-09-28 16:14:06 +01:00
Dan Brown 89978409cf Chapter Conversion: Fixed page cached permissions not being rebuilt
Fixes scenario where page access permissions are changed due to a change
of applied permission scope (where a parent book permissions were
active, but would no longer be post-promotion), but the page visibility
permissions were not being rebuilt.
Added test to cover.

Fixes #6226
2026-09-28 14:38:27 +01:00
Dan Brown 9f2c10cb49 Merge branch 'assyrus-favolo-fix-audit-display-timezone' into development 2026-09-28 14:09:29 +01:00
Dan Brown b5638a1c72 Updated version and assets for release v26.09 v26.09 2026-09-24 17:26:48 +01:00
Dan Brown 73da371f01 Merge branch 'development' into release 2026-09-24 17:24:56 +01:00
Dan Brown 1633b3ab28 Merge branch 'development' of ssh://codeberg.org/bookstack/bookstack into development 2026-09-24 17:14:27 +01:00
Dan Brown f31273a10d Testing: Updated test to align with view block theme system changes 2026-09-24 17:13:36 +01:00
Dan Brown 0e6e0b73a5 Merge pull request 'Update translations with latest Crowdin changes' (#6225) from l10n_development into development
Reviewed-on: https://codeberg.org/bookstack/bookstack/pulls/6225
2026-09-24 18:02:26 +02:00
Dan Brown 27f35a3895 Meta: Updated PHP packages, translator list, and deps licenses 2026-09-24 16:49:46 +01:00
Dan Brown 769c198f41 View blocks: Updated dev doc, fixed duplicate unused scenario
Fixed issue where the 'unused' location could be duplicated if a block
is in 'unused' by default, resulting in disappearing block section
options when attempting to configure in the UI.
2026-09-24 16:36:17 +01:00
Crowdin Bot 84299ffeac New Crowdin translations by GitHub Action 2026-09-24 04:31:32 +00:00
Dan Brown 97fe7cca9d View Blocks: Added base implementation class
Also removed unused imports from app/ classes.
2026-09-21 13:03:18 +01:00
Dan Brown cf133540b1 Search API: Review of #6182, to add page/book search API endpoints
- Updated examples to ensure they show results of the same page/book.
- Added method to controller to share the same request data logic.
- Tweaked tests.
2026-09-17 13:18:12 +01:00
Dan Brown f791ce0eef Merge branch 'development' into enableservices-api-search-book-chapter-endpoints 2026-09-17 12:39:41 +01:00
Dan Brown 47313ddc8f Content Pointer: Change insert location based on selection dir
Updates the content pointer behaviour so it's inserted before/after the
target, instead of just before, depending on selection direction, so it
can stay out of the selection range.
Positioning is absolute relative to a parent content so visually should
be the same result as before.

For #6214
2026-09-16 17:53:48 +01:00
Dan Brown 82b9472554 A11y: Review of #6173, ensure checkboxes are labelled
This specifically alters the checkbox label implementation to use the
existing checkbox label instead of always adding an extra label to the
custom checkbox element itself, unless they diverge (like for permission
checkboxes).
2026-09-15 19:20:14 +01:00
Dan Brown aa44f3508d Merge branch 'MHameed-improve-checkbox-accessibility' into development 2026-09-15 18:05:24 +01:00
Dan Brown b5641aa00d Testing: Updated app key test
To be better contained prevent impacting of other tests
2026-09-15 12:20:37 +01:00
Dan Brown 7782ea00df A11y: Improved alt tag usage for header logo
Set to blank if text is already part of the header, and the app name if
the name is not shown in the header.

For #6171
References:
https://webaim.org/techniques/alttext/
https://www.scottohara.me/blog/2018/05/05/hidden-vs-none.html
2026-09-15 12:07:00 +01:00
Dan Brown 12f1b7ac71 Deps: Updated JS package versions 2026-09-15 04:05:46 +01:00
Dan Brown 5672515482 Maintenance: Addressed new phpstan issues 2026-09-15 04:02:37 +01:00
Dan Brown 278b94dd34 Merge branch 'v26-05-branch' into development 2026-09-15 03:27:23 +01:00
Dan Brown 771a2d0492 Updated version and assets for release v26.05.5 v26.05.5 2026-09-14 14:58:37 +01:00
Dan Brown 43b485a0ad Merge branch 'v26-05-branch' into release 2026-09-14 14:57:25 +01:00
Dan Brown 7523ba96c6 Deps: Updated PHP package versions 2026-09-14 14:44:55 +01:00
Dan Brown 5969afcbdb Merge pull request 'Lexical fixes for v26.09' (#6207) from lexical_sept_2026 into development
Reviewed-on: https://codeberg.org/bookstack/bookstack/pulls/6207
2026-09-13 23:12:56 +02:00
Dan Brown ca205e3ed5 Config: Remove default app key value
To avoid scenarios where an instance specific app key is not set, and
therefore avoids the potential of instances using a known key value.

For #6210
2026-09-13 22:03:30 +01:00
Dan Brown 0763d7df30 Social Login: Fixed queries unscoped to driver
Prevents the same IDs from different systems leading to access of other
accounts, and allows registration of same ids under different services.

Thanks to Google and Ada Logics for discovery and reporting.
2026-09-13 17:27:01 +01:00
Dan Brown 2c22c3bcb8 Sponsors: Added BookHost 2026-09-12 23:35:17 +01:00
Dan Brown 1498c2fa35 JS: Fixed failing test after lexical changes 2026-09-09 10:18:14 +01:00
Dan Brown 17f5e9bfa7 Lexical: Fixed node resizer not reacting to content size changes 2026-09-09 10:10:48 +01:00
Dan Brown b869c6a78e Lexical: Prevented link entity selector overwriting existing link text
It now retains existing input where set.
This also updates the modal click handling with an extra click source
check to handle cases where a mousedown event is not emitted, like on
select list dismissals.
2026-09-08 00:28:47 +01:00
Dan Brown 1902a291b3 Lexical: Fixed ability to cut/copy/drag+drop details nodes
Required updating the selection management to ensure they are selected
upon mousedown, for when a drag operation starts.
Also added draggable management, which we have to avoid having there
when open unless a drag is started, otherwise contents are not editable
in chromium browsers.
2026-09-07 19:37:26 +01:00
Dan Brown 88e7748621 Lexical: Set details node as a shadow root
Fixes issues with list creation inside details elements.
2026-09-07 17:11:03 +01:00
Dan Brown ff9755a32d Lexical: Fixed modals closing on clicks starting from within modals
Specifically on chromium browsers. Firefox was fine before.
Changes tested across both.
2026-09-07 16:13:09 +01:00
Dan Brown bb76d14f82 Lexical: Updated pop up form fields to be wider
Better matches the old editor, and makes long input data like URLs more
usable.
2026-09-07 15:56:20 +01:00
Dan Brown e08f11d6ff Lexical: Added clipboard/drag handling for single nodes
Fixes behaviour when using cut/copy/drag for items like images or code
blocks.

Also updates history handling to not ignore additions where original
content remains unchanged.
2026-09-07 12:24:28 +01:00
Dan Brown f8c2ada021 Lexical: Fixed difference in line break in-editor & on export
Aligned the linebreak exportdom behaviour to align with how the
reconciler displays line breaks in the editor, by adding an extra line
break to each series of line breaks, so they're now visually the same
across editor and export.
2026-09-06 19:19:44 +01:00
Dan Brown df40d8c08a Lexical: Made callout formatting in lists more reliable
Updates the callout toggle action to consider callouts in lists (and
other callouts) when making changes.
2026-09-05 18:52:49 +01:00
Dan Brown 9b56295dfd Lexical: Fixed formatting on reverse selection ranges in lists
Block formatting on range selection could break when made from bottom to
top, due to using the first selected for insertion position instead of
the first in the doc structure.
2026-09-05 18:15:57 +01:00
Dan Brown e573d2458b Lexical: Added enter/shift+enter handling for images in list items
Added testing to cover
2026-09-04 15:16:01 +01:00
Dan Brown 74e271c639 Lexical: Added missing code block direction handling
Adds some base text direction handling to decorator nodes which can be
used by nodes where it makes sense, like for the code block node.
2026-09-03 19:18:07 +01:00