Improved
v0.24.0-rc2b
[!WARNING] This is an early release candidate for testing purposes. There are known rough edges in the team management flow and notifications. Not recommended for production deployments.
[!NOTE] This is a re-release of v0.24.0-rc2 which was built off of main instead of develop 😩
What's Changed
Features
- Add authentication-required mode with dedicated route guards (#1694)
- New configuration item
allowed_signup_domains(#1936) - @david-garcia-garcia - Autoload all available languages (#1928)
- Add default homepage mode (#2012)
- Backport homepage mode functionality (#2010)
- Re-add Incoming Secrets feature (#2016)
- Settings migration infrastructure for v0.23 (#2075)
- Add Git JSON merge driver for locale files (#2080)
- Add guest routes for anonymous API access (#2191)
- Add Russian language translates (#2130) - @kh0mka
Fixes
- Show disabled homepage when UI explicitly disabled (#1692)
- Fix build issues and ESLint configuration (#1708)
- Fix password generation config key handling (#1771)
- Fix class attribute formatting in MastHead.vue (#1840) - @jhob101
- Update custom logo MastHead styles for site name (#1849) - @jhob101
- Remove social metadata for custom domains (#1927)
- Fix CIDR privacy blocking logic in homepage mode (#2011)
- Remove the incomplete incoming secrets feature (#2017)
- Fix event limit lookup (#2112)
- fix/rubocop (#2077)
- Fix OCI workflow and add tmate debugging support (#2078)
- Fix for TTL above 7 days (#2393)
Improvements
- Improve README UX and create detailed INSTALL guide (#1696)
- Improve passphrase validation and UI layout (#1697)
- Make settings view in colonel clearly read-only (#1704)
- Remove external dependency from vite build (#1715)
- Add branch information note to readme (#1824)
- Update renovate config w/ better docs (#1830)
- Add test coverage for chain_length == trusted_proxy_depth scenario (#2040)
- Include mail validation config in boot log banner (#1941)
- Set up Ruby 3.4.7 SessionStart hook (#1938)
- Update workflow triggers to include 'main' branch (#2076)
- Add note about intermittent claude-review failure (#2376)
Infrastructure/CI
- Backport latest OCI build workflows to rel/0.22 (#1710)
- Direct copy of claude workflows from develop (#1853)
- Sync Claude workflow files from practical-gagarin branch (#2058)
- Update gitignore files from develop (#1829, #1996)
- Merge dependency updates to main (#1826)
New Contributors
- @jhob101 (#1840)
- @david-garcia-garcia (#1936)
- @kh0mka (#2130)
Dependency Updates
View list
Security
- vue-i18n to v11.1.10 (#1823)
- vite to v5.4.21 (#1832)
- rack from 3.2.1 to 3.2.2 (#1794)
- rexml from 3.3.9 to 3.4.2 (#1827)
- js-yaml from 3.14.1 to 3.14.2 (#1966)
Docker Images
- redis:7.4-bookworm (#1870, #2051, #2195, #2346)
- ruby:3.4-slim-bookworm (#1871, #1788, #2049, #2052, #2192, #2196, #2250, #2344, #2347)
- Node.js (#1920, #2050, #2194, #2345)
GitHub Actions
- actions/checkout (#1838, #2048, #2102)
- github/codeql-action (#1858, #1980, #2065, #2139, #2193)
- pnpm/action-setup (#1859, #2140, #2200)
- mxschmitt/action-tmate (#1841)
JavaScript/TypeScript
- happy-dom (#1799, #1934, #2122)
- axios to v1.12.2 (#2041)
- nanoid to v5.1.6 (#2042)
- postcss to v8.5.6 (#2043)
- rollup to v4.40.2 (#2103)
- tailwindcss to v3.4.18, v3.4.19 (#2104, #2198)
- esbuild to v0.25.12, v0.27.2 (#1921, #2296)
- marked to v15.0.12 (#2066)
- pinia to v3.0.4 (#2070)
- zod to v3.24.4 (#2126)
- vue monorepo to v3.5.25, v3.5.26 (#2127, #2254)
- @babel/helpers (#1855, #2110)
- @intlify/core, @intlify/devtools-types (#1856, #1909, #2232, #2348)
- @codemirror/state to v6.5.3 (#2316)
- CodeMirror (#1860)
- vue-codemirror6 to v1.3.22 (#2106)
- vue-i18n to v11.1.12 (#2107)
- vue-tsc to v2.2.12 (#2108)
- focus-trap to v7.6.6 (#1933)
- dompurify to v3.2.7 (#1915)
- autoprefixer to v10.4.22, v10.4.23 (#1981, #2197)
- prettier-plugin-tailwindcss to v0.6.14 (#2044)
- @tailwindcss/typography to v0.5.19 (#1911)
- @tailwindcss/forms to v0.5.11 (#2251)
- eslint-import-resolver-typescript (#1917, #2297)
- eslint-plugin-tailwindcss to v3.18.2 (#1918)
- eslint-config-prettier to v10.1.8 (#1916)
- eslint-plugin-vue to v10.6.2 (#2300)
- @eslint/js (#2137, #2186, #2231)
- @types/node (#2142, #2238, #2294, #2391)
- @tsconfig/node22 to v22.0.5 (#1995)
- @tsconfig/node24 (#2249, #2315)
- @pinia/testing to v1.0.3 (#2141)
- @sentry/vite-plugin to v3.6.1 (#2237)
- @playwright/test (#2233, #2235)
- vite-plugin-checker to v0.9.3 (#2105)
- zod-validation-error to v3.4.1 (#2109)
- marked-highlight to v2.2.3 (#2067)
- codemirror to v6.0.2 (#1914)
Ruby
- familia to v1.2.3 (#1932)
- httparty to v0.23.2 (#1982)
- irb to v1.15.3 (#1983)
- benchmark to v0.4.1 (#1913)
- puma to v6.6.1 (#2123)
- rack to v2.2.21 (#2124)
- rubocop-thread_safety to v0.7.3 (#2125)
- stringio to v3.1.9 (#2144)
- faker to v3.5.3 (#2143)
- debug to v1.11.1 (#2252)
- net-imap to v0.5.12, v0.5.13 (#2068, #2253)
- ostruct to v0.6.3 (#2069)
Bundled Updates
- npm_and_yarn group with 4 updates (#1854)
Full Changelog: https://github.com/onetimesecret/onetimesecret/compare/v0.24.0-rc1...v0.24.0-rc2