Apostrophe 3.14.0

[agilbert]

Hi everyone,

Today we published the latest Apostrophe release to npm. This release includes a collection of fixes and new features for both Apostrophe 3 and Apostrophe 2, including:

• A new module for syncing content between environments (currently only working for A2)
• A new default caching behavior for A3 that significantly optimizes performance for handling multiple simultaneous requests.

Meanwhile, the primary focus for our team right now is on a collection of new work to improve performance and stability of the core Apostrophe platform.

On the performance side, we have been working through a collection of enhancements related to caching and the optimization of front-end asset bundles.

On the stability side, we are working on a new module to streamline the creation of browser-based functional tests for Apostrophe projects. We're going to be implementing this for our own internal QA purposes and we're excited to see how it can support automated testing for your own projects.

We are looking forward to sharing the outcomes of this work over the course of the next few weeks. For the detailed notes of today's release, read on below 📖 🙇

Apostrophe 3.14.0

Adds

• To reduce complications for those implementing caching strategies, the CSRF protection cookie now contains a simple constant string, and is not recorded in req.session. This is acceptable because the real purpose of the CSRF check is simply to verify that the browser has sent the cookie at all, which it will not allow a cross-origin script to do.
• As a result of the above, a session cookie is not generated and sent at all unless req.session is actually used or a user logs in. Again, this reduces complications for those implementing caching strategies.
• When logging out, the session cookie is now cleared in the browser. Formerly the session was destroyed on the server side only, which was sufficient for security purposes but could create caching issues.
• Uses express-cache-on-demand lib to make similar and concurrent requests on pieces and pages faster.
• Frontend build errors now stop app startup in development, and SCSS and JS/Vue build warnings are visible on the terminal console for the first time.

Fixes

• Fixed a bug when editing a page more than once if the page has a relationship to itself, whether directly or indirectly. Widget ids were unnecessarily regenerated in this situation, causing in-context edits after the first to fail to save.
• Pages no longer emit double beforeUpdate and beforeSave events.
• When the home page extends @apostrophecms/piece-page-type, the "show page" URLs for individual pieces should not contain two slashes before the piece slug. Thanks to Martí Bravo for the fix.
• Fixes transitions between login page and afterPasswordVerified login steps.
• Frontend build errors now stop the @apostrophecms/asset:build task properly in production.
• start replaced with flex-start to address SCSS warnings.
• Dead code removal, as a result of following up on JS/Vue build warnings.

Apostrophe 2.x modules

apostrophe-dialog-box 1.2.1

• add trash to arrangeFields to prevent warning during startup

apostrophe-favicons 2.0.7

• Does not crash if the image widget has piece ids but the actual image piece is no longer available (in the trash, for instance)

sync-content 1.0.0-alpha.2

• Bug fix for the case where a single locale is synced with --workflow-locale to ensure committing is possible afterwards, and a check for a common user error at startup.

apostrophe-site-map 2.8.0

• Adds new getPageTree method that returns the nested pages in the right order with pieces that are also pages. To be able to build a sitemap page from any project.

apostrophe-redirects 2.4.2

• Fixed incompatibility with sites not using workflow introduced in 2.4.1.

Other modules

cache-on-demand 1.0.1

• Refactor code style, adds eslint, adds test script.

express-cache-on-demand 1.0.3

• Refactor code style, adds eslint, adds test script. Fixes safe variable that was unused, so not blocking caching if needed.