Apostrophe 3.35.0 Keyboard shortcuts, German localization, new linking options and fixes

[BoDonkey]

Happy Solstice Apostrophe fans!

Today may be the shortest day of the year, but this release is packed with pure JavaScript sunshine! This release brings a new module, the command-menu module. This module adds a whole suite of default keyboard shortcuts and the ability for developers to add new ones as well. Warn your editors that something might start on fire when they hit that '?' key because they will be working so fast!

All the Germanophiles out there have a reason to celebrate with the new German Admin UI translation file. Ein großes Dankeschön an Community-Mitglied Noah Gysin!

The rich-text-widget got two enhancements, the ability to add named anchors and the ability to link with internal pages and any piece-type easily. See the changelog details below or check out the documentation.

In the "fixes" department, our engineers stomped out some bugs that snuck into the rich-text-widget and were causing problems with lists. Additionally, several Discord users pointed out that the new "expanded widget previews" feature was lacking a clipboard. Fixed! Going forward we are going to make this feature a little fancier, but at least for now, there's a solid way to paste content you cut from another section.

Until our next release in 2023, we at Apostrophe would like to take a moment to thank the amazing members of our community. We wish you and your loved ones joyous end-of-year celebrations. May the new year bring health, happiness, and prosperity to all!

Apostrophe 3.35.0

Adds

• Introduced support for linking directly to other Apostrophe documents in a rich text widget. The user can choose to link to a URL, or to a page. Linking to various piece types can also be enabled with the linkWithType option. This is equivalent to the old apostrophe-rich-text-permalinks module but is included in the core in A3. See the documentation for details.
• Introduced support for the anchor toolbar control in the rich text editor. This allows named anchors to be inserted. These are rendered as span tags with the given id and can then be linked to via #id, providing basic support for internal links. HTML 4-style named anchors in legacy content (name on a tags) are automatically migrated upon first edit.
• German translation i18n file created for the Apostrophe Admin-UI. Thanks to Noah Gysin for this contribution.
• Introduced support for keyboard shortcuts in admin UI. Hitting ? will display the list of available shortcuts. Developers can define their own shortcuts by using the new @apostrophecms/command-menu module and the commands property. Please check the keyboard shortcut documentation for more details.

Fixes

• The bulletList and orderedList TipTap toolbar items now work as expected.
• When using the autocomplete/typeahead feature of relationship fields, typing a space at the start no longer results in an error.
• Replace credential package with credentials to fix the mout Prototype Pollution vulnerability. There was no actual vulnerability in Apostrophe or credential due to the way the module was actually used, and this was done to address vulnerability scan reports.
• Added a basic implementation of the missing "Paste from Clipboard" option to Expanded Widget Previews.

Apostrophe 2.223.1

Fixes

• Replace credential package with credentials to fix the mout Prototype Pollution vulnerability. There was no actual vulnerability in Apostrophe or credential due to the way the module was actually used, and this was done to address vulnerability scan reports.
• Fix vulnerability by removing package deep-get-set used in areas

Apostrophe 3.x modules

@apostrophecms/sitemap 1.0.2

The Apostrophe Sitemap module generates XML sitemaps for websites powered by ApostropheCMS. The sitemap includes all of the pages on your site that are visible to the public, including "piece" content, such as events and blog posts.

Changes

• Fixes the package.json file to point to the correct URLs for the homepage and repository. No functional changes.

apostrophecms/apostrophe-workflow 2.40.2
The apostrophe-workflow module adds powerful workflow and localization capabilities to Apostrophe. As a workflow system it provides for a draft version of every document, so that changes do not immediately "go live." As a localization system it provides for documents to exist in several locales, allowing for easy internationalization.

• Fixed security scanner report by removing deep-get-set package. There was no actual vulnerability due to the way the package was used in Apostrophe.

Apostrophe 2.x modules

apostrophe-caches-redis 2.1.5

This module enhances apostrophe-caches, the standard caching mechanism of Apostrophe, to use Redis rather than MongoDB.

Fixes

• Fixed redis vulnerability reported by security scanners. Due to the way Apostrophe constructs keys there was no actual vulnerability in practice.

Utilities

sanitize-html 2.8.1

This module provides a simple HTML sanitizer with a clear API.

Changes

• If the argument is a number, convert it to a string, for backwards compatibility. Thanks to Alexander Schranz.

oembetter 1.0.2

oembetter is a modern oembed client which allows you to add filters that provide or improve oembed support for services that either don't have it or don't do it very well.

Changes

• Switched to node-fetch, eliminating installation warnings about the unsupported request module.
• Switched to mocha 10.x, eliminating another set of installation warnings.
• Internal implementation of oembed.js now uses async/await for better maintainability.

uploadfs 1.20.1

uploadfs copies files to a web-accessible location and provides a consistent way to get the URLs that correspond to those files. uploadfs can also resize, crop and autorotate uploaded images. uploadfs includes S3-based, Azure-based, GCS-based and local filesystem-based backends and you may supply others.

Adds

• Add webm to the list of file formats with a known content type and add it to the list of types that should not be gzip encoded as it is precompressed and Chrome appears to behave poorly if it is gzip encoded