Apostrophe 3.39.0 Rich text and image widget improvements, increased log-in options, and fixes

[BoDonkey]

Hola Apostrophe Universe!

This cycle brought a lot of love for the Apostrophe core widgets. In part, these changes were made to facilitate the update of some A2 sites to A3, but we all get to enjoy the results! Editors can now add tables and inline images from the rich text widget toolbar. Look for UI/UX improvements to these features soon. Thanks to community member Waldemar Pankatz, the image widget now allows you to add a loading attribute to your images - although for the moment, your mileage may vary (looking at you Safari). Check out the changelog below for more juicy details.

The @apostrophecms/passport-bridge module has been updated to add an option for retaining an access token for use in making API calls. Pretty handy if you are already authorizing log-in to the site with single sign-on!

Moving forward, we are working to get the Apostrophe core updated to deal with the Node.js end-of-life deadlines coming up and adding a range of improvements. Did you know that you can easily vote on what we work on next? Just point your favorite browser at our roadmap and make some suggestions or upvote suggestions made by others!

And now, for a little fun, here's a joke to lighten up your day:
Question: Why did the JavaScript programmer cross the road?
Answer: To get to the other side, where the API documentation was generated by ChatGPT! (Written by ChatGPT, who is apparently coming for DevRel jobs first - oh dear.)

Apostrophe 3.39.0

Adds

• Basic support for editing tables by adding table to the rich text toolbar. Enabling table allows you to create tables, including td and th tags, with the ability to merge and split cells. For now the table editing UI is basic, all of the functionality is there but we plan to add more conveniences for easy table editing soon. See the "Table" dropdown for actions that are permitted based on the current selection.
• superscript and subscript may now be added to the rich text widget's toolbar option.
• Early beta-quality support for adding inline images to rich text, by adding image to the rich text toolbar. This feature works reliably, however the UI is not mature yet. In particular you must search for images by typing part of the title. We will support a proper "browse" experience here soon. For good results you should also configure the imageStyles option. You will also want to style the figure tags produced. See the documentation for more information.
• Support for div tags in the rich text toolbar, if you choose to include them in styles. This is often necessary for A2 content migration and can potentially be useful in new work when combined with a class if there is no suitable semantic block tag.
• The new @apostrophecms/attachment:download-all --to=folder command line task is useful to download all of your attachments from an uploadfs backend other than local storage, especially if you do not have a more powerful "sync" utility for that particular storage backend.
• A new loadingType option can now be set for image-widget when configuring an area field. This sets the loading attribute of the img tag, which can be used to enable lazy loading in most browsers. Thanks to Waldemar Pankratz for this contribution.
• Two new module-level options have been added to the image-widget module: loadingType and size. These act as fallbacks for the same options at the area level. Thanks to Waldemar Pankratz for this contribution.

Fixes

• Fixed bugs that prevented effective use of the @apostrophecms/attachment:rescaletask. Thanks to Waldemar Pankratz for this contribution as well.

Apostrophe 2.224.0

Adds

• If about to 404, redirect uppercase URLs automatically to their lowercase version - can be disabled with redirectFailedUpperCaseUrls: false in apostrophe-pages/index.js options.

Apostrophe 3.x modules

@apostrophecms/blog 1.0.2

This module bundle helps developers quickly add blog articles to Apostrophe 3 websites. It provides the blog post piece type (@apostrophecms/blog) as well as a special page type (@apostrophecms/blog-page) for editors to create a blog.

Fixes

• The npm home page and readme links were corrected. Thanks to community member zenflow. No code changes.

@apostrophecms/passport-bridge 1.1.0

apostrophe-passport works together with passport-google-oauth20, passport-gitlab2 and similar passport strategy modules to let users log in to Apostrophe CMS sites via Google, Gitlab and other identity providers. This feature is often called federation or single sign-on.

Changes

• Setting the retainAccessTokenInSession option to true retains the accessToken and refreshToken provided by passport in req.session.accessToken and req.session.refreshToken. Depending on your oauth authentication scope, this makes it possible to carry out API calls on the user's behalf when authenticating with github, gmail, etc. If you need to refresh the access token, you might try the passport-oauth2-refresh module.

@apostrophecms/redirect 1.2.1

This module allows editors to easily add redirects for incoming queries.

Fixes

• Any exceptions thrown in the middleware are caught properly, avoiding a process restart.

Enterprise modules

@apostrophecms/palette 3.1.1

This module provides an in-context interface for changing the values of developer-set CSS properties. The values are stored in an Apostrophe piece singleton (like @apostrophecms/global) and applied to the site whenever the stylesheet link is included in a template. Adjusting values via the palette interface renders changes to the site instantly. Contact us or visit our new pricing page to learn more.

Changes

• Fixed a bug preventing the user from scrolling the palette when there are too many elements for a small screen. We do recommend breaking palette items into more groups, but screen sizes vary.
• Corrected palette height calculation.

Apostrophe 2.x modules

apostrophe-caches-redis 2.1.5

This module enhances apostrophe-caches, the standard caching mechanism of Apostrophe, to use Redis rather than MongoDB.

Fixes

• Fixed redis vulnerability reported by security scanners. Due to the way Apostrophe constructs keys there was no actual vulnerability in practice.

Utilities

sanitize-html 2.9.0

This module provides a simple HTML sanitizer with a clear API.

Adds

• Add option parseStyleAttributes to skip style parsing. This fixes issue #547. Thanks to Bert Verhelst.

@apostrophecms/code-upgrader 1.0.0-beta.2

The Code Upgrader handles a portion of the required modifications for an Apostrophe 2 (A2) codebase to run Apostrophe 3 (A3). It will also identify many specific lines and sections of code that a developer will need to convert manually.

Changes

• upgrade command now also supports A2 projects powered by apostrophe-multsite.

@apostrophecms/content-upgrader 3.0.0-beta.8

A tool to migrate your content from Apostrophe 2.x to Apostrophe 3.x. That is, it creates a new database in the A3 format, and copies over the uploaded media. This tool does not upgrade your source code.

Changes

• Remove the published version of draft documents that are archived.