v0.65.0

[tommoor]

This months release comes with a number of new features – full support for outgoing Webhooks so you can integrate Outline with other tools, Mermaid diagrams in the editor, and the ability to setup multiple authentication providers for your team. We also started a bug bounty program on huntr.dev which has resulted in an above-average number of security related patches in this release.

Note It is recommended to visit Settings -> Security and add team domains as an additional measure to restrict access to your self-hosted instance.

Enhancements

• Publicly shared documents now render metadata on the server in fix: SSR meta data for nested shared documents #3646
• Personal Gmail accounts can now be used to sign into teams with an existing invite that matches by @thenanyu in feat: allow personal gmail accounts to be used to sign into teams with an existing invite #3652
• The documents.update API endpoint can now be used with collaborative editing enabled in fix: Enable documents.update with collab editing #3647
• Mermaid.js support added to the editor in feat: Add mermaidjs integration #3679
• Webhook support in feat: Webhooks #3691
• Added a new optional notification email when invite is accepted in feat: Add optional notification email when invite is accepted #3718
• A new check for pending migrations during startup by @CuriousCorrelation in feat: Add pending migrations check during startup #3744
• Visiting an unpublished share link will now show a Login screen by @CuriousCorrelation in feat: Redirect on unpublished share access #3760
• Lists that failed to load will now show an error state and automatically retry in feat: Error state for paginated lists #3766
• Sign-in options for all configured authentication methods will now be displayed in fix: Self-hosted should show signin options for all configured authentication methods #2986
• As always, new and improved translations from the community

Fixes

Platform

• Now possible to delete user via API in fix: Unable to delete user via API #3619
• Context menus now scrollable on iOS in fix: Context menus not scrollable on iOS #3626
• Lazily polyfill ResizeObserver for old iOS in fix: Lazily polyfill ResizeObserver for old iOS #3629
• Google, Azure, OIDC SSO continued access are now verified on every app load in feat: Validate Google, Azure, OIDC SSO access #3590
• Previously provisioned JWT's are now revoked on logout in fix: Previously provisioned JWT's should be revoked on signout #3639
• Don't show /share/ link in popover when team sharing disabled in fix: Don't show /share/ link in popover when team sharing disabled #3714
• Localstorage cleared correctly after logout by @thenanyu in Fix: clear localstore after logout #3731
• Models are now all removed from local store upon access change in fix: Models are not all removed from local store upon access change #3729
• Do not show suspended users to non admins in Do not show suspended users to non admins #3776
• Added additional model validations in fix: Add additional model validations #3725
• Improved websockets error handling in fix: Improved websockets error handling #3726
• Save button no longer shown when adding and removing a domain row by @paullessing in #3665: Save button should not be shown when adding and removing a domain row #3701
• Automatically cleanup api keys and webhooks for suspended users in feat: Cleanup api keys and webhooks for suspended users #3756
• svg+xml image type ext not assigned properly by @CuriousCorrelation in fix: svg+xml image type ext not assigned properly #3774
• Fixed incorrect length validation with UTF-8 characters by @CuriousCorrelation in feat: Custom Length decorator for UTF-8 chars len  #3709

Editor

• Cursor no longer disappears behind emoji by @CuriousCorrelation in fix: Cursor disappearing behind emoji #3786
• Moving an image to empty space no longer results in an endless upload in fix: Moving an image to empty space results in endless upload #3799
• Triple-click now selects the current line in codeblocks by @CuriousCorrelation in feat(editor): Ability to select line in codeblocks #3798
• The formatting toolbar now shows the correct options on inline code by @CuriousCorrelation in fix: ToolbarMenu popup on inline code selection #3775
• Enter at beginning of collapsed heading now works correctly in fix: Enter at beginning of collapsed heading #3754

New Contributors

• @l3nnartt made their first contribution in Update redis port in sample env file #3596
• @CuriousCorrelation made their first contribution in feat: Custom Length decorator for UTF-8 chars len  #3709
• @paullessing made their first contribution in #3665: Save button should not be shown when adding and removing a domain row #3701
• @JamieSlome made their first contribution in Update SECURITY.md #3711

Full Changelog: v0.64.3...v0.65.0

---

This discussion was created from the release v0.65.0.

[bmm-alc]

and there is a follow-up release (0.65.1) for installation that does not use secure connection for database