Flarum v1.8.0 Released

IanM

❗️ ⚠️

Important information to Flarum communities upgrading to 1.8 and also use `fof/merge-discussions`

We recently discovered a vulnerability introduced to Flarum 1.8.x by fof/merge-discussions where hidden posts could be visible to all users when they were postMentioned. The effected versions are 1.2.1 to 1.3.1 inclusive, and the issue is resolved in 1.4.0

Please see IanM for further information.

Zeokat

Updated today from 1.7 to 1.8.1 and seems that all runs smooth. Nice work 👍️

At this moment latest LTS Ubuntu Server which is version 22.04 LTS, offers PHP 8.1 and i see that future Flarum 2 will require PHP 8.2. Be carefull with that update, it will break a lot of installations on default Ubuntu Servers.

clarkwinkelmann

tipblog which issue?

If you need help, the best way is to start your own support discussion with all necessary details and steps to reproduce https://docs.flarum.org/troubleshoot

luceos

clarkwinkelmann they linked the dot in their message. It was spam.

ingobaab

Hello Flarum Users and Developers,

I am new to Flarum and want to install it "for evaluation". I want to look into it also "under the hood" - the framework it uses. Because I am a Developer myself, and I really like the speed and performance of this piece of software. Should I better go with the official "stable" 1.0.2 Version or (better with the current development / 1.8.0 for that pupose? Thank you for any anser. hint, tipp.

luceos

ingobaab The current stable version is 1.8.0. 1.0.2 is outdated and should not be used.

Welcome to Flarum and I hope you enjoy it 👍️

nafi2050

SychO That's Great. But why don't officially come with money or point system as like xenforo?

Darkle

nafi2050 That question could be asked with any feature that comes to mind and that everyone might personally consider indispensable, but what if someone doesn't want those features? That's why Flarum has opted for a lean and easy to maintain core. Fortunately for you, both extensions have been around for a long time, see: https://discuss.flarum.org/d/4699-money-extension and https://discuss.flarum.org/d/20671-friendsofflarum-gamification

IanM

We just released flarum/core (v1.8.2) and flarum/suspend (v1.8.1) patches.

See IanM for information

Gorm

IanM suspended users still can remove their avatars.

IanM

We just released a new patch for flarum/core, bumping the version to 1.8.3

This addresses

flarum/frameworkv1.8.2 → v1.8.3

Fixed

Console extender does not accept ::class flarum/framework3900
Conditional extender instantiation flarum/framework3898

meihuak

IanM

when I update this version, it said

Your requirements could not be resolved to an installable set of packages.

Problem 1
- Root composer.json requires justoverclock/related-discussions *, found justoverclock/related-discussions[1.3.4] in the lock file but not in remote repositories, make sure you avoid updating this package to keep the one from the lock file.

how can I do? thanks

GreXXL

meihuak your extiverse token has expired, you need to create a new one to use premium extensions.

meihuak

GreXXL
I don't want use this extension any more.

but it seems I can not delete it

composer remove justoverclock/related-discussions:"*"
PHP Deprecated: Return type of Symfony\Component\Console\Helper\HelperSet::getIterator() should either be compatible with IteratorAggregate::getIterator(): Traversable, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice in phar:///usr/sbin/composer/vendor/symfony/console/Helper/HelperSet.php on line 112

Deprecated: Return type of Symfony\Component\Console\Helper\HelperSet::getIterator() should either be compatible with IteratorAggregate::getIterator(): Traversable, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice in phar:///usr/sbin/composer/vendor/symfony/console/Helper/HelperSet.php on line 112

luceos

meihuak composer remove justoverclock/related-discussions

That is the correct command.

Also make sure to disable deprecated warnings in your php settings.

IanM

We just released v1.8.5 of flarum/core to address an open redirect issue on the LogoutController.

A security advisory will follow shortly.

flarum/framework3948

composer update flarum/core

IanM

We just released v1.8.3 of flarum/mentions to address a minor issue where 3rd party extensions could not properly render a PostMention without the Post context.

flarum/framework3953

Thank you to our friends at @glowingblue for this fix 💝

composer update flarum/mentions

Walys

IanM What?
To v1.8.5 go back to v1.8.3?

luceos

Walys extensions have their own versions. This relates to the Mentions extension not Flarum core itself.

Walys

luceos upss.. sorry, my fault. I thinking every moment in flarum core.

MikeJones

Been in a hole teaching myself Flutter and hadnt updated my flarum in a bit. Finally updated to the latest, upgrade went smooth!

« Previous Page Next Page »