PLANKA Community 2.2.1 — Security release This is an emergency release fixing a security vulnerability. We recommend updating as soon as possible. Security Fixed a path traversal vulnerability (CWE-22) in the JWT-protected static file routes (/user-avatars, /background-images, /favicons). On instances using local file storage, an authenticated user could read arbitrary files readable by the PLANKA…
PLANKA Community 2.2.0 ⚠️ Breaking changes — read before updating 1. OIDC/SSO has been removed from PLANKA Community. After updating, all SSO-based users are deactivated, because they no longer have a password login. An admin can restore access by setting a password for each affected user and reactivating them. If your only admin account is SSO-based, you will be locked out. Create a new admin use…
A Helm chart to deploy PLANKA and it's dependencies.
What's Changed feat: Add Pro features discovery banner by @daniel-hiller refactor(docker): Remove global npm installation from Dockerfiles by @daniel-hiller fix(s3): Add requestChecksumCalculation config option by @meltyshev fix(proxy): Limit Squid file descriptors to prevent excessive memory allocation by @meltyshev build(client): Allow specifying proxy target by @meltyshev Update de-DE Translati…
What's Changed feat: Add ability to expose Swagger specification (#1577) feat: Support running under subpath (#1451) feat(helm): Add inline custom terms configuration, fix symlink detection (#1585) feat: Add ability to display card ages fix(oidc): Add configurable HTTP timeout for OIDC client (#1575) docs: Remove accidental dollar sign from Swagger route definitions New Contributors @Br1an67 made…
A Helm chart to deploy PLANKA and it's dependencies.
Security Release Fixed an issue where the outgoing proxy could be accessed from outside the server in host-network Docker deployments (network_mode: host), potentially allowing external parties to relay requests. The proxy now only accepts connections from the local server, preventing accidental exposure while keeping internal functionality intact. Users should update to PLANKA >= 2.0.3 to be prot…
A Helm chart to deploy PLANKA and it's dependencies.
What's Changed fix(backup): Improve backup/restore scripts, allow specifying backup directory (#1541) fix(dropzone): Prevent dropzone from overflowing content fix(platform): Make app compatible with Windows fix(helm): Add writable temp directory mounts when readOnlyRootFilesystem is enabled (#1542) fix(gravatar): Update hash algorithm to SHA-256 for improved security (#1550) New Contributors @seal…
A Helm chart to deploy PLANKA and it's dependencies.
We forgot to mention that the Terms shown on first login for all users are a template and just a legal requirement for the app. We've added a way to customize them for your own needs, along with a guide in the docs. What's Changed feat(helm): Add image digest pinning support (#1531) fix(socket): Handle transport error during reconnection after idle fix(terms): Display template notice, support cust…
A Helm chart to deploy PLANKA and it's dependencies.
After months of testing, feedback, and iterations, we're thrilled to announce the final release of PLANKA v2! 🎉 We want to extend a huge thank you to everyone who contributed, reported issues, and helped identify security vulnerabilities. Your support has made this release possible. Our SaaS version goes live in just a few hours! Enjoy fully secure, cloud-hosted instances with zero setup - start u…