This release includes a security-related fix for new installations. Our thanks to an anonymous report for identifying this issue and disclosing it to us responsibly! 👏🙏

For existing users, please make sure to check your allowed file types. Every file is uploaded as is to a publicly accessible folder, which can be abused if HTML is allowed and the preview function in the Bolt admin panel is used. We recommend limiting the allowed file types as much as possible!

🔐 Security related changes

• Flip default for allowed file types (bobvandevijver, #3593)

Full Changelog: 5.2.2...5.2.3

This release includes a security-related fix. Our thanks to @bmdyy for identifying this issue and disclosing it to us responsibly! 👏🙏

🔐 Security related changes

• Validate submitted URL before processing it (bobvandevijver, #3545)

This release includes a security-related fix. Our thanks to @bmdyy for identifying this issue and disclosing it to us responsibly! 👏🙏

🐛 Bug fixes

• Fix incorrect focus in invalid editor input fields (napley, #3491)

🔐 Security related changes

• Validate submitted URL before processing it (bobvandevijver, #3545)

Just hours after the previous release a small service release that actually updates the internal version numbers.

What's Changed

• Updated Russian language by @hide-me in #3528
• 👷 update the Docker compose configuration by @macintoshplus in #3536
• Release updates by @bobvandevijver in #3530

New Contributors

• @macintoshplus made their first contribution in #3536

Full Changelog: 5.2.0...5.2.1

Hi Bolt users! It has been some time since the last release as the main maintainer and my namesake has passed last year (rest in peace Bob).

From a recent discussion three new maintainers (@cervelas, @celtic34fr and @bobvandevijver) have been granted access to the project, which means we are now able to move forward with this awesome project. The main goal for future releases is to clean up deprecations and update to Symfony 7.4 when released at the end of this year.

This release is almost the same as 5.2.0-rc1 release, with only one additional fix.

What's Changed

• Set list_format in ContentEditController save function by @nestordedios in #3516

Full Changelog: 5.2.0-rc.1...5.2.0