Releases

Typo 6.0.9 for Rails 3.0.10 – security fixes

We’re releasing tonight Typo 6.0.9 as Rails 3.0.10 brought many critical security fixes that would affect Typo, which means you really should upgrade now. This version also brings a couple of improvement some bug squashing and Yannick’s usual refactoring and performances tweaking.

You can download Typo as a zip file or a tarball.

The security issues addressed by Rails 3.0.10 are:

  • Filter Skipping bugs
  • SQL Injection issues
  • Parse error in strip_tags
  • UTF-8 escaping vulnerability

Improvements:

It’s now possible to create a new category within the article editor. This quite useful feature brings Thomas back from the dead and this makes us very happy.

Squashed bugs:

Displaying a password protected article within a category would make Typo crash when using the default layouts.

Using Typo standard live search views in a theme would make the application crash.

Issue #42: creating a new user from the administration crashes the application.

Fixes an issue with Redcloth 4.2.7.

Issue #39: Time.parse apparently hiccups when the timestamp string contains “GMT+0000 (UTC)”

Fixes a bug where attachment thumbnails would not be created at upload from the editor and API.

Fixes a bug in the new sanitization module when running under Ruby 1.9.2.

Once again, we want to thank the growing Typo community for their help on improving their favourite blogging engine (at least we hope so), and, in particular Huy Dinh for fixing some too long existing bugs.

Published on Thu, 01 Sep 2011 16:53

Release of Typo 6.0.8 - Bug Fixes

Being the eighth of the Irving Penn series, this new Typo release comes only 3 days after the latest one, but it fixes a bunch of serious bugs that were discovered while using Typo 6.0.7 in the wild.

As usual you can download Typo 6.0.8 at the usual place, and give it a try on our demo site.

Adding per tags and categories templates

Typo is now able to provide a different template according to the category and tag you visit. This is useful for some sites which need such a level of customization. To use them, just add a views/categories/category-permalink.html.erb or a views/categories/category-permalink.html.erb file in your theme. Typo will use that file when displaying this category.

Bug fixes

Fixes a bug in the meta title generation when displaying an article, a category or a tag.

Fixes the custom tracking field making the site crashing when used.

Fixes a bug on tags removal not working.

Moving our bug tracker to Github

We’ve decided to move our bug tracker from Lighthouse to Github. In the past years, Github ticketing system has gained in feature and maturity while Lighthouse has been stalling, not being really convenient to use. This move allows us to centralize our tools in a single place. The new bug reporting place is now https://github.com/fdv/typo/issues

It’s been the third release in 11 days, but thanks to all our beta testers, I hope it’s the latest bugfix one. We want to thank in alphabetical order Mitch Pirtle, Lars Tobias Skjong-Børsting, Mathieu Poussin and Rhaamo for their bug hunting operation.

Published on Sat, 13 Aug 2011 09:12

Release of Typo 6.0.7 - Bug Fixes

After releasing Typo 6.0.6, we realized that we left a few critical bugs unfixed. It seems that none of us actually ran our tests against Ruby 1.9.2, and things that were working under certain circumstances were breaking against a different environment.

So this release provides nothing bug bug fixing, which is not so bad, after all.

File upload was completely broken due to a behavior change in ActionDispatch::Http::UploadedFile between Rails 3.0.2 and Rails 3.0.3. File upload in itself is pretty hard to test, and we failed at this point.

Image resize was completely broken too due to a version change of minimagick. Reverting back to minimagick 1.3.3 did the trick.

Under PostgreSQL, initial migration would set an empty post_type despite a default set to read. It seems that PostgreSQL won’t fill the field value when created with existing inserts.

Mathieu Poussin added Recaptcha support on all bundled themes.

Pages view was broken under Ruby 1.9.2 due to an encoding issue. There was also an encoding bug in post_type edition and creation.

Despite extensive testing, pagination was broken due to a buggy will_paginate 3.0.4 beta. Reverting to 3.0.2 did the job.

Last but not least, a change in the way Google handles RSS queries caused dashboard load to take ages.

That’s all (for now). We’ll try to to better this time.

Published on Wed, 10 Aug 2011 18:03

Release of Typo 6.0.6 – a major one

5 weeks after releasing Typo 6.0.5, we’re proud to release Typo 6.0.6 into the wild. With 403 files changed, 8526 insertions and 4961 deletions (before generating the CHANGELOG) this is our biggest release of all time. This was made possible thanks to Yannick François joining the core team, the growing amount of active contributors and a very crappy weather above Europe during our summer holiday.

You can download Typo 6.0.6 at https://github.com/downloads/fdv/typo/typo-6.0.6.zip or https://github.com/downloads/fdv/typo/typo-6.0.6.tgz. A demo is set up at http://demo.typosphere.org.

Typo 6.0.6

What’s under the hood?

Rails 3.1 ready

We’ve got a long way since Typo was first released for Rails 0.6 and Ruby 1.8.4. Typo 6.0.6 is now Rails 3.1.0 ready and runs on both Ruby 1.8.7 and 1.9.2. We’re now waiting for Passenger (mod_rails) to be fully Rails 3.1 compliant to switch to this new exciting Rails version.

URL shortener

Adoption of microblogging has made URL shorteners an important part of our daily browsing life. Hosted services may disappear one day or another taking your shortened URL with them, so we have given Typo its own URL shortener.

When you publish a new article, Typo generates a shortened URL that will redirect to your content. No more risks of disappearing shortened URLs, YOU keep the control.

Recaptcha support

Silvio Relli did a great job adding Recaptcha support to Typo 6.0.6. Recaptcha is a captcha system that both fights against spam and uses successful decodings to helps digitise books.

You can use both Recaptcha and Akismet on a Typo installation.

New toys for plugin developpers

We wanted to make Typo easier to extend for plugin developpers. Typo 6.0.6 introduces a bunch of new tools for them.

Users custom fields

Users can now have an infinite nummer of custom fields, that will be used by plugins developpers without having to modify the database. Settings are easy to add and easy as pie to use.

Contents custom fields

Articles and pages can now have an infinite nummer of custom fields, that will be used by plugins developers without having to modify the database. These custom fields are easy to add and easy as pie to use.

Custom routes for plugins

User defined plugins can now use their own route without changing the original routing files. This allows plugin developers to create powerful extensions without to worry about what Typo’s routing file looks like.

A powerful SEO oriented blogging engine

We’ve worked a lot on SEO, aiming at being as powerful as Yoast SEO Plugin on Wordpress. This release is a first step with the following feature.

Support for rel=’canonical’ in pages header to avoid duplicate content.
A canonical page is the preferred version of a set of pages with highly similar content. It’s common for a site to have several pages listing the same set of products. For example, one page might display products sorted in alphabetical order, while other pages display the same products listed by price or by rating. For example: http://www.example.com/product.php?item=swedish-fish&trackingid=1234567&sort=alpha&sessionid=5678asfasdfasfd http://www.example.com/product.php?item=swedish-fish&trackingid=1234567&sort=price&sessionid=5678asfasdfasfd If Google knows that these pages have the same content, we may index only one version for our search results. Our algorithms select the page we think best answers the user’s query. Now, however, users can specify a canonical page to search engines by adding a link element with the attribute rel=”canonical” to the head section of the non-canonical version of the page. Adding this link and attribute lets site owners identify sets of identical content and suggest to Google: “Of all these pages with identical content, this page is the most useful. Please prioritize it in search results.”
A custom template for meta title and description

Since meta title and description are very important for SEO, it is very important to be able to setup its own content. Typo now provides powerful customizable templates for both of them, with nice default enabled.

Making meta keywords optionnal

Since search engines do not consider meta keywords anymore, some people want to disable them to save on their page weight. This option makes it possible.

New content templates

Typo can now handle multiple content types through dedicated templates. Let’s say you want to display text articles and pictures only. Just create the content type, write a quick template for rendering, write your article, and your done. This new feature comes with handy helpers to generate per template menu…

This makes Typo theming even more powerful.

Control your cache from the admin

The long removed cache sweeping interface is now back, with interesting statistics about cached files.

Attachment thumbnails

Attached images are now generated in 3 sizes: original, medium and thumb. Both medium and thumb sizes can be defined in the administration.

Pictures albums in lightbox

Typo Lightbox macro now supports set parametre, which allows you to create nice photo albums.

More readability and usability

The admin sections have been reorganized for more readability and usability. We’ve redisigned some interfaces, work still in progress.

Code refactoring

Typo code is as old as Rails, which means we still carry old, deprecated code. This version brings lots of refactoring, dead code removal, speed optimization and even more testing.

Norwegian translation

Lars Tobias Skjong-Børsting has been doing a great job providing a full norwegian translation in an impressively short time.

Bug squashing

With code refactoring usually comes bug squashing. This version got rid of more bugs than a full tank of DDT would have, without the cancer effect.

A community effort

Typo 6.0.6 would have never been possible without our community of contributors, listed in alphabetical order: Huy Dinh, Fish, Justin B. Kay, Maarten Mulders, Silvio Relli, Melanie Shebel, Lars Tobias Skjong-Børsting, Eric Sorenson, Yule.

Published on Tue, 02 Aug 2011 11:25

Release of Typo 6.0.4 : lots of bug fixes and cosmetic improvement

It’s been 3 weeks since we last released a Typo version, and we want to thank all our users who provided great feedback – mostly bug reports, nobody’s perfect. We’ve had a hard time fixing them as these bugs were mostly due to the upgrade to Rails 3.0, but tonight we’re happy to release Typo 6.0.4, fourth of both the Irving Penn series and 2011.

General Improvement

Integrated version checker

When displaying the dashboard, typo will check for the latest release and will display a message accordingly:

  • A notice if Typo’s just a minor version behind.
  • A warning if Typo’s a sub version behind.
  • An error message if Typo’s a major version behind

Our dashboard was almost completely redesigned, making information easier to get and prettier.

Utility Sidebar Widget

A utility sidebar widget was added, displaying various links to Login page, RSS, Typo documentation. This Widget is enabled by default when creating a new blog making the sidebar prettier.

Editable RSS description

RSS description is now editable from the admin. You can add as much HTML as you want to make nice RSS footers.

French Translation

Having 3 Typo commiters out of 4 being French while having an incomplete French translation full of mistakes was a shame. This is now fixed thanks to great work by Ollivier Robert and Sylvain Abelard.

Bug fixes

Invalid publishing time when using a non UTC timezone.
With Rails 2, Active Record used to store contents using local time for timestamps. Rails 3 uses UTC instead, creating a gap between the publishing time and the user’s time. Typo 6.0.4 fixes this making Active Record behave like it should on Rails 3.

Broken theme editor.
A change in the way File.read should be called between Ruby 1.8.6 and Ruby 1.8.7 broke theme file loading. Also theme editor did not raise an error when trying to load non existing files.

Broken migrations when creating a new blog.
Rails 3 upgrade broke initial migration as it was trying to use a non loaded model.

Broken sidebar save button
Upgrade to Rails 3 with use of prototypelegacyhelper plugin broke many AJAX saving feature. This caused sidebars not to be saved anymore.

Broken image links in administration style.
Background images would not load when using Typo in a sub URI.

Broken cache system.
The way caching used to work caused a stale file descriptor bug having the cache not being generated anymore after a sweep.

Broken cache system with sub URIs.
Cache could not be accessed when using a site deployed in a sub URI, making it useless.

Broken sites with https.
Blogs using https would break because Typo was only expecting URLs to start with http only.

Broken Flickr and Lightbox macro filters.
By escaping macro tags, BlueCloth was breaking Flickr and Lightbox macros. This would happen when using Markdown, Textile or Markdown + Smartypants.

Published on Wed, 23 Feb 2011 11:30

Release of Typo 6.0.3 – Important bugfix

If you’re using any of the Typo 6.0 series, you really should upgrade to 6.0.3 as it fixes a lot of AJAX related bugs. Having a good unit tests coverage is not always enough, and human test are always worth spending the time we didn’t have. Hopefully, Fabiano Francesconi has been doing a great work reporting bugs he was falling on tonight while I was fixing them.

The culprit is an outdated, buggy Rails Prototype Legacy Helper plugin. This plugin gathers all the fancy AJAX helpers that were removed from Rails 3. We probably should have done some unobtrusive Javascript instead of using that one, but… Typo 6.0 would probably had never been released at all.

As usual, you can download Typo at http://typosphere.org/stable.tgz or http://typosphere.org/stable.zip.

A few things fixed by Typo 6.0.3:

  • Sidebar settings being saved since nothing seemed to happen and the sidebar form would eventually look dead afterwards.
  • Comments preview breaking on most legacy themes, including built in Typographic, Scribbish, Dirtylicious and Standard Issue.
  • Category drag and drop reorder would not do anything.
  • Admin content filtering would render an error.
Published on Tue, 01 Feb 2011 20:42

Release of Typo 6.0.2 Irving Penn

Coming only 11 days after Typo 6.0, Typo 6.0.2 is the third release of the Irving Penn series. This is both another bug fixing release, and the beggining of a new feature oriented one, and despite the minor version number and the very little time between releases, it’s an important one as it makes Typo 6.0 series stable enough to be production ready.

Many thanks to Ollivier Robert for improving the French translation. and Luuk Hendriks for various bug reporting.

What’s new in Typo 6.0.2?

Typo is now Thread safe enabled by default. If you wonder what thread safe is about, you should read this question and answer post.

Typo was lacking a recent dark background theme. This error is now fixed with True Red, a brown and red port of default theme True Blue (now in use on our blog). This is also the starting point of a deep thoughts about themes framework.

True Red

Typo now comes with various ways to display date and time on your blog posts. This will allow European and American users to display dates the way they want without having to hack their templates. Existing themes will automatically profit from that improvement.

As usual, French translation was improved. This is not perfect, but we’re still working on it.

Squashed bugs

Made bundle install work from inside subdirectories.

Added a missing .html_safe in the Scribbish theme

Removed deceptive “pointer” cursors in admin accordion-headers.

Made save as draft keep a published article published.

Fixed Flickr and Lightbox plugins

Fixed google sitemap.

Fixed RSS trackbacks feeds.

Published on Sat, 29 Jan 2011 10:21

Release of Typo 6.0.1 Irving Penn for Ruby on Rails 3.0

Only 2 days after releasing the long awaited Typo 6.0 Irving Penn for Ruby on Rails 3.0, we’re back with a new version fixing some nasty leftovers bugs and bringing you some improvement. Thank you to Luuk Hendriks for testing this version and submitting patches.

Here’s the list of what we improved…

The dashboard was improved, getting some more figures about spam and content.

Dashboard internationalization was completed.

French translation was improved.

Merged both files and resources view in the admin, first step to a (much) better file upload thing

Made information blocks look different from confirmation ones.

Improved forms help lisibility

and a comprehensive list of what has been fixed.

Bug #192: multi-byte permalinks. - Do not escape the title upon conversion to permalink slug. - Escape permalink sluk upon creation of permalink url. - Search article by permalink and by escaped permalink to support legacy permalink slugs.

Fixed some sidebars using old deprecated code silently dying.

Fixed a bug in the HTML editor inserting image tag even when cancel was clicked.

Fixed a 404 in the administration CSS that was polluting your log files.

Fixed themes not displaying categories correctly (Luuk Hendriks)

Published on Fri, 21 Jan 2011 17:31

Release of Typo 6.0 Irving Penn for Ruby on Rails 3.0

Almost 7 months after Typo 5.5, we’re proud to announce the release of Typo 6.0 Irving Penn for Ruby on Rails 3.0. This major version of our application is mostly about upgrading to Rails 3, but it also provides a bunch of new feature.

You can download Typo 6.0 as a zip archive or as a tarball.

Upgrade to Rails 3

Upgrading to Rails 3 was a long and painful path. Typo was born when Rails was very very young, and the framework took some path while we chose another path to fix its lacks. Typo 6.0 is only a first compatible version, and we’re still planning to ditch the remaining piece of antiquities we still carry.

Bye bye Typo installer

Typo installer has been around for 6 years now, and what seemed a really great idea at Rails 1.0 era rapidely became an unmaintained burden. There are now lots of easy ways to deploy a Rails application, while Bundler handles all the dependencies issues. Installing Typo is now easy as, let’s say, installing any other mainstream blogging engine: fill in your database credential, run bundle and you’re done.

Finally a real plugin API

Thomas Lecavelier did a wonderful job working on what’s going to be the real plugin API we’ve dreamt of for a while now. He started with making avatar provider pluggable and knows how much he still has to be done. Good news as he’s the latest addition to Typo core team. We’re really glad to welcome him onboard.

Theme changes

Theme structure has been change to be compliant with Rails views structure. If you’re using a custom template, you’ll have to move the layouts folder into the views one. Nothing you can’t handle.

Admin, SEO and usability

We’ve made some SEO improvement, adding a bit more options, and making tags URL really SEO friendly. Admin usability has been improved to, but we’ve many other things we want to make better as well.

That’s all for now. We’ll be glad to hear your feedback if you’ve got some. For now, we’re going to celebrate this release by working on the next one.

Published on Tue, 18 Jan 2011 21:48

Typo 5.5 Richard Avedon for Rails 2.3.8

On July 22th, 2010, Typo version 5.5 named for famous photographer Richard Avedon was released to the public. Typo 5.5 is the result of the work of the Typo community, just like you, on adding or suggesting feature, reporting and fixing bugs.

With its new admin and setup, Typo 5.4.4 was supposed to be the latest minor version running on Ruby on Rails 2.3, and we spent a few months exploring 2 new ways.

The first one was being able to upgrade to Ruby on Rails 3.0 as soon as it would be released as production ready. Despite porting our own code without problems, we promptly discovered that too many plugins needed to be ported to Rails 3.0 before we could release.

The second one was making Typo multiblog aware. Despite some interesting results, making it production ready was not the work of a single release. Our architecture is definitely mono blog oriented, and making it multi blog would force us to rewrite most of the code.

So, we decided to make one more release on Ruby on Rails 2.3, upgrading to Rails 2.3.8. This release is Typo 5.5. It comes with a few new feature, bug fixes, and internal improvements.

Highlights

Typo now runs on Ruby on Rails 2.3.8, which means it won’t run with an older Rails version.

Being a long time wanted feature, Typo now handles password protected posts.

Typo visual editor had no way to upload, browse, and use images. Thanks to htty, we now have a very nice resource browser CKEditor compliant.

As I wrote on Typo Weblog (http://res.to/aQz6), we’ve added a way to display users plugins setup into Typo admin. This is a first step on the way to a real plugin API.

Typo now comes with a new cache system, way simpler than the database based cache we used to do. Files are stored into public/cache and Typo knows how to served cached file. You may need to update your configuration, please read doc/CACHE.SETUP.README

For more information on Typo 5.5, please read the CHANGELOG file.

As usual, we want to thank the Typo community, and in particular, by reverse commit order: Daniel Schweighoefer, htty, Yannick Francois,Szymon ‘jeznet’ Jeż, Diego Elio ‘Flameeyes’ Pettenò, Kristopher Murata and Michael Reinsch.

Published on Thu, 22 Jul 2010 17:10

RSS