Release of Typo 5.4.2 Willy Ronis

3 weeks after releasing Typo 5.4.1, and only 1 month after releasing Typo 5.4, we’re happy to release Typo 5.4.2, an important bugfix release. Don’t expect many feature here, even though we thought about some of them, it’s really a bugfix, and nothing else.

Typo 5.4.2 is avaliable as a source package on Rubyforge, or as a gem from Gemcutter.

Features

We’ve split the attachments between images and non images assets. Provided you’re using the simple editor, you can now use a fancy images carousel and insert your images in your text within a single click. This comes with a nice set of thumbnails.

Finally, the long awaited “forgot my password” link is here. It will send you a new password whenever you lose yours. Cool isn’t it?

We’ve also done some optimization in the way Typo sends assets and manages cache. CSS and Javascript are now sent into 1 file, making them faster to load. RSS generation has also been fastened up.

Bugs

A bug screwing up the editor when switching from simple to visual, causing users to lose their content when switching. Fixing that is a good reason to release today in itself.

A bug preventing your registration email to go when creating your account, making you lose your password unless you change it manually before logging out.

Fixed a security issue making the user passwords to be logged in clear in the application logs.

Fixed a bug causing CKEditor to crash under MS Windows due to the lack of symlinks on windows.

That’s all folks. See you in a while for our next update!

Typo 5.1.3 Cartier Bresson bugfix is out

We’ve just released Typo 5.1.3, which is the fourth release of the “Cartier-Bresson” series and released on sunday August the 31th. It is mostly a bugfix and behaviour fix version, so don’t expect many visible changes, except for people having problems with the closed bugs (thank you Captain Obvious). Typo 5.1.3 is avaliable as a gem with installer or sources.

Following some discussion here, I’ve removed the database dependencies from the Typo installer. We now assume that you have the bindings for any supported databases and won’t force you to install them anymore.

Complete CHANGELOG here:

Bug #1244: error with postgresql database on admin/content
Bug #1251: Documentation on dashboard is 404
Bug #1252: migrations alter updatedat timestamps of articles and comments, affects RSS feeds
Bug #1253: Twice redirect in admin/user#list if no admin
Bug #1254: Fix little error when you use bad id in AdminUser#edit
Bug #1255: Doesn’t autosave if no define title
Bug #1256: /article/ 301 redirect hits the default buffer which is not the expected behaviour
Bug #1257: Articles redirect doesn’t work with non-nil relativeurl_root

Rev #1784: Fixed requirements and added our official Typo mascot
Rev #1786: Fixes a stupid behaviour that forces tags display name to be the same as the name in the url. IE : “web 2.0” would display on a page as web2-0 after transformation, which is stupid. Adds a migration that changes ‘.’ into ‘-’ in tag already in the database. Otherwise, it makes typo crash when accessing that tag. Allows edition of tag display name in the admin.
Rev #1787:Removes database dependencies from installer. Now we assume you already have MySQL, PgSQL or SQLLite adater installed. Deletes 2 themes from FCKEditor, about 300k lighter now. Suppress caching from development environment
Rev #1789: Fixes a stupid bug that allows a non administrative user to change his profile
Rev #1792: Removing tmcode textfilter. It now has its own life at http://svn.typosphere.org/plugins/typotextfiltertmcode/. Removing amazon textfilter. It now has its own life at http://svn.typosphere.org/plugins/typotextfilteramazon/. Removing sparkline textfilter. It now has its own life at http://svn.typosphere.org/plugins/typotextfiltersparkline/
Rev #1795: Fixes 2 nasty bugs with autosave. The first one broke autosave when no title was set. We now set a default title. The second one was overriding permalink with a void string when post was autosaved because the permalink field was empty after autosave. For autosave: If no title is given, Typo gives it a title like “Article Draft + post_id”. When publishing, every article-draft-something permalink is just replaced with the article title crafted permalink.
Rev #1796: Enables in admin database migration back, gets rid of the old pre 4.1 general controller, sets the CHANGELOG for 5.1.3.

Many thanks to Cyril Mougel, Matijs van Zuijlen and Frédéric Logier for submitting patches.

Typo 5.0.4 beta 2 is out, fixes a critical security vulnerability

Michael Morin has discovered a critical vulnerability in Typo prior to release 5.0.4.98.1 which may lead to arbitrary code execution and privilege escalation on Typo blogs. Even though 5.0.4b1 was released yesterday, this vulnerability is critical enough to make us release 5.0.4b2 today.

This release also fixes a bunch of bugs such as:

• Missing dependencies in the installer.
• articles.rss and articles.atom bad naming.
• Bad unordered lists display on the new default theme.

You can download this new version on Rubyforge, or just install the gem.

Typo 5.0.4 beta is out

After 4 months of hard work, doubts and refactoring, Typo 5.0.3.98, aka Typo 5.0.4 beta is finaly out. As for any beta release, it was mostly done for testing purpose, and to let our happy translators do their job. So please, fill in bug reports when you find one, and don’t be shy, submit a patch along :-). All the features are not frozen yet, even though any addition will be minor.

So, what’s new there? Many things.

Multi roles, we did it

Multiple roles are finally here, thanks to the work of Davide D’Agostino and Cyril Mougel. You can now choose between Administrator and Publisher. Contributor may come soon, but this special profile needs some more development.

A new default theme

Typographic is a simple, clean theme made by Hélène from O2sources, a French company involved in free and open source projects. Typographic relies on lightness, simplicity, warm colors, and adapts your screen… up to a certain extent.

Dirtylicious and Standard issue have been removed and are now hosted at Typogarden. If you want to keep using them, you’ll have to download them first.

A brand new admin

The admin has been rethought, lot of code has disappeared, and it’s now cleaner, lighter and easier to use.

We now have tag management, which we plan to improve with things like tag merging, or detection of too close tags. We also offer tag autocomplete in the publishing interface.

The publishing interface has been rebuilt to be easier and clearer to use. We’ve dropped the live preview powered editor since it was really killing the server by sending continuous AJAX requests.

The come back of the gem

The gem is back and working, which means Typo has never been easier to install. Just run

  # gem install typo
  # typo install /some/path

And you’re done. Typo is now running on a random port using sqlite database.

However, we don’t recommend this configuration for production use. Even though there are many ways to run a Rails application, we have chosen and support Passenger aka mod_rails with MySQL as the easiest and most reliable way to run Typo.