From 145e3ee318ca0ed57598e18e405ff7229c8d74f8 Mon Sep 17 00:00:00 2001 From: Erik Michelson Date: Wed, 4 Feb 2026 19:31:12 +0100 Subject: [PATCH] chore(release): bump versions and release notes Signed-off-by: Erik Michelson --- AUTHORS | 1 + docs/content/dev/openapi.yml | 2 +- docs/content/setup/docker.md | 2 +- docs/content/setup/manual-setup.md | 4 ++-- package.json | 2 +- public/docs/release-notes.md | 18 ++++++++++++++++++ 6 files changed, 24 insertions(+), 5 deletions(-) diff --git a/AUTHORS b/AUTHORS index 97d05ef9..91b8f9f5 100644 --- a/AUTHORS +++ b/AUTHORS @@ -197,6 +197,7 @@ WilliButz Wonder Chang Xaver Maierhofer Xavier Marques +xenein <76600392+xenein@users.noreply.github.com> Xiaodong Xu xnum Yannick Bungers diff --git a/docs/content/dev/openapi.yml b/docs/content/dev/openapi.yml index 4430502e..22375bda 100644 --- a/docs/content/dev/openapi.yml +++ b/docs/content/dev/openapi.yml @@ -3,7 +3,7 @@ openapi: 3.0.1 info: title: HedgeDoc description: HedgeDoc is an open source collaborative note editor. Several tasks of HedgeDoc can be automated through this API. - version: 1.10.5 + version: 1.10.6 contact: name: HedgeDoc on GitHub url: https://github.com/hedgedoc/hedgedoc diff --git a/docs/content/setup/docker.md b/docs/content/setup/docker.md index 185a2a8d..7c3f94e4 100644 --- a/docs/content/setup/docker.md +++ b/docs/content/setup/docker.md @@ -28,7 +28,7 @@ services: restart: always app: # Make sure to use the latest release from https://hedgedoc.org/latest-release - image: quay.io/hedgedoc/hedgedoc:1.10.5 + image: quay.io/hedgedoc/hedgedoc:1.10.6 environment: - CMD_DB_URL=postgres://hedgedoc:password@database:5432/hedgedoc - CMD_DOMAIN=localhost diff --git a/docs/content/setup/manual-setup.md b/docs/content/setup/manual-setup.md index 2e0e3172..5c46c6e4 100644 --- a/docs/content/setup/manual-setup.md +++ b/docs/content/setup/manual-setup.md @@ -19,7 +19,7 @@ 1. Check if you meet the [requirements at the top of this document](#manual-installation). 2. Download the [latest release](https://hedgedoc.org/latest-release/) and extract it. - Alternatively, you can use Git to clone the repository and checkout a release, e.g. with `git clone -b 1.10.5 https://github.com/hedgedoc/hedgedoc.git`. + Alternatively, you can use Git to clone the repository and checkout a release, e.g. with `git clone -b 1.10.6 https://github.com/hedgedoc/hedgedoc.git`. 3. Enter the directory and execute `bin/setup`, which will install the dependencies and create example configs. 4. Configure HedgeDoc: To get started, you can use this minimal `config.json`: ```json @@ -61,7 +61,7 @@ If you want to upgrade HedgeDoc from an older version, follow these steps: and the latest release. 2. Fully stop your old HedgeDoc server. 3. [Download](https://hedgedoc.org/latest-release/) the new release and extract it over the old directory. - If you use Git, you can check out the new tag with e.g. `git fetch origin && git checkout 1.10.5` + If you use Git, you can check out the new tag with e.g. `git fetch origin && git checkout 1.10.6` 5. Run `bin/setup`. This will take care of installing dependencies. It is safe to run on an existing installation. 6. *:octicons-light-bulb-16: If you used the release tarball for 1.7.0 or newer, this step can be skipped.* Build the frontend bundle by running `yarn install --immutable` and `yarn build`. The extra `yarn install --immutable` is necessary as `bin/setup` does not install the build dependencies. diff --git a/package.json b/package.json index d85925c9..2c5ccd98 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "HedgeDoc", - "version": "1.10.5", + "version": "1.10.6", "description": "The best platform to write and share markdown.", "main": "app.js", "license": "AGPL-3.0", diff --git a/public/docs/release-notes.md b/public/docs/release-notes.md index 56d62766..87b87cf5 100644 --- a/public/docs/release-notes.md +++ b/public/docs/release-notes.md @@ -1,5 +1,23 @@ # Release Notes +## 1.10.6 2026-02-04 + +### Security fixes + +This release contains two medium severity security fixes: +- [GHSA-x74j-jmf9-534w](https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-x74j-jmf9-534w) reports a bug where security headers for upload files were not set correctly. +- [GHSA-672m-p72w-gw28](https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-672m-p72w-gw28) reports potential security issues with limited script execution in uploaded SVG files. + +Thanks to [@HUSEYNKHANLI](https://github.com/HUSEYNKHANLI) and [@drkim-dev](https://github.com/drkim-dev) for reporting! + +### Maintenance + +- Dependency updates +- Enhancements in the documentation at [docs.hedgedoc.org](https://docs.hedgedoc.org) + +### Contributors +- [xenein](https://github.com/xenein) (#6322) + ## 1.10.5 2025-12-06 This release is just a fix for the docker container. It does not contain any