v0.12.4

What's Changed

• Add support for titles in Markdown links: [text](url "title")
• Improve tree view by adding indents and vertical lines, and aligning texts by @m42cel in #85
• Reduce the list of characters to encode

New Contributors

• @m42cel made their first contribution in #85

Full Changelog: v0.12.3...v0.12.4

v0.12.3

• Fix oversized access token issues when using SSO

v0.12.2

• Fix issue with encoded spaces in links

v0.12.1

• Handle edge cases when encoding/decoding links fails

v0.12.0

• Add Markdown editing feature with a toggle button on the editor
• Add automatic backlinks update feature when renaming or moving files
• Add Pocket ID support for SSO
• Update editor toolbar with new button groups, labels and icons
• Fix Markdown quotes not being parsed
• Fix issues with escaping characters being saved in Markdown content
• Adjust editor toolbar on small screens
• Fix scrollbar colors on dark theme
• Adjust Markdown headings style
• Add minor UI improvements
• Improve the test suite

v0.11.2

• Override Turndown's aggressive special character escaping
• Allow Unicode letters in tags

v0.11.1

• Fix escaping issue in code spans

v0.11.0

• Add possibility to disable local authentication and use only one OAuth provider
• Add roles to users (Super Admin, Admin, User)
• Set the first registered user as Super Admin
• Automatically notify when new versions are available
• Enabling or disabling registration moved to the frontend
• Add app settings section for admins
• Replace some icons in the UI
• Bump dependencies
• Add more tests

v0.10.3

• Update Livewire to 3.6.4 for security improvements

v0.10.2

• Fix an XSS vulnerability in a specific route where malicious Markdown files could execute JavaScript when viewed. Reported by @cyberducky0o0
• Add MIME type validation for file and vault uploads
• Fix unnecessary backend calls when changing edit modes in the editor
• Add language label to code blocks
• Update editor toolbar UI and UX
• Adjust UI theme colors for better contrast

Thanks to Juan Soberanes (@cyberducky0o0) for responsibly disclosing the XSS vulnerability and assisting in testing the fix.