v4.2.0 | Image upload validation, Markdown editor for field descriptions, and other bugfixes

• Fixed link to heroku 1 click deploy - by @lexoyo
• Display a debug warning if a user is an admin and the debug mode is on (for development purposes) - by @Angamanga and @tuxpiper
• Category selector: show the category selector only when categories have a length greater than zero - by @Guzzler
• Fix sortableJS version to 1.10 - by @aitorres
• Lower amount of clicks needed to change language - by @c3ho
• Formatting options in the description of all survey fields - by @Angamanga
• Show full date on hover state for post metadata by @AlanaFarkas
• Show intercom link only if intercom ID is set by @ritesh-pandey
• Validate images before attempting an upload by @Angamanga

v4.1.0 Bug fixes, new docs, and a new installation helper

Caution: support for PHP 7.0 dropped in this version

If you are still in PHP 7.0, you will need to upgrade to PHP >=7.1 to <7.4 to be able to use this version.

Documentation changes

We have released new documentation. You can find all the new documentation in https://docs.ushahidi.com, which includes a User Manual, new documentation for OSS deployers and contributors, and a public meeting log for our community and OSS focused meetings.

Installation helper

To make it easier for users to identify and solve common problems during the installation process, Platform bundles an installation helper utility that can be used in case of need.

You can read more about it here.

Requirements to install this version

• If you are using V3.x.x, you must follow the upgrade process from V3.x.x to V4.x.x described here.

• If you are using V4.x.x you should follow the update process, instead.

Technical notes for this release

• cf6b42b @rjmackay Set any users with a null role to 'user' role when rolling back

• b2fa7f9 @rjmackay fix: Make migration 20181019183337_remove_null_constraint_from_messages reversible

• 3437 @rjmackay Enable Mysql Strict mode by default - Enable mysql strict mode by default on eloquent DB connections.

• Fix bug with export batches missing a default value for filename.

• 3451 @rjmackay Started using a short term cache for survey creation, datasources and posts.

• 3458 @rjmackay Define Validator interface and rename old Validator to LegacyValidator.

• 3554 @rowasc Enable web hooks without a from field specified

• 27920b0 @rjmackay Updated CreateUsecase to allow default values on entities

• 3596ce4 @kinstelli fix: log the url with params into google analytics, rather than matched url pattern

• 42a5e4d @m-sameer - Fix: Make title field look like rest of the fields on a config form

• 05a339a @m-sameer Fix: Move Who can see this to the top of the saved search dialogue

• ecf1be2 @NidhiKJha Fixed: new post count and duplicates.

• 25b9011 @NidhiKJha Clear filter changed to Restore Defaults

• fcf023c @rowasc fix(sorting-attributes): fix attribute display order according to backend

• 2372 @rowasc fix: 2372-platform no more button in filters

• 2c30357 hotfix(video-url): fix issue where a blank video url caused the video to crash

• fc6bf8a @jessicaweberdev added description to the "Private deployment" flag in the settings package

• 3ab2653 @Angamanga checking if post is a tweet (avoid issue where some emails displayed as tweets)

• 1316 @Angamanga adding eslint rules

• Installation helper @Angamanga @tuxpiper @rowasc

• QA @obadha2

• Design @Erioldoesdesign

• Documentation & documentation reviews @StaicyG @CeciliaHinga @aoduor @rowasc @Erioldoesdesign @Obadha2 @tuxpiper @Angamanga

v4.0.0

This release is a major upgrade and replaces Kohana with Lumen.

Migration guide

PHP

Ushahidi now requires PHP >= 7.0 - < 7.2

Database config changes

The database configuration vars have been renamed.

Old var	New var
DB_NAME	DB_DATABASE
DB_USER	DB_USERNAME
DB_PASS	DB_PASSWORD
DB_TYPE=MySQLi	DB_CONNECTION=mysql

New Configuration keys

Var	Comments
CACHE_DRIVER	Supported options are file, redis and memcached. Read more about Lumen's cache configuration and options here https://lumen.laravel.com/docs/5.4/cache

Artisan

bin/ushahidi will be deprecated in future versions. You should use artisan instead.

Command name changes

CLI commands have been renamed. If you had cronjobs set up to run dataproviders, etc you will need to update those

Old command	New command
bin/ushahidi dataprovider incoming	artisan datasource:incoming
bin/ushahidi savedsearch	artisan savedsearch:sync
bin/ushahidi notification queue	artisan notification:queue
bin/ushahidi dataprovider outgoing	artisan datasource:outgoing
bin/ushahidi dataprovider webhook send	artisan webhook:send
bin/ushahidi user create	artisan user:create
bin/ushahidi user delete	artisan user:delete
bin/ushahidi config get	artisan config:get
bin/ushahidi config set	artisan config:set
bin/ushahidi export	artisan export
bin/ushahidi import	artisan import

Filesystem changes

Uploaded files have moved from application/media/upload to storage/app. You should move any existing files to the new location.

If you used a CDN for file storage, you should configure the FILESYSTEM_DRIVER variable in your .env file. Then review config/filesystems.php to find the other config parameters, the old CDN_... params have be renamed.

Old configuration files

Old configuration files in application/config are now obsolete. These are not either located in config/, or configured through environment vars (ie. .env)

Platform Client

To use this version of the platform API, you will need to update your version of the platform-client to use the same release version.

v3.12.3 - Cycle 7 release - bug fixes & usability enhancements

Cycle 7 release - bug fixes & usability enhancements

• BUG: CSV Export history should ONLY show exports from the logged in user
• Add a link to Permissions Documentation on Roles page
• Replace reports" with "posts"
• Sort Collections by reverse-chronological order by default
• Add Manage Collections & Saved Searches" permission to allow users to manage saved searches and collections"
• Rename IMPORT permission to be IMPORT & EXPORT to match functionality

Release v3.12.1

This release includes several security fixes to the platform. Listed in no particular order:

platform#1596 - Secure Credentials Leak: sanitize HTTP headers sent to sentry.
platform#1606 - Length of Password is Not Validated After Reset: validate the password lenght on password reset.
platform#1607 - Lack of Bruteforce Protection new user: send a HTTP 429 response if the rate limit is reached due to multiple requests to the registration endpoint.
platform#1610- Missing X-XSS-Protection HTTP Header: add the HTTP header in the response as: X-XSS-Protection: 1; mode=block. Please note that for OSS deployers (not in ushahidi.io), you will need to update your ngnix or apache configuration. The updated configuration templates are available at platform-release.
platform#1617 - Role Creation and Permission Assignment: verify if a user is a paid or non-paid member of ushahidi.io before creating roles.
platform#1618 - Internal Server Error While Uploading Photo: prevent upload errors from disclosing information about the underlying host where the images are located
USH-016 - SSL Cookie Without Secure Flag Set: Set the Secure flag for all cookies that are being communicated over a secure channel.

Release v3.10.0

Changes

• Reintegrating work from the COMRADES project. In particular
  • More complete webhooks support
  • API support for pushing partial updates to posts
  • See ushahidi/platform#1665 for detailed commits
• Centralised media, ratelimiter, and cdn configuration in .env file rather than application/config ushahidi/platform#2454
• Fix validation of category permissions ushahidi/platform#2486 ushahidi/platform#2481
• Remove confusing category filters from map sidebar. All category filtering now happens in the filters dropdown. ushahidi/platform#2435
• Fix and standardize categories behaviour when selecting parent categories. ushahidi/platform#2436 ushahidi/platform#2410
• Fix pagination of users list ushahidi/platform#2469

Migration info:

• If you have customized configuration for media, ratelimiter or cdn we recommend moving this configuration to the .env file. New .env params are
  • MEDIA_MAX_UPLOAD - maximum file upload size in bytes
  • RATELIMITER_CACHE - type of ratelimiter to use. See application/config/ratelimiter.php.
  • New CDN params - see application/config/cdn.php

Release v3.9.1

Fixes

• Fix switching to right-to-left layout when using right-to-left languages #1020
• Fix styling on terms of service modal #1040
• Fix check for lock permissions #1041
• Fix issue loading map tiles #1045
• Fix ordering of fields in post editor to match order configured for survey #1044
• Fix validation of title field in survey settings #1049
• Fix lat / lon fields in post editor not being updated when location is changed on the map #1056
• Fix handling of errors when pulling users current location #1056
• Fix bug creating new categories with colliding slugs (aka short name) #1058

Improvements

• Link to share on twitter now opens in a new window #1004
• Show posts as 'anonymous' when author info is unavailable #1047
• Allow re-order post title and description fields #1044
• List location lat/lon values on post detail view #1056

Release v3.9.0

Release v3.9.0

v3.8.0

v3.8.0

Numerous changes, see blog post here: https://www.ushahidi.com/blog/2017/11/30/ushahidi-releases-v3-8

v3.7.2-rc.2

v3.7.2-rc.2