v9.09

Updated ChangeLog.
Fixed CRITICAL SECURITY ISSUES of [AuthBleed](https://wekan.fi/hall-of-fame/authbleed/).
2026-05-07 17:03:15 +03:00 · 2026-05-07 16:59:06 +03:00 · 2026-05-07 16:54:51 +03:00 · 2026-05-07 16:10:02 +03:00 · 2026-05-07 16:08:35 +03:00 · 2026-05-07 15:59:55 +03:00
315 changed files with 7193 additions and 9617 deletions
@@ -0,0 +1,686 @@
+name: Release All Platforms
+
+# Triggered manually via GitHub CLI or Actions UI.
+# Usage:
+#   gh workflow run release-all.yml -f old_version=8.42 -f new_version=8.43
+#
+# Or use the convenience script (commits pending changes, pushes, and triggers):
+#   ./releases/release-all.sh 8.42 8.43
+#
+# Required GitHub Secrets:
+#   GHCR_AUTH      - base64(username:token) for ghcr.io
+#   DOCKERHUB_AUTH - base64(username:token) for Docker Hub
+#   QUAY_AUTH      - base64(username:token) for Quay.io
+#   SNAP_AUTH      - Snapcraft store credentials
+
+on:
+  workflow_dispatch:
+    inputs:
+      old_version:
+        description: 'Previous version number (e.g. 8.42, without v prefix)'
+        required: true
+        type: string
+      new_version:
+        description: 'New version number (e.g. 8.43, without v prefix)'
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  packages: write
+  pages: write
+  id-token: write
+
+jobs:
+
+  # ─── 1. Extract version and release notes ───────────────────────────────────
+  prepare:
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+      changelog: ${{ steps.changelog.outputs.content }}
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: refs/tags/v${{ needs.prepare.outputs.version }}
+
+      - name: Set version from input
+        id: version
+        run: |
+          VERSION="${{ needs.prepare.outputs.version }}"
+          VERSION="${VERSION#v}"
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Extract release notes from CHANGELOG.md
+        id: changelog
+        run: |
+          VERSION="${{ steps.version.outputs.version }}"
+          # Try to find the version-specific section first, then fall back to Upcoming
+          NOTES=$(python3 - <<PYEOF
+          import re, sys
+          version = "$VERSION"
+          with open("CHANGELOG.md", encoding="utf-8") as f:
+              content = f.read()
+          # Pattern: section heading through (but not including) the next heading
+          patterns = [
+              rf"(# v{re.escape(version)} .*?)(?=\n# v[0-9]|\Z)",
+              r"(# Upcoming WeKan.*?)(?=\n# v[0-9]|\Z)",
+          ]
+          for pat in patterns:
+              m = re.search(pat, content, re.DOTALL)
+              if m:
+                  print(m.group(1).strip())
+                  sys.exit(0)
+          print(f"WeKan v{version}")
+          PYEOF
+          )
+          echo "content<<GHEOF" >> $GITHUB_OUTPUT
+          echo "$NOTES" >> $GITHUB_OUTPUT
+          echo "GHEOF" >> $GITHUB_OUTPUT
+
+  # ─── 2. Build amd64 bundle (full Meteor 3 build) ────────────────────────────
+  # Meteor 3.5-beta.7 installer supports only: Linux x86_64, Linux aarch64, macOS, Windows.
+  # It explicitly rejects armhf, s390x, and ppc64le at install time.
+  # Therefore the full Meteor build always runs here on x86_64.
+  # All other Linux architectures then rebuild only the native npm modules
+  # from this bundle (much faster than a full Meteor build).
+  # Node.js version must match what Meteor 3.5-beta.7 bundles (detected automatically).
+  build-amd64:
+    needs: prepare
+    runs-on: ubuntu-24.04
+    timeout-minutes: 180
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION: ${{ needs.prepare.outputs.version }}
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: refs/tags/v${{ inputs.new_version }}
+
+      - name: Cache Meteor installation
+        uses: actions/cache@v5
+        with:
+          path: ~/.meteor
+          key: meteor-${{ hashFiles('.meteor/release') }}-${{ hashFiles('.meteor/packages') }}
+          restore-keys: meteor-
+
+      - name: Cache npm packages
+        uses: actions/cache@v5
+        with:
+          path: ~/.npm
+          key: npm-${{ hashFiles('package-lock.json') }}
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y build-essential g++ make python3 curl wget zip unzip
+
+      # Pin to detected latest Node.js 24.x — must match Meteor's bundled version.
+      # Using the same version for build and npm rebuild ensures consistent native module ABI.
+      - uses: actions/setup-node@v6
+        with:
+          node-version: '${{ needs.prepare.outputs.version }}'
+
+      - name: Install Meteor
+        run: |
+          if [ ! -f ~/.meteor/meteor ]; then
+            curl https://install.meteor.com/ | sh
+          fi
+          echo "$HOME/.meteor" >> $GITHUB_PATH
+
+      - name: Build WeKan bundle
+        run: |
+          rm -rf .build node_modules .meteor/local
+          (meteor update --npm 2>/dev/null || true) && meteor npm install
+          meteor build .build --directory
+
+      - name: Create amd64 zip
+        run: |
+          cd .build
+          zip -r wekan-${VERSION}-amd64.zip bundle
+
+      - uses: actions/upload-artifact@v7
+        with:
+          name: bundle-amd64
+          path: .build/wekan-${{ needs.prepare.outputs.version }}-amd64.zip
+          retention-days: 1
+
+  # ─── 3. Build arm64 bundle (rebuild native modules natively) ─────────────────
+  # Meteor 3.5-beta.7 does support Linux aarch64, but running a full Meteor build a
+  # second time would double the build time for the same result. npm rebuild on
+  # the native arm64 GitHub Actions runner is much faster and produces the same
+  # platform-specific native modules.
+  build-arm64:
+    needs: [prepare, build-amd64]
+    runs-on: ubuntu-24.04-arm
+    timeout-minutes: 60
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION_ARM64: ''
+    steps:
+      - name: Install dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y build-essential g++ make python3 curl unzip zip
+
+
+      - name: Set Node.js version for arm64
+        id: node_arm64
+        run: |
+          echo "NODE_VERSION_ARM64=24" >> $GITHUB_ENV
+
+      - name: Download amd64 bundle
+        uses: actions/download-artifact@v8
+        with:
+          name: bundle-amd64
+
+      - name: Rebuild native modules for arm64 in container
+        run: |
+          unzip wekan-${VERSION}-amd64.zip
+          # Fix: bcrypt 5.0.1 (Meteor accounts-password) ships node-addon-api@3
+          # which fails to compile on Node.js 24. Replace with bcrypt 6.0.0.
+          BCRYPT_DIR="$(pwd)/bundle/programs/server/npm/node_modules/meteor/accounts-password/node_modules/bcrypt"
+          if [ -d "$BCRYPT_DIR" ]; then
+            rm -rf "$BCRYPT_DIR"
+            TMP=$(mktemp -d)
+            pushd "$TMP" > /dev/null
+            npm pack bcrypt@6.0.0
+            mkdir bcrypt && tar xzf bcrypt-*.tgz --strip-components=1 -C bcrypt
+            cd bcrypt && npm install --ignore-scripts && cd ..
+            cp -a bcrypt "$BCRYPT_DIR"
+            popd > /dev/null
+            rm -rf "$TMP"
+          fi
+          # Use the latest available Node.js 24.x slim image for arm64
+          docker run --rm --platform linux/arm64 \
+            -v "$(pwd)/bundle:/bundle" \
+            -w /bundle/programs/server \
+            node:24-slim \
+            sh -c "apt-get update -qq && apt-get install -y -q build-essential python3 && npm install"
+
+      - name: Clean up and create arm64 zip
+        run: |
+          zip -r wekan-${VERSION}-arm64.zip bundle
+
+      - uses: actions/upload-artifact@v7
+        with:
+          name: bundle-arm64
+          path: wekan-${{ needs.prepare.outputs.version }}-arm64.zip
+          retention-days: 1
+
+  # ─── 4. Build s390x bundle (rebuild native modules via QEMU container) ───────
+  # Meteor 3.5-beta.7 does NOT support s390x (installer exits with error on that arch).
+  # GitHub Actions has no native s390x runners.
+  # Solution: QEMU emulation + node:<version>-slim (s390x variant) for npm rebuild.
+  build-s390x:
+    needs: [prepare, build-amd64]
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION_S390X: ''
+    steps:
+      - name: Set up QEMU for s390x
+        uses: docker/setup-qemu-action@v4
+        with:
+          platforms: s390x
+
+      - name: Install unzip/zip
+        run: sudo apt-get update && sudo apt-get install -y unzip zip
+
+      - name: Download amd64 bundle
+        uses: actions/download-artifact@v8
+        with:
+          name: bundle-amd64
+
+      - name: Set Node.js version for s390x
+        id: node_s390x
+        run: |
+          echo "NODE_VERSION_S390X=24" >> $GITHUB_ENV
+
+      - name: Rebuild native modules for s390x in container
+        run: |
+          unzip wekan-${VERSION}-amd64.zip
+          rm -rf bundle/programs/server/node_modules
+          # Fix: bcrypt 5.0.1 (Meteor accounts-password) ships node-addon-api@3
+          # which fails to compile on Node.js 24. Replace with bcrypt 6.0.0.
+          BCRYPT_DIR="$(pwd)/bundle/programs/server/npm/node_modules/meteor/accounts-password/node_modules/bcrypt"
+          if [ -d "$BCRYPT_DIR" ]; then
+            rm -rf "$BCRYPT_DIR"
+            TMP=$(mktemp -d)
+            pushd "$TMP" > /dev/null
+            npm pack bcrypt@6.0.0
+            mkdir bcrypt && tar xzf bcrypt-*.tgz --strip-components=1 -C bcrypt
+            cd bcrypt && npm install --ignore-scripts && cd ..
+            cp -a bcrypt "$BCRYPT_DIR"
+            popd > /dev/null
+            rm -rf "$TMP"
+          fi
+          # Use the latest available Node.js 24.x slim image for s390x
+          docker run --rm --platform linux/s390x \
+            -v "$(pwd)/bundle:/bundle" \
+            -w /bundle/programs/server \
+            node:24-slim \
+            sh -c "apt-get update -qq && apt-get install -y -q build-essential python3 && npm install"
+
+      - name: Clean up and create s390x zip
+        run: |
+          zip -r wekan-${VERSION}-s390x.zip bundle
+
+      - uses: actions/upload-artifact@v7
+        with:
+          name: bundle-s390x
+          path: wekan-${{ needs.prepare.outputs.version }}-s390x.zip
+          retention-days: 1
+
+  # ─── 4b. Build ppc64le bundle (rebuild native modules via QEMU container) ────
+  # Meteor 3.5-beta.7 does NOT support ppc64le (installer exits with error on that arch).
+  # GitHub Actions has no native ppc64le runners.
+  # Solution: QEMU emulation + node:<version>-slim (ppc64le variant) for npm rebuild.
+  build-ppc64le:
+    needs: [prepare, build-amd64]
+    runs-on: ubuntu-latest
+    timeout-minutes: 90
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION_PPC64LE: ''
+    steps:
+      - name: Set up QEMU for ppc64le
+        uses: docker/setup-qemu-action@v4
+        with:
+          platforms: ppc64le
+
+      - name: Install unzip/zip
+        run: sudo apt-get update && sudo apt-get install -y unzip zip
+
+      - name: Download amd64 bundle
+        uses: actions/download-artifact@v8
+        with:
+          name: bundle-amd64
+
+      - name: Set Node.js version for ppc64le
+        id: node_ppc64le
+        run: |
+          echo "NODE_VERSION_PPC64LE=24" >> $GITHUB_ENV
+
+      - name: Rebuild native modules for ppc64le in container
+        run: |
+          unzip wekan-${VERSION}-amd64.zip
+          rm -rf bundle/programs/server/node_modules
+          # Fix: bcrypt 5.0.1 (Meteor accounts-password) ships node-addon-api@3
+          # which fails to compile on Node.js 24. Replace with bcrypt 6.0.0.
+          BCRYPT_DIR="$(pwd)/bundle/programs/server/npm/node_modules/meteor/accounts-password/node_modules/bcrypt"
+          if [ -d "$BCRYPT_DIR" ]; then
+            rm -rf "$BCRYPT_DIR"
+            TMP=$(mktemp -d)
+            pushd "$TMP" > /dev/null
+            npm pack bcrypt@6.0.0
+            mkdir bcrypt && tar xzf bcrypt-*.tgz --strip-components=1 -C bcrypt
+            cd bcrypt && npm install --ignore-scripts && cd ..
+            cp -a bcrypt "$BCRYPT_DIR"
+            popd > /dev/null
+            rm -rf "$TMP"
+          fi
+          # Use the latest available Node.js 24.x slim image for ppc64le
+          docker run --rm --platform linux/ppc64le \
+            -v "$(pwd)/bundle:/bundle" \
+            -w /bundle/programs/server \
+            node:24-slim \
+            sh -c "apt-get update -qq && apt-get install -y -q build-essential python3 && npm install"
+
+      - name: Clean up and create ppc64le zip
+        run: |
+          zip -r wekan-${VERSION}-ppc64le.zip bundle
+
+      - uses: actions/upload-artifact@v7
+        with:
+          name: bundle-ppc64le
+          path: wekan-${{ needs.prepare.outputs.version }}-ppc64le.zip
+          retention-days: 1
+
+  # ─── 4c. Build armhf bundle — COMMENTED OUT ─────────────────────────────────
+  # No official Node.js binaries exist for armhf (arm/v7).
+  #build-armhf:
+  #  needs: [prepare, build-amd64]
+  #  runs-on: ubuntu-latest
+  #  timeout-minutes: 120
+  #  env:
+  #    VERSION: ${{ needs.prepare.outputs.version }}
+  #  steps:
+  #    - name: Set up QEMU for arm/v7
+  #      uses: docker/setup-qemu-action@v4
+  #      with:
+  #        platforms: arm
+  #
+  #    - name: Install unzip/zip
+  #      run: sudo apt-get update && sudo apt-get install -y unzip zip
+  #
+  #    - name: Download amd64 bundle
+  #      uses: actions/download-artifact@v8
+  #      with:
+  #        name: bundle-amd64
+  #
+  #    - name: Rebuild native modules for armhf in container
+  #      run: |
+  #        unzip wekan-${VERSION}-amd64.zip
+  #        rm -rf bundle/programs/server/node_modules
+  #        # Fix: bcrypt 5.0.1 (Meteor accounts-password) ships node-addon-api@3
+  #        # which fails to compile on Node.js 24. Replace with bcrypt 6.0.0.
+  #        BCRYPT_DIR="$(pwd)/bundle/programs/server/npm/node_modules/meteor/accounts-password/node_modules/bcrypt"
+  #        if [ -d "$BCRYPT_DIR" ]; then
+  #          rm -rf "$BCRYPT_DIR"
+  #          TMP=$(mktemp -d)
+  #          pushd "$TMP" > /dev/null
+  #          npm pack bcrypt@6.0.0
+  #          mkdir bcrypt && tar xzf bcrypt-*.tgz --strip-components=1 -C bcrypt
+  #          cd bcrypt && npm install --ignore-scripts && cd ..
+  #          cp -a bcrypt "$BCRYPT_DIR"
+  #          popd > /dev/null
+  #          rm -rf "$TMP"
+  #        fi
+  #        # node:<version>-slim arm/v7 — same Node.js version as Meteor bundled
+  #        docker run --rm --platform linux/arm/v7 \
+  #          -v "$(pwd)/bundle:/bundle" \
+  #          -w /bundle/programs/server \
+  #          node:${NODE_VERSION}-slim \
+  #          sh -c "apt-get update -qq && apt-get install -y -q build-essential python3 && npm install"
+  #
+  #    - name: Clean up and create armhf zip
+  #      run: |
+  #        zip -r wekan-${VERSION}-armhf.zip bundle
+  #
+  #    - uses: actions/upload-artifact@v7
+  #      with:
+  #        name: bundle-armhf
+  #        path: wekan-${{ needs.prepare.outputs.version }}-armhf.zip
+  #        retention-days: 1
+
+  # ─── 5. Build win64 bundle (rebuild native modules on Windows) ───────────────
+  build-win64:
+    needs: [prepare, build-amd64]
+    runs-on: windows-latest
+    timeout-minutes: 60
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+    steps:
+      - uses: actions/setup-node@v6
+        with:
+          node-version: '${{ needs.prepare.outputs.version }}'
+
+      ## With Node 24 these are already preinstalled at GitHub Windows runners
+      #- name: Install node-gyp and build tools
+      #  run: |
+      #    npm install -g windows-build-tools --vs2019 2>$null; exit 0
+
+      - name: Install 7-zip
+        run: choco install -y 7zip
+
+      - name: Download amd64 bundle
+        uses: actions/download-artifact@v8
+        with:
+          name: bundle-amd64
+
+      - name: Fix bcrypt for Node.js 24
+        shell: bash
+        run: |
+          7z x wekan-${VERSION}-amd64.zip
+          # Fix: bcrypt 5.0.1 (Meteor accounts-password) ships node-addon-api@3
+          # which fails to compile on Node.js 24. Replace with bcrypt 6.0.0.
+          BCRYPT_DIR="$(pwd)/bundle/programs/server/npm/node_modules/meteor/accounts-password/node_modules/bcrypt"
+          if [ -d "$BCRYPT_DIR" ]; then
+            rm -rf "$BCRYPT_DIR"
+            TMP=$(mktemp -d)
+            pushd "$TMP" > /dev/null
+            npm pack bcrypt@6.0.0
+            mkdir bcrypt && tar xzf bcrypt-*.tgz --strip-components=1 -C bcrypt
+            cd bcrypt && npm install --ignore-scripts && cd ..
+            cp -r bcrypt "$BCRYPT_DIR"
+            popd > /dev/null
+            rm -rf "$TMP"
+          fi
+
+      - name: Rebuild native modules for Windows
+        shell: cmd
+        run: |
+          cd bundle\programs\server
+          rmdir /s /q node_modules
+          npm install
+          cd ..\..\..
+
+      - name: Create win64 zip
+        shell: cmd
+        run: 7z a wekan-%VERSION%-win64.zip bundle
+
+      - uses: actions/upload-artifact@v7
+        with:
+          name: bundle-win64
+          path: wekan-${{ needs.prepare.outputs.version }}-win64.zip
+          retention-days: 1
+
+  # ─── 6. Create GitHub Release and upload all bundles ────────────────────────
+  release:
+    needs: [prepare, build-amd64, build-arm64, build-s390x, build-ppc64le, build-win64]
+    runs-on: ubuntu-latest
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+    steps:
+      - name: Download all bundles
+        uses: actions/download-artifact@v8
+        with:
+          pattern: bundle-*
+          merge-multiple: true
+
+      - name: Create GitHub Release with all bundles
+        uses: softprops/action-gh-release@v3
+        with:
+          tag_name: v${{ needs.prepare.outputs.version }}
+          name: v${{ needs.prepare.outputs.version }}
+          body: ${{ needs.prepare.outputs.changelog }}
+          files: |
+            wekan-${{ needs.prepare.outputs.version }}-amd64.zip
+            wekan-${{ needs.prepare.outputs.version }}-arm64.zip
+            wekan-${{ needs.prepare.outputs.version }}-s390x.zip
+            wekan-${{ needs.prepare.outputs.version }}-ppc64le.zip
+            wekan-${{ needs.prepare.outputs.version }}-win64.zip
+
+  # ─── 7. Build and push multi-platform Docker image ──────────────────────────
+  docker:
+    needs: [prepare, release]
+    runs-on: ubuntu-latest
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: refs/tags/v${{ inputs.new_version }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Create Docker config with registry credentials
+        run: |
+          mkdir -p ~/.docker
+          cat > ~/.docker/config.json <<EOF
+          {
+            "auths": {
+              "ghcr.io": {
+                "auth": "${{ secrets.GHCR_AUTH }}"
+              },
+              "https://index.docker.io/v1/": {
+                "auth": "${{ secrets.DOCKERHUB_AUTH }}"
+              },
+              "quay.io": {
+                "auth": "${{ secrets.QUAY_AUTH }}"
+              }
+            }
+          }
+          EOF
+
+      - name: Create and use buildx builder
+        run: |
+          docker buildx create --name mybuilder --driver docker-container --use
+          docker buildx inspect --bootstrap
+
+      - name: Build and push Docker image to all registries
+        run: |
+          docker buildx build \
+            --platform linux/amd64,linux/arm64,linux/s390x,linux/ppc64le \
+            -t wekanteam/wekan:v${VERSION} \
+            -t wekanteam/wekan:latest \
+            -t quay.io/wekan/wekan:v${VERSION} \
+            -t quay.io/wekan/wekan:latest \
+            -t ghcr.io/wekan/wekan:v${VERSION} \
+            -t ghcr.io/wekan/wekan:latest \
+            --push .
+
+  # ─── 8. Build and publish snap packages ──────────────────────────────────────
+  # Build snap with snapcraft pack (like releases/snap-build.sh) using LXD,
+  # then push to Snap Store edge channel (like releases/snap-push-to-store.sh).
+  # Promote to stable manually via the Snap Store dashboard when ready.
+  snap:
+    needs: [prepare, release]
+    runs-on: ubuntu-latest
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: refs/tags/v${{ inputs.new_version }}
+
+      - name: Install snapcraft
+        run: sudo snap install snapcraft --classic
+
+      - name: Build snap
+        run: sudo snapcraft pack --destructive-mode
+
+      - name: Upload snap files as artifacts
+        uses: actions/upload-artifact@v7
+        with:
+          name: snaps
+          path: "*.snap"
+          retention-days: 30
+
+      - name: Push all snaps to Snap Store edge channel
+        env:
+          SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAP_AUTH }}
+        run: |
+          for snap_file in *.snap; do
+            echo "Publishing $snap_file ..."
+            snapcraft upload --release=edge "$snap_file"
+          done
+
+      - name: Upload all snaps to GitHub Release
+        uses: softprops/action-gh-release@v3
+        with:
+          tag_name: v${{ needs.prepare.outputs.version }}
+          files: "*.snap"
+
+  # ─── 9. Update Helm charts and deploy to GitHub Pages ─────────────────────────
+  # Chart source is in helm/wekan/, published packages + index.yaml in docs/wekan/.
+  # GitHub Pages deploys docs/wekan/ via Actions, serving at https://wekan.fi/wekan/
+  helm:
+    needs: [prepare, docker]
+    runs-on: ubuntu-latest
+    env:
+      VERSION: ${{ needs.prepare.outputs.version }}
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: refs/tags/v${{ inputs.new_version }}
+
+      - name: Install Helm
+        run: |
+          curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
+
+      - name: Update Chart.yaml and values.yaml with new version
+        run: |
+          CHART_PATH=docs/wekan
+          CHART_FILE=$CHART_PATH/Chart.yaml
+          VALUES_FILE=$CHART_PATH/values.yaml
+          CHARTS_DIR=docs/charts
+          INDEX_FILE=$CHARTS_DIR/index.yaml
+          VERSION=${VERSION}
+          # Update Chart.yaml (appVersion and version)
+          sed -i "s/^appVersion: .*/appVersion: \"$VERSION\"/" "$CHART_FILE"
+          sed -i "s/^version: .*/version: $VERSION.0/" "$CHART_FILE"
+          # Update values.yaml (image.tag)
+          sed -i "s/^  tag: v.*/  tag: v$VERSION/" "$VALUES_FILE"
+
+      - name: Build Helm dependencies
+        run: |
+          cd docs/wekan
+          helm repo add mongo https://groundhog2k.github.io/helm-charts/ || true
+          helm dependency update
+          helm dependency build
+
+      - name: Package chart to docs/charts and update index.yaml
+        run: |
+          CHART_PATH=../w/charts/wekan
+          CHARTS_DIR=../w/charts
+          INDEX_FILE=$CHARTS_DIR/index.yaml
+          VERSION=${VERSION}
+          cd $CHARTS_DIR
+          helm package ../wekan -d .
+          ARCHIVE=wekan-$VERSION.0.tgz
+          SHA256=$(sha256sum "$ARCHIVE" | awk '{print $1}')
+          CREATED=$(TZ='Europe/Helsinki' date '+%Y-%m-%dT%H:%M:%S.000000000%:z')
+          if [ -f "$INDEX_FILE" ]; then
+            awk '/^- apiVersion: v2/{flag=1;print;next}/^- apiVersion: v2/{flag=0}flag' "$INDEX_FILE" | head -n 30 > /tmp/topentry.yaml
+            sed -i "s/appVersion: .*/appVersion: \"$VERSION\"/" /tmp/topentry.yaml
+            sed -i "s/created: .*/created: \"$CREATED\"/" /tmp/topentry.yaml
+            sed -i "s/digest: .*/digest: $SHA256/" /tmp/topentry.yaml
+            sed -i "s|urls:.*|urls:\n    - https://wekan.github.io/wekan/wekan-$VERSION.0.tgz|" /tmp/topentry.yaml
+            sed -i "s/version: .*/version: $VERSION.0/" /tmp/topentry.yaml
+            awk 'NR==1{print;system("cat /tmp/topentry.yaml");next} /^  - apiVersion: v2/ && !p{p=1;next} 1' "$INDEX_FILE" > /tmp/index.yaml
+            mv /tmp/index.yaml "$INDEX_FILE"
+            rm /tmp/topentry.yaml
+          else
+            echo "index.yaml not found, skipping index update."
+          fi
+
+      - name: Commit updated chart and index
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add docs/wekan/ docs/charts/
+          git commit -m "${VERSION}.0"
+          git push origin HEAD:refs/heads/main
+
+      - name: Upload docs/charts/ as Pages artifact
+        uses: actions/upload-pages-artifact@v5
+        with:
+          path: docs/charts/
+
+      - name: Commit updated chart
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add docs/wekan/
+          git commit -m "${VERSION}.0"
+          git push origin HEAD:refs/heads/main
+
+      - name: Upload docs/wekan/ as Pages artifact
+        uses: actions/upload-pages-artifact@v5
+        with:
+          path: docs/wekan/
+
+  # ─── 10. Deploy Helm chart to GitHub Pages ───────────────────────────────────
+  deploy-pages:
+    needs: helm
+    runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v5
@@ -127,7 +127,7 @@ jobs:
      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
-          node-version: '24.14.1'
+          node-version: '24.15.0'

      - name: Setup meteor
        uses: meteorengineer/setup-meteor@v3
@@ -0,0 +1,169 @@
+name: Playwright E2E Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: playwright-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  unit-tests:
+    name: Meteor unit tests
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node 24
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          cache: 'npm'
+
+      - name: Install Meteor
+        run: curl https://install.meteor.com/ | sh
+
+      - name: Install npm dependencies
+        run: npm ci
+
+      - name: Run Meteor unit tests
+        run: meteor test --once --driver-package meteortesting:mocha
+        env:
+          TEST_WATCH: '0'
+
+  e2e-tests:
+    name: Playwright E2E (${{ matrix.project }})
+    runs-on: ubuntu-24.04
+    needs: unit-tests
+    strategy:
+      fail-fast: false
+      matrix:
+        project: [chromium, firefox]
+        # webkit excluded from CI (requires macOS runner) — run locally with npm run test:e2e:all
+
+    services:
+      mongodb:
+        image: mongo:7
+        ports: ['27017:27017']
+        options: >-
+          --health-cmd "mongosh --eval 'db.adminCommand(\"ping\")'"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node 24
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          cache: 'npm'
+
+      - name: Install Meteor
+        run: curl https://install.meteor.com/ | sh
+
+      - name: Install npm dependencies
+        run: npm ci
+
+      - name: Install Playwright browsers
+        run: npx playwright install --with-deps ${{ matrix.project }}
+        working-directory: tests/playwright
+
+      - name: Start WeKan in background
+        run: |
+          MONGO_URL=mongodb://localhost:27017/wekan_test \
+          ROOT_URL=http://localhost:3000 \
+          PORT=3000 \
+          meteor run --settings settings.json &
+          # Wait up to 120 s for WeKan to become available
+          for i in $(seq 1 24); do
+            curl -sf http://localhost:3000 > /dev/null && break
+            echo "Waiting for WeKan... attempt $i"
+            sleep 5
+          done
+        env:
+          DISABLE_CAPTCHA: 'true'
+
+      - name: Run Playwright tests (${{ matrix.project }})
+        run: |
+          npx playwright test \
+            --project=${{ matrix.project }} \
+            --reporter=github
+        working-directory: tests/playwright
+        env:
+          WEKAN_BASE_URL: http://localhost:3000
+          WEKAN_MONGO_URL: mongodb://localhost:27017/wekan_test
+
+      - name: Upload Playwright report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report-${{ matrix.project }}
+          path: tests/playwright/playwright-report/
+          retention-days: 14
+
+      - name: Upload test results (screenshots / videos)
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: test-results-${{ matrix.project }}
+          path: tests/playwright/test-results/
+          retention-days: 7
+
+  e2e-regression:
+    name: Puppeteer regression suite
+    runs-on: ubuntu-24.04
+    needs: unit-tests
+
+    services:
+      mongodb:
+        image: mongo:7
+        ports: ['27017:27017']
+        options: >-
+          --health-cmd "mongosh --eval 'db.adminCommand(\"ping\")'"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node 24
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          cache: 'npm'
+
+      - name: Install Meteor
+        run: curl https://install.meteor.com/ | sh
+
+      - name: Install npm dependencies
+        run: npm ci
+
+      - name: Install Chromium
+        run: sudo apt-get install -y chromium-browser
+
+      - name: Start WeKan in background
+        run: |
+          MONGO_URL=mongodb://localhost:27017/wekan_regression \
+          ROOT_URL=http://localhost:3000 \
+          PORT=3000 \
+          meteor run &
+          for i in $(seq 1 24); do
+            curl -sf http://localhost:3000 > /dev/null && break
+            sleep 5
+          done
+        env:
+          DISABLE_CAPTCHA: 'true'
+
+      - name: Run list-regressions e2e
+        run: node tests/e2e/list-regressions.js
+        env:
+          WEKAN_BASE_URL: http://localhost:3000
+          WEKAN_MONGO_URL: mongodb://localhost:27017/wekan_regression
+          CHROMIUM_PATH: /usr/bin/chromium-browser
+          HEADLESS: 'true'
@@ -32,79 +32,9 @@ permissions:
  id-token: write

 jobs:
-  # ─── 0. Version bump, docs rebuild, and tag creation ────────────────────────
-  # Runs update-node-version.sh, rebuild-docs.sh, and sed-release-versions.sh,
-  # then commits, pushes, and creates the version tag.
-  # Skipped on re-run if the tag already exists.
-  version-bump:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-
-      - name: Check if tag already exists
-        id: check
-        run: |
-          if git ls-remote --tags origin | grep -q "refs/tags/v${{ inputs.new_version }}$"; then
-            echo "existed=true" >> $GITHUB_OUTPUT
-            echo "Tag v${{ inputs.new_version }} already exists. Skipping version bump."
-          else
-            echo "existed=false" >> $GITHUB_OUTPUT
-          fi
-
-      - uses: actions/setup-node@v6
-        if: steps.check.outputs.existed == 'false'
-        with:
-          node-version: '24.14.1'
-
-      - name: Install Python dependencies for API doc generation
-        if: steps.check.outputs.existed == 'false'
-        run: python3 -m pip install --break-system-packages esprima
-
-      - name: Delete GitHub Actions caches
-        if: steps.check.outputs.existed == 'false'
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: gh cache delete --all || true
-
-      - name: Update Node.js to latest 24.x
-        if: steps.check.outputs.existed == 'false'
-        run: ./releases/update-node-version.sh
-
-      - name: Rebuild API docs
-        if: steps.check.outputs.existed == 'false'
-        run: ./releases/rebuild-docs.sh "${{ inputs.new_version }}"
-
-      - name: Update version numbers in release files
-        if: steps.check.outputs.existed == 'false'
-        run: ./releases/sed-release-versions.sh "${{ inputs.old_version }}" "${{ inputs.new_version }}"
-
-      - name: Commit and push version bump
-        if: steps.check.outputs.existed == 'false'
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add --all
-          # GITHUB_TOKEN cannot push workflow file changes; exclude them
-          git reset HEAD -- .github/workflows/ || true
-          git checkout -- .github/workflows/ || true
-          if git diff --cached --quiet; then
-            echo "No changes to commit."
-          else
-            git commit -m "v${{ inputs.new_version }}"
-          fi
-          git push
-
-      - name: Create and push tag
-        if: steps.check.outputs.existed == 'false'
-        run: |
-          git tag -a "v${{ inputs.new_version }}" -m "v${{ inputs.new_version }}"
-          git push origin "v${{ inputs.new_version }}"

  # ─── 1. Extract version and release notes ───────────────────────────────────
  prepare:
-    needs: version-bump
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.version.outputs.version }}
@@ -112,12 +42,12 @@ jobs:
    steps:
      - uses: actions/checkout@v6
        with:
-          ref: refs/tags/v${{ inputs.new_version }}
+          ref: refs/tags/v${{ needs.prepare.outputs.version }}

      - name: Set version from input
        id: version
        run: |
-          VERSION="${{ inputs.new_version }}"
+          VERSION="${{ needs.prepare.outputs.version }}"
          VERSION="${VERSION#v}"
          echo "version=$VERSION" >> $GITHUB_OUTPUT

@@ -154,13 +84,14 @@ jobs:
  # Therefore the full Meteor build always runs here on x86_64.
  # All other Linux architectures then rebuild only the native npm modules
  # from this bundle (much faster than a full Meteor build).
-  # Node.js version must match what Meteor 3.5-beta.7 bundles: 24.14.1 (ABI 143).
+  # Node.js version must match what Meteor 3.5-beta.7 bundles (detected automatically).
  build-amd64:
    needs: prepare
    runs-on: ubuntu-24.04
    timeout-minutes: 180
    env:
      VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION: ${{ needs.prepare.outputs.version }}
    steps:
      - uses: actions/checkout@v6
        with:
@@ -184,11 +115,11 @@ jobs:
          sudo apt-get update
          sudo apt-get install -y build-essential g++ make python3 curl wget zip unzip

-      # Pin to Node 24.14.1 — the exact version bundled by Meteor 3.5-beta.7.
+      # Pin to detected latest Node.js 24.x — must match Meteor's bundled version.
      # Using the same version for build and npm rebuild ensures consistent native module ABI.
      - uses: actions/setup-node@v6
        with:
-          node-version: '24.14.1'
+          node-version: '${{ needs.prepare.outputs.version }}'

      - name: Install Meteor
        run: |
@@ -225,22 +156,26 @@ jobs:
    timeout-minutes: 60
    env:
      VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION_ARM64: ''
    steps:
      - name: Install dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y build-essential g++ make python3 curl unzip zip

-      - uses: actions/setup-node@v6
-        with:
-          node-version: '24.14.1'
+
+      - name: Set Node.js version for arm64
+        id: node_arm64
+        run: |
+          echo "NODE_VERSION_ARM64=24" >> $GITHUB_ENV

      - name: Download amd64 bundle
        uses: actions/download-artifact@v8
        with:
          name: bundle-amd64

-      - name: Rebuild native modules for arm64
+      - name: Rebuild native modules for arm64 in container
        run: |
          unzip wekan-${VERSION}-amd64.zip
          # Fix: bcrypt 5.0.1 (Meteor accounts-password) ships node-addon-api@3
@@ -257,10 +192,12 @@ jobs:
            popd > /dev/null
            rm -rf "$TMP"
          fi
-          cd bundle/programs/server
-          rm -rf node_modules
-          npm install
-          cd ../..
+          # Use the latest available Node.js 24.x slim image for arm64
+          docker run --rm --platform linux/arm64 \
+            -v "$(pwd)/bundle:/bundle" \
+            -w /bundle/programs/server \
+            node:24-slim \
+            sh -c "apt-get update -qq && apt-get install -y -q build-essential python3 && npm install"

      - name: Clean up and create arm64 zip
        run: |
@@ -275,14 +212,15 @@ jobs:
  # ─── 4. Build s390x bundle (rebuild native modules via QEMU container) ───────
  # Meteor 3.5-beta.7 does NOT support s390x (installer exits with error on that arch).
  # GitHub Actions has no native s390x runners.
-  # Solution: QEMU emulation + node:24.14.1-slim (s390x variant) for npm rebuild.
-  # node:24.14.1-slim is pinned to match Meteor 3.5-beta.7's bundled Node.js version exactly.
+  # Solution: QEMU emulation + node:<version>-slim (s390x variant) for npm rebuild.
  build-s390x:
    needs: [prepare, build-amd64]
    runs-on: ubuntu-latest
    timeout-minutes: 90
    env:
      VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION_S390X: ''
    steps:
      - name: Set up QEMU for s390x
        uses: docker/setup-qemu-action@v4
@@ -297,6 +235,11 @@ jobs:
        with:
          name: bundle-amd64

+      - name: Set Node.js version for s390x
+        id: node_s390x
+        run: |
+          echo "NODE_VERSION_S390X=24" >> $GITHUB_ENV
+
      - name: Rebuild native modules for s390x in container
        run: |
          unzip wekan-${VERSION}-amd64.zip
@@ -315,11 +258,11 @@ jobs:
            popd > /dev/null
            rm -rf "$TMP"
          fi
-          # node:24.14.1-slim s390x — same Node.js version as Meteor 3.5-beta.7 bundled
+          # Use the latest available Node.js 24.x slim image for s390x
          docker run --rm --platform linux/s390x \
            -v "$(pwd)/bundle:/bundle" \
            -w /bundle/programs/server \
-            node:24.14.1-slim \
+            node:24-slim \
            sh -c "apt-get update -qq && apt-get install -y -q build-essential python3 && npm install"

      - name: Clean up and create s390x zip
@@ -335,13 +278,15 @@ jobs:
  # ─── 4b. Build ppc64le bundle (rebuild native modules via QEMU container) ────
  # Meteor 3.5-beta.7 does NOT support ppc64le (installer exits with error on that arch).
  # GitHub Actions has no native ppc64le runners.
-  # Solution: QEMU emulation + node:24.14.1-slim (ppc64le variant) for npm rebuild.
+  # Solution: QEMU emulation + node:<version>-slim (ppc64le variant) for npm rebuild.
  build-ppc64le:
    needs: [prepare, build-amd64]
    runs-on: ubuntu-latest
    timeout-minutes: 90
    env:
      VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION: ${{ needs.prepare.outputs.version }}
+      NODE_VERSION_PPC64LE: ''
    steps:
      - name: Set up QEMU for ppc64le
        uses: docker/setup-qemu-action@v4
@@ -356,6 +301,11 @@ jobs:
        with:
          name: bundle-amd64

+      - name: Set Node.js version for ppc64le
+        id: node_ppc64le
+        run: |
+          echo "NODE_VERSION_PPC64LE=24" >> $GITHUB_ENV
+
      - name: Rebuild native modules for ppc64le in container
        run: |
          unzip wekan-${VERSION}-amd64.zip
@@ -374,11 +324,11 @@ jobs:
            popd > /dev/null
            rm -rf "$TMP"
          fi
-          # node:24.14.1-slim ppc64le — same Node.js version as Meteor 3.5-beta.7 bundled
+          # Use the latest available Node.js 24.x slim image for ppc64le
          docker run --rm --platform linux/ppc64le \
            -v "$(pwd)/bundle:/bundle" \
            -w /bundle/programs/server \
-            node:24.14.1-slim \
+            node:24-slim \
            sh -c "apt-get update -qq && apt-get install -y -q build-essential python3 && npm install"

      - name: Clean up and create ppc64le zip
@@ -431,11 +381,11 @@ jobs:
  #          popd > /dev/null
  #          rm -rf "$TMP"
  #        fi
-  #        # node:24.14.1-slim arm/v7 — same Node.js version as Meteor 3.5-beta.7 bundled
+  #        # node:<version>-slim arm/v7 — same Node.js version as Meteor bundled
  #        docker run --rm --platform linux/arm/v7 \
  #          -v "$(pwd)/bundle:/bundle" \
  #          -w /bundle/programs/server \
-  #          node:24.14.1-slim \
+  #          node:${NODE_VERSION}-slim \
  #          sh -c "apt-get update -qq && apt-get install -y -q build-essential python3 && npm install"
  #
  #    - name: Clean up and create armhf zip
@@ -458,7 +408,7 @@ jobs:
    steps:
      - uses: actions/setup-node@v6
        with:
-          node-version: '24.14.1'
+          node-version: '${{ needs.prepare.outputs.version }}'

      ## With Node 24 these are already preinstalled at GitHub Windows runners
      #- name: Install node-gyp and build tools
@@ -535,169 +485,3 @@ jobs:
            wekan-${{ needs.prepare.outputs.version }}-s390x.zip
            wekan-${{ needs.prepare.outputs.version }}-ppc64le.zip
            wekan-${{ needs.prepare.outputs.version }}-win64.zip
-
-  # ─── 7. Build and push multi-platform Docker image ──────────────────────────
-  docker:
-    needs: [prepare, release]
-    runs-on: ubuntu-latest
-    env:
-      VERSION: ${{ needs.prepare.outputs.version }}
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          ref: refs/tags/v${{ inputs.new_version }}
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Create Docker config with registry credentials
-        run: |
-          mkdir -p ~/.docker
-          cat > ~/.docker/config.json <<EOF
-          {
-            "auths": {
-              "ghcr.io": {
-                "auth": "${{ secrets.GHCR_AUTH }}"
-              },
-              "https://index.docker.io/v1/": {
-                "auth": "${{ secrets.DOCKERHUB_AUTH }}"
-              },
-              "quay.io": {
-                "auth": "${{ secrets.QUAY_AUTH }}"
-              }
-            }
-          }
-          EOF
-
-      - name: Create and use buildx builder
-        run: |
-          docker buildx create --name mybuilder --driver docker-container --use
-          docker buildx inspect --bootstrap
-
-      - name: Build and push Docker image to all registries
-        run: |
-          docker buildx build \
-            --platform linux/amd64,linux/arm64,linux/s390x,linux/ppc64le \
-            -t wekanteam/wekan:v${VERSION} \
-            -t wekanteam/wekan:latest \
-            -t quay.io/wekan/wekan:v${VERSION} \
-            -t quay.io/wekan/wekan:latest \
-            -t ghcr.io/wekan/wekan:v${VERSION} \
-            -t ghcr.io/wekan/wekan:latest \
-            --push .
-
-  # ─── 8. Build and publish snap packages ──────────────────────────────────────
-  # Build snap with snapcraft pack (like releases/snap-build.sh) using LXD,
-  # then push to Snap Store edge channel (like releases/snap-push-to-store.sh).
-  # Promote to stable manually via the Snap Store dashboard when ready.
-  snap:
-    needs: [prepare, release]
-    runs-on: ubuntu-latest
-    env:
-      VERSION: ${{ needs.prepare.outputs.version }}
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          ref: refs/tags/v${{ inputs.new_version }}
-
-      - name: Install snapcraft
-        run: sudo snap install snapcraft --classic
-
-      - name: Build snap
-        run: sudo snapcraft pack --destructive-mode
-
-      - name: Upload snap files as artifacts
-        uses: actions/upload-artifact@v7
-        with:
-          name: snaps
-          path: "*.snap"
-          retention-days: 30
-
-      - name: Push all snaps to Snap Store edge channel
-        env:
-          SNAPCRAFT_STORE_CREDENTIALS: ${{ secrets.SNAP_AUTH }}
-        run: |
-          for snap_file in *.snap; do
-            echo "Publishing $snap_file ..."
-            snapcraft upload --release=edge "$snap_file"
-          done
-
-      - name: Upload all snaps to GitHub Release
-        uses: softprops/action-gh-release@v3
-        with:
-          tag_name: v${{ needs.prepare.outputs.version }}
-          files: "*.snap"
-
-  # ─── 9. Update Helm charts and deploy to GitHub Pages ─────────────────────────
-  # Chart source is in helm/wekan/, published packages + index.yaml in helm/charts/.
-  # GitHub Pages deploys helm/charts/ via Actions, serving at https://wekan.github.io/wekan/
-  helm:
-    needs: [prepare, docker]
-    runs-on: ubuntu-latest
-    env:
-      VERSION: ${{ needs.prepare.outputs.version }}
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          ref: refs/tags/v${{ inputs.new_version }}
-
-      - name: Install Helm
-        run: |
-          curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
-
-      - name: Update Chart.yaml and values.yaml with new version
-        run: |
-          cd helm/wekan
-          # Chart.yaml: update appVersion and version
-          sed -i "s/^appVersion: .*/appVersion: \"${VERSION}\"/" Chart.yaml
-          sed -i "s/^version: .*/version: ${VERSION}.0/" Chart.yaml
-          # values.yaml: update image tag
-          sed -i "s/^  tag: v.*/  tag: v${VERSION}/" values.yaml
-
-      - name: Build Helm dependencies
-        run: |
-          cd helm/wekan
-          helm repo add mongo https://groundhog2k.github.io/helm-charts/
-          helm dependency update
-          helm dependency build
-
-      - name: Package chart and update index
-        run: |
-          helm package helm/wekan -d helm/charts/
-          helm repo index helm/charts/ --url https://wekan.github.io/wekan/
-
-      - name: Update created time to Finland time
-        run: |
-          FINLAND_TIME=$(TZ='Europe/Helsinki' date '+%Y-%m-%dT%H:%M:%S.000000000%:z')
-          sed -i "0,/^    created: .*/s/^    created: .*/    created: \"${FINLAND_TIME}\"/" helm/charts/index.yaml
-
-      - name: Commit updated chart
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add helm/
-          git commit -m "Helm chart ${VERSION}.0"
-          git push origin HEAD:refs/heads/main
-
-      - name: Upload helm/charts/ as Pages artifact
-        uses: actions/upload-pages-artifact@v4
-        with:
-          path: helm/charts/
-
-  # ─── 10. Deploy Helm chart to GitHub Pages ───────────────────────────────────
-  deploy-pages:
-    needs: helm
-    runs-on: ubuntu-latest
-    permissions:
-      pages: write
-      id-token: write
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
-    steps:
-      - name: Deploy to GitHub Pages
-        id: deployment
-        uses: actions/deploy-pages@v4
@@ -53,3 +53,7 @@ _build
 */build-assets
 */build-chunks
 .rsdoctor
+
+# Tests
+playwright-report/
+test-results/
@@ -6,9 +6,9 @@
 meteor-base@1.5.2

 # Build system
-ecmascript@0.17.0
+ecmascript@0.18.0
 standard-minifier-js@3.2.0
-rspack@1.0.0
+rspack@1.1.0

 blaze@3.0.2

@@ -16,10 +16,10 @@ blaze@3.0.2
 aldeed:collection2
 aldeed:schema-index@4.0.0-beta.5
 reywood:publish-composite
-mongo@2.3.0-beta350.7
+mongo@2.4.0-beta350.10

 # Account system
-accounts-password@3.2.3-beta350.7
+accounts-password@3.3.0-beta350.10
 communitypackages:core
 communitypackages:unstyled
 communitypackages:flow-routing
@@ -36,7 +36,7 @@ wekan-accounts-oidc
 check@1.5.0
 random@1.2.2
 reactive-dict@1.3.2
-session@1.2.2
+session@1.2.3-beta350.10
 tracker@1.3.4
 audit-argument-checks@1.0.8

@@ -44,7 +44,7 @@ audit-argument-checks@1.0.8
 ostrio:i18n
 reactive-var@1.0.13
 shell-server@0.7.0
-email@3.2.0-beta350.7
+email@3.2.0-beta350.10
 dynamic-import@0.7.4
 wekan-markdown
 quave:synced-cron
@@ -54,8 +54,11 @@ ostrio:files
 meteortesting:mocha
 matb33:collection-hooks
 service-configuration@1.3.5
-minifier-css@2.0.1
-ejson@1.2.0-beta350.7
+minifier-css@2.0.2-beta350.10
+ejson@1.2.0-beta350.10
 logging@1.3.6
 wekan-fullcalendar
 wekan-fontawesome
+jam:offline
+jam:method
+jam:pub-sub
@@ -1 +1 @@
-METEOR@3.5-beta.7
+METEOR@3.5-beta.10
@@ -1,85 +1,88 @@
-accounts-base@3.3.0-beta350.7
-accounts-oauth@1.4.6
-accounts-password@3.2.3-beta350.7
+accounts-base@3.3.0-beta350.10
+accounts-oauth@1.4.7-beta350.10
+accounts-password@3.3.0-beta350.10
 aldeed:collection2@4.1.5
 aldeed:schema-index@4.0.0
 aldeed:simple-schema@1.13.1
 allow-deny@2.1.0
 audit-argument-checks@1.0.8
 autoupdate@2.0.1
-babel-compiler@7.13.0
+babel-compiler@7.14.0
 babel-runtime@1.5.2
-base64@1.0.13
-binary-heap@1.0.12
-blaze@3.0.2
-blaze-tools@2.0.0
+base64@1.0.14-beta350.10
+binary-heap@1.0.13-beta350.10
+blaze@3.0.3
+blaze-tools@2.0.1
 boilerplate-generator@2.1.0
 caching-compiler@2.0.1
-caching-html-compiler@2.0.0
-callback-hook@1.6.1
+caching-html-compiler@2.0.1
+callback-hook@1.8.0-beta350.10
 check@1.5.0
 communitypackages:core@2.0.3
 communitypackages:flow-routing@2.1.0
 communitypackages:unstyled@2.0.1
 core-runtime@1.0.0
 ddp@1.4.2
-ddp-client@3.2.0-beta350.7
-ddp-common@1.4.4
-ddp-rate-limiter@1.3.0-beta350.7
-ddp-server@3.2.0-beta350.7
+ddp-client@3.3.0-beta350.10
+ddp-common@1.4.5-beta350.10
+ddp-rate-limiter@1.3.0-beta350.10
+ddp-server@3.3.0-beta350.10
 diff-sequence@1.1.3
 dynamic-import@0.7.4
-ecmascript@0.17.0
+ecmascript@0.18.0
 ecmascript-runtime@0.8.3
-ecmascript-runtime-client@0.12.3
+ecmascript-runtime-client@0.13.0
 ecmascript-runtime-server@0.11.1
-ejson@1.2.0-beta350.7
-email@3.2.0-beta350.7
+ejson@1.2.0-beta350.10
+email@3.2.0-beta350.10
 es5-shim@4.8.1
 facts-base@1.0.2
-fetch@0.1.6
+fetch@0.2.0-beta350.10
 geojson-utils@1.0.12
 hot-code-push@1.0.5
-html-tools@2.0.0
-htmljs@2.0.1
+html-tools@2.0.1
+htmljs@2.0.2
 http@1.4.4
 id-map@1.2.0
 inter-process-messaging@0.1.2
+jam:method@1.9.1
+jam:offline@0.4.1
+jam:pub-sub@0.5.1
 jquery@3.0.2
 lai:collection-extensions@1.0.0
 localstorage@1.2.1
 logging@1.3.6
 matb33:collection-hooks@2.1.0
-meteor@2.2.0
+meteor@2.3.1-beta350.10
 meteor-base@1.5.2
 meteortesting:browser-tests@1.4.2
 meteortesting:mocha@2.1.0
 meteortesting:mocha-core@8.0.1
-minifier-css@2.0.1
-minifier-js@3.1.0
-minimongo@2.1.0-beta350.7
+minifier-css@2.0.2-beta350.10
+minifier-js@3.2.0
+minimongo@2.2.0-beta350.10
 modern-browsers@0.2.3
 modules@0.20.3
 modules-runtime@0.13.2
-mongo@2.3.0-beta350.7
+mongo@2.4.0-beta350.10
 mongo-decimal@0.2.0
 mongo-dev-server@1.1.1
 mongo-id@1.0.9
 npm-mongo@6.16.1
-oauth@3.0.2
+oauth@3.0.4-beta.10
 oauth2@1.3.3
-observe-sequence@2.0.0
+observe-sequence@2.0.1
 ordered-dict@1.2.0
-ostrio:cookies@2.9.1
+ostrio:cookies@2.9.2
 ostrio:cstorage@4.0.1
 ostrio:files@3.0.1
-ostrio:flow-router-extra@3.12.1
+ostrio:flow-router-extra@3.14.0
 ostrio:i18n@3.2.1
 promise@1.0.0
 quave:synced-cron@2.4.0
 raix:eventemitter@1.0.0
 random@1.2.2
-rate-limit@1.2.0-beta350.7
+rate-limit@1.2.0-beta350.10
 react-fast-refresh@0.3.0
 reactive-dict@1.3.2
 reactive-var@1.0.13
@@ -87,24 +90,24 @@ reload@1.3.2
 retry@1.1.1
 reywood:publish-composite@1.9.0
 routepolicy@1.1.2
-rspack@1.0.0
+rspack@1.1.0
 service-configuration@1.3.5
-session@1.2.2
+session@1.2.3-beta350.10
 sha@1.0.10
 shell-server@0.7.0
-socket-stream-client@0.7.0-beta350.7
-spacebars@2.0.0
-spacebars-compiler@2.0.0
+socket-stream-client@0.7.0-beta350.10
+spacebars@2.0.1
+spacebars-compiler@2.0.1
 standard-minifier-js@3.2.0
-templating@1.4.4
-templating-compiler@2.0.0
-templating-runtime@2.0.1
-templating-tools@2.0.0
-tools-core@1.0.0
+templating@1.4.5
+templating-compiler@2.0.1
+templating-runtime@2.0.2
+templating-tools@2.0.1
+tools-core@1.1.0
 tracker@1.3.4
-typescript@5.9.3
-url@1.3.5
-webapp@2.2.0-beta350.7
+typescript@5.10.0
+url@1.3.6-beta350.10
+webapp@2.2.0-beta350.10
 webapp-hashing@1.1.2
 wekan-accounts-cas@0.2.0
 wekan-accounts-lockout@1.1.0
@@ -26,6 +26,253 @@ Versions:
 - WeKan 8.00-8.06 had wrong raw database directory setting /var/snap/wekan/common/wekan and some cards were not visible,
  it was fixed at WeKan 8.07 where database directory is back to /var/snap/wekan/common and all cards are visible.

+# v9.09 2026-05-07 WeKan ® release
+
+This release fixes the following CRITICAL SECURITY ISSUES of [AuthBleed](https://wekan.fi/hall-of-fame/authbleed/):
+
+- [Fixed AuthBleed](https://github.com/wekan/wekan/commit/62c01725f91f0c2673839e3b460b5348b5562e6b).
+  Thanks to Qiulin Deng and xet7.
+
+and adds the following updates:
+
+- Docs: Clarified SECURITY.md.
+  [Part 1](https://github.com/wekan/wekan/commit/f347dc7d4dcf876a063a9aa4f1ea148d2894ac4c),
+  [Part 2](https://github.com/wekan/wekan/commit/90cfc3f69692dd7c78cb1382565e3cbd62fbff49).
+  Thanks to xet7.
+- [Updated GitHub Actions to build release bundles](https://github.com/wekan/wekan/commit/4520a432c4bfa7e9e3ff002ef267a52e51588d78).
+  Thanks to xet7.
+
+and adds the following tests:
+
+- [Added Playwright Tests 2026-05-07: 16 specs. 306/306 passing](https://github.com/wekan/wekan/commit/f2d6695fdc0ea16d8e833adf29e7e95a2df00325).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.08 2026-05-04 WeKan ® release
+
+This release adds the following updates:
+
+- [Release scripts: Add Snap Store scripts to list and publish revisions to channels, because snapcraft.io website currently does not work](https://github.com/wekan/wekan/commit/f7db51b457a771267ce381f294c8163fc0cad406).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Upgrade to Meteor 3.5-beta.10, changeStreams, DDP_TRANSPORT=uws](https://github.com/wekan/wekan/commit/330e0e35707c70a088cd8c452192265ba3df6fbd).
+  Thanks to Meteor developers.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.07 2026-05-02 WeKan ® release
+
+This release fixes the following CRITICAL SECURITY ISSUES of [AvatarBleed](https://wekan.fi/hall-of-fame/avatarbleed/):
+
+- [Fix avatars rce](https://github.com/wekan/wekan/commit/a4c74a5980e9f778eb444fd346f32aa3d16786a9).
+  Thanks to Trung Nguyen from CyStack Security and xet7.
+
+and fixes the following bugs:
+
+- [Fix CleanDark theme](https://github.com/wekan/wekan/pull/6324).
+  Thanks to stegoh.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.06 2026-05-02 WeKan ® release
+
+This release adds the following updates:
+
+- [Docs: Update lxc commands](https://github.com/wekan/wekan/commit/3c8db21d2f56eefe3d8b7f3228b580407a4fe89b).
+  Thanks to xet7.
+- [Docs: Added firewall config for Internet access from LXD Ubuntu container at Fedora Asahi Linux Remix, because building Linux arm64 .zip bundle of WeKan](https://github.com/wekan/wekan/commit/82c78ebd1efb888940ccf64affd23400f5485755).
+  Thanks to xet7.
+- [Docs: Added Manual Parallel Snap](https://github.com/wekan/wekan/commit/eb824938cb750921bec721d80eab2670ba567869).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Fix Snap Candidate WRITABLE_PATH directory permissions at Parallel Snap file path /var/snap/wekan_SOMENAME/common/files/](https://github.com/wekan/wekan/commit/7556b3ed8e29b9edd074c1dd8c03a9b804787523).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.05 2026-05-02 WeKan ® release
+
+This release adds the following updates:
+
+- [Update version script and dependencies](https://github.com/wekan/wekan/commit/4e77df9ff52ef2aed44e95ad4ef58d0cde6593b7).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- Fix Snap Candidate attachments WRITABLE_PATH for Parallel Snap installs.
+  [Part 1](https://github.com/wekan/wekan/commit/cadd015d20e6b677fefb040ab8c5b1a3e972a394),
+  [Part 2](https://github.com/wekan/wekan/commit/cd2c69f5f05d932074ca80ae569cc8d836770f7b).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.04 2026-05-01 WeKan ® release
+
+This release adds the following updates:
+
+- [Upgrade to MongoDB 7.0.32. Update version script.](https://github.com/wekan/wekan/commit/653c61081a8d9306fb0b152f6a3a497c2607a1cf).
+  Thanks to MongoDB developers and xet7.
+- [Upgrade to MongoDB 7.0.32 at Helm Chart](https://github.com/wekan/charts/commit/c55e9d3a130a7d259681185561b2741a64a8353e).
+  Thanks to MongoDB developers.
+- [Upgrade to MongoDB 7.0.32 at Windows Bundle docs](https://github.com/wekan/wekan/commit/2a3aa981d2ba02ec87981e3af843811e31328fea).
+  Thanks to MongoDB developers.
+
+and fixes the following bugs:
+
+- [Fix can not edit checklist title](https://github.com/wekan/wekan/commit/309b488861c29b4d74262f099ee11329f6d151c7).
+  Thanks to xet7.
+- [Fix Cannot delete card checklist title, by removing "Delete" and "Convert to Card" that belong to Checklist Items only. Checklist Menu already has Delete Checklist](https://github.com/wekan/wekan/commit/9defe9681b8091eec3037872882d0894fbdeeb20).
+  Thanks to rileybroberts and xet7.
+- [Fix: Added space between Card Number and Card Title at Minicard and Opened Card](https://github.com/wekan/wekan/commit/d04beea6f8797856806ee63df6cd30a0c6446bd5).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.03 2026-04-29 WeKan ® release
+
+This release adds the following new features:
+
+- [Add missing board‑attachments API endpoint](https://github.com/wekan/wekan/pull/6321).
+  Thanks to KhaoulaMaleh.
+
+and adds the following updates:
+
+- Update version script.
+  [Part 1](https://github.com/wekan/wekan/commit/e547be9ab81f6a880954b3e34fc3b5e3edc8efc5),
+  [Part 2](https://github.com/wekan/wekan/commit/e22f4226151d54593d11ad8040cd46c39435ce5b).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.02 2026-04-28 WeKan ® release
+
+This release fixes the following bugs:
+
+- [Fix mongodb in snap 9.01 on Ubuntu 24.04 crashes because of missing libcrypto.so.1.1](https://github.com/wekan/wekan/commit/a4b5ac6c4e2cfba6983b81ff0282e1c787576d06).
+  Thanks to sbaecker.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.01 2026-04-28 WeKan ® release
+
+This release adds the following updates:
+
+- [Updated Docker platforms for what currently builds successfully](https://github.com/wekan/wekan/commit/fdb477f3517383eb17169b1dfff2ef94c12b6296).
+  Thanks to xet7.
+- [Docs: Updated s390x page](https://github.com/wekan/wekan/commit/855cb86088c7c54734eddb1ddc5a007b432a0d91).
+  Thanks to xet7.
+- [Removed charts, that are moved back to github.com/wekan/charts](https://github.com/wekan/wekan/commit/b49aa050e91b4bd560512af1beece791c6e39114).
+  Thanks to xet7.
+- [Moved website to separate repo. Moved docs2 back to docs](https://github.com/wekan/wekan/commit/f6d8befb56c88eb0867c70bac708f867fe731a5a).
+  Thanks to xet7.
+- [Disable not working GitHub workflows](https://github.com/wekan/wekan/commit/58de6bb73714e6c6d4010de5c72499f429bd9a41).
+  Thanks to xet7.
+- [Fix Snap mongodb port wrong](https://github.com/wekan/wekan/commit/11a2c95ea70a3dcf9243369f8feeaea301a93bb6).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v9.00 2026-04-27 WeKan ® release
+
+This release adds the following updates:
+
+- [Bump actions/upload-pages-artifact from 4 to 5](https://github.com/wekan/wekan/pull/6304).
+  Thanks to dependabot.
+- [Bump docker/setup-buildx-action from 3 to 4](https://github.com/wekan/wekan/pull/6305).
+  Thanks to dependabot.
+- [Bump actions/deploy-pages from 4 to 5](https://github.com/wekan/wekan/pull/6306).
+  Thanks to dependabot.
+- [Update release scripts](https://github.com/wekan/wekan/commit/db2701f1d731898c80b44606a985d5d132f7f6ed).
+  Thanks to xet7.
+- [Added back jam packages. Updated dependencies](https://github.com/wekan/wekan/commit/bf5ca3d3ebef7f00778eb1a518fcfaf5b5fc5d5c).
+  Thanks to xet7.
+- [Updated dependencies](https://github.com/wekan/wekan/commit/16832124ce169c823ab1f95a43a85bec22d5556f).
+  Thanks to xet7.
+- [Update security.md etc](https://github.com/wekan/wekan/commit/7700efde1fba8483a78c67d03e3a0d214cedb67b).
+  Thanks to xet7.
+- [Updated HoF](https://github.com/wekan/wekan/commit/675c6611146a4a47eee1e513b83152007e3b9aee).
+  Thanks to xet7.
+- [Update releases scripts](https://github.com/wekan/wekan/commit/64f58455ff471b5a5567d7230850124cf0afacb0).
+  Thanks to xet7.
+- [Update release and version scripts](https://github.com/wekan/wekan/commit/699b9a9c712f01068324c051be4fb149dfc6f100).
+  Thanks to xet7.
+- Updated dependencies.
+  [Part 1](https://github.com/wekan/wekan/commit/b459151798d9808b4243d230ff6759a58d4016f5),
+  [Part 2](https://github.com/wekan/wekan/commit/74965f5f95ba4e4dfd7381becd55184731a60fca).
+  Thanks to developers of dependencies.
+- [Updated website](https://github.com/wekan/wekan/commit/ef4161889af58827f105749362196fd471e3e38c).
+  Thanks to xet7.
+
+and fixes the following bugs:
+
+- [Update cards.js](https://github.com/wekan/wekan/pull/6299).
+  Thanks to snowsky.
+- [Fix MongoDB replicaset setup at docker-compose.yml](https://github.com/wekan/wekan/commit/c4e084ffbbc5870a13e79f80a2982d2eb7f2f04e).
+  Thanks to C0rn3j.
+- [Add permission checks to list width method](https://github.com/wekan/wekan/pull/6303).
+  Thanks to Raawen-dev.
+- [Fix UI hangs and data loss by disabling changeStreams, until there is new Meteor release that included bugfix to changeStreams](https://github.com/wekan/wekan/commit/c47eb013b4d8d0f2dea7b801adc60151f6e3aee1).
+  Thanks to bcook-konza and italojs.
+- [Fix list actions popup overflow](https://github.com/wekan/wekan/pull/6310).
+  Thanks to Raawen-dev.
+- [Fix mycards subscription](https://github.com/wekan/wekan/pull/6314).
+  Thanks to aminsaidane.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v8.99 2026-04-16 WeKan ® release
+
+This release adds the following updates:
+
+- [Release scripts: Update versions](https://github.com/wekan/wekan/commit/32e1ec9d2251840dc2d57ffa7976f2c60546ca9d).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
+# v8.98 2026-04-16 WeKan ® release
+
+This release adds the following updates:
+
+- [Release scripts: Detect newest Node.js 24.x version](https://github.com/wekan/wekan/commit/fde59148dc8bd712e30cbf969d4007b2a7f01e6f).
+  Thanks to xet7.
+- [Release scripts: Update versions at website with release-website.sh script](https://github.com/wekan/wekan/commit/9174001862f1545626730b9a51754ab77b645338).
+  Thanks to xet7.
+- [Release scripts: Detect newest MongoDB 7.x stable version and update to use it](https://github.com/wekan/wekan/commit/72f6d96dbc3becc2767eb6f88b0f218679d1ac78).
+  Thanks to xet7.
+- [Moved website from repo wekan/wekan.fi to wekan/wekan/docs](https://github.com/wekan/wekan/commit/3c36db33e91e504722edc60faec5d6b4aa301850).
+  Thanks to xet7.
+- [Moved docs to docs2, and wekan.fi to docs, to be able publish with GitHub Pages](https://github.com/wekan/wekan/commit/1c0d8e9964af40be91eda9668dfeebd01b3a5720).
+  Thanks to xet7.
+- [Update markdown docs links from docs to docs2](https://github.com/wekan/wekan/commit/c1639ea58973efcae0758385cc5d8d7ffbf1e8d9).
+  Thanks to xet7.
+- [Commented out requirement to update website manually](https://github.com/wekan/wekan/commit/64d351d835628dad80062e3c362701b35ae5bb33).
+  Thanks to xet7.
+- [Moved Helm Charts from helm directory to docs/wekan and docs/charts to be at wekan.fi/wekan and wekan.fi/charts](https://github.com/wekan/wekan/commit/38e488ee4a63d61159d8efcddb6e454347bce91a).
+  Thanks to xet7.
+- [Release scripts: Fix indentation at release-all.yml](https://github.com/wekan/wekan/commit/10f009f5b15fd077577a71504b0e0c89c4e6fd95).
+  Thanks to xet7.
+- [Release scripts: Use latest available Node.js slim docker images when building](https://github.com/wekan/wekan/commit/d998e8cb4a5280c93448d144ab01335ce29b43dc).
+  Thanks to xet7.
+- [Release scripts: Fix updating version numbers](https://github.com/wekan/wekan/commit/7b0e2213cfbf0e2a17a143aa7ad9f979fb0fbf07).
+  Thanks to xet7.
+- [Release scripts: Require only newest version number when releasing](https://github.com/wekan/wekan/commit/052d8c15844dfc709dc3ac281795629c175869e0).
+  Thanks to xet7.
+- [Release scripts: Use 24-slim fallback](https://github.com/wekan/wekan/commit/a0c190137dfe9fd8da71380f6c67344812561f9f).
+  Thanks to xet7.
+- [Release scripts: use node:24-slim directly](https://github.com/wekan/wekan/commit/51ad6ed99df7ecdc925d314a6c5fab345f75d549).
+  Thanks to xet7.
+- [Fix Helm Chart parts to docs/wekan and docs/charts](https://github.com/wekan/wekan/commit/1820804b9f46e510c4bf05324755a5eeec5a3b13).
+  Thanks to xet7.
+- [Release scripts: Updated creating Helm Charts to docs/wekan and docs/charts](https://github.com/wekan/wekan/commit/f6198dee30ed6514974d2e821997d340e67fc954).
+  Thanks to xet7.
+
+Thanks to above GitHub users for their contributions and translators for their translations.
+
 # v8.97 2026-04-16 WeKan ® release

 This release adds the following updates:
@@ -853,7 +1100,7 @@ Thanks to above GitHub users for their contributions and translators for their t

 # v8.36 2026-03-20 WeKan ® release

-This release fixes the following CRITICAL SECURITY ISSUES of [IntegrationBleed](https://wekan.fi/hall-of-fame/integrationBleed/):
+This release fixes the following CRITICAL SECURITY ISSUES of [IntegrationBleed](https://wekan.fi/hall-of-fame/integrationbleed/):

 - [Fix RebindBleed of IntegrationBleed](https://github.com/wekan/wekan/commit/92beaa313706bc26fbea7e1cc8cfaf836609e038).
  Thanks to Rodolphe GHIO and xet7.
@@ -7,7 +7,7 @@ LABEL org.opencontainers.image.source="https://github.com/wekan/wekan"
 # TARGETARCH and TARGETVARIANT are automatically provided by Docker Buildx
 ARG TARGETARCH
 ARG TARGETVARIANT
-ARG VERSION=8.94
+ARG VERSION=9.09
 ARG DEBIAN_FRONTEND=noninteractive

 ENV BUILD_DEPS="apt-utils gnupg wget bzip2 g++ curl libarchive-tools build-essential git ca-certificates python3 unzip"
@@ -15,7 +15,7 @@ ENV BUILD_DEPS="apt-utils gnupg wget bzip2 g++ curl libarchive-tools build-essen
 ENV \
    DEBUG=false \
    NODE_VERSION=v24.15.0 \
-    METEOR_RELEASE=METEOR@3.5-beta.7 \
+    METEOR_RELEASE=METEOR@3.5-beta.10 \
    USE_EDGE=false \
    NPM_VERSION=11.11.0 \
    SRC_PATH=./ \
@@ -1,36 +1,33 @@
-## About Money
+## About Money: No bounty

-See [CONTRIBUTING](CONTRIBUTING.md)
+There is no bounty, like described at [CONTRIBUTING.md](CONTRIBUTING.md),
+because WeKan is NOT Big Tech. WeKan is FLOSS.

-## Responsible Security Disclosure
+## Steps for Coordinated Vulnerability Disclosure

-1. To send email, if possible, use PGP key [security-at-wekan.fi.asc](security-at-wekan.fi.asc)
-2. Send info about security issue ONLY to security@wekan.fi . NOT TO ANYWHERE ELSE. NO CC, NO BCC.
-3. Wait for new WeKan release that fixes security issue to appear to top of
-   https://github.com/wekan/wekan/blob/main/CHANGELOG.md
-4. We will thank you by adding you to Hall the of Fame: https://wekan.fi/hall-of-fame/
-5. All vulnerability details will be private to security@wekan.fi ,
-   unless you help all WeKan platforms to have a way to upgrade, like sending
-   database migrations code to security@wekan.fi or PRs to https://github.com/wekan/wekan/pulls .
-   There is no benefit to the Wordwide Security Community to have more details about vulnerabilities,
-   if Worldwide Security Community does not help to make upgrades possible.
-6. If some day a way becomes available to upgrade all WeKan platforms,
-   this page will be updated to add permission for security researchers
-   to request new GHSA or CVE ID and publish your vulnerability details at your blog, talks, etc,
-   and send that info also to security@wekan.fi to be added to
-   Hall of Fame: https://wekan.fi/hall-of-fame/ to get Upgrade Bonus Point Stars.
-   In that case, it will become possible for security@wekan.fi to publish all
-   remaining private security details, and publicly thank Worldwide Security Community.
+### 1. Security Researcher:

-## Bonus Points
+- **Report**: Please email details regarding security vulnerabilities to **security@wekan.fi**.
+- **Proof of Concept (PoC)**: If possible, include a fix or a reproduction script/code.
+- **Encryption**: An optional PGP key is available at [security-at-wekan.fi.asc](security-at-wekan.fi.asc).

- If you include code for fixing security issue
+### 2. WeKan Security Team:

-## Losing Points
+- **Remediation**: Please wait for a new WeKan release that addresses the issue.
+  Fixes are announced at the top of the [ChangeLog](https://github.com/wekan/wekan/blob/main/CHANGELOG.md).
+- **Recognition**: We will acknowledge your contribution by adding you to our
+  [Hall of Fame](https://wekan.fi/hall-of-fame/).
+- **CVE Policy**: WeKan Security does not facilitate **CVE Coordination** due to
+  our rapid release cycle (new versions are released almost daily).

- If you ask about [bounty](CONTRIBUTING.md). There is no bounty. WeKan is NOT Big Tech. WeKan is FLOSS.
- If you forget to include vulnerability details.
- If you send info about security issue to somewhere else than security@wekan.fi
+### 3. Post-Release and Public Disclosure:
+
+- **Independent CVE Assignment**: After the fix is public, you are welcome to coordinate
+  **CVE assignment** independently. Please send the assigned CVE IDs to **security@wekan.fi**,
+  and we will update your entry in the [Hall of Fame](https://wekan.fi/hall-of-fame/).
+- Publicity: If you publish blog posts, give talks, or write articles about the
+  reported vulnerabilities, please send the links to us. We will link them
+  to your entry in the [Hall of Fame](https://wekan.fi/hall-of-fame/) for additional context.

 ## How Should Reports Be Formatted?

@@ -60,12 +57,12 @@ and we don't have any permissions to do security scans on those donated servers.
 Please don't perform research that could impact other users. Second, please keep
 the reports short and succinct. If we fail to understand the logic of your bug, we will tell you.

-You can [Install Wekan](https://github.com/wekan/wekan/releases) on your own computer
+You can [Install Wekan](https://wekan.fi/install/) on your own computer
 and scan it's vulnerabilities there.

 ## About Wekan Versions

-There are only 2 versions of Wekan: Standalone Wekan, and Sandstorm Wekan.
+There are 2 versions of Wekan: Standalone Wekan, and Sandstorm Wekan.

 ### Standalone Wekan Security

@@ -78,7 +75,8 @@ WeKan is used in most countries of the world https://snapcraft.io/wekan
 and by companies that have 30k users.

 - Wekan private board attachments are not accessible without logging in.
- There is feature to set board public, so that board is visible without logging in in readonly mode, with realtime updates.
+- There is feature to set board public, so that board is visible without logging
+  in readonly mode, with realtime updates.
 - Admin Panel has feature to disable all public boards, so all boards are private.

 ## SSL/TLS
@@ -107,7 +105,8 @@ and by companies that have 30k users.
 Q:

 Hello,
-I have just seen the Meteor DevTools Evolved extension and was wondering if anyone had asked themselves the question of security.
+I have just seen the Meteor DevTools Evolved extension and was wondering if anyone
+had asked themselves the question of security.
 Insofar as all data is shown in the minimongo tab in plain text.
 How can data be hidden from this extension?

@@ -115,11 +114,14 @@ A:

 ## PubSub

- It is not a security issue to show text or images that the user has permission to see. It is a security issue, if browserside is some text or image that user should not see.
+- It is not a security issue to show text or images that the user has permission to see.
+  It is a security issue, if browserside is some text or image that user should not see.
 - Meteor has browserside minimongo database, made with JavaScript, updated with Publish/Subscribe, PubSub.
- Publish/Subscribe means, that realtime web framework reads database changes stream, and then immediately updates webpage,
-  like like dashboards, chat, kanban. That is the point of any realtime web framework in any programming language.
- Yes, you should check with Meteor DevTools Evolved Chromium/Firefox extension that at minimongo is only text that user has permission to see.
+- Publish/Subscribe means, that realtime web framework reads database changes stream,
+  and then immediately updates webpage, like dashboards, chat, kanban.
+  That is the point of any realtime web framework in any programming language.
+- Yes, you should check with Meteor DevTools Evolved Chromium/Firefox extension that
+  at minimongo is only text that user has permission to see.
 - Check as a logged-in user and as a logged-out user.
 - Check permissions and sanitize before allowing some change, because someone could modify content of input field,
  PubSub/websocket data (for example with Burp Suite Community Edition), etc.
@@ -129,7 +131,8 @@ A:
 - PubSub uses WebSockets, so you need those to be enabled on the webserver like Caddy/Nginx/Apache etc, examples of settings
  at right menu of https://github.com/wekan/wekan/wiki
 - Clientside https://github.com/wekan/wekan/tree/main/client/components subscribes to
-  PubSub https://github.com/wekan/wekan/tree/main/server/publications or calls meteor methods at https://github.com/wekan/wekan/tree/main/models
+  PubSub https://github.com/wekan/wekan/tree/main/server/publications or calls meteor methods
+  at https://github.com/wekan/wekan/tree/main/models
 - For Admin:
  - You can have input field for password https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
  - You can save password to database https://github.com/wekan/wekan/blob/main/client/components/cards/attachments.js#L303-L312
@@ -276,14 +279,9 @@ a security issue, we'd like to know about it, and also how to fix it:

 Typical already-known or 'no impact' bugs such as:

- [Wekan API old tokens not replaced correctly](https://github.com/wekan/wekan/issues/1437)
- Missing Cookie flags on non-session cookies or 3rd party cookies
- Logout CSRF
 - Social engineering
 - Denial of service
- SSL BEAST/CRIME/etc. WeKan does not have SSL built-in; it uses Caddy/Nginx/Apache, etc., on the front end.
-  Integrated Caddy support is updated often.
- Email spoofing, SPF, DMARC & DKIM. Wekan does not include email server.
+- SSL BEAST/CRIME/etc. WeKan does not have SSL built-in; it uses Caddy/Nginx/Apache on the front end.

 Wekan is Open Source with MIT license, and free to use also for commercial use.
 We welcome all fixes to improve security by email to security@wekan.fi
@@ -1,5 +1,5 @@
 appId: wekan-public/apps/77b94f60-dec9-0136-304e-16ff53095928
-appVersion: "v8.94.0"
+appVersion: "v9.09.0"
 files:
  userUploads:
    - README.md
@@ -3370,18 +3370,19 @@ THEME - Clean Light

 .board-color-cleanlight .list,
 .board-color-cleandark .list {
-  background: none;
-  border-left: none;
+  background: none !important;
+  border-left: none !important;
 }

 .board-color-cleanlight .list .list-header,
 .board-color-cleandark .list .list-header {
-  border-bottom: none;
-  display: flex;
+  border-bottom: none !important;
+  display: flex !important;
  justify-content: space-between;
  align-items: center;
  font-size: 16px;
-  background: none;
+  background: none !important;
+  background-color: transparent !important;
 }

 .board-color-cleanlight .list .list-header div:has(.list-header-name),
@@ -4279,6 +4280,14 @@ THEME - Clean Light
  font-weight: 500;
 }

+.board-color-cleandark .pop-over-list li > a {
+  color: rgba(255, 255, 255, 1) !important;
+}
+
+.board-color-cleanlight .pop-over-list li > a {
+  color: rgba(10, 10, 20, 0.85) !important;
+}
+
 .board-color-cleanlight .pop-over-list li > a i,
 .board-color-cleandark .pop-over-list li > a i {
  margin-right: 6px !important;
@@ -66,7 +66,7 @@ template(name="cardDetails")
            +viewer
              if currentBoard.allowsCardNumber
                span.card-number
-                  | ##{getCardNumber}
+                  | ##{getCardNumber} &nbsp;
              = getTitle
            if isWatching
              i.card-details-watch
@@ -34,7 +34,7 @@ template(name="checklists")
 template(name="checklistDetail")
  .js-checklist.checklist.nodragscroll
    +inlinedForm(classNames="js-edit-checklist-title" checklist = checklist)
-      +editChecklistItemForm(checklist = checklist)
+      +editChecklistForm(checklist = checklist)
    else
      .checklist-title
        span
@@ -85,6 +85,19 @@ template(name="addChecklistItemForm")
          label.toggle-label(for="toggleNewlineBecomesNewChecklistItemOriginOrder")
          | {{_ 'originOrder'}}

+template(name="editChecklistForm")
+  a.fa.fa-copy(title="{{_ 'copy-text-to-clipboard'}}")
+  span.copied-tooltip {{_ 'copied'}}
+  textarea.js-edit-checklist-item(rows='1' autofocus dir="auto")
+    if $eq type 'item'
+      = item.title
+    else
+      = checklist.title
+  .edit-controls.clearfix
+    button.primary.confirm.js-submit-edit-checklist-item-form(type="submit") {{_ 'save'}}
+    a.fa.fa-times-thin.js-close-inlined-form(title="{{_ 'close-edit-checklist-item'}}")
+    span(title=createdAt) {{ displayDate createdAt }}
+
 template(name="editChecklistItemForm")
  a.fa.fa-copy(title="{{_ 'copy-text-to-clipboard'}}")
  span.copied-tooltip {{_ 'copied'}}
@@ -135,8 +135,11 @@ Template.checklists.events({
    event.preventDefault();
    const textarea = tpl.find('textarea.js-edit-checklist-item');
    const title = textarea.value.trim();
-    const checklist = Template.currentData().checklist;
-    checklist.setTitle(title);
+    const formData = Blaze.getData(event.currentTarget) || Blaze.getData(event.target);
+    const checklist = formData?.checklist;
+    if (checklist) {
+      checklist.setTitle(title);
+    }
  },
  'submit .js-add-checklist-item'(event, tpl) {
    event.preventDefault();
@@ -74,7 +74,7 @@ template(name="minicard")
      +viewer
        if showCardNumber
          span.card-number
-            | ##{getCardNumber}
+            | ##{getCardNumber} &nbsp;
        = getTitle
    if showLabels
      if labels
@@ -767,3 +767,124 @@ body.mobile-mode .pop-over .content-wrapper {
  overflow-y: auto !important;
  overflow-x: hidden !important;
 }
+
+/* ============================================
+   FIX: List actions popup overflow (Issue #6221)
+   Prevents menu from overflowing outside viewport
+   ============================================ */
+
+/* General fix for all popups with many items */
+.pop-over .pop-over-list {
+  max-height: 60vh;
+  overflow-y: auto;
+  overflow-x: hidden;
+}
+
+/* Specific fix for list actions menu */
+.pop-over[data-popup="listActionsPopup"] {
+  max-height: 85vh !important;
+  overflow-y: auto !important;
+}
+
+.pop-over[data-popup="listActionsPopup"] .content-wrapper {
+  max-height: calc(85vh - 50px) !important;
+  overflow-y: auto !important;
+}
+
+/* Prevent any popup from overflowing viewport */
+.pop-over {
+  max-height: 90vh !important;
+  display: flex !important;
+  flex-direction: column !important;
+}
+
+.pop-over .content-wrapper {
+  flex: 1 1 auto !important;
+  overflow-y: auto !important;
+  min-height: 0 !important;
+}
+
+.pop-over .content-container {
+  flex: 1 1 auto !important;
+  display: flex !important;
+  flex-direction: column !important;
+  min-height: 0 !important;
+}
+
+.pop-over .content {
+  flex: 1 1 auto !important;
+  overflow-y: auto !important;
+  min-height: 0 !important;
+}
+
+/* Keep header fixed while content scrolls */
+.pop-over .header {
+  flex-shrink: 0 !important;
+}
+
+/* Mobile-specific adjustments */
+@media screen and (max-width: 800px) {
+  .pop-over[data-popup="listActionsPopup"] {
+    max-height: 100vh !important;
+  }
+  
+  .pop-over[data-popup="listActionsPopup"] .content-wrapper {
+    max-height: calc(100vh - 48px) !important;
+  }
+}
+/* STRONGER FIX - Override inline styles */
+.pop-over[style*="height"],
+.pop-over[style*="max-height"] {
+  max-height: 80vh !important;
+  height: auto !important;
+  overflow-y: auto !important;
+}
+
+.pop-over[style*="height"] .content-wrapper,
+.pop-over[style*="max-height"] .content-wrapper {
+  max-height: calc(80vh - 60px) !important;
+  height: auto !important;
+  overflow-y: auto !important;
+}
+
+/* Force list popups to have a max height and scroll */
+.pop-over .pop-over-list {
+  max-height: 300px !important;
+  overflow-y: auto !important;
+}
+
+/* Make sure the popup doesn't grow too tall */
+.pop-over:has(.pop-over-list) {
+  max-height: 400px !important;
+  height: auto !important;
+}
+
+/* For the list actions menu specifically */
+[data-popup="listActionsPopup"] .pop-over-list,
+.js-open-list-menu + .pop-over .pop-over-list {
+  max-height: 350px !important;
+  overflow-y: auto !important;
+}
+
+/* ============================================
+   FIX: List actions popup overflow (Issue #6221)
+   ============================================ */
+
+/* Force list popups to have a max height and scroll */
+.pop-over .pop-over-list {
+  max-height: 300px !important;
+  overflow-y: auto !important;
+}
+
+/* Make sure the popup doesn't grow too tall */
+.pop-over:has(.pop-over-list) {
+  max-height: 400px !important;
+  height: auto !important;
+}
+
+/* For the list actions menu specifically */
+[data-popup="listActionsPopup"] .pop-over-list,
+.js-open-list-menu + .pop-over .pop-over-list {
+  max-height: 350px !important;
+  overflow-y: auto !important;
+}
@@ -171,7 +171,7 @@ services:
  # Leave it unset or empty to skip migration.
  #-------------------------------------------------------------------------------------
  #wekan-migrate:
-  #  image: node:24.14.1-slim
+  #  image: node:24.15.0-slim
  #  container_name: wekan-migrate
  #  restart: "no"
  #  networks:
@@ -229,12 +229,31 @@ services:
    #command: mongod --logpath /dev/null --oplogSize 128 --replSet rs0 --quiet
    #command: mongod --oplogSize 128 --replSet rs0 --quiet
    command: >
-      sh -c "
-        mongod --oplogSize 128 --replSet rs0 --quiet --bind_ip_all &
-        until mongosh --eval 'rs.initiate()' > /dev/null 2>&1; do
+      sh -c '
+        mongod --oplogSize 128 --replSet rs0 --bind_ip_all --quiet &
+        until mongosh --host 127.0.0.1 --quiet --eval "
+          try {
+            const status = rs.status();
+            quit(status.ok === 1 ? 0 : 1);
+          } catch (e) {
+            if (
+              e.codeName === \"NotYetInitialized\" ||
+              e.message.includes(\"no replset config has been received\") ||
+              e.message.includes(\"not yet initialized\")
+            ) {
+              rs.initiate({
+                _id: \"rs0\",
+                members: [{ _id: 0, host: \"wekandb:27017\" }]
+              });
+              quit(1);
+            }
+            quit(1);
+          }
+        " >/dev/null 2>&1; do
          sleep 2
-        done;
-        wait"
+        done
+        wait
+      '
    networks:
      - wekan-tier
    expose:
@@ -294,7 +313,10 @@ services:
      #- METEOR_REACTIVITY_ORDER=polling
      # https://forums.meteor.com/t/meteor-3-5-beta-change-streams-performance-improvements/64461#change-streams-setup-3
      # https://github.com/meteor/meteor/blob/release-3.5/v3-docs/docs/performance/change-streams-observer-driver.md#choosing-the-reactivity-driver-order
-      - METEOR_REACTIVITY_ORDER=changeStreams,oplog,polling
+      # Use oplog,polling to fix performance until changeStreams is fixed at next release of Meteor 3.5 Beta:
+      # https://github.com/wekan/wekan/issues/6307#issuecomment-4299349231
+      METEOR_REACTIVITY_ORDER=changeStreams,oplog,polling
+      DDP_TRANSPORT=uws
      #-----------------------------------------------------------------
      # ==== WRITEABLE PATH FOR FILE UPLOADS ====
      - WRITABLE_PATH=/data
@@ -104,10 +104,20 @@ sudo snap list
 ```
 If not, change to candidate:
 ```
-sudo snap refresh wekan_customer1 --channel=latest/candidate
+sudo snap refresh wekan_customer1 --channel=latest/candidate --amend
+```
+## Manual Parallel Snap
+
+If using manual snap package, with Parallel Snap, that has name wekan_other:
+```
+sudo snap install --dangerous wekan-VERSION.snap --name wekan_other
+```
+Back to channel:
+```
+sudo snap refresh wekan_other --channel=latest/candidate --amend
 ```
 If it complains about old database version (was at stable), stop it, move old files somewhere safe, and start again.
-WARNING: this deletes 
+WARNING: this deletes stuff.
 ```
 sudo su
 mkdir old_customer1_common
@@ -333,16 +343,21 @@ files.company.com {

 To server and LXC/LXD containers, install these packages:

+Ubuntu:
 ```
 sudo apt install libsquashfuse0 squashfuse fuse
 ```
-
+Fedora
+```
+sudo dnf install squashfuse fuse
+```
 Source: https://forum.snapcraft.io/t/system-does-not-fully-support-snapd/14767/11

 ## LXD init CIDR

 IPv4 CIDR: 10.1.1.1/24

+Ubuntu:
 ```
 sudo apt install snapd

@@ -351,7 +366,28 @@ sudo reboot
 sudo snap install lxd

 lxd init
+```
+Fedora:
+```
+sudo dnf install snapd

+sudo reboot
+
+sudo snap install lxd
+
+# Any Fedora Linux or Fedora Linux Asahi Remix at Apple Silicon:
+# Internet access from LXD container:
+# 1) Allow LXD-bridge:
+sudo firewall-cmd --zone=trusted --add-interface=lxdbr0 --permanent
+sudo firewall-cmd --reload
+# 2) Allow IP Masquerading:
+sudo firewall-cmd --zone=public --add-masquerade --permanent
+sudo firewall-cmd --reload
+
+lxd init
+```
+Answers for lxd init:
+```
 Would you like to use LXD clustering? (yes/no) [default=no]: 
 Do you want to configure a new storage pool? (yes/no) [default=yes]: 
 Name of the new storage pool [default=default]: 
@@ -418,7 +454,7 @@ Ubuntu Touch:
 ```
 sudo su

-snap install lxd --channel=5.21/stable
+snap install lxd
 ```

 3. From Ubuntu Touch Terminal, lxd init, etc.
@@ -434,17 +470,17 @@ sudo lxc profile set default security.nesting true
 5. Start new lxc container

 ```
-# launch-ubu2504.sh
+# launch-ubu2604.sh
 # lxc launch image-name container-name
-lxc launch ubuntu:25.04 ubu2504
+lxc launch ubuntu:26.04 ubu2604
 ```

 6. Bash shell to inside of container:

 ```
-# into-ubu2504.sh
+# into-ubu2604.sh
 # lxc exec container-name -- /bin/bash
-lxc exec ubu2504 -- /bin/bash
+lxc exec ubu2604 -- /bin/bash
 ```

 ## 3) Snapd and Wekan
@@ -471,7 +507,7 @@ You can also add more lxc containers to different subdomains and proxy to them i

 ### New Ubuntu container
 ```
-lxc launch images:ubuntu/20.04 lxccontainername
+lxc launch ubuntu:26.04 lxccontainername
 ```
 ### Inside LXC container
 ```
@@ -1,3 +1,20 @@
+## From xet7, WeKan at s390x
+
+- https://www.openmainframeproject.org/blog/2020/11/20/wekan-open-source-kanban-on-s390x
+
+[xet7](https://github.com/xet7), as maintainer of [WeKan](https://wekan.fi), got access
+to mainframe at IBM LinuxOne Community Cloud.
+Access to those servers is monitored, it's running on a real mainframe.
+
+Previously xet7 had ssh access. At 2023-09 xet7 got web console access,
+and IBM bumped quota to 2 VMs with 8 GB of memory, 200 GB disk and 4 CPUs each.
+At web console it is possible to create and remove VMs, and select distro
+like RHEL/SUSE/Ubuntu. xet7 did do-release-upgrade to upgrade newest Ubuntu.
+
+## Download
+
+- https://github.com/wekan/wekan/releases
+
 ## About s390x

 - Dave's Garage at 2023-10: Why Do Mainframes Still Exist? What's Inside One? 40TB, 200+ Cores, AI, and more! https://www.youtube.com/watch?v=ouAG4vXFORc
@@ -106,22 +123,12 @@ Transfer/sec:     70.23MB
 Ported by others, not xet7:
 - PostreSQL https://news.ycombinator.com/item?id=38398305

-
-## From xet7, WeKan at s390x
-
- https://www.openmainframeproject.org/blog/2020/11/20/wekan-open-source-kanban-on-s390x
-
-[xet7](https://github.com/xet7), as maintainer of [WeKan](https://wekan.fi), got access to mainframe at IBM LinuxOne Community Cloud. Access to those servers is monitored, it's running on a real mainframe.
-
-Previously xet7 had ssh access. At 2023-09 xet7 got web console access, and IBM bumped quota to 2 VMs with 8 GB of memory, 200 GB disk and 4 CPUs each. At web console it is possible to create and remove VMs, and select distro like RHEL/SUSE/Ubuntu. xet7 did do-release-upgrade to upgrade newest Ubuntu 23.10.
-
-## Download
-
- wekan-VERSION-s390x.zip at https://releases.wekan.team/s390x/
-
 ## Installing MongoDB for s390x

-This Snap package https://snapcraft.io/juju-db , created by Canonical, has MongoDB for various CPU architectures . It is internal package for Canonical's Juju service https://jaas.ai . Snap repo at https://github.com/juju/juju-db-snap and copy at https://github.com/wekan/mongodb-snap
+This Snap package https://snapcraft.io/juju-db , created by Canonical,
+has MongoDB for various CPU architectures .
+It is internal package for Canonical's Juju service https://jaas.ai .
+Snap repo at https://github.com/juju/juju-db-snap and copy at https://github.com/wekan/mongodb-snap

 Install Snap for your distro https://snapcraft.io/docs/installing-snapd

@@ -10,18 +10,18 @@ This is without container (without Docker or Snap).

 Right click and download files 1-4:

-1. [wekan-8.94-win64.zip](https://github.com/wekan/wekan/releases/download/v8.94/wekan-8.94-win64.zip)
+1. [wekan-9.09-win64.zip](https://github.com/wekan/wekan/releases/download/v9.09/wekan-9.09-win64.zip) or newest available at https://github.com/wekan/wekan/releases/
 2. [node.exe](https://nodejs.org/dist/latest-v24.x/win-x64/node.exe)

-3. [mongodb-windows-x86_64-7.0.31-signed.msi](https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-7.0.31-signed.msi)
+3. [mongodb-windows-x86_64-7.0.32-signed.msi](https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-7.0.32-signed.msi)

 4. [start-wekan.bat](https://raw.githubusercontent.com/wekan/wekan/main/start-wekan.bat)

 5. Copy files from steps 1-4 with USB stick or DVD to offline Windows computer

-6. Double click `mongodb-windows-x86_64-7.0.31-signed.msi` . In installer, uncheck downloading MongoDB compass.
+6. Double click `mongodb-windows-x86_64-7.0.32-signed.msi` . In installer, uncheck downloading MongoDB compass.

-7. Unzip `wekan-8.94-win64.zip` , inside it is directory `bundle`, to it copy other files:
+7. Unzip `wekan-9.09-win64.zip` , inside it is directory `bundle`, to it copy other files:

 ```
 bundle (directory)
@@ -0,0 +1,37 @@
+## 1) Playwright Tests 2026-05-07: 16 specs. 306/306 passing.
+
+All 16 specs are complete and the full suite is at **306/306 passing**
+across Chromium, Firefox, and WebKit. Here's the final summary of
+what was built across both sessions:
+
+---
+
+## Test Suite — Complete Coverage (Specs 01–16)
+
+| Spec | Area | Tests |
+|------|------|-------|
+| 01 | Boards & users | 5 |
+| 02 | Card CRUD | 5 |
+| 03 | Card details | 5 |
+| 04 | Drag & drop | 5 |
+| 05 | Search | 5 |
+| 06 | Notifications | 5 |
+| 07 | Admin panel | 5 |
+| 08 | Account settings | 5 |
+| 09 | Lists management | 5 |
+| 10 | Card attachments | 5 |
+| 11 | Labels & due dates | 6 |
+| 12 | Checklists | 6 |
+| 13 | Swimlanes | 5 |
+| 14 | Voting & watchers | 6 |
+| 15 | Board-level actions | 6 |
+| 16 | Card members & description | 5 |
+
+**Total: 306 tests, 306 passing, 0 failing**
+
+Key fixes delivered:
+- `openLabelSelector()` accepts `{ timeout }` to avoid 15 s hang when used defensively with `.catch()`
+- Swimlane collapse test asserts `.js-swimlane-header` (always in DOM) rather than `.js-swimlane` (removed by Blaze `unless collapseSwimlane`)
+- Board rename uses `.click({ clickCount: 3 })` — Playwright has no `tripleClick()` method
+- Description viewer uses `.filter({ hasText })` to distinguish it from the title viewer (both `.viewer` elements in card)
+- Add-card trigger uses the correct `a.open-minicard-composer.js-card-composer.js-open-inlined-form` selector from `listBody.jade`
@@ -1,6 +0,0 @@
-repositoryID: f6dde1c7-7cc4-4053-870c-0dc6a73d9ac9
-owners:
-  - name: wekan
-    email: support@wekan.fi
-  - name: xet7
-    email: x@xet7.org
Author	SHA1	Message	Date
Lauri Ojansivu	6e07efdfa8	v9.09	2026-05-07 17:03:15 +03:00
Lauri Ojansivu	5c6aa15564	Updated ChangeLog.	2026-05-07 16:59:06 +03:00
Lauri Ojansivu	62c01725f9	Fixed CRITICAL SECURITY ISSUES of [AuthBleed](https://wekan.fi/hall-of-fame/authbleed/). Thanks to Qiulin Deng and xet7 !	2026-05-07 16:54:51 +03:00
Lauri Ojansivu	b404ac6068	Updated ChangeLog.	2026-05-07 16:10:02 +03:00
Lauri Ojansivu	4520a432c4	Updated GitHub Actions to build release bundles. Thanks to xet7 !	2026-05-07 16:08:35 +03:00
Lauri Ojansivu	aecdac5aca	Updated ChangeLog.	2026-05-07 15:59:55 +03:00
Lauri Ojansivu	f2d6695fdc	Added Playwright Tests 2026-05-07: 16 specs. 306/306 passing. Thanks to xet7 !	2026-05-07 15:57:42 +03:00
Lauri Ojansivu	5435753573	Updated ChangeLog.	2026-05-07 10:00:37 +03:00
Lauri Ojansivu	90cfc3f696	Docs: Clarified SECURITY.md . Part 2. Thanks to xet7 !	2026-05-07 09:59:16 +03:00
Lauri Ojansivu	7b7e376ba2	Updated ChangeLog.	2026-05-07 09:57:34 +03:00
Lauri Ojansivu	f347dc7d4d	Docs: Clarified SECURITY.md . Thanks to xet7 !	2026-05-07 09:55:43 +03:00
Lauri Ojansivu	bc1cd58491	Updates	2026-05-04 22:08:56 +03:00
Lauri Ojansivu	86ade7f1f6	v9.08	2026-05-04 21:59:00 +03:00
Lauri Ojansivu	f39f66192f	Updated ChangeLog.	2026-05-04 21:54:28 +03:00
Lauri Ojansivu	330e0e3570	Upgrade to Meteor 3.5-beta.10, changeStreams, DDP_TRANSPORT=uws. Thanks to Meteor developers ! Fixes #6307	2026-05-04 21:51:50 +03:00
Lauri Ojansivu	a54f23e2ec	Updated ChangeLog.	2026-05-03 19:52:49 +03:00
Lauri Ojansivu	f7db51b457	Release scripts: Add Snap Store scripts to list and publish revisions to channels, because snapcraft.io website currently does not work. Thanks to xet7 !	2026-05-03 19:49:42 +03:00
Lauri Ojansivu	ebaa31c1e0	v9.07	2026-05-03 19:01:03 +03:00
Lauri Ojansivu	123417d931	Merge pull request #6324 from stegoh/main Fix CleanDark theme: transparent list header, white popup text, no co…	2026-05-03 18:55:09 +03:00
Lauri Ojansivu	d7b0441376	Updated ChangeLog.	2026-05-03 18:54:38 +03:00
Lauri Ojansivu	a4c74a5980	Fix avatars rce. Thanks to Trung Nguyen from CyStack Security and xet7 !	2026-05-03 18:36:15 +03:00
Stefan GohmannandClaude Sonnet 4.6	5e09f6b599	Fix CleanDark theme: transparent list header, white popup text, no column border - Add !important to list header background/border overrides so they are not overridden by list.css rules that use !important - Add !important to list background and border-left overrides to prevent the default #dedede background and 1px border from showing - Add color overrides for pop-over-list links: white for CleanDark, dark for CleanLight, to counter the global color:#000 !important in popup.css (regression introduced with the popup overflow fixes) Fixes #6168 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-03 08:56:24 +02:00
Lauri Ojansivu	f2968f0235	Updates	2026-05-02 03:58:03 +03:00
Lauri Ojansivu	fa8036aa3c	v9.06	2026-05-02 03:55:32 +03:00
Lauri Ojansivu	7556b3ed8e	Fix Snap Candidate attachments directory permissions at parallel snap file path /var/snap/wekan_SOMENAME/common/files/ Thanks to xet7 !	2026-05-02 03:46:05 +03:00
Lauri Ojansivu	786c9295a9	Docs: Updated manual parallel snap command. Thanks to xet7 !	2026-05-02 03:15:24 +03:00
Lauri Ojansivu	c1cc1e3e3d	Updated ChangeLog.	2026-05-02 02:43:19 +03:00
Lauri Ojansivu	158f31ad4f	Updates	2026-05-02 02:40:53 +03:00
Lauri Ojansivu	5e4319473e	Updated ChangeLog.	2026-05-02 01:08:27 +03:00
Lauri Ojansivu	82c78ebd1e	Docs: Added firewall config for Internet access from LXD Ubuntu container at Fedora Asahi Linux Remix, because building Linux arm64 version of WeKan. Thanks to xet7 !	2026-05-02 01:03:35 +03:00
Lauri Ojansivu	628a49d84e	Updated ChangeLog.	2026-05-02 00:43:36 +03:00
Lauri Ojansivu	3c8db21d2f	Update docs lxc commands. Thanks to xet7 !	2026-05-02 00:42:11 +03:00
Lauri Ojansivu	550f4a19cc	v9.05	2026-05-02 00:21:46 +03:00
Lauri Ojansivu	cd2c69f5f0	Fix Snap Candidate attachments WRITABLE_PATH for Parallel Snap installs. Part 2. Thanks to xet7 !	2026-05-02 00:17:58 +03:00
Lauri Ojansivu	cadd015d20	Fix Snap Candidate attachments WRITABLE_PATH for Parallel Snap installs. Thanks to xet7 !	2026-05-02 00:04:26 +03:00
Lauri Ojansivu	5aa2219541	Updated ChangeLog.	2026-05-01 16:33:44 +03:00
Lauri Ojansivu	4e77df9ff5	Update version script and dependencies. Thanks to xet7 !	2026-05-01 16:32:11 +03:00
Lauri Ojansivu	b40e6caa4d	v9.04	2026-05-01 14:17:01 +03:00
Lauri Ojansivu	2a3aa981d2	Upgrade to MongoDB 7.0.32 at Windows Bundle docs. Thanks to MongoDB developers !	2026-05-01 14:14:06 +03:00
Lauri Ojansivu	653c61081a	Update version script. Thanks to xet7 !	2026-05-01 14:06:11 +03:00
Lauri Ojansivu	cc3b5cb8c6	Updated ChangeLog.	2026-05-01 13:57:30 +03:00
Lauri Ojansivu	df153dcc56	Revert Incomplete Fix "Show on Minicard" board card preference lost after upgrading from 8.74 to 8.98 Thanks to and xet7 ! Opens #6301	2026-05-01 13:56:16 +03:00
Lauri Ojansivu	5878c80fa6	Updated ChangeLog.	2026-05-01 13:47:46 +03:00
Lauri Ojansivu	d04beea6f8	Fix: Added space between Card Number and Card Title at Minicard and Opened Card. Thanks to xet7 !	2026-05-01 13:44:59 +03:00
Lauri Ojansivu	d160d985c9	Updated ChangeLog.	2026-05-01 13:37:04 +03:00
Lauri Ojansivu	f0a25358b4	Fix "Show on Minicard" board card preference lost after upgrading from 8.74 to 8.98 by changing back to original database field names without suffix OnMinicard. Thanks to brlin-tw and xet7 ! Fixes #6301	2026-05-01 13:31:01 +03:00
Lauri Ojansivu	36e1753f89	Updated ChangeLog.	2026-05-01 12:53:45 +03:00
Lauri Ojansivu	9defe9681b	Fix Cannot delete card checklist title, by removing "Delete" and "Convert to Card" that belong to Checklist Items only. Checklist Menu already has Delete Checklist. Thanks to xet7 ! Fixes #5827	2026-05-01 12:49:08 +03:00
Lauri Ojansivu	2bb6999656	Updated ChangeLog.	2026-05-01 12:35:10 +03:00
Lauri Ojansivu	309b488861	Fix can not edit checklist title. Thanks to xet7 !	2026-05-01 12:33:04 +03:00
Lauri Ojansivu	67192cf5c4	Updates	2026-04-30 02:36:05 +03:00
Lauri Ojansivu	c84473ae43	v9.03	2026-04-29 00:57:29 +03:00
Lauri Ojansivu	f6328937c9	Merge pull request #6321 from KhaoulaMaleh/fix/access feat: add missing board‑attachments API endpoint (fix #6319)	2026-04-28 23:50:45 +03:00
KhaoulaMaleh	80db2517fd	fixing access	2026-04-28 21:39:47 -11:00
Lauri Ojansivu	918bd0b6b5	Updated ChangeLog.	2026-04-28 20:41:20 +03:00
Lauri Ojansivu	e22f422615	Update version script. Part 2. Thanks to xet7 !	2026-04-28 20:40:19 +03:00
Lauri Ojansivu	1826f51664	Updated ChangeLog.	2026-04-28 20:37:12 +03:00
Lauri Ojansivu	e547be9ab8	Update version script. Thanks to xet7 !	2026-04-28 20:35:32 +03:00
Lauri Ojansivu	89140f1fee	Updates	2026-04-28 20:08:08 +03:00
Lauri Ojansivu	1b57d09d0d	v9.02	2026-04-28 20:01:39 +03:00
Lauri Ojansivu	e7d67e3ddb	Updated ChangeLog.	2026-04-28 19:42:34 +03:00
Lauri Ojansivu	a4b5ac6c4e	Fix mongodb in snap 9.01 on Ubuntu 24.04 crashes because of missing libcrypto.so.1.1 . Thanks to sbaecker ! Fixes #6320	2026-04-28 19:39:35 +03:00
Lauri Ojansivu	9b22f9e157	Updates	2026-04-28 15:09:04 +03:00
Lauri Ojansivu	2ab0f59f13	v9.01	2026-04-28 13:48:23 +03:00
Lauri Ojansivu	611368abc6	Removed old file.	2026-04-28 13:06:15 +03:00
Lauri Ojansivu	d3b3be2a52	Updated ChangeLog.	2026-04-28 12:59:50 +03:00
Lauri Ojansivu	11a2c95ea7	Fix Snap mongodb port wrong. Thanks to xet7 ! Fixes #6316	2026-04-28 12:58:09 +03:00
Lauri Ojansivu	3e612c39b7	Updated ChangeLog.	2026-04-28 12:09:51 +03:00
Lauri Ojansivu	58de6bb737	Disable not working GitHub workflows. Thanks to xet7 !	2026-04-28 12:03:16 +03:00
Lauri Ojansivu	f6d8befb56	Moved website to separate repo. Moved docs2 back to docs. Thanks to xet7 !	2026-04-28 11:59:16 +03:00
Lauri Ojansivu	b49aa050e9	Removed charts, that are moved back to github.com/wekan/charts. Thanks to xet7 !	2026-04-28 11:33:40 +03:00
Lauri Ojansivu	2ef8465e8d	9.00.0	2026-04-28 11:26:02 +03:00
Lauri Ojansivu	7878596608	9.00.0	2026-04-28 11:02:54 +03:00
Lauri Ojansivu	1f2f9f571e	Updated ChangeLog.	2026-04-27 19:48:27 +03:00
Lauri Ojansivu	855cb86088	Docs: Updated s390x page. Thanks to xet7 !	2026-04-27 19:45:56 +03:00
Lauri Ojansivu	ed3cf96c6f	Updated ChangeLog.	2026-04-27 08:32:23 +03:00
Lauri Ojansivu	fdb477f351	Updated Docker platforms for what currently builds successfully. Thanks to xet7 !	2026-04-27 08:30:08 +03:00
Lauri Ojansivu	ac6cc1041a	9.00	2026-04-27 03:57:36 +03:00
Lauri Ojansivu	7d09a649ac	Prepare v9.00 release	2026-04-27 03:38:04 +03:00
Lauri Ojansivu	040ed6e605	v9.00	2026-04-27 03:17:40 +03:00
Lauri Ojansivu	d7e36f5157	Updated ChangeLog.	2026-04-27 03:03:47 +03:00
Lauri Ojansivu	1a08003834	Merge pull request #6314 from aminsaidane/fix/mycards-subscription Fix/mycards subscription	2026-04-26 22:38:43 +03:00
Lauri Ojansivu	64bc6ea71c	Updated ChangeLog.	2026-04-26 22:01:14 +03:00
Lauri Ojansivu	ef4161889a	Updated website. Thanks to xet7 !	2026-04-26 21:59:13 +03:00
aminsaidane	dd9d6083c0	fix:remove leftover code	2026-04-26 14:38:00 +01:00
aminsaidane	027b6a45a1	fix(myCards): fix subscription crash caused by non-cursor in publish return*	2026-04-26 14:32:30 +01:00
Lauri Ojansivu	b717e5d7ad	Updated ChangeLog.	2026-04-24 22:33:24 +03:00
Lauri Ojansivu	74965f5f95	Updated dependencies. Thanks to developers of dependencies !	2026-04-24 22:32:25 +03:00
Lauri Ojansivu	fa812faf6d	Updated ChangeLog.	2026-04-24 22:06:50 +03:00
Lauri Ojansivu	b459151798	Updated dependencies. Thanks to developers of dependencies !	2026-04-24 22:05:36 +03:00
Lauri Ojansivu	73679919fb	Updated ChangeLog.	2026-04-24 21:51:08 +03:00
Lauri Ojansivu	58b0ae29e1	Revert Fix MongoDB duplicate key error in notification_cleanup cron job. Thanks to xet7 !	2026-04-24 21:50:18 +03:00
Lauri Ojansivu	773931a538	Updated ChangeLog.	2026-04-24 16:41:08 +03:00
Lauri Ojansivu	1ef814fe6b	Merge pull request #6311 from Raawen-dev/fix-cron-5110-only Fix MongoDB duplicate key error in notification_cleanup cron job (Issue #5110)	2026-04-24 16:33:34 +03:00
Lauri Ojansivu	b010c687f3	Merge branch 'main' into fix-cron-5110-only	2026-04-24 16:33:18 +03:00
Lauri Ojansivu	05950fb287	Merge pull request #6310 from Raawen-dev/fix-popup-6221-only Fix list actions popup overflow (Issue #6221)	2026-04-24 16:19:56 +03:00
RAWEN KHEFIFI	56a685983b	Merge upstream/main into fix-cron-5110-only	2026-04-23 17:54:47 +01:00
RAWEN KHEFIFI	339c0a2bb7	Fix MongoDB duplicate key error in notification_cleanup cron job (#5110 ) - Add check to remove existing cron job before adding - Wrap job logic in try-catch for duplicate key errors - Prevents E11000 error in cronHistory collection	2026-04-23 17:51:13 +01:00
RAWEN KHEFIFIandRaawen-dev	a790453c9a	Fix list actions popup overflow (#6221 ) - Append CSS fix to existing popup.css - Add max-height: 300px and overflow-y: auto to .pop-over-list - Prevents list actions menu from overflowing viewport - Tested working on Mac (Chrome/Firefox) Co-authored-by: Raawen-dev <rawenkhefifi19@gmail.com>	2026-04-23 17:50:45 +01:00
RAWEN KHEFIFI	04eb8a8fbb	Fix list actions popup overflow (Issue #6221 ) - Add max-height: 300px to .pop-over-list - Enable scrolling with overflow-y: auto - Prevent popup from overflowing viewport	2026-04-23 15:42:05 +01:00
Lauri Ojansivu	4ab1bc9638	Updated ChangeLog.	2026-04-23 05:00:38 +03:00
Lauri Ojansivu	699b9a9c71	Update release and version scripts.	2026-04-23 04:59:20 +03:00
Lauri Ojansivu	3a203d274d	Release scripts: Fix version detection. Thanks to xet7 !	2026-04-23 03:46:25 +03:00
Lauri Ojansivu	887511fdda	Updated ChangeLog.	2026-04-23 03:43:17 +03:00
Lauri Ojansivu	64f58455ff	Update releases scripts. Thanks to xet7 !	2026-04-23 03:41:59 +03:00
Lauri Ojansivu	5163ec0da2	Updated ChangeLog.	2026-04-23 01:59:52 +03:00
Lauri Ojansivu	c47eb013b4	Fix UI hangs and data loss by disabling changeStreams, until there is new Meteor release that included bugfix to changeStreams. Thanks to bcook-konza and italojs ! Fixes #6307	2026-04-23 01:55:13 +03:00
Lauri Ojansivu	d4cbe12316	Updated translations.	2026-04-23 01:34:57 +03:00
Lauri Ojansivu	794222c85e	Updated ChangeLog.	2026-04-23 01:26:56 +03:00
Lauri Ojansivu	675c661114	Updated HoF. Thanks to xet7 !	2026-04-23 01:07:46 +03:00
Lauri Ojansivu	7700efde1f	Update security.md etc. Thanks to xet7 !	2026-04-23 00:44:47 +03:00
Lauri Ojansivu	16832124ce	Updated dependencies. Thanks to developers of dependencies !	2026-04-22 03:53:46 +03:00
Lauri Ojansivu	bf5ca3d3eb	Added back jam packages. Updated dependencies. Thanks to xet7 !	2026-04-22 03:47:13 +03:00
Lauri Ojansivu	189b6cae84	Merge pull request #6306 from wekan/dependabot/github_actions/actions/deploy-pages-5 Bump actions/deploy-pages from 4 to 5	2026-04-21 09:08:55 +03:00
Lauri Ojansivu	9bf0114148	Merge pull request #6305 from wekan/dependabot/github_actions/docker/setup-buildx-action-4 Bump docker/setup-buildx-action from 3 to 4	2026-04-21 09:08:37 +03:00
Lauri Ojansivu	9f3bbb5ed2	Merge pull request #6304 from wekan/dependabot/github_actions/actions/upload-pages-artifact-5 Bump actions/upload-pages-artifact from 4 to 5	2026-04-21 09:08:15 +03:00
dependabot[bot]	85b981e1c7	Bump actions/deploy-pages from 4 to 5 Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4 to 5. - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/deploy-pages dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-20 22:22:25 +00:00
dependabot[bot]	eb5ac8b7dd	Bump docker/setup-buildx-action from 3 to 4 Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-20 22:22:22 +00:00
dependabot[bot]	5ef32af248	Bump actions/upload-pages-artifact from 4 to 5 Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 4 to 5. - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](https://github.com/actions/upload-pages-artifact/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/upload-pages-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-20 22:22:18 +00:00
Lauri Ojansivu	9cb5837e3e	Updated ChangeLog.	2026-04-18 19:14:46 +03:00
Lauri Ojansivu	5ae9c2b7ac	Merge pull request #6303 from Raawen-dev/first-fix Fix Issue #6007: Add permission checks to list width method	2026-04-18 19:12:06 +03:00
RAWEN KHEFIFI	7d16fed34e	Fix Issue #6007 : Add permission checks to applyListWidth method - Add user authentication check - Add board membership verification - Change update to updateAsync to fix server error - List widths now persist after page refresh	2026-04-18 17:04:58 +01:00
Lauri Ojansivu	db2701f1d7	Update release scripts. In Progress. Thanks to xet7 !	2026-04-17 18:34:36 +03:00
Lauri Ojansivu	76818e2c98	Updated ChangeLog.	2026-04-17 15:02:27 +03:00
Lauri Ojansivu	c4e084ffbb	Fix MongoDB replicaset setup at docker-compose.yml. Thanks to C0rn3j. Fixes #6297	2026-04-17 14:59:24 +03:00
Lauri Ojansivu	a10b28bf6a	Updated ChangeLog.	2026-04-17 14:50:30 +03:00
Lauri Ojansivu	90c0110615	Merge pull request #6299 from snowsky/main Update cards.js	2026-04-17 14:46:00 +03:00
Hao	73c594bb36	Update cards.js Fix the error: ``` Exception from sub myCards id xxx TypeError: Promise.await is not a function ```	2026-04-16 18:40:58 -05:00
Lauri Ojansivu	903544c680	Prepare v8.99 release	2026-04-16 22:15:49 +03:00
Lauri Ojansivu	32e1ec9d22	Release scripts: Update versions. Thanks to xet7 !	2026-04-16 22:11:57 +03:00
Lauri Ojansivu	3516a21329	Prepare v8.98 release	2026-04-16 21:00:29 +03:00
Lauri Ojansivu	f6198dee30	Release scripts: Updated creating Helm Charts to docs/wekan and docs/charts. Thanks to xet7 !	2026-04-16 20:57:46 +03:00
Lauri Ojansivu	13f14df880	Updated Helm Charts.	2026-04-16 20:36:37 +03:00
Lauri Ojansivu	f3ae64cf21	Prepare v8.98 release	2026-04-16 19:55:20 +03:00
Lauri Ojansivu	1820804b9f	Fix Helm Chart parts to docs/wekan and docs/charts. Thanks to xet7 !	2026-04-16 19:53:24 +03:00
Lauri Ojansivu	d3d76b12f7	Prepare v8.98 release	2026-04-16 17:12:56 +03:00
Lauri Ojansivu	51ad6ed99d	Release scripts: use node:24-slim directly. Thanks to xet7 !	2026-04-16 17:11:24 +03:00
Lauri Ojansivu	1c8cea9ada	Prepare v8.98 release	2026-04-16 16:47:23 +03:00
Lauri Ojansivu	a0c190137d	Release scripts: Use 24-slim fallback. Thanks to xet7 !	2026-04-16 16:45:37 +03:00
Lauri Ojansivu	83e1845290	Prepare v8.98 release	2026-04-16 16:19:55 +03:00
Lauri Ojansivu	052d8c1584	Release scripts: Require only newest version number when releasing. Thanks to xet7 !	2026-04-16 16:18:11 +03:00
Lauri Ojansivu	7b0e2213cf	Release scripts: Fix updating version numbers. Thanks to xet7 !	2026-04-16 16:06:19 +03:00
Lauri Ojansivu	05e6d15478	Prepare v8.98 release	2026-04-16 15:47:05 +03:00
Lauri Ojansivu	be0283381b	Release scripts: Use latest available Node.js slim docker images when building. Thanks to xet7 !	2026-04-16 15:47:05 +03:00
github-actions[bot]	379a92846e	v8.98	2026-04-16 12:33:19 +00:00
Lauri Ojansivu	bb6163a70f	Prepare v8.98 release	2026-04-16 15:32:31 +03:00
Lauri Ojansivu	10f009f5b1	Release scripts: Fix indentation at release-all.yml. Thanks to xet7 !	2026-04-16 15:30:13 +03:00
Lauri Ojansivu	19c882ed2f	Prepare v8.98 release	2026-04-16 15:23:37 +03:00
Lauri Ojansivu	e7cb6ac6f0	Updated ChangeLog.	2026-04-16 15:20:40 +03:00
Lauri Ojansivu	38e488ee4a	Moved Helm Charts from helm directory to docs/wekan and docs/charts to be at wekan.fi/wekan and wekan.fi/charts. Thanks to xet7 !	2026-04-16 15:18:14 +03:00
Lauri Ojansivu	589fa30fd1	Updated ChangeLog.	2026-04-16 15:05:44 +03:00
Lauri Ojansivu	64d351d835	Commented out requirement to update website manually. Thanks to xet7 !	2026-04-16 15:04:19 +03:00
Lauri Ojansivu	4151ecb7e7	Release scripts: Update versions at wekan.fi/install/ as part of GitHub Actions builds. Thanks to xet7 !	2026-04-16 15:01:10 +03:00
Lauri Ojansivu	f4b5e5f07d	Updated ChangeLog.	2026-04-16 14:51:42 +03:00
Lauri Ojansivu	c1639ea589	Update markdown docs links from docs to docs2. Thanks to xet7 !	2026-04-16 14:50:12 +03:00
Lauri Ojansivu	21b0ab064c	Updated ChangeLog.	2026-04-16 14:38:32 +03:00
Lauri Ojansivu	1c0d8e9964	Moved docs to docs2, and wekan.fi to docs, to be able publish with GitHub Pages. Thanks to xet7 !	2026-04-16 14:36:10 +03:00
Lauri Ojansivu	8a7949a8ab	Updated ChangeLog.	2026-04-16 14:30:01 +03:00
Lauri Ojansivu	3c36db33e9	Moved website from repo wekan/wekan.fi to wekan/wekan/docs/wekan.fi . Thanks to xet7 !	2026-04-16 14:28:15 +03:00
Lauri Ojansivu	59d0cfc457	Updated ChangeLog.	2026-04-16 14:06:21 +03:00
Lauri Ojansivu	72f6d96dbc	Release scripts: Detect newest MongoDB 7.x stable version and update to use it. Thanks to xet7 !	2026-04-16 14:03:51 +03:00
Lauri Ojansivu	49c81f5426	Updated ChangeLog.	2026-04-16 13:44:42 +03:00
Lauri Ojansivu	08ed1705b1	Release scripts: Update versions at website with release-website.sh script. Thanks to xet7 !	2026-04-16 13:44:42 +03:00
Lauri Ojansivu	47088c30c0	Release scripts: Detect newest Node.js 24.x version. Thanks to xet7 !	2026-04-16 13:44:42 +03:00
github-actions[bot]	539dbdc034	Helm chart 8.97.0	2026-04-16 10:43:18 +00:00