Serendipity 2.4-beta1 released!

Long time no see - after about a year and a half, we're back with the first beta release of Serendipiy 2.4, featuring PHP 8 compatibility and database upgrades to enable full unicode input!

Serendipity 2.4-beta1 is the first release of Serendipity that targets compatibility with PHP 8. It changes a lot of code in the core of Serendipity that triggered warnings with recent versions of PHP 8. At the same time, the Serendipity team fixed many compatibility issues in plugins and themes.

Besides various fixes, some significant changes to the latest stable 2.3.5 are:

  • PHP 8 compatibility for the core, current themes and many plugins hosted on Spartacus
  • Split date/time input in the editor, enabling browser support for entering time and date
  • Notifications for plugin updates
  • Fixes and enhancements for the multi-language support
  • Move MySQL databases from MyIsam and UTF8 to InnoDB and utf8mb4, enabling full unicode input

This version of Serendipity has already seen production use in multiple blogs, but it's still a beta with rather large changes, especially concerning PHP 8 compatibility, database changes and multi-language support. So please handle it with care! Also please read the PHP 8 upgrade hints in the Github wiki.

We would love to get feedback from our users! Please help us in reaching full support for PHP 8 by running this version with PHP 8 and report bugs (also and especially for plugins) in the forum or the Github issue tracker. But please be sure to try out the new release just on test/development blogs yet. If you absolutely want to test it on production blogs, make sure to have a backup (of your files, your media and your database) available.

Please see the release statement on GitHub for more (technical) details.

You can download the release file and unzip it to your installation as usual.

Serendipity 2.3.5 released

About a month has passed since our last patch release - and here we are again, releasing Serendipity 2.3.5 with some fixes for new as well as longstanding bugs.

We now truncate the file extension of media items to 5 characters - more will not fit in the database anyway, and PostgreSQL really didn't like longer extensions. Sometimes Serendipity didn't show upgrades for your plugins even though Spartacus already had them ready; that's no fun, is it? On the other hand you sometimes could spot some funny characters in the backend entry overview, as Serendipity really meant well and double-encoded special characters; which it doesn't do any longer. And we stopped CK-Edit, our graphical editor, from dropping some HTML elements (<details> and <summary>).

Last but not least we fixed a regression and some longstanding bugs in three bundled plugins: serendipity_plugin_history started throwing database errors when displaying archive pages after our 2.3.3 release, and extended properties from serendipity_event_entryproperties got lost in quite a lot of corner cases (and, for example, when publishing an entry from your backend dashboard) for a really long time. (The latter bug affected several other plugins, too, which were already updated via Spartacus.) Finally serendipity_plugin_comments will now work together nicely with serendipity_event_unstrip_tags (from Spartacus) which will keep HTML tags from comments for your sidebar display.

Please see the release statement on GitHub for more (technical) details.

You can download the release file and unzip it to your installation as usual, or update from within Serendipity using the Serendipity Autoupdate Plugin (serendipity_event_autoupdate).

Serendipity 2.3.4 released (security update)

Just a few days after Serendipity Camp and our last patch release we have to release Serendipity 2.3.4, fixing a security flaw (present on Windows installations only and exploitable only for users with upload rights on the Media library).

Unfortunately, it was possible to upload a malicious file "file" (e.g. a PHP script or other executable content) without a file extension and then rename it afterwards to "file.php" on Windows. Thanks to Junyu Zhang for spotting and reporting this!

As we had to do a patch release anyway, we added some other fixes around Media Library file renaming and improved the display of installable plugins by adding the plugin source (Spartacus, bundled with Serendipity core or local).

Please see the release statement on GitHub for more (technical) details.

You can download the release file and unzip it to your installation as usual, or update from within Serendipity using the Serendipity Autoupdate Plugin (serendipity_event_autoupdate).

Please do install the update on Windows systems running Serendipity due to the security fix.

Serendipity 2.3.3 released

About half a year after our last patch release we present Serendipity 2.3.3, the next bugfix release for our current stable branch.

We made some small changes and fixed some bugs in our Media Library (including a nasty bug where renaming a file using an already existing file name deleted both files). We don't show non-existing (empty) archive pages any longer and don't render the whole page when just some JS should be rendered, speeding things up a bit. Deleting trackbacks from the frontend - when logged in - should now work again, and (last but not least) we updated some bundled plugins: serendipity_event_mailer got some enhancements (you can add an introductory text to the generated mails and send them not just when publishing your entry, but for each change, too), serendipity_plugin_comments won't add spurious whitespace in the middle of words any more, and serendipity_event_bbcode has now (working) support for roman numerals in ordered lists.

Please see the release statement on GitHub for more (technical) details.

You can download the release file and unzip it to your installation as usual, or update from within Serendipity using the Serendipity Autoupdate Plugin (serendipity_event_autoupdate).

And please don't hesitate to report bugs in our forums!

Serendipity 2.3.2 released (security update)

Serendipity 2.3.2 is a bugfix and security fix release for our current stable branch.

Two security related bugs were fixed, the pagination feature of templates like Timeline now really works, autologin now works again on MySQL, too, all thumbnails are rotated with the original image, the WYSIWYG editor won't strip some needed elements, and auto-generated mails will now look right on all MTAs.

Please see the release statement on GitHub for more details.

You can download the release file and unzip it to your installation as usual, or update from within Serendipity using the Serendipity Autoupdate Plugin (serendipity_event_autoupdate).

Please do install the update due to the security fixes we have included.

Serendipity 2.3.1 released

The first bugfix release for our new stable branch is out: Serendipity 2.3.1, fixing some bugs that crept into the 2.3.0 release as well as some older faults.

Mass delete for the media library is working again, as well as the pagination feature of templates like Timeline that couldn't cope with the "stable archives" sorting order, and the plugin lists in the backend got links to their Spartacus entries (if they are installed from Spartacus, that is).

Please see the release statement on GitHub for more details.

You can download the release file and unzip it to your installation as usual, or update from within Serendipity using the Serendipity Autoupdate Plugin (serendipity_event_autoupdate).