Shaarli no longer officially support PHP 5.6 and PHP 7.0 as they've reached end of life.

Shaarli classes now use namespace, third party plugins need to update.

Added

• Add optional PHP extension to composer suggestions.
• composer: enforce PHP security advisories
• phpDocumentor configuration and make target
• Run unit tests against PHP 7.3
• Bunch of accessibility improvements to the default template, thanks to @llune
• Bulk actions: set visibility
• Display sticky label in linklist
• Add print CSS rules to the default template
• New setting to automatically retrieve description for new bookmarks
• Plugin to override default template colors

Changed

• Shaarli now uses namespaces for its classes.
• Rewrite IP ban management
• Default template: slightly lighten visited link color
• Hide select all button on mobile view
• Switch from FontAwesome v4.x to ForkAwesome
• Daily - display the current day instead of the previous one

Fixed

• Do not check the IP address with session protection disabled
• API: update test regexes to comply with PCRE2
• Optimize and cleanup imports
• ensure HTML tags are stripped from OpenGraph description
• Documentation invalid links
• Thumbnails disabling if PHP GD is not installed
• Warning if links sticky status isn't set
• Fix button overlapping on mobile in linklist
• Do not try to retrieve thumbnails for internal link
• Update node-sass to fix a vulnerability in node tar dependency
• armhf Dockerfile
• Default template: Responsive issue with delete button fix
• Persist sticky status on bookmark update

Removed

• Doxygen configuration
• redirector setting
• QRCode link to an external service

Release to fix broken Docker build on the latest version.

Fixed

• Fixed Docker build
• Fixed a few documentation broken links
• Fixed broken label

Added

• More accessibility improvements

v0.12.0-beta

Fixed XSS vulnerabilities introduced in v0.12.0-beta.

Save you data/ folder before updating!

Added

• Thumbnailer: add soundcloud.com to list of common media domains
• Markdown rendering is now integrated into Shaarli core
• Add autofocus on tag cloud filter input
• Japanese translations
• Japanese translation: add language to admin configuration page
• Support for PHP 8.0
• Support for local anchor URL (starting with #)
• LDAP authentication
• Encapsulated PageCacheManager
• Docs:
  • add screenshots of all pages
  • section about mkdocs
  • Ulauncher extension
• CI: run against PHP 7.4
• Added $links_per_page variable to template and display on default
• Inject BookmarkServiceInterface in plugins data
• Add manual configuration for root URL
• Added PATCH to the allowed Apache request methods.
• REST API: compatibility with ionos Apache's headers

Changed

• Introduce Bookmark object and Service layer
  • Save bookmark as objects in the datastore
  • Handle bookmark as objects across the whole codebase (except templates and plugins)
• Process all Shaarli page through Slim controller, with proper URL rewriting (see #1516)
• Docs: the entire documentation has been reviewed, updated and improved, thanks to @nodiscc!
• ATOM feed: use instance name as author name instead of URL
• Updated French translation
• Default colors plugin: generate CSS file during initialization
• Improve default bookmarks after install
• Upgrade all front end dependencies and webpack build
• Default theme: Make tag cloud/list views buttons more obvious

Fixed

• Undefined index: thumbnail in daily page
• Undefined index: thumbnail on OpenGraph headers
• Undefined index: updated on linklist
• Make sure that bookmark sort is consistent, even with equal timestamps
• Code PHP version check as requirement bumped to PHP 7.1
• Thumbnail images lazy loading
• Markdown plugin: fix RSS feed direct link reverse
• Fix RSS permalink included in Markdown bloc
• Demo plugin: multiple typos
• Makefile target for releases
• Makefile target for html documentation
• Session cookie setting being set while session is active
• Deprecated use of implode
• Division by zero in tag cloud
• CI: deprecated linux distribution and sudo directive
• Docker build: gcc is no longer included in python alpine image
• Default template: display pin button in mobile view
• Pinned bookmarks are not longer displayed first in ATOM/RSS feeds
• Docs:
  • Outdated Docker documentation for stable branch
  • Outdated links
  • Plugin description in meta files
• docker-compose.yml: pin traefik image to 1.7-alpine

Removed

• Markdown plugin
• Docs:
  • emojione & twemoji removed
• Makefile: remove static_analysis_summary from all: target
• doc/Makefile: remove references to composer update

nginx (#1628) and Apache (#1630) configurations have been reviewed. It is recommended that you
update yours using the documentation.
Users using official Docker image will receive updated configuration automatically.

Added

• Bulk creation of bookmarks
• Server administration tool page (and install page requirements)
• Support any tag separator, not just whitespaces
• Share a private bookmark using a URL with a token
• Add a setting to retrieve bookmark metadata asynchronously (enabled by default)
• Highlight fulltext search results
• Weekly and monthly view/RSS feed for daily page
• MarkdownExtra formatter
• Default formatter: add a setting to disable auto-linkification
• Add mutex on datastore I/O operations to prevent data loss
• PHP 8.0 support
• REST API: allow override of creation and update dates
• Add strict types for bookmarks management

Changed

• Improve regex and performances to extract HTML metadata (title, description, etc.)
• Support using Shaarli without URL rewriting (prefix URL with /index.php/)
• Improve the "Manage tags" tools page
• Use PSR-3 logger for login attempts
• Move utils classes to Shaarli\Helper namespace and folder
• Include php-simplexml in Docker image
• Raise 404 error instead of 500 if permalink access is denied
• Display error details even with dev.debug set to false
• Reviewed nginx configuration
• Reviewed Apache configuration
• Replace vimeo link in demo bookmarks due to IP ban on the demo instance
• Apply PSR-12 on code base, and add CI check using PHPCS

Fixed

• Compatiliby issue on login with PHP 7.1
• Japanese translations update
• Redirect to referrer after bookmark deletion
• Inject ROOT_PATH in plugin instead of regenerating it everywhere
• Wallabag plugin: minor improvements
• REST API postLink: change relative path to absolute path
• Webpack: fix vintage theme images include
• Docker-compose: fix SSL certificate + add parameter for Docker tag

Removed

• config.json.php new lines in prefix/suffix to prevent issues with Windows PHP

Docker Changes

Docker: use ghcr.io/shaarli/shaarli as Docker image instead of shaarli/shaarli.
The :master Docker image has been removed, please use :latest instead.
The :stable Docker image has been removed, please use :release instead.

Added

• Bulk action: add or delete tag to multiple bookmarks
• New Core Plugin: ReadItLater
• Plugin system: allow plugins to provide custom routes
• Support search highlights when matching URL content
• Support for OR (~) and optional AND (+) operators for tag search
• Russian translation
• Chinese translation
• Export:
  • Export: set a bookmark's LAST_MODIFIED attribute to its update timestamp
  • Export: set a bookmark's PRIVATE attribute using an integer value
• Add an additional free disk space check before saving the datastore
• curl: support HTTP/2 response code header
• CI:
  • Build and push Docker images through Github Actions
  • push container images to github registry in addition to dockerhub
• Documentation:
  • Add '206 not acceptable' to the Troubleshooting section
  • Add mention to Shaarli Archiver
  • doc: add note to adjust proxy timeouts or PHP max execution time
  • doc: shaarli configuration: mention file:/// URIs
  • add "formatter" key to example config.json.php

Changed

• docker latest: replace dev in shaarli_version.php with the latest commit
• Daily RSS Cache: invalidate cache base on the date
• Update Japanese translations
• Update German translations
• Templates: Inject current template name
• format_date: include timezone in IntlDateFormatter object
• Handle pagination through BookmarkService
• autocapitalize off for username input
• More intuitive label for plugin checkboxes
• Simple and uniform localized website title
• Use rewrited version of Netscape Bookmark Parser
• tests/makefile: rewrite translate target to be compatible with busybox
• PubSubHub Plugin: make 1 external call per request
• Docker:
  • newer alpine (for newer PHP) and apk upgrade
  • Dockerfile.armhf: upgrade python2 -> python3
  • Dockerfile: add php8-gettext package
  • update s6 service definition to use php-fpm8
  • install php8-ldap in Docker images
• CI:
  • use Github Action instead of Travis CI
  • use the yarnpkg command instead of yarn
  • tools: github actions: fix PHP 8.0 tests
  • github actions: add tests for PHP 8.2
• Documentation:
  • apache: explicitely ste index.php as DirectoryIndex
  • bookmarklet is now working on github.com
  • LDAP login support, update php requirements list
  • installation/tests: clarify build tools installation procedure
  • doc: PHP extensions are also required for development
  • doc: move OCI images hosting to ghcr.io

Fixed

• Error handling if the datastore mutex is not working
• Synchronous metadata retrieval is failing in strict mode
• Improve metadata extraction
• Typo: 'Authentication' ->
• default_colors plugin: update CSS file on color change
• API: POST/PUT Link - properly parse tags string
• Error when using bulk shaare with a single URL
• Bulk Shaare:
  • use unique HTML ID
  • error with a single URL
  • redirection with ending slash
• Bug when trying to access ATOM feed without bookmarks
• Documentation build
• pubsubhubbub hub link in RSS / Atom.
• Monthly views previous/next month links during month
• Resolve PHP 8.1 deprecation warnings
• Fix PHP 8 incompatibility with debug mode enabled
• Fixed Roboto-Regular and Roboto-Bold font declarations
• template/vintage: fix typo in visibility selection link
• Do not display deprecated warnings by default
• Fix a bug when using '/' as a tag separator
• Fix Logger exception: gracefully handle permission issue
• Documentation:
  • plugins.md: fix link casing

Removed

• Daily RSS: Remove relative description (today, yesterday)
• Documentation:
  • remove the markdown plugin from the plugins list
  • remove duplicate "general" key in example config.php.json

Major changes:

• Security: Fix XSS vulnerability in tag search
• Drop support for PHP 7.1, 7.2 and 7.3

Added

• Docker build: add ARM64 platform and bump Github action version by @ArthurHoaro in #1965
• github actions: build OCI images that contain both amd64 and armv7 by @nodiscc in #1962
• Expose tags_separator config through /info API by @amadeous in #1997
• tools: github actions: build docker images on pull requests by @nodiscc in #2014
• doc: server configuration: add PHP 8.2 to PHP compatibility table by @nodiscc in #2021
• Add shaarli-stack theme to Community-and-related-software.md by @dajare in #2028
• doc: document general.download_max_size/timeout configuration settings by @nodiscc in #2036
• doc: troubleshooting: automatic title retrieval fails when it is set by javascript by @nodiscc in #2037

Changed

• doc: update release procedure (merge the latest release to the release branch) + use the release branch for latest release version detection by @nodiscc in #1960
• Update german translation by @bschwede in #1969
• Update Server-configuration.md by @reinboldg in #1973
• Update Community-and-related-software.md by @nlegaillart in #1984
• doc: improve docs on usage of OR operator in tags search by @nodiscc in #1987
• docker: nginx: listen on IPv6 in addition to IPv4 by @cerebrate in #1983
• Doc update, WebSub (formerly PubSubHubbub) plugin by @clach04 in #2008
• doc: community/related software/integration with other platforms: add link to shaarli debian package by @nodiscc in #2018
• replace mkdocs with sphinx/myst-parser for HTML documentation generation, documentation improvements by @nodiscc in #2025

Fixed

• Makefile: Use GNU tar if available by @ArthurHoaro in #1957
• Support: ignore disk_free_space if the function is unavailable by @ArthurHoaro in #1970
• Documentation: fix broken link to 3rd party plugins by @ArthurHoaro in #1975
• Fix autofocus: load bulk action input on linklist only by @ArthurHoaro in #1976
• doc: fix mkdocs build warnings/relative links by @nodiscc in #2015
• correct usage of hyphens in all occurences of 'super fast, database-free' by @nodiscc in #2003

Removed

• Drop support for PHP 7.1, 7.2 and 7.3 by @ArthurHoaro in #1958
• doc: themes: remove unmaintained themes by @nodiscc in #2030
• doc: remove bountysource badge by @nodiscc in #2035

Security

• Fix XSS vulnerability in tag search by @ArthurHoaro in #2039
• tools: run trivy vulnerability scanner on the 'latest' docker image by @nodiscc in #1980
• github actions: fix value of TRIVY_TARGET_DOCKER_IMAGE by @nodiscc in #1989
• tools/CI: scan repository with trivy security scanner (yarn.lock, composer.lock) by @nodiscc in #1998
• tools/tests: update trivy to v0.44.0 by @nodiscc in #2012
• docker: update base alpine docker image to 3.16.7 by @nodiscc in #2024

Full Changelog: v0.12.2...v0.12.3