1.23.12

louislam/uptime-kuma1.23.12Apr 18, 2024by louislam

AI Summary

Major release with extensive bug fixes, security patches, and improvements including TLS certificate handling and i18n detection changes.

Key Highlights

  • Improved TLS certificate retrieval using keylog event
  • Fixed i18n detection to use navigator.languages instead of navigator.language
  • Multiple security fixes including nodemailer, axios, and dompurify updates
  • Added helptext for mail subsystem and ntfy priority field

Breaking Changes

  • i18n detection mechanism changed - may affect language matching depending on setup
  • Proxy-related changes may affect reliability - users advised to use 1.23.11 if issues occur

New Features

  • TLS keylog event for better certificate reliability
  • Enhanced i18n language detection
  • Multiple security vulnerability patches
  • UI/UX improvements

Full Release Notes

> [!WARNING]
> The i18n detection mehanism which matches your languages and our languages introduced in #4244 was too basic (depending on your setup you might or might not be affected)
> See #4692 for further details.

> [!WARNING]
> If you use proxys, please use `1.23.11` instead, as the more reliable events from #4630 don't take this part into consideration.
> If you want to prevent such breakages in the future, we would be very happy with increasing the test-coverage in general ^^

### 💇‍♀️ Improvements
- #4477 Improved helptext of how to send mail via the systems mail subsystem (Thanks @apio-sys)
- #4630 Feat: Use keylog event to obtain TLS certificate for better reliability [1.23.X] (Thanks @chakflying)

### 🐞 Bug Fixes
- #4326 Fix `encodeBase64` for empty password or user in HTTP Basic Authentication (Thanks @Saibamen)
- #4244 made sure that the i18n does use `navigator.languages` instead of  `navigator.language` for automatic language detection (Thanks @CommanderStorm)
- #3598 fix(notification-dingding): throw error when failed (Thanks @AnnAngela)
- #4417 Fix: Make sure browser is connected before returning (Thanks @chakflying)
- #4425 Fix: [JSON-Query] Prevent parsing string-only JSON (Thanks @chakflying)
- #4631 Fix: Add missing FK for monitor-tls-info table [1.23.X] (Thanks @chakflying)

### ⬆️ Security Fixes
- GHSA-23q2-5gf8-gjpp
- #4653 fix: Update nodemailer to fix GHSA-9h6g-pr28-7cqp [1.23.X] (Thanks @Saibamen)
- #4652 fix: Update `axios`, `@actions/github` and `dompurify`  [1.23.X] (Thanks @Saibamen)
- Update all dependencies

### 🦎 Translation Contributions

### Others
- #4633 Fix: Fix CI on Windows Runner [1.23.X] (Thanks @chakflying)
- Other small changes, code refactoring and comment/doc updates in this repo: