v2.1.1

What's Changed

• feat: Add Pro features discovery banner by @daniel-hiller
• refactor(docker): Remove global npm installation from Dockerfiles by @daniel-hiller
• fix(s3): Add requestChecksumCalculation config option by @meltyshev
• fix(proxy): Limit Squid file descriptors to prevent excessive memory allocation by @meltyshev
• build(client): Allow specifying proxy target by @meltyshev
• Update de-DE Translation by @SeDi343 in #1597
• Update German Language by @SeDi343 in #1602
• PLANKA: Add User Avatar Change for Admins by @SeDi343 in #1604
• build(deps-dev): Bump flatted from 3.4.1 to 3.4.2 in /client by @dependabot[bot] in #1595
• build(deps-dev): Bump flatted from 3.4.1 to 3.4.2 in /server by @dependabot[bot] in #1603
• build(deps): Bump svgo from 3.3.2 to 3.3.3 in /client by @dependabot[bot] in #1564
• build(deps): Bump immutable from 5.1.4 to 5.1.5 in /client by @dependabot[bot] in #1563
• build(deps): Bump rollup from 4.57.1 to 4.59.0 in /client by @dependabot[bot] in #1559
• build(deps): Bump fast-xml-parser and @aws-sdk/xml-builder in /server by @dependabot[bot] in #1632
• build(deps): Bump nodemailer from 7.0.13 to 8.0.5 in /server by @dependabot[bot] in #1631
• build(deps-dev): Bump picomatch from 2.3.1 to 2.3.2 in /client by @dependabot[bot] in #1607
• build(deps): Bump picomatch from 2.3.1 to 2.3.2 in /server by @dependabot[bot] in #1608
• build(deps): Bump lodash from 4.17.23 to 4.18.1 in /server by @dependabot[bot] in #1629
• build(deps): Bump lodash from 4.17.23 to 4.18.1 in /client by @dependabot[bot] in #1630
• build(deps): Bump lodash-es from 4.17.23 to 4.18.1 in /client by @dependabot[bot] in #1624
• build(deps): Bump brace-expansion from 2.0.2 to 2.0.3 by @dependabot[bot] in #1628
• build(deps): Bump brace-expansion from 1.1.12 to 1.1.13 in /server by @dependabot[bot] in #1617
• build(deps): Bump vite from 7.3.1 to 7.3.2 in /client by @dependabot[bot] in #1627
• build(deps): Bump yaml from 2.8.2 to 2.8.3 in /server by @dependabot[bot] in #1610
• build(deps): Bump yaml from 2.8.2 to 2.8.3 in /client by @dependabot[bot] in #1611
• build(deps): Bump yaml from 2.8.2 to 2.8.3 by @dependabot[bot] in #1612
• build(deps): Bump bn.js in /client by @dependabot[bot] in #1551
• fix: unicode/emoji characters in user avatar initials by @HannesOberreiter in #1635
• build(deps): Bump path-to-regexp and @sailshq/router in /server by @dependabot[bot] in #1637
• build(deps): Bump underscore and @sailshq/nedb in /server by @dependabot[bot] in #1638

New Contributors

• @SeDi343 made their first contribution in #1597

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• feat: Add ability to expose Swagger specification (#1577)
• feat: Support running under subpath (#1451)
• feat(helm): Add inline custom terms configuration, fix symlink detection (#1585)
• feat: Add ability to display card ages
• fix(oidc): Add configurable HTTP timeout for OIDC client (#1575)
• docs: Remove accidental dollar sign from Swagger route definitions

New Contributors

• @Br1an67 made their first contribution in #1575
• @roberfi made their first contribution in #1451

Full Changelog: v2.0.3...v2.1.0

planka-2.1.0

A Helm chart to deploy PLANKA and it's dependencies.

v2.0.3

Security Release

• Fixed an issue where the outgoing proxy could be accessed from outside the server in host-network Docker deployments (network_mode: host), potentially allowing external parties to relay requests.
• The proxy now only accepts connections from the local server, preventing accidental exposure while keeping internal functionality intact.
• Users should update to PLANKA >= 2.0.3 to be protected.
• More details and credits: Security Advisory
• Reported by Luke via responsible disclosure.

What's Changed

• fix(proxy): Prevent external access to outgoing proxy in host-network mode

Full Changelog: v2.0.2...v2.0.3

planka-2.0.3

A Helm chart to deploy PLANKA and it's dependencies.

v2.0.2

What's Changed

• fix(backup): Improve backup/restore scripts, allow specifying backup directory (#1541)
• fix(dropzone): Prevent dropzone from overflowing content
• fix(platform): Make app compatible with Windows
• fix(helm): Add writable temp directory mounts when readOnlyRootFilesystem is enabled (#1542)
• fix(gravatar): Update hash algorithm to SHA-256 for improved security (#1550)

New Contributors

• @seals187 made their first contribution in #1541
• @SnoozeFreddo made their first contribution in #1542

Full Changelog: v2.0.1...v2.0.2

planka-2.0.2

A Helm chart to deploy PLANKA and it's dependencies.

v2.0.1

We forgot to mention that the Terms shown on first login for all users are a template and just a legal requirement for the app. We've added a way to customize them for your own needs, along with a guide in the docs.

What's Changed

feat(helm): Add image digest pinning support (#1531)
fix(socket): Handle transport error during reconnection after idle
fix(terms): Display template notice, support custom terms loading

Full Changelog: v2.0.0...v2.0.1

planka-2.0.1

A Helm chart to deploy PLANKA and it's dependencies.

v2.0.0

After months of testing, feedback, and iterations, we're thrilled to announce the final release of PLANKA v2! 🎉

We want to extend a huge thank you to everyone who contributed, reported issues, and helped identify security vulnerabilities. Your support has made this release possible.

Our SaaS version goes live in just a few hours! Enjoy fully secure, cloud-hosted instances with zero setup - start using PLANKA without worrying about infrastructure or maintenance.

We're also excited to introduce our new Pro version with additional features, which you can explore at https://planka.app/pro.

How to Upgrade From v1.26.3

Please follow the official upgrade guide in our documentation.

How to Update From v2.0.0-rc.4

Please follow this post to see all breaking changes and items to verify before updating.

Security Disclosure

We would like to thank @reasoningsec for responsibly reporting a Blind SSRF in outbound request features, which was promptly addressed in this release.

What's Changed

• feat: Add ability to mention users in comments (#1162)
• feat: Allow to add custom annotations for deployment in Helm (#1168)
• feat: Add download button for file attachments
• feat: Strikethrough cards in closed lists
• feat: Make card descriptions expandable
• feat: Add copy-to-clipboard for custom fields
• feat: Include task assignees in member filter logic (#1214)
• feat: Move webhooks configuration from environment variable to UI
• feat: Add INTERNAL_ACCESS_TOKEN to support internal user configuration
• feat: Display card name when linking in task (#1234)
• feat: Persist closed state per card
• feat: Add ability to link tasks to cards
• feat: Open card actions on right-click
• feat: Add ability to create new card at top (#1261)
• feat: Add ability to hide completed tasks (#1210)
• feat: Move infrequent card actions to more actions menu
• feat: Add dedicated button to make project private
• feat: Parse dates as UTC without relying on TZ environment variable
• feat: Track navigation path when switching between cards
• feat: Add OAuth callback support for OIDC (#1290)
• feat: Add legal requirements (#1306)
• feat: Track storage usage
• feat: Add ability to move lists between boards (#1208)
• feat: Restore toggleable due dates (#1332)
• feat: Add ability to use Gravatar as avatar provider (#1319)
• feat: Add board setting to expand task lists by default
• feat: Add ability to configure and test SMTP via UI
• feat: Extra volume mounts in Helm (#1382)
• feat: Add API key authentication (#1254)
• feat: Ghost error page for improved error display
• feat: Add basic shortcuts (#1436)
• feat: Extend card action shortcuts
• feat: Add create-board button to open-board screen (#1438)
• feat: Add object-path support to OIDC attribute mapping
• feat: Allow setting customer panel URL via environment variables
• feat: Add ability to copy/cut cards with shortcut support
• feat: Enhance card actions menu with separators and action bar
• feat: Move About and Terms into separate modal
• feat: Display last updates in About modal
• feat: Improve mime type detection, limit image processing size
• feat: Optimize and parallel image processing
• feat: Add demo mode with restricted user actions
• feat: Add support for sidecar containers in Helm (#1494)
• feat: Add internal runtime configuration
• feat: Add ability to pre-fill login credentials in demo mode
• feat: Add ability to unlink SSO from user
• feat: Add OIDC debug mode
• feat: Re-stream static files from S3, introduce protected static files
• feat: Migrate file storage to unified data directory
• feat: Apply color to entire list instead of card bottoms
• feat: Add configurable proxy for outgoing traffic to prevent SSRF
• feat: Add Greek translation (#1176)
• feat: Add Finnish translation (#1180)
• feat: Add Estonian translation (#1212)
• feat: Add Portuguese translation (#1262)
• feat: Add Catalan (ca-ES) translation (#1424)
• feat: Add Vietnamese translation (#1459)
• fix: Prevent auto-updating translation files when key is missing
• fix: Add mentions support when editing comments
• fix: Canonicalize locale codes
• fix: Prevent text overflow in activities
• fix: Prevent text overflow in card name
• fix: Prevent auto-filling title in YFM note
• fix: Use console as logger for YFM note
• fix: Handle escape actions properly in mentions input
• fix: Align text to center in content error message
• fix: Responsive label color selector, improve action button styles (#1184)
• fix: Fix mentions input styles
• fix: Fix deps in download attachment handler
• fix: Increase max username length for identity provider users
• fix: Add cancel button when editing comment
• fix: Use correct action to clear user creation error
• fix: Display tasks with preserved newlines in card modal
• fix: Fix filtering by task assignees
• fix: Improve PDF viewer cross-browser compatibility
• fix: Move webhooks declaration to correct position
• fix: Handle webhooks correctly during socket reconnection
• fix: Fix toolbar styles in markdown markup editor
• fix: Fix red curtain background gradient
• fix: Enable spellcheck on all textareas
• fix: Add icons to popup menu items
• fix: Set font-size on add task button
• fix: Improve current board context indication
• fix: Fix mentions input styles
• fix: Preserve newlines in markdown with mentions
• fix: Read secret files without requiring trailing newline
• fix: Improve upgrade script, log statuses
• fix: Prevent editors from deleting any comment
• fix: Improve mentions behavior
• fix: Replace user settings icon
• fix: Fix projects order popup styles
• fix: Fix regex-based id validation when fetching user
• fix: Remove meta markdown plugin
• fix: Handle markdown-to-text errors gracefully
• fix: Handle saga watcher errors gracefully
• fix: Correctly parse environment variables, little refactoring
• fix: Reflect task lists expansion instantly after switching setting
• fix: Display users alphabetically in board memberships popup (#1334)
• fix: Prevent accidental modal close when switching windows on Windows
• fix: Support multiple CORS origins via comma-separated BASE_URL
• fix: Change background color for own comments
• fix: Increase browser cache time for attachment files
• fix: Prevent app crash when board is added before its project in the store
• fix: Add missing default for showOnFrontOfCard in custom fields
• fix: Switch to bitnamilegacy Postgres repo in Helm, add ingress labels (#1368)
• fix: Always display "Add comment" button when input has text (#1379)
• fix: Make model-level username regex less strict
• fix: Set detected language on first login, remove auto-detect language option
• fix: Prevent popup header text from wrapping to new line
• fix: Add missing keys to chart values file (#1401)
• fix: Adjust margins in menu-styled popups
• fix: Make date command cross-platform in backup script (#1409)
• fix: Log errors when sending notifications via Apprise
• fix: Properly prevent shortcut events, update dependencies
• fix: Prevent shortcuts from triggering in actions popup
• fix: Increase max username length
• fix: Create isolated i18n instances to prevent locale collision
• fix: Rename getCards inputs for consistency
• fix: Optimize query methods
• fix: Rename GIN indexes
• fix: Improve browser caching for public files
• fix: Improve login page appearance
• fix: Prevent clearing linked tasks when soft deleting
• fix: Prevent attachment gallery content from going out of bounds
• fix: Fix attachment file handling when S3 is enabled
• fix: Align markdown colors
• fix: Align markdown quote border color
• fix: Disable fuzzy links in markdown editor
• fix: Fix variable name in seeder
• fix: Prevent sending notifications to deactivated users
• fix: Prevent deactivated users from receiving socket events when possible
• fix: Correctly track password field modification in SMTP pane
• fix: Enable favorites by default
• fix: Hide unlinking SSO when OIDC is enforced
• fix: Enhance response headers for file attachments
• fix: Fix server error when fetching custom field group
• fix: Forward headers correctly when reading from S3
• fix: Block unsupported local Apprise schemas
• fix: Prevent collisions when generating local ids
• fix: Update Italian translation (#1163, #1195, #1268, #1324)
• fix: Update Spanish translation (#1170, #1189, #1355)
• fix: Update Danish translation (#1173, #1177)
• fix: Update Chinese translation (#1250)
• fix: Update Czech translation (#1185, #1331, #1337)
• fix: Update Bulgarian translation (#1187)
• fix: Update French translation (#1192, #1238, #1242)
• fix: Update Hungarian translation (#1193, #1298, #1318, #1354)
• fix: Update Indonesian translation (#1194)
• fix: Update Japanese translation (#1196)
• fix: Update Korean translation (#1197)
• fix: Update Dutch translation (#1201)
• fix: Update Brazilian Portuguese translation (#1202, #1301)
• fix: Update Romanian translation (#1203)
• fix: Update Slovak translation (#1205)
• fix: Update Serbian (Cyrillic) translation (#1206)
• fix: Update German translation (#1235)
• fix: Update Turkish translation (#1239)
• fix: Update Finnish translation (#1251)
• fix: Update Greek translation (#1255)
• fix: Fix typo in English translations (#1259)
• fix: Update Ukrainian translation (#1299, #1326)
• fix: Update Russian translation
• fix: Complete missing client translations, improve consistency
• fix: Correct copy_inline translations to use noun form
• fix: Complete missing server translations
• fix: Complete missing markdown editor translations
• build: Add tmpfs to compose file (#1165)
• build: Use...