Release 7.0.0 #33678
Closed
Release 7.0.0 #33678
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Co-authored-by: Tasso Evangelista <[email protected]>
Co-authored-by: Guilherme Gazzo <[email protected]>
Co-authored-by: Aleksander Nicacio da Silva <[email protected]>
…t in E2EE rooms (#33375)
…rs to provide E2EKey (#33405)
Co-authored-by: Debdut Chakraborty <[email protected]> Co-authored-by: Debdut Chakraborty <[email protected]>
Co-authored-by: Guilherme Gazzo <[email protected]>
Co-authored-by: Douglas Gubert <[email protected]> Co-authored-by: Tasso Evangelista <[email protected]>
Co-authored-by: Guilherme Gazzo <[email protected]>
Co-authored-by: gabriellsh <[email protected]> Co-authored-by: Guilherme Gazzo <[email protected]>
Co-authored-by: Diego Sampaio <[email protected]> Co-authored-by: Ricardo Garim <[email protected]> Co-authored-by: Guilherme Gazzo <[email protected]>
Co-authored-by: Tasso <[email protected]>
Co-authored-by: Marcos Spessatto Defendi <[email protected]>
🦋 Changeset detectedLatest commit: 95b0f87 The changes in this PR will be included in the next version bump. This PR includes no changesetsWhen changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
|
Looks like this PR is not ready to merge, because of the following issues:
Please fix the issues and try again If you have any trouble, please check the PR guidelines |
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
You can see below a preview of the release change log:
7.0.0
Engine versions
20.17.05.0, 6.0, 7.0undefinedMajor Changes
(#33316) Changes some displays to reflect new rules for private apps and adds a new modal before uploading a private app
(#32212) Fixed broken translation in "Forgot Password" e-mail
(#33503) Adds modal confirmation to enable and disable End-to-end encryption
Adds a reset room key option to the modal that disables End-to-end encryption, this is useful when all the members of a room lose their room E2EE keys
(#33474) Removes deprecated endpoint
pw.getPolicyReset. Moving forward, use thepw.getPolicyendpoint.(#32162) As per MongoDB Lifecycle Schedules (mongodb.com/legal/support-policy/lifecycles) we're removing official support to MongoDB version 4.4 that has reached end of life in February 2024.
We recommend upgrading to at least MongoDB 6.0+, though 5.0 is still a supported version.
Here are official docs on how to upgrade to some of the supported versions:
(#33333) Login services button was not respecting the button color and text color settings. Implemented a fix to respect these settings and change the button colors accordingly.
Added a warning on all settings which allow admins to change OAuth button colors, so that they can be alerted about WCAG (Web Content Accessibility Guidelines) compliance.
(#32162) Added MongoDB 7.0 support
(#33449) Removes deprecated method
livechat:webhookTest. Moving forward use the endpointlivechat/webhook.test.(#33373) This adjustment removes the deprecated method
livechat:searchAgent. Moving forward, uselivechat/users/agent/:_idendpoint.(#33442) Removes deprecated
livechat:getAnalyticsOverviewDatamethod. Moving forward use thelivechat/analytics/overviewendpoint.(#31889) Removed upsert behavior on
users.updateendpoint (joinDefaultChannelsparam or emptyuserIdare not allowed anymore)(#32159) Api login should not suggest which credential is wrong (password/username)
Failed login attemps will always return
Unauthorizedinstead of the internal fail reason(#31117) Adds a new set of permissions to provide a more granular control for the creation and deletion of rooms within teams
create-team-channel: controls the creations of public rooms within teams, it is checked within the team's main room scope and overrides the globalcreate-cpermission check. That is, granting this permission to a role allows users to create channels in teams even if they do not have the permission to create channels globally;create-team-group: controls the creations of private rooms within teams, it is checked within the team's main room scope and overrides the globalcreate-ppermission check. That is, granting this permission to a role allows users to create groups in teams even if they do not have the permission to create groups globally;delete-team-channel: controls the deletion of public rooms within teams, it is checked within the team's main room scope and complements the globaldelete-cpermission check. That is, users must have both permissions (delete-cin the channel scope anddelete-team-channelin its team scope) in order to be able to delete a channel in a team;delete-team-group: controls the deletion of private rooms within teams, it is checked within the team's main room scope and complements the globaldelete-ppermission check. That is, users must have both permissions (delete-pin the group scope anddelete-team-groupin its team scope) in order to be able to delete a group in a team;;Renames
add-team-channelpermission (used for adding existing rooms to teams) tomove-room-to-team, since it is applied to groups and channels.(#33391) Removed deprecated method
livechat:loginByToken. Moving forward, use the endpointlivechat/visitor/:token.(#33473) Removes deprecated method
getPasswordPolicy. Moving forward, use the endpointpw.getPolicy.(#33210) Removes private App installation via URL method following a deprecation warning.
(#33429) Removed deprecated methods
livechat:saveTriggerandlivechat:removeTrigger. Moving forward use the endpointslivechat/triggers (POST)andlivechat/triggers/:_id (DELETE)respectively.(#33465) Removes deprecated method
addOAuthApp. Moving forward, use the endpointoauth-apps.createinstead.(#33472) Removes deprecated
deleteMessagemethod. Moving forward, use thechat.deleteendpoint.(#33447) Removes deprecated method
livechat:saveInfo. Moving forward use the enpointlivechat/room/save.info.(#31438) Upgrades the version of the Meteor framework to 3.0
The main reason behind this is the upgrade of the Node.js version, where version 14 will be removed and version 20 will be used instead.
Internally, significant changes have been made, mostly due to the removal of fibers.
As a result, it was necessary to adapt our code to work with the new version.
No functionality should have been affected by this, but if you are running Rocket.Chat in unconventional ways, please note that you need to upgrade your Node.js version.
(#33426) Removed deprecated method
livechat:getNextAgent. Moving forward, use thelivechat/agent.next/:tokenendpoint.(#33526) Removes deprecated method
livechat:setDepartmentForVisitor. Moving forward, use the endpointlivechat/visitor.(#33241) Adds restrictions to air-gapped environments without a license
(#33042) Removes
view-historypermission due to lack of usage(#33448) Removes the deprecated method
livechat:saveAppearance. Moving forward use the endpointlivechat/appearance.(#33445) Removes deprecated
livechat:getAgentOverviewDatamethod. Moving forward uselivechat/analytics/agent-overviewendpoint.(#33444) Removes deprecated method
livechat:setCustomField. The custom fields can be directly set via thelivechat/visitorendpoint.(#33471) Removes deprecated endpoint
channels.images. Moving forward, userooms.imagesendpoint.(#33650) Changes custom emoji listing endpoint by moving query params from the 'query' attribute to standard query parameters.
(#32856) Adds a new collection to store all the workspace cloud tokens to defer the race condition management to MongoDB instead of having to handle it within the settings cache.
Removes the Cloud_Workspace_Access_Token & Cloud_Workspace_Access_Token_Expires_At settings since they are not going to be used anymore.
(#33423) Removed deprecated methods
livechat:removeAgent,livechat:removeManagerandlivechat:removeDepartment. Moving forward, uselivechat/users/agent/:_id, andlivechat/users/manager/:_idandlivechat/department/:_idrespectively.`(#31438) Node.js 20.x support
(#32154) Removed the ability to import data in the HipChat Enterprise format, as it was discontinued over five years ago.
(#33419) Changes End-to-end encryption default setting to enable mention in encrypted messages
(#33451) Removes deprecated method
livechat:saveIntegration. Moving forward, use the endpointomnichannel/integrations (POST).(#33443) Removed deprecated method
livechat:saveSurveyFeedback. Moving forward use the endpointlivechat/room.survey.Removed the deprecated "Compatible Sandbox" option from integration scripts and the dependencies that this sandbox mode relied on.
(#33453) Removes deprecated
livechat/inquiries.queuedendpoint. Moving forward use thelivechat/inquiries.queuedForUserendpoint.(#31438) Remove linkedin oauth package, now linkedin oauth must to me configured as custom oauth
(#32285) Fixed issue with LDAP sync triggering multiple cron jobs in case an invalid sync interval is provided
(#33328) Allows authorized users to reset the encryption key for end-to-end encrypted rooms. This aims to prevent situations where all users of a room have lost the encryption key, and as such, the access to the room.
(#33539) Removes deprecated method
livechat:registerAgent. Moving forward, use the endpointlivechat/visitor.(#33520) Fixes a behavior of E2EE room creation that allowed any user on the room to define room keys before the room creator, causing race conditions.
(#33329) Randomizes
e2eKeyIdgeneration instead of derive it from encoded key. Previously, we used the stringified & encoded version of the key to extract a keyID, however this generated the same keyID for all rooms. As we didn't use this keyID, and rooms didn't have the capability of having multiple keys, this was harmless.This PR introduces a new way of generating that identifier, making it random and unique, so multiple room keys can be used on the same room as long as the keyID is different.
NOTE: new E2EE rooms created after this PR is merged will not be compatible with older versions of Rocket.Chat. Old rooms created before this update will continue to be compatible.
(#33361) Change the E2EE setting - "Access unencrypted content in encrypted rooms" default value, making the current behavior not allow to send unencrypted messages in end-to-end encrypted channels.
(#33470) Removes deprecated endpoints
licenses.isEnterpriseandlicenses.get. Moving forward use the endpointlicenses.info.(#33371) This adjustment removes deprecated
livechat:getCustomFieldsmethod. Moving forward use thelivechat/custom-fieldsendpoint.(#33605) Updates End-to-end settings translations and removes beta wording
(#33572) Removes the ability of changing room's encryption status from the
keyicon placed on the room's header. Icon's purpose is now only informative, showing when a room uses E2EE. Use the kebab menu to enable/disable E2EE.(#33432) Removed deprecated methods
livechat:requestTranscriptandlivechat:discardTranscript. Moving forward uselivechat/transcript/:ridendpoint's POST and DELETE methods.(#31383) No longer shows archived rooms in
rooms.autocomplete.channelAndPrivateendpoint(#32532) Removed
meteor/checkfromchatendpoints(#33434) Renames the settings group 'Voice Channel' to 'Omnichannel voice channel (VoIP)' to better reflect its responsibility.
(#33427) Removed deprecated method
livechat:pageVisited. Moving forward, use thelivechat/page.visitedendpoint.(#33446) Removed deprecated method
livechat:saveDepartmentAgents. Moving forward, use the endpointlivechat/department/:_id/agents.(#33630) Changes the payload of the startImport endpoint to decrease the amount of data it requires
(#33238) Adds new empty states for the marketplace view
(#33452) Removes deprecated method
livechat:sendOfflineMessage. Moving forward, use the endpointlivechat/offline.message.(#33450) Removes deprecated method
livechat:getAgentData. Moving forward use the endpointlivechat/agent.info/:rid/:token.(#33461) Removes deprecated endpoint
livechat/room.visitor.Minor Changes
(#32194) Adds methods to the Apps-Engine to interact with unread messages to enhance message capabilities on Apps.
(#33377) Send messages with encrypted attachments to mobile notification service
(#33489) Adds
Recentbutton on the new sidebar Search section to replicate the previous behavior of focusing the search bar - show recent chats.(#33562) Introduces a new featured action on the room header for action buttons using the non-default category to enhance user accessibility.
(#33569) Adds a
sourcefield to livechat visitors, which stores the channel (eg API, widget, SMS, email-inbox, app) that's been used by the visitor to send messages.Uses the new
sourcefield to assure each visitor is linked to a single source, so that each connection through a distinct channel creates a new visitor.(#33592) Adds ability to collapse/expand sidebar groups
(#33294) Improves the accessibility of the report user modal by adding an appropriate label, description, and ARIA attributes.
(#33283) Adds a warning to inform users they are about to send unencrypted messages in an E2E Encrypted room if they have the
Unencrypted messages in encrypted roomssetting enabled.(#33066) Introduces new property
categoryfor Rocket.Chat Apps to register UI action buttons. This property is used to group buttons in the UI.(#33386) Fixes the departments filter on the omnichannel current chats page by ensuring that the selected department is fetched and
added if it was not part of the initial department list. This prevents the filter from becoming blank and avoids potential
UX issues.
(#33598) Adds a new setting to allow mapping LDAP attributes to the user's extension
(#33496) Applied category reorder from admin setting also on new sidebar - Enhanced navigation feature preview
(#33433) Added support for interacting with add-ons issued in the license
(#33483) Introduces new visual components into marketplace pages to inform an add-on necessity into the workspace.
Patch Changes
(#32648 by @AllanPazRibeiro) This adjustment removes the deprecated
eraseRoommethod. Moving forward, use theroom.deleteendpoint to delete rooms.(#33381) Fixes a race condition that causes livechat conversations to get stuck in the agent's sidebar panel after being forwarded.
(#33355) This adjustment removes the deprecated
removeWebdavAccountmethod. Moving forward, use thewebdav.removeWebdavAccountendpoint to remove WebDAV accounts.(#33527) Fixes E2EE composer freezing when the room state changes
(#33332) Fixes an issue where a thread message was not scrolled to view when it was opened using its link.
(#33028) Fixes an issue where ignore threads parameter were not being affected by retention policy overriding in old channels
(#33346) Implements integration with FreeSwitch to enable VoIP calls for team collaboration workspaces
(#33364) Fixed Twilio request validation by accepting URLs with query strings
(#33330) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
(#33606) Fixed the regex for domains in the isValidDomain function
(#33375) Fixes title missing in thread list for threads starting with attachment in E2EE rooms
(#33435) Fixes an issue causing server to not notify users via websocket of new E2EE keys suggested by other users to them when running in development environments.
(#33412) Fixes a logical error when updating the
responseByproperty of a room whilewaitingResponseproperty was still defined.(#33631) Fixes E2EE not rendering new navigation feature preview
(#33417) Fixes issue with previously disabled private apps being auto enabled on update
(#33583) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
(#33424) Fixes a problem with custom sounds causing files to not be playable when using filesystem storage.
(#28042) Changes the default base Docker image to Alpine. Previously we were shipping Alpine as an alternative flavor under the tag rocketchat/rocket.chat:{release}.alpine , we have been testing this for a while now so we're migrating to use the official one to Alpine.
We'll still ship a Debian variant under the tag rocketchat/rocket.chat:{release}.debian.
(#33390) Removed deprecated method
livechat:loadHistorymethod. Moving forward use theivechat/messages.history/:ridendpoint(#33358) This adjustment removes the deprecated
Mailer.sendMailandMailer:unsubscribemethods. Moving forward, use themailerandmailer.unsubscribeendpoints.(#33405) Fixes an issue where a user may receive an indefinite amount of "suggested keys" from all the users on a room even when a user already suggested a key for them, duplicating the work on server.
Now, the endpoint that returns users waiting for keys will return only users that don't have neither
E2EKeynorE2ESuggestedKey.(#33652) Fixes message toolbar showing in End-to-end encrypted room when messages are not decrypted
(#33372) This adjustment removes deprecated
livechat:addAgentandlivechat:addManagermethod. Moving forward uselivechat/users/agentandlivechat/users/managerendpoints to add agent and manager respectively.(#33507) Fixed an issue where "Filter by room type" was selectable in the Rooms filter.
(#33378) Fixes async E2EE key exchange in development environments where change streams are no longer used
Updated dependencies [c5b0c98, 2806cb5, 3395c82, d44f614, 34ed9ad, 6b5b91f, 7726d68, 687f1ef, bcacbb1, 9274cf4, 9bcb802, f33c07e, 9cf0797, b167db0, f4365b7, d9fe5bb, b338807, 5f9826b, debd3ff, a5f25e7, 3ea02d3, e3629e0, b19ae4d, 03d1485, 3f9c3f1, 760ae5c, 4aa731d, 53cc111, 81998f3, e3dac4a, 50943a0, 5acb59b, 509143d, 31eb47f, fa501ec]: