⚠️ POTENTIALLY BREAKING CHANGE: The sanitize_preview option for the Markdown widget is now set to true by default in Sveltia CMS. This follows a report of an XSS vulnerability in Decap CMS.

XSS attacks could also have been possible in Sveltia CMS because, for compatibility with Netlify/Decap CMS, the option defaulted to false in previous versions. This behaviour is documented. However, the risk should be lower than in Decap CMS as Sveltia CMS does not yet support open authoring. Other widgets in Sveltia CMS are safe as our entry preview implementation is completely different from that of Decap CMS.

Full Changelog: v0.104.3...v0.105.0

Follow us on Bluesky!

• Updated the OpenAI translation model from GPT-3.5 Turbo to GPT-4o mini.

Full Changelog: v0.104.2...v0.104.3

Follow us on Bluesky!

• Bug fixes and improvements.

Full Changelog: v0.104.1...v0.104.2

Follow us on Bluesky!

• Bug fixes and improvements.

Full Changelog: v0.104.0...v0.104.1

Follow us on Bluesky!

• ⚠️ POTENTIALLY BREAKING CHANGE: Sveltia CMS has replaced Moment.js with Day.js for date handling, following Decap CMS. Since Day.js tokens are not 100% compatible with Moment.js tokens, this could be a breaking change in certain cases. Check your format, date_format and time_format options for DateTime fields, as well as any date formatting in summary string transformations. If you have migrated from Decap CMS 3.1.1 or later, you may already be using Day.js tokens.
• The personal access token (PAT) sign-in dialog now displays a link to create a new token with the necessary permissions. This follows a recent improvement by GitHub.

Full Changelog: v0.103.0...v0.104.0

Follow us on Bluesky!

• It’s now possible to allow users to explicitly edit the entry slug in an initial entry draft by adding {{fields._slug}} to the slug collection option. This will display a special slug editor UI that looks like a standard string field, but the value will be used as the entry slug. To make the slug localizable, use {{fields._slug | localize}}. This solves #499 and effectively solves decaporg/decap-cms#377.
• Added Anthropic’s Claude Haiku 3.5 model as a new translator option. This solves #438 (reply in thread).
• Bug fixes and improvements.

Full Changelog: v0.102.0...v0.103.0

Follow us on Bluesky!

• Deprecated options are now clearly marked as such in both the JSON schema and the TypeScript type definitions. If you use these options in a supported code editor, you should receive a warning.
• Bug fixes and improvements.

Full Changelog: v0.101.0...v0.102.0

Follow us on Bluesky!

• The personal access token (PAT) sign-in option is more discoverable and easier to use.
• ⚠️ DEPRECATIONS: The following options are now deprecated and will be removed in Sveltia CMS v1.0:
  • The automatic_deployments backend option
    • Use the new skip_ci option instead, which is more intuitive.
    • automatic_deployments: false is equivalent to skip_ci: true
    • automatic_deployments: true is equivalent to skip_ci: false
  • The save_all_locales i18n option
    • Use the initial_locales option instead, which provides more flexibility.
    • save_all_locales: false is equivalent to initial_locales: all
  • The read_only UUID widget option
    • Use the readonly common field option instead, which defaults to true for the UUID widget.

Full Changelog: v0.100.2...v0.101.0

Follow us on Bluesky!

• Bug fixes and improvements.

Full Changelog: v0.100.1...v0.100.2

Follow us on Bluesky!

• Bug fixes and improvements.

Full Changelog: v0.100.0...v0.100.1

Follow us on Bluesky!