NodeBB March Update Digest: New Features, Security Fixes, and More

Julian Lam 3/29/2023, 11:07:59 AM

Welcome to the March update digest for NodeBB! This month, the NodeBB team has been hard at work on a number of exciting updates and announcements, including the release candidate for NodeBB v3.0.0, improvements to the post queue tooling, and a call for volunteers to help with a metrics collection project. Additionally, NodeBB has announced plans to stop using Docker Hub in the near future, in response to changes in Docker Hub's terms of service. NodeBB users who currently rely on Docker Hub for deployment should plan to transition to an alternative hosting provider. The NodeBB team is currently exploring options for hosting its own Docker images and will share more information as it becomes available. Finally, there are security updates included in the v2.x release line, which includes fixes for several vulnerabilities. Read on for more information and links to each of these updates!

Did you know...

This article was drafted by ChatGPT? I was later revised by a human in order to correct some minor factual inaccuracies, but the majority is as-written.

Call for Volunteers: Metrics Collection Project for Harmony and NodeBB v3.0.0

NodeBB has put out a call for volunteers to help with a metrics collection project for the upcoming Harmony and NodeBB v3.0.0 release. The project aims to improve performance and user experience by collecting data on user interactions and behavior. If you're interested in contributing, you can find more information at the link above.

NodeBB v3.0.0 RC 1: The Release Candidate

The first release candidate for NodeBB v3.0.0 has been released. This version includes a number of new features, improvements, and bug fixes. Please bear with us as we continue to polish the codebase in preparation for v3.0.0! You can find more information and download the release candidate at the link above.

Improved Post Queue Tooling

NodeBB has announced improvements to its post queue tooling. The new tooling allows moderators to more easily manage posts that require approval before they're published. This includes one-click account management options, as well as improved visual feedback. Further changes are planned. You can read more about the changes at the link above.

Dropping Support for NodeJS 14 in NodeBB 3.x

NodeBB has announced that it will be dropping support for NodeJS 14 in the upcoming 3.x release. The decision was made in order to focus development efforts on the latest and most stable version of NodeJS. If you're currently using NodeJS 14, you'll need to upgrade before upgrading to NodeBB 3.x. You can find more information at the link above.

NodeBB Container Images

NodeBB has announced plans to stop using Docker Hub in the near future. This decision was made in response to changes in Docker Hub's terms of service. NodeBB users who currently rely on Docker Hub for deployment should plan to transition to an alternative hosting provider. The NodeBB team is currently exploring options for hosting its own Docker images and will share more information as it becomes available. You can find more information at the link above.

Updates to the API Surface and a Re-commitment to SemVer

NodeBB has announced updates to its API surface and a re-commitment to Semantic Versioning (SemVer) in future releases. This includes changes to the plugin and theme APIs, as well as improvements to documentation and testing. You can read more about the changes at the link above.

NodeBB 2.8.7 Security Update

Finally, NodeBB has released a security update in v2.8.7 and v2.8.10. These releases include fixes for security vulnerabilities discovered via our bug bounty program, so if you're running version 2.8.7 or earlier, you should upgrade as soon as possible. You can find more information and download the update at the link above.