-
v1.7.30-rc.18e111e2b · v1.7.30-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.29...v1.7.30-rc.1) * Upgrade to React SDK 3.23.0-rc.1 and JS SDK 11.2.0-rc.1 * Translations update from Weblate [\#17526](https://github.com/vector-im/element-web/pull/17526) * Add Modernizr test for Promise.allSettled given js-sdk and react-sdk depend on it [\#17464](https://github.com/vector-im/element-web/pull/17464) * Bump libolm dependency, and update package name. [\#17433](https://github.com/vector-im/element-web/pull/17433) * Remove logo spinner [\#17423](https://github.com/vector-im/element-web/pull/17423)
-
v1.7.29
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.29-rc.1...v1.7.29) Element Web 1.7.29 fixes (by upgrading to olm 3.2.3) an issue in code used for decrypting server-side stored secrets. The issue could potentially allow a malicious homeserver to cause a stack buffer overflow in the affected function and to control that function's local variables. * Upgrade to React SDK 3.22.0 and JS SDK 11.1.0 * [Release] Bump libolm dependency, and update package name [\#17456](https://github.com/vector-im/element-web/pull/17456)
-
v1.7.29-rc.1618665f6 · v1.7.29-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.28...v1.7.29-rc.1) * Upgrade to React SDK 3.22.0-rc.1 and JS SDK 11.1.0-rc.1 * Translations update from Weblate [\#17384](https://github.com/vector-im/element-web/pull/17384) * Prevent minification of `.html` files [\#17349](https://github.com/vector-im/element-web/pull/17349) * Update matrix-widget-api/react-sdk dependency reference [\#17346](https://github.com/vector-im/element-web/pull/17346) * Add `yarn start:https` [\#16989](https://github.com/vector-im/element-web/pull/16989) * Translations update from Weblate [\#17239](https://github.com/vector-im/element-web/pull/17239) * Remove "in development" flag from voice messages labs documentation [\#17204](https://github.com/vector-im/element-web/pull/17204) * Add required webpack+jest config to load Safari support modules [\#17193](https://github.com/vector-im/element-web/pull/17193)
-
v1.7.28
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.28-rc.1...v1.7.28) Element Web 1.7.28 fixes (by upgrading to matrix-react-sdk 3.21.0) a low severity issue (GHSA-8796-gc9j-63rv) related to file upload. When uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file, but only after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely or by other users. Thanks to [Muhammad Zaid Ghifari](https://github.com/MR-ZHEEV) for responsibly disclosing this via Matrix's Security Disclosure Policy. * Upgrade to React SDK 3.21.0 and JS SDK 11.0.0
-
v1.7.28-rc.15eaaf34f · v1.7.28-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.27...v1.7.28-rc.1) * Upgrade to React SDK 3.21.0-rc.1 and JS SDK 11.0.0-rc.1 * Switch back to release version of `sanitize-html` [\#17231](https://github.com/vector-im/element-web/pull/17231) * Bump url-parse from 1.4.7 to 1.5.1 [\#17199](https://github.com/vector-im/element-web/pull/17199) * Bump lodash from 4.17.20 to 4.17.21 [\#17205](https://github.com/vector-im/element-web/pull/17205) * Bump hosted-git-info from 2.8.8 to 2.8.9 [\#17219](https://github.com/vector-im/element-web/pull/17219) * Disable host checking on the webpack dev server [\#17194](https://github.com/vector-im/element-web/pull/17194) * Bump ua-parser-js from 0.7.23 to 0.7.24 [\#17190](https://github.com/vector-im/element-web/pull/17190)
-
v1.7.27
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.27-rc.1...v1.7.27) * Upgrade to React SDK 3.20.0 and JS SDK 10.1.0
-
v1.7.27-rc.1ee620be1 · v1.7.27-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.26...v1.7.27-rc.1) * Upgrade to React SDK 3.20.0-rc.1 and JS SDK 10.1.0-rc.1 * Translations update from Weblate [\#17160](https://github.com/vector-im/element-web/pull/17160) * Document option for obeying asserted identity [\#17008](https://github.com/vector-im/element-web/pull/17008) * Implement IPC call to Electron to set language [\#17052](https://github.com/vector-im/element-web/pull/17052) * Convert Vector skin react components to Typescript [\#17061](https://github.com/vector-im/element-web/pull/17061) * Add code quality review policy [\#16980](https://github.com/vector-im/element-web/pull/16980) * Register RecorderWorklet from react-sdk [\#17013](https://github.com/vector-im/element-web/pull/17013) * Preload Inter font to avoid FOIT on slow connections [\#17039](https://github.com/vector-im/element-web/pull/17039) * Disable `postcss-calc`'s noisy `warnWhenCannotResolve` option [\#17041](https://github.com/vector-im/element-web/pull/17041)
-
v1.7.26
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.26-rc.1...v1.7.26) * Upgrade to React SDK 3.19.0 and JS SDK 10.0.0
-
v1.7.26-rc.11a7cfc67 · v1.7.26-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.25...v1.7.26-rc.1) * Upgrade to React SDK 3.19.0-rc.1 and JS SDK 10.0.0-rc.1 * Translations update from Weblate [\#17031](https://github.com/vector-im/element-web/pull/17031) * Bump ssri from 6.0.1 to 6.0.2 [\#17010](https://github.com/vector-im/element-web/pull/17010) * Fix `NODE_ENV` value for CI environments [\#17003](https://github.com/vector-im/element-web/pull/17003) * Use React production mode in CI builds [\#16969](https://github.com/vector-im/element-web/pull/16969) * Labs documentation for DND mode [\#16962](https://github.com/vector-im/element-web/pull/16962) * Rename blackboxing to new option ignore list [\#16965](https://github.com/vector-im/element-web/pull/16965) * Remove velocity-animate from lockfile [\#16963](https://github.com/vector-im/element-web/pull/16963) * Add mobile download link configuration [\#16890](https://github.com/vector-im/element-web/pull/16890) * Switch develop to not-staging Scalar by default [\#16883](https://github.com/vector-im/element-web/pull/16883) * Support a config option to skip login/welcome and go to SSO [\#16880](https://github.com/vector-im/element-web/pull/16880)
-
v1.7.25
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.25-rc.1...v1.7.25) * Upgrade to React SDK 3.18.0 and JS SDK 9.11.0
-
v1.7.25-rc.111ce4fa4 · v1.7.25-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.24...v1.7.25-rc.1) * Upgrade to React SDK 3.18.0-rc.1 and JS SDK 9.11.0-rc.1 * Translations update from Weblate [\#16882](https://github.com/vector-im/element-web/pull/16882) * Revert "Docker image: serve pre-compressed assets using gzip_static" [\#16838](https://github.com/vector-im/element-web/pull/16838) * Move native node modules documentation to element-desktop [\#16814](https://github.com/vector-im/element-web/pull/16814) * Add user settings for warn before exit [\#16781](https://github.com/vector-im/element-web/pull/16781) * Change ISSUE_TEMPLATE bold lines to proper headers [\#16768](https://github.com/vector-im/element-web/pull/16768) * Add example for deployment into Kubernetes [\#16447](https://github.com/vector-im/element-web/pull/16447) * Create bare-bones `PULL_REQUEST_TEMPLATE.md` [\#16770](https://github.com/vector-im/element-web/pull/16770) * Add webpack config and labs flag docs for voice messages [\#16705](https://github.com/vector-im/element-web/pull/16705)
-
v1.7.24
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.24-rc.1...v1.7.24) * Upgrade to React SDK 3.17.0 and JS SDK 9.10.0
-
v1.7.24-rc.1a05c68e8 · v1.7.24-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.23...v1.7.24-rc.1) * Upgrade to React SDK 3.17.0-rc.2 and JS SDK 9.10.0-rc.1 * Translations update from Weblate [\#16766](https://github.com/vector-im/element-web/pull/16766) * Docker image: serve pre-compressed assets using gzip_static [\#16698](https://github.com/vector-im/element-web/pull/16698) * Fix style lint issues [\#16732](https://github.com/vector-im/element-web/pull/16732) * Updated expected webpack output in setup guide [\#16740](https://github.com/vector-im/element-web/pull/16740) * Docs for `loginForWelcome` [\#16468](https://github.com/vector-im/element-web/pull/16468) * Disable rageshake persistence if no logs would be submitted [\#16697](https://github.com/vector-im/element-web/pull/16697)
-
v1.7.23
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.23-rc.1...v1.7.23) * Upgrade to React SDK 3.16.0 and JS SDK 9.9.0
-
v1.7.23-rc.19789f411 · v1.7.23-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.22...v1.7.23-rc.1) * Upgrade to React SDK 3.16.0-rc.2 and JS SDK 9.9.0-rc.1 * Translations update from Weblate [\#16655](https://github.com/vector-im/element-web/pull/16655) * Improve docs for customisations [\#16652](https://github.com/vector-im/element-web/pull/16652) * Update triage guide to match the new label scheme [\#16612](https://github.com/vector-im/element-web/pull/16612) * Remove a couple useless 'use strict' calls [\#16650](https://github.com/vector-im/element-web/pull/16650) * Remove old conferencing doc [\#16648](https://github.com/vector-im/element-web/pull/16648) * Bump elliptic from 6.5.3 to 6.5.4 [\#16644](https://github.com/vector-im/element-web/pull/16644) * Add option for audio live streaming [\#16604](https://github.com/vector-im/element-web/pull/16604) * Update velocity-animate dependency [\#16605](https://github.com/vector-im/element-web/pull/16605) * Add Edge to the supported tier [\#16611](https://github.com/vector-im/element-web/pull/16611) * Add multi language spell check [\#15851](https://github.com/vector-im/element-web/pull/15851) * Document feature_spaces [\#16538](https://github.com/vector-im/element-web/pull/16538)
-
v1.7.22
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.22-rc.1...v1.7.22) Element Web 1.7.22 fixes (by upgrading to matrix-react-sdk 3.15.0) a low severity issue (CVE-2021-21320) where the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a `blob` origin that cannot access Matrix user data, so messages and secrets are not at risk. Thanks to @keerok for responsibly disclosing this via Matrix's Security Disclosure Policy. * Upgrade to React SDK 3.15.0 and JS SDK 9.8.0
-
v1.7.22-rc.14f13b707 · v1.7.22-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.21...v1.7.22-rc.1) * Upgrade to React SDK 3.15.0-rc.1 and JS SDK 9.8.0-rc.1 * Translations update from Weblate [\#16529](https://github.com/vector-im/element-web/pull/16529) * Add hostSignup config for element.io clients [\#16515](https://github.com/vector-im/element-web/pull/16515) * VoIP virtual rooms, mkII [\#16442](https://github.com/vector-im/element-web/pull/16442) * Jitsi widget: Read room name from query parameters [\#16456](https://github.com/vector-im/element-web/pull/16456) * fix / sso: make sure to delete only loginToken after redirect [\#16415](https://github.com/vector-im/element-web/pull/16415) * Disable Countly [\#16433](https://github.com/vector-im/element-web/pull/16433)
-
v1.7.21
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.21-rc.1...v1.7.21) * Upgrade to React SDK 3.14.0 and JS SDK 9.7.0
-
v1.7.21-rc.1c4c1b728 · v1.7.21-rc.1 ·
[Full Changelog](https://github.com/vector-im/element-web/compare/v1.7.20...v1.7.21-rc.1) * Upgrade to React SDK 3.14.0-rc.1 and JS SDK 9.7.0-rc.1 * Translations update from Weblate [\#16427](https://github.com/vector-im/element-web/pull/16427) * Add RegExp dotAll feature test [\#16408](https://github.com/vector-im/element-web/pull/16408) * Fix Electron type merging [\#16405](https://github.com/vector-im/element-web/pull/16405) * README: remove Jenkins reference [\#16381](https://github.com/vector-im/element-web/pull/16381) * Enable PostCSS Calc in webpack builds [\#16307](https://github.com/vector-im/element-web/pull/16307) * Add configuration security best practices to the README. [\#16367](https://github.com/vector-im/element-web/pull/16367) * Upgrade matrix-widget-api [\#16347](https://github.com/vector-im/element-web/pull/16347)