Added: “date created” and “last sign-in” to Admin account page, also added “status filter” and bulk “disable / enable / activate / unlock” account options when status is selected.

Modified: multi-factor authentication to automatically select code entry field.

Fixed: copy and pasting numbered lists reverting to default numbering.

Fixed: non-breaking spaces splitting when editing in inline labels.

Fixed: possible error "Signature not supported. Hash algorithm SHA1 not available" when installing PageSeeder on el9 (enterprise linux).

Fixed: rendering in document display mode italic, bold, underline, code or inline PSML elements that only contain whitespace.

Added: the following API services:

DELETE /authenticators/{authenticator}
GET    /authenticators/{authenticator}
PATCH  /authenticators/{authenticator}
POST   /authenticators/{authenticator}/challenge
POST   /authenticators/{authenticator}/verify
POST   /groups/{group}/members/{member}/email
DELETE /groups/{group}/publications/{publicationid}
GET    /members/{member}/authenticators
POST   /members/{member}/authenticators
GET    /members/{member}/groups/{group}/uris/{uri}/workflow
GET    /self/authenticators
POST   /self/authenticators

Modified: the following API services:

• POST /authenticate – added support for action=challenge and parameters authenticator, challenge, code and credential.
• POST /members/{member}/groups/{group}/uris/{uri}/workflow – added support for parameter draft.
• PATCH /members/{member} – added support for parameter disabled.
• GET /members/find – added support for parameter status.

Fixed: out of memory error when comparing large tables in side-by-side mode.

Added: options to import / export markdown files.

Fixed: marking unedited fragments as changed, when switching between documents in edit mode.

Added: support for underscores in numerical global properties ending with K, M or G, to multiply the number by a thousand, million or giga (e.g. 1_000_000, 100K, 2M, 3G). Also fixed error when maxUploadSize property is set to more than 2G.

Fixed: label display in document versions panel.

Added: Reprocess button to the Template configuration page for adding new document metadata properties to document types. The new properties may be specified in the document template, or they may overwrite property values on existing documents in a group.

Added: a copy publication script to sample document type bundles.

Fixed: error saving multiple edits when the document history panel is open.

Added: to the combined view, a new Gasherbrum III diff algorithm to improve change tracking in XML structures such as list items and table rows.

Added: option to download a CSV file of “Document Activity”.

Added: Member details tab to Template configuration page so that project managers can edit custom member fields.

Added: to the <ps:process> ANT task, an options to stop logging  warnings:

<warning imagenotfound="false" xrefambiguous="false" 
         xrefnotfound="false"/> 

<ps:process><warning imagenotfound="false"/>

Fixed: custom help images not accessible to some users.

Fixed: links in help, also added a history tab to the help panel.

Modified: the image upload when editing a publication, so the images folder defaults to the same level as the publication root document.

Fixed: systemctl timeout on PageSeeder el8/9 upgrades. Also add display of upgrade progress to the UI.

Modified: the “duplicate” dialog to uncheck by default, the "Track the duplicate as a variation of the original document" option.

Added: a “delete publication ID” service to help manage a corrupt publication.

Modified: General / Recent logs, to collapse exceptions by default.

Added: MFA (multi-factor authentication) support using:

• a code sent to an email address,
• TOTP authenticator apps,
• backup codes, and
• webauthn (devices, Yubikeys, Passkeys).

There is also beta support for SMS code. To access this, set global property smsProvider to console-test or twilio-verify, and then set smsProviderApiKey, smsProviderApiSecret, smsProviderServiceId and adding sms-otp to mfaSupport global property.

Where a user can't sign-in, an administrator can create an email authenticator for them on the Account profile page.

Added: a security log listing the following events:

• account change,
• authentication,
• CSRF, deletion,
• email change,
• username change,
• password change,
• configuration change,
• other.

Fixed: cursor in a markdown property jumping to the start of the field after autosave.

Added: check box to any document in a publication so the publish can run source="publication". This saves the user from having to return to the publication root to publish.

Also added personal preference "Prioritise publications in navigation (beta)" to display the current publication in the navigation bar, with a drop-down menu for documents that are in multiple publications.

Added: reminder messages for tasks / workflows that are due, or overdue. Sent every Monday, to enable this, set global property reminderNotification=true and select the "Send reminder emails" group property in the desired project / group configuration pages. Use the following global properties and default values to customize behavior:

• reminderMaxEmails=2000
• reminderStatuses=Open,Initiated,In Progress,Complete
• reminderTime=04:00

Added: select option on server indexing page for projects to index, and a find field when there are too many projects / groups to list.

Fixed: display of line-breaks (shift-enter or <br/>) in document view mode, when the "Display white spaces and special characters" option is selected.

Added: “Quick edit” option to the fragment menu for faster editing of a single fragment, and with less scrolling.

Added: support for malware scanning to file upload, or comment attachements. This requires ClamAV integration through the global property:

malwareScanner=[host]:[port]

To enable scanning of email attachments, set  malwareMaxEmailThreads to a non-zero value that is not more than ClamAV MaxThreads.

Added: option to Account profile page to disables sign-in, email notifications and all permissions, while preserving all member data. For disabled accounts, there is an “enable account” option.

Added: new <ps:progress> ANT task to send progress info, log messages and result instructions to PageSeeder. Instead of the <echo> and <echoxml> ANT tasks, use this to simplify the code and open result in a panel, link to a PSML document or reload the current document.

Fixed: display of deleted sections and xref-fragments in combined compare, and allowed deleted="true" on <section> for processed-level PSML when using compare-diffx=combined parameter.

Fixed: indexing and display of workflow steps as discussions in some panels.

Fixed: creation of non-breaking spaces when adding bold or other formatting at the end of a line and when pasting into preformat elements.

Added: option on publish dialogs for administrators to display a icon to "Allow download of the working files" next to "Show console" to create and download a ZIP of the script working folder.

Fixed: disabling of URL indexing using disableIndexing=true in config/group.properties.

Added: support for MySQL v8.4.

Added: field psrootpublicationtype to index, and updated current index version to 91100.

Added: the Argon algorithm as the new default for password hashing.

Fixed: comments / tasks disappearing from a document when comparing it with a different version.

Fixed: possible corruption of PSML structure if old structure XLinks have status 'Documentation-New'.

Removed: redirect port functionality and made the redirectPorts global property obsolete.

Fixed: missing XML declaration from PSML export. This allows better XML tools support (e.g. the XPath collection function).

Fixed: OAuth scope permissions for comments and URLs.

• Table Bulleted List, Table Numbered List and associated paragraph styles,
• Subtitle 2, TOC Heading, Front Matter 1, Front Matter 2 for headings.
• Also added to the default template, Word sections for cover page, front matter and landscape pages.

The version of the template used is now shown in the Status property under File > Info in Word. To use the correct Word section, a custom word-export-config.xml may need to add

<document wordsection="3" />

to the config just under <elements>.

Modified: the database as follows:

• Add the AUTHENTICATOR table for multi-factor authentication.
• Add a unique constraint on the Name field in the HOSTALIAS table to improve integrity.
• Remove from the CONTENT table, the unused Role, Title and Label fields.
• Remove from the URI table, the unused Status field.
• Remove from the XLINK table, the unused ShowDefault and ActuateDefault fields.
• Ensure new PageSeeder servers use the utf8mb4 charset after the deprecation of utf8 in MySQL 8.

du -sh /opt/mysql

Added: to Schematron support for ps:resource?location=x URL to get template resources.

Also added a sample, general bundle Schematron quickfix to check the word-export-config.xml against a publication and remove unused block labels.

Added: sending of email notification to new, and previous, email addresses after changing.

Fixed: quickfix fragment labels not defaulting to transformed *fragment/@labels attribute.

Also, automatically reload XSLT templates when they change.

Fixed: Tomcat error when URL contains invalid characters. After upgrading PageSeeder on an enterprise linux(el) 7 distribution (e.g. CentOS 7) run service pageseeder config. Running this service is not necessary with el 8 or 9 distributions.

Fixed: ignoring white space changes inside <heading>, <para> and <preformat> on upload.

Added: support for the following:

• <source type="publication"> in publish-config.xml and document-config.xml to flag target scripts that are only for publications.
• independent=true parameter / attribute on export services/ANT task which removes the _ from _local and _external folders to make them more portable.
• Better error / warning messages for publish scripts and uploads.

Added: support for csrfMode global property which determines if non-GET requests require an Anti-CSRF-Token header/parameter as follows:

• enforce – means required,
• partial – means required except for legacy API requests,
• disabled – means not required.
• Adding a -log suffix means that all requests without the correct token are logged as warnings (default is partial-log).

Fixed: cookies not setting SameSite=lax. After upgrading PageSeeder on an enterprise linux(el) 7 distribution (e.g. CentOS 7) run service pageseeder config. On el 8 or 9, run:

/opt/pageseeder/bin/setup

Fixed: upload option not displayed for word-export-template.docx if it already exists.

Fixed: template admin pages not indicating that the project is using a different template.

Fixed: group documents sorting folders in left panel differently to folders in main content.

Added: markup from headings and resolvable placeholders inside <xref> elements which use template {heading}.

Fixed: non-publication Word/PDF export having multiple heading 1 by not adjusting heading levels in non-publication content.

ps:process/publication/headingleveladjust="content"

Added: automatic saving of draft workflows, so users don't lose their text.

Added: options to filter access logs by permission (Administrator, Project manager, Group manager, Member, Public), and method (Read, Write).

Added: option to organize access logs by group.