Changelog History
Page 1
-
v2.5.8 Changes
June 06, 2026- β‘οΈ Updates dependencies
-
v2.5.7 Changes
May 25, 2026π Security fixes:
- The bulk-submitting of links now properly disallows
javascript:in URLs
- The bulk-submitting of links now properly disallows
β‘οΈ Dependencies were updated
-
v2.5.6 Changes
May 10, 2026What's Changed
π Security fixes:
- Users are now prohibited from editing other users entities.
- User names are now properly escaped in activity logs.
- Line breaks are now disallowed in database configurations during the setup process.
π LinkAce now provides a
TRUSTED_HOSTS.env configuration variable that can be used to change which hostnames are allowed for accessing your instance.π§ There is now a debug command (
php artisan debug) which shows essential configuration parameters.β‘οΈ Dependencies were updated.
Full Changelog : v2.5.5...v2.5.6
-
v2.5.5 Changes
April 12, 2026- π Links are now re-checked after 2 weeks if they are broken. The number of weeks can be configured using the
BROKEN_LINK_RECHECK_INTERVAL_WEEKS.env setting. (#1093) - The broken status of links is now rest if the URL is changed. (#1092)
- Migration from Laravel Mix to Vite for CSS and JS.
- β‘οΈ Update of dependencies
- π Links are now re-checked after 2 weeks if they are broken. The number of weeks can be configured using the
-
v2.5.4 Changes
April 03, 2026Important Changes
Caution
π LinkAce now requires you to add
APP_URL=https://my-linkace-domain.comto your .env file or alternatively to your docker compose file.
Replacehttps://my-linkace-domain.comwith the actual URL of your LinkAce instance.π This is needed to mitigate a possible security issue if you don't have trusted proxies configured, which is the default for LinkAce. Not adding this setting will break some features such as password reset emails.
Other changes
- Private IPs and hostnames are now checked during the link checks.
- β‘οΈ Updated dependencies
-
v2.5.3 Changes
March 24, 2026- Private notes are no longer visible to internal users.
- Requests to private IP ranges are blocked on IP and hostname level.
- β‘οΈ Dependencies were updated.
-
v2.5.2 Changes
March 08, 2026- π Change of default behavior : due to possible security concerns, meta generation is now disabled by default for internal IP ranges (e.g. 192.168.x.x). You can enable this again by adding
META_ALLOW_PRIVATE_IP_RANGES=trueto your .env file. - Private tags or lists from other users can no longer be added to your links by using internal IDs.
- β‘οΈ Several updates for dependencies, including security fixes.
β Warning
π¦ Note on PHP installation package: I am unable to upload the zip file right now. Getting an "Something went really wrong, and we canβt process that file" error. Will try again later.
- π Change of default behavior : due to possible security concerns, meta generation is now disabled by default for internal IP ranges (e.g. 192.168.x.x). You can enable this again by adding
-
v2.5.1 Changes
February 12, 2026π Fixes an issue where the web setup for SQLite could not be completed. #1066
-
v2.5.0 Changes
February 08, 2026Support for PHP 8.1 was dropped. LinkAce only supports PHP 8.2 to 8.5.
-
v2.4.3 Changes
February 08, 2026- π Security patch: RSS feeds now contain proper escaping of HTML and XML
- β‘οΈ Minor dependency updates, including security patches.