This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [outlinewiki/outline](https://github.com/outline/outline) | minor | `1.8.1` → `1.9.0` |
---
### Release Notes
<details>
<summary>outline/outline (outlinewiki/outline)</summary>
### [`v1.9.0`](https://github.com/outline/outline/releases/tag/v1.9.0)
[Compare Source](https://github.com/outline/outline/compare/v1.8.1...v1.9.0)
#### What's Changed
##### Highlights
- Login with Passkey is now supported on desktop in [#​12749](https://github.com/outline/outline/pull/12749)
- Markdown input such as `---` now work after a soft-break in [#​12925](https://github.com/outline/outline/pull/12925)
##### MCP
- Now supports reading and using templates in [#​12639](https://github.com/outline/outline/pull/12639)
- Added document restore tool in [#​12575](https://github.com/outline/outline/pull/12575)
- `document_update`,`collection_update` tools now return error when no changes occur in [#​12890](https://github.com/outline/outline/pull/12890)
- Add HTML input support to \`create\_document tool by [@​Ali-ovo](https://github.com/Ali-ovo) in [#​12943](https://github.com/outline/outline/pull/12943)
- Newly created collections via MCP now default to private in [#​12644](https://github.com/outline/outline/pull/12644)
- Make `client_name` optional on /oauth/register by [@​cassvail](https://github.com/cassvail) in [#​12836](https://github.com/outline/outline/pull/12836)
- Add `WWW-Authenticate` header to /mcp 401 responses by [@​cassvail](https://github.com/cassvail) in [#​12834](https://github.com/outline/outline/pull/12834)
##### Other improvements
- Table menus in editor were improved and now include alignment options for rows in [#​12611](https://github.com/outline/outline/pull/12611)
- Added support for Slack-style `+:100:` reaction shorthand in [#​12650](https://github.com/outline/outline/pull/12650)
- Added `PROXY_HEADERS_TRUSTED` env option (defaults to true) in [#​12676](https://github.com/outline/outline/pull/12676)
- CloudFront support for signed attachment URLs by [@​oliinykdm](https://github.com/oliinykdm) in [#​12656](https://github.com/outline/outline/pull/12656)
- Table sorting is now IP-address aware in [#​12734](https://github.com/outline/outline/pull/12734)
- Small images can now be displayed inline for iconography in [#​12776](https://github.com/outline/outline/pull/12776)
- Added support for presigned PUT uploads for S3-compatible storage by [@​nmnmcc](https://github.com/nmnmcc) in [#​12748](https://github.com/outline/outline/pull/12748)
- Image corner drag resizing is now enabled by [@​UmbraCi](https://github.com/UmbraCi) in [#​12690](https://github.com/outline/outline/pull/12690)
- Added spec-compliant OIDC logout in [#​12804](https://github.com/outline/outline/pull/12804)
- Add support for OIDC provider returning JWT from userinfo endpoint in [#​12879](https://github.com/outline/outline/pull/12879)
##### Fixes
- PDF display now correctly scales on mobile in [#​12608](https://github.com/outline/outline/pull/12608)
- place cursor at start of inserted table row/column in [#​12610](https://github.com/outline/outline/pull/12610)
- Improve patch merging of links in table cells through MCP in [#​12614](https://github.com/outline/outline/pull/12614)
- Code blocks auto-collapse while editing in [#​12616](https://github.com/outline/outline/pull/12616)
- Spurious post-import edits in [#​12620](https://github.com/outline/outline/pull/12620)
- Before/After creation options appear in menu when no permission on parent doc in [#​12629](https://github.com/outline/outline/pull/12629)
- Updated `validateUrlNotPrivate` to match implementation in SSRF in [#​12636](https://github.com/outline/outline/pull/12636)
- Widen validated emails for Azure in [#​12637](https://github.com/outline/outline/pull/12637)
- Pasted content sometimes appears in plaintext in [#​12638](https://github.com/outline/outline/pull/12638)
- Dragging images in editor in [#​12647](https://github.com/outline/outline/pull/12647)
- perf: Improve performance of in-page search in [#​12649](https://github.com/outline/outline/pull/12649)
- Prevent selecting word-joiner characters around multiplayer cursor in [#​12660](https://github.com/outline/outline/pull/12660)
- Reject collections.update requests that include both `description` and `data` in payload in [#​12648](https://github.com/outline/outline/pull/12648)
- Improve markdown serialization speed in [#​12667](https://github.com/outline/outline/pull/12667)
- Editor math block parsing and NaN media dimensions in [#​12668](https://github.com/outline/outline/pull/12668)
- Toggling a nested list no longer converts parent lists in [#​12670](https://github.com/outline/outline/pull/12670)
- Duplicate paths in export ZIP in [#​12674](https://github.com/outline/outline/pull/12674)
- Date mentions in [#​12621](https://github.com/outline/outline/pull/12621)
- Comment thread animations in [#​12677](https://github.com/outline/outline/pull/12677)
- Nested list behavior in [#​12678](https://github.com/outline/outline/pull/12678)
- Various checkbox fixes in [#​12679](https://github.com/outline/outline/pull/12679)
- perf: Server startup time in [#​12680](https://github.com/outline/outline/pull/12680)
- Tracking of block toolbars in [#​12681](https://github.com/outline/outline/pull/12681)
- Reset `focusedCommentId` on document nav in [#​12687](https://github.com/outline/outline/pull/12687)
- Setting attributes from col/row span in [#​12686](https://github.com/outline/outline/pull/12686)
- Encode code & math fences in table cells with <br> to avoid breaking rows in [#​12569](https://github.com/outline/outline/pull/12569)
- Image drop into editor in [#​12691](https://github.com/outline/outline/pull/12691)
- only users with "manage" permissions can edit page permissions by [@​orikad](https://github.com/orikad) in [#​12597](https://github.com/outline/outline/pull/12597)
- Enable PDF toggle for pre -`contentType` files in [#​12709](https://github.com/outline/outline/pull/12709)
- Import avatar image from Azure/Entra/Microsoft in [#​12710](https://github.com/outline/outline/pull/12710)
- Allow template management to be extended to viewers in [#​12719](https://github.com/outline/outline/pull/12719)
- Pinterest host matching too broad in [#​12718](https://github.com/outline/outline/pull/12718)
- Allow webhook urls without a top-level domain when self-hosted in [#​12728](https://github.com/outline/outline/pull/12728)
- Documents shared directly with user not accessible through MCP list tool in [#​12717](https://github.com/outline/outline/pull/12717)
- Importer fails after stripping emoji within mark on first line in [#​12730](https://github.com/outline/outline/pull/12730)
- Inline code marks longer than the width of editor escape bounds in [#​12735](https://github.com/outline/outline/pull/12735)
- Newlines in block fences in table cells in [#​12740](https://github.com/outline/outline/pull/12740)
- `Cmd+A` in image/video captions now works correctly in [#​12751](https://github.com/outline/outline/pull/12751)
- Suggestion menus are now correctly announced to screenreaders in [#​12750](https://github.com/outline/outline/pull/12750)
- Prevent concurrent OAuth refresh attempts from revoking grant in [#​12752](https://github.com/outline/outline/pull/12752)
- Smoothed out image lightbox transition in [#​12756](https://github.com/outline/outline/pull/12756)
- Incorrect sidebar hover state with menu open in [#​12758](https://github.com/outline/outline/pull/12758)
- Collapse code blocks taller than half the viewport in [#​12743](https://github.com/outline/outline/pull/12743)
- Vertically center empty state in notifications popover in [#​12764](https://github.com/outline/outline/pull/12764)
- Viewer can disclose existing shared document in [#​12769](https://github.com/outline/outline/pull/12769)
- Remove settings from integration presenter in [#​12770](https://github.com/outline/outline/pull/12770)
- Remove quote flattening on markdown serialization in [#​12774](https://github.com/outline/outline/pull/12774)
- Notion import crash on empty table ("Index 0 out of range") in [#​12775](https://github.com/outline/outline/pull/12775)
- Ensure mention in doc emails always include context in [#​12787](https://github.com/outline/outline/pull/12787)
- Flicker of sticky table header in [#​12803](https://github.com/outline/outline/pull/12803)
- Retain location state when clicking on hash links in doc and TOC in [#​12805](https://github.com/outline/outline/pull/12805)
- Guard missing key in manifest in [#​12806](https://github.com/outline/outline/pull/12806)
- "User verification was required" during passkey signin in [#​12817](https://github.com/outline/outline/pull/12817)
- `CleanupDemotedUserTask` throws on deleted user in [#​12818](https://github.com/outline/outline/pull/12818)
- Guard against orphaned jobs in queue in [#​12819](https://github.com/outline/outline/pull/12819)
- Refactor find logic for non-ascii characters in [#​12813](https://github.com/outline/outline/pull/12813)
- Avoid pointless `+1` on Facepile (show avatar instead) in [#​12823](https://github.com/outline/outline/pull/12823)
- Settings appear behind sidebar in [#​12824](https://github.com/outline/outline/pull/12824)
- Handle deleted user or team in UserCreatedProcessor in [#​12839](https://github.com/outline/outline/pull/12839)
- Avoid SequelizeEmptyResultError in AvatarProcessor in [#​12838](https://github.com/outline/outline/pull/12838)
- Avoid SequelizeEmptyResultError when team is missing in CollectionsProcessor in [#​12837](https://github.com/outline/outline/pull/12837)
- Remove separate editing guard on Rename action in [#​12846](https://github.com/outline/outline/pull/12846)
- `revisions.list` response too large in [#​12822](https://github.com/outline/outline/pull/12822)
- Cannot connect existing workspace when signed into multiple in [#​12870](https://github.com/outline/outline/pull/12870)
- mermaid `Ctrl+Enter` edit shortcut not working on Windows in [#​12867](https://github.com/outline/outline/pull/12867)
- Ensure accessible name to search and text inputs in [#​12869](https://github.com/outline/outline/pull/12869)
- Incorrect typing of passport request handlers in [#​12883](https://github.com/outline/outline/pull/12883)
- `useMediaQuery` value incorrect on first render in [#​12914](https://github.com/outline/outline/pull/12914)
- Handle transient errors in `HealthMonitor` in [#​12913](https://github.com/outline/outline/pull/12913)
- `useIdle` never triggered without user activity in [#​12908](https://github.com/outline/outline/pull/12908)
- all `_FILE` suffix secrets in env are cemented at startup in [#​12889](https://github.com/outline/outline/pull/12889)
- Show more useful breadcrumbs on search results in [#​12915](https://github.com/outline/outline/pull/12915)
- Various unlabeled and undescribed interactive elements in [#​12912](https://github.com/outline/outline/pull/12912)
- Sensitive fields can leak into logging when non-primitive in [#​12910](https://github.com/outline/outline/pull/12910)
- Decode percent-encoded filenames from URLs in [#​12906](https://github.com/outline/outline/pull/12906)
- Stale CSRF token sent on request retries and form submissions in [#​12888](https://github.com/outline/outline/pull/12888)
- passThrough prop not correctly applied in [#​12930](https://github.com/outline/outline/pull/12930)
- Skip attachment work in exports when includeAttachments is false in [#​12933](https://github.com/outline/outline/pull/12933)
- Math formulas not rendering correctly in HTML/PDF output in [#​12939](https://github.com/outline/outline/pull/12939)
- Comments sidebar opens on document load when draft comment exists in [#​12897](https://github.com/outline/outline/pull/12897)
- `validateUrlNotPrivate` hardening in [#​12938](https://github.com/outline/outline/pull/12938)
- perf: Do not load webhook content during failure check in [#​12944](https://github.com/outline/outline/pull/12944)
- correctly paste doc links with hash by [@​salihudickson](https://github.com/salihudickson) in [#​12900](https://github.com/outline/outline/pull/12900)
#### New Contributors
- [@​eliottreich](https://github.com/eliottreich) made their first contribution in [#​12662](https://github.com/outline/outline/pull/12662)
- [@​oliinykdm](https://github.com/oliinykdm) made their first contribution in [#​12656](https://github.com/outline/outline/pull/12656)
- [@​orikad](https://github.com/orikad) made their first contribution in [#​12597](https://github.com/outline/outline/pull/12597)
- [@​nmnmcc](https://github.com/nmnmcc) made their first contribution in [#​12748](https://github.com/outline/outline/pull/12748)
- [@​UmbraCi](https://github.com/UmbraCi) made their first contribution in [#​12690](https://github.com/outline/outline/pull/12690)
- [@​cassvail](https://github.com/cassvail) made their first contribution in [#​12836](https://github.com/outline/outline/pull/12836)
**Full Changelog**: <https://github.com/outline/outline/compare/v1.8.1...v1.9.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTcuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1Ny4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
1.8.1→1.9.0Release Notes
outline/outline (outlinewiki/outline)
v1.9.0Compare Source
What's Changed
Highlights
---now work after a soft-break in #12925MCP
document_update,collection_updatetools now return error when no changes occur in #12890client_nameoptional on /oauth/register by @cassvail in #12836WWW-Authenticateheader to /mcp 401 responses by @cassvail in #12834Other improvements
+:100:reaction shorthand in #12650PROXY_HEADERS_TRUSTEDenv option (defaults to true) in #12676Fixes
validateUrlNotPrivateto match implementation in SSRF in #12636descriptionanddatain payload in #12648focusedCommentIdon document nav in #12687to avoid breaking rows in #12569
contentTypefiles in #12709Cmd+Ain image/video captions now works correctly in #12751CleanupDemotedUserTaskthrows on deleted user in #12818+1on Facepile (show avatar instead) in #12823revisions.listresponse too large in #12822Ctrl+Enteredit shortcut not working on Windows in #12867useMediaQueryvalue incorrect on first render in #12914HealthMonitorin #12913useIdlenever triggered without user activity in #12908_FILEsuffix secrets in env are cemented at startup in #12889validateUrlNotPrivatehardening in #12938New Contributors
Full Changelog: https://github.com/outline/outline/compare/v1.8.1...v1.9.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.