Release 2.8.0
Main Page > Releases > Releases/Release announcements > Release 2.8.0
Release date: January 8, 2024
Download link: atom-2.8.0.tar.gz
Database schema version: v193
Release 2.8 is a major AtoM release, and includes important security updates for Content Security Policy, updates to the Bootstrap 5 Dominion theme, as well as bug fixes.
Visit the Downloads page to download the most recent release, and consult the 2.8 Upgrading and Installation guides in our documentation for further information.
An overview of some of the major changes in the 2.8 release is included below.
Bootstrap 5
Starting with this release the Bootstrap 5 theme (arDominionB5Plugin) is the default theme for new AtoM installations. Additionally, AtoM is deprecating Boostrap 2 themes starting this release since Bootstrap 2, which was used for the Dominion (arDominionPlugin) and the Archives Canada themes (arArchivesCanadaPlugin), is no longer officially supported.
Related documentation
Content Security Policy
This release adds Content Security Policy headers to AtoM to further improve security for AtoM. Adding this significantly improved AtoM's performance in web security analysis tools such as Mozilla Observatory which now rate it as A+.
Please read the related documentation page for information on configuration or implementing CSP for your own custom theme.
Related documentation
General bug fixes and enhancements
- #1542 Added an authority record rename module
Community code contributions from Matt Innes
- #1662 Fixed Dockerfile so that it no longer gives an error when it is trying to install a package from npm
Community code contributions from Guilherme Arthur Geronimo
- #1684 Diacritics setting functionality
- #1613 Added a tab for viewing failed jobs
- #1632 Set arDominionB5Plugin to be the default theme for new installations in AtoM
- #1642 Added a Bootstrap 2 deprecation notice in the web UI
- #1628 Added REST API support for physical storage object creation
- #1624 Added a new REST API endpoint that allows changing of an information object's publication status
- #13650 Increased the PDF indexing limit to 16MB
- Amharic made available in Weblate for translation
- #1646 Add CSP headers to AtoM responses
- #1693 Update CSP header default to 'report-only'
- #1641 secure and samesite flags added to AtoM cookies
- #1715 Fixed difficult to read job logs
- #1713 Fixed typo in API key label when editing user.
- #1710 Fixed archival institution page's upload limit form has a broken field on BS5 theme
- #1703 Fixed invalid static pages being created with invalid slugs
- #1701 Fixed clipboard send feature no longer sending the request data as a form submission
- #1698 Fixed some BS5 theme typography issues and inconsistencies
- #1696 Fixed autocomplete during SKOS import pointing to descriptions instead of taxonomies
- #1678 Updated the CSRF attack message to be more informative
- #1673 Added proper page titles for better accessibility (WCAG (2.4.2))
- #1666 Added error handling for the rename-slug CLI tool
- #1661 Fixed incomplete terms being saved in the taxonomy when adding access points
- #1653 Fixed identifier counter not incrementing when used to modify existing descriptions
- #1643 Fixed the broken media-type option on digital object deriv regeneration task
- #1635 Fixed global search institutional delimiters and advanced search link
- #1634 Removed the repeated re-index warnings on running the build-nested-set task
- #1630 Fixed an ACL check in the REST API's digital object create endpoint that was malformed
- #1611 Added a task description for the password reset task
- #1606 Fixed G4 analytics not tracking pageviews from clicks in full-width treeview
- #1605 Fixed escape special characters setting no longer working in 2.7.x
- #1598 Reduced noise in search results that was there due to indexing inherited creators
- #1704 Fixed multi-line i18n strings
- #13657 Fixed update function for 'Language and script notes'.
- #1688 Updated BS5 navbar-toggler-icon to Font Awesome icon
- #1596 Fixed RAD template fields not appearing when switching languages
Many thanks to Helder Gomes Silva who reported a security vulnerability for this release