⬆️ Update BookStackApp/BookStack to v24

[renovate]

This PR contains the following updates:

Package	Update	Change
BookStackApp/BookStack	major	v23.12.2 -> v24.02

---

Release Notes

BookStackApp/BookStack (BookStackApp/BookStack)

v24.02: BookStack v24.02

Compare Source

Links

• Release video overview
• Update instructions
• Update details on blog

Upgrade Notices

• Security - The v23.12 branch of BookStack recently had a security release, which you can find details of in our v23.12.3 blogpost.
• Comments - The ability to use markdown content in comments has been removed in this release, replaced by a WYSIWYG editor. Markdown in comments was a fairly hidden feature though so was not commonly utilised. Existing markdown comments will remain although formatting may be lost if old markdown comments are edited.
• Commands - The "Regenerate Comment Content" command has been removed in this release since this action is now redundant.
• OIDC Authentication - Proof Key for Code Exchange (PKCE) support has been added to BookStack OIDC authentication. This should not affect existing OIDC use but you may want to enforce PKCE to be required for BookStack on your authentication system, if supported, for extra security.

Full List of Changes

• Added simple WYSIWYG comment editor inputs. (#​4815, #​3018)
• Added default page templates for chapters. Thanks to @​Man-in-Black. (#​4750, #​4764)
• Added PKCE support for OIDC. (#​4804, #​4734)
• Added "Clear table formatting" & "Resize to contents" WYSIWYG table options. (#​4845)
• Added "Toggle header row" button to table toolbar in WYSWIYG editor. (#​985)
• Added attachment serving range request support. (#​4758, #​3274)
• Added new AUTH_PRE_REGISTER logical theme event. (#​4833)
• Updated app entity loading to be more efficient and avoid global addSelects. (#​4827, #​4823)
• Updated book/shelf cover image wording to make sizing in usage clearer. (#​4748)
• Updated PWA manifest to allow landscape use. Thanks to @​shashinma. (#​4828)
• Updated redirect handling to reduce chance of redirecting to images. (#​4863)
• Updated some EN text for consistency/readability. (#​4794)
• Updated WYSIWYG editor with improved cell selection formatting clearing. (#​4850)
• Updated WYSIWYG text direction & alignment controls to work more reliably on complex structures. (#​4843)
• Fixed breadcrumb dropdowns being partially out of view on mobile screen sizes. (#​4824)
• Fixed description WYSIWYG not respecting RTL text. (#​4810)
• Fixed header bar collapse on smaller screen sizes when no name or logo is used. (#​4841)
• Fixed incorrect pagination display in RTL layout. (#​4808)
• Fixed JavaScript error logged on WYSIWYG editor load due to how custom styles were imported. (#​4814)
• Fixed scrollbars showing on WYSIWYG table cell range selection in some browsers. (#​4844)
• Fixed WYSIWYG code block text direction controls not being respected. (#​4809)

v23.12.3: BookStack v23.12.3

Compare Source

Security Release

• Update Instructions
• Update details on blog

BookStack v23.12.3 has been released.
This is a security release that addresses a vulnerability in PDF generation that could be exploited to perform blind server-side-request forgery.

Upgrade is advised where untrusted users have permission to create/edit/update page content in your instance.

Full List of Changes

• Updated PHP dependencies, primarily to update php-svg-lib package.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.