LoginSign Up
← Back to all sparks
E

Elgg

COLLAB
Velocity5.0

Social networking engine for building custom online communities

elgg.org ↗

A social-networking engine in careful maintenance across two supported branches.

open-sourcesocial-networkingmaintenancesecurity-patchesdual-branch
◆Current state
Elgg is running a two-branch release cadence: a 7.0.x line taking bug fixes and a 6.3.x line receiving security-only patches. The recent entries are small — single-commit gatekeeper fixes, a CKEditor licensing version correction, terse 'small security update' notes — and contributor counts are in the low single digits, with the same one or two maintainers on nearly every release. The 7.0 line has already settled into patch mode.
◆Where it's heading
This is a mature project maintaining a stable base rather than pushing new capability. The pattern of paired 7.0.x/6.3.x releases on the same day indicates a deliberate backport discipline, keeping the previous major line safe for deployments that haven't migrated. Nothing in the changelogs points toward new features; the substantive work visible here is the 7.0.1 cleanup batch that shook out post-major-release regressions in theming, discussions, and Safari script loading.
◆Prediction
Expect the alternating pattern to continue — 7.0.x patch releases as issues surface, with matching 6.3.x security backports — until a 7.1 cycle opens. The entries give no indication of when that might be.

◆Recent moves

  1. 8d ago

    Gatekeeper fix for inaccessible deleted entities

    A single-commit patch correcting gatekeeper behavior when deleted entities still exist but aren't accessible. Typical of the 7.0.x line's current cadence: one maintainer, one fix, no user-facing change beyond correctness.

    View source ↗
  2. 8d ago

    Security patch on the 6.3 maintenance branch

    A security-only release on the older 6.3 line, described in the changelog as a small security update with no detail. Its same-day pairing with a 7.0.x release is the backport discipline that defines this project's current phase.

    View source ↗
  3. 28d ago

    CKEditor pinned to the correct GPL-licensed version

    A one-commit licensing correction pinning CKEditor to the right GPL version. Housekeeping, though the kind that matters to anyone auditing a self-hosted deployment.

    View source ↗
  4. 1mo ago

    Small fixes across the 7.0 line

    Six commits from two maintainers, summarized in the release notes only as several small fixes. Continues the post-7.0 stabilization pattern without naming anything users would notice.

    View source ↗
  5. 1mo ago

    Security patch on the 6.3 maintenance branch

    Another undetailed security-only patch on 6.3, released alongside a 7.0.x fix. The recurrence of this exact pairing is the clearest signal of how the project splits its attention right now.

    View source ↗
  6. 1mo ago

    Post-7.0 cleanup: theming, discussions, and Safari script loading

    The substantive release in this set — 22 commits across three contributors fixing admin theme-color saving, discussion and blog comment permissions, river visibility, and a Safari-specific failure with dynamic imports in inline scripts. This is the regression sweep that follows a major version, and everything after it drops back to single-fix patches.

    View source ↗