← Back to all sparks
H

HumHub

COLLAB
Velocity2.5

Open-source social network and intranet platform

HumHub 1.19 has left beta, and its first patches are already carrying security fixes.

social intranetupgrade migrationssecurity patchesaccessibilityrelease cadence
◆Current state
The 1.19 cycle is out of beta. beta.3 in September carried security fixes, keyboard-accessibility work and leftover Bootstrap cleanup, and the v1.19.1 entry on October 26 is a changelog update noting security fixes, enhancements and bug fixes. HumHub's GitHub releases show 1.19.0 stable on October 12 and 1.19.3 on October 27, neither of which appears in this feed.
◆Where it's heading
The betas were spent making the upgrade survivable, and the post-stable patches show what that missed: the 1.19.3 changelog repairs activity types that reappeared in e-mail summaries after the update, and a cron failure that could repeat summary mail. Accessibility is the one forward-looking thread, with visible focus and corrected tab order across cards, dropdowns and search.
◆Prediction
1.19.4 is already listed as unreleased in the project changelog, so another fix-led patch is close. 1.18.7 shipped the same day as 1.19.2, so expect security fixes to keep reaching both lines.

◆Recent moves

  1. 10d ago

    1.19.1 patch brings security fixes, enhancements and bug fixes

    The feed's first post-beta entry, and only a changelog commit, noting security fixes plus enhancements and bug fixes. It confirms the line has moved from upgrade repair to ordinary patching.

    View source ↗
  2. 1mo ago

    Security fixes, keyboard focus and stream loading repairs

    The last beta in this feed mixes security fixes with visible repairs to grouped activities, endless scrolling and keyboard navigation. The migration work gives way to polish and accessibility before stable.

    View source ↗
  3. 2mo ago

    Private-space activity leak and installer 503 handling fixed

    The most consequential item is a visibility fix: activities from private spaces were reaching the summary mail and dashboard activity box of users who only had a pending invite or join request. Alongside it, the installer now distinguishes an unreachable database server from a merely misconfigured one instead of offering to re-set-up a live instance, and the 1.19 theme relocation no longer leaves an empty skeleton that shadows the core theme and fails every request. Continued 1.19 upgrade-survival work rather than new capability.

    View source ↗
  4. 3mo ago

    1.19 upgrade migration and orphaned content fixes

    The first 1.19 beta clears the obstacles that would stop the upgrade outright: orphaned comments deleted before RESTRICT foreign keys are created, and purge jobs no longer crashing on content whose record is gone. A new UnreadCountChangedEvent and an iOS keyboard-scroll fix are the only additive items.

    View source ↗
  5. 10mo ago

    Login screen, theming and validator fixes

    A long list of small 1.18 polish items — login container width, child themes without build.scss, validator behaviour, email colour contrast helpers. Broad but individually minor, and characteristic of a beta line late in its cycle.

    View source ↗
  6. 11mo ago

    Group manager options and assorted UI fixes

    Optional add/remove group membership for group managers plus a long tail of Bootstrap 5 migration and form styling fixes. Mostly the visible surface of the BS5 move rather than product decisions.

    View source ↗