Lightnews — Scholar-powered news

Sveltia CMS @sveltiacms.app · 9h

If you use @gitlab.com and have upgraded to version 18.4.2, you’ll experience a GraphQL complexity error. This is due to a GitLab bug, and we’re waiting for them to provide a fix.

GraphQL Query Complexity Limit Exceeded in GitLab 18.4.2 · Issue #525 · sveltia/sveltia-cms

Issue Description After upgrading to GitLab 18.4.2, we're experiencing GraphQL query complexity limit errors when fetching multiple files from repository. The query complexity exceeds the maximum a...

github.com

1

Sveltia CMS @sveltiacms.app · 1d

v0.111.0 added the strikethrough text formatting option to the Markdown widget. v0.112.0 added support for the deploy hook Authorization header.

Release v0.112.0 · sveltia/sveltia-cms

Added support for the deploy hook Authorization header. This solves #524. Bug fixes and improvements. Full Changelog: v0.111.0...v0.112.0 Follow us on Bluesky!

github.com

1

Sveltia CMS @sveltiacms.app · 1d

A patch is still not available, even after a month. If you haven’t already, now is the time to switch to Sveltia CMS. It’s #CybersecurityAwarenessMonth!

Sveltia CMS @sveltiacms.app · 10d

PSA: Decap CMS released a new version yesterday, but it didn’t address this XSS vulnerability disclosed 3 weeks ago. This is a friendly reminder to always use properly maintained software!

CVE-2025-57520 - GitHub Advisory Database

Decap CMS Cross Site Scripting (XSS) vulnerability

github.com

Reposted by Sveltia CMS

Sveltia CMS @sveltiacms.app · 4d

We are continuing to solve Netlify/Decap CMS issues aggressively. We won’t stop until we reach 400+.

260 Netlify/Decap CMS issues solved in Sveltia CMS

1 4

Sveltia CMS @sveltiacms.app · 4d

We are continuing to solve Netlify/Decap CMS issues aggressively. We won’t stop until we reach 400+.

1 4

Sveltia CMS @sveltiacms.app · 6d

v0.110.0 added support for the Uploadcare media library and RTL localization.

Release v0.110.0 · sveltia/sveltia-cms

Added support for the Uploadcare media library. An API-based integration allows users to select existing files from their Uploadcare account. This effectively solves decaporg/decap-cms#1794 and dec...

github.com

2

Reposted by Sveltia CMS

Kohei Yoshino @britegrid.io · 8d

My monthly $25 donation to @svelte.dev is still active 💸 The full-featured, <500kb bundle of @sveltiacms.app wouldn’t have been possible without Svelte.

rich harris @rich-harris.dev · 8d

thank you so much! we have an Open Collective that funds a lot of essential maintenance, and every contribution makes a difference:

opencollective.com/svelte

Svelte - Open Collective

Web development for the rest of us

opencollective.com

2 1 15

Sveltia CMS @sveltiacms.app · 10d

v0.109.0 added support for the LineString and Polygon types for the Map widget.

Release v0.109.0 · sveltia/sveltia-cms

Added support for the LineString and Polygon types for the Map widget. Full Changelog: v0.108.0...v0.109.0 Follow us on Bluesky!

github.com

Sveltia CMS @sveltiacms.app · 10d

PSA: Decap CMS released a new version yesterday, but it didn’t address this XSS vulnerability disclosed 3 weeks ago. This is a friendly reminder to always use properly maintained software!

CVE-2025-57520 - GitHub Advisory Database

Decap CMS Cross Site Scripting (XSS) vulnerability

github.com

Sveltia CMS @sveltiacms.app · 10d

Regarding the original context, Sveltia CMS is written in TypeScript-flavoured JavaScript. See the maintainer’s thread.

Kohei Yoshino @britegrid.io · Aug 27

All types in @sveltiacms.app are written in TS-flavoured JSDoc. The build script first converts the typedef file to a .d.ts file while adding proper deprecated tags. It then converts the file to a JSON schema. This process can easily be automated thanks to @vite.dev’s plugin system.

Sveltia CMS @sveltiacms.app · Aug 27

v0.102.0: Deprecated options are now clearly marked as such in both the JSON schema and the TypeScript type definitions. If you use these options in a supported code editor, you should receive a warning.

1

Sveltia CMS @sveltiacms.app · 10d

Check out Sveltia CMS, the modern successor to Decap CMS!

GitHub - sveltia/sveltia-cms: Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, op...

Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, open source & free. - sve...

github.com

2 1 2

Sveltia CMS @sveltiacms.app · 11d

v0.108.0 added the `indent_sequences` YAML format option.

Release v0.108.0 · sveltia/sveltia-cms

Added the indent_sequences YAML format option. This solves #520. Bug fixes and improvements. Full Changelog: v0.107.4...v0.108.0 Follow us on Bluesky!

github.com

Reposted by Sveltia CMS

Michael @mwdelaney.me · 15d

Reusable HTML components are the monolithic CMS's killer feature. Designers and stakeholders easily understand designing websites in blocks.

We can avoid corporate owned CMSes and do this in @11ty.dev and DecapCMS or @sveltiacms.app.

You don't need WordPress.

getzeropoint.com/building-wit...

Building with Blocks - Get ZeroPoint

Building a static website with reusable blocks, using ZeroPoint Starter

getzeropoint.com

3 4

Sveltia CMS @sveltiacms.app · 15d

@tresorama.bsky.social Did you know there is a modern successor to Decap CMS? Try Sveltia CMS today!

GitHub - sveltia/sveltia-cms: Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, op...

Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, open source & free. - sve...

github.com

2

Sveltia CMS @sveltiacms.app · 15d

v0.107.0 improved the TypeScript type definitions and JSON schema for backends, collections, and fields.

Release v0.107.0 · sveltia/sveltia-cms

Improved the TypeScript type definitions and JSON schema for backends, collections, and fields. Bug fixes and improvements. Full Changelog: v0.106.4...v0.107.0 Follow us on Bluesky!

github.com

2

Sveltia CMS @sveltiacms.app · 16d

We have enabled trusted publishing and 2FA for package publishing for better security.

Our plan for a more secure npm supply chain

GitHub is strengthening npm's security with stricter authentication, granular tokens, and enhanced trusted publishing.

github.blog

1

Sveltia CMS @sveltiacms.app · 17d

Two weeks have passed since a XSS vulnerability in Decap CMS was disclosed. Its severity level has been upgraded to moderate. There is still no patch. 🫤

CVE-2025-57520 - GitHub Advisory Database

Decap CMS Cross Site Scripting (XSS) vulnerability

github.com

Sveltia CMS @sveltiacms.app · 19d

Looks like the ZeroPoint site is missing a background colour for dark mode. Both the text and background are white. Adding `background-color: var(--color-background);` to the `body` would solve the issue.

1

Reposted by Sveltia CMS

Michael @mwdelaney.me · 19d

Static site generators can be hard for stakeholders to buy into because they don't have a familiar UI.

I'm here to demystify adding a friendly CMS to your @11ty.dev site:

ZeroPoint now includes good working examples of @sveltiacms.app and Decap CMS configurations!

getzeropoint.com#adding-a-cms

ZeroPoint - A corporate-free website starter project - Get ZeroPoint

getzeropoint.com