Lightnews — Scholar-powered news

Sveltia CMS @sveltiacms.app · 13h

v0.111.0 added the strikethrough text formatting option to the Markdown widget. v0.112.0 added support for the deploy hook Authorization header.

Release v0.112.0 · sveltia/sveltia-cms

Added support for the deploy hook Authorization header. This solves #524. Bug fixes and improvements. Full Changelog: v0.111.0...v0.112.0 Follow us on Bluesky!

github.com

1

Sveltia CMS @sveltiacms.app · 14h

A patch is still not available, even after a month. If you haven’t already, now is the time to switch to Sveltia CMS. It’s #CybersecurityAwarenessMonth!

Sveltia CMS @sveltiacms.app · 9d

PSA: Decap CMS released a new version yesterday, but it didn’t address this XSS vulnerability disclosed 3 weeks ago. This is a friendly reminder to always use properly maintained software!

CVE-2025-57520 - GitHub Advisory Database

Decap CMS Cross Site Scripting (XSS) vulnerability

github.com

Reposted by Sveltia CMS

Sveltia CMS @sveltiacms.app · 3d

We are continuing to solve Netlify/Decap CMS issues aggressively. We won’t stop until we reach 400+.

260 Netlify/Decap CMS issues solved in Sveltia CMS

1 4

Sveltia CMS @sveltiacms.app · 3d

We are continuing to solve Netlify/Decap CMS issues aggressively. We won’t stop until we reach 400+.

1 4

Sveltia CMS @sveltiacms.app · 5d

v0.110.0 added support for the Uploadcare media library and RTL localization.

Release v0.110.0 · sveltia/sveltia-cms

Added support for the Uploadcare media library. An API-based integration allows users to select existing files from their Uploadcare account. This effectively solves decaporg/decap-cms#1794 and dec...

github.com

2

Reposted by Sveltia CMS

Kohei Yoshino @britegrid.io · 7d

My monthly $25 donation to @svelte.dev is still active 💸 The full-featured, <500kb bundle of @sveltiacms.app wouldn’t have been possible without Svelte.

rich harris @rich-harris.dev · 7d

thank you so much! we have an Open Collective that funds a lot of essential maintenance, and every contribution makes a difference:

opencollective.com/svelte

Svelte - Open Collective

Web development for the rest of us

opencollective.com

2 1 14

Sveltia CMS @sveltiacms.app · 9d

v0.109.0 added support for the LineString and Polygon types for the Map widget.

Release v0.109.0 · sveltia/sveltia-cms

Added support for the LineString and Polygon types for the Map widget. Full Changelog: v0.108.0...v0.109.0 Follow us on Bluesky!

github.com

Sveltia CMS @sveltiacms.app · 9d

PSA: Decap CMS released a new version yesterday, but it didn’t address this XSS vulnerability disclosed 3 weeks ago. This is a friendly reminder to always use properly maintained software!

CVE-2025-57520 - GitHub Advisory Database

Decap CMS Cross Site Scripting (XSS) vulnerability

github.com

Sveltia CMS @sveltiacms.app · 9d

Regarding the original context, Sveltia CMS is written in TypeScript-flavoured JavaScript. See the maintainer’s thread.

Kohei Yoshino @britegrid.io · Aug 27

All types in @sveltiacms.app are written in TS-flavoured JSDoc. The build script first converts the typedef file to a .d.ts file while adding proper deprecated tags. It then converts the file to a JSON schema. This process can easily be automated thanks to @vite.dev’s plugin system.

Sveltia CMS @sveltiacms.app · Aug 27

v0.102.0: Deprecated options are now clearly marked as such in both the JSON schema and the TypeScript type definitions. If you use these options in a supported code editor, you should receive a warning.

1

Sveltia CMS @sveltiacms.app · 9d

Check out Sveltia CMS, the modern successor to Decap CMS!

GitHub - sveltia/sveltia-cms: Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, op...

Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, open source & free. - sve...

github.com

2 1 2

Sveltia CMS @sveltiacms.app · 10d

v0.108.0 added the `indent_sequences` YAML format option.

Release v0.108.0 · sveltia/sveltia-cms

Added the indent_sequences YAML format option. This solves #520. Bug fixes and improvements. Full Changelog: v0.107.4...v0.108.0 Follow us on Bluesky!

github.com

Reposted by Sveltia CMS

Michael @mwdelaney.me · 14d

Reusable HTML components are the monolithic CMS's killer feature. Designers and stakeholders easily understand designing websites in blocks.

We can avoid corporate owned CMSes and do this in @11ty.dev and DecapCMS or @sveltiacms.app.

You don't need WordPress.

getzeropoint.com/building-wit...

Building with Blocks - Get ZeroPoint

Building a static website with reusable blocks, using ZeroPoint Starter

getzeropoint.com

3 4

Sveltia CMS @sveltiacms.app · 14d

@tresorama.bsky.social Did you know there is a modern successor to Decap CMS? Try Sveltia CMS today!

GitHub - sveltia/sveltia-cms: Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, op...

Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, open source & free. - sve...

github.com

2

Sveltia CMS @sveltiacms.app · 14d

v0.107.0 improved the TypeScript type definitions and JSON schema for backends, collections, and fields.

Release v0.107.0 · sveltia/sveltia-cms

Improved the TypeScript type definitions and JSON schema for backends, collections, and fields. Bug fixes and improvements. Full Changelog: v0.106.4...v0.107.0 Follow us on Bluesky!

github.com

2

Sveltia CMS @sveltiacms.app · 15d

We have enabled trusted publishing and 2FA for package publishing for better security.

Our plan for a more secure npm supply chain

GitHub is strengthening npm's security with stricter authentication, granular tokens, and enhanced trusted publishing.

github.blog

1

Sveltia CMS @sveltiacms.app · 16d

Two weeks have passed since a XSS vulnerability in Decap CMS was disclosed. Its severity level has been upgraded to moderate. There is still no patch. 🫤

CVE-2025-57520 - GitHub Advisory Database

Decap CMS Cross Site Scripting (XSS) vulnerability

github.com

Sveltia CMS @sveltiacms.app · 18d

Looks like the ZeroPoint site is missing a background colour for dark mode. Both the text and background are white. Adding `background-color: var(--color-background);` to the `body` would solve the issue.

1

Reposted by Sveltia CMS

Michael @mwdelaney.me · 18d

Static site generators can be hard for stakeholders to buy into because they don't have a familiar UI.

I'm here to demystify adding a friendly CMS to your @11ty.dev site:

ZeroPoint now includes good working examples of @sveltiacms.app and Decap CMS configurations!

getzeropoint.com#adding-a-cms

ZeroPoint - A corporate-free website starter project - Get ZeroPoint

getzeropoint.com

3 5 11

Reposted by Sveltia CMS

Sveltia CMS @sveltiacms.app · 22d

v0.106.0: The File/Image widget now supports multiple, min, and max options, allowing users to upload multiple files at once 🎉

Release v0.106.0 · sveltia/sveltia-cms

The File/Image widget now supports multiple, min, and max options, allowing users to upload multiple files at once. For compatibility with the Cloudinary and Uploadcare media libraries, the media_l...

github.com

1 3

Reposted by Sveltia CMS

Sveltia CMS @sveltiacms.app · 23d

PSA: A week has passed since a XSS vulnerability in Decap CMS was disclosed, and it still hasn’t been patched. If possible, switch to Sveltia CMS.

GitHub - sveltia/sveltia-cms: Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, op...

Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, open source & free. - sve...

github.com

2 1

Sveltia CMS @sveltiacms.app · 21d

@kuba.blue Glad you’ve found us!

1 1

Sveltia CMS @sveltiacms.app · 21d

@shushugah.com Did you know that there’s a much better, more modern alternative to Decap CMS? Try Sveltia CMS today!

GitHub - sveltia/sveltia-cms: Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, op...

Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, open source & free. - sve...

github.com

Sveltia CMS @sveltiacms.app · 22d

v0.106.0: The File/Image widget now supports multiple, min, and max options, allowing users to upload multiple files at once 🎉

Release v0.106.0 · sveltia/sveltia-cms

The File/Image widget now supports multiple, min, and max options, allowing users to upload multiple files at once. For compatibility with the Cloudinary and Uploadcare media libraries, the media_l...

github.com

1 3

Sveltia CMS @sveltiacms.app · 23d

PSA: A week has passed since a XSS vulnerability in Decap CMS was disclosed, and it still hasn’t been patched. If possible, switch to Sveltia CMS.

GitHub - sveltia/sveltia-cms: Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, op...

Netlify/Decap CMS successor. Fast, lightweight, Git-based headless CMS. Modern UX, first-class i18n support, mobile support + 100s of improvements. Framework-agnostic, open source & free. - sve...

github.com

2 1

Reposted by Sveltia CMS

Sveltia CMS @sveltiacms.app · Sep 11

As of Sveltia CMS v0.105.0, the `sanitize_preview` option for the Markdown widget is set to `true` by default to prevent potential XSS attacks via entry previews. We recommend keeping this option enabled unless you fully trust all users of your CMS.

Release v0.105.0 · sveltia/sveltia-cms

⚠️ POTENTIALLY BREAKING CHANGE: The sanitize_preview option for the Markdown widget is now set to true by default in Sveltia CMS. This follows a report of an XSS vulnerability in Decap CMS. XSS att...

github.com

1 1