Weblate 2026.7

Released on July 1st 2026.

Neue Funktionen

Verbesserungen

  • RTL editing and translation display now handle bidirectional text better, including Unicode isolate controls in the Visuelle Tastatur.

  • Die Zugriffssteuerung für die Verwaltungsoberfläche lässt sich nun dank plattformweiter Berechtigungen noch detaillierter steuern.

  • Default commit and merge request message templates now use Conventional Commits, settings forms can restore installation defaults, and pull request messages use a compact language progress matrix.

  • Dokumentierte Rechtsmodul-Anpassungen und zusätzliche Optionen zum Ausblenden der Rechtsdokumente oder zum Deaktivieren der Dokumentennummerierung.

  • Expanded security documentation for data residency, EU cloud sovereignty, release artifacts, supported versions, release verification, SBOMs, dependency handling, vulnerability reporting, hosted-service incident response, and self-hosted operator responsibilities.

  • LINGUAS-Datei aktualisieren erkennt das Vorhandensein von LINGUAS-Dateien besser.

  • POT-Datei aktualisieren (xgettext) can now leave the xgettext language blank to let xgettext guess it from source file extensions.

  • POT-Datei aktualisieren (xgettext), POT-Datei aktualisieren (Meson), gettext-Vorlage aktualisieren (Django), and POT-Datei aktualisieren (Sphinx) can now keep source locations in generated POT files even when translated PO files omit locations.

  • Add-ons installed at higher scopes are now shown on lower-scope add-on pages, and broad-scope add-ons can list affected components with compatibility details.

  • WEBLATE_ALLOWED_ASSET_SIZE ist jetzt in Docker-Containern verfügbar.

  • LLM automatic suggestions now use translated examples, language-specific instructions, richer glossary context, and structured placeholder context for more reliable output.

  • Meta descriptions now better match single-project and self-hosted installations.

  • Zen mode, filtered searches, nearby strings, translation form submissions, and add-on management pages now load more efficiently on large sites.

  • Added Weblate für Distributionen paketieren guidance for distribution maintainers.

  • Large component imports now avoid duplicate translation-memory processing.

  • GNU gettext PO (Portable Object) files can now be configured to remove obsolete strings on save, including during repository maintenance.

  • Bulk accepting suggestions now confirms the number of affected suggestions, can approve them for reviewers, and processes the acceptance in the background.

  • Committing large numbers of pending translations now queues browser requests in the background and avoids duplicate repository commit tasks.

  • Change-event notification add-ons can now use presets for translation content events, all events, or selected individual events.

  • Fedora Messaging now validates secure broker connections and exposes delivery timing settings.

  • Component diagnostics now sort entries by severity, color-code severity badges, and show the error count on the Diagnostics tab.

  • Leistungsbericht now shows PostgreSQL database disk usage next to server disk usage and warns when the database usage cannot be collected.

  • Leistungsbericht now shows PostgreSQL database disk usage next to server disk usage and warns when the database usage cannot be collected or there is not enough free space in the backup destination to store a database dump.

  • The Suchen und Ersetzen preview now keeps the search parameters editable so the query can be refined before applying replacements.

Fehlerbehebungen

  • Regulärer Ausdruck and Platzhalter now enforce regular expression timeouts when evaluating source-string flags (GHSA-r52j-4vjp-q949).

  • Restricted component changes are no longer exposed through nested project, component, or translation API change endpoints (GHSA-92m8-wv36-prmx).

  • ZIP downloads, including App-Store-Metadatendateien translation bundles, no longer follow child symbolic links outside the downloaded tree (GHSA-xwj4-fp82-r2rj).

  • Teams enforcing two-factor authentication now also withhold site-wide permissions from human members without 2FA configured (GHSA-x86c-ff69-cr2m).

  • Globally scoped HTML and AJAX object lookups no longer disclose object existence in private projects (CVE 2026-55227, GHSA-2p9g-x3cv-5hh4).

  • Team API access checks now prevent project managers from reading private-project team data or expanding scoped team assignments outside their allowed projects (CVE 2026-55228, GHSA-2q2q-jr9g-v9rf).

  • Malformed replacements flags no longer abort source length checks.

  • Empty component lists are no longer exposed to users without component list management permission.

  • Glossary handling no longer duplicates TBX terms or shows source-language terms in both translation columns.

  • Duplicate string alerts now offer a cleanup action to remove repeated strings from translation files.

  • Gerrit-Review-Requests review pushes can again include Gerrit push options in the target branch.

  • Die Überprüfung des Webhook-Ziel-Fallbacks ist nun strenger und wird in der Komponentendiagnose gemeldet.

  • Beim Erstellen von Komponenten, die mit weblate:// verlinkt sind, wird während der Anfrage nicht mehr auf die Sperre des gemeinsam genutzten Repositorys gewartet.

  • Project and workspace translation license defaults now follow component and project licenses more closely.

  • Component and category API PATCH requests no longer remove the category when the field is omitted.

  • Document and translation-memory uploads now enforce TRANSLATION_UPLOAD_MAX_SIZE, and API document uploads validate file extensions.

  • reStructuredText-Syntaxfehler now detects inline roles wrapped in stray backticks.

  • Unsicheres HTML now efficiently detects changed placeholder-only HTML attribute values in translations.

  • Maximaler Umfang der Übersetzung no longer wraps text configured to fit on one line, checks source strings, and refreshes rendered previews after source edits.

  • Repository reset and update history now keeps attribution, records remote update failures, and includes follow-up translation-file reconciliation.

  • Updating repository URLs now validates compatible Git history without requiring an immediate successful merge.

  • Automatische Übersetzung no longer validates hidden component fields when using machine translation.

  • Strings marked for edit links now include all strings needing editing, checking, or rewriting.

  • Anonymous permission checks no longer fail when loading teams scoped to projects or workspaces.

  • API project creation can again use the user’s only eligible workspace when no explicit workspace is supplied.

  • Git auto-maintenance is now disabled for Weblate-managed repositories to avoid concurrent detached maintenance jobs.

  • Interrupted Git repository operations are now either recovered and recorded or surfaced as a repository alert.

  • Watched translations on the dashboard now include category path segments.

  • Unsupported upload levels now show an upload placeholder pointing to individual translations.

  • Component API responses no longer expose repository export, push branch, or repository browser links to users without repository access.

Kompatibilität

  • DeepL now handles DeepL API versions internally, uses v3 for glossary management and language discovery, and no longer supports DeepL API v1.

  • Fedora Messaging topics now include category path segments, and broker settings are stored as an AMQP URL with existing host and SSL settings migrated automatically.

Aktualisierung

Bitte Allgemeine Upgrade-Anweisungen befolgen, um die Aktualisierung durchzuführen.

  • There are changes in settings_example.py, most notably in SOCIAL_AUTH_PIPELINE and SOCIAL_AUTH_DISCONNECT_PIPELINE; please adjust your settings accordingly.

  • Existing translation-memory entries are moved to scoped storage by a periodic Celery background task. Keep Celery running after the upgrade; translation-memory suggestions can be incomplete until the backfill finishes.

Mitwirkende

Beiträge zum Code

Michal Čihař, Karen Konou, Weblate CI, michael-smt, Samuel Gomes, Dinis Sales, Gersona, Harsha C, Kartik Ohri, Besnik Bleta, fahadhewad

Beiträge zu Übersetzungen

Dick Groskamp, Michal Čihař, 為什麼不加空格, VfBFan, Любомир Василев, 이정희, Aindriú Mac Giolla Eoin, Yaron Shahrabani, jiahaisheng, Horus68, Andrei Stepanov, Martin Srebotnjak, Peter Vančo, Hotripak, 大王叫我来巡山, Milo Ivir, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), Mickaël Binos, Besnik Bleta, Frank Paul Silye, Matthaiks, abd sak, Hoseok Seo, Fulup Jakez, Gaël TISSERAND (Gtisseran), Azamat Аituganov, Mahirə Həsənova, Pierfrancesco Passerini, Libre, Mohamed Aymane Farhi, Júlia Rosell Saldaña, پرویز قادر, Jim Kats, Miguel A. Bouzada, Manuela Silva, reducedradius, Hanssium, Uh idk, Arif Budiman, Feike Donia, Zahid Rizky Fakhri, Emin Tufan Çetin, ojppe, தமிழ்நேரம், António Oliveira, Rumuz AGO, justcontributor, Flynn, Ștefan Zaharia, Nozomu Matsui, H-Media, Ecron, Weblate CI, Balázs Meskó, Fjuro, goeran, Adam Havránek, Priit Jõerüüt, Astrid Høie Silden, Alan S. Muhammed (Alan Kurdish), hoanghuy309, Yamin Siahmargooei, MeahNunh, Kartik Ohri, Valeria Sofia Azañero, Tuomas Hietala, Rafael Fontenelle, Yuri Chornoivan, AWwue-work, Kristoffer Grundström, ssantos, Andi Chandler, Ldm Public, Alc4Traz45, Szafranek13, hms5232, Victor K, 大学没毕业

Beiträge zur Dokumentation

Michal Čihař, michael-smt, Karen Konou, Gersona, Weblate CI, Kartik Ohri, Besnik Bleta, fahadhewad, Harsha C

Alle Änderungen im Detail.

Weblate 2026.6.1

Veröffentlicht am 1. Juni 2026.

Fehlerbehebungen

  • Sprachübergreifende Mitteilungen führen nicht mehr zu Fehlern auf den Sprachübersichtsseiten.

Aktualisierung

Bitte Allgemeine Upgrade-Anweisungen befolgen, um die Aktualisierung durchzuführen.

Mitwirkende

Beiträge zum Code

Michal Čihař

Beiträge zur Dokumentation

Michal Čihař

Alle Änderungen im Detail.

Weblate 2026.6

Veröffentlicht am 1. Juni 2026.

Neue Funktionen

  • Mitteilungen können nun auch über Weblates REST-API für bestimmte Projektsprachen verwaltet werden.

  • Teammitgliedschaften können nun auf ausgewählte Sprachen für benutzerspezifische Übersetzungsberechtigungen beschränkt werden.

  • Kostenschätzungen zu Übersetzungsberichten hinzugefügt.

  • Optionales OpenTelemetry-Tracing für Backend-Anfragen und -Aufgaben sowie Google-Cloud-Fehlerberichterstattung für behandelte Serverfehler hinzugefügt.

  • Added Arbeitsbereiche to group related projects, with workspace project listings, workspace-scoped teams and project creation permissions, inherited workspace, project, and category defaults for selected component settings, and billing details when available.

Verbesserungen

Fehlerbehebungen

  • Outbound URL validation now rejects additional non-public targets (CVE 2026-50127, GHSA-vmfc-9982-2m45).

  • Projektsprache-Mitteilungen werden nicht mehr projektweit angezeigt.

  • Verstärkte Zugriffsprüfung für POST /api/screenshots/ gegen das Aufzählen privater Projekte.

  • Registration-attempt account activity e-mails now link to password reset to help users finish account setup.

  • Neue Benutzer einladen links now work for signed-in users whose account owns the invited e-mail address.

  • Searching for strings with content changes without a recorded author now supports changed_by:"", and combined change filters now apply to the same change event.

  • Gitea and Forgejo pull requests no longer reconfigure existing fork remotes to point to the source repository.

  • Project and category language translation sessions now keep strings grouped by component priority and show component switch warnings reliably.

  • Engage page task links now stay centered and show the target translation language.

  • Gettext POT update add-ons now rescan translations after committing updated POT and PO files.

  • Git repositories now update branches correctly when the remote also has a tag with the same name.

  • Conflicting repository setup alerts now allow same-branch direct pushes.

  • Obsolete cleanup schedules are now removed from Celery beat during upgrade.

  • Translation pages for workspace projects no longer crash when workspace fields are deferred.

Aktualisierung

Bitte Allgemeine Upgrade-Anweisungen befolgen, um die Aktualisierung durchzuführen.

  • Es gibt eine Änderung in INSTALLED_APPS; weblate.workspaces sollte hinzugefügt werden.

  • Die Datenbankmigrationen können bei größeren Instanzen länger dauern.

Mitwirkende

Beiträge zum Code

Michal Čihař, Karen Konou, Weblate CI, Basheer Radman, michael-smt, Kristián Kunc, felixfon

Beiträge zu Übersetzungen

Michal Čihař, VfBFan, 大王叫我来巡山, Emin Tufan Çetin, Basheer Radman, 為什麼不加空格, Peter Vančo, Christian Wia, Любомир Василев, Matthaiks, Andrei Stepanov, Libre, Besnik Bleta, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), Balázs Meskó, Aindriú Mac Giolla Eoin, Adam Havránek, Dick Groskamp, Arif Budiman, Mickaël Binos, Ryo Nakano, hoanghuy309, Pierfrancesco Passerini, Alefsander Ribeiro Nascimento, Massimo Pissarello, justcontributor, 이정희, Cabdi Waaxid Siciid, Yaron Shahrabani, User2068, Kyotaro Iijima, pan93412, jernejp21, libermax, Phileas Fogg, Fjuro, Jim Kats, Fulup Jakez, Priit Jõerüüt, Ldm Public, Andi Chandler, Burak SDN, ojppe

Beiträge zur Dokumentation

Michal Čihař, VfBFan, Basheer Radman, Weblate CI, michael-smt, felixfon

Alle Änderungen im Detail.

Weblate 2026.5

Veröffentlicht am 15. Mai 2026.

Neue Funktionen

  • Added MDX-Dateien support for translating Markdown text while preserving JSX syntax, with Dateiformat-Parameter shared with Markdown-Dateien for line wrapping, code blocks, front matter, and placeholder handling.

  • Added extended LLM translation context for automatic suggestions, covering string context, explanations, secondary-language translations, plurals, failing checks, and placeholders.

  • Added a digest-only translation activity summary notification, see Benachrichtigungen.

  • CSV- und XLSX-Downloads in Übersetzungen herunterladen exportieren nun Zeichenketten mit Pluralformen als separate Pluralform-Zeilen, die wieder importiert werden können.

  • Gettext-PO/POT-Dateiformat-Parameter hinzugefügt, um zu steuern, ob Weblate die Header Language-Team, Last-Translator, X-Generator und Report-Msgid-Bugs-To aktualisiert.

  • Added a backup to run configured backup services synchronously.

  • The translation memory lookup API can now skip fuzzy matching with the exact query parameter.

  • Übersetzungsdateien-CDN hinzugefügt, um Übersetzungsdateien im konfigurierten CDN zu veröffentlichen.

Verbesserungen

  • Das Verwenden von DOS-Zeilenumbrüchen kann jetzt mit dem Dateiformat-Parameter dos_eol konfiguriert werden.

  • OpenAI and Alibaba no longer require their vendor Python SDKs.

  • Audited project and component setting changes are now recorded in history.

  • Gerrit review pushes now use Push-Branch as the target branch.

  • Weblate now checks whether CACHE_DIR allows executing generated helper files.

  • The Software-Stückliste is now generated during release and published as a versioned release asset instead of being stored in the source repository.

  • The translating page now separates screenshots from string information, collapses rarely used string details, and groups glossary and screenshot actions more consistently.

  • Project access management now paginates users and better explains site-wide automatic team assignments.

  • Added provider-oriented code hosting documentation and Gettext-style Pluralformel guidance.

  • Das Python-Rad liefert keine Quellübersetzungkataloge, Testdateien oder Beispieldateien für die Bereitstellung mehr aus, wodurch die Größe des installierten Pakets verringert wird.

  • The engage page now highlights actionable translation task buckets for newcomers.

  • RSS feeds can now use the same filters as the changes browsing page.

  • gettext-Vorlage aktualisieren (Django) now supports gettext PO files used as templates when they are excluded by the language filter.

  • Reworked Weblate-Bedrohungsmodell into a contract-style document.

Fehlerbehebungen

  • Hardened search previews and Automatische Vorschläge suggestion origins against XSS, and stopped exposing database error details in upload failures (CVE 2026-45106 / GHSA-6wxc-8mgq-w26m).

  • Screenshot URL uploads, remote HTML extraction in JavaScript-Lokalisierungs-CDN, and URL health-check redirects now reject internal or non-public targets by default.

  • Gerrit review pushes now reject target branches containing push options, track the target branch before invoking git-review, and suggest short branch names when full refs are supplied.

  • Category Mitteilungen no longer appear across the whole project, and translation announcement deletion now honors language-scoped permissions.

  • Das Pushen von Merge Requests aktualisiert nun Remote-Repositorys von Forks nach dem Wechseln des Repository-Hostings.

  • Plural counts parsed from translation file headers are now bounded, and plural formulas are rejected when they can evaluate outside the configured plural form range.

  • Zugangstoken pro Projekt expiring today now remain valid until the end of the day.

  • Malformed ALTCHA CAPTCHA submissions and repository URLs in webhook payloads no longer cause server errors.

  • Platzhalter now merges overlapping non-nested spans from multiple flags.

  • Weblate sichern und verschieben logs no longer include OpenSSH post-quantum key exchange warnings from remote Borg connections.

  • Category repository paths are now handled more safely during cleanup and moves.

  • Locked component pages now show an unsubscribe action after subscribing to unlock notifications.

  • Sicherungen auf Projektebene imports now restore in the background to avoid web worker memory limits.

Kompatibilität

  • Die Markierung dos-eol wird nicht mehr unterstützt. Verwenden Sie stattdessen den Dateiformat-Parameter dos_eol.

  • Das CAPTCHA bei der Registrierung nutzt nun das ALTCHA-Widget-v3-Protokoll mit Argon2id-Proof-of-Work.

  • The set_language_team project attribute has been replaced with the po_set_language_team file format parameter at the component level; see Dateiformat-Parameter.

  • Weblate now uses calendar versioning for releases, see Veröffentlichungszyklus.

  • Weblate now uses stricter dependency version constraints to better control runtime environment.

Aktualisierung

Bitte Allgemeine Upgrade-Anweisungen befolgen, um die Aktualisierung durchzuführen.

Mitwirkende

Beiträge zum Code

Michal Čihař, Karen Konou, AliceVisek, Gersona, Weblate CI

Beiträge zu Übersetzungen

이정희, Andrei Stepanov, Milo Ivir, ssantos, 大王叫我来巡山, Kaya Zeren, reducedradius, Peter Vančo, amano, Michal Čihař, Anucha Hlownonkor, Yaron Shahrabani, UDP, Максим Горпиніч, Agnieszka C, VfBFan, Blueberry, ojppe, Francisco Serrador, Aindriú Mac Giolla Eoin, Fjuro, Любомир Василев, Frank Paul Silye, Temuri Doghonadze, Yuri Chornoivan, Sergio Granadoz, Sketch6580, Hyeonjeong Lee, 為什麼不加空格, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), justcontributor, Kristijan "Fremen" Velkovski, Pierfrancesco Passerini, Besnik Bleta, Arif Budiman, Andi Chandler, jernejp21, Manuela Silva, Sjur N Moshagen, Abduqadir Abliz, Laitei, Кирилл Ванин, Matthaiks, Nozomu Matsui, Dick Groskamp, MrZwave, hoanghuy309, Jim Spentzos, Adam Havránek, Ricky Tigg, Christian Wia, ButterflyOfFire

Beiträge zur Dokumentation

Michal Čihař, Gersona, Karen Konou, AliceVisek

Alle Änderungen im Detail.