Weblate 2026.6

尚未发布。

新功能

改进

缺陷修复

  • Hardened POST /api/screenshots/ access checks against private project enumeration.

  • Searching for strings with content changes without a recorded author now supports changed_by:"".

  • Project and category language translation sessions now keep strings grouped by component priority and show component switch warnings reliably.

兼容性

升级

请按照 一般的升级指示 来执行升级。

贡献者

All changes in detail.

Weblate 2026.5

Released on May 15th 2026.

新功能

  • Added MDX files support for translating Markdown text while preserving JSX syntax, with 文件格式参数 shared with Markdown 文件 for line wrapping, code blocks, front matter, and placeholder handling.

  • Added extended LLM translation context for automatic suggestions, covering string context, explanations, secondary-language translations, plurals, failing checks, and placeholders.

  • Added a digest-only translation activity summary notification, see 通知.

  • CSV and XLSX downloads in 下载译文 now export plural strings as separate plural-form rows that can be imported back.

  • Added Gettext PO and POT 文件格式参数 to control whether Weblate updates the Language-Team, Last-Translator, X-Generator, and Report-Msgid-Bugs-To headers.

  • Added a backup to run configured backup services synchronously.

  • The translation memory lookup API can now skip fuzzy matching with the exact query parameter.

  • Added Translation files CDN to publish translation files to the configured CDN.

改进

  • Using DOS line endings can now be configured using the dos_eol 文件格式参数.

  • OpenAI and Alibaba no longer require their vendor Python SDKs.

  • Audited project and component setting changes are now recorded in history.

  • Gerrit review pushes now use 推送分支 as the target branch.

  • Weblate now checks whether CACHE_DIR allows executing generated helper files.

  • The 软件物料清单 is now generated during release and published as a versioned release asset instead of being stored in the source repository.

  • The translating page now separates screenshots from string information, collapses rarely used string details, and groups glossary and screenshot actions more consistently.

  • Project access management now paginates users and better explains site-wide automatic team assignments.

  • Added provider-oriented code hosting documentation and Gettext-style 复数公式 guidance.

  • The Python wheel no longer ships source translation catalogs, test files, or deployment example files, reducing the installed package size.

  • The engage page now highlights actionable translation task buckets for newcomers.

  • RSS feeds can now use the same filters as the changes browsing page.

  • Update gettext template (Django) now supports gettext PO files used as templates when they are excluded by the language filter.

  • Reworked Weblate 威胁模型 into a contract-style document.

缺陷修复

  • Hardened search previews and 自动建议 suggestion origins against XSS, and stopped exposing database error details in upload failures (CVE 2026-45106 / GHSA-6wxc-8mgq-w26m).

  • Screenshot URL uploads, remote HTML extraction in JavaScript 本地化 CDN, and URL health-check redirects now reject internal or non-public targets by default.

  • Gerrit review pushes now reject target branches containing push options, track the target branch before invoking git-review, and suggest short branch names when full refs are supplied.

  • Category 公告 no longer appear across the whole project, and translation announcement deletion now honors language-scoped permissions.

  • Merge request pushes now refresh stale fork remotes after changing repository hosting.

  • Plural counts parsed from translation file headers are now bounded, and plural formulas are rejected when they can evaluate outside the configured plural form range.

  • 项目访问令牌 expiring today now remain valid until the end of the day.

  • Malformed ALTCHA CAPTCHA submissions and repository URLs in webhook payloads no longer cause server errors.

  • 占位符 now merges overlapping non-nested spans from multiple flags.

  • 备份和迁移 Weblate logs no longer include OpenSSH post-quantum key exchange warnings from remote Borg connections.

  • Category repository paths are now handled more safely during cleanup and moves.

  • Locked component pages now show an unsubscribe action after subscribing to unlock notifications.

  • 项目级别备份 imports now restore in the background to avoid web worker memory limits.

兼容性

  • The dos-eol flag is no longer supported. Use the dos_eol 文件格式参数 instead.

  • The registration CAPTCHA now uses the ALTCHA widget v3 protocol with Argon2id proof-of-work.

  • The set_language_team project attribute has been replaced with the po_set_language_team file format parameter at the component level; see 文件格式参数.

  • Weblate now uses calendar versioning for releases, see 发行周期.

  • Weblate now uses stricter dependency version constraints to better control runtime environment.

升级

请按照 一般的升级指示 来执行升级。

  • The ALTCHA_MAX_NUMBER setting has been replaced by ALTCHA_COST, ALTCHA_MEMORY_COST, and ALTCHA_PARALLELISM; please adjust your settings accordingly.

  • The upgrading policy was changed, and upgrades are only supported from the current or previous calendar year.

  • The COMMENT_CLEANUP_DAYS and SUGGESTION_CLEANUP_DAYS settings are migrated once to site-wide 陈旧评论删除 and 陈旧建议删除 add-ons; configure those add-ons instead.

贡献者

代码贡献

Michal Čihař, Karen Konou, AliceVisek, Gersona, Weblate CI

翻译贡献

이정희, Andrei Stepanov, Milo Ivir, ssantos, 大王叫我来巡山, Kaya Zeren, reducedradius, Peter Vančo, amano, Michal Čihař, Anucha Hlownonkor, Yaron Shahrabani, UDP, Максим Горпиніч, Agnieszka C, VfBFan, Blueberry, ojppe, Francisco Serrador, Aindriú Mac Giolla Eoin, Fjuro, Любомир Василев, Frank Paul Silye, Temuri Doghonadze, Yuri Chornoivan, Sergio Granadoz, Sketch6580, Hyeonjeong Lee, 為什麼不加空格, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), justcontributor, Kristijan "Fremen" Velkovski, Pierfrancesco Passerini, Besnik Bleta, Arif Budiman, Andi Chandler, jernejp21, Manuela Silva, Sjur N Moshagen, Abduqadir Abliz, Laitei, Кирилл Ванин, Matthaiks, Nozomu Matsui, Dick Groskamp, MrZwave, hoanghuy309, Jim Spentzos, Adam Havránek, Ricky Tigg, Christian Wia, ButterflyOfFire

文档贡献

Michal Čihař, Gersona, Karen Konou, AliceVisek

All changes in detail.