Weblate 2026.6

尚未發佈。

新功能

改進

漏洞修復

  • Hardened POST /api/screenshots/ access checks against private project enumeration.

  • Searching for strings with content changes without a recorded author now supports changed_by:"".

  • Project and category language translation sessions now keep strings grouped by component priority and show component switch warnings reliably.

相容性

升級

請按照 通用升級指示 來執行升級。

貢獻者

All changes in detail.

Weblate 2026.5

Released on May 15th 2026.

新功能

  • Added MDX files support for translating Markdown text while preserving JSX syntax, with 檔案格式參數 shared with Markdown 檔案 for line wrapping, code blocks, front matter, and placeholder handling.

  • Added extended LLM translation context for automatic suggestions, covering string context, explanations, secondary-language translations, plurals, failing checks, and placeholders.

  • Added a digest-only translation activity summary notification, see 通知.

  • CSV and XLSX downloads in 下載翻譯 now export plural strings as separate plural-form rows that can be imported back.

  • Added Gettext PO and POT 檔案格式參數 to control whether Weblate updates the Language-Team, Last-Translator, X-Generator, and Report-Msgid-Bugs-To headers.

  • Added a backup to run configured backup services synchronously.

  • The translation memory lookup API can now skip fuzzy matching with the exact query parameter.

  • Added Translation files CDN to publish translation files to the configured CDN.

改進

  • Using DOS line endings can now be configured using the dos_eol 檔案格式參數.

  • OpenAI and Alibaba no longer require their vendor Python SDKs.

  • Audited project and component setting changes are now recorded in history.

  • Gerrit review pushes now use 推送分支 as the target branch.

  • Weblate now checks whether CACHE_DIR allows executing generated helper files.

  • The Software Bill of Material is now generated during release and published as a versioned release asset instead of being stored in the source repository.

  • The translating page now separates screenshots from string information, collapses rarely used string details, and groups glossary and screenshot actions more consistently.

  • Project access management now paginates users and better explains site-wide automatic team assignments.

  • Added provider-oriented code hosting documentation and Gettext-style 複數公式 guidance.

  • The Python wheel no longer ships source translation catalogs, test files, or deployment example files, reducing the installed package size.

  • The engage page now highlights actionable translation task buckets for newcomers.

  • RSS feeds can now use the same filters as the changes browsing page.

  • Update gettext template (Django) now supports gettext PO files used as templates when they are excluded by the language filter.

  • Reworked Weblate 威脅模型 into a contract-style document.

漏洞修復

  • Hardened search previews and 自動建議 suggestion origins against XSS, and stopped exposing database error details in upload failures (CVE 2026-45106 / GHSA-6wxc-8mgq-w26m).

  • Screenshot URL uploads, remote HTML extraction in JavaScript 在地化 CDN, and URL health-check redirects now reject internal or non-public targets by default.

  • Gerrit review pushes now reject target branches containing push options, track the target branch before invoking git-review, and suggest short branch names when full refs are supplied.

  • Category 公告 no longer appear across the whole project, and translation announcement deletion now honors language-scoped permissions.

  • Merge request pushes now refresh stale fork remotes after changing repository hosting.

  • Plural counts parsed from translation file headers are now bounded, and plural formulas are rejected when they can evaluate outside the configured plural form range.

  • 個別專案存取權杖 expiring today now remain valid until the end of the day.

  • Malformed ALTCHA CAPTCHA submissions and repository URLs in webhook payloads no longer cause server errors.

  • 佔位符號 now merges overlapping non-nested spans from multiple flags.

  • 備份和移動 Weblate logs no longer include OpenSSH post-quantum key exchange warnings from remote Borg connections.

  • Category repository paths are now handled more safely during cleanup and moves.

  • Locked component pages now show an unsubscribe action after subscribing to unlock notifications.

  • 專案層級備份 imports now restore in the background to avoid web worker memory limits.

相容性

  • The dos-eol flag is no longer supported. Use the dos_eol 檔案格式參數 instead.

  • The registration CAPTCHA now uses the ALTCHA widget v3 protocol with Argon2id proof-of-work.

  • The set_language_team project attribute has been replaced with the po_set_language_team file format parameter at the component level; see 檔案格式參數.

  • Weblate now uses calendar versioning for releases, see 發佈週期.

  • Weblate now uses stricter dependency version constraints to better control runtime environment.

升級

請按照 通用升級指示 來執行升級。

  • The ALTCHA_MAX_NUMBER setting has been replaced by ALTCHA_COST, ALTCHA_MEMORY_COST, and ALTCHA_PARALLELISM; please adjust your settings accordingly.

  • The upgrading policy was changed, and upgrades are only supported from the current or previous calendar year.

  • The COMMENT_CLEANUP_DAYS and SUGGESTION_CLEANUP_DAYS settings are migrated once to site-wide 陳舊評論移除 and 陳舊建議移除 add-ons; configure those add-ons instead.

貢獻者

程式碼貢獻

Michal Čihař, Karen Konou, AliceVisek, Gersona, Weblate CI

翻譯貢獻

이정희, Andrei Stepanov, Milo Ivir, ssantos, 大王叫我来巡山, Kaya Zeren, reducedradius, Peter Vančo, amano, Michal Čihař, Anucha Hlownonkor, Yaron Shahrabani, UDP, Максим Горпиніч, Agnieszka C, VfBFan, Blueberry, ojppe, Francisco Serrador, Aindriú Mac Giolla Eoin, Fjuro, Любомир Василев, Frank Paul Silye, Temuri Doghonadze, Yuri Chornoivan, Sergio Granadoz, Sketch6580, Hyeonjeong Lee, 為什麼不加空格, ℂ𝕠𝕠𝕠𝕝 (𝕘𝕚𝕥𝕙𝕦𝕓.𝕔𝕠𝕞/ℂ𝕠𝕠𝕠𝕝), justcontributor, Kristijan "Fremen" Velkovski, Pierfrancesco Passerini, Besnik Bleta, Arif Budiman, Andi Chandler, jernejp21, Manuela Silva, Sjur N Moshagen, Abduqadir Abliz, Laitei, Кирилл Ванин, Matthaiks, Nozomu Matsui, Dick Groskamp, MrZwave, hoanghuy309, Jim Spentzos, Adam Havránek, Ricky Tigg, Christian Wia, ButterflyOfFire

文件貢獻

Michal Čihař, Gersona, Karen Konou, AliceVisek

All changes in detail.