Apostrophe 3.15.0

[agilbert]

Hi everyone,

Happy to share that we've published the latest Apostrophe release this week. Apostrophe 3.15.0 introduces a few fixes along with a new feature to enable login throttling. You can read more about how to configure this behavior here. Combined with our recent releases for 2FA and reCAPTCHA support, we're excited about the possibility of enabling a much more secure authentication system for your Apostrophe sites.

In two weeks, we'll have a bunch of new things to share including:

• functional testing tools (see cypress-tools for our work in progress on this)
• optimized behavior for bundling front-end assets
• new caching mechanisms

Stay tuned!

For now, the full release notes are below. Have a great night 🌚

Apostrophe 3.15.0

• 3.15.0 throttles login requests for the same username to make password and 2FA attacks more difficult. The throttling is applied to additional login requirements like @apostrophecms/login-totp as well as the login form itself.
• Earlier this week hotfixes were made for a bug impacting replication of parked pages between locales, and a regression introduced in the first fix (3.14.1, 3.14.2). These fixes are of course also included in 3.15.0.