Ghost Release: 1.2.0

TL;DR

Ghost 1.2.0: Primary Tag Feature & SEO Improvements

Ghost 1.2.0 introduces the new Primary Tag feature, allowing content creators to specify which tag should be prioritized in URLs and metadata. This release also includes significant SEO improvements for paginated archives, fixes for theme downloads involving symlinks, and resolves an issue with ownership transfer. These updates enhance content organization capabilities while improving the platform's stability and search engine optimization.

Highlight of the Release

• New Primary Tag feature for better content organization
• Improved SEO meta titles for paginated archives
• Fixed theme download issues with symlinked directories
• Resolved security vulnerability in ownership transfer
• Updated documentation with trademark policy information

Migration Guide

Ghost 1.2.0 doesn't require any specific migration steps for most users. The update process follows the standard Ghost upgrade procedure:

1. Back up your Ghost installation
2. Update your Ghost installation using the Ghost-CLI or your preferred method
3. Restart your Ghost instance

For developers working with the API: Note that the Post API now returns a primary_tag field. If you have custom themes or applications that work with the Ghost API, you may want to update them to take advantage of this new field.

For site administrators who have transferred ownership: This update fixes issues with ownership transfer, but no manual action is required on your part.

Upgrade Recommendations

Upgrade Priority: Medium

We recommend all Ghost users upgrade to version 1.2.0, especially if you:

• Use multiple tags on posts and would benefit from the primary tag feature
• Have experienced issues with downloading themes that use symlinks
• Have transferred or plan to transfer site ownership
• Care about SEO optimization for paginated archives

This release contains important bug fixes and security improvements, along with useful new features that enhance content organization. The update process should be straightforward with no breaking changes reported.

Bug Fixes

• Fixed Symlink Resolution in Theme Downloads (#8780): Resolved an issue where downloading themes with symlinked directories would result in empty zip files. The system now properly resolves symlinks using fs.realPathSync before building the zip file, ensuring all theme files are correctly included.

• Fixed Ownership Transfer (#8784): Addressed a security vulnerability where transferring ownership could potentially allow the setup process to be run multiple times. The fix ensures that blog setup status is now correctly determined by whether the owner is locked, rather than relying on a specific owner ID. This prevents potential security issues after ownership transfers.

New Features

Primary Tag Feature

Ghost now supports the concept of a Primary Tag for posts. This feature allows content creators to specify which tag should be considered the main or primary tag for a post when multiple tags are applied. The primary tag is:

• Returned in the Post API responses
• Supported in URL structures
• Used for better content organization and categorization

This enhancement (referenced in issue #8668) gives content creators more control over how their content is organized and presented, especially in tag archives and URLs.

Security Updates

Ownership Transfer Security Fix (#8784): Fixed a security vulnerability in the ownership transfer process. Previously, the system determined if a blog was set up based on the owner ID being '1', which could be bypassed after ownership transfer. The fix changes this logic to check if the owner is locked instead, preventing potential unauthorized access to the setup process after ownership changes.

Performance Improvements

While this release doesn't include specific performance-focused changes, several of the improvements contribute to better overall system efficiency:

• The symlink resolution fix ensures more reliable theme downloads without unnecessary processing errors
• Improved SEO meta title handling for paginated archives optimizes how Ghost generates these important elements
• Core Ember dependencies have been updated, which may include performance improvements from the underlying framework

Impact Summary

Ghost 1.2.0 delivers meaningful improvements to content organization through the new Primary Tag feature, while also enhancing SEO capabilities with better meta titles for paginated archives. The release addresses important security concerns related to ownership transfer and fixes technical issues with theme downloads involving symlinks.

For content creators and site administrators, this update provides more control over content organization and improves SEO without requiring significant workflow changes. Developers gain access to primary tag data through the API and benefit from more reliable theme download functionality.

The security fix for ownership transfer is particularly important for multi-user Ghost installations where administrative responsibilities might change hands. Overall, this release represents a solid improvement to Ghost's feature set and stability without introducing breaking changes.

Full Release Notes