Ghost Release: 2.7.0

TL;DR

Ghost 2.7.0 introduces a new configuration controller in the v2 API and fixes several critical bugs related to permissions, redirects, and webhooks. This release enhances the user experience for both administrators and content creators by improving multi-author workflows, fixing import functionality issues, and ensuring proper redirects for static resources. The update also addresses permission issues for contributors and co-authors, making the platform more secure and reliable for collaborative content creation.

Highlight of the Release

• Added new configuration controller to v2 API
• Fixed permission issues for multi-author content editing
• Improved handling of static resources and redirects
• Fixed site changed webhook for scheduled posts
• Enhanced importer functionality for draft posts

Migration Guide

No specific migration steps are required for this update. The release primarily consists of bug fixes and enhancements that should work seamlessly after updating.

To update to Ghost 2.7.0:

1. Back up your Ghost installation and database
2. Follow the standard Ghost update procedure for your installation method (CLI, Docker, or manual installation)
3. Verify that all functionality works as expected after the update

Upgrade Recommendations

This update is recommended for all Ghost users, especially those who:

• Use multi-author collaboration features
• Rely on webhooks for site updates
• Import content regularly
• Use static resources in themes
• Have contributors working on content

The bug fixes in this release address several important issues related to permissions, webhooks, and content management that improve the overall stability and security of your Ghost installation.

Bug Fixes

Multi-author Permissions

• Fixed edit permission issues for articles with multiple authors, ensuring proper collaboration workflows
• Fixed a security issue where contributors could delete draft posts when listed as co-authors

Import Functionality

• Removed incorrect user reference warnings from the importer report when importing draft posts
• Fixed the count of invalid records when importing single-column CSV files of subscribers

Redirects and Resources

• Fixed auto-redirect functionality for extra data queries on post and page resources
• Improved handling of included relations when a static resource is a post or page
• Renamed API → Api for v2 auth logic for better consistency

Webhooks

• Fixed site changed webhook not being triggered for scheduled posts by allowing all versions of the API to emit events in case of cache invalidation

New Features

Configuration Controller for v2 API

Ghost 2.7.0 introduces a new configuration controller to the v2 API, expanding the capabilities available to developers and administrators. This addition provides more programmatic access to Ghost configuration settings through the API.

Theme Directory Links

New theme directory links have been added to Ghost Admin, making it easier for administrators and theme developers to navigate and manage theme resources.

Security Updates

Permission Control Improvements

Fixed a security-related issue where contributors could delete draft posts when listed as co-authors. This ensures that only users with appropriate permissions can modify or delete content, maintaining proper content security and access control.

Performance Improvements

No specific performance improvements were highlighted in this release. The focus appears to be on feature additions and bug fixes rather than performance optimizations.

Impact Summary

Ghost 2.7.0 delivers important improvements to multi-author workflows, API capabilities, and content management. The addition of the configuration controller to the v2 API expands developer options, while numerous bug fixes enhance the platform's reliability.

Key improvements include fixing permission issues for multi-author content, ensuring webhooks trigger properly for scheduled posts, and improving the handling of static resources and redirects. The update also addresses import functionality issues, particularly for draft posts and subscriber imports.

These changes collectively make Ghost more robust for collaborative content creation and provide developers with better tools for extending and integrating with the platform.

Full Release Notes