Ghost Release: 3.26.1

TL;DR

Ghost 3.26.1 is a maintenance release that fixes an issue with duplicate webhooks being created during members API configuration. This release ensures webhooks are created only once, preventing potential issues with duplicate webhook events. The update also includes several dependency updates and improvements to error handling in the magic link authentication flow.

Highlight of the Release

• Fixed issue with duplicate webhooks being created during members API configuration
• Improved error handling for magic link authentication failures
• Updated multiple dependencies to their latest versions
• Added cleanup functionality for previous webhooks to prevent duplicates

Migration Guide

No migration steps are required for this release. The update can be installed normally without any additional configuration changes.

Upgrade Recommendations

This release is recommended for all Ghost installations, especially those using the members feature with Stripe integration. The fix for duplicate webhooks prevents potential issues with duplicate events being processed and improves the overall stability of the members system.

To upgrade:

1. Back up your Ghost installation
2. Follow the standard Ghost update procedure
3. No additional configuration changes are required

Bug Fixes

• Fixed issue where webhooks were being created multiple times (#12075)
• Resolved problem with members-api being reconfigured too frequently when multiple stripe_connect_* settings are updated simultaneously
• Updated status code handling for sendMagicLink middleware failures to properly reflect the actual error

New Features

Enhanced Webhook Management

• Added functionality to clean up previous webhooks, ensuring no duplicates are created
• Implemented debouncing for members-api reconfiguration to prevent multiple instantiations

Security Updates

No specific security fixes were mentioned in this release. However, the dependency updates may include security patches from the respective packages.

Performance Improvements

• Implemented debouncing for members-api reconfiguration, reducing unnecessary API instantiations
• More efficient webhook management by preventing duplicate webhook creation
• Updated multiple dependencies to their latest versions for better performance and security

Impact Summary

Ghost 3.26.1 focuses on improving the stability and reliability of the members feature, particularly around webhook management with Stripe integration. The main fix prevents duplicate webhooks from being created when members settings are updated, which could previously lead to events being processed multiple times. This release also includes numerous dependency updates and improves error handling for the magic link authentication flow.

The changes are primarily under-the-hood improvements that enhance stability without changing the user interface or requiring any migration steps. Site administrators will benefit from more reliable webhook management, while developers should note the addition of coffeescript as a development dependency to support grunt-bg-shell functionality.

Full Release Notes