Easy!Appointments - Package Updates

[girish]

[1.0.4]

• Update base image

[girish]

[1.1.0]

• Update Easy!Appointments to 1.4.3
• Full changelog
• #1208: Security configuration enhancements in the application.
• #1209: Add support for PHP 8.1.
• #1207: Replace CodeIgniter with the system directory for smaller package size and more control over the framework.
• #1210: Move the change language operation into a new public controller.
• #1212: Remove the Google Calendar read-only scope use as it is not needed.

[girish]

[1.2.0]

• Update base image to 4.0.0

[girish]

[1.3.0]

• Email display name support

[girish]

[1.4.0]

• Update base image to 4.2.0

[nebulon]

[1.5.0]

• Update Easy!Appointments to 1.5.0
• Full changelog

[Package Updates]

[1.5.1]

• Update easyappointments to 1.5.1
• Full Changelog
• Add support for PHP 8.4 (#​1640)
• Add new secret token header field to webhooks and default to X-EA-Token (#​1607)
• Add company colors to notifications (#​1569)
• Add Albanian Language Translations (#​1646)
• Fix the date parsing issue on Safari web browsers during the booking process (#​1584)
• Fix working plan configuration am/pm hour parsing so that it works in all languages (#​1606)

[Package Updates]

[1.6.0]

• checklist added to manifest

[Package Updates]

[1.7.0]

• Update base image to 5.0.0
• Update PHP to 8.3

[Package Updates]

[1.7.1]

• Update easyappointments to 1.5.2
• Full Changelog
• Fix the GTag script URL html rendering (#​1666)
• Fix the "Load More" JS error in secretaries page (#​1677)
• Fix the PHP compatibility error of the appointments index API endpoint (#​1678)
• Catch individual email delivery exceptions (#​1670)
• Apply permission checks to the appointment and unavailability search (#​1753)
• Make sure the sync button is visible on provider log in (#​1749)
• Update unavailable dates after applying appointment data while rescheduling (#​1662)
• Make sure that any-provider does not include hidden providers while generating availability (#​1733)
• Provide "text" version of the emails in addition to HTML (#​1711)
• Trigger webhook requests when managing records via the API (#​1676)

[Package Updates]

[1.7.2]

• symlink HTMLPurifier cache path

[Package Updates]

[1.8.0]

• Update easyappointments to 1.6.0
• Full Changelog
• Added request method check on each request so that only allowed methods are accepted
• Add Jitsi integration and link generation for appointments made via the public page
• ALTCHA integration added as an alternative CAPTCHA step (#1155)
• When someone clicks on password reset, implement a link delivery and not just change the password directly
• Implementation of additional GDPR features in Easy!Appointments (#535)
• Add CAPTCHA support for all the public forms in order to block abusive requests (#1754)
• Replace the availabilities type with the new slot interval field
• Fixed a security issue where an administrator could inject scripts into the "booking disabled" message that would then run for every visitor of the public booking page
• Fixed a security issue where a provider could create or modify appointments under another provider's account
• Webhooks are now triggered only for the exact actions they are subscribed to, instead of matching similarly named actions by substring

[Package Updates]

[1.8.1]

• Update easyappointments to 1.6.1
• Full Changelog
• A CalDAV section under Settings / Integrations, where the connection URLs that may point into the local network are listed
• The calendar page now explains why a CalDAV synchronization failed and what has to be corrected, instead of only reporting that it did
• Connecting to a CalDAV server on a local network now offers to allow its host right in the connection dialog, instead of requiring a trip to the settings; the host is only remembered once the connection actually works
• Changing the password in the account settings page now requires the current password, so that a stolen session alone cannot be used to take over the account
• Removing every provider from a service on the services page is now saved, instead of silently keeping the previous provider assignments (#1965)
• A failing Google Calendar synchronization no longer removes the local appointments of the sync period, so an expired token, a quota limit or an unreachable API only interrupts the sync
• Security: The Google Calendar API requests now verify the TLS certificate of the remote endpoint
• Security: CalDAV connections no longer follow redirects or server links to other hosts, and no longer reach private addresses through IPv6 transition addresses or a DNS answer that changes after the check
• Searching the LDAP directory now escapes the keyword, so a search term can no longer alter the LDAP filter
• Security: Updated the Guzzle HTTP client and the phpseclib library to their patched releases, fixing outbound request and certificate handling advisories that affected the webhook, CalDAV and Google Calendar integrations