Kanboard - Package Updates

[Package Updates]

[1.16.5]

• Update kanboard to 1.2.42
• Full Changelog
• fix: validate translation filename before loading locales
• fix: avoid path traversal in FileStorage
• feat: add Peruvian Sol to the list of currencies
• build(deps): bump symfony/finder from 5.4.43 to 5.4.45
• build(deps-dev): bump symfony/stopwatch from 5.4.40 to 5.4.45

[Package Updates]

[1.16.6]

• checklist added to CloudronManifest

[Package Updates]

[1.16.7]

• Update kanboard to 1.2.43
• Full Changelog
• fix: verify the session hasn't expired before returning data
• fix: avoid PHP 8.4 deprecation notices in third-party libraries
• fix: avoid Composer warnings regarding PSR compatibility
• feat(locale): add missing Brazilian Portuguese translations

[Package Updates]

[1.16.8]

• Update kanboard to 1.2.44
• Full Changelog
• fix: prevent internal task titles from wrapping under the dropdown menu icon
• feat(locale): update Greek and French translations
• feat: display tag color squares next to their names in project and global settings
• feat: enable bulk addition/removal of internal links
• feat: provide an option to add tags without replacing existing ones during bulk operations

[Package Updates]

[1.17.0]

• Update base image to 5.0.0

[Package Updates]

[1.17.1]

• Update kanboard to 1.2.45
• Full Changelog
• refactor: reuse existing helpers in tasks import form
• fix(filter): handle null input in the Lexer class
• fix(api): allow and validate creator ID assignment in task creation
• feat(routes): add view routes for project and task file browsing
• feat(locale): update all language files using machine translation
• feat(api): add priority fields to createProject and updateProject procedures
• feat: allow attaching screenshots and files when creating a task
• feat: add task title to overdue notification title

[Package Updates]

[1.17.2]

• Update kanboard to 1.2.46
• Full Changelog
• fix(security): prevent potential Host header injection via SERVER_NAME
• fix: make various PHP 8.x compatibility changes
• fix: avoid Implicitly nullable parameter declarations errors in PHP 8.4
• feat: validate plugin archive URL before downloading
• feat: show CAPTCHA on login form regardless of user existence
• feat: add new option to enable notifications by default for new users
• feat: add healthcheck endpoint healthcheck.php, and new Docker Compose files for MariaDB, Postgres, and SQLite
• feat: add TRUSTED_PROXY_HEADERS config option
• chore!: PHP 8.1 is now the minimum version supported

[Package Updates]

[1.17.3]

• Update kanboard to 1.2.47
• Full Changelog
• refactor: add namespace to test files
• fix: the $escape parameter must be provided in PHP 8.4 for CSV functions
• fix: sanitize and validate uploaded files path
• fix: do not load RememberMeAuth provider when REMEMBER_ME_AUTH is false
• fix: avoid PHP warning when external user creation is disabled
• feat!: remove file cache driver to avoid using unserialize()
• feat!: ignore legacy events serialized with PHP due to potential security issues
• feat: add new actions: TaskAssignCurrentUserColumnIfNoUserAlreadySet and TaskAssignToUserOnCreationInColumn
• feat: Add new pdf() method in Core\Http\Response

[Package Updates]

[1.17.4]

• Update kanboard to 1.2.48
• Full Changelog
• fix: handle Windows-style paths in sanitize_path function
• feat(locale): added missing German translation phrases
• feat(locale): added Arabic translation
• feat(api): add board, rss and ical public links to the API response
• feat: display sub-tasks completion in numbers (x/y) alongside percentage
• feat: add basic support for right-to-left (RTL) languages

[Package Updates]

[1.17.5]

• Update kanboard to 1.2.49
• Full Changelog
• fix(ldap): ensure LDAP placeholders are escaped
• fix: restore Ctrl+Enter submission on the task creation form
• feat(locale): update translations
• feat: prevent protocol-relative URL redirects after login
• feat: block private network access for external web link (configurable)
• feat: add TRUSTED_PROXY_NETWORKS config option