Dolibarr - Package Updates

[Package Updates]

[1.13.0]

• Update dolibarr to 23.0.0
• Full Changelog
• NEW: Need PHP 7.2 as minimum version
• NEW: Module datapolicy moved as stable (for anonimization features)
• NEW: #​31723 - Improve project overview: Hide paid orders (#​35524)
• NEW: #​35700 : Throw an error when validating a propal, order, supplier with a product no more in sale/purchase (#​35709)
• NEW: Accountancy - Accounting by payment type (#​34729)
• NEW: Accountancy - Add accounting for discounts (#​35977)
• NEW: Accountancy - Add a protection on various payment for auxiliary account on general account not centralized (#​35720)
• NEW: Accountancy - Add field centralized on import/export (#​35872)
• NEW: Accountancy - Add hook on export filename (#​35188)
• NEW: Accountancy - Add reconcile on general accounting account - SQL part (#​35994)

[Package Updates]

[1.13.1]

• Update cron_run_custom.php to reflect upstream and solve issue forum topic 15337

[Package Updates]

[1.13.2]

• Update dolibarr to 23.0.2
• Full Changelog
• FIX: #​37412 Better fix
• FIX: #​37461 #​37511 Accountancy - Bank journal - Problem of cache (#​37603)
• FIX: #​37482
• FIX: #​37551 Accounting - Use better rights on create / export entry (#​37555)
• FIX: #​37707
• FIX: #​37707 Can pay supplier invoices with the same parent company
• FIX: Accountancy - Need more information about mandatory step in various journal (#​37573)
• FIX: - Added user filtering for displaying leave in the calendar (#​37385)
• FIX: Add http code 503 on deadlock
• FIX: API Warehouse : Error 401 when getting warehouse by id (backport from 22)

[Package Updates]

[1.13.3]

• ensure install.lock persists after container restart

[Package Updates]

[1.13.4]

• Update dolibarr to 23.0.3
• Full Changelog
• FIX: #36589 (#38037)
• FIX: broken feature with api auth and Multicompany transverse mode (#37868)
• FIX: do not print Extrafields in PDF if printable is 0 (#37789)
• FIX: draft invoice paid when add absolute discount == remain to pay (#38104)
• FIX: IDOR on messaging.php - Credit Aksoum Abderrahmane
• FIX: Some remaining cross-customer object creation on API (proposal, orders) - Credit Mitch311
• FIX: Can use AI module to make SSRF call. Credit Dilip
• FIX: #GHSA-crgg-h74r-2m8r (#37636)
• FIX: SQL Injection via Operator Injection in Contract Service List
• SEC: Better sanitization param for GETPOST of htmlheader of website page - See commit bbbbb56

[Package Updates]

[1.14.0]

• set the default charset to utf8mb4
• See docs on how to migrate the charset of an existing instance

[james]

[1.14.2]

• FIX: run scheduled jobs as www-data so cron-created invoice folders are writable by the web UI

[Package Updates]

[1.14.3]

• fix automatic configuration of SMTP

[Package Updates]

[1.14.4]

• Update dolibarr to 23.0.4
• Full Changelog
• FIX: #32086 Notifications for Interventions ignores the email template (#38366)
• FIX: #32909 Restrict salary/HR field edit to authorized users (#39033)
• FIX: #36744 fix user can delete some actioncomm on which he has not the right
• FIX: #37327 There is no product description displayed in version 22 (#38267)
• FIX: API key cannot be cleared/revoked from user card (#38283)
• FIX: API - PUT/DELETE categories on thirdparties/contacts always returns 403 (#38354)
• FIX: Broken feature 'Generate Child Mo' (#39560)
• FIX: Holiday shown one day off in agenda for users in another timezone (#39465)
• FIX: Invoice clone ignores target entity when multicompany sharing is enabled (#38587)
• SEC: #39000 Escalation to admin when user has clone permission - credit Abderrahmane Aksoum on the fix commit

[Package Updates]

[1.15.0]

• Update dolibarr to 24.0.0
• Full Changelog
• Experimental module "Quick memo" to put post-it on any screens (#37422)
• New Stock transfer module stabilization and full functional coverage (#37557)
• Experimental MCP server and AI Assistant (#37888)
• FIX: Security permission on payment instead of create to create payment with API (credit Santosh Kumar Puppala) in commit ad8cd7c
• FIX: A lot of security fixes in API (more control for external users usage)
• Universal Search Syntax is required on all filter parameters of functions. Non USF filters are no more allowed.
• Old option PAYMENT_SECURITY_TOKEN_UNIQUE has been removed. Can edit the XXX_ONLINE_SIGNATURE_SECURITY_TOKEN from setup.
• Login API are off by default (API must be used with the bearer token). Must set API_ENABLE_LOGIN_API to have them enabled.
• Old deprecated module Paybox has been removed.
• Old deprecated module Deplacement has been removed.