Kanboard - Package Updates
-
[1.14.1]
- Update Kanboard to 1.2.19
- Trim user agent for RememberMe sessions because MySQL use a varchar(255) column
- Fixed createLdapUser API procedure when LDAP groups are not configured
- Write RememberMe cookie only after the two-factor code has been validated
- Avoid warning when removing a plugin zip archive
- Add new hook model:task:duplication:aftersave
- Bump symfony/stopwatch from 5.2.3 to 5.2.4
- Bump pimple/pimple from 3.3.1 to 3.4.0
- Bump gregwar/captcha from 1.1.8 to 1.1.9
- Added new analytic component: "Estimated vs actual time per column"
- Do not retain any changes between shared plugins variables
- Display number of tasks according to filter
- Add support for LDAP protocol/host/port configuration by URL; make BASE_DN optional
- Use an absolute file path in AssetHelper class for css() & js() functions
- Add IP address to authentication error logs
- Add interpolation expressions to e-mail subject in automatic action "Send a task by email to someone"
- Add Hungarian Forint to the list of currencies
-
[1.14.2]
- Update Kanboard to 1.2.20
- Duplicate tags when moving or duplicating tasks to another project
- Bump symfony/stopwatch to 5.3.0
- Avoid user enumeration by using avatar image URL
- Invalidate captcha after it is used
- Avoid user enumeration using password reset functionality
- Add missing CSRF checks
- Fix bug in search when using the plus sign
- Close dialogs using Escape key even if focus is in input field
- Add a min="0" attribute to task_list form input
- Keep swimlane headers at the top
- Catch error when trying to upload empty or invalid avatar image
- Added new template hooks
- Update translations
-
[1.14.3]
- Update Kanboard to 1.2.21
- Full changelog
- Fix and update Composer autoload
- Add plugin hook for document attachments
- Improve board column header alignment
- Ignore project_id for file attachments download URL (already checked elsewhere)
- Update translations
- Clarify meaning of LDAP_USER_CREATION in config.default.php
- Fix wrong internal link when converting a subtask to task (MySQL only)
- Use the overridable Markdown parser for previews
- Update call_user_func_array() calls to be compatible with PHP 8
- Enable external group synchronization deactivation
- Fix tooltip shifting on long descriptions
- Add position argument to API procedure updateSubtask()
- Bump Docker image to Alpine 3.15.0
- Bump symfony/stopwatch to 5.4.0
- Bump pimple/pimple to 3.5.0
-
[1.14.5]
- Update Kanboard to 1.2.22
- Full changelog
- Remove project_id from task URLs
- Update da_DK translations
- Add automatic action to set the due date when the task is moved away from a specific column
- Condense wording on inferred action and update translations
- Add EVENT_CREATE and EVENT_CREATE_UPDATE events to TaskMoveColumnCategoryChange action
-
[1.14.6]
- Update Kanboard to 1.2.23
- Full changelog
- Open SVG, Ogg, and some video file attachments in browser
- Added more video, music, code and spreadsheet extensions to show better file attachment icons
- Updated jQuery to latest stable version
- Updated Docker image to PHP 8.1 and Alpine Linux 3.16
- Renamed default branch from master to main
- Bumped phpunit/phpunit from 9.5.14 to 9.5.23
- Bumped symfony/finder from 5.4.3 to 5.4.11
- Fixed subtask translation when using different languages
- Added Project Overview document template hook
- Updated translations
- Fixed wrong foreign key constraint on table subtask_time_tracking table. The constraints references a no-longer-existing table task_has_subtasks
- Fixed regression regarding subtask reordering
-
[1.14.7]
- Update Kanboard to 1.2.24
- Full changelog
- Fixed deprecation warnings when a project or a task description is null
- Fixed missing condition in TaskAssignDueDateOnMoveColumn action
- Fixed Reopening of dropdown menus
- Fixed internal link creation on subtask to task conversion if language is not English
- Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data
- Set explicitly the time picker control to select instead of slider
-
[1.15.1]
- Update Kanboard to 1.2.26
- Full changelog
- Fire events after TaskMoveColumnOnDueDate action
- Update date parsing logic to be compatible with PHP 8.2
- Fix potential XSS on the Settings / API page
- Use wildcard operator for tag filter
- Fix broken user mentions in popup comment form
-
[1.15.2]
- Update Kanboard to 1.2.27
- Full changelog
- Fix category filter when the category name is a number
- Better handling of max file upload size according to PHP settings
- Add dropdown menu on the board to reorder tasks by ID
- Separate font-family specification for input and textarea. This avoids the use of !important in custom CSS
- Change the total number of tasks displayed in the table header to match the description "Total number of tasks in this column across all swimlanes"
- Allow full name to be retrieved by the reverse proxy authentication
- Fix pull-right CSS class alignment
- Use a separate dropdown menu for column sorting
-
[1.15.3]
- Update Kanboard to 1.2.28
- Full changelog
- Trigger
EVENT_MOVE_COLUMNevent when moving task to another swimlane - Allow moving closed tasks when using the API
- Duplicate external links when duplicating tasks
- Add support for comparison operator to priority filter
- Prevents users to convert subtaks to tasks when custom role does not allow it
- Avoid deprecation messages when sending an email with PHP 8.2
- Declare most common routes to have nice URLs
- Improve wording of bulk action modal to move tasks position
- Allow closing modals by clicking on the background
-
[1.15.4]
- Update Kanboard to 1.2.29
- Full changelog
- Avoid potential clipboard based cross-site scripting (CVE-2023-32685)
- Add themes support: dark, light and automatic mode
- Fix broken "Hide this Column" feature
- Do not close modals when clicking on the background if the form has changed
- Fix incorrect route for "My Activity Stream"
- Fix incorrect parameter encoding when using URLs rewriting
- Add support for task links in Markdown headings
- Handle 413 responses from Nginx when uploading files too large
-
[1.15.5]
- Update Kanboard to 1.2.30
- Full changelog
- CVE-2023-33956: Parameter based Indirect Object Referencing leading to private file exposure
- CVE-2023-33968: Missing access control allows user to move and duplicate tasks to any project in the software
- CVE-2023-33969: Stored XSS in the Task External Link Functionality
- CVE-2023-33970: Missing access control in internal task links feature
- Avoid PHP warning caused by session_regenerate_id()
- Avoid CSS issue when upgrading to v1.2.29 without flushing user sessions
-
[1.15.6]
- Update Kanboard to 1.2.32
- Full changelog
- Fix unexpected EventDispatcher exception in cronjob and during logout
- Integration Tests: Run apt update before installing Apache
- Automatic action TaskMoveColumnClosed does not log column movement
- Tweak Sqlite connection settings to reduce database locked errors
- Bump phpunit/phpunit from 9.6.9 to 9.6.10
-
[1.15.7]
- Update Kanboard to 1.2.33
- Update base image to 4.2.0
- Full changelog
- Do not close modals when clicking on the background
- Add Bulgarian translation
- Update Ukrainian and Russian translations
- Show the two factor form in the middle of the screen like the login form does
- Do not override the creator_id with the current logged user if the task is imported
- Add basic Dev Container configs
- Add adaptive SVG favicon and more SVG variants:
- Remove project_id from task links (A few were missed in #4892)
- Remove unused and invalid method in ProjectModel
- Update phpunit/phpunit and symfony/* dependencies
- Update vendor folder
-
[1.15.8]
- Update Kanboard to 1.2.34
- Full changelog
- API: Avoid PHP notice when searching for a project name that does not exist
- Update Bulgarian translation
- Bump symfony/console from 5.4.28 to 5.4.32
- Bump phpunit/phpunit from 9.6.13 to 9.6.15
