Kanboard - Package Updates

[girish]

[1.13.0]

• Make php.ini customizable
• Fix screenshot links
• Add forum url to manifest

[girish]

[1.13.1]

• Update Kanbaord to 1.2.16
• Full changelog
• Update Composer dependencies
• Update translations
• Add link to toggle column scrolling in board view
• Add missing environment variables in php-fpm config
• Add setting that makes possible any new LDAP user to be Manager by default
• Add ARIA label to modal link with title attribute
• Add ARIA label to user mention
• Add ARIA label to letter avatars
• Add ARIA label to project select role without label
• Add ARIA label to dropdown autocomplete without label
• Add ARIA label to form text editor without label
• Add ARIA label to icons with title attributes
• Add ARIA label for form inputs without labels
• Add ARIA label for elements with titles
• Add hidden accessible form input labels
• Add hidden accessible titles
• Hide user name from screen readers
• Correct table collapsed column titles
• Prevent the original page from being modified by the opened link
• Allow email to be retrieve by SSO ReverseProxy
• Fix grammatically incorrect error message
• Add option to configure SMTP HELO name
• Add new config parameter SESSION_HANDLER
• Fix clearing of all Javascript storage
• Added standard notification footer to comment email template

[girish]

[1.13.2]

• Do not sync user's role from LDAP

[nebulon]

[1.13.3]

• Update Kanboard to 1.2.17
• Fix grammatical errors
• Add autocomplete attribute to HTML forms
• Added "Mexican Peso" to the list of currencies
• Added an option to send a copy of all generated e-mails to a BCC address
• Don't force role of users if no LDAP groups defined
• Keep the tags when converting a subtask to task
• Bump symfony/stopwatch from 5.1.8 to 5.2.0
• Bump pimple/pimple from 3.3.0 to 3.3.1
• Bump symfony/stopwatch from 5.2.0 to 5.2.1
• Publish Docker images to GitHub container registry in addition to Docker Hub
• Use Github Actions to publish Docker images
• Check if the user is assigned to any role in the project
• Fix tasks.swimlane_id foreign key for Sqlite
• Remove unused namespaces
• Add mk_MK (Macedonian) translation
• Update translations

[girish]

[1.13.4]

• Update Kanbaord to 1.2.18
• Changelog
• Add missing pt_br translations
• Update ja_JP translations

[girish]

[1.14.0]

• Update base image to v3
• Update PHP to 7.4

[nebulon]

[1.14.1]

• Update Kanboard to 1.2.19
• Trim user agent for RememberMe sessions because MySQL use a varchar(255) column
• Fixed createLdapUser API procedure when LDAP groups are not configured
• Write RememberMe cookie only after the two-factor code has been validated
• Avoid warning when removing a plugin zip archive
• Add new hook model:task:duplication:aftersave
• Bump symfony/stopwatch from 5.2.3 to 5.2.4
• Bump pimple/pimple from 3.3.1 to 3.4.0
• Bump gregwar/captcha from 1.1.8 to 1.1.9
• Added new analytic component: "Estimated vs actual time per column"
• Do not retain any changes between shared plugins variables
• Display number of tasks according to filter
• Add support for LDAP protocol/host/port configuration by URL; make BASE_DN optional
• Use an absolute file path in AssetHelper class for css() & js() functions
• Add IP address to authentication error logs
• Add interpolation expressions to e-mail subject in automatic action "Send a task by email to someone"
• Add Hungarian Forint to the list of currencies

[nebulon]

[1.14.2]

• Update Kanboard to 1.2.20
• Duplicate tags when moving or duplicating tasks to another project
• Bump symfony/stopwatch to 5.3.0
• Avoid user enumeration by using avatar image URL
• Invalidate captcha after it is used
• Avoid user enumeration using password reset functionality
• Add missing CSRF checks
• Fix bug in search when using the plus sign
• Close dialogs using Escape key even if focus is in input field
• Add a min="0" attribute to task_list form input
• Keep swimlane headers at the top
• Catch error when trying to upload empty or invalid avatar image
• Added new template hooks
• Update translations

[nebulon]

[1.14.3]

• Update Kanboard to 1.2.21
• Full changelog
• Fix and update Composer autoload
• Add plugin hook for document attachments
• Improve board column header alignment
• Ignore project_id for file attachments download URL (already checked elsewhere)
• Update translations
• Clarify meaning of LDAP_USER_CREATION in config.default.php
• Fix wrong internal link when converting a subtask to task (MySQL only)
• Use the overridable Markdown parser for previews
• Update call_user_func_array() calls to be compatible with PHP 8
• Enable external group synchronization deactivation
• Fix tooltip shifting on long descriptions
• Add position argument to API procedure updateSubtask()
• Bump Docker image to Alpine 3.15.0
• Bump symfony/stopwatch to 5.4.0
• Bump pimple/pimple to 3.5.0

[girish]

[1.14.4]

• Better apache configs

[nebulon]

[1.14.5]

• Update Kanboard to 1.2.22
• Full changelog
• Remove project_id from task URLs
• Update da_DK translations
• Add automatic action to set the due date when the task is moved away from a specific column
• Condense wording on inferred action and update translations
• Add EVENT_CREATE and EVENT_CREATE_UPDATE events to TaskMoveColumnCategoryChange action

[nebulon]

[1.14.6]

• Update Kanboard to 1.2.23
• Full changelog
• Open SVG, Ogg, and some video file attachments in browser
• Added more video, music, code and spreadsheet extensions to show better file attachment icons
• Updated jQuery to latest stable version
• Updated Docker image to PHP 8.1 and Alpine Linux 3.16
• Renamed default branch from master to main
• Bumped phpunit/phpunit from 9.5.14 to 9.5.23
• Bumped symfony/finder from 5.4.3 to 5.4.11
• Fixed subtask translation when using different languages
• Added Project Overview document template hook
• Updated translations
• Fixed wrong foreign key constraint on table subtask_time_tracking table. The constraints references a no-longer-existing table task_has_subtasks
• Fixed regression regarding subtask reordering

[girish]

[1.14.7]

• Update Kanboard to 1.2.24
• Full changelog
• Fixed deprecation warnings when a project or a task description is null
• Fixed missing condition in TaskAssignDueDateOnMoveColumn action
• Fixed Reopening of dropdown menus
• Fixed internal link creation on subtask to task conversion if language is not English
• Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data
• Set explicitly the time picker control to select instead of slider

[girish]

[1.14.8]

• Update Kanboard to 1.2.25
• Full changelog
• Update links to the new documentation website
• Update German translation

[girish]

[1.15.0]

• Update base image to 4.0.0

[girish]

[1.15.1]

• Update Kanboard to 1.2.26
• Full changelog
• Fire events after TaskMoveColumnOnDueDate action
• Update date parsing logic to be compatible with PHP 8.2
• Fix potential XSS on the Settings / API page
• Use wildcard operator for tag filter
• Fix broken user mentions in popup comment form

[girish]

[1.15.2]

• Update Kanboard to 1.2.27
• Full changelog
• Fix category filter when the category name is a number
• Better handling of max file upload size according to PHP settings
• Add dropdown menu on the board to reorder tasks by ID
• Separate font-family specification for input and textarea. This avoids the use of !important in custom CSS
• Change the total number of tasks displayed in the table header to match the description "Total number of tasks in this column across all swimlanes"
• Allow full name to be retrieved by the reverse proxy authentication
• Fix pull-right CSS class alignment
• Use a separate dropdown menu for column sorting

[girish]

[1.15.3]

• Update Kanboard to 1.2.28
• Full changelog
• Trigger EVENT_MOVE_COLUMN event when moving task to another swimlane
• Allow moving closed tasks when using the API
• Duplicate external links when duplicating tasks
• Add support for comparison operator to priority filter
• Prevents users to convert subtaks to tasks when custom role does not allow it
• Avoid deprecation messages when sending an email with PHP 8.2
• Declare most common routes to have nice URLs
• Improve wording of bulk action modal to move tasks position
• Allow closing modals by clicking on the background

[girish]

[1.15.4]

• Update Kanboard to 1.2.29
• Full changelog
• Avoid potential clipboard based cross-site scripting (CVE-2023-32685)
• Add themes support: dark, light and automatic mode
• Fix broken "Hide this Column" feature
• Do not close modals when clicking on the background if the form has changed
• Fix incorrect route for "My Activity Stream"
• Fix incorrect parameter encoding when using URLs rewriting
• Add support for task links in Markdown headings
• Handle 413 responses from Nginx when uploading files too large

[nebulon]

[1.15.5]

• Update Kanboard to 1.2.30
• Full changelog
• CVE-2023-33956: Parameter based Indirect Object Referencing leading to private file exposure
• CVE-2023-33968: Missing access control allows user to move and duplicate tasks to any project in the software
• CVE-2023-33969: Stored XSS in the Task External Link Functionality
• CVE-2023-33970: Missing access control in internal task links feature
• Avoid PHP warning caused by session_regenerate_id()
• Avoid CSS issue when upgrading to v1.2.29 without flushing user sessions