<![CDATA[Leantime - Package Updates]]>You can use this thread to track updates to the Leantime package.

Please open issues in a separate topic instead of replying here.

]]>https://forum.cloudron.io/topic/9702/leantime-package-updatesRSS for NodeMon, 05 Oct 2026 17:55:38 GMTMon, 24 Jul 2023 16:28:43 GMT60<![CDATA[Reply to Leantime - Package Updates on Mon, 05 Oct 2026 08:40:15 GMT]]>[1.15.3]

  • Update leantime to 3.10.4
  • Full Changelog
  • Task History tab - Tasks have a History tab, and the email sender name is now configurable. (#3845)
  • Customisable kanban cards - Choose which fields appear on kanban cards and sort cards within columns. (#3846)
  • Smoother modals - Closing a modal no longer reloads the whole page. If nothing changed it simply closes; if you saved something, the page content refreshes in place and keeps your scroll position. Set LEAN_SOFT_RELOAD=false to restore the old full reload. (#3848, #1809, #2969)
  • Kanban column counts - Column counts are always visible instead of only on hover. (#3840)
  • Report numbers render correctly without the PHP intl extension, which is now included in the Docker images (#3838, #3843)
  • Dropped to-dos land at the time they were dropped and stay visible in the calendar (#3842)
  • File browser redirects correctly after deleting a file, and failed-login logs record the client IP (#3844)
  • Idea tags, running the scheduler before install, Helm chart and documentation fixes (#3837)
  • Editor, embeds and touch/mobile fixes (#3836)
  • Kanban, task table and timeline fixes (#3835)
]]>https://forum.cloudron.io/post/130467https://forum.cloudron.io/post/130467Mon, 05 Oct 2026 08:40:15 GMT<![CDATA[Reply to Leantime - Package Updates on Sun, 04 Oct 2026 10:40:46 GMT]]>[1.15.2]

  • Update leantime to 3.10.3
  • Full Changelog
  • Set LEAN_APP_URL - Password reset and invite emails now link only to a trusted app URL. If LEAN_APP_URL is not set, Leantime learns the URL the first time an owner or admin signs in (after 2FA). Until then, reset and invite emails are not sent, and admins see a banner explaining why. Setting LEAN_APP_URL is recommended. (#3826)
  • Plugin cron jobs now run - Console runs (schedule:run, bin/leantime) now load enabled plugins. Scheduled jobs from RecurringTasks, CalDAV, GoogleCalendar and others now actually run. Expect a catch-up on the first scheduler run after upgrading. (#3831)
  • Moving tickets between projects now clears a parent, milestone or sprint that belongs to the old project, and maps the status to the new project's equivalent. (#3832)
  • Health endpoint - GET /health for load balancers and uptime monitoring; it bypasses session and auth. (#3829)
  • Users added via the API/CLI without a password now receive an invite (#3822)
  • Timer stops when a ticket is moved to Done (#415)
  • Ticket detail tabs work again (#3807)
  • Portfolio pages render again (#3819)
  • Plugin scheduled jobs never ran from cron (#3831)
  • Email links (password reset, invites) are built from a trusted app URL and no longer from the request's Host header (#3826)
]]>https://forum.cloudron.io/post/130441https://forum.cloudron.io/post/130441Sun, 04 Oct 2026 10:40:46 GMT<![CDATA[Reply to Leantime - Package Updates on Sat, 03 Oct 2026 08:35:45 GMT]]>[1.15.1]

  • Update leantime to 3.10.1
  • Full Changelog
  • Personal Webhooks - Added personal webhook delivery for notifications. (#3799)
  • Beta Badge - Added a Beta badge variant for navigation menu items. (#3777)
  • Timezones - The PHP process now always runs in UTC and the user's timezone is applied explicitly. This fixes timestamps (comments, history, audit, files, canvas items, wiki) being stored in the viewer's local time, due-date buckets and quick-add dates near midnight, and calendar "Invalid DateTime" errors. (#3802, #3803, #3804)
  • Files - Uploads in the same second no longer overwrite each other; non-Latin filenames upload and download correctly (UTF-8 Content-Disposition); no more double extensions in the file list. (#3802, #3803)
  • Tickets - The ticket header shows the real last-updated date; due dates are localized in table and subtask views; priority/effort sorting fixed; "Related to" works on new to-dos. (#3802, #3805, #3787, #3788)
  • CSV export - Exports plain text instead of HTML and formats due dates. (#3802, #3803)
  • Notifications - Mattermost attachment fields are now sent as an array. (#3784)
  • npm Advisories - Cleared the newly reported high-severity npm advisories. (#3801)
  • LEAN_DEFAULT_TIMEZONE is now only the default timezone for users who haven't set one; the server process always runs in UTC. Timestamps written before this release in a non-UTC timezone are not migrated and may display shifted by the old offset.
]]>https://forum.cloudron.io/post/130412https://forum.cloudron.io/post/130412Sat, 03 Oct 2026 08:35:45 GMT<![CDATA[Reply to Leantime - Package Updates on Fri, 25 Sep 2026 15:37:25 GMT]]>[1.15.0]

  • Update leantime to 3.10.0
  • Full Changelog
  • Period-Based Status Reports - Added period-based status report screens backed by a shared report engine and a period-aware actuals window for resources. (#3643, #3714)
  • Mobile SSO - Introduced a generic OIDC mobile SSO bridge with one-time-code to bearer-token exchange, a public /status discovery endpoint advertising auth methods, and AdvancedAuth gating. (#3637, #3662, #3664, #3711)
  • User Capacity Fields - Added weekly hours and employment type to user profiles for better resource planning. (#3653)
  • Routing - Resolved plugin controllers whose folder name has an inner capital letter. (#3773)
  • Ideas on Kanban - Fixed the "Edit" option for Ideas not working in the Kanban view. (#3752)
  • Sidebar Projects - Admins and owners now see all projects they have access to, fixing an empty project sidebar. (#3710)
  • Upgrades - The installer now self-heals a missing zp_access_tokens table and a stale session-cached db-version so updates can't get blocked. (#3745, #3735)
  • Files - File names now display in full with a title tooltip instead of being truncated to 10 characters. (#3734)
  • Tickets - Archived-project tickets are excluded from open ticket lists, statusDone history is logged with an accurate "last updated" time, and ticket parents are preserved on failed new-ticket submissions. (#3639, #3638, #3650, #3641)
  • JSON-RPC Authorization - Closed an account-takeover chain: any authenticated user could call the onboarding service over JSON-RPC to set another account's password and role, activate it, then disable its 2FA. The onboarding and 2FA services are no longer RPC-reachable, and a sweep of the remaining unguarded @api methods closed marketplace license-key exposure, cross-user dashboard/widget writes, unauthorized ticket-dependency rewrites, mention forgery, and installer/scheduler/queue triggers. (#3797)
]]>https://forum.cloudron.io/post/130016https://forum.cloudron.io/post/130016Fri, 25 Sep 2026 15:37:25 GMT<![CDATA[Reply to Leantime - Package Updates on Thu, 09 Jul 2026 09:01:22 GMT]]>[1.14.6]

  • Update leantime to 3.9.8
  • Full Changelog
  • Milestones - Fixed reports showing 0% completion and the timeline "Show Tasks" view displaying nothing (#3624, #3625, #3628)
  • Milestone Modal - Resolved focus loss, restored save-and-close, and fixed a 500 error when saving goals (#3605)
  • To-Dos - Kept To-Dos from closed projects browsable once the project is reopened (#3626, #3627)
  • Post-3.9.7 Regressions - Fixed a file browser out-of-memory issue, strategy grouping, and 403 errors for legacy roles (#3621)
  • MCP Endpoint - The /mcp endpoint now accepts Leantime API keys, and a shim for the removed php-mcp provider lets in-place upgrades boot (#3601, #3602, #3607)
  • Program Board - Moved the card status dropdown below the field row (#3599)
  • Sessions - Isolated sessions into their own Redis database to avoid clashes with other cached data (#3604)
  • Bumped the McpServer submodule to include the bulkAddTasks fix (#3620, #3622)
  • Synced composer.lock content hash with composer.json (#3603)
]]>https://forum.cloudron.io/post/126575https://forum.cloudron.io/post/126575Thu, 09 Jul 2026 09:01:22 GMT<![CDATA[Reply to Leantime - Package Updates on Mon, 06 Jul 2026 08:06:44 GMT]]>[1.14.5]

  • Update leantime to 3.9.7
  • Full Changelog
  • Personal Access Tokens - Completed the move of personal access token management into core with a dedicated token controller and language keys (#3597)
  • MCP Domain Tools - Reorganized MCP tool classes into their respective domain modules (#3581)
  • Program Board - Fixed milestones, kanban rendering, and status rollup clarity on the program board (#3592)
  • MCP Runtime - Repaired runtime bugs in domain tools uncovered during live end-to-end testing (#3586)
  • System Update - System updates now properly clear cached bootstrap manifests.
  • General Fixes - Resolved a batch of recently reported bugs (#3540, #3331, #3310, #3589, #3330, #3546, #3593)
  • API Rate Limit - Raised the default API rate limit from 10 to 120 requests per minute (#3591)
]]>https://forum.cloudron.io/post/126439https://forum.cloudron.io/post/126439Mon, 06 Jul 2026 08:06:44 GMT<![CDATA[Reply to Leantime - Package Updates on Sun, 05 Jul 2026 08:04:10 GMT]]>[1.14.4]

  • Update leantime to 3.9.6
  • Full Changelog
  • Security Hardening - Addressed authorization, SSRF, reset-token, LDAP, and stored-XSS vulnerabilities (#3584)
  • Plugin Management - Plugin management now requires the proper permission and install input is validated more strictly (#3583)
  • Avatar Rendering - User IDs are now encoded in avatar image sources to prevent DOM-based XSS (#3582)
  • API Responses - Credentials are now stripped from getUser API responses (#3556, #3576)
  • Content Templates - Introduced a generic content templates domain (#3493)
  • My Day Schedule API - Added a getMyDaySchedule API endpoint that respects work hours and timezone (#3579)
  • Personal Access Tokens - Added shared AI/MCP support classes and personal access token management (#3560)
  • Domain Events - Added class-based domain events and filters with a legacy-string plugin bridge (#3503)
  • Project Roles - Fixed user role inheritance when adding a user to a project (#3580)
  • Kanban View - Fixed a rendering error caused by an undefined variable in the kanban view (#3554)
]]>https://forum.cloudron.io/post/126418https://forum.cloudron.io/post/126418Sun, 05 Jul 2026 08:04:10 GMT<![CDATA[Reply to Leantime - Package Updates on Fri, 19 Jun 2026 07:29:13 GMT]]>[1.14.3]

  • Update leantime to 3.9.5
  • Full Changelog
  • Mobile API Endpoints - Added session-scoped mobile endpoints for the notifications inbox and calendar (#3529)
  • Blueprints Canvas - Fixed a 404 error when adding or editing canvas items (#3544)
  • Editor Mentions - The @mention dropdown now appears directly beneath the caret (#3530)
  • General Fixes - Resolved several recently reported bugs (#3532)
  • symfony/yaml - Promoted to a production dependency (#3543)
]]>https://forum.cloudron.io/post/125892https://forum.cloudron.io/post/125892Fri, 19 Jun 2026 07:29:13 GMT<![CDATA[Reply to Leantime - Package Updates on Sun, 14 Jun 2026 08:04:32 GMT]]>[1.14.2]

  • Update leantime to 3.9.4
  • Full Changelog
  • My Work Across Projects - Fixed an issue that prevented "My Work" from loading tickets across different projects, and exposed and secured the mark-ticket-done action (#3527)
  • Bearer Authentication - Resolved a Bearer token error (-32001) that denied every permission-gated API method for mobile and token-based integrations. The Sanctum-guard session stored the raw role integer instead of the role name the permission engine expects (#3525)
  • Unified Session Handling - All authentication paths (web login, API key, and Bearer token) now build the user session through a single factory, so the role and two-factor state can no longer diverge between them. This also makes two-factor handling consistent for token-based authentication and adds clearer diagnostics when an unresolvable role is encountered (#3526)
  • API Auth Test Coverage - The Bearer JSON-RPC contract tests now run through the real server auth path and cover non-manager roles, catching authorization regressions for non-admin users that owner-only testing missed (#3526)
]]>https://forum.cloudron.io/post/125738https://forum.cloudron.io/post/125738Sun, 14 Jun 2026 08:04:32 GMT<![CDATA[Reply to Leantime - Package Updates on Sat, 13 Jun 2026 06:29:34 GMT]]>[1.14.1]

  • Update leantime to 3.9.2
  • Full Changelog
  • Route Caching - Automatically recovers from stale route cache and corrects an invalid exception import to prevent routing errors (#3523)
  • Bearer/PAT Authentication - Fixed Bearer and personal access token authentication by validating against the core token store (#3522)
  • Bearer API Authentication - Restored user context for Sanctum Bearer API requests, fixing a 3.9.0 regression (#3514)
  • API Contract Tests - Added a Bearer-auth JSON-RPC contract test suite with a CI gate (#3513)
]]>https://forum.cloudron.io/post/125725https://forum.cloudron.io/post/125725Sat, 13 Jun 2026 06:29:34 GMT<![CDATA[Reply to Leantime - Package Updates on Fri, 12 Jun 2026 06:32:00 GMT]]>[1.14.0]

  • Update leantime to 3.9.0
  • Full Changelog
  • Mobile Push Notifications - Mobile devices can now register Expo/FCM push tokens against access tokens and receive ticket and unread-count notifications via a new dispatcher (#3398, #3401, #3457)
  • Logic Model Board - Added a Logic Model canvas board with WorkStructure orchestration (#3455)
  • Task Collaborators - Completed multi-collaborator support for tasks, ensuring collaborators always receive ticket notifications and appear with full metadata across list and widget views (#1099)
  • Postgres Compatibility - Fixed write limits, sequences, pdo_pgsql handling, and JS escaping for PostgreSQL deployments (#3447)
  • Auth & Dashboard 500s - Hardened authentication and the dashboard against server errors and offline hangs (#3448)
  • Marketplace 500s - Stopped marketplace errors by coercing API data into typed model properties (#3446)
  • Milestone & Wiki Dialogs - Restored data binding in the milestone and wiki dialogs (#3444)
  • Weekly Timesheet Grid - Blank cells are now skipped when saving the weekly grid (#3449)
  • Client Discussion Count - Fixed an inaccurate discussion count on the client detail page (#3426)
  • Mobile Responsiveness - Responsive stabilization sweep for phones and tablets (#3442)
]]>https://forum.cloudron.io/post/125706https://forum.cloudron.io/post/125706Fri, 12 Jun 2026 06:32:00 GMT<![CDATA[Reply to Leantime - Package Updates on Thu, 28 May 2026 11:46:11 GMT]]>[1.13.0]

  • Update leantime to 3.8.0
  • Full Changelog
  • Complete Blade Template Migration: All remaining legacy .tpl.php, .sub.php, and .inc.php templates have been converted to Laravel Blade, completing the frontend template unification. 272 legacy files removed, 200 Blade files added (net reduction of 72 files). (#3362)
  • Mobile API Surface: Backend API changes to support the Leantime Mobile app (first TestFlight beta). (#3395)
  • Task Collaborators: Full multi-collaborator support for task assignment. (#3337)
  • PDO Constant Crash on Shared Hosting Guarded all MySQL-specific PDO constants (MYSQL_ATTR_SSL_VERIFY_SERVER_CERT, etc.) with defined() checks in the database config (#3371)
  • Commenter Role Cannot Comment Fixed enableCommenterForms() not re-enabling submit buttons inside reply comment boxes (#3194, #3186)
  • Wiki Article Creation Fails on Postgres Fixed createArticle() using camelCase sortIndex column name which Postgres rejects (#3382)
  • Ideas Saved to canvasId 0 POST handler in IdeaDialog now reads canvasId from the submitted form with session as fallback (#3181)
  • Kanban Board Cannot Scroll with 8+ Columns Added overflow-x: auto to the kanban row container (#3394)
  • Calendar Zero-Date Crash getCalendar() now skips events with MySQL zero-date sentinels (0000-00-00) instead of crashing the entire calendar feed (#3396)
  • Added Arabic (ar-SA) language support (#3370)
]]>https://forum.cloudron.io/post/125227https://forum.cloudron.io/post/125227Thu, 28 May 2026 11:46:11 GMT<![CDATA[Reply to Leantime - Package Updates on Thu, 12 Mar 2026 15:00:19 GMT]]>[1.12.2]

]]>https://forum.cloudron.io/post/121737https://forum.cloudron.io/post/121737Thu, 12 Mar 2026 15:00:19 GMT<![CDATA[Reply to Leantime - Package Updates on Wed, 18 Feb 2026 07:17:22 GMT]]>[1.12.0]

  • Update leantime to 3.7.0
  • Full Changelog
  • TinyMCE removed all rich text editing now uses Tiptap. Existing content renders without changes, but any custom TinyMCE plugins or editor extensions will need to be rewritten for the Tiptap API.
  • Group by Parent Task new grouping option in To-Do views with root parent resolution for ticket hierarchy
  • Comment Reactions HTMX-based emoji reactions on comments (like, love, celebrate, funny, etc.)
  • Strategy module relabeled to mission-driven language
  • Fixed idea board internationalization issues
  • Fixed goal KPI progress calculation
  • Fixed milestone collapse behavior
  • Fixed calendar duplicate events
  • Fixed editor toolbar and border-radius inconsistencies
  • Fixed slash menu viewport positioning at screen edges
]]>https://forum.cloudron.io/post/120393https://forum.cloudron.io/post/120393Wed, 18 Feb 2026 07:17:22 GMT<![CDATA[Reply to Leantime - Package Updates on Mon, 02 Feb 2026 14:45:40 GMT]]>[1.11.1]

  • Update leantime to 3.6.2
  • Full Changelog
  • Fix timer not starting after v3.6.0 update by @gloriafolaron in #3215
  • fix(db): Fix zp_entity_relationship table migration issues by @gloriafolaron in #3221
  • Timer Not Starting - Fixed an issue where the stopwatch/timer feature stopped working after the 3.6.0 update (#3208)
  • Database Migration Fix - Added migration to fix entity relationship table issues that caused dashboard and ticket errors (#3221)
]]>https://forum.cloudron.io/post/119561https://forum.cloudron.io/post/119561Mon, 02 Feb 2026 14:45:40 GMT<![CDATA[Reply to Leantime - Package Updates on Sat, 16 Aug 2025 02:40:32 GMT]]>[1.10.6]

  • Update leantime to 3.5.12
  • Full Changelog
  • fix: issue with new invoice filter
  • fix: Remove cpu heavy animations
  • feat: Altered Timesheets repo method getAll to take invempl as 0
  • feat: Changed invempl from being a checkbox to be a select
  • feat: Added handling of invempl as a selected
  • feat: Changed default of ticketFilter to be -1 to align with the rest
  • feat: Modified projectFilter to better align with current functionality
  • feat: Ensured that setting ticketFilter cannot result in an empty query by accident
  • feat: Added ticketFilter to timesheets/showAll
]]>https://forum.cloudron.io/post/111662https://forum.cloudron.io/post/111662Sat, 16 Aug 2025 02:40:32 GMT<![CDATA[Reply to Leantime - Package Updates on Fri, 01 Aug 2025 06:28:53 GMT]]>[1.10.5]

  • Update leantime to 3.5.11
  • Full Changelog
  • Fix for API Key authentication not working when url path was not api/jsonrpc preventing mcp from working
  • Removed transitions to improve rendering performance
  • Clear out previously defined sections
  • feat/fix: Remove css transitions as they reduce performance on various browsers.
  • feat: Ensure efficient use of database connections
  • fix: api authentication not working when request was anything other than /api/jsonrpc
]]>https://forum.cloudron.io/post/111096https://forum.cloudron.io/post/111096Fri, 01 Aug 2025 06:28:53 GMT<![CDATA[Reply to Leantime - Package Updates on Tue, 15 Jul 2025 06:38:51 GMT]]>[1.10.4]

  • Update leantime to 3.5.10
  • Full Changelog
  • Fixed various bugs (https://github.com/Leantime/leantime/milestone/19?closed=1)
  • Allow group changes on dashboard task hierarchy
  • improved file name handling
  • fix: company managers should only be able to change projects in their own org
  • feat: group changes via drag and drop
  • fix: resolve issue with composer loading for phar plugins
  • fix: improved filename sanitizer
  • fix: datetime formatting issue on project settings
  • fix: delete goal board issue
  • fix: error when saving idea without title
]]>https://forum.cloudron.io/post/110186https://forum.cloudron.io/post/110186Tue, 15 Jul 2025 06:38:51 GMT<![CDATA[Reply to Leantime - Package Updates on Mon, 30 Jun 2025 17:21:33 GMT]]>[1.10.3]

  • Update leantime to 3.5.9
  • Full Changelog
  • task: reduce plugin route loader prority in even call stack so that config updates load before route files
  • feat: allow removing all new line characters from string sanitizer
]]>https://forum.cloudron.io/post/109472https://forum.cloudron.io/post/109472Mon, 30 Jun 2025 17:21:33 GMT<![CDATA[Reply to Leantime - Package Updates on Wed, 25 Jun 2025 20:17:15 GMT]]>[1.10.2]

  • Update leantime to 3.5.8
  • Full Changelog
  • fix: allow loading commands from phar files
]]>https://forum.cloudron.io/post/109298https://forum.cloudron.io/post/109298Wed, 25 Jun 2025 20:17:15 GMT<![CDATA[Reply to Leantime - Package Updates on Mon, 23 Jun 2025 13:45:45 GMT]]>[1.10.1]

  • Update leantime to 3.5.7
  • Full Changelog
  • Adds support for Leantime MCP Plugin
  • MyTodoWidget enhancements (infinity scroll)
  • fix: Todowidget hierarchy issue with nested milestones
  • feat: Infinity scroll for tasks in todowidget to reduce html bloat
  • fix: dispatchFilter should return and not just echo
  • feat: new countNested macros for collections
  • fix: Ensure jsonrpc requests can be made from frontend
  • feat: claude code helpers
  • feat: add link to marketplace in plugin news dropdown
  • feat: add flag to allow turning off sortable via event filter
]]>https://forum.cloudron.io/post/109164https://forum.cloudron.io/post/109164Mon, 23 Jun 2025 13:45:45 GMT<![CDATA[Reply to Leantime - Package Updates on Thu, 19 Jun 2025 13:21:33 GMT]]>[1.10.0]

  • Enable OIDC authentication
]]>https://forum.cloudron.io/post/108987https://forum.cloudron.io/post/108987Thu, 19 Jun 2025 13:21:33 GMT<![CDATA[Reply to Leantime - Package Updates on Fri, 13 Jun 2025 06:23:03 GMT]]>[1.9.4]

  • Update leantime to 3.5.6
  • Full Changelog
  • Updated database index strategy which significantly improved performance for various screens
  • Added updated plugins list to review latest versions
  • Fixes for project permission issues when user was only assigned to client and readonly users
  • Minor CSS updates
  • fix: project selector tabs break design in german
  • feat: add menu link to show latest plugin updates
  • feat: preload tasks on kanban board
  • feat: Show plugin updates
  • feat: optimize sql indexes across the system
  • fix: readonly/commenter users were not able to see milestone cards and link was broken #3047
]]>https://forum.cloudron.io/post/108609https://forum.cloudron.io/post/108609Fri, 13 Jun 2025 06:23:03 GMT<![CDATA[Reply to Leantime - Package Updates on Mon, 02 Jun 2025 06:23:09 GMT]]>[1.9.3]

  • Update leantime to 3.5.5
  • Full Changelog
  • fix: decimal issue on report screen
  • fix: automatic handling of invalid filenames
  • feat: Improve plugin marketplace url handling
  • feat: Remove premium links and replace with one link to support site
]]>https://forum.cloudron.io/post/108010https://forum.cloudron.io/post/108010Mon, 02 Jun 2025 06:23:09 GMT