MunkiReport 5.8.0

5.8.0 (June 20, 2023) 🐝

MDOYVR 2023 Release: MunkiReport is now Python 3 based

IMPORTANT CHANGES
You will need to install Mac Admins Python 3.10 first on the client or MunkiReport will not run. Download it from https://github.com/macadmins/python/releases/tag/v3.10.9.80716

MunkiReport now fully supports PHP 8 and has been tested with PHP 8.2. PHP 7 is no longer supported, but may continue to work.

MODULE UPDATES
All Python based modules have been updated to have a Python 3 based script.

NEW FEATURES

• Client flags: munkireport-runner -help
• Beta module tagging in Module Marketplace
• munkireport-runner now in system $PATH
• Checks for and warns if MunkiReport's Python 2.7 is installed
• Chunks uploaded data when PHP's upload limit is too small
• Module Marketplace now checks if module is in search path
• MunkiReport logs on client are now rotated
• munkilibs updated to 6.2

FIXES

• Reporting on Silicon Macs
• Fixes cross site security issue

Munkireport 5.7.1

5.7.1 (February 17, 2022) 🐍

Maintenance release - please read the release notes for 5.7.0

FIXES
Update sentinelone to v6.x

Munkireport 5.7.0

5.7.0 (February 09, 2022) 🐍

Maintenance release to fix the issue of Apple removing python from macOS 12.3.

IMPORTANT CHANGES
You will need to install MunkiReport-Python2 first on the client or MunkiReport will not run. There's a pre-built Python package available thanks to Per Olofsson: https://github.com/munkireport/MunkiReport-Python/releases/latest

All core modules have been patched to use the new python install, custom or third party modules may need an update if they use python client scripts.

FIXES

• JQuery is updated to v3.6.0
• Datatables is updated to v1.10.24

Munkireport 6.0.0-beta.1

6.0.0-beta.1 (May 21, 2021)

*** COMPLETE REWRITE BETA VERSION - FOR TESTING ONLY ***

This is the first beta release of the new version of MunkiReport. Please use for testing only, don't use in production!

Documentation will follow, some initial docs can be found here:
https://github.com/munkireport/munkireport-php/tree/wip/docs/illuminate

Some changes:

Network authentication is now firewall

FIREWALL_ENABLED=TRUE
FIREWALL_ALLOW_IP4="0.0.0.0, 127.0.0.0/23"
FIREWALL_REDIRECT_DENIED="https://google.com"

Local authentication now uses the database.

Events may be forwarded to Notification channels, such as Slack and Teams, using the config
setting notification.forward_events (default true).

Munkireport 5.6.5

5.6.5 (March 27, 2021) 🍖

Another maintenance release, updating dependencies and re-adding the composer-merge plugin.

MODULE UPDATES

• munkireport/applications (v2.3 => v2.6)
• munkireport/bluetooth (v2.3 => v2.4)
• munkireport/devtools (v1.3 => v1.5)
• munkireport/gpu (v1.3 => v1.4)
• munkireport/machine (v6.8 => v6.9)
• munkireport/power (v1.4 => v1.6)
• munkireport/softwareupdate (v1.6 => v1.7)
• munkireport/sophos (v1.5 => v1.6)
• munkireport/users (v1.8 => v1.9)

DEPENDENCY UPDATES

• Added wikimedia/composer-merge-plugin
• symfony/polyfill-php80 (v1.20.0 => v1.22.1)
• symfony/polyfill-mbstring (v1.20.0 => v1.22.1)
• symfony/var-dumper (v5.1.8 => v5.2.5)
• tightenco/collect (v8.15.0 => v8.19.0)
• psr/container (1.0.0 => 1.1.1)
• illuminate/contracts (v5.8.36 => v7.30.4)
• adldap2/adldap2 (v10.3.1 => v10.3.2)
• Added fakerphp/faker (v1.13.0)
• symfony/polyfill-php72 (v1.20.0 => v1.22.1)
• symfony/polyfill-intl-normalizer (v1.20.0 => v1.22.1)
• symfony/polyfill-intl-idn (v1.20.0 => v1.22.1)
• guzzlehttp/psr7 (1.7.0 => 1.8.1)
• guzzlehttp/promises (1.4.0 => 1.4.1)
• symfony/process (v4.4.16 => v5.2.4)
• Added symfony/polyfill-intl-grapheme (v1.22.1)
• symfony/polyfill-ctype (v1.20.0 => v1.22.1)
• Added symfony/string (v5.2.4)
• symfony/polyfill-php73 (v1.20.0 => v1.22.1)
• symfony/console (v4.4.16 => v5.2.5)
• Added voku/portable-ascii (1.5.6)
• symfony/translation (v4.4.16 => v4.4.20)
• nesbot/carbon (2.41.5 => 2.46.0)
• doctrine/inflector (1.4.3 => 2.0.3)
• illuminate/support (v5.8.36 => v7.30.4)
• illuminate/console (v5.8.36 => v7.30.4)
• illuminate/container (v5.8.36 => v7.30.4)
• illuminate/database (v5.8.36 => v7.30.4)
• illuminate/events (v5.8.36 => v7.30.4)
• symfony/finder (v4.4.16 => v5.2.4)
• illuminate/filesystem (v5.8.36 => v7.30.4)
• league/mime-type-detection (1.5.1 => 1.7.0)
• monolog/monolog (1.25.5 => 1.26.0)
• onelogin/php-saml (3.4.1 => 3.6.1)
• Added squizlabs/php_codesniffer (2.9.2)
• symfony/yaml (v3.4.46 => v3.4.47)
• vlucas/phpdotenv (v4.1.8 => v4.2.0)

Munkireport 5.6.4

5.6.4 (November 25, 2020) 🅱️

Mostly Big Sur adjustments. You'll need to update the client packages to take advantage of proper OS version reporting.

MODULE UPDATES

• munkireport/backup2go (v1.2 => v1.3)
• munkireport/caching (v1.5 => v1.6)
• munkireport/filevault_status (v1.6 => v1.7)
• munkireport/machine (v6.6 => v6.8)
• munkireport/network (v3.1 => v3.2)
• munkireport/security (v2.1 => v2.2)
• munkireport/sophos (v1.4 => v1.5)
• munkireport/supported_os (v2.1 => v2.3)
• munkireport/users (V1.7 => v1.8)
• munkireport/warranty (v4.4 => v4.5)

DEPENDENCY UPDATES

• Removing wikimedia/composer-merge-plugin
• Removing symfony/polyfill-php70
• symfony/polyfill-php80 (v1.18.0 => v1.20.0)
• symfony/polyfill-mbstring (v1.18.0 => v1.20.0)
• symfony/var-dumper (v5.1.2 => v5.1.8)
• tightenco/collect (v7.19.1 => v8.15.0)
• adldap2/adldap2 (v10.3.0 => v10.3.1)
• paragonie/random_compat (v9.99.99 => v9.99.100)
• doctrine/event-manager (1.1.0 => 1.1.1)
• doctrine/dbal (2.10.2 => 2.12.1)
• Installing fzaninotto/faker (v1.9.1)
• symfony/polyfill-php72 (v1.18.0 => v1.20.0)
• symfony/polyfill-intl-normalizer (v1.18.0 => v1.20.0)
• symfony/polyfill-intl-idn (v1.18.0 => v1.20.0)
• guzzlehttp/psr7 (1.6.1 => 1.7.0)
• guzzlehttp/promises (v1.3.1 => 1.4.0)
• symfony/process (v4.4.10 => v4.4.16)
• symfony/service-contracts (v2.1.3 => v2.2.0)
• symfony/polyfill-php73 (v1.18.0 => v1.20.0)
• symfony/console (v4.4.10 => v4.4.16)
• symfony/translation-contracts (v2.1.3 => v2.3.0)
• symfony/translation (v4.4.10 => v4.4.16)
• nesbot/carbon (2.36.1 => 2.41.5)
• symfony/finder (v4.4.10 => v4.4.16)
• Installing league/mime-type-detection (1.5.1)
• league/flysystem (1.0.69 => 1.1.3)
• monolog/monolog (1.25.4 => 1.25.5)
• robrichards/xmlseclibs (3.1.0 => 3.1.1)
• rodneyrehm/plist (v2.0.1 => v2.0.2)
• Installing squizlabs/php_codesniffer (2.9.2)
• symfony/polyfill-ctype (v1.18.0 => v1.20.0)
• symfony/yaml (v3.4.42 => v3.4.46)

Munkireport 5.6.3

5.6.3 (July 22, 2020)

Security release

This release patches a couple of issues found by the Datadog security team. The issues concern actions taken by authenticated users and vary from XSS vulnerabilities to SQL injection. Please update to the latest version of MunkiReport as soon as possible.

Again special thanks to Edouard Schweisguth from Datadog who wrote the security report and helped us resolve these issues.

SECURITY UPDATES

• XSS Filter Bypass On Comments
• CSRF Bypass On Endpoints With No Body Parameters
• munki_facts XSS
• Reflected XSS In Managedinstalls Module
• SQL Injection In Datatables Order By In Post Body
• SQL Injection In Reportdata Ip In 'req' GET Parameter
• SQL Injection in softwareupdate module

FIXES

• Harden tablequery
• Simplify postflight script
• Make:module text field crash

MODULE UPDATES

• munkireport/reportdata (v3.4 => v3.5)
• munkireport/machine (v6.5 => v6.6)
• munkireport/disk_report (v3.4 => v3.7)
• munkireport/caching (v1.4 => v1.5)
• munkireport/certificate (V1.4 => v1.5)
• munkireport/comment (v3.2 => v4.0)
• munkireport/devtools (v1.2 => v1.3)
• munkireport/filevault_status (v1.5 => v1.6)
• munkireport/homebrew (v1.2 => v1.3)
• munkireport/homebrew_info (v1.2 => v1.3)
• munkireport/managedinstalls (v2.5 => v2.6)
• munkireport/munki_facts (v1.4 => v1.5)
• munkireport/munkireportinfo (v1.6 => v1.7)
• munkireport/network (v3.0 => v3.1)
• munkireport/printer (v1.3 => v1.4)
• munkireport/softwareupdate (v1.3 => v1.6)
• munkireport/users (v1.4 => V1.7)

DEPENDENCY UPDATES

• erusev/parsedown (1.7.4)
• symfony/polyfill-php72 (v1.17.0 => v1.18.0)
• symfony/polyfill-php70 (v1.18.0)
• symfony/polyfill-intl-normalizer (v1.18.0)
• symfony/polyfill-intl-idn (v1.17.0 => v1.18.0)
• symfony/translation-contracts (v2.1.2 => v2.1.3)
• symfony/polyfill-mbstring (v1.17.0 => v1.18.0)
• symfony/polyfill-php80 (v1.17.0 => v1.18.0)
• nesbot/carbon (2.35.0 => 2.36.1)
• symfony/polyfill-php73 (v1.17.0 => v1.18.0)
• symfony/service-contracts (v2.1.2 => v2.1.3)
• symfony/polyfill-ctype (v1.17.0 => v1.18.0)
• phpoption/phpoption (1.7.4 => 1.7.5)
• vlucas/phpdotenv (v4.1.7 => v4.1.8)
• tightenco/collect (v7.12.0 => v7.19.1)
• doctrine/cache (1.10.1 => 1.10.2)

Munkireport 5.6.2

5.6.2 (June 17, 2020)

Another bugfix release

FIXES

• Creating/modifying business units (thanks @rickheil for reporting)

DEPENDENCY UPDATES

• guzzlehttp/guzzle (6.5.4 => 6.5.5)

Munkireport 5.6.1

5.6.1 (June 15, 2020)

Small release to fix an issue with the Docker container

FIXES

• Docker file now runs ./please migrate

FEATURES

• You can now use ./please down and ./please up to enter or exit maintenance mode

DEPENDENCY UPDATES

• symfony/console (v4.4.9 => v4.4.10)
• symfony/process (v4.4.9 => v4.4.10)
• symfony/translation (v4.4.9 => v4.4.10)
• symfony/finder (v4.4.9 => v4.4.10)
• symfony/yaml (v3.4.41 => v3.4.42)
• symfony/var-dumper (v5.1.0 => v5.1.2)

Munkireport 5.6.0

5.6.0 (June 10, 2020) 🙏

MDOYVR 2020 Release

This release brings the please command that replaces the following scripts:

• ./build/addmigration is now ./please make:migration
• ./build/addmodule.sh is now ./please make:module
• php ./database/migrate.php is now ./please migrate
• php ./database/faker.php is now ./please db:seed

For more information about the please command, run please help

Minimum version of PHP is now 7.2.5

MODULE UPDATES

• munkireport/filevault_status (v1.4 => v1.5)
• munkireport/location (v1.5 => v1.6)
• munkireport/network_shares (v1.2 => v1.3)
• munkireport/supported_os (v2.0 => v2.1)
• munkireport/users (v1.3 => v1.4)
• munkireport/warranty (v4.3 => v4.4)

DEPENDENCY UPDATES

• phpoption/phpoption (1.7.3 => 1.7.4)
• vlucas/phpdotenv (v4.1.6 => v4.1.7)
• symfony/yaml (v3.4.40 => v3.4.41)
• symfony/polyfill-php80 (v1.17.0)
• symfony/var-dumper (v5.0.8 => v5.1.0)
• symfony/console (v4.4.8 => v4.4.9)
• symfony/process (v4.4.8 => v4.4.9)
• doctrine/inflector (1.4.2 => 1.4.3)
• symfony/translation (v4.4.8 => v4.4.9)
• nesbot/carbon (2.34.2 => 2.35.0)
• symfony/finder (v4.4.8 => v4.4.9)
• illuminate/events (v5.8.36)