Skip to content

Commit

Permalink
Merge branch 'feature/PB-30209_52-Publish-production-API' into 'master'
Browse files Browse the repository at this point in the history
PB-30209 Publish production API (v4.6.0)

See merge request passbolt/passbolt-ce-api!255
  • Loading branch information
cedricalfonsi committed Mar 14, 2024
2 parents 09cbd6e + 3990a09 commit b86dde5
Show file tree
Hide file tree
Showing 146 changed files with 2,511 additions and 1,117 deletions.
82 changes: 82 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,88 @@
All notable changes to this project will be documented in this file.
This project adheres to [Semantic Versioning](http://semver.org/).

## [4.6.0] - 2024-03-14
### Added
- PB-24485 As an administrator I can view the API healthcheck in the administration section
- PB-29396 As an administrator I can hide the share folder capability with a RBAC
- PB-25463 As an administrator I can disable the healthcheck index endpoint with a flag
- PB-29397 As an administrator I can disable the healthcheck administration panel with a flag

### Improved
- PB-29009 As an administrator completing my setup I should not receive a notification that I completed my setup
- PB-26152 The API should identify openpgpjs v5.10 revoked key as revoked
- PB-29437 As an administrator I can log internal errors with the complete trace in Json format

### Security
- PB-30155 Update phpseclib/phpseclib to fix composer security vulnerability

### Fixed
- PB-30019 As a user I should not get a 500 when editing a user with payload containing integers as fields
- PB-29964 As an administrator disabling a user I should not get a 500 if the disabled date is not valid
- PB-29970 As a group manager I should receive an accurate summary in my notifications on group permission changes
- PB-29054 As an administrator I should not get an error when running the cleanup command and the users table does not exist
- PB-28719 As an administrator sending emails the timezone displayed in the emails should be in the correct time zone
- PB-30266 As an administrator sending emails with the email digest the message ID should be defined

### Maintenance
- PB-28247 Update cakephp/cakephp to version 4.5

## [4.6.0-rc.2] - 2024-03-13
### Fixed
- PB-30182 Build the styleguide on version 4.6.1

## [4.6.0-rc.1] - 2024-03-11
### Added
- PB-24485 As an administrator I can view the API healthcheck in the administration section
- PB-29396 As an administrator I can hide the share folder capability with a RBAC
- PB-25463 As an administrator I can disable the healthcheck index endpoint with a flag
- PB-29397 As an administrator I can disable the healthcheck administration panel with a flag

### Improved
- PB-29009 As an administrator completing my setup I should not receive a notification that I completed my setup
- PB-26152 The API should identify openpgpjs v5.10 revoked key as revoked
- PB-29437 As an administrator I can log internal errors with the complete trace in Json format

### Security
- PB-30155 Update phpseclib/phpseclib to fix composer security vulnerability

### Fixed
- PB-30019 As a user I should not get a 500 when editing a user with payload containing integers as fields
- PB-29964 As an administrator disabling a user I should not get a 500 if the disabled date is not valid
- PB-29970 As a group manager I should receive an accurate summary in my notifications on group permission changes
- PB-29054 As an administrator I should not get an error when running the cleanup command and the users table does not exist
- PB-28719 As an administrator sending emails the timezone displayed in the emails should be in the correct time zone
- PB-30266 As an administrator sending emails with the email digest the message ID should be defined

### Maintenance
- PB-28247 Update cakephp/cakephp to version 4.5

## [4.6.0-test.1] - 2024-03-07
### Added
- PB-24485 As an administrator I can view the API healthcheck in the administration section
- PB-29396 As an administrator I can hide the share folder capability with a RBAC
- PB-25463 As an administrator I can disable the healthcheck index endpoint with a flag
- PB-29397 As an administrator I can disable the healthcheck administration panel with a flag

### Improved
- PB-29009 As an administrator completing my setup I should not receive a notification that I completed my setup
- PB-26152 The API should identify openpgpjs v5.10 revoked key as revoked
- PB-29437 As an administrator I can log internal errors with the complete trace in Json format

### Security
- PB-30155 Update phpseclib/phpseclib to fix composer security vulnerability

### Fixed
- PB-30019 As a user I should not get a 500 when editing a user with payload containing integers as fields
- PB-29964 As an administrator disabling a user I should not get a 500 if the disabled date is not valid
- PB-29970 As a group manager I should receive an accurate summary in my notifications on group permission changes
- PB-29054 As an administrator I should not get an error when running the cleanup command and the users table does not exist
- PB-28719 As an administrator sending emails the timezone displayed in the emails should be in the correct time zone
- PB-30266 As an administrator sending emails with the email digest the message ID should be defined

### Maintenance
- PB-28247 Update cakephp/cakephp to version 4.5

## [4.5.2] - 2024-02-14
### Fixed
- PB-29621 As a user I should get a 400 if the locale passed in the URL is not a string
Expand Down
44 changes: 25 additions & 19 deletions RELEASE_NOTES.md
Original file line number Diff line number Diff line change
@@ -1,29 +1,35 @@
Release song: https://youtu.be/53YYph6Edd0
Release song: https://youtu.be/Ub0NtPOj7es?si=3IL4HKS4-g17uPal

Passbolt is pleased to announce the immediate availability of version 4.5.2. This is a maintenance update that contains important fixes for both the API and browser extension, addressing issues reported by the community since version 4.5.0.
The Passbolt Community Edition 4.6.0 release "Purple Haze", brings enhancements that focus primarily on the administrative aspect and overall system health.

Most notably this update fixes a problem that previously prevented the autofill feature from working with certain web applications.
This update introduces the Health Check feature within the Admin workspace, designed to offer administrators a comprehensive tool for system assessment and upkeep.
In addition, this version addresses a range of minor bugs and delivers the awaited PHP 8.3 support.

Additionally, the release improves the process for importing TOTPs from kdbx files on Windows, ensuring better support for TOTPs across various Keepass clients, including Keepass, KeepassXC, and Macpass.
This version furthermore lays the foundations for successive performance gains by refining data verification processes and reducing memory usage, particularly when browsing. Expect more significant improvements with the next releases.

Administrators would also be pleased to be able to host the API using PHP 8.3. While PHP 7.4 and PHP 8.0 are still supported on some distributions such as Debian, they will be discontinued soon and administrators are encouraged to upgrade to PHP 8.1 or higher and use the latest version of the passbolt API.

We would like to express our sincere thanks to the community members who brought issues to our attention and helped the team to make passbolt better.

## [4.5.2] - 2024-02-14
### Fixed
- PB-29621 As a user I should get a 400 if the locale passed in the URL is not a string
- PB-29526 As an administrator I should be notified of group removal when the operation is performed by a users directory synchronization
- PB-28867 As a user I should see an improved performance when requesting the folder index endpoint
## [4.6.0] - 2024-03-14
### Added
- PB-24485 As an administrator I can view the API healthcheck in the administration section
- PB-29396 As an administrator I can hide the share folder capability with a RBAC
- PB-25463 As an administrator I can disable the healthcheck index endpoint with a flag
- PB-29397 As an administrator I can disable the healthcheck administration panel with a flag

### Improved
- PB-28635 As an administrator I can disable the email digest without having to change the command sending the emails
- PB-29009 As an administrator completing my setup I should not receive a notification that I completed my setup
- PB-26152 The API should identify openpgpjs v5.10 revoked key as revoked
- PB-29437 As an administrator I can log internal errors with the complete trace in Json format

### Security
- PB-29680 Bump dependency composer/composer to v2.7.0
- PB-30155 Update phpseclib/phpseclib to fix composer security vulnerability

### Fixed
- PB-30019 As a user I should not get a 500 when editing a user with payload containing integers as fields
- PB-29964 As an administrator disabling a user I should not get a 500 if the disabled date is not valid
- PB-29970 As a group manager I should receive an accurate summary in my notifications on group permission changes
- PB-29054 As an administrator I should not get an error when running the cleanup command and the users table does not exist
- PB-28719 As an administrator sending emails the timezone displayed in the emails should be in the correct time zone
- PB-30266 As an administrator sending emails with the email digest the message ID should be defined
- PB-30182 Build the styleguide on version 4.6.1

### Maintenance
- PB-29109 Support PHP 8.3 for passbolt API
- PB-29376 GITHUB-506 Bump dependency duosecurity/duo_universal_php to 1.0.2 (#506)
- PB-29514 Fix password expiry test which randomly fails
- PB-29625 Fix CI to support latest composer dependency version
- PB-28247 Update cakephp/cakephp to version 4.5
1 change: 0 additions & 1 deletion bin/versions
Original file line number Diff line number Diff line change
Expand Up @@ -15,4 +15,3 @@ oops uname -a
grep -m1 "" <(oops php --version)
oops mysql --version
grep -m2 "" <(oops gpg --version)
oops composer --version -n
20 changes: 15 additions & 5 deletions composer.json
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,16 @@
"type": "vcs",
"url": "https://github.com/bcrowe/cakephp-api-pagination.git",
"no-api": true
},
{
"type": "vcs",
"url": "https://github.com/passbolt/cakephp-email-queue.git",
"no-api": true
},
{
"type": "vcs",
"url": "https://github.com/passbolt/openpgp-php.git",
"no-api": true
}
],
"require": {
Expand All @@ -70,17 +80,17 @@
"ext-pdo": "*",
"ext-curl": "*",
"composer/composer": "^2.7.0",
"cakephp/cakephp": "^4.4.15",
"cakephp/cakephp": "^4.5",
"cakephp/chronos": "2.4.*",
"longwave/laminas-diactoros": "^2.14.1",
"cakephp/migrations": "dev-master#b5d90c06d25443672ae1ec2f1e592002ca1ce85f",
"cakephp/migrations": "dev-master#cab2143c0b477eae213b472cdb5a3faa1ea1d0ff",
"robmorgan/phinx": "0.x-dev#a409b03e1e3e5f8f60d0d3179704abc9bc80e817",
"cakephp/plugin-installer": "^1.3.1",
"mobiledetect/mobiledetectlib": "^2.8.39",
"ramsey/uuid": "^4.2.3",
"singpolyma/openpgp-php": "dev-master#9920173e0e0b17a98a5b90fdd6d03db4ebadc8fe",
"singpolyma/openpgp-php": "dev-feature/PB-26152_API-should-identify-openpgpjs-v510-revoked-key-as-revoked#92b56f36f15cb98c22e7b580ab97f9a4076850b2",
"donatj/phpuseragentparser": "^1.8.0",
"lorenzo/cakephp-email-queue": "^5.1.0",
"lorenzo/cakephp-email-queue": "dev-master#ed3e3e0c66999a5d0ce31f311ad89cbbd95f16d5",
"imagine/imagine": "^1.3.2",
"league/flysystem": "^2.4.5",
"cakephp/authentication": "^2.10.0",
Expand All @@ -94,7 +104,7 @@
"require-dev": {
"phpstan/phpstan": "~1.10.0",
"psy/psysh": "@stable",
"cakephp/debug_kit": "^4.4.1",
"cakephp/debug_kit": "^4.9.0",
"cakephp/bake": "^2.3.0",
"phpunit/phpunit": "~9.5.2",
"cakephp/cakephp-codesniffer": "^4.5",
Expand Down
Loading

0 comments on commit b86dde5

Please sign in to comment.