v1.8.8

What's New

• SharePoint authentication now uses Entra ID (Azure AD) app-only auth instead of the legacy ACS App-Only flow, which Microsoft is retiring — SharePoint uploads and link-fixing keep working going forward instead of breaking when ACS is switched off.
• XML bank statements can now be routed to a separate SharePoint folder from PDFs (OFFICE365_PATH_XML), or skipped from upload entirely (SHAREPOINT_UPLOAD_XML=false). The link-fixer tool also detects and relocates XML statements that were uploaded to the old shared folder before this option existed.
• The link-fixer's --apply mode now upgrades old-format SharePoint links to current permanent links, not just fixing broken ones.
• The setup script can now grant the runtime database user the INSERT/UPDATE/DELETE rights it needs on the DOC table (for attaching and correcting SharePoint links) automatically, instead of requiring a manual SQL grant.

Fixed

• SharePoint files with purely numeric names (e.g. 20260821) no longer crash the link-fixer.
• Being rate-limited by the Raiffeisenbank API no longer crashes the statement-download job outright; it's now reported with its own exit code, and other unexpected errors from the banking library degrade to a logged error instead of a hard crash.
• When the Pohoda mServer is offline or overloaded, the error report now says why (timeout, HTTP error, unexpected response) instead of showing a blank error.
• A Pohoda "wrong accounting unit" error is now reported as its own distinct, clearer error instead of being lumped in with generic import failures.
• Fixed a SharePoint authentication bug where a stale cached token kept being reused after a transient failure, causing repeated failures until the process restarted.
• Checking whether the Pohoda mServer is online no longer crashes on a connection-level failure.

Other Changes

• Added CI validation of the MultiFlexi application descriptor JSON files.
• Packaging: temporarily excluded the ubuntu:resolute build target (an unrelated dependency isn't published there yet) and removed the unsupported "forky" distribution from the release pipeline.
• Repaired the project's PHPUnit test suite, which had drifted out of sync with the code, and made tests that need a live bank certificate or database connection skip cleanly instead of failing when those aren't available.