What's Changed
- chore(deps-dev): bump friendsofphp/php-cs-fixer from 3.93.0 to 3.93.1 by @dependabot[bot] in #229
- chore(deps-dev): bump friendsofphp/php-cs-fixer from 3.93.1 to 3.94.2 by @dependabot[bot] in #231
- chore: update .gitignore and .dockerignore by excluding .vscode and .zed by @rancoud in #233
- feat: ask current password for changing password (CWE-620) by @rancoud in #234
- feat: add 1 hour expiration to forgot password token + cron (CWE-640) by @rancoud in #240
- chore: bump rancoud packages by @rancoud in #241
- chore(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #237
- chore(deps): bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #238
- chore(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #235
- chore(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #239
- feat: invalid sessions after password change and reset (CWE-613) by @rancoud in #242
- feat: add rate limit per ip and website for contact, forgot, login and register forms (CWE-307) by @rancoud in #243
Full Changelog: v4.1.2...v4.2.0
Contributors
rancoud and dependabot