Repository navigation
Releases: guenther-alka/cs-team
Release list
cs-team 0.63.1
Translations: the interface texts added since earlier versions (AI research, merge and summarize, notices, 1:1 messages, guests, sign-in and password handling, history and write protection, and more) are now translated in all eleven other languages (ar, cn, el, es, fr, it, ja, pl, ru, tr, uk); before, they showed in German. No other changes compared with 0.63.0. Static builds for Windows, Linux (amd64, arm64), macOS (amd64, arm64), FreeBSD, illumos and Solaris. Manual (PDF): https://www.napp-it.org/pdf/cs-team_en.pdf
cs-team 0.63.0
History for Text and Calc documents. Admins get a change list (who changed what and when, never the content; origin AI / edited / by hand / import). Creators and admins can set write protection (read-only for everyone) and lift it again. Earlier states from ZFS snapshots can be listed and imported as a new write-protected document named Name_date. Versioning itself stays with the ZFS autosnap jobs (e.g. keep the last 20 hourly snapshots with delzero). Static builds for Windows, Linux (amd64, arm64), macOS (amd64, arm64), FreeBSD, illumos and Solaris. Manual (PDF): https://www.napp-it.org/pdf/cs-team_en.pdf - see README.md and CHANGELOG.md.
cs-team 0.62.0
cs-team 0.62.0
Sign-in and accounts
- Login form with session cookie is the default (CS_LOGIN_FORM=0 = browser dialog); log out now really ends the session.
- The login type follows the account name: no @ = local account (password or OIDC chosen by the user), name@realm = directory (LDAP/AD).
- Initial passwords with a user list per group; "Reconfigure" issues a new one.
- Forgot password on the login page: mail link (1 hour, single use, in the account language, default English), then a new password or OIDC; logged.
- OIDC (Google, Microsoft) can be entered under Settings, no restart needed; the user links the account himself; global admins may link. Values from Settings override CS_OIDC_*.
- Unified roles (sysadmin, global admins, group admins); the Today menu shows the version.
Security and tests
- Security review of the new code: /oidc/start is rate limited, the Microsoft tenant must be a GUID; govulncheck reports no affected code.
- go vet and go test are green; livetest 63/63 on Windows, Linux (Proxmox) and OmniOS. Google sign-in and mail sending were tested for real.
- Not tested: Microsoft sign-in; macOS, FreeBSD, Solaris and arm64 builds were not run.
See CHANGELOG.md. Assets: 8 static binaries (windows, linux amd64/arm64, darwin amd64/arm64, freebsd, illumos, solaris) and checksums.sha256.
cs-team 0.61.0
cs-team 0.61.0 - universal JSON export/import for users and groups, handbook chapters 15/16.
- Universal JSON export of all users and groups (GET /api/users/exportjson; global admin: everything, group admin: own groups only; selective with users= / groups=)
- Sensitive data only on request, both off by default: pw=1 adds password hashes, secrets=1 adds TOTP secrets, recovery codes and app passwords
- JSON import (POST /api/users/importjson, global admin): create=1 creates unknown groups, update=1 overwrites existing users, genpw=1 generates start passwords when the source has no hash (e.g. export from Windows or AD/LDAP); generated passwords appear only in the HTTP response, never in users.json or the log
- The simple CSV export/import stays unchanged
- Manual: new chapter 15 "Backup, restore and migration" (Linux/macOS/FreeBSD/illumos/Windows/AD-LDAP) and chapter 16 "Inexpensive KISS solutions"; the goal chapter is now chapter 17
Manual (PDF): English / Deutsch
Details: CHANGELOG.md. Checksums: checksums.sha256.
cs-team 0.60.0
cs-team 0.60.0 - links with expiry, 2FA, polls, file versions, screen share.
- Public file links with expiry (1/7/30 days or unlimited), renew and revoke, optional global cap
- Two-factor sign-in (TOTP) with QR setup, recovery codes, app passwords for WebDAV/CalDAV, optional enforcement for admins
- Polls in chat: multiple choice, named or anonymous (anonymous results appear only after the poll ends), end time
- File versions from ZFS snapshots (list, download, restore) - needs a ZFS dataset with snapshots
- Screen sharing in the built-in video chat; xlsx date cells and docx tables import better
- Audited in two passes, no open items of category high (manual chapter 14)
- Manual: new chapters for all features and chapter 15 (goal and short AI assessment; PDF de/en attached)
Details: CHANGELOG.md. Checksums: checksums.sha256.
cs-team 0.59.0
cs-team 0.59.0 - privacy (GDPR) release, audited.
- Delete a user with optional anonymisation (name replaced in chat, tasks and event attendees; preview shows counts)
- Data export for every person (ZIP: account without hash, files, personal calendars, tasks, chat); admins can export on request
- Automatic retention: chat days per group, closed tasks globally (0 = off, minimum 7 days), logged
- First-use notice for the AI assistant and external video chat, acknowledgement per person, optional extra privacy text
- Logging: audit lines for exports and rights changes, failed logins and lockouts, successful login after failures, 5xx with cause, no passwords or content
- Windows device names rejected, no server paths in error messages
- Manual: new chapter 11 Privacy (GDPR) with templates and a 72-hour breach procedure, chapter 13 customise/audit with AI, chapter 14 Audit Result 0.59 (no open items of category high)
Details: CHANGELOG.md. Checksums: checksums.sha256.
cs-team 0.58.0
cs-team 0.58.0 - dark mode, keyboard operation, tasks in the calendar, 13 languages, logging.
- Dark mode (follows the system), visible keyboard focus, lists usable with Tab/Enter, aria basics
- Calendar: task due dates and milestones as markers; long-press replaces double-click on touch devices
- 13 UI languages (new: Ukrainian, Polish, Greek, Japanese); more can be added with one JSON file (see manual 10.6)
- Sysadmin account, task quick line (0.57.1)
- After a multiuser live test: empty-calendar ICS export fixed, group admins can add unassigned accounts, clearer error messages
- Logging: failed logins and lockouts, audit lines for user/group/settings changes, 5xx and panics, startup line, optional access log (CS_LOG_ACCESS=1)
- Manual: new chapters Settings in detail, Languages, and Customise/extend/audit with AI (PDF de/en attached)
Details: CHANGELOG.md. Checksums: checksums.sha256.
cs-team 0.57.0
cs-team 0.57.0 - summarizes 0.54 to 0.56.1.
- Directory/LDAP/AD sign-in (name@realm, admit groups, offline login cache, OS login on Windows), settings UI
- Hierarchical calendars (personal, group, organization, global, external ICS subscriptions), CalDAV serves all visible calendars
- Address lock softened (CS_MAX_FAILS_IP, default 60; signed-in users exempt; counters expire after 15 min)
- Start passwords must be changed at first login; trivial passwords refused
- 29 missing UI texts translated (ar, cn, es, fr, it, ru, tr; machine translated)
- Own dialogs instead of alert/confirm/prompt
Details: CHANGELOG.md. Checksums: checksums.sha256.
cs-team 0.53.0
Tasks: global admins can create tasks in every group with tasks enabled; in groups set to group-admins-only, members can file a request (Please handle) that all group members see and any member can take. See CHANGELOG.md.
cs-team 0.52.0
Calendar hour grid in day and week view: time axis, event blocks by start and duration, drag to another day/time (15-minute steps), drag the bottom edge to change the duration. New events now by double-click only. See CHANGELOG.md.