2.16.1-ls56

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Fix hidden API token (#4828)
• Translations update from Hosted Weblate (#4827)

Involved in this release: @kevinpapst and @weblate - thank you!

2.16.1-ls55

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Fix hidden API token (#4828)
• Translations update from Hosted Weblate (#4827)

Involved in this release: @kevinpapst and @weblate - thank you!

2.16.0-ls55

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Translations update from Hosted Weblate (#4826) (#4814) (#4812)
• Docker: Fix TLS certificate verification for LDAP authentication (#4802)
• Remove view_own_timesheet permission check from Wizard controller
• Adds a string formatter for the general export function
• Adds a twig function to sanitize data against DDE attacks (blame Microsoft not Kimai!)
• Fix just another doctrine deprecation
• Allow to use english format for DateRanges even if user uses different locale
• Added macro to simplify cross-links to search results
• Cross-link "filter timesheets" view from weekly reports
• Activate Taiwanese locale - thanks @IepIweidieng
• Improve min_day and max_day handling in some date chooser
• Added missing redirect after saving API token
• Make sure that access tokens expiry date is in the future (#4808)
• Allow to delete api tokens for other users (#4809)
• Use core date filters to show last_usage and expiry date for API tokens
• Fix loading local.yaml as last config
• Prepare icon refactoring to SVG
• Disable CSRF on logout again, causing too many unnecessary problems
• Remove all expired session on logout
• Fix API permission issue: match request only if a Bearer token is passed
• Use rate limiter to reduce risk of Session prediction attack attempts (thanks to Ignatius Michael from DeepCove Cybersecurity for raising awareness)
• Bump composer packages (fixes translations marked as "needs-translation" are missing)
• Upgrade to chart.js 4 (#4815)
• Update all frontend dependencies to latest minor version

Involved in this release: @abrain, @kevinpapst, @IepIweidieng and @popalltheshells - thank you!

2.15.0-ls54

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Added "api_access" permission for limiting API access (#4779)
• Added several _process dates to invoice hydrator (#4749)
• Added activity.number and project.number to invoice hydrator (#4749)
• Added activity.invoice_text and project.invoice_text to invoice hydrator (#4749)
• Fix Cannot redirect to empty URL SAML issue (#4761)
• Simplify 2fa (deactivation) form (#4749)
• Clarify expected datetime format in API docs (#4749)
• Allow to order by activity and project number (#4760)
• Do not store hashed password for LDAP and SAML users (#4755)
• API tokens not working with certain Apache configurations (#4774)
• Dashboard widget "my working times" calculation behavior changed (#4749)
  • Use Timesheet duration instead of the "real duration between begin and end"
  • Uses the date of begin to assign the times (to match behavior in other reports)
• Catch Throwables if curl_multi_exec is disabled (#4740)
• Fixed several deprecations (#4749)
• Fix "invoices" internal menu name
• Translations update from Hosted Weblate (#4765)

Involved in this release: @kevinpapst and @weblate - thank you!

2.15.0-ls53

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Added "api_access" permission for limiting API access (#4779)
• Added several _process dates to invoice hydrator (#4749)
• Added activity.number and project.number to invoice hydrator (#4749)
• Added activity.invoice_text and project.invoice_text to invoice hydrator (#4749)
• Fix Cannot redirect to empty URL SAML issue (#4761)
• Simplify 2fa (deactivation) form (#4749)
• Clarify expected datetime format in API docs (#4749)
• Allow to order by activity and project number (#4760)
• Do not store hashed password for LDAP and SAML users (#4755)
• API tokens not working with certain Apache configurations (#4774)
• Dashboard widget "my working times" calculation behavior changed (#4749)
  • Use Timesheet duration instead of the "real duration between begin and end"
  • Uses the date of begin to assign the times (to match behavior in other reports)
• Catch Throwables if curl_multi_exec is disabled (#4740)
• Fixed several deprecations (#4749)
• Fix "invoices" internal menu name
• Translations update from Hosted Weblate (#4765)

Involved in this release: @kevinpapst and @weblate - thank you!

2.15.0-ls52

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Added "api_access" permission for limiting API access (#4779)
• Added several _process dates to invoice hydrator (#4749)
• Added activity.number and project.number to invoice hydrator (#4749)
• Added activity.invoice_text and project.invoice_text to invoice hydrator (#4749)
• Fix Cannot redirect to empty URL SAML issue (#4761)
• Simplify 2fa (deactivation) form (#4749)
• Clarify expected datetime format in API docs (#4749)
• Allow to order by activity and project number (#4760)
• Do not store hashed password for LDAP and SAML users (#4755)
• API tokens not working with certain Apache configurations (#4750) (#4774)
• Dashboard widget "my working times" calculation behavior changed (#4749)
  • Use Timesheet duration instead of the "real duration between begin and end"
  • Uses the date of begin to assign the times (to match behavior in other reports)
• Catch Throwables if curl_multi_exec is disabled (#4740)
• Fixed several deprecations (#4749)
• Fix "invoices" internal menu name
• Translations update from Hosted Weblate (#4765)

Involved in this release: @kevinpapst and @weblate - thank you!

2.14.0-ls51

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Added API tokens, deprecate API passwords (#4637)
• Configurable activity and project number (#4729)
• Add support for negative durations in All Users reports (#4717)
• Show "link has expired message" in password reset screen (#4710)
• Added date objects as hydrator variables - for custom date formats in invoice templates (#4710)
• Utilize UserService for SAML (#4748)
• Split docker to use base image for faster builds (#4586)
• Added logging for invalid SAML responses (#4710)
• Translations update from Hosted Weblate (#4722) (#4746)
• Fix: allow changing locale in DateRangeType
• Fix: show meta-fields with null values (e.g. booleans with false were hidden) (#4686)
• Fix: permission check: allow to remove view_own_timesheet but still record times (#4710)
• Fix: prevent error 500 if customer country is empty (#4710)
• Fix: API 500 error if project does not exist when creating new timesheet (#4710)
• Fix: tags are not created in remote-search mode (#4710)
• Fix: do not "export items" by default (#4339)
• Fix: daterange query, if user an request locale are different (#4710)

Involved in this release: @Bibz87, @kevinpapst, @tobybatch and @weblate - thank you!

2.14.0-ls50

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Added API tokens, deprecate API passwords (#4637)
• Configurable activity and project number (#4729)
• Add support for negative durations in All Users reports (#4717)
• Show "link has expired message" in password reset screen (#4710)
• Added date objects as hydrator variables - for custom date formats in invoice templates (#4710)
• Utilize UserService for SAML (#4748)
• Split docker to use base image for faster builds (#4586)
• Added logging for invalid SAML responses (#4710)
• Translations update from Hosted Weblate (#4722) (#4746)
• Fix: allow changing locale in DateRangeType
• Fix: show meta-fields with null values (e.g. booleans with false where hidden) (#4686)
• Fix: permission check: allow to remove view_own_timesheet but still record times (#4710)
• Fix: prevent error 500 if customer country is empty (#4710)
• Fix: API 500 error if project does not exist when creating new timesheet (#4710)
• Fix: tags are not created in remote-search mode (#4710)
• Fix: do not "export items" by default (#4339)
• Fix: daterange query, if user an request locale are different (#4710)

Involved in this release: @Bibz87, @kevinpapst, @tobybatch and @weblate - thank you!

2.13.0-ls49

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Translations update from Hosted Weblate (#4693)
• Fixes #4684 - calendar was using request locale instead of user configuration (#4659)
• Prevent 500 on plugin controller if domain is not reachable (#4659)
• Prevent error due to missing username in password reset (#4659)
• Fix timezone reporting issue (times were shown on wrong date, if reporter and current user are in different timezones) (#4659)
• Allow filter customers by country (#4659)
• Change order of daterange input and select (#4659)
• Speed up permission checks (#4659)
• Support in-/decrementor in invoice date number generator (#4659)
• Make sure current users permissions are respected during timesheet API collection call (#4659)
• Secure activity/project/customer detail API call (#4659)
• Rename internal menu IDs (#4659)
• Cache voter checks (#4659)
• Bump composer packages (#4659)

Involved in this release: @kevinpapst and @AstroGD and @weblate - thank you!

2.13.0-ls48

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Translations update from Hosted Weblate (#4693)
• Fixes #4684 - calendar was using request locale instead of user configuration (#4659)
• Prevent 500 on plugin controller if domain is not reachable (#4659)
• Prevent error due to missing username in password reset (#4659)
• Fix timezone reporting issue (times were shown on wrong date, if reporter and current user are in different timezones) (#4659)
• Allow filter customers by country (#4659)
• Change order of daterange input and select (#4659)
• Speed up permission checks (#4659)
• Support in-/decrementor in invoice date number generator (#4659)
• Make sure current users permissions are respected during timesheet API collection call (#4659)
• Secure activity/project/customer detail API call (#4659)
• Rename internal menu IDs (#4659)
• Cache voter checks (#4659)
• Bump composer packages (#4659)

Involved in this release: @kevinpapst and @AstroGD and @weblate - thank you!