Skip to content

Release v1.2.2

Choose a tag to compare

@github-actions github-actions released this 30 Jul 18:33
· 37 commits to main since this release

v1.2.2

Changelog

Fixed

  • Security (REQ-SEC-005): panel CSRF validation is fail-closed — when CsrfTokenManagerInterface is missing, mutating panel actions (enable/disable/schedule/login/logout) return HTTP 403 instead of skipping CSRF checks.

Compatibility

  • Unchanged: PHP >=8.2, <8.6; Symfony ^7.4 || ^8.0. Requires symfony/security-csrf for panel mutations.

Full Changelog: v1.2.1...v1.2.2