2.17.0-ls61

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Translated using Weblate (#4850, #4862)
• Improve tag handling, fixes #4396
• Fix project duplication causing duplicate project numbers (#4836)
• Trigger a change on updated meta fields to allow recalculation by TimesheetCalculator (#4836)
• Improve API auth, failing under certain cicrumstances (#4836)
• Slow down invalid session detection, to increase security (#4836)
• Bump composer packages (#4836)
• Utilize UserService for creating new accounts (#4836)
• Erase credentials after hashing password and token (#4836)
• Added hours_other_profile permission to differentiate between editing and viewing working times (#4836)
• Rename pageSize parameter to size (#4836)
• Use RateCalculatorInterface (#4851) by @habibhaidari1

Involved in this release: @habibhaidari1, @kevinpapst and @weblate - thank you!

2.17.0-ls60

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Translated using Weblate (#4850, #4862)
• Improve tag handling, fixes #4396
• Fix project duplication causing duplicate project numbers (#4836)
• Trigger a change on updated meta fields to allow recalculation by TimesheetCalculator (#4836)
• Improve API auth, failing under certain cicrumstances (#4836)
• Slow down invalid session detection, to increase security (#4836)
• Bump composer packages (#4836)
• Utilize UserService for creating new accounts (#4836)
• Erase credentials after hashing password and token (#4836)
• Added hours_other_profile permission to differentiate between editing and viewing working times (#4836)
• Rename pageSize parameter to size (#4836)
• Use RateCalculatorInterface (#4851) by @habibhaidari1

Involved in this release: @habibhaidari1, @kevinpapst and @weblate - thank you!

2.17.0-ls59

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Translated using Weblate (#4850, #4862)
• Improve tag handling, fixes #4396
• Fix project duplication causing duplicate project numbers (#4836)
• Trigger a change on updated meta fields to allow recalculation by TimesheetCalculator (#4836)
• Improve API auth, failing under certain cicrumstances (#4836)
• Slow down invalid session detection, to increase security (#4836)
• Bump composer packages (#4836)
• Utilize UserService for creating new accounts (#4836)
• Erase credentials after hashing password and token (#4836)
• Added hours_other_profile permission to differentiate between editing and viewing working times (#4836)
• Rename pageSize parameter to size (#4836)
• Use RateCalculatorInterface (#4851) by @habibhaidari1

Involved in this release: @habibhaidari1, @kevinpapst and @weblate - thank you!

2.17.0-ls58

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Translated using Weblate (#4850, #4862)
• Improve tag handling, fixes #4396
• Fix project duplication causing duplicate project numbers (#4836)
• Trigger a change on updated meta fields to allow recalculation by TimesheetCalculator (#4836)
• Improve API auth, failing under certain cicrumstances (#4836)
• Slow down invalid session detection, to increase security (#4836)
• Bump composer packages (#4836)
• Utilize UserService for creating new accounts (#4836)
• Erase credentials after hashing password and token (#4836)
• Added hours_other_profile permission to differentiate between editing and viewing working times (#4836)
• Rename pageSize parameter to size (#4836)
• Use RateCalculatorInterface (#4851) by @habibhaidari1

Involved in this release: @habibhaidari1, @kevinpapst and @weblate - thank you!

2.16.1-ls57

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Fix hidden API token (#4828)
• Translations update from Hosted Weblate (#4827)

Involved in this release: @kevinpapst and @weblate - thank you!

2.16.1-ls56

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Fix hidden API token (#4828)
• Translations update from Hosted Weblate (#4827)

Involved in this release: @kevinpapst and @weblate - thank you!

2.16.1-ls55

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Fix hidden API token (#4828)
• Translations update from Hosted Weblate (#4827)

Involved in this release: @kevinpapst and @weblate - thank you!

2.16.0-ls55

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Translations update from Hosted Weblate (#4826) (#4814) (#4812)
• Docker: Fix TLS certificate verification for LDAP authentication (#4802)
• Remove view_own_timesheet permission check from Wizard controller
• Adds a string formatter for the general export function
• Adds a twig function to sanitize data against DDE attacks (blame Microsoft not Kimai!)
• Fix just another doctrine deprecation
• Allow to use english format for DateRanges even if user uses different locale
• Added macro to simplify cross-links to search results
• Cross-link "filter timesheets" view from weekly reports
• Activate Taiwanese locale - thanks @IepIweidieng
• Improve min_day and max_day handling in some date chooser
• Added missing redirect after saving API token
• Make sure that access tokens expiry date is in the future (#4808)
• Allow to delete api tokens for other users (#4809)
• Use core date filters to show last_usage and expiry date for API tokens
• Fix loading local.yaml as last config
• Prepare icon refactoring to SVG
• Disable CSRF on logout again, causing too many unnecessary problems
• Remove all expired session on logout
• Fix API permission issue: match request only if a Bearer token is passed
• Use rate limiter to reduce risk of Session prediction attack attempts (thanks to Ignatius Michael from DeepCove Cybersecurity for raising awareness)
• Bump composer packages (fixes translations marked as "needs-translation" are missing)
• Upgrade to chart.js 4 (#4815)
• Update all frontend dependencies to latest minor version

Involved in this release: @abrain, @kevinpapst, @IepIweidieng and @popalltheshells - thank you!

2.15.0-ls54

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Added "api_access" permission for limiting API access (#4779)
• Added several _process dates to invoice hydrator (#4749)
• Added activity.number and project.number to invoice hydrator (#4749)
• Added activity.invoice_text and project.invoice_text to invoice hydrator (#4749)
• Fix Cannot redirect to empty URL SAML issue (#4761)
• Simplify 2fa (deactivation) form (#4749)
• Clarify expected datetime format in API docs (#4749)
• Allow to order by activity and project number (#4760)
• Do not store hashed password for LDAP and SAML users (#4755)
• API tokens not working with certain Apache configurations (#4774)
• Dashboard widget "my working times" calculation behavior changed (#4749)
  • Use Timesheet duration instead of the "real duration between begin and end"
  • Uses the date of begin to assign the times (to match behavior in other reports)
• Catch Throwables if curl_multi_exec is disabled (#4740)
• Fixed several deprecations (#4749)
• Fix "invoices" internal menu name
• Translations update from Hosted Weblate (#4765)

Involved in this release: @kevinpapst and @weblate - thank you!

2.15.0-ls53

LinuxServer Changes:

Added LDAP module to composer

kimai Changes:

Upgrade Kimai - Install Kimai - Docker

Compatible with PHP 8.1 to 8.3

• Added "api_access" permission for limiting API access (#4779)
• Added several _process dates to invoice hydrator (#4749)
• Added activity.number and project.number to invoice hydrator (#4749)
• Added activity.invoice_text and project.invoice_text to invoice hydrator (#4749)
• Fix Cannot redirect to empty URL SAML issue (#4761)
• Simplify 2fa (deactivation) form (#4749)
• Clarify expected datetime format in API docs (#4749)
• Allow to order by activity and project number (#4760)
• Do not store hashed password for LDAP and SAML users (#4755)
• API tokens not working with certain Apache configurations (#4774)
• Dashboard widget "my working times" calculation behavior changed (#4749)
  • Use Timesheet duration instead of the "real duration between begin and end"
  • Uses the date of begin to assign the times (to match behavior in other reports)
• Catch Throwables if curl_multi_exec is disabled (#4740)
• Fixed several deprecations (#4749)
• Fix "invoices" internal menu name
• Translations update from Hosted Weblate (#4765)

Involved in this release: @kevinpapst and @weblate - thank you!