Skip to content

Commit 8d7f8bd

Browse files
committed
Merge branch 'release' into 'master'
v5.3.2 See merge request passbolt/passbolt-ce-api!413
2 parents 857ad8c + f5f7e5c commit 8d7f8bd

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

45 files changed

+502
-115
lines changed

.ddev/commands/host/analyze

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
#!/usr/bin/env bash
2+
3+
## Description: Runs CS check & static analysis commands
4+
## Usage: analyze
5+
## Example: "ddev analyze"
6+
7+
set -eo pipefail
8+
9+
ddev composer stan
10+
ddev composer psalm
11+
ddev composer cs-check # give coding style lower priority

.ddev/commands/host/init_passbolt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88

99
set -eo pipefail
1010

11-
ddev composer install
11+
ddev composer install --no-interaction
1212
ddev create_passbolt_db
1313
if [ ! -f config/jwt/jwt.key ] || [ ! -f config/jwt/jwt.pem ]; then
1414
ddev cake passbolt create_jwt_keys

.ddev/commands/host/refresh

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
#!/usr/bin/env bash
2+
3+
## Description: Run this command after changing the branch to get up-to-date state
4+
## Usage: refresh
5+
## Example: "ddev refresh"
6+
7+
set -eo pipefail
8+
9+
ddev composer install --no-interaction
10+
ddev cake migrations migrate
11+
ddev cake cache clear_all

.ddev/config.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ composer_version: "2"
1414
web_environment:
1515
- DEBUG=true
1616
- APP_FULL_BASE_URL=https://passbolt-pro-api.ddev.site
17+
- PASSBOLT_SELENIUM_ACTIVE=true
1718
- DATASOURCES_DEFAULT_HOST=db
1819
- DATASOURCES_DEFAULT_USERNAME=db
1920
- DATASOURCES_DEFAULT_PASSWORD=db

.gitlab-ci/jobs/php_unit_tests/sequential/php_unit_tests.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,6 @@
7373
DATASOURCES_DEFAULT_PASSWORD: $POSTGRES_PASSWORD
7474
DATASOURCES_DEFAULT_PORT: 5432
7575
DATASOURCES_DEFAULT_ENCODING: "utf8"
76-
DATASOURCES_DEFAULT_SCHEMA: "public"
7776
# Test
7877
DATASOURCES_TEST_DRIVER: Cake\Database\Driver\Postgres
7978
DATASOURCES_TEST_HOST: 127.0.0.1
@@ -82,7 +81,6 @@
8281
DATASOURCES_TEST_PASSWORD: $POSTGRES_PASSWORD
8382
DATASOURCES_TEST_PORT: 5432
8483
DATASOURCES_TEST_ENCODING: "utf8"
85-
DATASOURCES_TEST_SCHEMA: 'public'
8684
# TO BE REPLACED WITH
8785
# before_script:
8886
# - apt-get update

CHANGELOG.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,28 @@
22
All notable changes to this project will be documented in this file.
33
This project adheres to [Semantic Versioning](http://semver.org/).
44

5+
## [5.3.2] - 2025-07-16
6+
### Fixed
7+
- PB-43910 As an administrator installing passbolt on postgres, the default postgres schema should be public
8+
- PB-43956 Fix OpenPGP_PHP behavior discrepancy for keys with multiple self-signed key signatures with different expiry times
9+
- PB-43746 A metadata key should be shareable with new users even if the administrator who created the key is soft-deleted
10+
- PB-37106 As an administrator running healthCheck, I should see the right path to the logs if the directory permissions are not correct
11+
12+
### Maintenance
13+
- PB-43966 Selenium specific endpoints should be enabled for local testing with ddev
14+
- PB-43480 Writes stack traces in logs on metadata key validation 500 errors
15+
16+
## [5.3.2-test.1] - 2025-07-15
17+
### Fixed
18+
- PB-43910 As an administrator installing passbolt on postgres, the default postgres schema should be public
19+
- PB-43956 Fix OpenPGP_PHP behavior discrepancy for keys with multiple self-signed key signatures with different expiry times
20+
- PB-43746 A metadata key should be shareable with new users even if the administrator who created the key is soft-deleted
21+
- PB-37106 As an administrator running healthCheck, I should see the right path to the logs if the directory permissions are not correct
22+
23+
### Maintenance
24+
- PB-43966 Selenium specific endpoints should be enabled for local testing with ddev
25+
- PB-43480 Writes stack traces in logs on metadata key validation 500 errors
26+
527
## [5.3.1] - 2025-07-09
628
### Fixed
729
- PB-43748 Users are unable to save a new standalone custom field resource

RELEASE_NOTES.md

Lines changed: 23 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,27 @@
1-
Release song: https://www.youtube.com/watch?v=h7V36waLN0M
1+
Release song: https//www.youtube.com/watch?v=-GxmblM_jss
22

3-
This hot-fix resolves a regression introduced in v5.3.0 that blocked the creation of standalone Custom Fields content types. A validation error in the API prevented these resources from being saved. With v5.3.1, the validation logic has been corrected, so users can now create and test Custom Fields content types as intended.
3+
Passbolt v5.3.2 is a security release designed to strengthen the security posture of your organization. It introduces a
4+
clipboard flushing feature and addresses issues related to encrypted metadata.
45

5-
Thank you to everyone in the community who spotted the issue so quickly and helped us verify the fix!
6+
The new clipboard flush timer lets you copy secrets just long enough to use them; clipboard data is automatically cleared
7+
when the countdown (30s) expires, significantly reducing the risk of accidental exposure or leaks from forgotten clipboard content.
68

7-
## [5.3.1] - 2025-07-09
9+
This update also resolves several encrypted metadata issues, moving the feature closer to general availability.
10+
Organizations can now enable encrypted metadata even if users have imported their own more complex keys
11+
(e.g. keys that were set to expire at some point), streamlining adoption for advanced users. Admin changes are smoother
12+
too: if the original metadata-enabling administrator leaves, newly invited users will still receive the metadata key automatically,
13+
removing the need for manual distribution. Lastly, users who owned shared resources using the new encrypted metadata format can now
14+
be deleted without issue, as ownership transfer is now handled correctly during the deletion process.
15+
A big thank you to all testers who helped refine these features. If you’re new to any of them, we welcome your feedback on the community
16+
forum or through your usual support channels!
17+
18+
## [5.3.2] - 2025-07-16
819
### Fixed
9-
- PB-43748 Users are unable to save a new standalone custom field resource
20+
- PB-43910 As an administrator installing passbolt on postgres, the default postgres schema should be public
21+
- PB-43956 Fix OpenPGP_PHP behavior discrepancy for keys with multiple self-signed key signatures with different expiry times
22+
- PB-43746 A metadata key should be shareable with new users even if the administrator who created the key is soft-deleted
23+
- PB-37106 As an administrator running healthCheck, I should see the right path to the logs if the directory permissions are not correct
24+
25+
### Maintenance
26+
- PB-43966 Selenium specific endpoints should be enabled for local testing with ddev
27+
- PB-43480 Writes stack traces in logs on metadata key validation 500 errors

composer.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -91,7 +91,7 @@
9191
"phpunit/phpunit": "^10.1.0",
9292
"cakephp/cakephp-codesniffer": "^5.0",
9393
"passbolt/passbolt-selenium-api": "dev-cakephp5#0d46ae337ba71659191e7625c96ff2f861da44d1",
94-
"passbolt/passbolt-test-data": "dev-master#e0e3771",
94+
"passbolt/passbolt-test-data": "dev-master#be1fe75",
9595
"vierge-noire/cakephp-fixture-factories": "^v3.0",
9696
"cakephp/localized": "^5.0",
9797
"cakedc/cakephp-phpstan": "^3.2",

composer.lock

Lines changed: 5 additions & 5 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

config/app.default.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -338,7 +338,7 @@
338338
'username' => env('DATASOURCES_DEFAULT_USERNAME', ''),
339339
'password' => env('DATASOURCES_DEFAULT_PASSWORD', ''),
340340
'database' => env('DATASOURCES_DEFAULT_DATABASE', ''),
341-
'schema' => env('DATASOURCES_DEFAULT_SCHEMA', ''),
341+
'schema' => env('DATASOURCES_DEFAULT_SCHEMA', 'public'),
342342
'ssl_key' => env('DATASOURCES_DEFAULT_SSL_KEY', ''),
343343
'ssl_cert' => env('DATASOURCES_DEFAULT_SSL_CERT', ''),
344344
'ssl_ca' => env('DATASOURCES_DEFAULT_SSL_CA', ''),
@@ -371,7 +371,7 @@
371371
'username' => env('DATASOURCES_TEST_USERNAME', 'my_app'),
372372
'password' => env('DATASOURCES_TEST_PASSWORD', 'secret'),
373373
'database' => env('DATASOURCES_TEST_DATABASE', 'my_app'),
374-
'schema' => env('DATASOURCES_TEST_SCHEMA', ''),
374+
'schema' => env('DATASOURCES_TEST_SCHEMA', 'public'),
375375
'ssl_key' => env('DATASOURCES_TEST_SSL_KEY', ''),
376376
'ssl_cert' => env('DATASOURCES_TEST_SSL_CERT', ''),
377377
'ssl_ca' => env('DATASOURCES_TEST_SSL_CA', ''),

0 commit comments

Comments
 (0)