Skip to content

Commit a978f19

Browse files
gmougenelgmougenel
committed
Merge branch 'release' into 'master'
Release v5.2.0 See merge request passbolt/passbolt-ce-api!396
2 parents ad6bae9 + e5921af commit a978f19

File tree

151 files changed

+17273
-471
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

151 files changed

+17273
-471
lines changed

‎CHANGELOG.md

Lines changed: 74 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,80 @@
22
All notable changes to this project will be documented in this file.
33
This project adheres to [Semantic Versioning](http://semver.org/).
44

5+
## [5.2.0] - 2025-06-11
6+
### Added
7+
- PB-42861 As a user I can use passbolt in Slovenian language
8+
- PB-42986 As a user I can use passbolt in Ukrainian language
9+
- PB-42878 Add User GPG key policies (ECC by default) support behind a feature flag
10+
- PB-41966 As a resource owner I should receive a notification on the day that my resources expire
11+
12+
### Improved
13+
- PB-42706 Alias POST /metadata/keys/privates.json endpoint to POST /metadata/keys/private.json
14+
15+
### Fixed
16+
- PB-42800 The check metadata key presence in the healthcheck should not fail if no metadata key is required
17+
- PB-42701 Fixes the contain of missing metadata key on view user endpoint
18+
- PB-42592 Add missing attribute in ldap default configuration file
19+
- PB-42574 Fix LDAP Typed property error
20+
21+
### Security
22+
- PB-42687 Security alert emails should display user IP and user agent only if configured
23+
- PB-42379 PBL-13-004 - Fixes HTML injections in email notifications
24+
25+
### Maintenance
26+
- PB-42935 Upgrade API babel dev dependency
27+
- PB-42893 Upgrade API lock-link-api dev dependency
28+
- PB-42923 refactor code to remove warning in selenium execution context
29+
30+
## [5.2.0-rc.1] - 2025-06-04
31+
### Added
32+
- PB-42861 As a user I can use passbolt in Slovenian language
33+
- PB-42986 As a user I can use passbolt in Ukrainian language
34+
- PB-42878 Add User GPG key policies (ECC by default) support behind a feature flag
35+
- PB-41966 As a resource owner I should receive a notification on the day that my resources expire
36+
37+
### Improved
38+
- PB-42706 Alias POST /metadata/keys/privates.json endpoint to POST /metadata/keys/private.json
39+
40+
### Fixed
41+
- PB-42800 The check metadata key presence in the healthcheck should not fail if no metadata key is required
42+
- PB-42701 Fixes the contain of missing metadata key on view user endpoint
43+
44+
### Security
45+
- PB-42687 Security alert emails should display user IP and user agent only if configured
46+
- PB-42378 PBL-13-001 - Fixes open redirect on MFA step in login
47+
- PB-42379 PBL-13-004 - Fixes HTML injections in email notifications
48+
- PB-43115 Fix XSS in email footer where the full base URL was not escaped or sanitized
49+
50+
### Maintenance
51+
- PB-42935 Upgrade API babel dev dependency
52+
- PB-42893 Upgrade API lock-link-api dev dependency
53+
- PB-42923 refactor code to remove warning in selenium execution context
54+
55+
## [5.2.0-test.1] - 2025-06-03
56+
### Added
57+
- PB-42861 As a user I can use passbolt in Slovenian language
58+
- PB-42986 As a user I can use passbolt in Ukrainian language
59+
- PB-42878 Add User GPG key policies (ECC by default) support behind a feature flag
60+
- PB-41966 As a resource owner I should receive a notification on the day that my resources expire
61+
62+
### Improved
63+
- PB-42706 Alias POST /metadata/keys/privates.json endpoint to POST /metadata/keys/private.json
64+
65+
### Fixed
66+
- PB-42800 The check metadata key presence in the healthcheck should not fail if no metadata key is required
67+
- PB-42701 Fixes the contain of missing metadata key on view user endpoint
68+
69+
### Security
70+
- PB-42687 Security alert emails should display user IP and user agent only if configured
71+
- PB-42378 PBL-13-001 - Fixes open redirect on MFA step in login
72+
- PB-42379 PBL-13-004 - Fixes HTML injections in email notifications
73+
74+
### Maintenance
75+
- PB-42935 Upgrade API babel dev dependency
76+
- PB-42893 Upgrade API lock-link-api dev dependency
77+
- PB-42923 refactor code to remove warning in selenium execution context
78+
579
## [5.1.1] - 2025-05-22
680
### Fixed
781
- PB-42701 Fix the contain of missing metadata key on view user endpoint

‎RELEASE_NOTES.md

Lines changed: 36 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,43 @@
1-
Release song: https://www.youtube.com/watch?v=Nbav4oWMqEY
1+
Release song: https://www.youtube.com/watch?v=ZA2JknKrCbM
22

3-
This is a maintenance release to fix reported issues from Pro customers where directory synchronization was returning various type errors. It also includes a security fix to only include user’s IP & browser agent information if enabled via configuration.
3+
Passbolt 5.2 introduces the first features built on encrypted metadata, enhancing resource management and customisation.
4+
This update lays the groundwork for future improvements and delivers practical everyday benefits.
45

5-
Thank you for the valuable feedback and patience!
6+
Resources using encrypted metadata now support multiple URIs. For example, addresses like app.example.com and admin.example.com
7+
can be linked to the same credential, helping the browser extension recognise credentials across multiple domains.
8+
9+
Icons and colours can now be set for resources with encrypted metadata, using a method compatible with KeePass for easy
10+
import and export. This visual distinction helps users quickly navigate large workspaces.
11+
12+
A new density setting is available to adjust grid spacing, providing a clearer, more comfortable view.
13+
Users can easily toggle this in the workspace column settings as needed.
14+
15+
The Passbolt interface now supports Ukrainian and Slovenian languages, enabling native speakers to use the tool comfortably without relying on English.
16+
17+
Additionally, resource owners now receive notifications on the day their passwords expire, supporting teams in managing rotation policies effectively.
18+
19+
This update includes several bug fixes and maintenance improvements based on community feedback.
20+
Thanks to everyone who contributed by reporting issues and suggesting improvements.
21+
22+
## [5.2.0] - 2025-06-11
23+
### Added
24+
- PB-42861 As a user I can use passbolt in Slovenian language
25+
- PB-42986 As a user I can use passbolt in Ukrainian language
26+
- PB-42878 Add User GPG key policies (ECC by default) support behind a feature flag
27+
- PB-41966 As a resource owner I should receive a notification on the day that my resources expire
28+
29+
### Improved
30+
- PB-42706 Alias POST /metadata/keys/privates.json endpoint to POST /metadata/keys/private.json
631

7-
## [5.1.1] - 2025-05-22
832
### Fixed
9-
- PB-42701 Fix the contain of missing metadata key on view user endpoint
33+
- PB-42800 The check metadata key presence in the healthcheck should not fail if no metadata key is required
34+
- PB-42701 Fixes the contain of missing metadata key on view user endpoint
1035

1136
### Security
1237
- PB-42687 Security alert emails should display user IP and user agent only if configured
38+
- PB-42379 PBL-13-004 - Fixes HTML injections in email notifications
39+
40+
### Maintenance
41+
- PB-42935 Upgrade API babel dev dependency
42+
- PB-42893 Upgrade API lock-link-api dev dependency
43+
- PB-42923 refactor code to remove warning in selenium execution context

‎bin/cron

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,3 +7,9 @@ set -euo pipefail
77
DIR=$(dirname "$(readlink -f "$0")")
88

99
"$DIR"/cake passbolt email_digest send
10+
11+
12+
currenttime=$(date +%H:%M)
13+
if [ "$currenttime" = "08:00" ]; then
14+
"$DIR"/cake passbolt notify_about_expired_resources
15+
fi

‎composer.json

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -129,7 +129,8 @@
129129
"Passbolt\\TotpResourceTypes\\": "./plugins/PassboltCe/TotpResourceTypes/src",
130130
"Passbolt\\Rbacs\\": "./plugins/PassboltCe/Rbacs/src",
131131
"Passbolt\\PasswordPolicies\\": "./plugins/PassboltCe/PasswordPolicies/src",
132-
"Passbolt\\Metadata\\": "./plugins/PassboltCe/Metadata/src"
132+
"Passbolt\\Metadata\\": "./plugins/PassboltCe/Metadata/src",
133+
"Passbolt\\UserKeyPolicies\\": "./plugins/PassboltCe/UserKeyPolicies/src"
133134
}
134135
},
135136
"autoload-dev": {
@@ -155,7 +156,8 @@
155156
"Passbolt\\TotpResourceTypes\\Test\\": "./plugins/PassboltCe/TotpResourceTypes/tests",
156157
"Passbolt\\Rbacs\\Test\\": "./plugins/PassboltCe/Rbacs/tests",
157158
"Passbolt\\PasswordPolicies\\Test\\": "./plugins/PassboltCe/PasswordPolicies/tests",
158-
"Passbolt\\Metadata\\Test\\": "./plugins/PassboltCe/Metadata/tests"
159+
"Passbolt\\Metadata\\Test\\": "./plugins/PassboltCe/Metadata/tests",
160+
"Passbolt\\UserKeyPolicies\\Test\\": "./plugins/PassboltCe/UserKeyPolicies/tests"
159161
}
160162
},
161163
"scripts": {

‎config/default.php

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -315,6 +315,9 @@
315315
// Feature flag to allow client to tune behavior for backward compatibility
316316
'enabled' => true
317317
],
318+
'userKeyPolicies' => [
319+
'enabled' => filter_var(env('PASSBOLT_PLUGINS_USER_KEY_POLICIES_ENABLED', false), FILTER_VALIDATE_BOOLEAN),
320+
],
318321
],
319322

320323
// Activate specific entry points for selenium testing.

‎config/version.php

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
<?php
22
return [
33
'passbolt' => [
4-
'version' => '5.1.1',
5-
'name' => 'One Love',
4+
'version' => '5.2.0',
5+
'name' => 'Something\'s Got a Hold on Me',
66
],
77
'php' => [
88
'minVersion' => '8.2',

‎crowdin.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,4 +16,6 @@ export_languages:
1616
- ro
1717
- ru
1818
- sv
19+
- sl
20+
- uk
1921
commit_message: '[skip-ci]'

0 commit comments

Comments
 (0)