v7.0.10

Caution

Snipe-IT now requires PHP 8.1.2 or greater

Hey everyone!

While this is just a point release, we're really excited for this one. We've a bunch of small bug fixes, but also added some UX sugar that we think will make everyone's workflows a little bit easier. You can now decide where you want to go after creating, editing, or checking in/out a first class object (Assets, Accessories, Licenses, Users, etc). You can also now check out more than one accessory at a time, if that's a thing that comes up in your workflow.

Also: If your table listings text ("Showing x of y pages") defaulted to Chinese, this release handles that (via https://github.com/snipe/snipe-it/pull/15133).

We've been doing a ton of under the hood stuff that won't seem very obvious as users, but it puts us in a much better position to move more quickly on a lot of things.

Another important technical note: this release mitigates a difficult to exploit but possible attack. If someone had access to your APP_KEY, it was possible to perform an RCE attack. We mitigated this by disabling cookie serialization, but I'd still argue that if someone has your APP_KEY, you're going to have a bad time in a bunch of other ways, so this is just a gentle reminder than your APP_KEY should never, ever be shared with anyone, for any reason, and you should never use the default APP_KEY values we have in some of our example env files. If you have encrypted custom fields and need to roll your APP_KEY because you feel it could have been compromised, we have a cli utility to handle that.

Next up: Custom fields for users, and the ability to check out accessories to assets and locations.

What's Changed

• Adds a command to resend acceptance emails by @Godmartinz in https://github.com/snipe/snipe-it/pull/14722
• Allow setting a prefix for Livewire's update and asset urls by @marcusmoore in https://github.com/snipe/snipe-it/pull/15073
• Fixed #10224: fix route names for optimize command by @dbakan in https://github.com/snipe/snipe-it/pull/15082
• Fixed #15094 - wrong translation string for model on checkout by @snipe in https://github.com/snipe/snipe-it/pull/15099
• Small layout tweaks to oauth page by @snipe in https://github.com/snipe/snipe-it/pull/15085
• Fixed #15067 - updated ldap sync locale to use app()->getLocale() by @snipe in https://github.com/snipe/snipe-it/pull/15084
• Fixed: Missing Translation on a Tooltip by @akemidx in https://github.com/snipe/snipe-it/pull/15075
• Added EULAs in print user's assets by @mauro-miatello in https://github.com/snipe/snipe-it/pull/15088
• Checkout multiple of an accessory in one checkout by @snipe in https://github.com/snipe/snipe-it/pull/15114
• Improved Docker environment settings: implement PHP_UPLOAD_LIMIT for Alpine images by @r-xyz in https://github.com/snipe/snipe-it/pull/15115
• Fixed a coupled test namespaces by @marcusmoore in https://github.com/snipe/snipe-it/pull/15110
• More localizations by @snipe in https://github.com/snipe/snipe-it/pull/15101
• Updated language strings by @snipe in https://github.com/snipe/snipe-it/pull/15120
• Added #14426: Makes all Manufacturer links dynamic, not just warranty lookup by @DrekiDegga in https://github.com/snipe/snipe-it/pull/14530
• Fixed #15121 - bulk delete restore logging by @snipe in https://github.com/snipe/snipe-it/pull/15122
• Added tests for bulk asset deletion and restore by @snipe in https://github.com/snipe/snipe-it/pull/15123
• Fixed use statement for Crypt in the importer, removed unused statements by @snipe in https://github.com/snipe/snipe-it/pull/15124
• Show existing images on user edit page by @snipe in https://github.com/snipe/snipe-it/pull/15125
• Fixes #15076 - Removes ability to remove the default avatar from disk by @snipe in https://github.com/snipe/snipe-it/pull/15127
• Nicer consumables layout by @snipe in https://github.com/snipe/snipe-it/pull/15128
• Hides the “Disable Other Login Mechanisms” if remote user option isn't checked by @snipe in https://github.com/snipe/snipe-it/pull/15132
• Load the english file again in case BS table doesn’t have a translation by @snipe in https://github.com/snipe/snipe-it/pull/15133
• [Snyk] Upgrade bootstrap-table from 1.22.5 to 1.23.0 #15131 by @snipe in https://github.com/snipe/snipe-it/pull/15134
• Updated translations by @snipe in https://github.com/snipe/snipe-it/pull/15144
• Switch to nb-NO from no-NO for Norwegian by @snipe in https://github.com/snipe/snipe-it/pull/15143
• Fix setup ssl check by @uberbrady in https://github.com/snipe/snipe-it/pull/15147
• Add Form Request and Tests for Update Asset API Method by @spencerrlongg in https://github.com/snipe/snipe-it/pull/14458
• Remove cookie serialization by @snipe in https://github.com/snipe/snipe-it/pull/15136
• Fixed start_date and end_date in user importer by @marcusmoore in https://github.com/snipe/snipe-it/pull/15148
• Fixed: Requiredness Check Bug by @spencerrlongg in https://github.com/snipe/snipe-it/pull/15149
• Fixed env var for backup config - related to #14964 by @snipe in https://github.com/snipe/snipe-it/pull/15153
• Fixes #15103 - Added EOL and audit into to user profile assets by @snipe in https://github.com/snipe/snipe-it/pull/15154
• Switch dockerfile to using php8.2 instead of 8.1 due to Alpine changes by @uberbrady in https://github.com/snipe/snipe-it/pull/15155
• [Snyk] Security upgrade alpine from 3.18.6 to 3.19 by @snipe in https://github.com/snipe/snipe-it/pull/15151
• Cleaned up UI on asset view by @snipe in https://github.com/snipe/snipe-it/pull/15158
• Allow cloning of deleted assets by @snipe in https://github.com/snipe/snipe-it/pull/15160
• Fixes 500 when depreciation is active but no purchase date by @snipe in https://github.com/snipe/snipe-it/pull/15161
• Added assets endpoint for locations by @snipe in https://github.com/snipe/snipe-it/pull/15162
• Registered custom anonymous blade component directory by @marcusmoore in https://github.com/snipe/snipe-it/pull/15150
• Improve restore sanitization - Fixes [sc-24840] by @uberbrady in https://github.com/snipe/snipe-it/pull/15168
• Create intermediate directories on restore if needed - Fixes [SC-25950] by @uberbrady in https://github.com/snipe/snipe-it/pull/15169
• Use blade component for submit redirect on asset edit/create by @snipe in https://github.com/snipe/snipe-it/pull/15172
• Dynamically iterate through the skin listing to build skins by @uberbrady in https://github.com/snipe/snipe-it/pull/15170
• Use the pwd_secure_min value (plus 5) for generated password by @snipe in https://github.com/snipe/snipe-it/pull/15187

New Contributors

• @dbakan made their first contribution in https://github.com/snipe/snipe-it/pull/15082
• @r-xyz made their first contribution in https://github.com/snipe/snipe-it/pull/15115
• @DrekiDegga made their first contribution in https://github.com/snipe/snipe-it/pull/14530

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.9...v7.0.10

v7.0.9

Caution

Snipe-IT now requires PHP 8.1.2 or greater

Another small patch release which largely handles missing translations and the some refinements on the upgrade.php script to make upgrading a little smoother, and added a boatload more automated tests. We also tightened up some queries on the consumables side, so hopefully those with much larger data sets for consumables will notice speedier load times there.

Additionally, we identified and fixed an issue where in some circumstances, custom field data could be lost when auditing an asset, and we also added better history tracking for consumables.

What's Changed

• General cleanup - Docblock fixes, adding type hinting, added tests, added asset model form validator by @snipe in https://github.com/snipe/snipe-it/pull/15029
• Fixed API key missing translations by @snipe in https://github.com/snipe/snipe-it/pull/15055
• Fixed missing print user assigned filter by @Godmartinz in https://github.com/snipe/snipe-it/pull/15059
• Fixes Potential Exception by @spencerrlongg in https://github.com/snipe/snipe-it/pull/15057
• upgrade.php: More helpful output when we can't read .upgrade_requirements.json by @jerm in https://github.com/snipe/snipe-it/pull/15051
• upgrade.php: If we're on windows, make sure we can load intermediate certificates by @jerm in https://github.com/snipe/snipe-it/pull/15052
• Small consumables optimizations by @snipe in https://github.com/snipe/snipe-it/pull/15071
• Fixed inconsistent attributes order in Print All Assigned report by @FlorentDotMe in https://github.com/snipe/snipe-it/pull/15069

New Contributors

• @FlorentDotMe made their first contribution in https://github.com/snipe/snipe-it/pull/15069

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.8...v7.0.9

v7.0.8

Caution

Snipe-IT now requires PHP 8.1.2 or greater

Happy Monday, nerds! This release fixes some missing translations, adds some improvements for merging users, fixes a bug where custom field data could be lost when auditing under certain conditions, and also adds some query optimizations for speed. Enjoy!

What's Changed

• Added missing translations by @snipe in https://github.com/snipe/snipe-it/pull/15010
• Removed non-counts from allowed array by @snipe in https://github.com/snipe/snipe-it/pull/15021
• Resolved Potential Issue when Deleting Personal Access Tokens by @spencerrlongg in https://github.com/snipe/snipe-it/pull/15022
• Fixed #15005 - Improvements on user merge by @snipe in https://github.com/snipe/snipe-it/pull/15016
• Added files column to bulk user delete, optimized queries by @snipe in https://github.com/snipe/snipe-it/pull/15023
• Upgrade webpack from 5.91.0 to 5.92.0 #15008 by @snipe in https://github.com/snipe/snipe-it/pull/15025
• Added #15015 - ability for admins to select default avatar by @snipe in https://github.com/snipe/snipe-it/pull/15027
• Fixed #15037 - Removed custom fieldsets on auditing - it’s not used (yet) by @snipe in https://github.com/snipe/snipe-it/pull/15043
• Snyk - Updated jquery validation by @snipe in https://github.com/snipe/snipe-it/pull/15045
• Added localization for bootstrap-tables by @snipe in https://github.com/snipe/snipe-it/pull/15046

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.7...v7.0.8

v7.0.7

Caution

Snipe-IT now requires PHP 8.1.2 or greater

Happy Tuesday! This point release handles the unusual (but possible) use-case where the language in APP_LOCALE had not been updated correctly to use the four/five letter ISO code and was still using the two-letter code, so users might have seen issues with translation strings related to FALLBACK_APP_LOCALE. This also fixes the upgrade script where the requirements checks would fail if you did not have gd installed, but you do have Imagemagick installed. Plus, a new label template for endless 62mm Brother printer rolls!

What's Changed

• Updated Livewire to v3 by @marcusmoore in https://github.com/snipe/snipe-it/pull/14831
• Check that the user exists before trying to fill the request by @snipe in https://github.com/snipe/snipe-it/pull/14982
• Fixed #14976, #14975, #14973 - Translation strings aren't always working by @uberbrady in https://github.com/snipe/snipe-it/pull/14981
• Removed "Edit Your Profile" button from View Assets page if user is not able to edit their profile by @marcusmoore in https://github.com/snipe/snipe-it/pull/14999
• Added links on user table to tabs on show user page by @marcusmoore in https://github.com/snipe/snipe-it/pull/15001
• Fixed extension requirement checking in upgrade script by @marcusmoore in https://github.com/snipe/snipe-it/pull/14986
• Use more modern reference for input text by @snipe in https://github.com/snipe/snipe-it/pull/14983
• Add Label Template: Use with endless 62mm Brother printer rolls by @Galaxy102 in https://github.com/snipe/snipe-it/pull/14870

New Contributors

• @Galaxy102 made their first contribution in https://github.com/snipe/snipe-it/pull/14870

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.6...v7.0.7

v7.0.6

Caution

Snipe-IT now requires PHP 8.1.2 or greater

This is a small point release that should handle a few translation issues as well as fixing some configuration issues for docker users and users behind a reverse proxy server using SAML.

What's Changed

• Added avif to translation string by @snipe in https://github.com/snipe/snipe-it/pull/14963
• Fixes #14968 - translate forbidden page by @snipe in https://github.com/snipe/snipe-it/pull/14971
• Fixed importer table background color by @Godmartinz in https://github.com/snipe/snipe-it/pull/14966
• Fixed #14895 and #14919 - set SAML baseurl to a sensible default for docker users and users behind a reverse proxy by @uberbrady in https://github.com/snipe/snipe-it/pull/14974

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.5...v7.0.6

v7.0.5

Caution

Snipe-IT now requires PHP 8.1.2 or greater

This release largely handles some translation issues (especially related to backup notification emails), a few small importer issues related to date importing, and a bunch of additional automated tests. We also added the feature of being able to disallow your users to edit their profiles at all (via Admin > General Settings), and fixed an issue around the ability to delete users.

What's Changed

• Fixed importer audit date validation issue by @snipe in https://github.com/snipe/snipe-it/pull/14908
• Fixed backup notification translations by @snipe in https://github.com/snipe/snipe-it/pull/14920
• Added lastname.firstname as email format by @snipe in https://github.com/snipe/snipe-it/pull/14921
• Add storage path permissions test by @bryanlopezinc in https://github.com/snipe/snipe-it/pull/14912
• Added some style changes in label field selector for the DefaultLabel template by @Godmartinz in https://github.com/snipe/snipe-it/pull/14791
• Fixed incorrect translation path for edit profile confirmation message by @snipe in https://github.com/snipe/snipe-it/pull/14922
• Updated language strings by @snipe in https://github.com/snipe/snipe-it/pull/14923
• Fixed small deprecation warnings for PHP8.2 by @snipe in https://github.com/snipe/snipe-it/pull/14932
• Possible fix for #14915 - error on import when status label is not provided and no deployable statuses can be found by @snipe in https://github.com/snipe/snipe-it/pull/14924
• Added php 8.3 test by @snipe in https://github.com/snipe/snipe-it/pull/14934
• Fixed #14935 - improvements and more tests around user deletion by @snipe in https://github.com/snipe/snipe-it/pull/14937
• Updated PHPunit by @snipe in https://github.com/snipe/snipe-it/pull/14941
• Check that there is a depreciation date before formatting by @snipe in https://github.com/snipe/snipe-it/pull/14949
• Bump docker/build-push-action from 5 to 6 by @dependabot in https://github.com/snipe/snipe-it/pull/14947
• Updated translations by @snipe in https://github.com/snipe/snipe-it/pull/14950
• Additional translation strings by @snipe in https://github.com/snipe/snipe-it/pull/14925
• Added ability to disallow profile editing by @snipe in https://github.com/snipe/snipe-it/pull/14951

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.4...v7.0.5

v7.0.4

Caution

Snipe-IT now requires PHP 8.1 or greater

This release just addresses some small issues for folks behind reverse proxies and fixes a few small bits for folks on PHP 8.1.x that would have only have had issues if they pulled from master within the past 24 hours.

What's Changed

• Prefaced fields with “users” for clarity by @snipe in https://github.com/snipe/snipe-it/pull/14893
• Fixed #14882 - Properly scope archived based on settings by @snipe in https://github.com/snipe/snipe-it/pull/14894
• Fixed #14898 - (regression) Reverted debugbar back into require vs require-dev by @snipe in https://github.com/snipe/snipe-it/pull/14899
• Fixed unable to install on PHP 8.1 by @marcusmoore in https://github.com/snipe/snipe-it/pull/14900
• Possible fix for proxy/reverse proxy by @snipe in https://github.com/snipe/snipe-it/pull/14896

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.3...v7.0.4

v7.0.3

Caution

Snipe-IT now requires PHP 8.1 or greater

If you happen to be running Snipe-IT over a reverse-proxy and when you upgrade, your CSS does not load, try setting APP_FORCE_TLS=true in your .env.

What's Changed

• Fixed missing } by @marcusmoore in https://github.com/snipe/snipe-it/pull/14884
• Added more tests around Asset Model by @marcusmoore in https://github.com/snipe/snipe-it/pull/14885
• Fixed namespace for ViewUserTest by @marcusmoore in https://github.com/snipe/snipe-it/pull/14887
• Bumped debugbar from v3.13.0 to v3.13.5 to fix issue with session messages by @marcusmoore in https://github.com/snipe/snipe-it/pull/14886

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.2...v7.0.3

v7.0.2

Caution

Snipe-IT now requires PHP 8.1 or greater

Quick fix release for a backup notification issue, and also cleaned up some really small layout glitches.

If you happen to be running Snipe-IT over a reverse-proxy and when you upgrade, your CSS does not load, try setting APP_FORCE_TLS=true in your .env.

What's Changed

• Fixed small footer issues by @snipe in https://github.com/snipe/snipe-it/pull/14876
• Updated spatie backup notification config class names by @snipe in https://github.com/snipe/snipe-it/pull/14877
• Fixed weird layout in admin oauth [sc-25673] by @snipe in https://github.com/snipe/snipe-it/pull/14879

Full Changelog: https://github.com/snipe/snipe-it/compare/v7.0.1...v7.0.2

v7.0.1

Caution

Snipe-IT now requires PHP 8.1 or greater

There's always one, isn't there :)

This fixes a framework compatibility issue we missed that no longer uses the static Request::has() facade, and adds some tests to make sure we don't miss that in the future.

If you happen to be running Snipe-IT over a reverse-proxy and when you upgrade, your CSS does not load, try setting APP_FORCE_TLS=true in your .env.