Skip to content

Commit bcaf0ad

Browse files
cedricalfonsicedricalfonsi
committed
Merge branch 'feature/PB-38300_52-Publish-production-API-CE' into 'master'
PB-38300 Prepare v4.11.0 production API release See merge request passbolt/passbolt-ce-api!329
2 parents ca458e6 + 6a8efca commit bcaf0ad

File tree

226 files changed

+11805
-1442
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

226 files changed

+11805
-1442
lines changed

‎.gitlab-ci/jobs/php_unit_tests/php_73.yml

+8
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,14 @@ php7.3-mariadb10.6:
5959
extends:
6060
- .test-template-parallel-scheduled
6161

62+
php7.3-mariadb11.5:
63+
variables:
64+
PHP_VERSION: "7.3"
65+
DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
66+
extends:
67+
- .test-template-parallel-scheduled
68+
allow_failure: true
69+
6270
#################
6371
# PHP 7.3 MySQL #
6472
#################

‎.gitlab-ci/jobs/php_unit_tests/php_74.yml

+8
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,14 @@ php7.4-mariadb10.6:
6161
extends:
6262
- .test-template-parallel-scheduled
6363

64+
php7.4-mariadb11.5:
65+
variables:
66+
PHP_VERSION: "7.4"
67+
DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
68+
extends:
69+
- .test-template-parallel-scheduled
70+
allow_failure: true
71+
6472
#################
6573
# PHP 7.4 MySQL #
6674
#################

‎.gitlab-ci/jobs/php_unit_tests/php_81.yml

+9
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,15 @@ php8.1-mariadb10.6:
6363
extends:
6464
- .test-template-parallel
6565

66+
php8.1-mariadb11.5:
67+
variables:
68+
PHP_VERSION: "8.1"
69+
DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
70+
extends:
71+
- .test-template-parallel-scheduled
72+
allow_failure: true
73+
74+
6675
#################
6776
# PHP 8.1 MySQL #
6877
#################

‎.gitlab-ci/jobs/php_unit_tests/php_82.yml

+8
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,14 @@ php8.2-mariadb10.6:
5656
extends:
5757
- .test-template-parallel
5858

59+
php8.2-mariadb11.5:
60+
variables:
61+
PHP_VERSION: "8.2"
62+
DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
63+
extends:
64+
- .test-template-parallel-scheduled
65+
allow_failure: true
66+
5967
#################
6068
# PHP 8.2 MySQL #
6169
#################

‎.gitlab-ci/jobs/php_unit_tests/sequential/php_unit_tests.yml

+83
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,35 @@
2727
- mysql -h $DATASOURCES_DEFAULT_HOST -u root -p$MYSQL_ROOT_PASSWORD -e "ALTER USER '$DATASOURCES_TEST_USERNAME'@'%' identified by '$DATASOURCES_TEST_PASSWORD';" mysql
2828
- mysql -h $DATASOURCES_DEFAULT_HOST -u root -p$MYSQL_ROOT_PASSWORD -e "GRANT ALL ON *.* to $DATASOURCES_TEST_USERNAME;" mysql
2929

30+
.mariadb-template:
31+
services:
32+
- name: $DATABASE_ENGINE_VERSION
33+
command:
34+
- /bin/bash
35+
- -c
36+
- |
37+
mount -t tmpfs -o size=1024m tmpfs /var/lib/mysql
38+
docker-entrypoint.sh mariadbd --default-authentication-plugin=mysql_native_password --log-bin-trust-function-creators=1
39+
# MySQL services variables
40+
variables:
41+
MARIADB_USER: user
42+
MARIADB_PASSWORD: testing-password
43+
MARIADB_ROOT_PASSWORD: testing-password2
44+
MARIADB_DATABASE: test
45+
DATASOURCES_DEFAULT_DATABASE: non_existing_database # to ensure that all tests run on the test datasource
46+
DATASOURCES_DEFAULT_USERNAME: $MARIADB_USER
47+
DATASOURCES_DEFAULT_PASSWORD: $MARIADB_PASSWORD
48+
DATASOURCES_DEFAULT_HOST: 127.0.0.1
49+
DATASOURCES_TEST_DATABASE: $MARIADB_DATABASE
50+
DATASOURCES_TEST_USERNAME: $MARIADB_USER
51+
DATASOURCES_TEST_PASSWORD: $MARIADB_PASSWORD
52+
DATASOURCES_TEST_HOST: 127.0.0.1
53+
before_script:
54+
- mariadb --version
55+
- while ! mariadb-admin -u root -h $DATASOURCES_DEFAULT_HOST -p$MARIADB_ROOT_PASSWORD ping; do sleep 1; done
56+
- mariadb -h $DATASOURCES_DEFAULT_HOST -u root -p$MARIADB_ROOT_PASSWORD -e "ALTER USER '$DATASOURCES_TEST_USERNAME'@'%' identified by '$DATASOURCES_TEST_PASSWORD';" mysql
57+
- mariadb -h $DATASOURCES_DEFAULT_HOST -u root -p$MARIADB_ROOT_PASSWORD -e "GRANT ALL ON *.* to $DATASOURCES_TEST_USERNAME;" mysql
58+
3059
.postgres-template:
3160
services:
3261
- $DATABASE_ENGINE_VERSION # should be DATABASE_ENGINE_VERSION
@@ -273,3 +302,57 @@ seq-php8.3-mariadb10.5:
273302
- .test-template
274303
rules:
275304
- if: "$TEST_DISABLED == null"
305+
306+
307+
# Mariadb 11.5 tests
308+
309+
seq-php8.0-mariadb11.5:
310+
variables:
311+
PHP_VERSION: "8.0"
312+
DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
313+
extends:
314+
- .mariadb-template
315+
- .test-template
316+
rules:
317+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "master"'
318+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
319+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "release"'
320+
allow_failure: true
321+
322+
seq-php8.1-mariadb11.5:
323+
variables:
324+
PHP_VERSION: "8.1"
325+
DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
326+
extends:
327+
- .mariadb-template
328+
- .test-template
329+
rules:
330+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "master"'
331+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
332+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "release"'
333+
allow_failure: true
334+
335+
# This is what we ship with the docker image as of 14 Nov 2024
336+
seq-php8.2-mariadb11.5:
337+
variables:
338+
PHP_VERSION: "8.2"
339+
DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
340+
extends:
341+
- .mariadb-template
342+
- .test-template
343+
rules:
344+
- if: "$TEST_DISABLED == null"
345+
allow_failure: true
346+
347+
seq-php8.3-mariadb11.5:
348+
variables:
349+
PHP_VERSION: "8.3"
350+
DATABASE_ENGINE_VERSION: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/mariadb:11.5"
351+
extends:
352+
- .mariadb-template
353+
- .test-template
354+
rules:
355+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "master"'
356+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "develop"'
357+
- if: '$TEST_DISABLED == null && $CI_COMMIT_BRANCH == "release"'
358+
allow_failure: true

‎CHANGELOG.md

+176
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,182 @@
22
All notable changes to this project will be documented in this file.
33
This project adheres to [Semantic Versioning](http://semver.org/).
44

5+
## [4.11.0] - 2025-01-30
6+
### Added
7+
- PB-35761 As an administrator I receive an email if zero_knowledge_key_share is set to true and a new user completed the setup
8+
- PB-36558 As an administrator I can mark metadata_keys as expired
9+
- PB-35986 As an administrator I can share missing metadata private keys for users that needs them
10+
- PB-35925 As an administrator I can see if users are missing access to metadata keys
11+
- PB-37069 As an administration I can run a command to share metadata private keys with users that need them
12+
- PB-37068 As a user I can see if I am missing metadata keys
13+
- PB-36600 As an administrator I should be notified when an administrator expires a metadata key
14+
- PB-35418 As an administrator I should receive an email notification when a metadata key is deleted
15+
- PB-37361 As an administrator I can rotate metadata keys encrypting resources metadata
16+
- PB-37697 As an administrator I can upgrade resources to v5 format
17+
- PB-35927 As an administrator I can define an allow_v4_v5_upgrade metadata type settings
18+
- PB-35923 As an administrator I cannot add a new metadata key if there is only 2 that are active
19+
- PB-34463 As an administrator I cannot reuse metadata keys as the account recovery key
20+
- PB-35929 Update edit resource to support allow_v4_v5_upgrade settings
21+
- PB-35932 Update edit folders to support allow_v4_v5_upgrade settings
22+
23+
### Fixed
24+
- PB-37719 Fix resource types index controller should not return deleted resource types per default
25+
- PB-36925 Cast configure usage to avoid fatal type error on missing fullBaseUrl
26+
- PB-36576 Fix as a user I cannot create or edit a tag with an expired or deleted metadata key
27+
- PB-37097 Fix prevent to use v5 resource_type_ids if v5 flag is off
28+
- PB-36930 Fix some email sentences not translated and markers errors in translation
29+
- PB-37096 Fix healthcheck relying on symfony/process should fail gracefully in case of process run exception (GITHUB #531)
30+
- PB-36989 Fix namespace composer warnings
31+
- PB-37343 Fixes postgres dump by adding PGPASSWORD env since .pgpass is not generated on the passbolt installation
32+
- PB-38026 As an administrator running the cleanup command I should not see issues on soft deleted groups
33+
- PB-38261 Fix always failing IsNotAccountRecoveryFingerprintRule for metadata keys
34+
- PB-38262 Fix always failing metadata key creation when zero-knowledge is disabled, and no metadata keys are present
35+
36+
### Security
37+
- PB-37974 Upgrade CakePHP to v4.5.9
38+
- PB-38166 Passbolt app router should not fall back on Host header if full-base url is not set
39+
40+
### Maintenance
41+
- PB-35785 Upgrade psalm/phpstan to latest version as applicable
42+
- PB-35119 Fix tests failing when full base url is not-https
43+
- PB-37000 Fix bug of wrong relation for Rbacs to Log.Actions.
44+
- PB-37072 Fix LatestVersionApplicationHealthcheck test failing due to github not reachable
45+
- PB-37071 Fix PHPUnit 10 deprecations
46+
- PB-36237 Fix frequently failing TOTP setup/verify tests
47+
- PB-38184 Fix synk vulnerability for nesbot/carbon PHP Remote File Inclusion
48+
49+
## [4.11.0-test.3] - 2025-01-30
50+
### Added
51+
- PB-35761 As an administrator I receive an email if zero_knowledge_key_share is set to true and a new user completed the setup
52+
- PB-36558 As an administrator I can mark metadata_keys as expired
53+
- PB-35986 As an administrator I can share missing metadata private keys for users that needs them
54+
- PB-35925 As an administrator I can see if users are missing access to metadata keys
55+
- PB-37069 As an administration I can run a command to share metadata private keys with users that need them
56+
- PB-37068 As a user I can see if I am missing metadata keys
57+
- PB-36600 As an administrator I should be notified when an administrator expires a metadata key
58+
- PB-35418 As an administrator I should receive an email notification when a metadata key is deleted
59+
- PB-37361 As an administrator I can rotate metadata keys encrypting resources metadata
60+
- PB-37697 As an administrator I can upgrade resources to v5 format
61+
- PB-35927 As an administrator I can define an allow_v4_v5_upgrade metadata type settings
62+
- PB-35923 As an administrator I cannot add a new metadata key if there is only 2 that are active
63+
- PB-34463 As an administrator I cannot reuse metadata keys as the account recovery key
64+
- PB-35929 Update edit resource to support allow_v4_v5_upgrade settings
65+
- PB-35932 Update edit folders to support allow_v4_v5_upgrade settings
66+
67+
### Fixed
68+
- PB-37719 Fix resource types index controller should not return deleted resource types per default
69+
- PB-36925 Cast configure usage to avoid fatal type error on missing fullBaseUrl
70+
- PB-36576 Fix as a user I cannot create or edit a tag with an expired or deleted metadata key
71+
- PB-37097 Fix prevent to use v5 resource_type_ids if v5 flag is off
72+
- PB-36930 Fix some email sentences not translated and markers errors in translation
73+
- PB-37096 Fix healthcheck relying on symfony/process should fail gracefully in case of process run exception
74+
- PB-36989 Fix namespace composer warnings
75+
- PB-37343 Fixes postgres dump by adding PGPASSWORD env since .pgpass is not generated on the passbolt installation
76+
- PB-38026 As an administrator running the cleanup command I should not see issues on soft deleted groups
77+
- PB-38261 Fix always failing IsNotAccountRecoveryFingerprintRule for metadata keys
78+
- PB-38262 Fix always failing metadata key creation when zero-knowledge is disabled, and no metadata keys are present
79+
- PB-38166 Passbolt app router should not fall back on Host header if full-base url is not set
80+
81+
### Security
82+
- PB-37974 Upgrade CakePHP to v4.5.9
83+
84+
### Maintenance
85+
- PB-35785 Upgrade psalm/phpstan to latest version as applicable
86+
- PB-35119 Fix tests failing when full base url is not-https
87+
- PB-37000 Fix bug of wrong relation for Rbacs to Log.Actions.
88+
- PB-37072 Fix LatestVersionApplicationHealthcheck test failing due to github not reachable
89+
- PB-37071 Fix PHPUnit 10 deprecations
90+
- PB-36237 Fix frequently failing TOTP setup/verify tests
91+
- PB-38184 Fix synk vulnerability for nesbot/carbon PHP Remote File Inclusion
92+
93+
## [4.11.0-test.2] - 2025-01-29
94+
### Added
95+
- PB-35761 As an administrator I receive an email if zero_knowledge_key_share is set to true and a new user completed the setup
96+
- PB-36558 As an administrator I can mark metadata_keys as expired
97+
- PB-35986 As an administrator I can share missing metadata private keys for users that needs them
98+
- PB-35925 As an administrator I can see if users are missing access to metadata keys
99+
- PB-37069 As an administration I can run a command to share metadata private keys with users that need them
100+
- PB-37068 As a user I can see if I am missing metadata keys
101+
- PB-36600 As an administrator I should be notified when an administrator expires a metadata key
102+
- PB-35418 As an administrator I should receive an email notification when a metadata key is deleted
103+
- PB-37361 As an administrator I can rotate metadata keys encrypting resources metadata
104+
- PB-37697 As an administrator I can upgrade resources to v5 format
105+
- PB-35927 As an administrator I can define an allow_v4_v5_upgrade metadata type settings
106+
- PB-35923 As an administrator I cannot add a new metadata key if there is only 2 that are active
107+
- PB-34463 As an administrator I cannot reuse metadata keys as the account recovery key
108+
- PB-35929 Update edit resource to support allow_v4_v5_upgrade settings
109+
- PB-35932 Update edit folders to support allow_v4_v5_upgrade settings
110+
111+
### Fixed
112+
- PB-37719 Fix resource types index controller should not return deleted resource types per default
113+
- PB-36925 Cast configure usage to avoid fatal type error on missing fullBaseUrl
114+
- PB-36576 Fix as a user I cannot create or edit a tag with an expired or deleted metadata key
115+
- PB-37097 Fix prevent to use v5 resource_type_ids if v5 flag is off
116+
- PB-36930 Fix some email sentences not translated and markers errors in translation
117+
- PB-37096 Fix healthcheck relying on symfony/process should fail gracefully in case of process run exception
118+
- PB-36989 Fix namespace composer warnings
119+
- PB-37343 Fixes postgres dump by adding PGPASSWORD env since .pgpass is not generated on the passbolt installation
120+
- PB-38026 As an administrator running the cleanup command I should not see issues on soft deleted groups
121+
- PB-38261 Fix always failing IsNotAccountRecoveryFingerprintRule for metadata keys
122+
- PB-38262 Fix always failing metadata key creation when zero-knowledge is disabled, and no metadata keys are present
123+
- PB-38166 Passbolt app router should not fall back on Host header if full-base url is not set
124+
125+
### Security
126+
- PB-37974 Upgrade CakePHP to v4.5.9
127+
128+
### Maintenance
129+
- PB-35785 Upgrade psalm/phpstan to latest version as applicable
130+
- PB-35119 Fix tests failing when full base url is not-https
131+
- PB-37000 Fix bug of wrong relation for Rbacs to Log.Actions.
132+
- PB-37072 Fix LatestVersionApplicationHealthcheck test failing due to github not reachable
133+
- PB-37071 Fix PHPUnit 10 deprecations
134+
- PB-36237 Fix frequently failing TOTP setup/verify tests
135+
- PB-38184 Fix synk vulnerability for nesbot/carbon PHP Remote File Inclusion
136+
137+
## [4.11.0-test.1] - 2025-01-29
138+
### Added
139+
- PB-35761 As an administrator I receive an email if zero_knowledge_key_share is set to true and a new user completed the setup
140+
- PB-36558 As an administrator I can mark metadata_keys as expired
141+
- PB-35986 As an administrator I can share missing metadata private keys for users that needs them
142+
- PB-35925 As an administrator I can see if users are missing access to metadata keys
143+
- PB-37069 As an administration I can run a command to share metadata private keys with users that need them
144+
- PB-37068 As a user I can see if I am missing metadata keys
145+
- PB-36600 As an administrator I should be notified when an administrator expires a metadata key
146+
- PB-35418 As an administrator I should receive an email notification when a metadata key is deleted
147+
- PB-37361 As an administrator I can rotate metadata keys encrypting resources metadata
148+
- PB-37697 As an administrator I can upgrade resources to v5 format
149+
- PB-35927 As an administrator I can define an allow_v4_v5_upgrade metadata type settings
150+
- PB-35923 As an administrator I cannot add a new metadata key if there is only 2 that are active
151+
- PB-34463 As an administrator I cannot reuse metadata keys as the account recovery key
152+
- PB-35929 Update edit resource to support allow_v4_v5_upgrade settings
153+
- PB-35932 Update edit folders to support allow_v4_v5_upgrade settings
154+
155+
### Fixed
156+
- PB-37719 Fix resource types index controller should not return deleted resource types per default
157+
- PB-36925 Cast configure usage to avoid fatal type error on missing fullBaseUrl
158+
- PB-36576 Fix as a user I cannot create or edit a tag with an expired or deleted metadata key
159+
- PB-37097 Fix prevent to use v5 resource_type_ids if v5 flag is off
160+
- PB-36930 Fix some email sentences not translated and markers errors in translation
161+
- PB-37096 Fix healthcheck relying on symfony/process should fail gracefully in case of process run exception
162+
- PB-36989 Fix namespace composer warnings
163+
- PB-37343 Fixes postgres dump by adding PGPASSWORD env since .pgpass is not generated on the passbolt installation
164+
- PB-38026 As an administrator running the cleanup command I should not see issues on soft deleted groups
165+
- PB-38261 Fix always failing IsNotAccountRecoveryFingerprintRule for metadata keys
166+
- PB-38262 Fix always failing metadata key creation when zero-knowledge is disabled, and no metadata keys are present
167+
- PB-38166 Passbolt app router should not fall back on Host header if full-base url is not set
168+
169+
### Security
170+
- PB-37974 Upgrade CakePHP to v4.5.9
171+
172+
### Maintenance
173+
- PB-35785 Upgrade psalm/phpstan to latest version as applicable
174+
- PB-35119 Fix tests failing when full base url is not-https
175+
- PB-37000 Fix bug of wrong relation for Rbacs to Log.Actions.
176+
- PB-37072 Fix LatestVersionApplicationHealthcheck test failing due to github not reachable
177+
- PB-37071 Fix PHPUnit 10 deprecations
178+
- PB-36237 Fix frequently failing TOTP setup/verify tests
179+
- PB-38184 Fix synk vulnerability for nesbot/carbon PHP Remote File Inclusion
180+
5181
## [4.10.1] - 2024-11-26
6182
### Fixed
7183
- PB-37010 Fix v5 resource types should not be returned if v5 flag is disabled

0 commit comments

Comments
 (0)