Redmine

This bug fix release can be found at Rubyforge.

Redmine 0.9.1 (aka 0.9 final) is now available, you can get it at Rubyforge.

A release candidate for the new stable branch 0.9 was published today.
You can get it at Rubyforge.

Upgrading from a previous release is pretty straightforward, the few steps to follow are described in RedmineUpgrade.
The release is packaged with Rails 2.3.5.

The 0.9-stable branch was added in r3244.
A release candidate will be made available in a few days but you can start testing it by checking it out at:

http://redmine.rubyforge.org/svn/branches/0.9-stable

It runs with Rails 2.3.5 so make sure you have the proper gems installed.

gem install rails -v=2.3.5

Here is a quick summary of the major improvements that 0.9 brings:

Unlimited project nesting

In previous Redmine versions, project hierarchy was restricted to only 2 levels (root projects and one children level).
You can now create parent/child projects without any limitation.
Internally, the project hierarchy now relies on nested sets to avoid performance drop on deep project trees.

Versions inheritance

Projects can now share their versions with other projects in different ways.
Each version of a project can be shared with:

• subprojects
• projects in the project hierarchy: ancestors + descendants
• projects in the project tree: root project + all its descendants
• all projects

User groups

You can define user groups and add groups to projects with their own permissions.

User permissions

Users can now have multiple roles on a project.
This makes it easier to combine different sets of permissions.

Project creation by non-admin users

Non-admin users can now be allowed to create projects or subprojects.
Two permissions are available:

• create project: this can be given to registered users so that they can create root projects
• create subprojects: this can be given to project members (eg. project managers) so that they can add subprojects to their projects

Project copy

Administrators are now able to copy an entire project with its data (members, issues, versions...).

Issue list improvement

• Dynamic columns selection
• Sort on multiple columns, including custom fields
• Issue grouping
• Ability to adjust custom query filters without editing the query

This release adds protection against potential CSRF attacks.

Migration is done as usual but you need to generate a secret before restarting the application.
From your Redmine directory, simply run the following command once:

rake config/initializers/session_store.rb

This release fixes a few bugs as well.
Download 0.8.7.

If you are not able to upgrade to 0.8.7 but want a fix for this security issue, you can install the following plugin from Eric Davis:
http://github.com/edavis10/redmine_security_4216 (Redmine 0.8.x required)

This release fixes a few bugs and vulnerabilities.

As previous 0.8.x releases, it's still running with Rails 2.1.2.
You can see the list of changes in the Changelog and download it at Rubyforge.

As of r2887, Redmine devel version (trunk) runs with Rails 2.3.4.
You can install the required gems by running:

gem install rails -v=2.3.4

This release fixes a few Redmine bugs and includes Rails 2.1.2 with several security patches applied:

• http://groups.google.com/group/rubyonrails-security/browse_frm/thread/48ab3f4a2c16190f
• http://groups.google.com/group/rubyonrails-security/browse_frm/thread/da57f883530352ee

If you are running the trunk version of Redmine, you can either:

• install Rails 2.2.3 once it's released by the Rails core team
• update your copy to r2887 that runs with Rails 2.3.4

Redmine 0.8.4 fixes a vulnerability related to the 'autologin' feature. This vulnerability may affect people using Redmine with Phusion Passenger (a.k.a. mod_rails/mod_rack) and thus, upgrading is highly recommended. If you're not able to upgrade, you should disable the 'autologin' feature.

This release also fixes a memory consumption on big files upload.

As previous 0.8.x releases, it's still running with Rails 2.1.2.
You can see the list of changes in the Changelog and download this release at Rubyforge.

Eric Davis, an active contributor, launches a blog dedicated to Redmine.
This blog will keep you informed of latest Redmine core and plugins features.

You can find it at redmineblog.com.