Redmine

2026-08-20

17:58 Feature #43881: Strengthen API authentication: API tokens with expiration, scopes, rate limiting and audit logging

Thanks for the quick and detailed review.
On splitting: agreed, and I would rather do it in order of increasing ri... Bogdan Egikov

16:45 Feature #43881: Strengthen API authentication: API tokens with expiration, scopes, rate limiting and audit logging

Thanks for your work on this!
Most of the functionality of your new personal access tokens seems to mirror what we... Holger Just

14:03 Feature #43881: Strengthen API authentication: API tokens with expiration, scopes, rate limiting and audit logging

I have implemented pillar 1 (personal access tokens) together with pillars 2 (scoped permissions) and 4 (structured a... Bogdan Egikov

13:54 Feature #44362 (Closed): Preview PDF compatible Adobe Illustrator files

Adobe Illustrator saves .ai files with PDF compatibility by default, so the file is also a valid PDF file. Redmine al... Go MAEDA

13:28 Defect #44358 (Confirmed): Markdownized preview shows broken images: Pandoc emits <img src="media/..."> but media is never extracted

Go MAEDA

09:54 Defect #44358 (Confirmed): Markdownized preview shows broken images: Pandoc emits <img src="media/..."> but media is never extracted

The Markdown-based preview for Office attachments introduced in 7.0 (feature #8959) renders broken image icons for do... Igor St

12:38 Defect #44360 (Confirmed): Lost password page is unreachable by admins when two-factor authentication setup is required

Go MAEDA

11:42 Defect #44360 (Closed): Lost password page is unreachable by admins when two-factor authentication setup is required

When @sudo_mode@ is enabled, which is the new default with Redmine 7, I encounter a lockout : the 2FA activation acti... Vincent Robert

12:05 Defect #44361 (Confirmed): Preview returns a 404 error on the cross-project news form

On the cross-project news form, clicking *Preview* returns a 404 instead of the preview.
The toolbar builds previe... Vincent Robert

10:09 Feature #43484 (Closed): Detect attachment content type from file contents instead of trusting client-provided values

Updated [[Rest_api]] Wiki page to mention that @content_type@ is ignored in version:7.1.0 and later:
https://www.red... Go MAEDA

09:46 Feature #43484 (Resolved): Detect attachment content type from file contents instead of trusting client-provided values

Committed the patches in r24955, r24956, r24957, r24958, r24959, and r24960.
Redmine no longer stores the content ty... Go MAEDA

10:04 Patch #44359 (Closed): Drop support for Ruby 3.2

Support for Ruby 3.2 ended on 1 Apr 2026:
https://www.ruby-lang.org/ja/downloads/branches/
This patch drops suppo... Katsuya HIDAKA

09:20 Revision 24960 (svn): Send an attachment inline based on its detected content type instead of its file extension (#43484).

Patch by Go MAEDA (user:maeda). Go MAEDA

09:18 Revision 24959 (svn): Detect attachment content type from file contents instead of trusting client-provided values (#43484).

Patch by Go MAEDA (user:maeda). Go MAEDA

09:14 Revision 24958 (svn): Show the same file type icon whether the content type comes from Marcel or Redmine::MimeType (#43484).

Patch by Go MAEDA (user:maeda). Go MAEDA

09:12 Revision 24957 (svn): Stop using legacy application/x-pkcs7-signature MIME type for p7s files (#43484).

Patch by Go MAEDA (user:maeda). Go MAEDA

09:11 Revision 24956 (svn): Stop using legacy image/x-ms-bmp MIME type for BMP file (#43484).

Patch by Go MAEDA (user:maeda). Go MAEDA

09:09 Revision 24955 (svn): Improve Redmine::MockFile to better mimic File behavior (#43484).

Patch by Go MAEDA (user:maeda). Go MAEDA

08:22 Feature #42605: Enable commonmark math support using the math_latex extension

To support mathematical expressions (math syntax) in CommonMark, the @commonmarker@ gem provides three "extension opt... Marius BĂLTEANU

03:52 Feature #42605: Enable commonmark math support using the math_latex extension

I am not familiar with LaTeX, so I may be missing something obvious. Could you explain what problem this change is in... Go MAEDA

08:02 Patch #44330 (Resolved): Convert CRLF line endings to LF in three test fixture files

Committed the patch in r24953 and r24954. Thank you for reporting this. Go MAEDA

08:01 Revision 24954 (svn): Fix filesize and digest of attachment fixtures to match the actual files (#44330).

Go MAEDA

07:59 Revision 24953 (svn): Convert CRLF line endings to LF in three test fixture files (#44330).

Go MAEDA

06:28 Defect #44228 (Resolved): Uploading an attachment with a NUL byte in the filename causes an Internal Server Error

Committed the patch in r24952. Go MAEDA

06:28 Revision 24952 (svn): Uploading an attachment with a NUL byte in the filename causes an Internal Server Error (#44228).

Patch by Go MAEDA (user:maeda). Go MAEDA

06:14 Defect #44354 (Closed): GitAdapterTest#test_diff_path_invalid fails with Git 2.55.0

Merged the change into the stable branches in r24949, r24950, and r24951. Go MAEDA

04:52 Defect #44354 (Resolved): GitAdapterTest#test_diff_path_invalid fails with Git 2.55.0

Committed the patch in r24947. Go MAEDA

01:40 Defect #44354: GitAdapterTest#test_diff_path_invalid fails with Git 2.55.0

Setting the target version to 6.0.11. Go MAEDA

06:13 Revision 24951 (svn): Merged r24947 from trunk into 6.0-stable (#44354).

Go MAEDA

06:11 Revision 24950 (svn): Merged r24947 from trunk into 6.1-stable (#44354).

Go MAEDA

06:10 Revision 24949 (svn): Merged r24947 from trunk into 7.0-stable (#44354).

Go MAEDA

05:30 Patch #44356 (Closed): Update RuboCop Performance to 1.27

Updated RuboCop Performance to 1.27 in r24948. Go MAEDA

05:29 Patch #44356 (Closed): Update RuboCop Performance to 1.27

https://rubygems.org/gems/rubocop-performance Go MAEDA

05:30 Revision 24948 (svn): Update RuboCop Performance to 1.27 (#44356).

Go MAEDA

05:08 Feature #44353: Add project to wiki page list API response

Thank you for pointing this out.
I have written a patch that adds the project to each wiki page in the index respo... Go MAEDA

04:51 Revision 24947 (svn): GitAdapterTest#test_diff_path_invalid fails with Git 2.55.0 (#44354).

Patch by Go MAEDA (user:maeda). Go MAEDA

03:05 Defect #44335 (Resolved): PDF preview of .ai attachments triggers an automatic download

Committed the fix in r24946. Thank you for reporting the issue. Go MAEDA

03:05 Revision 24946 (svn): Stop treating Adobe Illustrator files as PDF files while keeping their thumbnails (#44335).

Patch by Go MAEDA (user:maeda). Go MAEDA

2026-08-19

21:47 Revision 24945 (svn): Merge r24925, r24942 from trunk to 6.0-stable (#44328).

Marius BĂLTEANU

21:47 Revision 24944 (svn): Merge r24925, r24942 from trunk to 6.1-stable (#44328).

Marius BĂLTEANU

21:47 Revision 24943 (svn): Merge r24925, r24942 from trunk to 7.0-stable (#44328).

Marius BĂLTEANU

21:44 Revision 24942 (svn): Add tests for #44328.

Marius BĂLTEANU

21:25 Feature #39030: API - creation/update wiki page - need to specify parent page

Thanks Marius BĂLTEANU

21:25 Feature #39030 (Closed): API - creation/update wiki page - need to specify parent page

Marius BĂLTEANU

10:15 Feature #39030: API - creation/update wiki page - need to specify parent page

This issue could be closed since it is implemented in #43569. Liane Hampe

21:22 Feature #44345: Use SimpleCov's built-in HTML formatter instead of Redmine's own formatter

Because I do not run the whole test suite on my local environment very often, my ultimate goal is to set up a coverag... Marius BĂLTEANU

12:18 Feature #44345: Use SimpleCov's built-in HTML formatter instead of Redmine's own formatter

Marius BĂLTEANU wrote in #note-2:
> @maeda, what do you think if we run one test suite from the matrix with coverage... Go MAEDA

21:09 Defect #44351 (Resolved): Fix top menu position in Classic theme

Merged the fix. Marius BĂLTEANU

21:09 Revision 24941 (svn): Merge r24919 from trunk to 7.0-stable (#44351).

Marius BĂLTEANU

21:08 Defect #44348 (Closed): Formatting a text is much slower in 7.0.0 when its container has many attachments

Merged the fix. Marius BĂLTEANU

21:08 Revision 24940 (svn): Merge r24910 from trunk to 7.0-stable (#44348).

Marius BĂLTEANU

21:08 Defect #44343 (Closed): Deleting a user who has authorized an OAuth2 application fails with ActiveRecord::InvalidForeignKey

Merged the fix to stable branches! Marius BĂLTEANU

03:08 Defect #44343: Deleting a user who has authorized an OAuth2 application fails with ActiveRecord::InvalidForeignKey

Thank you for reviewing and committing the fix. I'm glad I could contribute to Redmine. Hiroyuki Kano

21:07 Revision 24939 (svn): Backport r24916 to 6.1-stable (#44343).

Marius BĂLTEANU

21:04 Revision 24938 (svn): Merge r24916 from trunk to 7.0-stable (#44343).

Marius BĂLTEANU

21:04 Revision 24937 (svn): Merge r24923 from trunk to 6.0-stable (#44328).

Marius BĂLTEANU

21:04 Revision 24936 (svn): Merge r24923 from trunk to 6.1-stable (#44328).

Marius BĂLTEANU

21:04 Revision 24935 (svn): Merge r24923 from trunk to 7.0-stable (#44328).

Marius BĂLTEANU

21:02 Revision 24934 (svn): Merge r24911, r24912, r24913, r24921 from trunk to 6.0-stable (#44310).

Marius BĂLTEANU

21:02 Revision 24933 (svn): Merge r24911, r24912, r24913, r24921 from trunk to 6.1-stable (#44310).

Marius BĂLTEANU

21:02 Revision 24932 (svn): Merge r24911, r24912, r24913, r24921 from trunk to 7.0-stable (#44310).

Marius BĂLTEANU

21:01 Revision 24931 (svn): Merge r24905, r24906, r24907, r24908, r24918 from trunk to 6.0-stable (#44309).

Marius BĂLTEANU

21:01 Revision 24930 (svn): Merge r24905, r24906, r24907, r24908, r24918 from trunk to 6.1-stable (#44309).

Marius BĂLTEANU

21:01 Revision 24929 (svn): Merge r24905, r24906, r24907, r24908, r24918 from trunk to 7.0-stable (#44309).

Marius BĂLTEANU

20:59 Revision 24928 (svn): Merge r24904 from trunk to 6.0-stable (#44308).

Marius BĂLTEANU

20:59 Revision 24927 (svn): Merge r24904 from trunk to 6.1-stable (#44308).

Marius BĂLTEANU

20:59 Revision 24926 (svn): Merge r24904 from trunk to 7.0-stable (#44308).

Marius BĂLTEANU

20:57 Revision 24925 (svn): Ensure that including trackers, issue_categories, issue_custom_fields, and time_entry_activities in the projects API responses requires the appropriate permissions (:view_issues or :view_time_entries) in addition to view_projects (#44328)..

Patch by Holger Just (user:hjust). Marius BĂLTEANU

16:19 Defect #29496 (Closed): Email addresses which includes slashes are wrongly linked

Go MAEDA

16:19 Defect #29496: Email addresses which includes slashes are wrongly linked

This is still reproducible in Redmine 7.0.0.
There is a workaround. Wrapping the address in angle brackets produce... Go MAEDA

15:56 Patch #20888 (Closed): Add a button in the textile formatting toolbar to convert tabulated text into a table

Starting with Redmine 7.0.0, when you copy multiple cells from Excel or LibreOffice Calc and paste them into Redmine,... Go MAEDA

11:54 Defect #44354 (Closed): GitAdapterTest#test_diff_path_invalid fails with Git 2.55.0

@GitAdapterTest#test_diff_path_invalid@ fails with Git 2.55.0. GitHub Actions also started failing after the runner i... Go MAEDA

10:34 Feature #44353 (Closed): Add project to wiki page list API response

There was a recent change for Redmine 7.0.0 that adds the project reference to all endpoints using @views/wiki/show.a... Liane Hampe

06:28 Patch #44352 (Closed): Update Commonmarker gem to 2.10

Updated Commonmarker gem to 2.9 in r24924. Go MAEDA

06:09 Patch #44352 (Closed): Update Commonmarker gem to 2.10

https://rubygems.org/gems/commonmarker Go MAEDA

06:20 Revision 24924 (svn): Update Commonmarker gem to 2.9 (#44352).

Go MAEDA

03:25 Defect #44289: No status icon is displayed after checking for plugin updates on the Plugins page

Setting the target version to 7.0.1. Go MAEDA

00:21 Feature #44337: Add an administration page listing all webhooks

I would like to include this in 7.0.1 being an important improvement of the Webhook feature. Marius BĂLTEANU

00:03 Revision 24923 (svn): Allow reading issue categories with the view_issues permission (#44328).

Patch by Jens Krämer (user:jkraemer). Marius BĂLTEANU

00:01 Defect #44273 (Closed): Applications item is not highlighted in the administration menu

Merged the fix into the stable branches in r24920 and r24922. Go MAEDA

00:00 Revision 24922 (svn): Merged r24903 from trunk into 6.1-stable (#44273).

Go MAEDA

00:00 Revision 24921 (svn): Fix failing tests (#44310).

Marius BĂLTEANU

2026-08-18

23:59 Revision 24920 (svn): Merged r24903 from trunk into 7.0-stable (#44273).

Go MAEDA

23:55 Feature #44345 (Resolved): Use SimpleCov's built-in HTML formatter instead of Redmine's own formatter

Marius BĂLTEANU

23:53 Feature #44345 (Closed): Use SimpleCov's built-in HTML formatter instead of Redmine's own formatter

@maeda, what do you think if we run one test suite from the matrix with coverage enabled? Another option is to have a... Marius BĂLTEANU

21:27 Feature #44345 (Resolved): Use SimpleCov's built-in HTML formatter instead of Redmine's own formatter

Nice!
I've committed the changes, thanks! Marius BĂLTEANU

23:41 Defect #44351: Fix top menu position in Classic theme

We should also upgrade the icons from the top menu with SVG icons. Marius BĂLTEANU

23:26 Defect #44351 (Closed): Fix top menu position in Classic theme

Extracted from #44341. Marius BĂLTEANU

23:39 Patch #44341: Increase top menu hover highlight by increasing the padding of the elements

I like the improvement, but I think we can achieve (almost) the same with less changes, please find below two patches... Marius BĂLTEANU

23:28 Revision 24919 (svn): Fix top menu position in Classic theme (#44351).

Patch by Vincent Robert (user:Nanego). Marius BĂLTEANU

22:44 Patch #44293: Add a caret to the account menu to indicate it opens a dropdown

Updated the patch to fix the stroke color and to unify the styles of the SVG icon from the account menu with other po... Marius BĂLTEANU

22:20 Patch #44293: Add a caret to the account menu to indicate it opens a dropdown

I think most users are used to having an openable account menu in the top bar, but I'm happy to add the caret for ext... Marius BĂLTEANU

21:52 Revision 24918 (svn): Fix rubocop warning (#44309).

Marius BĂLTEANU

21:40 Patch #44260 (Closed): Refactor context menu to use the new dropdown component

Marius BĂLTEANU

21:39 Defect #44317 (Resolved): Actions dropdown is not closed after copying a link

Committed, thanks for catching and fixing the issue.
Go MAEDA wrote in #note-3:
> Wouldn't it be better to include t... Marius BĂLTEANU

21:35 Revision 24917 (svn): Fix actions dropdown is not closed after copying a link (#44317, #44205).

Marius BĂLTEANU

21:30 Defect #44343 (Resolved): Deleting a user who has authorized an OAuth2 application fails with ActiveRecord::InvalidForeignKey

Committed, thanks! Marius BĂLTEANU

21:30 Revision 24916 (svn): Fix deleting a user who has authorized an OAuth2 application fails with ActiveRecord::InvalidForeignKey (#44343).

Patch by Hiroyuki Kano (user:hiropk) Marius BĂLTEANU

21:28 Defect #44348 (Resolved): Formatting a text is much slower in 7.0.0 when its container has many attachments

Thanks user:maeda for catching and fixing this issue! Marius BĂLTEANU

21:26 Revision 24915 (svn): Fix "rake test:coverage" not removing the previous coverage report (#44345).

Patch by Go MAEDA (user:maeda). Marius BĂLTEANU

21:26 Revision 24914 (svn): Use SimpleCov's built-in HTML formatter instead of Redmine's own formatter (#44345).

Patch by Go MAEDA (user:maeda). Marius BĂLTEANU

21:23 Revision 24913 (svn): Add test to cover the case when inherit members checkbox should not be shown in project settings (#44310).

Marius BĂLTEANU

21:13 Revision 24912 (svn): Add tests for #44310.

Marius BĂLTEANU

20:55 Revision 24911 (svn): Check manage_members permission for project inherit_members safe attribute (#44310).

Patch by Holger Just (user:hjust). Marius BĂLTEANU

20:48 Defect #44132 (Needs feedback): Project creation returns HTTP 500 (`Mysql2::Error: Record has changed since last read in table 'projects'`) under concurrent project create/destroy on MySQL/MariaDB

Marius BĂLTEANU

20:23 Revision 24910 (svn): Fix formatting a text being much slower in 7.0.0 when its container has many attachments (#44348).

Patch by Go MAEDA (user:maeda). Marius BĂLTEANU

20:20 Feature #44261 (Closed): Restrict user mentions to project members to prevent unintended notifications to non-members

I agree with Holger's assessment. The user mention feature is explicitly designed to mirror the behavior of watchers.... Marius BĂLTEANU

16:10 Feature #44261: Restrict user mentions to project members to prevent unintended notifications to non-members

Seiji Shozuki wrote in #note-2:
> In practice, I use Redmine for project management, and I've never encountered a si... Holger Just

02:49 Feature #44261: Restrict user mentions to project members to prevent unintended notifications to non-members

Thank you for your comments.
I understand your point that there are issues with my implementation. However, I don'... Seiji Shozuki

20:18 Revision 24909 (svn): Add test for #44261.

Marius BĂLTEANU

20:11 Revision 24908 (svn): Add a test for @$ssueRelationsController#show@ (#44309).

Marius BĂLTEANU

20:06 Revision 24907 (svn): Add tests for IssueRelation#visible? and IssueRelation#deletable? (#44309).

Marius BĂLTEANU

19:42 Revision 24906 (svn): Filter visible relations in issue_relations#index (#44309).

Patch by Holger Just (user:hjust). Marius BĂLTEANU

19:41 Revision 24905 (svn): Check issue_from visibility when creating and showing issue relations (#44309).

Patch by Holger Just (user:hjust). Marius BĂLTEANU

19:37 Revision 24904 (svn): Fix handling of tag restoration in Textile formatter (#44308).

Marius BĂLTEANU

17:45 Defect #43488: Undo/Redo produces unexpected results when the text in a textarea is modified automatically

Similar to ##44336
Patch attached for the wiki-toolbar half of this (bold/italic/etc. from the toolbar
buttons or... Jonathan Cormier

17:36 Defect #44336: Automatic list marker insertion discards the textarea undo history and does not scroll the caret into view

the toolbar buttons and shortcuts have the same root cause in @app/assets/javascripts/jstoolbar/jstoolbar.js@ (@enclo... Jonathan Cormier

14:28 Defect #44350 (New): Project overview page is slow when the members box contains many members

h3. Problem
When a project has many members, the overview page (/projects/:id) becomes slow because the members bo... Takenori TAKAKI

07:50 Feature #12388: Diffs for editions of issue/notes entries

+1 from me. I really like this feature, and I consider proper revision history for journal notes essential if Redmine... Jimmy Westberg

05:28 Defect #44335: PDF preview of .ai attachments triggers an automatic download

The patch looks good. I confirmed that it resolves the automatic download issue for @.ai@ attachments, while thumbnai... Katsuya HIDAKA

02:34 Defect #44335: PDF preview of .ai attachments triggers an automatic download

Setting the target version to 7.0.1. Go MAEDA