Project

General

Profile

Changelog 4 2 » History » Version 12

Go MAEDA, 2023-03-06 00:39
Redmine 4.2.10

1 1 Go MAEDA
h1. Changelog 4.2.x
2
3 12 Go MAEDA
h2. version:4.2.10 (2023-03-05)
4
5
h3. [Code cleanup/refactoring]
6
7
* Patch #38141: Update copyright year to 2023
8
9
h3. [Documentation]
10
11
* Defect #38114: Example plugin (extra/sample_plugin) breaks Activity page
12
13
h3. [Gems support]
14
15
* Patch #38272: Update RBPDF to 1.21
16
17
h3. [Issues]
18
19
* Defect #38217: "Property changes" tab does not appear when all issue journals have both notes and property changes
20
21
h3. [PDF export]
22
23
* Defect #32740: Incorrect characters when copying out of a Redmine generated PDF
24
* Defect #36452: Infinite loop on PDF export if image included with attributes
25
26
h3. [Project settings]
27
28
* Defect #38064: Avoid exception when adding a project without any givable roles defined
29
30
h3. [Security]
31
32
* Defect #38063: Avoid double-render error with ApplicationController#find_optional_project
33
* Defect #38070: Role#permission_tracker? and related does not consider whether the base permission is (still) set
34
* Defect #38133: Update Nokogiri to fix several security issues
35
* Defect #38297: Insufficient permission checks when adding attachments to issues
36
37
h3. [SEO]
38
39
* Defect #38201: Fix robots.txt to disallow issue lists with a sort or query_id parameter in any position
40
41
h3. [Time tracking]
42
43
* Defect #35066: Missing project_id in redirect after clicking "Create and add another" button
44
* Defect #38237: Unable to choose any user other than the current user when logging spent time after clicking "Create and add another"
45
46 11 Marius BĂLTEANU
h2. version:4.2.9 (2022-12-01)
47
48
h3. [Activity view]
49
50
* Defect #37875: Unnecessary closing li element when there is no "Next" button on Activity page
51
52
h3. [Documentation]
53
54
* Defect #37983: Duplicate vertical-align property in wiki_syntax.css
55
56
h3. [Gems support]
57
58
* Defect #37884: All system tests fail on 4.2-stable branch with "ArgumentError: unknown keyword: :desired_capabilities"
59
* Patch #37867: Limit puma < 6.0.0 to avoid system test error
60
* Patch #37883: Limit mocha version to < 2.0.0 when Ruby version is < 2.7 to avoid test error
61
62
h3. [Issues workflow]
63
64
* Defect #37685: Read-only field permission for the project field is ignored if the current project has subprojects
65
66
h3. [Projects]
67
68
* Defect #37925: Do not allow unkown display_type for query
69
70
h3. [Rails support]
71
72
* Defect #37814: Plugins that serialize Date or Time objects cause Psych::DisallowedClass exception
73
74
h3. [Security]
75
76
* Defect #37751: Persistent XSS in textile formatting due to blockquote citation
77
* Defect #37767: Redmine contains a cross-site scripting vulnerability
78
* Defect #37880: Open Redirect in attachments#download_all
79
80 10 Marius BĂLTEANU
h2. version:4.2.8 (2022-10-02)
81
82
h3. [Code cleanup/refactoring]
83
84
* Defect #37449: Passing a wrong parameter to `with_settings` in UserTest::test_random_password_include_required_characters
85
86
h3. [Filters]
87
88
* Defect #36940: Chained custom field filter doesn't work for User fields
89
* Defect #37349: Chained custom field filter for User fields returns 500 internal server error when filtering after a float value
90
91
h3. [Issues]
92
93
* Defect #37473: Focus IssueId not working when linking issues
94
95
h3. [Issues list]
96
97
* Defect #37268: Performance problem with Redmine 4.2.7 and 5.0.2
98
99
h3. [Rails support]
100
101
* Patch #37465: Update Rails to 5.2.8.1
102
103
h3. [Security]
104
105
* Defect #37492: Update jQuery UI to 1.13.2
106
107
h3. [SCM]
108
109
* Defect #37718: Repository browser does not show "+" (plus sign) in filename
110
111
h3. [Text formatting]
112
113
* Defect #37379: Thumbnail macro does not work when a file is attached and preview is displayed immediately
114
115
h3. [Translations]
116
117
* Patch #37698: Persian translation update for 4.2-stable
118
119
h3. [UI]
120
121
* Defect #36901: Jump to project is misaligned in Safari 15.4 and later
122
* Defect #37282: Subtask isn't displayed correctly since 4.2.7
123
* Defect #37481: Fix the unintentional selection of rows with the context menu
124
* Defect #37566: The number of the ordered list in the project description is not displayed and the indentation does not match the unordered list
125
126 9 Marius BĂLTEANU
h2. version:4.2.7 (2022-06-21)
127
128
h3. [Email notifications]
129
130
* Defect #37162: Missing space between notification sentence and author name when edit a wiki page
131
132
h3. [Email receiving]
133
134
* Defect #37187: no-permission-check allows issue creation in closed/archived projects
135
136
h3. [Issues]
137
138
* Patch #37155: Issue#last_notes fallback does not respect notes visibility
139
* Defect #37171: Ability to change the issue category or issue target version with nonexistent value for the specific project
140
141
h3. [Security]
142
143
* Defect #37255: Information Leak in QueryAssociationColumn/QueryAssociationCustomFieldColumn
144
* Defect #37256: Medium severity XSS security vulnerabilities (3x) in jQuery UI v1.12.1
145
146
h3. [Time tracking]
147
148
* Defect #33914: Even if the default value of Activities (time tracking) is set, it may not be reflected.
149
150
h3. [UI - Responsive]
151
152
* Defect #36453: Issue subject overflow in subtasks and relations tables
153
154 7 Marius BĂLTEANU
h2. version:4.2.6 (2022-05-16)
155
156
h3. [Attachments]
157
158
* Defect #36887: copyImageFromClipboard function failed to generate a unique file name
159
* Patch #36817: copyImageFromClipboard function targets the first file input of the page and may conflict with other plugins
160
161
h3. [Rails support]
162
163
* Patch #36918: Update Rails to 5.2.8
164
165
h3. [Security]
166
167
* Patch #36912: Update Nokogiri versions to fix two critical CVE's
168
169
h3. [Translations]
170
171
* Patch #37002: Czech translation update for 4.2-stable
172
173 8 Markus Boremski
174 6 Marius BĂLTEANU
h2. version:4.2.5 (2022-03-28)
175
176
h3. [Attachments]
177
178
* Defect #36013: Paste image mixed with other DataTransferItem
179
180
h3. [Database]
181
182
* Defect #36766: Database migration from Redmine 0.8.7 or earlier fails
183
184
h3. [Documents]
185
186
* Defect #36686: Allow pasting screenshots from clipboard in documents
187
188
h3. [Gems support]
189
190
* Patch #36795: Set the minimum required version of ROTP gem to 5.0.0
191
192
h3. [Issues filter]
193
194
* Defect #30924: Filter on Target version's Status in subproject doesn't work on version from top project
195
196
h3. [Projects]
197
198
* Defect #36593: User without permissions to view required project custom fields cannot create new projects
199
200
h3. [Rails support]
201
202
* Patch #36757: Update Rails to 5.2.6.3
203
204 5 Marius BĂLTEANU
h2. version:4.2.4 (2022-02-20)
205
206
h3. [Gantt]
207
208
* Defect #35027: Gantt PNG export ignores imagemagick_convert_command
209
210
h3. [Gems support]
211
212
* Defect #35435: Psych 4: aliases in database.yml cause Psych::BadAlias exception
213
* Defect #36226: Psych 4: Psych::DisallowedClass exception when unserializing a setting value
214
215
h3. [Importers]
216
217
* Defect #35656: When importing issue relations, the validation messages are not shown in the UI
218
219
h3. [Issues]
220
221
* Defect #36455: Text custom field values are not aligned with their labels when text formatting is enabled
222
223
h3. [Rails support]
224
225
* Patch #36633: Update Rails to 5.2.6.2
226
227
h3. [Time tracking]
228
229
* Defect #20018: Duplicate activities in time entry report when project-specific activies exist
230
* Defect #36248: Time entries of sub-projects are not listed when activity is specified in filters
231
232
h3. [Translations]
233
234
* Defect #36517: Label error_can_not_execute_macro_html in Russian translation is broken
235
236
h3. [UI]
237
238
* Defect #36446: Watchers autocomplete fails with 403 error when the search is made from multiple objects with different projects
239
* Patch #35215: Don't display "No Match Found!" when the inline autocomplete doesn't return any result
240
241
* Defect #35090: Permission check of the setting button on the issues page mismatches button semantics
242
* Defect #36363: Cannot select text in a table with a context menu available
243
* Patch #36378: Update copyright year in the footer to 2022
244
245
h3. [Wiki]
246
247
* Defect #36494: WikiContentVersion API returns 500 if author is nil
248
* Defect #36561: Wiki revision page does not return 404 if revision does not exist
249
250 4 Go MAEDA
h2. version:4.2.3 (2021-10-10)
251
252
h3.  [Administration]
253
254
* Defect #35731: Password and Confirmation fields are marked as required when editing a user
255
256
h3.  [Attachments]
257
258
* Defect #35642: Long text custom field values are not aligned with their labels
259
* Defect #35715: File upload fails when run with uWSGI
260
261
h3.  [Issues]
262
263
* Defect #35655: Create duplicated follows relations fails with 500 internal error
264
265
h3.  [Issues planning]
266
267
* Defect #35669: Prints of Issues Report details are messed-up due to the size of the graphs
268
269
h3.  [Permissions and roles]
270
271
* Defect #35634: Attachments deletable even though issue edit not permitted
272
273
h3.  [Projects]
274
275
* Defect #35827: Deleting a closed or archived project returns 403
276
277
h3.  [Roadmap]
278
279
* Feature #35758: Add some space around the versions on the Roadmap
280
281
h3.  [Security]
282
283
* Defect #35789: Redmine is leaking usernames on activities index view
284
* Patch #35463: Enforce stricter class filtering in WatchersController
285
286
h3.  [Translations]
287
288
* Patch #35662: Mongolian translation update for "Notes", "Totals", and "% Done"
289
* Patch #35766: Galician translation update for 4.2-stable
290
291
h3.  [UI]
292
293
* Defect #34834: Line breaks in the description of a custom field are ignored in a tooltip
294
295 3 Marius BĂLTEANU
h2. version:4.2.2 (2021-08-01)
296
297
h3. [Accounts / authentication]
298
299
* Patch #35372: Better presentation for 2FA recovery codes
300
* Defect #35226: Add SameSite=Lax to cookies to fix warnings in web browsers
301
302
h3. [Attachments]
303
304
* Defect #33752: Uploading a big file fails with NoMemoryError
305
306
h3. [Documentation]
307
308
* Patch #35375: German translation of wiki syntax help file
309
310
h3. [Gantt]
311
312
* Defect #34694: Progress bar for a shared version on gantt disappears when the tree is collapsed and then expanded
313
314
h3. [Gems support]
315
316
* Defect #35621: Bundler fails to install globalid when using Ruby < 2.6.0
317
318
h3. [Issues]
319
320
* Defect #35134: Change total spent time link to global time entries when issue has subtasks that can be on non descendent projects
321
322
h3. [Issues filter]
323
324
* Defect #35201: Duplicate entries in issue filter values
325
326
h3. [News]
327
328
* Defect #35308: "Add news" button on global news index is displayed for users without permissions
329
330
h3. [Projects]
331
332
* Defect #35606: Locked users should not be displayed in the members box of the project overview page
333
334
h3. [Rails support]
335
336
* Patch #35214: Update Rails to 5.2.6
337
338
h3. [Security]
339
340
* Defect #35417: User sessions not reset after 2FA activation
341
342
h3. [Text formatting]
343
344
* Defect #35036: Markdown text sections broken by thematic breaks (horizontal rules)
345
* Defect #35441: Inline image in Textile is not displayed if the image URL contains ampersands
346
347
h3. [Time tracking]
348
349
* Defect #34856: Time entry error on private issue
350
351
h3. [Translations]
352
353
* Defect #35319: Wrong Japanese translation for permission_delete_message_watchers
354
* Patch #34979: French translation update for 4.2-stable
355
* Patch #35016: French translations for two-factor authentication
356
* Patch #35051: German translation update for 4.2-stable
357
* Patch #35110: Lithuanian translation update for 4.2-stable
358
* Patch #35111: Russian translation update for 4.2-stable
359
* Patch #35267: German translation update (jstoolbar-de.js)
360
361 2 Go MAEDA
h2. version:4.2.1 (2021-04-26)
362
363
h3. [Accounts / authentication]
364
365
* Defect #35087: Users without two-factor authentication enabled cannot sign out when two-factor authentication is required
366
* Defect #35135: FrozenError when new LDAP users try to login
367
368
h3. [Activity view]
369
370
* Defect #34933: Atom feed of the activity page does not contain items after the second page
371
372
h3. [Attachments]
373
374
* Defect #34999: The result of Attachment.latest_attach is unstable if attachments have the same timestamp
375
376
h3. [Custom fields]
377
378
* Defect #35115: Time entries are broken if grouped by project and issue custom fields
379
380
h3. [Email receiving]
381
382
* Defect #35100: MailHandler raises NameError exception when generating error message
383
384
h3. [Importers]
385
386
* Defect #35131: Issue import - allow auto mapping for Unique ID and relation type fields
387
388
h3. [Issues]
389
390
* Defect #34921: Do not journalize attachments that are added during a "Copy Issue" operation
391
* Defect #34982: Cannot change the default version and default assignee under settings
392
393
h3. [Performance]
394
395
* Patch #35034: Improve loading speed of workflow page
396
397
h3. [REST API]
398
399
* Defect #35039: API create issue relation method returns undefined method `split' when issue id is sent as integer
400
401
h3. [Roadmap]
402
403
* Defect #34983: Roadmap tab is missing if there are only inherited from parent project versions
404
405
h3. [Security]
406
407
* Defect #34367: Allowed filename extensions of attachments can be circumvented
408
* Defect #35045: Mail handler bypasses add_issue_notes permission
409
* Defect #35085: Arbitrary file read in Git adapter
410
411
h3. [Text formatting]
412
413
* Defect #34894: User link using @ not working at the end of line
414
415
h3. [UI]
416
417
* Defect #34998: Cannot open journal dropdown menu after editing note
418
419
420 1 Go MAEDA
h2. version:4.2.0 (2021-03-28)
421
422
h3. [Accounts / authentication]
423
424
* Defect #33601: Additional email addresses are not displayed in user profile page
425
* Feature #1237: Add support for two-factor authentication
426
* Feature #3369: Allowed/Disallowed email domains settings to restrict users' email addresses
427
* Feature #32998: Change the default value for "Default Gravatar image" to "Identicons"
428
* Feature #33126: Support custom fields when exporting users to CSV
429
* Feature #33347: Include updated_on and passwd_changed_on columns when exporting users to CSV
430
* Feature #34241: Include twofa_scheme (two-factor scheme) column when exporting users to CSV
431
* Patch #34071: handle AuthSourceExceptions in User.try_to_login
432
433
h3. [Activity view]
434
435
* Feature #1422: Date selection for Activity Page
436
* Feature #32248: Change the default value for "Days displayed on project activity" setting to 10
437
* Feature #33602: Add an interface to filter activities by user
438
* Feature #33692: Improved view of the activity page
439
440
h3. [Administration]
441
442
* Feature #32672: Add Check all / Uncheck all button to filters in permissions report
443
* Feature #34258: Create tracker by copy
444
* Feature #34307: Create custom field by copy
445
446
h3. [Attachments]
447
448
* Defect #33357: rendering extra "--" footer of git patch attachment
449
* Feature #7056: Download all attachments at once
450
* Feature #18555: Show warning when attempting to attach more than the allowed number of attachments
451
452
h3. [Calendar]
453
454
* Defect #32194: Calendar page lacks buttons to manage custom queries
455
456
h3. [Code cleanup/refactoring]
457
458
* Defect #33392: Fix invalid selector in function displayTabsButtons()
459
* Defect #33562: Some tests in ApplicationHelperTest are declared as private
460
* Patch #32054: Add test for 4 byte characters (emoji) support
461
* Patch #32653: Fix random test failure due to missing call to set_tmp_attachments_directory in WikiControllerTest
462
* Patch #32813: Clean up toggleMultiSelect js function
463
* Patch #32888: Use stylelint to avoid errors and enforce conventions in CSS files
464
* Patch #32890: Fix violations reported by Stylelint
465
* Patch #32924: tmp/pdf directory is no longer necessary
466
* Patch #32927: CSS selector in test_index_should_show_warning_when_no_workflow_is_defined is too specific
467
* Patch #32929: Add missing fixtures to AttachmentsControllerTest
468
* Patch #32937: test_revisions_latin_1_identifier should be skipped on Windows
469
* Patch #33069: Update copyright year in source files to 2021
470
* Patch #33226: Skip thumbnail tests if ImageMagick convert command is not available
471
* Patch #33268: Add missing test: ProjectCustomField creation
472
* Patch #33315: IssuesSystemTest#test_bulk_watch_issues_via_context_menu randomly fails due to Capybara clicks out out of context menu
473
* Patch #33342: Remove unused i18n key "label_overall_activity" and "label_overall_spent_time"
474
* Patch #33367: Use more efficient "exists?" instead of "first" in tests when checking the existence of rows
475
* Patch #33376: Add missing fixtures to VersionsHelperTest
476
* Patch #33384: jQuery: replace deprecated size() method with length
477
* Patch #33393: Remove unused i18n key "notice_no_issue_selected"
478
* Patch #33567: Fix typo in watchers_controller.rb
479
* Patch #33700: Add missing fixture to Redmine::ApiTest::ProjectsTest
480
* Patch #33728: Remove an unused variable in Query#add_chained_custom_field_filters
481
* Patch #33785: Add missing fixture to TimelogControllerTest
482
* Patch #33786: Add missing fixture to UsersControllerTest
483
* Patch #34119: Fix selenium chrome options so files are downloaded to tmp/downloads in system tests
484
* Patch #34122: Store inline autocomplete data sources in a JS variable
485
* Patch #34166: Fix wrong comment for Mailer.deliver_lost_password
486
* Patch #34169: MessagesControllerTest#test_post_new randomly fails
487
* Patch #34269: Allow system tests to run on remote Selenium hub (eg: Docker)
488
* Patch #34321: Add missing fixtures to AttachmentsControllerTest
489
* Patch #34444: Remove unused key :preview from Redmine::AccessKeys::ACCESSKEYS
490
* Patch #34492: Fix passing a wrong parameter to assert_select in API test for 'GET /users/:id'
491
* Patch #34745: Remove unused i18n key "text_min_max_length_info"
492
* Patch #34750: Remove unsupported encodings ISO-2022-KR and ISCII91 from Setting::ENCODINGS
493
* Patch #34789: Fix misplaced comment in config/settings.yml
494
495
h3. [Custom fields]
496
497
* Defect #5354: Updating custom fields does not trigger update to "updated_on" field in the customized object
498
* Defect #33930: 500 error when attempting to create custom field enumeration with empty name
499
* Feature #30776: Drag and drop file upload to file type custom field
500
* Feature #32783: Redirect to index page instead of edit page after creating a new custom field
501
502
h3. [Documentation]
503
504
* Defect #32795: Remove RubyGems from Requirements in doc/INSTALL
505
* Patch #33208: `--without rmagick` option for bundle command is no longer necessary
506
507
h3. [Email notifications]
508
509
* Feature #16006: Include attachments in forum post notifications
510
* Feature #32628: Notify users about high issues (only)
511
* Feature #33002: Include attachments in news post notifications
512
* Feature #33099: Add a link to the issues list in reminder email
513
* Feature #33834: Show open/closed badge in email notifications
514
* Feature #34787: Ability to set default value for  "I don't want to be notified of changes that I make myself"
515
516
h3. [Email receiving]
517
518
* Feature #34794: Allow newlines and quote characters within mail body delimiters
519
520
h3. [Feeds]
521
522
* Feature #15212: Atom feed on project with subprojects should show in article title the name of the project
523
524
h3. [Filters]
525
526
* Feature #33296: Load default custom queries when running redmine:load_default_data rake task
527
528
h3. [Forums]
529
530
* Defect #32156: No left padding for first level entries in discussion board list
531
* Feature #3390: Ability to add watchers to forum threads
532
533
h3. [Gems support]
534
535
* Patch #32453: Update capybara (~> 3.31.0)
536
* Patch #32468: Update Rouge to 3.26.0
537
* Patch #32530: Update RuboCop to 1.12
538
* Patch #32531: Update RuboCop Rails to 2.9
539
* Patch #32763: Update mini_magick to 4.11
540
* Patch #32782: Update pg gem (~> 1.2.2)
541
* Patch #32805: Update request_store to 1.5
542
* Patch #32841: Drop support for Bundler prior to 1.12.0
543
* Patch #32906: Update i18n (~> 1.8.2)
544
* Patch #32950: Update simplecov to 0.18
545
* Patch #34159: Update RuboCop Performance to 1.10
546
* Patch #34339: Update net-ldap to  0.17
547
* Patch #34443: Update roadie-rails to 2.2
548
* Patch #34579: Use 'webdrivers' gem to manage the Chrome driver for system tests
549
* Patch #34969: Remove dependency on MimeMagic
550
551
h3. [Hook requests]
552
553
* Patch #34072: Hook after plugins were loaded
554
555
h3. [I18n]
556
557
* Defect #33186: field_activity should be used rather than label_activity in the context of time tracking
558
* Defect #33232: Hard-coded error messages in ApplicationController
559
* Defect #33426: Error messages for Wiki macros are not internationalized
560
* Patch #33741: Decimal separator for Dutch locale should be a comma
561
562
h3. [Importers]
563
564
* Feature #22913: Auto-select fields mapping in Importing
565
* Feature #28198: Support issue relations when importing issues
566
* Feature #33102: Import user accounts from CSV file
567
* Feature #34762: Display more detailed error message when attempting to import malformed CSV file
568
569
h3. [Issues]
570
571
* Defect #10084: Disabled trackers of subprojects are listed in project overview
572
* Defect #32125: Issues autocomplete may not find issues with a subject longer than 60 characters
573
* Defect #32471: Layout of the custom field edit page is different between the single edit page and the batch edit page
574
* Defect #33255: Issue auto complete doesn't work for custom fields with text formatting enabled on issue bulk edit page
575
* Defect #33419: Show only valid projects on issue form when the issue is a subtask
576
* Defect #34185: Trackers of subprojects are not displayed in the Issue summary page
577
* Feature #4511: Allow adding user groups as watchers for issues
578
* Feature #28471: Query links for subtasks on issue page
579
* Feature #31881: Add "behind-schedule" CSS class to issues
580
* Feature #33254: Show open/closed badge on issue page
581
* Feature #33418: Bulk addition of related issues
582
* Feature #33832: Move the "Private" badge next to the "Open/Closed" badge
583
* Feature #34303: Allow to add subtask from context menu
584
* Feature #34798: Show project tree instead of subprojects in the project selector when you create a new issue
585
* Patch #33329: Improve watchers functionality to mark the users that are watching a non visible object and to not return watchers that cannot see the object
586
* Patch #33437: Add missing icon class to items with icon-checked class in the context menu
587
588
h3. [Issues filter]
589
590
* Feature #34700: Allow to use watch_by filter in the global issues list
591
592
h3. [Issues list]
593
594
* Feature #32240: Add download buttons in Files columns of the issues list
595
596
h3. [Performance]
597
598
* Defect #33289: Updating time tracking activities in project setting may take too long time
599
* Patch #33244: Replace "**" method with bitwise left shift in Tracker#disabled_core_fields and Tracker#core_fields
600
* Patch #33664: evaluate acts_as_activity_provider's scope lazily
601
* Patch #34150: Use match? instead of =~ when MatchData is not used
602
* Patch #34153: Use sum instead of inject(0, :+)
603
* Patch #34160: Replace Hash#merge! with Hash#[]=
604
* Patch #34161: Replace gsub with tr, delete, or squeeze
605
* Patch #34399: Use sum { ... } instead of map { ... }.sum
606
607
h3. [Permissions and roles]
608
609
* Feature #13767: Export permissions report to CSV
610
* Feature #33945: Allow normal users to delete projects with permission
611
612
h3. [Plugin API]
613
614
* Defect #33290: Unnecessary database access when IssueQuery class is defined
615
* Patch #33453: Add plugin CSS classes to plugin settings views
616
617
h3. [Project settings]
618
619
* Defect #34032: Project settings tab contains two items with the same id
620
621
h3. [Projects]
622
623
* Defect #33733: No trackers are selected for new projects
624
* Feature #32818: Add a system setting for default results display format of project query
625
* Feature #32944: Always preserve the tree structure in the project jump box
626
* Feature #33174: Show groups in members box on project overview page
627
628
h3. [Rails support]
629
630
* Patch #34966: Update Rails to 5.2.5
631
632
h3. [REST API]
633
634
* Defect #11870: Users can delete their own accounts unconditionally via REST API
635
* Defect #30121: Projects API should not return invisible trackers
636
* Feature #22008: Associated Revision API
637
* Feature #33301: Add option to include enabled issue custom fields in projects#show API response
638
* Feature #33592: Include updated_on and passwd_changed_on columns in users API response
639
* Feature #34242: Include two-factor authentication scheme in users API response
640
641
h3. [Rails support]
642
643
* Patch #32886: Rails 6: Use #media_type instead of #content_type to test the MIME type of a response
644
* Patch #32887: Rails 6: Use "render template:" instead of "render file:" in app/views/layouts/admin.html.erb
645
* Patch #32911: Rails 6: Fix deprecation warning "Class level methods will no longer inherit scoping"
646
647
h3. [Roadmap]
648
649
* Defect #32860: Invalid links to versions with sharing in project tree
650
* Feature #7956: Show Roadmap tab when subprojects have defined versions
651
652
h3. [Ruby support]
653
654
* Feature #31500: Ruby 2.7 support
655
* Feature #34142: Drop Ruby 2.3 support
656
657
h3. [Security]
658
659
* Defect #34950: SysController and MailHandlerController are vulnerable to timing attack
660
661
h3. [SCM]
662
663
* Defect #23055: Error with Fetch commits with Mercurial repository when log has invalid char
664
* Defect #27790: mercurial: error of double quotes in branch and tag names
665
* Defect #32153: Repository browser does not render previews for audio/video files
666
* Feature #8875: Allow manually fetching changesets
667
* Feature #34942: Support for Git repositories with default branch "main"
668
* Patch #32835: Make breadcrumbs of repository browser copy-paste friendly
669
670
h3. [SEO]
671
672
* Feature #31617: robots.txt: disallow crawling dynamically generated PDF documents
673
* Feature #33658: robots.txt: disallow crawling login, register, and lost password form
674
675
h3. [Text formatting]
676
677
* Defect #27780: Case-insensitive matching fails for Unicode filenames when referring to attachments in text formatting
678
* Feature #1575: Toolbar button to insert a table
679
* Feature #1718: Table column sorting
680
* Feature #32528: Make languages in Highlighted code button in toolbar customizable
681
682
h3. [Third-party libraries]
683
684
* Feature #33383: Update jQuery to 3.5.1
685
* Patch #33424: Update Tribute to 5.1.3
686
687
h3. [Time tracking]
688
689
* Defect #29838: Time logging via commit message does not work when the configured activity has been overridden on the project level
690
* Defect #33952: Spent time details are displayed in incorrect order when sorted by week and date
691
* Feature #32436: Add support for grouping by issue on timelog view
692
* Feature #33256: Show wiki toolbar for spent time custom fields with text formatting enabled
693
694
h3. [Translations]
695
696
* Defect #32828: Fix typos in Russian translation
697
* Defect #32857: Fix grammatical agreement in translation for "parent issue" in pt and pt-BR
698
* Defect #34456: Fix Japanese translation for less_than_x_seconds and less_than_x_minutes
699
* Patch #32238: Improvement of the German translation
700
* Patch #32380: Change Italian translation for "news"
701
* Patch #33403: Change Japanese translation for text_file_repository_writable
702
* Patch #33763: Change Japanese translation for field_onthefly
703
* Patch #34418: Unify the translation of the word "relation" in Czech
704
* Patch #34659: Change Traditional Chinese translation for "watch" and "watcher"
705
706
h3. [UI]
707
708
* Defect #33116: Successful deletion notice is not displayed after deleting some types of content
709
* Defect #33234: Vertical scroll bar in some browsers hide content
710
* Defect #34580: Custom field labels do not contain class "error" when the field value is invalid
711
* Defect #34805: Activity tab in cross-project menu is sometimes broken
712
* Feature #28392: Improve wiki headings style
713
* Feature #29285: Add "Assign to me" shortcut to issue edit form
714
* Feature #29473: Submit a form with Ctrl+Enter / Command+Return
715
* Feature #30459: Switch edit/preview tabs with keyboard shortcuts
716
* Feature #31589: Show warning and the reason when the issue cannot be closed because of open subtasks or blocking open issue(s)
717
* Feature #31887: Update jQuery UI to 1.12.1
718
* Feature #32764: Make form validation errors more obvious for users
719
* Feature #32976: Display avatar on add watcher dialog
720
* Feature #33167: "Add news" button in cross-project News tab
721
* Feature #33820: Auto complete wiki page links
722
* Feature #33908: Show an icon for a bookmarked project in the projects list
723
* Feature #34340: Make archived projects visually distinguishable in nested projects lists
724
* Feature #34417: Require explicit confirmation when deleting a user or a project
725
* Feature #34549: Add keyboard shortcuts for wiki toolbar buttons
726
* Feature #34703: "Copy link" feature for issue and issue journal
727
* Feature #34714: Move delete button for issues and journals to the dropdown menu
728
* Patch #34955: Update copyright year in the footer to 2021
729
730
h3. [UI - Responsive]
731
732
* Defect #33913: Input fields of the login form are too small in height on mobile
733
734
h3. [Wiki]
735
736
* Defect #31287: Ordering wiki pages should not be case sensitive
737
* Feature #32629: Add edit button to Wiki sidebar