- SECURITY: this release fixes multiple high and medium level security vulnerabilites, everyone it adviced to update to it!
- Api: already opened popups now also sync darkmode with the main window
- Infolog: remember showDetail state across sessions
- Invoices: scanned PDFs and PDFs with just paths are OCR-ed page by page controlled from the browser
- Invoices: import of PDFs with text uses the text read in the browser with pdf.js, which no longer needs Tika
- Login: warn about not supported old browsers, required: Chrome(ium)/Edge 105, Firefox 121 or Safari 15.4
- Mail: new preference to mark mails read only after the configured delay, default still immediatly
- Mail: warn on sending to more than a configurable number of recipients in To and Cc, and offer to move them to Bcc
- Mail: compose toolbar action "Resolve mailing-lists" replaces all distribution lists and groups by their members
- Mail/REST-API: fix a REST-compose popup opening as a tab with no posted data
- Mail: fix the display/print popup's window title staying blank instead of the subject
- Mail: fix the folder tree's saved open/closed state losing a toggle under load
- Mail: "Move/Copy selected to..." quick-submenu also shows recently used folders
- Mail: a distribution-list send aborted entirely for everyone because of one bad recipient
- Timesheet: remember the details toggle across sessions again
- Registration: anonymous session (Lost password / Sign up) failed, no longer requiring/using a password for user "anonymous"
- SAML: was not working since SimpleSAMLphp update, now it does again