Critical & security fixes:
- #18462 fix(ip-whitelist): fix incorrect exclusion of bypass tokens
- #18528 fix(publicdashboard): enforce capability checks for publicdashboard
- #18096 fix(backend): escaping in templates
- #17742 fix(user): improve org admin
- #18144 fix(user): improve userEdit
- #18446 fix(user): improve user service account edition
- #17754 fix(search): Update of search query processing
- #17756 fix(access): minor refactor of access utils
- #17678 fix(backend): improve emails
- #18075 fix(user): normalize email to avoid duplicate
- #17818 fix(notifiers): improve notifier connection query
- #17705 fix(email): Improve email verification
- #17772 fix(theme): refactor themes
- #17618 fix(case-template): improvement of capability for case template relation mutations
Direct security updates:
- nodemailer updated from 9.0.5 to 10.0.10
- compression updated from 1.8.1 to 1.8.2
- @filigran/rich-text-editor updated from 1.2.0 to 1.2.1
Indirect (transient) security updates:
- @xmldom/xmldom updated from 0.8.13 to 0.8.15
- brace-expansion updated from 1.1.16 to 1.1.21
- brace-expansion updated from 2.1.2 to 2.1.7
- brace-expansion updated from 5.0.8 to 5.0.12
- fast-uri updated from 3.1.4 to 3.1.8
- fast-uri updated from 4.1.1 to 4.2.1
- ip-address updated from 10.2.0 to 10.7.2
- undici updated from 6.28.0 to 6.28.1
- undici updated from 8.9.0 to 8.10.2
- @tiptap/core updated from 3.23.1 to 3.30.5
- js-yaml updated from 3.15.0 to 3.15.1
- nanoid updated from 3.3.16 to 3.3.18
- nanoid updated from 3.3.17 to 3.3.19
- postcss updated from 8.5.22 to 8.5.28
Pull Requests:
- fix(case-template): improvement of capability for case template relation mutations (#17618) by Céline Sèbe (@CelineSebe) in #17693
- fix(theme): refactor themes (#17772) by Jeremy Cloarec (@JeremyCloarec) in #17779
- fix(email): Improve email verification (#17705) by Sarah Bocognano (@SarahBocognano) in #17776
- fix(notifiers): improve notifier connection query (#17818) by Sarah Bocognano (@SarahBocognano) in #17822
- fix(user): normalize email to avoid duplicate (#18075) by Marie Flores (@marieflorescontact) in #18104
- fix(backend): improve emails (#17678) by Landry Trebon (@lndrtrbn) in #18146
- fix(access): minor refactor of access utils (#17756) by Florian DeLemarre (@delemaf) in #18164
- fix(search): Update of search query processing (#17754) by Florian DeLemarre (@delemaf) in #18166
- chore(dev): replace the MinIO image by pgsty/silo in the development + fix mkdoc build (#18238) by A. Jard (@aHenryJard) in #18309
- chore(deps): security updates (#18426) by Laurent Bonnet (@labo-flg) in #18429
- fix(user): improve user service account edition (#18446) by Jeremy Cloarec (@JeremyCloarec) in #18402
- chore(docker): remove the now unused libmagic native dependency (#17911) by A. Jard (@aHenryJard) in #18517
- fix(user): improve userEdit (#18144) by Marie Flores (@marieflorescontact) in #18521
- fix(user): improve org admin (#17742) by Jeremy Cloarec (@JeremyCloarec) in #18467
- feat(docker): adopt the FIPS 140-3 validated base image (#17908) by A. Jard (@aHenryJard) in #18527
- fix(publicdashboard): enforce capability checks for publicdashboard (#18528) by Marie Flores (@marieflorescontact) in #18540
- fix(backend): escaping in templates (#18096) by A. Jard (@aHenryJard) in #18531
- fix(ci): replace deprecated circleci/node:current image with cimg/node (#18159) by A. Jard (@aHenryJard) in #18529
- fix(ip-whitelist): fix incorrect exclusion of bypass tokens (#18462) by Landry Trebon (@lndrtrbn) in #18536
- feat(platform): replace external map tile server with local PMTiles rendering (#17254) by A. Jard (@aHenryJard) in #18520
- fix(dep): update dependencies for LTS (#18547) by A. Jard (@aHenryJard) in #18550
- fix(dep): update dependencies for LTS (#18547) by A. Jard (@aHenryJard) in #18591
Full Changelog: 7.260811.0...7.260811.0-lts.1