kimai/kimai 2.16.0 on GitHub

Compatible with PHP 8.1 to 8.3

Translations update from Hosted Weblate (#4826) (#4814) (#4812)
Docker: Fix TLS certificate verification for LDAP authentication (#4802)
Remove view_own_timesheet permission check from Wizard controller
Adds a string formatter for the general export function
Adds a twig function to sanitize data against DDE attacks (blame Microsoft not Kimai!)
Fix just another doctrine deprecation
Allow to use english format for DateRanges even if user uses different locale
Added macro to simplify cross-links to search results
Cross-link "filter timesheets" view from weekly reports
Activate Taiwanese locale - thanks @IepIweidieng
Improve min_day and max_day handling in some date chooser
Added missing redirect after saving API token
Make sure that access tokens expiry date is in the future (#4808)
Allow to delete api tokens for other users (#4809)
Use core date filters to show last_usage and expiry date for API tokens
Fix loading local.yaml as last config
Prepare icon refactoring to SVG
Disable CSRF on logout again, causing too many unnecessary problems
Remove all expired session on logout
Fix API permission issue: match request only if a Bearer token is passed
Use rate limiter to reduce risk of Session prediction attack attempts (thanks to Ignatius Michael from DeepCove Cybersecurity for raising awareness)
Bump composer packages (fixes translations marked as "needs-translation" are missing)
Upgrade to chart.js 4 (#4815)
Update all frontend dependencies to latest minor version

Involved in this release: @abrain, @kevinpapst, @IepIweidieng and @popalltheshells - thank you!