Added

• CVE-Radar: import of the vulnerabilities of the European Union Vulnerability Database (EUVD) as a supplement to the NVD. It adds the EUVD id, the EPSS and the day of exploitation, and brings vulnerabilities the NVD doesn't have yet, also ones without a CVE id. The EUVD names products only, so these match as possible. Off by default.
• CVE-Radar: the list and the file of a vulnerability show where its data comes from (NVD, OSV, EUVD) as badges, and the list has a pinned filter to select by source.
• App: the system message of the administrators (e.g. maintenance work) is shown above the pages, as in the web version.
• Address campaign values: new filter "Edited by" to list the entries a chosen user has created or changed.
• App: the web tabs have a browser menu with back, forward, reload, find in the page, share link, open in the browser and restart; pull to refresh now also works on the pages with the menu, and a lost connection shows an error with a retry instead of an empty page.
• New column "Edited by" with a pill for everybody who created or changed an entry, in the lists of address campaign values, outgoing and incoming invoices, orders, leave corrections, liquidity entries, incoming and outgoing mail, contracts, the visitor book, notification rules, customers and projects.
• CVE-Radar, notification rules: new rule type "Unanswered team checks of a case". The rule names a case and reminds the members who haven't answered one of its team checks asking every member yet, at most once a day, by schedule or triggered by hand. The reminder is done as soon as they answered.
• App: all servers the app is logged in at send pushes, not only the one shown. The push names its server, a tap on one of another server offers to switch there and opens it; their open notifications are shown at the menu, in the server list and in the notification center, the icon counts all of them. Older servers push only while shown, as before.
• App: a contact of the address book can be added to the own contacts of the device or shared as vCard (messages, mail, messengers), also without a connection to the server.
• App: the ProjectForge tab (globe) opens with a menu that is easy to reach on a phone: tabs for the favorites, the pages opened last, the main menu with expandable areas and the user menu with the appearance (light, dark, system; the tab chosen last opens again), and a search across all entries (or in all data). Tapping the globe again closes the menu and shows the page as it was; tapped once more, it opens the menu again.

Improved

• CVE-Radar, tab "Statistics": optionally look back 1, 2, 5 or 10 years.
• CVE-Radar, My CVE-Radar: "Done" and "Not affected" ask before saving and explain that they answer for yourself only and don't close the case. The case card also shows the checks of your own groups with their answer button. If such a check asks every member, its answer is your answer to the case as well, so there is only one answer per person. In the table of these checks the identifying columns and the actions stay pinned.
• Chat: on touch devices and in the app, a long press on a reaction shows who reacted.
• Chat: the search lists all matching people, each with buttons to start a direct message or an encrypted chat.
• E-invoice: the customer's invoice recipient email (BT-49) and the email of its contact person (BT-58) are separate fields now, on invoice and account. The seller's contact email (BT-43) is prefilled from the configuration and editable on the invoice.
• App: below the QR code of a business card a small list shows every field the card contains, including the photo, also without a connection to the server.
• Digital business card: below the QR code a small list shows every field the card contains, including the photo.
• The QR code of a business card is rendered at a higher resolution, so it stays sharp when shown large (e.g. in the app).

Changed

• Digital business cards: the photo is linked by a public url with a random token (no login, not guessable), also without a gateway; the url stays the same when the image is replaced or deleted, and can be revoked with "Renew photo link" on the card. The base url can be set with projectforge.businessCard.photoBaseUrl. Update the gateway together with the server; photo links of earlier QR codes stop working.
• Creating an e-invoice (XRechnung, ZUGFeRD) now runs the e-invoice checker over the generated file and shows the result (valid, warnings or errors) in a dialog.
• Notification rules: the rule types come from the modules and plugins that provide them. The rule types of a deactivated plugin (e.g. the CVE-Radar) aren't offered any more, and its rules wait until the plugin is active again.
• App: the week strip of the time sheets follows the finger when swiped and snaps to a whole week; the week starts on the first day of the week set in "My account".
• The notifications of chat messages show the beginning of the message (in rooms with its author) instead of repeating their title, in the app and in the notification center of the web pages. Only for the recipient while they may read the conversation; mails and pushes keep their generic text.
• App: the notifications (bell) and the "more" menu slide up over the tabs like the menu of the pages, the tab bar stays visible below them; pulling them down, a tap above them or their button again closes them.

Fixed

• CVE-Radar: a team check can ask every member of the group (e.g. everyone checks the own client); each answer is stored and the check stays open until all members answered who logged in within the last 90 days (configurable). Before, every answer replaced the one before.
• Calendar: the start time of an entry can now be changed by dragging its top edge, not only the end time.
• Notification mails (e.g. about new chat messages) now contain a link to the chat or the concerned entry.
• Notification rules: the menu entries of plugins (e.g. the CVE-Radar) can be chosen as menu counter and as link of the notifications.
• App: the badges of the chat and the notifications follow at once: a push sets the bell's count when it arrives, and a chat read or a notification done in the pages removes them right away, no longer only with the next update a minute later.
• Calendar: a time sheet opened from a break keeps its end time when the start time is changed.