This is a second beta release for the next major version 1.7 of Roundcube webmail.
With this milestone we introduce some more fixes, and bring full support for the early version of PHP 8.5.
It does not include breaking changes (beyond those of 1.7-beta).
Some noteworthy changes are:
- Support PHP v8.5(-pre) without deprecation warnings.
- Support IPv6 in database DSN (#9937)
- Use
htmleditorsetting also for identity signature (#9954) - Fix regression in handling of non-unicode characters in a plain text message (#9953)
- Fix parsing of inline styles that aren't well-formatted (#9948)
- Support early MIME types for S/MIME encrypted messages (#9973)
- Only apply fix_path for href attrib in s (#9943)
- Show homograph-warning-icon before email address, unify warning wording (#9945)
- Show full details with warning icon in case of phishing suspicion (#9945)
- Prepend group-names to display-name (#9945) Thanks to coco_melon for the reporting!
- Wash the
nameattribute also on more elements (#9949) – Thanks to pwn.ai by Octagon Networks for the reporting! - Sanitize filename on download (#9960)
- Drop Internet Explorer from supported browsers (#9963)
- Enforce leading backslash for non-namespaced non-Roundcube uses (#9935)
- Use asset_url() instead of get_skin_file() for deleteicon on contact edit form (#9933)
- Several changes to the test tooling.
This is a beta release and we recommend to test it on a separate environment.
Migrate existing configs with either the installto.sh or the update.sh scripts.
And don't forget to backup your data before installing it!
Changelog
Here is the full changelog since `1.7-beta``:
- Build the container image only in our main repo, not in forks
- Fix installing aspell in all test workflow runs (#9993)
- Improve uploading artefacts on browser test failure (#9980)
- Update CS Fixer conf
- markdownify remaining docs (#9955)
- Support early MIME types for S/MIME encrypted messages (#9973)
- Only apply fix_path for href attrib in s (#9943)
- Show homograph-warning-icon before email address, unify warning wording
- Show full details with warning icon in case of phishing suspicion
- Prepend group-names to display-name
- Also "wash" the
nameattribute of textarea and select - Wash the
nameattribute also on more elements - fix: Sanitize filename on download (#9960)
- Run test with PHP 8.5-rc (#9970)
- Remove Internet Explorer from README (#9963)
- For container-based testing allow to specify a testrunner image, and COMPOSER_ARGS
- Note the password for watching the browser during tests
- Run tests via scripts to allow arguments; add eslint service
- Run some tests (optionally) on a copy of the current code
- Make targets to help with publishing releases
- Use generic tag name in container image build script
- Build testrunner images for php v8.4 and 8.5-rc, too
- Fix flaky browser test
- Fix PHP Fatal error: Uncaught TypeError: html::quote(): Argument #1 ($str) must be of type string, null given (#9957)
- Tests: Attempt to fix a flaky browser test
- PHP 8.5: Remove redundant setAccessible() calls
- CS-Fixer: Enable modernize_strpos
- Enforce leading backslash for non-namespaced non-Roundcube uses (#9935)
- Fix regression in handling of non-unicode characters in a plain text message (#9953)
- Update changelog
- Use htmleditor config for indentity signature (#9954)
- PHP 8.5: Replace __(sleep|wakeup) with __(serialize|unserialize)
- PHP 8.5: Remove setAccessible() calls, they are no-op sine 8.1
- PHP 8.5: Remove deprecated imagedestroy() use
- Fix parsing of inline styles that aren't well-formatted (#9948)
- Fix typo in defaults.inc.php (replace mmust with must) (#9934)
- Use asset_url() instead of get_skin_file() for deleteicon on contact edit form (#9933)
- Support IPv6 in database DSN (#9937)
- Localization: Remove non-working links to Transifex
- Update localization from Transifex
- Mark release 1.7-beta in the changelog (#9931)
- Make target to remove untracked minified .js and .css files
- Include node_modules/.bin into PATH to ensure uglify etc. are found
- CS/PHPDoc fix
- PHP 8.5 compat. fixes