Changesets: MantisBT
|
master 915de954 2026-06-01 18:28 Details Diff |
Remove safe_mode check from installer Safe mode has been removed from PHP in 5.4. Fixes 0037227 |
Affected Issues 0037227 |
|
| mod - admin/install.php | Diff File | ||
|
master-2.28 f2191a0d 2026-06-01 17:42 Details Diff |
Fix display of `<br>` tags in print_test_result() Introduction of string_html_specialchars() broke the layout of a few messages that rely `<br>`. Fixes 0037103 |
Affected Issues 0037103 |
|
| mod - admin/install.php | Diff File | ||
|
master 8ce3dfd6 2026-06-01 08:13 translatewiki.net Details Diff |
Localisation updates from https://translatewiki.net. [skip ci] | ||
| mod - lang/strings_turkish.txt | Diff File | ||
| mod - plugins/MantisGraph/lang/strings_turkish.txt | Diff File | ||
|
master-2.28 813c49a7 2026-05-31 20:35 Details Diff |
mc_issue_update() use current data as default Prevents unexpected changes when a field is not supplied in the payload (e.g. no 'reporter' results in Issue reporter being changed to the user performing the update). Fixes 0037075 |
Affected Issues 0037075 |
|
| mod - api/soap/mc_issue_api.php | Diff File | ||
|
master a7e38077 2026-05-31 19:37 Details Diff |
Align Admin Guide with config_defaults_inc.php The webservice_specify_reporter_on_add_access_level_threshold config was missing the 2nd paragraph from the PHODoc block. Reworded text and updated both locations. Issue 0037199 |
Affected Issues 0037199 |
|
| mod - config_defaults_inc.php | Diff File | ||
| mod - docbook/Admin_Guide/en-US/config/api.xml | Diff File | ||
|
master-2.28 6deaf6a4 2026-05-30 18:22 Details Diff |
Fix static analysis warnings | ||
| mod - tests/soap/IssueUpdateTest.php | Diff File | ||
|
master-2.28 7a52a683 2026-05-30 18:21 Details Diff |
Improve IssueUpdateTest testUpdateWithTimeTrackingNote() is taking care of testing adding notes with TIME_TRACKING type, so it is not needed in testUpdateWithNewNote(). testUpdateWithNewNote() now only deals with regular BUGNOTE type. A test for adding a new note without re-posting the previous contents has been added. Adding a new test case testUpdateWithReminderNote() for REMINDER notes. Issue 0037200 |
Affected Issues 0037200 |
|
| mod - tests/soap/IssueUpdateTest.php | Diff File | ||
|
master-2.28 667e0640 2026-05-30 17:52 Details Diff |
Fix broken PHPUnit tests - Incorrect assignment of time_tracking duration in mc_issue_update() - Adapt IssueUpdateTest::testUpdateWithNewNote() Adding a TIME_TRACKING note (type 2) with note_attr makes no sense as the latter is only used for REMINDER notes. TIME_TRACKING requires a duration, which is set with `time_tracking` attribute. Fixes 0037200 |
Affected Issues 0037200 |
|
| mod - api/soap/mc_issue_api.php | Diff File | ||
| mod - tests/soap/IssueUpdateTest.php | Diff File | ||
|
master-2.28 6eecc70a 2026-05-30 17:52 Details Diff |
Fix broken PHPUnit tests - Incorrect assignment of time_tracking duration in mc_issue_update() - Adapt IssueUpdateTest::testUpdateWithNewNote() Adding a TIME_TRACKING note (type 2) with note_attr makes no sense as the latter is only used for REMINDER notes. TIME_TRACKING requires a duration, which is set with `time_tracking` attribute. Fixes 0037200 |
Affected Issues 0037200 |
|
| mod - api/soap/mc_issue_api.php | Diff File | ||
| mod - tests/soap/IssueUpdateTest.php | Diff File | ||
|
master-2.28 983310cd 2026-05-30 13:09 Details Diff |
Use IssueNoteAddCommand from mc_issue_update() Using the Command to add notes instead of calling bugnote_add() ensures consistent behavior. It also prevents unauthorized, low-privilege users from submitting TIME_TRACKING notes with arbitrary duration via SOAP and REST API, or REMINDER notes (SOAP only). Fixes 0037200, GHSA-4vpf-w7qv-5h3q |
Affected Issues 0037200 |
|
| mod - api/soap/mc_issue_api.php | Diff File | ||
|
master-2.28 de2f71fd 2026-05-30 13:09 Details Diff |
Use IssueNoteAddCommand from mc_issue_update() Using the Command to add notes instead of calling bugnote_add() ensures consistent behavior. It also prevents unauthorized, low-privilege users from submitting TIME_TRACKING notes with arbitrary duration via SOAP and REST API, or REMINDER notes (SOAP only). Fixes 0037200, GHSA-4vpf-w7qv-5h3q |
Affected Issues 0037200 |
|
| mod - api/soap/mc_issue_api.php | Diff File | ||
|
master-2.28 0ac87c39 2026-05-30 09:35 Details Diff |
Prevent unauthorized update of `version` field (2) Users below report_issues_for_unreleased_versions_threshold should not be allowed to set an Issue's product version to an unreleased one. This addresses the problem in the MantisBT UI - users could send a crafted request to bug_report.php or bug_update.php Added the necessary access checks to prevent that. Fixes 0037065, GHSA-3v2j-6fw9-f57c |
Affected Issues 0037065 |
|
| mod - bug_update.php | Diff File | ||
| mod - core/commands/IssueAddCommand.php | Diff File | ||
|
master-2.28 016f1055 2026-05-30 09:29 Details Diff |
Prevent unauthorized update of `version` field Users below report_issues_for_unreleased_versions_threshold should not be allowed to set an Issue's product version to an unreleased one. Added the necessary access check to prevent that. Fixes 0037065, GHSA-3v2j-6fw9-f57c |
Affected Issues 0037065 |
|
| mod - api/soap/mc_issue_api.php | Diff File | ||
|
master 84b0fc3d 2026-05-30 09:27 Details Diff |
Remove redundant assignment $t_bugnote variable is already defined with the same value at line 1203. |
||
| mod - api/soap/mc_issue_api.php | Diff File | ||
|
master-2.28 6b248809 2026-05-30 09:22 Details Diff |
New version_is_released() API function Also added VersionData::is_released() method. Issue 0037065 |
Affected Issues 0037065 |
|
| mod - core/version_api.php | Diff File | ||
|
master 1c1e092b 2026-05-29 20:04 Details Diff |
Doc: Updated entity-relationship diagram - MySQL Workbench model rev 3 (schema version 215) - Exported PDF - Updated PNG for Dev Guide Fixes 0019370 |
Affected Issues 0019370 |
|
| mod - docbook/Developers_Guide/en-US/images/erd.png | Diff File | ||
| mod - docbook/erd/mantisbt.mwb | Diff File | ||
| rm - docbook/erd/mantisbt_2.23.0_210_erd_r2.pdf | Diff | ||
| add - docbook/erd/mantisbt_2.29.0_210_erd_r3.pdf | Diff File | ||
|
master 46e5ceac 2026-05-29 20:04 Details Diff |
Schema: drop unused user_print_pref table Fixes 0019370 |
Affected Issues 0019370 |
|
| mod - admin/schema.php | Diff File | ||
|
master f2886368 2026-05-29 20:02 Details Diff |
Remove unused language strings Fixes 0019370 |
Affected Issues 0019370 |
|
| mod - lang/strings_afrikaans.txt | Diff File | ||
| mod - lang/strings_amharic.txt | Diff File | ||
| mod - lang/strings_arabic.txt | Diff File | ||
| mod - lang/strings_arabicegyptianspoken.txt | Diff File | ||
| mod - lang/strings_asturian.txt | Diff File | ||
| mod - lang/strings_basque.txt | Diff File | ||
| mod - lang/strings_belarusian_tarask.txt | Diff File | ||
| mod - lang/strings_breton.txt | Diff File | ||
| mod - lang/strings_bulgarian.txt | Diff File | ||
| mod - lang/strings_catalan.txt | Diff File | ||
| mod - lang/strings_chinese_simplified.txt | Diff File | ||
| mod - lang/strings_chinese_traditional.txt | Diff File | ||
| mod - lang/strings_czech.txt | Diff File | ||
| mod - lang/strings_danish.txt | Diff File | ||
| mod - lang/strings_dutch.txt | Diff File | ||
| mod - lang/strings_english.txt | Diff File | ||
| mod - lang/strings_esperanto.txt | Diff File | ||
| mod - lang/strings_estonian.txt | Diff File | ||
| mod - lang/strings_finnish.txt | Diff File | ||
| mod - lang/strings_french.txt | Diff File | ||
| mod - lang/strings_galician.txt | Diff File | ||
| mod - lang/strings_georgian.txt | Diff File | ||
| mod - lang/strings_german.txt | Diff File | ||
| mod - lang/strings_greek.txt | Diff File | ||
| mod - lang/strings_hebrew.txt | Diff File | ||
| mod - lang/strings_hindi.txt | Diff File | ||
| mod - lang/strings_hungarian.txt | Diff File | ||
| mod - lang/strings_icelandic.txt | Diff File | ||
| mod - lang/strings_interlingua.txt | Diff File | ||
| mod - lang/strings_italian.txt | Diff File | ||
| mod - lang/strings_japanese.txt | Diff File | ||
| mod - lang/strings_korean.txt | Diff File | ||
| mod - lang/strings_latvian.txt | Diff File | ||
| mod - lang/strings_lithuanian.txt | Diff File | ||
| mod - lang/strings_luxembourgish.txt | Diff File | ||
| mod - lang/strings_macedonian.txt | Diff File | ||
| mod - lang/strings_norwegian_bokmal.txt | Diff File | ||
| mod - lang/strings_norwegian_nynorsk.txt | Diff File | ||
| mod - lang/strings_occitan.txt | Diff File | ||
| mod - lang/strings_persian.txt | Diff File | ||
| mod - lang/strings_polish.txt | Diff File | ||
| mod - lang/strings_portuguese_brazil.txt | Diff File | ||
| mod - lang/strings_portuguese_standard.txt | Diff File | ||
| mod - lang/strings_ripoarisch.txt | Diff File | ||
| mod - lang/strings_romanian.txt | Diff File | ||
| mod - lang/strings_russian.txt | Diff File | ||
| mod - lang/strings_serbian.txt | Diff File | ||
| mod - lang/strings_serbian_latin.txt | Diff File | ||
| mod - lang/strings_serbo-croatian_latin.txt | Diff File | ||
| mod - lang/strings_slovak.txt | Diff File | ||
| mod - lang/strings_slovene.txt | Diff File | ||
| mod - lang/strings_spanish.txt | Diff File | ||
| mod - lang/strings_swedish.txt | Diff File | ||
| mod - lang/strings_swissgerman.txt | Diff File | ||
| mod - lang/strings_tagalog.txt | Diff File | ||
| mod - lang/strings_turkish.txt | Diff File | ||
| mod - lang/strings_ukrainian.txt | Diff File | ||
| mod - lang/strings_urdu.txt | Diff File | ||
| mod - lang/strings_vietnamese.txt | Diff File | ||
| mod - lang/strings_volapuk.txt | Diff File | ||
| mod - lang/strings_zazaki.txt | Diff File | ||
|
master e89a7235 2026-05-29 19:59 Details Diff |
Remove unused print_all_bug_options code Introduced in 2002, that was only used in the Excel export, and was replaced in 2009 by the Manage Columns functionality. Fixes 0019370 |
Affected Issues 0019370 |
|
| rm - print_all_bug_options_inc.php | Diff | ||
| rm - print_all_bug_options_page.php | Diff | ||
| rm - print_all_bug_options_reset.php | Diff | ||
| rm - print_all_bug_options_update.php | Diff | ||
|
master 06584820 2026-05-29 19:38 Details Diff |
Use the first group of numbers as bug id As suggested by @atrol in PR review, Fixes 0037134 |
Affected Issues 0037134 |
|
| mod - jump_to_bug.php | Diff File | ||
|
master-2.28 2d3a5537 2026-05-29 19:18 Details Diff |
Check update_bug_status_threshold in mc_issue_update() This missing check was allowing a user having update_bug_threshold to change an Issue's status, even if their access level is below update_bug_status_threshold. Fixes 0037181, GHSA-m7ph-9558-mrx3, CVE-2026-49280 |
Affected Issues 0037181 |
|
| mod - api/soap/mc_issue_api.php | Diff File | ||
|
master a095fb58 2026-05-28 12:25 Details Diff |
Add mapping for serbo-croatian_latin language See fa1aeb375c2685eeaea3cc1cb1da9c0dada2c071. Fixes 0037110 |
Affected Issues 0037110 |
|
| mod - config_defaults_inc.php | Diff File | ||
|
master 5bcf5c75 2026-05-28 08:06 translatewiki.net Details Diff |
Localisation updates from https://translatewiki.net. [skip ci] | ||
| mod - plugins/XmlImportExport/lang/strings_luxembourgish.txt | Diff File | ||
|
master fa1aeb37 2026-05-28 04:05 translatewiki.net Details Diff |
Localisation updates from https://translatewiki.net. [skip ci] |
Affected Issues 0037110 |
|
| mv - lang/strings_sh-latn.txt → lang/strings_serbo-croatian_latin.txt | Diff File | ||
|
master 21886a5a 2026-05-25 13:12 Committer: dregad Details Diff |
Fix plugin "can install" flag The flag must be set for all requirements using an AND condition. |
||
| mod - manage_plugin_page.php | Diff File | ||