Changesets: MantisBT
|
master-2.27 2b3e63e1 2025-10-19 11:13 Details Diff |
Get pending email address from REST API Adding `email_pending` to the list of fields in the select parameter from /users endpoints will return the new email address pending user validation, if there is one. Field is not selected by default. Issue 0036005 |
Affected Issues 0036005 |
|
| mod - api/soap/mc_account_api.php | Diff File | ||
|
master-2.27 e4ffb379 2025-10-19 11:00 Details Diff |
Handle email change in UserUpdateCommand The update_user() method now triggers the email validation process via TOKEN_ACCOUNT_CHANGE_EMAIL when it is changed by the user, replicating the behavior in account_page.php. This ensures consistent behavior between REST API and GUI. Fixes 0036005 |
Affected Issues 0036005 |
|
| mod - core/commands/UserUpdateCommand.php | Diff File | ||
|
master-2.27 28946439 2025-10-19 10:59 Details Diff |
Refactor update_user() method to use DbQuery | ||
| mod - core/commands/UserUpdateCommand.php | Diff File | ||
|
master-2.27 0033f11c 2025-10-19 10:01 Details Diff |
Use 'realname' instead of 'real_name' for internal - `real_name` is used for end-user facing APIs (typically in REST and SOAP payloads or returned data). - `realname` is used internally in MantisBT core, because this is the actual column name in the user table. When updating a user, the Command is talking to the core api, so the data structure should use the internal name. Issue 0036005 |
Affected Issues 0036005 |
|
| mod - core/commands/UserUpdateCommand.php | Diff File | ||
| mod - core/email_api.php | Diff File | ||
|
master-2.27 bb8dd10b 2025-10-19 09:37 Details Diff |
Remove pending email when resetting password Issue 0036005 |
Affected Issues 0036005 |
|
| mod - lost_pwd.php | Diff File | ||
|
master-2.27 765fbd2a 2025-10-19 09:37 Details Diff |
Email validation hash not usable to reset password Since we use the same token to store the confirmation hash for all validation emails, we need to make sure that if it was generated for an email confirmation it cannot be used for a password reset, and vice versa. Fixes 0036005 |
Affected Issues 0036005 |
|
| mod - core/user_api.php | Diff File | ||
| mod - verify.php | Diff File | ||
|
master 04b94141 2025-10-19 06:03 Details Diff |
Increase spacing before lock icon on relationships Icon was showing too close to the target issue's summary. Adding a <span> with a spacing class. Fixes 0036510 |
Affected Issues 0036510 |
|
| mod - bug_view_inc.php | Diff File | ||
|
master-2.27 4fe94f45 2025-10-16 03:40 Committer: dregad Details Diff |
Add access check when copying column settings Fixes 0036502, CVE-2025-62520, GHSA-g582-8vwr-68h2 Signed-off-by: Damien Regad <dregad@mantisbt.org> |
Affected Issues 0036502 |
|
| mod - manage_columns_copy.php | Diff File | ||
|
master fa37165b 2025-10-15 21:01 dependabot[bot] Committer: dregad Details Diff |
Bump phpmailer/phpmailer from 6.11.1 to 7.0.0 Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.11.1 to 7.0.0. - [Release notes](https://github.com/PHPMailer/PHPMailer/releases) - [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md) - [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.11.1...v7.0.0) --- updated-dependencies: - dependency-name: phpmailer/phpmailer dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Fixes 0035874, https://github.com/mantisbt/mantisbt/pull/2154 Signed-off-by: dependabot[bot] <support@github.com> |
Affected Issues 0035874 |
|
| mod - composer.json | Diff File | ||
| mod - composer.lock | Diff File | ||
|
dependabot/composer/phpmailer/phpmailer-7.0.0 6840f84d 2025-10-15 21:01 dependabot[bot] Committer: community Details Diff |
Bump phpmailer/phpmailer from 6.11.1 to 7.0.0 Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.11.1 to 7.0.0. - [Release notes](https://github.com/PHPMailer/PHPMailer/releases) - [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md) - [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.11.1...v7.0.0) --- updated-dependencies: - dependency-name: phpmailer/phpmailer dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> |
||
| mod - composer.json | Diff File | ||
| mod - composer.lock | Diff File | ||
|
master 558146d7 2025-10-06 08:10 translatewiki.net Details Diff |
Localisation updates from https://translatewiki.net. [skip ci] | ||
| mod - lang/strings_russian.txt | Diff File | ||
| mod - plugins/MantisCoreFormatting/lang/strings_russian.txt | Diff File | ||
|
master 82ecf152 2025-10-03 11:22 Details Diff |
Fix INTERNAL APPLICATION ERROR in formatting plugin configuration Fixes 0036438 |
Affected Issues 0035215, 0036438 |
|
| mod - plugins/MantisCoreFormatting/pages/config_edit.php | Diff File | ||
|
master ffae7b92 2025-10-02 08:10 translatewiki.net Details Diff |
Localisation updates from https://translatewiki.net. [skip ci] | ||
| mod - lang/strings_arabic.txt | Diff File | ||
| mod - lang/strings_vietnamese.txt | Diff File | ||
|
master 0c22e424 2025-09-30 21:02 dependabot[bot] Committer: dregad Details Diff |
Bump phpmailer/phpmailer from 6.10.0 to 6.11.1 Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.10.0 to 6.11.1. - [Release notes](https://github.com/PHPMailer/PHPMailer/releases) - [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md) - [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.10.0...v6.11.1) --- updated-dependencies: - dependency-name: phpmailer/phpmailer dependency-version: 6.11.1 dependency-type: direct:production update-type: version-update:semver-minor ... Fixes 0035874, https://github.com/mantisbt/mantisbt/pull/2152 Signed-off-by: dependabot[bot] <support@github.com> |
Affected Issues 0035874 |
|
| mod - composer.lock | Diff File | ||
|
dependabot/composer/phpmailer/phpmailer-6.11.1 b84b547f 2025-09-30 21:02 dependabot[bot] Committer: community Details Diff |
Bump phpmailer/phpmailer from 6.10.0 to 6.11.1 Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.10.0 to 6.11.1. - [Release notes](https://github.com/PHPMailer/PHPMailer/releases) - [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md) - [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.10.0...v6.11.1) --- updated-dependencies: - dependency-name: phpmailer/phpmailer dependency-version: 6.11.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> |
||
| mod - composer.lock | Diff File | ||
|
dependabot/composer/phpmailer/phpmailer-6.11.0 063b3265 2025-09-29 22:38 dependabot[bot] Committer: community Details Diff |
Bump phpmailer/phpmailer from 6.10.0 to 6.11.0 Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.10.0 to 6.11.0. - [Release notes](https://github.com/PHPMailer/PHPMailer/releases) - [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md) - [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.10.0...v6.11.0) --- updated-dependencies: - dependency-name: phpmailer/phpmailer dependency-version: 6.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> |
||
| mod - composer.lock | Diff File | ||
|
master 22389660 2025-09-29 08:10 translatewiki.net Details Diff |
Localisation updates from https://translatewiki.net. [skip ci] | ||
| mod - lang/strings_arabic.txt | Diff File | ||
|
master 8252c7db 2025-09-28 05:30 Details Diff |
Merge branch 'master-2.27' | ||
| mod - core/history_api.php | Diff File | ||
|
master 122a18eb 2025-09-28 05:27 Details Diff |
Merge branch dregad/i36303-dropzone-html-1 - Fix dropzone displaying HTML code when errors occur during upload - Remove progress bar active class after upload PR https://github.com/mantisbt/mantisbt/pull/2150 |
||
| mod - bug_report.php | Diff File | ||
| mod - bugnote_add.php | Diff File | ||
| mod - core/error_api.php | Diff File | ||
| mod - js/common.js | Diff File | ||
|
master 64a3cdc6 2025-09-28 05:24 Committer: community Details Diff |
Merge branch dregad/i36303-dropzone-html-1 - Fix dropzone displaying HTML code when errors occur during upload - Remove progress bar active class after upload PR https://github.com/mantisbt/mantisbt/pull/2150 |
||
| mod - bug_report.php | Diff File | ||
| mod - bugnote_add.php | Diff File | ||
| mod - core/error_api.php | Diff File | ||
| mod - js/common.js | Diff File | ||
|
master 36dabecc 2025-09-22 08:09 translatewiki.net Details Diff |
Localisation updates from https://translatewiki.net. [skip ci] | ||
| mod - lang/strings_basque.txt | Diff File | ||
|
master 3fe3088b 2025-09-21 06:48 Committer: community Details Diff |
Merge branch i34928-version-update-strtotime into master PR https://github.com/mantisbt/mantisbt/pull/2047 |
||
| mod - api/soap/mc_api.php | Diff File | ||
| mod - core/commands/VersionAddCommand.php | Diff File | ||
| mod - core/commands/VersionUpdateCommand.php | Diff File | ||
| mod - core/date_api.php | Diff File | ||
| mod - manage_proj_ver_update.php | Diff File | ||
|
master 2be3d377 2025-09-21 06:30 Details Diff |
Remove progress bar active class after upload Fixes 0036353 |
Affected Issues 0036353 |
|
| mod - js/common.js | Diff File | ||
|
master a45bfc06 2025-09-21 05:14 Details Diff |
Merge branch 'master-2.27' | ||
| mod - bug_view_inc.php | Diff File | ||
| mod - core/collapse_api.php | Diff File | ||
| mod - core/commands/IssueNoteAddCommand.php | Diff File | ||
|
master-2.27 236b5615 2025-09-21 05:06 Details Diff |
Allow viewing history of deleted bugnotes Because it is not possible to determine the public/private status of a deleted bugnote, associated history events were only shown to the person who made the change. This prevented the note's owner and administrators from seeing other events (e.g. if the admin deletes a note created by a reporter, the reporter will only see "note added" and the admin "note deleted". A note's author is now allowed to see all history events related to that specific bugnote, even when they occurred due to another user's actions. Users having private_bugnote_threshold can see all bugnote-related history events, regardless of whether they authored it or not. Fixes 0036257 |
Affected Issues 0036257 |
|
| mod - core/history_api.php | Diff File | ||
