Changesets: MantisBT

master b7512095

2025-08-24 21:50

vboctor


Details Diff
Fix / improve test email admin functionality

Fixes 0035288
Affected Issues
0035288
mod - admin/email_queue.php Diff File
mod - core/email_api.php Diff File

master-2.27 371c830f

2025-08-24 06:33

dregad


Details Diff
UserUpdateCommand: use user_ensure_email_valid()

Avoid code duplication and ensure email is validated in the same way
everywhere.

Issue 0036005
Affected Issues
0036005
mod - core/commands/UserUpdateCommand.php Diff File

master-2.27 62f67e6e

2025-08-23 19:56

dregad


Details Diff
Fix incorrect logic when checking CF length
mod - core/custom_field_api.php Diff File

master-2.27 a496630b

2025-08-23 19:40

dregad


Details Diff
New DB_FIELD_SIZE_CF_DEFAULT_VALUE constant
mod - core/constant_inc.php Diff File
mod - core/custom_field_api.php Diff File

master-2.27 231d0b32

2025-08-23 19:39

dregad


Details Diff
Use config_get_global()
mod - account_prof_edit_page.php Diff File
mod - account_prof_menu_page.php Diff File
mod - bug_change_status_page.php Diff File
mod - core/cfdefs/cfdef_standard.php Diff File

master-2.27 08143907

2025-08-21 19:03

dregad


Details Diff
Fix collapse state persistence for Monitors

Incorrect section id "monitoring" is passed to is_collapsed() function,
it should be "monitors".

Regression introduced by issue 0021675 (a911a2ba661521a388738ed92694421a9dec97c1).

Fixes 0036269
Affected Issues
0021675, 0036269
mod - bug_view_inc.php Diff File

master-2.27 1d5fa8bf

2025-08-21 12:27

dregad


Details Diff
Fix filters section collapse for anonymous user

Changes the logic in collapse_cache_token(), which now always initializes
the cache from the collapse cookie, even if user is not logged in or
anonymous.

Fixes 0036265
Affected Issues
0036265
mod - core/collapse_api.php Diff File

master bf57933f

2025-08-18 08:08

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net. [skip ci]
mod - lang/strings_galician.txt Diff File

master 4da27c82

2025-08-14 04:16

dregad


Details Diff
Merge branch 'master-2.27'
mod - manage_proj_cat_update.php Diff File

master-2.27 38a56985

2025-08-14 04:15

dregad


Details Diff
Fix DB error updating category on PostgreSQL

ERROR: invalid input syntax for type integer: "TRUE" for the query:
UPDATE mantis_category_table SET name=$1, user_id=$2, status=$3
WHERE id=$4.

Regression introduced by commit 05c1639f45bfc0c3392288930f37f351bfcfc7b9
(issue 0031017).

Fixes 0036263
Affected Issues
0031017, 0036263
mod - manage_proj_cat_update.php Diff File

master 66357ba3

2025-08-11 08:07

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net. [skip ci]
mod - lang/strings_korean.txt Diff File
mod - plugins/MantisGraph/lang/strings_korean.txt Diff File

master-2.27 a0bc8c34

2025-08-11 02:32

dregad


Details Diff
Send message to the new email address, CC the old

Rename $t_email variable to $t_old_email, to avoid confusion.

Fixes 0036005
Affected Issues
0036005
mod - core/email_api.php Diff File

master-2.27 547a6e18

2025-08-10 13:19

dregad


Details Diff
Display pending email verification information

On account_page.php, manage_user_page.php and manage_user_edit_page.php,
we display a warning message to inform the user that the email address
is pending user validation.

Adds a new print_email_pending_verification_warning() function similar
to print_email_not_unique_warning().

To efficiently process the list of user accounts in manage_user_page.php
a new token_get_by_type() function allows retrieving a list of all
tokens of a given type.

Issue 0036005
Affected Issues
0036005
mod - account_page.php Diff File
mod - core/print_api.php Diff File
mod - core/tokens_api.php Diff File
mod - manage_user_edit_page.php Diff File
mod - manage_user_page.php Diff File

master-2.27 0d04eed6

2025-08-10 13:14

dregad


Details Diff
Remove pending email if admin updates it

If a user account has e pending TOKEN_ACCOUNT_CHANGE_EMAIL and an admin
updates that user's email address, it effectively invalidates the
earlier email change so we delete the token in this case.

Issue 0036005
Affected Issues
0036005
mod - core/commands/UserUpdateCommand.php Diff File

master-2.27 09840507

2025-08-10 13:11

dregad


Details Diff
Validate email address after user changes it

The new email address is temporarily stored in a Token, using a new type
(TOKEN_ACCOUNT_CHANGE_EMAIL), and a confirmation email is sent to the
user (new email_send_email_verification_url() function).

string_get_confirm_hash_url() gets a new optional parameter ($p_page)
to specify the target verification page.

A new verify_email.php page allows the user to confirm that the address
is valid, and update the account.

New language strings to support the new functionality have been defined

ERROR_LOST_PASSWORD_CONFIRM_HASH_INVALID error message has been modified
to remove `Please signup again.`, making it more generic and allowing
its reuse in the email verification context.

Fixes 0036005, CVE-2025-55155
Affected Issues
0036005
mod - account_update.php Diff File
mod - core/constant_inc.php Diff File
mod - core/email_api.php Diff File
mod - core/string_api.php Diff File
mod - lang/strings_english.txt Diff File
add - verify_email.php Diff File

master-2.27 cd84c617

2025-08-10 12:59

dregad


Details Diff
New function user_ensure_email_valid()

Previously, user_set_email() was both validating and storing the new
email.

This allows performing the validation independently. user_set_email()
calls the new function so current behavior remains unchanged.

Issue 0036005
Affected Issues
0036005
mod - core/user_api.php Diff File

master-2.27 bed58477

2025-08-10 12:50

dregad


Details Diff
New print_email_not_unique_warning() function

Removes code duplication in manage_user_edit_page.php and
account_page.php.

Issue 0036005
Affected Issues
0036005
mod - account_page.php Diff File
mod - core/print_api.php Diff File
mod - manage_user_edit_page.php Diff File

master-2.27 8b4c2a8c

2025-08-09 15:13

dregad


Details Diff
Fix static analysis warnings
mod - account_page.php Diff File

master-2.27 99accc36

2025-08-08 19:24

dregad


Details Diff
Use localized strings for textarea field names
mod - core/bug_api.php Diff File
mod - core/bugnote_api.php Diff File
mod - core/commands/IssueAddCommand.php Diff File
mod - core/profile_api.php Diff File

master-2.27 cac67fd0

2025-08-08 19:20

dregad


Details Diff
Limit size of textarea Custom Fields
mod - core/cfdefs/cfdef_standard.php Diff File
mod - core/custom_field_api.php Diff File
mod - manage_custom_field_edit_page.php Diff File

master-2.27 b81db021

2025-08-08 19:11

dregad


Details Diff
Limit size of System Profile Description field
mod - account_prof_edit_page.php Diff File
mod - account_prof_menu_page.php Diff File
mod - core/profile_api.php Diff File

master-2.27 c7618a26

2025-08-08 14:50

dregad


Details Diff
Implement testAddNoteWithAttachment()
mod - tests/rest/RestIssueNotesTest.php Diff File

master-2.27 bb5c25e6

2025-08-08 14:33

dregad


Details Diff
Implement testAddNoteWithTimeTracking()

Test is skipped if time tracking is disabled.

Add skipIfTimeTrackingIsNotEnabled() helper method in RestBase class.
mod - tests/rest/RestBase.php Diff File
mod - tests/rest/RestIssueNotesTest.php Diff File

master 570c3212

2025-08-07 08:08

translatewiki.net


Details Diff
Localisation updates from https://translatewiki.net. [skip ci]
mod - lang/strings_galician.txt Diff File
mod - lang/strings_slovene.txt Diff File

master-2.27 92006b17

2025-08-04 09:52

dependabot[bot]

Committer: dregad


Details Diff
Bump adodb/adodb-php from 5.22.9 to 5.22.10

Bumps [adodb/adodb-php](https://github.com/ADOdb/ADOdb) from 5.22.9 to 5.22.10.
- [Release notes](https://github.com/ADOdb/ADOdb/releases)
- [Changelog](https://github.com/ADOdb/ADOdb/blob/master/docs/changelog.md)
- [Commits](https://github.com/ADOdb/ADOdb/compare/v5.22.9...v5.22.10)

---
updated-dependencies:
- dependency-name: adodb/adodb-php
dependency-version: 5.22.10
dependency-type: direct:production
update-type: version-update:semver-patch
...

Fixes 0035906, PR https://github.com/mantisbt/mantisbt/pull/2144

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit 4ed0ac8d4ae85156d81048958c9a006dc1f11d71)
Affected Issues
0035906
mod - composer.lock Diff File
 First  Prev  1 2 3 4 5 6 7 8 9 ... 70 ... 140 ... 210 ... 280 ... 350 ... 420 ... 490 ... 560 ... 630 ... 700 ... 735 736 737  Next  Last