20269 Commits

Author SHA1 Message Date
Mantas Masalskis
7b753d4fb0 Maintenance: Bumped dalli to 5.2.2 (GHSA-3553-vcg5-72jw, GHSA-4qp6-2jcr-596v,... 2026-10-06 23:28:21 +03:00
Dominik Klein
ee95993569 Maintenance: Allow alternative FQDN for WebSocket origins.
Approved-by: Florian Liebe <fl@zammad.com>

Co-authored-by: Florian Liebe <fl@zammad.com>
2026-10-06 18:19:47 +02:00
Florian Liebe
e732fa5107 Fixes #6413 - Drag & Drop (macros / group move) available on all tabs in detail search, but should be limited to tickets.
Approved-by: Dusan Vuckovic <dv@zammad.com>
2026-10-06 10:40:12 +02:00
Florian Liebe
ee04322a63 Fixes #6386 - Postmaster filter: #{regexp.…} cannot be saved into email/url attributes.
Approved-by: Dominik Klein <dk@zammad.com>
2026-10-06 10:28:33 +02:00
Florian Liebe
d66f7c9d68 Maintenance: Measure the CPU time instead of the wall-clock time in the performance specs of html2text and TextEncoding.
Approved-by: Martin Gruner <mg@zammad.com>
2026-10-06 10:28:23 +02:00
Dusan Vuckovic
9fd8a6ad87 Maintenance: Desktop view - Danger styling on buttons does not reliably signal irrecoverable actions.
Approved-by: Benjamin Scharf <bs@zammad.com>
2026-10-06 09:19:54 +01:00
Florian Liebe
416fe41626 Maintenance: Fixed packager.io RHEL scenario skipping the boot wait before systemd is reachable. 2026-10-06 09:57:42 +02:00
renovatebot
9f8f2388e7 Maintenance: Update dependency eslint to ^10.12.0
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-06 09:22:08 +02:00
renovatebot
911cb27aa6 Maintenance: Update dependency @frsource/cypress-plugin-visual-regression-diff to ^4.2.1
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-06 09:17:45 +02:00
Florian Liebe
24277638f9 Maintenance: Fixed flaky packager.io RHEL 10 job caused by a dnf lock race.
Approved-by: Martin Gruner <mg@zammad.com>
2026-10-06 09:17:15 +02:00
Florian Liebe
110fa3339c Follow-up 09ca564bfcc72a9d83851ede09621d8b16c62b55 - Maintenance: Stop exposing the session ID in the signshow payload and authenticate the legacy WebSocket login from the session cookie.
Approved-by: Dominik Klein <dk@zammad.com>
2026-10-05 21:41:06 +02:00
Mantas Masalskis
1e486439ef Maintenance: Do not establish a session when verifying a signup email address.
Approved-by: Dusan Vuckovic <dv@zammad.com>

Co-authored-by: Mantas <mantas@idev.lt>
2026-10-05 21:41:05 +02:00
Florian Liebe
9a1439e7fc Maintenance: Desktop view - Improved rendering of tree select option labels.
Approved-by: Dusan Vuckovic <dv@zammad.com>
2026-10-05 21:40:26 +02:00
Rene Reimann
713173c2a7 Maintenance: Desktop view - Improved rendering of select option labels
Approved-by: Florian Liebe <fl@zammad.com>

Co-authored-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:26 +02:00
Florian Liebe
0b3f314645 Tidy BREAKING_CHANGES.md file. 2026-10-05 21:40:25 +02:00
Florian Liebe
551d4f7fac Maintenance: Improve the handling of password reset and verification emails.
Approved-by: Dusan Vuckovic <dv@zammad.com>
2026-10-05 21:40:24 +02:00
Mantas Masalskis
ed181aaa76 Maintenance: Improve authorization scoping for the getting started wizard payload
Approved-by: Florian Liebe <fl@zammad.com>

Co-authored-by: Mantas <mantas@idev.lt>
2026-10-05 21:40:24 +02:00
Dominik Klein
65b7d0843b Maintenance: Improve notification template handling for some special situations.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:23 +02:00
Dusan Vuckovic
50bdaae0ac Maintenance: Stop exposing the session ID in the signshow payload and authenticate the legacy WebSocket login from the session cookie. 2026-10-05 21:40:22 +02:00
Mantas Masalskis
0228d7dbd6 Maintenance: Render pushed collections for the recipient's assets level
Approved-by: Dusan Vuckovic <dv@zammad.com>

Co-authored-by: Mantas <mantas@idev.lt>
2026-10-05 21:40:21 +02:00
Benjamin Scharf
465b2a8f43 Maintenance: Missing authorization of the queried object in LinksController#index
Approved-by: Mantas Masalskis <mm@zammad.com>
2026-10-05 21:40:21 +02:00
Mantas Masalskis
1129cc4f03 Maintenance: Give the knowledge base controller policies their own permission declarations.
Approved-by: Rene Reimann <rr@zammad.com>

Co-authored-by: Mantas <mantas@idev.lt>
2026-10-05 21:40:20 +02:00
Florian Liebe
060ea46b1b Maintenance: Improved authorization of activity stream entries.
Approved-by: Mantas Masalskis <mm@zammad.com>
2026-10-05 21:40:19 +02:00
Florian Liebe
a74ed5fbba Maintenance: Improve Organization association attribute handling.
Approved-by: Mantas Masalskis <mm@zammad.com>
2026-10-05 21:40:19 +02:00
Florian Liebe
98e279a474 Maintenance: Improved handling of online notifications and related assets.
Approved-by: Mantas Masalskis <mm@zammad.com>
2026-10-05 21:40:18 +02:00
Florian Liebe
ebe4b7a454 Maintenance: Restrict attribute assignment via GraphQL object attribute values.
Approved-by: Dominik Klein <dk@zammad.com>
2026-10-05 21:40:17 +02:00
Mantas Masalskis
31794c4b56 Maintenance: Inactive sessions remain authorized over ActionCable GraphQL
Approved-by: Florian Liebe <fl@zammad.com>

Co-authored-by: Mantas <mantas@idev.lt>
2026-10-05 21:40:16 +02:00
Mantas Masalskis
7d7975eee5 Maintenance: Improve consistency of role based knowledge base access checks.
Approved-by: Dusan Vuckovic <dv@zammad.com>
2026-10-05 21:40:16 +02:00
Florian Liebe
045a91746b Maintenance: Improve handling of templates in desktop view.
Approved-by: Dominik Klein <dk@zammad.com>
2026-10-05 21:40:15 +02:00
Florian Liebe
a26b9ad2de Maintenance: Improved handling of article preferences and attachments.
Approved-by: Dusan Vuckovic <dv@zammad.com>
2026-10-05 21:40:14 +02:00
Rolf Schmidt
5e1c80bcb0 Maintenance: Improve consistency of role based group access checks.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:14 +02:00
Rolf Schmidt
c0c5aa3d38 Maintenance: Harden overview sorting order direction handling.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:13 +02:00
Silke Jaenichen
6f5ca10dfe Maintenance: Improve the sender format handling in quoted email headers.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:12 +02:00
Rene Reimann
ea9dc41f50 Maintenance: Improve ticket article create endpoint.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:11 +02:00
Dominik Klein
54e9f987eb Maintenance: Ticket update responses return unredacted user and organization assets to customers.
Approved-by: Rolf Schmidt <rolf.schmidt@zammad.com>
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:11 +02:00
Silke Jaenichen
151f641c1d Maintenance: Align legacy knowledge base reader video marker rendering with the server-side helper.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:10 +02:00
Florian Liebe
b77d668f5d Maintenance: Update translations. 2026-10-05 21:40:09 +02:00
Dominik Klein
2e7daf6b19 Maintenance: Improve authorization scoping for knowledge base reordering and publishing actions.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:09 +02:00
Silke Jaenichen
1200360977 Maintenance: Desktop view - Escape display names in copy-to-clipboard HTML
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:08 +02:00
Dominik Klein
97a2c5e030 Maintenance: Improve audit log facebook channel handling.
Co-authored-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:40:07 +02:00
renovatebot
70587e634d Maintenance: Lock file maintenance (Ruby)
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:26:41 +02:00
Dominik Klein
48efde6c79 Maintenance: Align the Playwright drivers with Selenium and add an on-demand Firefox lane.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:24:38 +02:00
Dusan Vuckovic
c45ccd7e7e Maintenance: Update dependency vite_ruby to v3.11.1
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 21:22:26 +02:00
Dominik Klein
db1d5ec219 Maintenance: Cancel the running queries on logout.
Approved-by: Benjamin Scharf <bs@zammad.com>
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 20:49:25 +02:00
Mantas Masalskis
bc067ef3f0 Fixes #6399 - Knowledge base search index stores HTML-escaped titles and answer bodies.
Approved-by: Florian Liebe <fl@zammad.com>

Co-authored-by: Mantas <mantas@idev.lt>
2026-10-05 16:56:15 +03:00
Florian Liebe
5fb14cbae6 Follow-up 6d3d2456ea - Maintenance: No password_change notification when password is set via the user-update endpoint.
Approved-by: Marcel Bialas <mb@zammad.com>
2026-10-05 13:18:51 +02:00
Mantas Masalskis
2731289bf3 Fixes #6396 - Reply actions throw "Cannot read properties of null (reading 'rangeCount')" before the first mouse click.
Approved-by: Florian Liebe <fl@zammad.com>

Co-authored-by: Mantas <mantas@idev.lt>
2026-10-05 13:25:44 +03:00
Benjamin Scharf
579146276f Maintenance: Desktop view - Compact header ignores clicks on detail views too short to scroll the full header away
Approved-by: Marcel Bialas <mb@zammad.com>
2026-10-05 11:11:43 +02:00
Dominik Klein
e4cebad6ca Fixes #6404 - Postmaster filter list in admin UI silently shows only the first 500 filters.
Approved-by: Florian Liebe <fl@zammad.com>
2026-10-05 10:46:19 +02:00
Silke Jaenichen
cec59d3b6b Fixes #6416 - Customer chat "Waiting Customers" and "Chatting Customers" popovers do not show the time.
Approved-by: Marcel Bialas <mb@zammad.com>
2026-10-05 10:33:22 +02:00