v3.2.0 ~ La Clé Des Champs (pro)

Release date: May 31st, 2021.

The team is pleased to announce that the much awaited “Internationalisation” feature is available to Passbolt Pro, Passbolt Cloud (in progress) as well as Passbolt CE subscribers as part of this release. It is the beginning of continuous effort to provide passbolt in the favorite language of our users. This release ships with the French translation, but other languages such as German and Spanish are in the works.

fig. Translations status

More languages will come as we go and we are of course counting on the community contributions to keep proposing new ones and make Passbolt available to everyone. If you’d like to contribute and understand how you can translate passbolt in your favorite language, check out the documentation. We have tried our best to make the translation process fairly easy and accessible to everyone.

This release also introduces a new subscription key management feature available directly from the application’s main administration panel. This feature will help administrators manage their subscriptions more efficiently.

fig. Subscription management

Another aspect of this release is the upgrade of the passbolt API code base to CakePHP v4. This upgrade was necessary and sets the foundations of the new avatars management system, where the users’ avatars are now stored primarily in the database rather than in the file system. This long planned improvement has several benefits among which is a simpler backup workflow as well as the ability to deploy passbolt in high availability.

Finally, the team is proud to share with the community the results of the annual security audit part II performed by Cure53 with a focus on the webextensions. The positive results validate the continuous efforts of the team.

“The Passbolt extension stands strong and the audit and pentest did not manage to unveil any serious severity bugs, whereas the overall number of problems is also limited to just two minor flaws.”

To know more about this audit, checkout the blog article.

A big thank you to Crowdin for providing us with their amazing translation platform for free. Huge thanks also to the people who have reported and documented bugs on github and the community forum including: @noinlj, @flifloo, @svenseeberg, @Kassouma and many more.

API

[3.2.2] - 2021-06-16

Fixed

• PB-5910 Fix ldap admin screen should load only default admin users who are active and not deleted

[3.2.1] - 2021-06-04

Fixed

• GITHUB-402 Fix API v3 regression, login must accept JSON data

[3.2.0] - 2021-05-31

Added

• PB-5054 French internationalisation

• PB-5171 As logged-in user, I can paginate the result of the users and resources index controllers

• PB-5526 As admin I can save the subscription key as an organisation setting

• PB-5854 As logged-in user I can save the locale of a user as an account setting

• PB-5854 As admin I can save the locale the organisation as organisation setting

• PB-5985 As a system administrator I should be able to import a subscription key from the command line

Fixed

• PB-5523 Fix as system administrator I should see the healthcheck errors colored in red

• PB-5860 Fix password max length should be set to 4096 in resource type definitions

• PB-6007 Fix all group managers should receive an email when a new user is added to a group after a Ldap synchronization

• PB-6031 Fix as LU I shouldn’t get a fatal error when using a scalar instead of an array for some filters values
• PB-6131 Fix healthcheck error messages display

Improved

• PB-5975 Test code with PHPStan - level 4
• PB-7576 Avatar table should use created and modified for timestamp and not created_at and modified_at
• PB-5527 Move avatar in database

Maintenance

• PB-5527 Migration to CakePHP4

Security

• Remove X-XSS-Protection as per Cure53 audit result and recommendations

Browser Extension

[3.2.3] - 2021-06-07

Fixed

• PB-7561 Fix as LU I should import CSV containing non latin1 characters
• PB-7563 Update passbolt styleguide dependencies

[3.2.2] - 2021-05-31

Fixed

• PB-7569 As AN with an unconfigured extension on chrome I should not get an error clicking on the toolbar passbolt icon

[3.2.1] - 2021-05-26

Added

• PB-5054 French internationalisation
• PB-5526 As AD I can manage the subscription key from the administration panel

Fixed

• PB-5366 Fix share autocomplete search results can be invalid
• PB-5498 Fix image version displayed after avatar upload
• PB-5861 Fix serializePlaintextDto should validate secret maxlength if resourceTypeId is set to legacy type, or not set
• PB-5909 Fix as logged-in user aborting a preview operation I should not see an empty preview
• PB-5983 Fix as logged-in user I can import passwords with non latin characters
• PB-6008 Fix as logged-in user I should get a feedback in the quickaccess when I try to autofill credentials on a page, but an error occurred
• PB-6080 Fix add favorites fetch payload error

Improvement

• PB-5443 As logged-in user I should get a visual feedback when the maximum length of the secret fields is reached so that I do not lose data
• PB-5455 As logged-in user selecting a description order to copy it should not enter the description edit mode
• PB-5496 As logged-in user updating my avatar I should see the error message if an error occurred
• PB-5857 As logged-in user I should be able to change the user role in the create/edit user dialog by clicking on the checkbox label

Security

• PB-6012 Fix the quickaccess suggestion component should not suggest TLD entries (PB-01-002)

Maintenance

• PB-5069 Migrate moment to Luxon
• PB-5884 Move quickaccess front end code to the styleguide repository
• PB-5887 Fix semantic gap in naming conventions in styleguide
• PB-5959 Bump webpack to v5