07:30 Vanilla I. Shu (vanilla) 

www/kanboard: update to 1.2.35.

    5d25d66

18:19 Fernando Apesteguía (fernape) 

www/kanboard: update to 1.2.34

ChangeLog: https://github.com/kanboard/kanboard/releases/tag/v1.2.34

 * Upgrade Docker image to Alpine 3.19 and PHP 8.3
 * API: Avoid PHP notice when searching for a project name that does not exist
 * Update Bulgarian translation
 * Bump symfony/console from 5.4.28 to 5.4.32
 * Bump phpunit/phpunit from 9.6.13 to 9.6.15

Reported by:	portscout

    ec3d49a

07:44 Fernando Apesteguía (fernape) 

www/kanboard: update to 1.2.33

ChangeLog: https://github.com/kanboard/kanboard/releases/tag/v1.2.33

 * Do not close modals when clicking on the background
 * Add Bulgarian translation
 * Update Ukrainian and Russian translations
 * Show the two factor form in the middle of the screen like the login form does
 * Do not override the creator_id with the current logged user if the task is
   imported
 * Add basic Dev Container configs
 * Add adaptive SVG favicon and more SVG variants:
 * See https://web.dev/building-an-adaptive-favicon/
 * Added more variant of the original Inkscape icon:
     * Text SVG
     * Vectorized text path SVG
     * Optimized SVG icon
 * Remove project_id from task links (A few were missed in #4892)
 * Remove unused and invalid method in ProjectModel
 * Update phpunit/phpunit and symfony/* dependencies
 * Update vendor folder

Reported by:	portscout

    21fff66

02:03 Vanilla I. Shu (vanilla) 

www/kanboard: update to 1.2.32.

    aeb1414

11:15 Fernando Apesteguía (fernape) 

www/kanboard: update to 1.2.31

ChangeLog: https://github.com/kanboard/kanboard/releases/tag/v1.2.31

Security Fixes:

 * CVE-2023-36813: Avoid potential SQL injections without breaking compatibility
   with plugins

Other fixes and updates:

 * Run tests with PHP 8 on GitHub Actions
 * Bump Symfony dependencies
 * Update Composer dependencies to be able to run tests with PHP 8.2
 * Add /usr/bin/php symlink in the Docker image
 * Replace usage of at() matcher with alternatives in unit tests
 * Adjust plugin directory test case to work on released versions
 * Fix incorrect background dynamic property in captcha library
 * Update translations

Reported by:	portscout
MFH:		2023Q3 (security fix)
Security:	CVE-2023-36813

    a4f1bfb

12:02 Fernando Apesteguía (fernape) 

www/kanboard: update to 1.2.30

ChangeLog: https://github.com/kanboard/kanboard/releases/tag/v1.2.30

 * CVE-2023-33956: Parameter based Indirect Object Referencing leading to
private
   file exposure
 * CVE-2023-33968: Missing access control allows user to move and duplicate
tasks
   to any project in the software
 * CVE-2023-33969: Stored XSS in the Task External Link Functionality
 * CVE-2023-33970: Missing access control in internal task links feature

 * Avoid PHP warning caused by session_regenerate_id()
 * Avoid CSS issue when upgrading to v1.2.29 without flushing user sessions

Reported by:	portscout
MFH:		2023Q2 (security release)
Security:	CVE-2023-33956 CVE-2023-33968 CVE-2023-33969 CVE-2023-33970

    ad5f302

06:34 Fernando Apesteguía (fernape)  Author: Linus Sundqvist

www/kanboard: Update to 1.2.29

ChangeLog: https://github.com/kanboard/kanboard/releases/tag/v1.2.29

 * Avoid potential clipboard based cross-site scripting (CVE-2023-32685)
 * Upgrade Docker image to PHP 8.2 and Alpine 3.18
 * Add themes support: dark, light and automatic mode
 * Fix broken "Hide this Column" feature
 * Do not close modals when clicking on the background if the form has changed
 * Fix incorrect route for "My Activity Stream"
 * Fix incorrect parameter encoding when using URLs rewriting
 * Add support for task links in Markdown headings
 * Handle 413 responses from Nginx when uploading files too large
 * Restore all previously loaded translations when sending user notifications
 * Regenerate session ID after successful authentication
 * Use SESSION_DURATION option to define the session lifetime stored in the
   database
        The option SESSION_DURATION is used to define the cookie lifetime.
	With this change, Kanboard will try to use first SESSION_DURATION
        instead of the default session.gc_maxlifetime value.
 * Bump phpunit/phpunit from 9.6.6 to 9.6.8

PR:		271702
Reported by:	linus.sundqvist@loopia.se
MFH:		2023Q2 (security fix)
Security:	CVE-2023-32685

    3234f61

10:39 Fernando Apesteguía (fernape) 

www/kanboard: Update to 1.2.28

PR:		270976
Reported by:	linus.sundqvist@loopia.se

    f15980d

20:35 Neel Chauhan (nc)  Author: Gunnar Frenzel

www/kanboard: Fix file size mismatch

PR:		261840
Approved by:	maintainer

    2be9b19

21:45 Neel Chauhan (nc)  Author: Daniel Tihanyi

www/kanboard: update to 1.2.21

Changes: https://github.com/kanboard/kanboard/releases/tag/v1.2.21

PR:	260513

    2cdaec9c

16:44 Rainer Hurling (rhurlin) 

www/kanboard: Update to 1.2.19

Changelog: https://github.com/kanboard/kanboard/releases

PR:		255504
Submitted by:	Daniel Tihanyi <daniel.tihanyi@tetragir.com> (maintainer)

    8c3813aa

01:11 lwhsu 

www/kanboard: Update to 1.2.16

Pass the maintainership to the submitter

PR:		246268
Submitted by:	Volodymyr Kostyrko <arcade@b1t.name> (older version),
		Daniel Tihanyi <daniel.tihanyi@tetragir.com>
Approved by:	maintainer timeout

 

17:16 swills 

www/kanboard: update to 1.2.11

PR:		241005
Submitted by:	Vikash Badal <vikashb@where-ever.za.net>
Approved by:	Bart Wrobel <bsd@if0.eu> (maintainer)

 

16:07 kai 

www/kanboard: Update to 1.2.8

While I'm here:

* Convert PORTVERSION to DISTVERSION
* Move related variables to USES block
* Update requirements for the MYSQL option since PHP 5.x has gone from the
  ports tree
* Add MYSQL_USES as USE_MYSQL is deprecated

Changelog:

Breaking Changes:

* Authorize only API tokens when 2FA is enabled (no user password)
* Disable by default plugin installer for security reasons:
    - There is no code review or any approval process to submit a plugin.
    - This is up to the Kanboard instance owner to validate if a plugin
      is legit.

Fixes and Improvements:

* Limit avatar image size
* Avoid CSRF in users CSV import
* Avoid XSS in pagination sorting
* Do not show projects dropdown when prompting the 2FA code
* Always returns a 404 instead of 403 to avoid people discovering users
* Check if user role has changed while the session is open
* Add missing CSRF check in TwoFactorController::deactivate()
* Hide edit button when user cannot edit task
* Fix permission check before "Assign to me"
* Fix permission check before showing project options
* Fix assignable users on a group with a custom role
* Fix import of automatic actions when parameters are "unassigned"
  or "no category"
* Update license year
* Update Docker image to Alpine 3.9
* Update translations
* Fix PHP error in task views (tag colors)
* Limit assignee drop-down selector scope

PR:		235712
Submitted by:	Alexander <sa.inbox@gmail.com>
Approved by:	tcberner (mentor), maintainer timeout
Differential Revision:	https://reviews.freebsd.org/D19217

 

23:19 swills 

www/kanboard: update to 1.2.7

PR:		234991
Submitted by:	Alexander <sa.inbox@gmail.com>
Approved by:	maintainer timeout (bsd@if0.eu, >2 weeks)

 

18:41 joneum 

Update to 1.2.6

Changelog:
 - Escape table name 'groups' because groups is a reserved word as of MySql
8.0.2
 - Reduce number of SQL queries when doing groups sync
 - Make swimlane filter compatible with numeric title
 - Duplicate reference fields when duplicating a task
 - Do not try to redirect to login page when offline
 - Define fixed width for auto-complete dropdown
 - Fix task drag and drop slowdown when a column is hidden
 -  Make PLUGINS_DIR absolute in config.default.php
 - Add custom roles project duplication
 - Allow 'No assignee' for external task on single user public boards
 - Add tag and category colors
 - Exclude task links and user mentions from nesting (Markdown parser)
 - When forcing HTTPS, handle subfolder URLs properly
 - Add search within a range of dates for completion, modification, creation,
and moved fields
 - Update Docker image to Alpine Linux 3.8
 - Make sure the presense of mod_env is checked in .htaccess
 - Make HTTP client timeout configurable
 - Use SET NAMES instead of charset for MySQL connection
 - Vendoring deprecated Composer libs
 - Update translations and fix typos

PR:		232349
Reported by:	Alexander (inbox@gmail.com)
Approved by:	bsd@if0.eu (maintainer timeout)
Sponsored by:	Netzkommune GmbH

 

13:03 miwi 

- Update to 1.2.5

PR:		230481
Submitted by:	sa.inbox@gmail.com
Approved by:	maintainer
Sponsored by:	iXsystems Inc.

 

18:26 miwi 

- Update 1.2.3

PR:		227611
Sponsored by:	iXsystems Inc.

 

12:56 vanilla 

Update to 1.0.48.

PR:		223306
Submitted by:	maintainer

 

13:46 vanilla 

Update to 1.0.47.

PR:		222862
Submitted by:	maintainer

 

13:03 tobik 

www/kanboard: Update to 1.0.46

Changes:	https://github.com/kanboard/kanboard/blob/master/ChangeLog
PR:		221826
Submitted by:	Bart Wrobel <bsd@if0.eu> (maintainer)
MFH:		2017Q3
Security:	CVE-2017-12850
Security:	CVE-2017-12851

 

17:57 joneum 

- www/kanboard: Update from 1.0.41 to 1.0.44
- Changelog: https://github.com/kanboard/kanboard/blob/master/ChangeLog

PR:				219663
Submitted by:	Bart Wrobel (maintainer)
Approved by:	miwi (mentor)
Differential Revision:	https://reviews.freebsd.org/D11004

 

07:37 vanilla 

Update to 1.0.41.

PR:		218172
Submitted by:	maintainer

 

06:22 tobik 

Update to 1.0.40

Changes:	https://raw.githubusercontent.com/kanboard/kanboard/v1.0.40/ChangeLog
PR:		217504
Submitted by:	Bart Wrobel <bsd@if0.eu> (maintainer)
Approved by:	lme (mentor)
Differential Revision:	https://reviews.freebsd.org/D9874

 

15:33 amdmi3 

- Update to 1.0.34
- While here, minor cosmetic fix and add NO_ARCH

New features:

* Custom project roles with configurable restrictions
* Duplicate a task to multiple projects during creation
* New automatic action:
    - Close a task in a specific column when not moved during a given period

Improvements:

* Do not close the popover when clicking on the background
* Add visual icon to show a dropdown action on task
* Avoid 'blur' effect on popover
* Accept more file types for external links
* Restrict search to active projects
* Improve task status filter
* Add filter tag:none
* Always apply merge hooks in task creation controller
* Update task moved date only when the column or swimlane is changed
* Add new subtask hooks
* Add the actual use of TaskStartDateFilter
* Update translations and documentation

Bug fixes:

* Send absolute links in email notifications
* Restrict task complexity to a specific range to avoid integer overflow
* Do not show closed tasks in task move position form

PR:		213891
Submitted by:	bsd@if0.eu (maintainer)

 

18:26 amdmi3 

- Update to 1.0.33
- While here, add USES=php

PR:		212497
Submitted by:	bsd@if0.eu (maintainer)

 

22:21 pawel 

Update to version 1.0.32

PR:		211586
Submitted by:	Bart Wrobel (maintainer)

 

23:20 junovitch 

www/kanboard: update 1.0.29 -> 1.0.31

Changes:	https://kanboard.net/news/version-1.0.30
		https://kanboard.net/news/version-1.0.31

PR:		210818
Submitted by:	Bart Wrobel <bsd@if0.eu> (maintainer)

 

20:54 rm 

www/kanboard: update to 1.0.29

PR:		210285
Submitted by:	Bart Wrobel <bsd@if0.eu> (maintainer)

 

12:27 pawel 

- Update to version 1.0.28 [1]
- Fix recursive COMMENT

## New features:

* Added automated action to change task color based on the priority
* Added support for LDAP Posix Groups (OpenLDAP with memberUid or groupOfNames)
* Added support for LDAP user photo attribute (Avatar image)
* Added support for language LDAP attribute
* Added support for Mysql SSL connection
* Search in activity stream
* Search in comments
* Search by task creator
* Added command line utility to reset user password and to disable 2FA

## Improvements:

* Improve Avatar upload form
* User roles are now synced with LDAP at each login
* Improve web page title on the task view
* Unify task drop-down menu between different views
* Improve LDAP user group membership synchronization
* Category and user filters do not append anymore in search field
* Added more template hooks
* Added tasks search with the API
* Added priority field to API procedures
* Added API procedure "getMemberGroups"
* Added parameters for overdue tasks notifications: group by projects and
  send only to managers
* Allow people to install Kanboard outside of the DocumentRoot
* Allow plugins to be loaded from another folder
* Filter/Lexer/QueryBuilder refactoring

## Bug fixes:

* Allow a project owner to manage his own public project
* Fixed PHP warning when removing a user with no Avatar image
* Fixed improper Markdown escaping for some tooltips
* Closing all tasks by column, also update closed tasks
* Fixed wrong task link generation within Markdown text
* Fixed wrong URL on comment toggle link for sorting
* Fixed form submission with Meta+Enter keyboard shortcut
* Removed PHP notices in comment suppression view

PR:		209633 [1]
Submitted by:	ronald.valente@gmail.com
Approved by:	maintainer

 

01:00 junovitch 

www/kanboard: update 1.0.26 -> 1.0.27

Changes:	http://kanboard.net/news

PR:		208364
Reported by:	Ron <ronald.valente@gmail.com>
Submitted by:	Bart Wrobel <bsd@if0.eu> (maintainer)

 

19:44 pi 

www/kanboard: 1.0.24 -> 1.0.26

Changes:
  http://kanboard.net/news

PR:		207584, 207586
Submitted by:	Bart Wrobel <bsd@if0.eu> (maintainer)

 

21:31 rakuco 

Update to 1.0.24.

PR:		206748
Submitted by:	Bart Wrobel <bsd@if0.eu> (maintainer)

 

06:33 miwi 

- Update to 1.0.23

PR:		206276
Submitted by:	maintainer

 

07:35 miwi 

- Update to 1.0.22

PR:		206167
Submitted by:	maintainer

 

00:47 junovitch 

www/kanboard: update 1.0.20 -> 1.0.21

- While here, add terminating @owner/@group to pkg-plist (portlint)

PR:             204856
Submitted by:   Bart Wrobel <bsd@if0.eu> (maintainer)

 

23:26 pawel 

Update to version 1.0.20

PR:		204736
Submitted by:	Bart Wrobel (maintainer)

 

03:16 junovitch 

www/kanboard: update 1.0.18 -> 1.0.19

PR:		203859
Submitted by:   Bart Wrobel <bsd@if0.eu> (maintainer)

 

22:45 junovitch 

www/kanboard: update 1.0.17 -> 1.0.18

PR:		202904
Submitted by:	Bart Wrobel <bsd@if0.eu> (maintainer)

 

14:18 pawel 

- Update to version 1.0.17, upstream changed LICENSE to MIT [1]
- Unmute install command
- Cleanup pkg-plist

PR:		202032 [1]
Submitted by:	Bart Wrobel (maintainer) [1]

 

18:11 riggs 

New port: www/kanboard, a simple visual task board software

PR:		196810
Submitted by:	bsd@if0.eu (maintainer)