Phproject 1.8.3 includes important security fixes for users on SQLite databases.

• GHSA-mhhg-qx37-g369 reported by @NaklehZeidan21 (Stored and reflected XSS on specific issue fields)

Fixes an issue with authorization on PHP 8.4

• Adds support for SQLite databases
• Adds support for PHP 8.4
• Updated translations, including machine translations of all previously-untranslated strings

Breaking changes:

PHP < 8.1 is no longer supported — Phproject aims to support any active PHP release as well as any PHP version actively supported by an Ubuntu LTS release (Currently PHP 8.1, 8.2, 8.3, and 8.4)

This release adds several improvements and fixes, notably:

• Full support for PHP 8.1 and 8.2 (#406, #410)
• Updated translations
• Improvements to restricted access mode, allowing issue authors to access their created issues (#413)
• All third-party libraries are updated to their latest compatible release (both JS and PHP)

Breaking changes:

• PHP < 7.4 is no longer supported — Phproject aims to support any active PHP release as well as any PHP version actively supported by an Ubuntu LTS release (Currently PHP 7.4, 8.0, 8.1, and 8.2)

Phproject 1.7.13 includes several security fixes, most notably for XSS and file access control. Improvements for PHP 8 are also included in the release.

Phproject 1.7.12 fixes bugs and security issues. Updating is recommended where possible.

Full Changelog: v1.7.11...v1.7.12

Phproject 1.7.11 fixes an issue creating sprints that was introduced in 1.7.10.

Phproject 1.7.10 introduced major security fixes, so you should definitely upgrade when possible!

Phproject v1.7.10 includes fixes for critical security issues. It is strongly recommended to install it immediately.

This release should be compatible with typical use cases but it does introduce a breaking change to all core POST routes, so any users modifying any controller behavior should verify compatibility before upgrading.

For details on the security updates included in Phproject 1.7.10, see the related security advisory.

This release fixes an upgrade issue introduced in v1.7.8, and improves PHP 7.4 compatibility.

Thanks to @charisma2 for reporting the compatibility issue!