What's Changed

• Bump yiisoft/yii2 from 2.0.54 to 2.0.55 in /application by @dependabot[bot] in #363

Full Changelog: 9.2.3...9.2.4

This release fixes a bug that caused the password reset email to be sent to the user's supervisor instead of their own password recovery email address.

What's Changed

• Release 9.2.3 - fix reset to not email supervisor unless necessary by @briskt in #362

Full Changelog: 9.2.2...9.2.3

What's Changed

• Bump phpseclib/phpseclib from 3.0.51 to 3.0.52 in /application by @dependabot[bot] in #361
• update broker variables in docker compose configuration by @briskt in #358
• Test cleanup by @briskt in #359
• Release 10.0.0-pre.0 - remove the "Do not disclose" feature by @briskt in #360

Full Changelog: 9.2.0...10.0.0-pre.0

Full Changelog: 9.2.1...9.2.2

What's Changed

• Bump phpseclib/phpseclib from 3.0.51 to 3.0.52 in /application by @dependabot[bot] in #361
• update broker variables in docker compose configuration by @briskt in #358
• Test cleanup by @briskt in #359

Full Changelog: 9.2.0...9.2.1

What's Changed

• Bump phpseclib/phpseclib from 3.0.49 to 3.0.51 in /application by @dependabot[bot] in #351
• Bump robrichards/xmlseclibs from 3.1.4 to 3.1.5 in /application by @dependabot[bot] in #347
• update dependencies.json by @briskt in #355
• new PSR2/PSR12 fixes by @briskt in #356
• Release 9.2.0 - send reset email to supervisor by @briskt in #357

Full Changelog: 9.1.0...9.2.0

What's Changed

• Change reset create to not disclose user existence by @briskt in #354

Full Changelog: 9.0.3...9.1.0

What's Changed

• replace database event log with logger events by @briskt in #353

Full Changelog: 9.0.2...9.0.3

What's Changed

• upgrade GitHub actions by @briskt in #349
• use curl instead of netcat for broker healthcheck by @briskt in #350
• fix broken link on develop branch by @briskt in #352

Full Changelog: 9.0.1...9.0.2

What's Changed

• IDP-1791: Update xmlseclibs to 3.1.4 to fix CVE-2025-66578 canonicalization bypass by @samuel-sowpati-sil in #342
• Remove DockerHub push by @devon-sil in #344
• Bump phpunit/phpunit from 9.6.23 to 9.6.33 in /application by @dependabot[bot] in #343
• Bump psy/psysh from 0.12.8 to 0.12.19 in /application by @dependabot[bot] in #345
• Update dependencies by @forevermatt in #346

New Contributors

• @samuel-sowpati-sil made their first contribution in #342
• @dependabot[bot] made their first contribution in #343

Full Changelog: 9.0.0...9.0.1