From 5169af8095dc1a46dedc920653c765f4e9ebd602 Mon Sep 17 00:00:00 2001 From: Nicolas Maillat Date: Thu, 5 Sep 2024 23:03:43 +0200 Subject: [PATCH 1/5] Update CHANGELOG.md --- CHANGELOG.md | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index acd2ae9f2e..af7baacc15 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,32 @@ # CHANGELOG +## 4.1.10 + +### Update instructions + +- Migration patch: + - Migration script for configuration file + + `bin/setup system:upgrade`, ran by setup container with Docker if env `PHRASEANET_UPGRADE=1 ` + +### Version summary + - Bump rabbitMQ version + - fixing translations + + +### Stack (docker compose and helm) + + - Bump RabbitMQ version + + +## What's Changed +* PHRAS-3416 : fix string in admin create subdef by @aynsix in https://github.com/alchemy-fr/Phraseanet/pull/4534 +* PHRAS-3416 create subdefinition localisation by @nmaillat in https://github.com/alchemy-fr/Phraseanet/pull/4537 +* PHRAS-4094 Bump rabbitMQ version to 3.8.34 by @gjacobjn in https://github.com/alchemy-fr/Phraseanet/pull/4546 + + +**Full Changelog**: https://github.com/alchemy-fr/Phraseanet/compare/4.1.9...4.1.10 + ## 4.1.9 ### Update instructions From 47434c01e533d533952955408036d0627f2068c7 Mon Sep 17 00:00:00 2001 From: Nicolas Maillat Date: Thu, 5 Sep 2024 23:05:59 +0200 Subject: [PATCH 2/5] Update .env --- .env | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.env b/.env index 04b50a5b90..d3f2fbf4a4 100644 --- a/.env +++ b/.env @@ -143,7 +143,7 @@ PHRASEANET_DOCKER_REGISTRY=local # Docker images tag. # @run -PHRASEANET_DOCKER_TAG=4.1.9 +PHRASEANET_DOCKER_TAG=4.1.10 # Stack Name # An optionnal Name for the stack From d9965ca2f1f525fabbcca028d63cc7a08dd5a0de Mon Sep 17 00:00:00 2001 From: Nicolas Maillat Date: Thu, 5 Sep 2024 23:08:56 +0200 Subject: [PATCH 3/5] Update Version.php --- lib/Alchemy/Phrasea/Core/Version.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/Alchemy/Phrasea/Core/Version.php b/lib/Alchemy/Phrasea/Core/Version.php index ad0a782b48..840762685a 100644 --- a/lib/Alchemy/Phrasea/Core/Version.php +++ b/lib/Alchemy/Phrasea/Core/Version.php @@ -17,7 +17,7 @@ class Version * @var string */ - private $number = '4.1.9'; + private $number = '4.1.10'; /** * @var string From 1c23357fa463aea592a3704038f54d3f9ab5428a Mon Sep 17 00:00:00 2001 From: Nicolas Maillat Date: Fri, 6 Sep 2024 09:44:46 +0200 Subject: [PATCH 4/5] Update CHANGELOG.md --- CHANGELOG.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index af7baacc15..1b03bf6ecc 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -18,15 +18,18 @@ - Bump RabbitMQ version - ## What's Changed + * PHRAS-3416 : fix string in admin create subdef by @aynsix in https://github.com/alchemy-fr/Phraseanet/pull/4534 * PHRAS-3416 create subdefinition localisation by @nmaillat in https://github.com/alchemy-fr/Phraseanet/pull/4537 * PHRAS-4094 Bump rabbitMQ version to 3.8.34 by @gjacobjn in https://github.com/alchemy-fr/Phraseanet/pull/4546 +* PHRAS-4090:Prod - expose-cli - publication - publication description is Nok by @aynsix in https://github.com/alchemy-fr/Phraseanet/pull/4536 +* Fix for phraseanet-saml-sp image build in Dockerfile by @gjacobjn in https://github.com/alchemy-fr/Phraseanet/pull/4543 **Full Changelog**: https://github.com/alchemy-fr/Phraseanet/compare/4.1.9...4.1.10 +___ ## 4.1.9 ### Update instructions From 1b823bf3dfb112bfa7a7a5916c2f0371ccd1a2e8 Mon Sep 17 00:00:00 2001 From: Nicolas Maillat Date: Thu, 24 Oct 2024 18:53:11 +0200 Subject: [PATCH 5/5] Update CHANGELOG.md --- CHANGELOG.md | 56 ++++++++++++++++++++++++++++++++++++++++------------ 1 file changed, 43 insertions(+), 13 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1b03bf6ecc..e8e4a46d93 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,30 +2,60 @@ ## 4.1.10 -### Update instructions +### Update Instructions -- Migration patch: - - Migration script for configuration file - - `bin/setup system:upgrade`, ran by setup container with Docker if env `PHRASEANET_UPGRADE=1 ` +- **Migration Patch**: + - A migration script for the configuration file is available. Run the following command in the setup container with Docker if the environment variable `PHRASEANET_UPGRADE=1` is set: + ``` + bin/setup system:upgrade + ``` -### Version summary - - Bump rabbitMQ version - - fixing translations +### Version Summary - -### Stack (docker compose and helm) +- **Bump Phraseanet Base Image to 1.1.0**: + - OS version updated. + - Bumped `Popeler` dependency . + - Added missing `ufraw` dependency . - - Bump RabbitMQ version +- **Updated Components**: + - **RabbitMQ**: Upgraded to version 3.8.34. + - **Nginx**: Updated to the latest stable release, 1.27.2. -## What's Changed +- **Security Fixes**: + - Fixed CSRF vulnerability in the userProfile endpoint. + - Addressed XSS injection vulnerability in the user profile. + - Corrected HTML injection in notification emails. + +- **Other Updates**: + - Updated translations. + +### Stack (Docker Compose and Helm) +- **Phraseanet Base Image**: Version bumped. +- **RabbitMQ**: Version bumped. +- **Nginx**: Version bumped. +- **Helm Updates**: + - Added `nodeSelector` property to all charts except for the DB pod. + - `imagePullPolicy` can now be set from `values.yaml`. + - Release details: [Helm chart release 0.47.0](https://github.com/alchemy-fr/alchemy-helm-charts-repo/releases/tag/phraseanet-0.47.0) + +## What's Changed * PHRAS-3416 : fix string in admin create subdef by @aynsix in https://github.com/alchemy-fr/Phraseanet/pull/4534 * PHRAS-3416 create subdefinition localisation by @nmaillat in https://github.com/alchemy-fr/Phraseanet/pull/4537 * PHRAS-4094 Bump rabbitMQ version to 3.8.34 by @gjacobjn in https://github.com/alchemy-fr/Phraseanet/pull/4546 * PHRAS-4090:Prod - expose-cli - publication - publication description is Nok by @aynsix in https://github.com/alchemy-fr/Phraseanet/pull/4536 * Fix for phraseanet-saml-sp image build in Dockerfile by @gjacobjn in https://github.com/alchemy-fr/Phraseanet/pull/4543 - +* PHRAS-4100 Php upload tmp directory by @nmaillat in https://github.com/alchemy-fr/Phraseanet/pull/4553 +* PHRAS-4079 Bump base image 1.1.0 by @moctardiouf in https://github.com/alchemy-fr/Phraseanet/pull/4554 +* PHRAS-3857 : Check CSRF token on account by @aynsix in https://github.com/alchemy-fr/Phraseanet/pull/4556 +* PHRAS-4103 Prod xss check by @aynsix in https://github.com/alchemy-fr/Phraseanet/pull/4555 +* PHRAS-4088: improving Job ack in workerRunningJob by @aynsix in https://github.com/alchemy-fr/Phraseanet/pull/4535 +* fix typo by @tacman in https://github.com/alchemy-fr/Phraseanet/pull/4552 +* PHRAS-4104 Nginx bump 1.27.2 by @nmaillat in https://github.com/alchemy-fr/Phraseanet/pull/4557 +* PHRAS-4101: Update Range for Subdefinition Image Sizes by @nmaillat in https://github.com/alchemy-fr/Phraseanet/pull/4558 + +## New Contributors +* @tacman made their first contribution in https://github.com/alchemy-fr/Phraseanet/pull/4552 **Full Changelog**: https://github.com/alchemy-fr/Phraseanet/compare/4.1.9...4.1.10