2.56.0-ls177

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.56.0-ls176...2.56.0-ls177

Remote Changes:

Compatible with PHP 8.2 to 8.5

‼️ The required minimum PHP version is now 8.2 (see below) ‼️

• Added Catalan translation (#5921)
• New API endpoint to download invoices (#5926)
• New API endpoint to save invoice meta-fields (#5916)
• Re-usable ACL checks on teams, xxx_other_timesheet permissions respect teams (#5925)
• Whitelist PDF context options (#5924)
• Twig config improvements (#5923)
• Improved management script ./kimai.sh - please test and leave your feedback (#5909)
• Translations update from Hosted Weblate (#5911)

---

⚠️⚠️⚠️ The required minimum PHP version is now 8.2 ⚠️⚠️⚠️

If you are still using PHP 8.1, please be aware it is EOL and does not receive security updates any longer. Many libraries added 8.2 as minimum requirements, so Kimai has to follow to receive updates.

If you have to upgrade to a newer version, do yourself the favor and upgrade directly to PHP 8.5.
The requirement for 8.2 is an intermediate solution for the near future, and the requirement will be raised to 8.5 rather sooner than later.

Involved in this release: @kevinpapst, @ntrpc-tech, @nullvector1, @melnicek, @fg0x0

2.56.0-ls176

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.56.0-ls175...2.56.0-ls176

Remote Changes:

Compatible with PHP 8.2 to 8.5

‼️ The required minimum PHP version is now 8.2 (see below) ‼️

• Added Catalan translation (#5921)
• New API endpoint to download invoices (#5926)
• New API endpoint to save invoice meta-fields (#5916)
• Re-usable ACL checks on teams, xxx_other_timesheet permissions respect teams (#5925)
• Whitelist PDF context options (#5924)
• Twig config improvements (#5923)
• Improved management script ./kimai.sh - please test and leave your feedback (#5909)
• Translations update from Hosted Weblate (#5911)

---

⚠️⚠️⚠️ The required minimum PHP version is now 8.2 ⚠️⚠️⚠️

If you are still using PHP 8.1, please be aware it is EOL and does not receive security updates any longer. Many libraries added 8.2 as minimum requirements, so Kimai has to follow to receive updates.

If you have to upgrade to a newer version, do yourself the favor and upgrade directly to PHP 8.5.
The requirement for 8.2 is an intermediate solution for the near future, and the requirement will be raised to 8.5 rather sooner than later.

Involved in this release: @kevinpapst, @ntrpc-tech, @nullvector1, @melnicek, @fg0x0

2.56.0-ls175

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.56.0-ls174...2.56.0-ls175

Remote Changes:

Compatible with PHP 8.2 to 8.5

‼️ The required minimum PHP version is now 8.2 (see below) ‼️

• Added Catalan translation (#5921)
• New API endpoint to download invoices (#5926)
• New API endpoint to save invoice meta-fields (#5916)
• Re-usable ACL checks on teams, xxx_other_timesheet permissions respect teams (#5925)
• Whitelist PDF context options (#5924)
• Twig config improvements (#5923)
• Improved management script ./kimai.sh - please test and leave your feedback (#5909)
• Translations update from Hosted Weblate (#5911)

---

⚠️⚠️⚠️ The required minimum PHP version is now 8.2 ⚠️⚠️⚠️

If you are still using PHP 8.1, please be aware it is EOL and does not receive security updates any longer. Many libraries added 8.2 as minimum requirements, so Kimai has to follow to receive updates.

If you have to upgrade to a newer version, do yourself the favor and upgrade directly to PHP 8.5.
The requirement for 8.2 is an intermediate solution for the near future, and the requirement will be raised to 8.5 rather sooner than later.

Involved in this release: @kevinpapst, @ntrpc-tech, @nullvector1, @melnicek, @fg0x0

2.56.0-ls174

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.55.0-ls173...2.56.0-ls174

Remote Changes:

Compatible with PHP 8.2 to 8.5

‼️ The required minimum PHP version is now 8.2 (see below) ‼️

• Added Catalan translation (#5921)
• New API endpoint to download invoices (#5926)
• New API endpoint to save invoice meta-fields (#5916)
• Re-usable ACL checks on teams, xxx_other_timesheet permissions respect teams (#5925)
• Whitelist PDF context options (#5924)
• Twig config improvements (#5923)
• Improved management script ./kimai.sh - please test and leave your feedback (#5909)
• Translations update from Hosted Weblate (#5911)

---

⚠️⚠️⚠️ The required minimum PHP version is now 8.2 ⚠️⚠️⚠️

If you are still using PHP 8.1, please be aware it is EOL and does not receive security updates any longer. Many libraries added 8.2 as minimum requirements, so Kimai has to follow to receive updates.

If you have to upgrade to a newer version, do yourself the favor and upgrade directly to PHP 8.5.
The requirement for 8.2 is an intermediate solution for the near future, and the requirement will be raised to 8.5 rather sooner than later.

Involved in this release: @kevinpapst, @ntrpc-tech, @nullvector1, @melnicek, @fg0x0

2.55.0-ls173

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.55.0-ls172...2.55.0-ls173

Remote Changes:

Compatible with PHP 8.1 to 8.5

• System-Account flag should always be editable (#5907)
• Use absolute avatar URLs in Fixtures (#5907)
• Explain importance of TRUSTED_HOSTS in .env (#5907)
• Fix exporter column styles (duration, internal price and maybe more) (#5907)
• Translations update from Hosted Weblate (#5904)

Involved in this release: @kevinpapst

2.55.0-ls172

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.54.0-ls171...2.55.0-ls172

Remote Changes:

Compatible with PHP 8.1 to 8.5

• System-Account flag should always be editable (#5907)
• Use absolute avatar URLs in Fixtures (#5907)
• Explain importance of TRUSTED_HOSTS in .env (#5907)
• Fix exporter column styles (duration, internal price and maybe more) (#5907)
• Translations update from Hosted Weblate (#5904)

Involved in this release: @kevinpapst

2.54.0-ls171

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.53.0-ls170...2.54.0-ls171

Remote Changes:

Compatible with PHP 8.1 to 8.5

• Avatar URL fields need to be a real absolute URL (#5896)
• Do not allow the = character in name fields (#5896)
• Sunset long deprecated API passwords (#5896)
• Hardening permission checks on context-menu actions for specific items (#5896)
• Added working_day() twig test (#5896)
• Improved Team API docs (#5897)
• Let view_team permission be handled by global ACLs (#5897)
• Check for IsGranted('edit', 'team') instead of IsGranted('edit_team') (#5897)
• Use StringCell for all exported content that is of type string for XSLX exports (#5899)
• Always check for formula identifier, not only in position 0 in XLSX invoice (#5899)
• Translations update from Hosted Weblate (#5892)

Involved in this release: @kevinpapst, @melnicek, @satexd, @hett-patell, @AzureADTrent

2.53.0-ls170

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.53.0-ls169...2.53.0-ls170

Remote Changes:

Compatible with PHP 8.1 to 8.5

• Removed remaining usages of toast messages (#5878)
• Bump GitHub action versions for Node 24 (#5878)
• Fetch PHP extension requirements with composer file for Doctor screen (#5878)
• Better handling in case of deactivated opcache_status() function (e.g. shared hosting) (#5878)
• New configuration to cleanup RelayState if it exceeds 80 character (#5878)
• Sanitize RelayState before redirect (#5878)
• Do not allow " in certain user attributes + escaping (#5878)
• Do not copy rates upon timesheet restart into the clone (#5878)
• API allowed to update disabled user preferences (#5878)
• Disable access to deprecated api password hashes via Twig SecurityPolicy (#5878)
• Translations update from Hosted Weblate (#5879)

Involved in this release: @kevinpapst, @morimori-dev, @udaypali, @wooseokdotkim

2.53.0-ls169

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.52.0-ls168...2.53.0-ls169

Remote Changes:

Compatible with PHP 8.1 to 8.5

• Removed remaining usages of toast messages (#5878)
• Bump GitHub action versions for Node 24 (#5878)
• Fetch PHP extension requirements with composer file for Doctor screen (#5878)
• Better handling in case of deactivated opcache_status() function (e.g. shared hosting) (#5878)
• New configuration to cleanup RelayState if it exceeds 80 character (#5878)
• Sanitize RelayState before redirect (#5878)
• Do not allow " in certain user attributes + escaping (#5878)
• Do not copy rates upon timesheet restart into the clone (#5878)
• API allowed to update disabled user preferences (#5878)
• Disable access to deprecated api password hashes via Twig SecurityPolicy (#5878)
• Translations update from Hosted Weblate (#5879)

Involved in this release: @kevinpapst, @morimori-dev, @udaypali, @wooseokdotkim

2.52.0-ls168

CI Report:

N/A

LinuxServer Changes:

Full Changelog: 2.52.0-ls167...2.52.0-ls168

Remote Changes:

Compatible with PHP 8.1 to 8.5

• Updated dependencies (#5874)
• Allow to configure spacer for date_weekday twig filter (#5874)
• Added more styles for absences (#5874)
• Translations update from Hosted Weblate (#5848)

Involved in this release: @kevinpapst