Merge branch 'feature/PB-34019_51-Publish-RC-API' into 'release'

PB-34019 Prepare v4.9.0-rc.1 release

See merge request passbolt/passbolt-ce-api!295

CHANGELOG.md

@@ -2,6 +2,31 @@
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+## [4.9.0-rc.1] - 2024-07-18
+### Added
+- PB-33690 Improves response times by adding an index to gpgkeys.user_id column
+- PB-33639 Adds additional contain parameters to share/search-aros.json for enhanced performance
+- PB-33936 Adds a has-users filter to gpgkeys.json index endpoint
+- PB-33813 Adds a fixed limit to the search-aros.json endpoint
+
+### Improved
+- PB-33429 As a user I should retrieve resources and folders parent folders in a single query
+- PB-33826 Improves the performance of resources.json by improving the datetime fields processing
+- PB-24995 Improves last_logged_in property query performance to reduce response time of users.json endpoint
+- PB-33653 Improves is_mfa_enabled property query performance to reduce response time of users.json endpoint
+- PB-33702 Improves has-access filter performance on users.json
+- PB-32591 Validate passbolt.plugins.smtpSettings.security configuration values before passing it to SMTP server
+- PB-33214 Update sql export / improve mysql backup command compatibility with mariadb-dump
+
+### Security
+- PB-33747 Fix command injections vulnerabilities in composer/composer package
+
+### Fixed
+- PB-33616 As a user creating a resource I should get a validation error if the secret is a string and not an array
+
+### Maintenance
+- PB-33692 Bump enygma/yubikey to v3.8
+
 ## [4.9.0-test.2] - 2024-07-17
 ### Added
 - PB-33690 Improves response times by adding an index to gpgkeys.user_id column

RELEASE_NOTES.md

@@ -1,8 +1,10 @@
-Release song: TBD
+Release song: https://youtu.be/zUzd9KyIDrM?si=bPS9Qu1t351eZEHH
 
-Passbolt v4.9.0-test.2
+Passbolt is pleased to announce that the v4.9.0 Release Candidate is officially available for testing.
+This maintenance release aims to improve performance, notably 40% improvements of the resources & users endpoints. On the browser extension side, the grid now shows the folder location and a much-awaited feature on the ability to search folders.
+As always, your feedback is invaluable, so please share and report any issues you come across.
 
-## [4.9.0-test.2] - 2024-07-17
+## [4.9.0-rc.1] - 2024-07-18
 ### Added
 - PB-33690 Improves response times by adding an index to gpgkeys.user_id column
 - PB-33639 Adds additional contain parameters to share/search-aros.json for enhanced performance

config/version.php

@@ -1,8 +1,8 @@
 <?php
 return [
     'passbolt' => [
-        'version' => '4.9.0-test.2',
-        'name' => 'TBD',
+        'version' => '4.9.0-rc.1',
+        'name' => 'B.Y.O.B.',
     ],
     'php' => [
         'minVersion' => '7.4',

package.json

@@ -24,7 +24,7 @@
     "jquery": "^3.5.1",
     "lockfile-lint": "^4.12.1",
     "openpgp": "5.2.1",
-    "passbolt-styleguide": "^4.9.0"
+    "passbolt-styleguide": "^4.9.2"
   },
   "scripts": {
     "lint": "npm run lint:lockfile",

webroot/locales/de-DE/common.json

@@ -3,7 +3,7 @@
   "(Folder) new owner:": "(Ordner) neuer Eigentümer:",
   "(group)": "(Gruppe)",
   "(not yet available)": "(noch nicht verfügbar)",
-  "(suspended)": "(suspended)",
+  "(suspended)": "(gesperrt)",
   "(tag)": "(Tag)",
   "{column.label}": "{column.label}",
   "{errors.get(key)}": "{errors.get(key)}",
@@ -26,7 +26,7 @@
   "<0><0>{{activityCreatorName}}</0></0> rejected the account recovery request": "<0><0>{{activityCreatorName}}</0></0> hat die Anfrage zur Kontowiederherstellung abgelehnt",
   "<0>4. Scan the QR codes with your phone.</0>": "<0>4. Scannen Sie die QR-Codes mit Ihrem Telefon.</0>",
   "<0>5. And you are done!</0>": "<0>5. Und Sie sind fertig!</0>",
-  "<0>Warning:</0> Suspension is scheduled for the {this.suspendedDate}": "<0>Warning:</0> Suspension is scheduled for the {this.suspendedDate}",
+  "<0>Warning:</0> Suspension is scheduled for the {this.suspendedDate}": "<0>Warnung:</0> Sperrung ist für den {this.suspendedDate} geplant",
   "<0>Warning:</0> These are the settings provided by a configuration file. If you save it, will ignore the settings on file and use the ones from the database.": "<0>Warnung:</0> Dies sind die Einstellungen, die eine Konfigurationsdatei zur Verfügung stellt. Wenn Sie es speichern, ignorieren Sie die Einstellungen in der Datei und verwenden Sie die aus der Datenbank.",
   "<0>Warning</0>: This secret will expire after some time (typically a few months). Make sure you save the expiry date and rotate it on time.": "<0>Warnung</0>: Dieses Geheimnis läuft nach einiger Zeit ab (normalerweise nach einigen Monaten). Stellen Sie sicher, dass Sie das Ablaufdatum speichern und es rechtzeitig rotieren.",
   "<0>Warning</0>: UPN is not active by default on Azure and requires a specific option set on Azure to be working.": "<0>Warnung</0>: UPN ist nicht standardmäßig auf Azure aktiv und benötigt eine bestimmte auf Azure gesetzte Option, um zu funktionieren.",
@@ -76,7 +76,7 @@
   "Account Recovery Policy": "Kontowiederherstellungsrichtlinie",
   "Activated": "Aktiviert",
   "Activation pending": "Aktivierung ausstehend",
-  "active": "active",
+  "active": "aktiv",
   "Active Directory": "Aktives Verzeichnis",
   "Activity": "Aktivität",
   "Add": "Hinzufügen",
@@ -291,7 +291,7 @@
   "Directory group's users field to map to Passbolt group's field.": "Directory group's users field to map to Passbolt group's field.",
   "Directory ID": "Verzeichnis-ID",
   "Directory type": "Verzeichnistyp",
-  "Directory user's username fallback field to be mapped when user username field cannot be found.": "Directory user's username fallback field to be mapped when user username field cannot be found.",
+  "Directory user's username fallback field to use when user username field cannot be found.": "Directory user's username fallback field to use when user username field cannot be found.",
   "Directory user's username field to map to Passbolt user's username field.": "Directory user's username field to map to Passbolt user's username field.",
   "Disable": "Deaktivieren",
   "Disable (Default)": "Deaktivieren (Standard)",
@@ -703,7 +703,6 @@
   "Please review carefully this configuration.": "Bitte überprüfen Sie diese Konfiguration sorgfältig.",
   "Please select a provider": "Bitte wählen Sie einen Anbieter",
   "Please try again later or contact your administrator.": "Bitte versuchen Sie es später erneut oder kontaktieren Sie Ihren Administrator.",
-  "Please try again.": "Bitte versuchen Sie es erneut.",
   "Please wait, while your request is processed.": "Bitte warten Sie, während Ihre Anfrage bearbeitet wird.",
   "Please wait...": "Bitte warten...",
   "Policy Override": "Policy Override",
@@ -875,7 +874,7 @@
   "Sorry no multi factor authentication is enabled for this organization.": "Leider ist für diese Organisation keine Multi-Faktor-Authentifizierung aktiviert.",
   "Sorry the account recovery feature is not enabled for this organization.": "Die Kontowiederherstellungsfunktion ist für diese Organisation leider nicht aktiviert.",
   "Sorry the Mobile app setup feature is only available in a secure context (HTTPS).": "Sorry the Mobile app setup feature is only available in a secure context (HTTPS).",
-  "Sorry the multi factor authentication feature is only available in a secure context (HTTPS).": "Sorry the multi factor authentication feature is only available in a secure context (HTTPS).",
+  "Sorry the multi factor authentication feature is only available in a secure context (HTTPS).": "Die Multi-Faktor-Authentifizierung ist leider nur in einem sicheren Kontext (HTTPS) verfügbar.",
   "sorry you can only have one key set at the moment": "Entschuldigung, aktuell können Sie nur einen Schlüssel-Satz verwalten",
   "Sorry your subscription is either missing or not readable.": "Ihr Abonnement leider fehlt oder ist nicht lesbar.",
   "Sorry, it is not possible to proceed. The first QR code is empty.": "Leider ist es nicht möglich, fortzufahren. Der erste QR-Code ist leer.",
@@ -904,9 +903,9 @@
   "Success:": "Erfolg",
   "Suggested": "Vorgeschlagen",
   "Suspend this user": "Suspend this user",
-  "suspended": "suspended",
-  "Suspended": "Suspended",
-  "Suspended users": "Suspended users",
+  "suspended": "gesperrt",
+  "Suspended": "Gesperrt",
+  "Suspended users": "Gesperrte Benutzer",
   "Sync operations": "Synchronisationsvorgänge",
   "Synchronization options": "Synchronisierungsoptionen",
   "Synchronize": "Synchronisieren",
@@ -1116,7 +1115,6 @@
   "This user will not be able to sign in to passbolt and receive email notifications. Other users can share resource with it and add this user to a group.": "This user will not be able to sign in to passbolt and receive email notifications. Other users can share resource with it and add this user to a group.",
   "This will help protect you from <1>phishing attacks</1>.": "Dies dient zum Schutz vor <1>Phishing-Attacken</1>.",
   "Time based One Time Password (TOTP)": "Zeitbasiertes einmaliges Passwort (TOTP)",
-  "Time is up": "Zeit ist abgelaufen",
   "Time-based One Time Password": "Zeitbasiertes einmaliges Passwort",
   "Tips for choosing a good passphrase": "Tipps zur Auswahl einer guten Passphrase",
   "TLS must be set to 'Yes' or 'No'": "TLS muss auf 'Ja' oder 'Nein' gesetzt sein",
@@ -1193,7 +1191,7 @@
   "Users": "Benutzer",
   "Users Directory": "Benutzerverzeichnis",
   "Users have the choice to enable multi factor authentication in their profile workspace.": "Benutzer haben die Wahl, die Multi-Faktor-Authentifizierung im Profil-Arbeitsbereich zu aktivieren.",
-  "Users have to enable multi factor authentication. If they don't, they will be reminded every time they log in.": "Users have to enable multi factor authentication. If they don't, they will be reminded every time they log in.",
+  "Users have to enable multi factor authentication. If they don't, they will be reminded every time they log in.": "Benutzer müssen die Multi-Faktor-Authentifizierung aktivieren. Wenn sie dies nicht tun, werden sie bei jeder Anmeldung daran erinnert.",
   "Users limit:": "Benutzerlimit:",
   "Users parent group": "Übergeordnete Benutzergruppe",
   "Users will not be able to self register anymore.": "Benutzer können sich nicht mehr selbst registrieren.",
@@ -1313,8 +1311,6 @@
   "You should keep it offline in a safe place.": "Sie sollten sie an einem sicheren offline Ort absichern.",
   "You sign in to passbolt just like you normally do.": "Sie melden sich bei Passbolt an, genau wie Sie es normalerweise tun.",
   "You susccessfully signed in with your {{providerName}} account. You can safely save your configuration.": "Sie haben sich mit Ihrem {{providerName}} -Konto angemeldet. Sie können Ihre Konfiguration sicher speichern.",
-  "You took too long to recover your account.": "Sie haben zu lange gebraucht, um Ihr Konto wiederherzustellen.",
-  "You took too long to set up your account.": "Sie haben zu lange gebraucht, um Ihr Konto einzurichten.",
   "You will be able to save it after submitting": "Sie können es nach dem Absenden speichern",
   "You will need this recovery kit later to access your account (for example on a new device).": "You will need this recovery kit later to access your account (for example on a new device).",
   "you@organization.com": "sie@organisation.com",
@@ -1344,6 +1340,8 @@
   "{{count}} group has been found._other": "{{count}} Gruppen wurden gefunden.",
   "{{count}} group has been synchronized._one": "{{count}} Gruppe wurde synchronisiert.",
   "{{count}} group has been synchronized._other": "{{count}} Gruppen wurden synchronisiert.",
+  "{{count}} group member_one": "One group member",
+  "{{count}} group member_other": "{{count}} group members",
   "{{count}} group will be synchronized._one": "{{count}} Gruppe wird synchronisiert.",
   "{{count}} group will be synchronized._other": "{{count}} Gruppen werden synchronisiert.",
   "{{count}} password has been imported successfully._one": "{{count}} Passwort wurde erfolgreich importiert.",
@@ -1360,7 +1358,7 @@
   "<0>{{numberFolderSuccess}} out of {{count}}</0> folder has been imported._other": "<0>{{numberFolderSuccess}} von {{count}}</0> Ordnern wurden importiert.",
   "<0>{{numberResourceSuccess}} out of {{count}}</0> password has been imported._one": "<0>{{numberResourceSuccess}} von {{count}}</0> Passwörter wurden importiert.",
   "<0>{{numberResourceSuccess}} out of {{count}}</0> password has been imported._other": "<0>{{numberResourceSuccess}} von {{count}}</0> Passwörtern wurden importiert.",
-  "Delete resource?_one": "Delete resource?",
+  "Delete resource?_one": "Ressource löschen?",
   "Delete resource?_other": "Delete resources?",
   "Set an expiry date_one": "Set an expiry date",
   "Set an expiry date_other": "Set expiry dates",

webroot/locales/es-ES/common.json

@@ -291,7 +291,7 @@
   "Directory group's users field to map to Passbolt group's field.": "Campo de usuarios del grupo de directorios para asignar al campo del grupo de Passbolt.",
   "Directory ID": "ID del directorio",
   "Directory type": "Tipo de directorio",
-  "Directory user's username fallback field to be mapped when user username field cannot be found.": "El campo del de nombre de usuario alternativo del directorio del usuario se asignará cuando no se encuentre el campo de nombre de usuario del usuario.",
+  "Directory user's username fallback field to use when user username field cannot be found.": "El retorno del campo del nombre de usuario del usuario del directorio para usar cuando no se puede encontrar el campo del nombre de usuario.",
   "Directory user's username field to map to Passbolt user's username field.": "Campo de nombre de usuario del usuario del directorio para asignar al campo del nombre de usuario del usuario de Passbolt.",
   "Disable": "Deshabilitar",
   "Disable (Default)": "Deshabilitar (predeterminado)",
@@ -703,7 +703,6 @@
   "Please review carefully this configuration.": "Por favor, revise con cuidado esta configuración.",
   "Please select a provider": "Por favor, seleccione un proveedor",
   "Please try again later or contact your administrator.": "Por favor, inténtelo de nuevo más tarde o póngase en contacto con su administrador.",
-  "Please try again.": "Por favor, inténtelo de nuevo.",
   "Please wait, while your request is processed.": "Por favor, espere, mientras su solicitud es procesada.",
   "Please wait...": "Por favor espere...",
   "Policy Override": "Reemplazar la política",
@@ -1116,7 +1115,6 @@
   "This user will not be able to sign in to passbolt and receive email notifications. Other users can share resource with it and add this user to a group.": "Este usuario no podrá iniciar sesión en Passbolt ni recibir notificaciones por correo electrónico. Otros usuarios pueden compartir recursos con él y añadir este usuario a un grupo.",
   "This will help protect you from <1>phishing attacks</1>.": "Esto te ayudará a protegerte de <1>ataques de phishing</1>.",
   "Time based One Time Password (TOTP)": "Contraseña de un solo uso basada en el tiempo (TOTP)",
-  "Time is up": "El tiempo ha expirado",
   "Time-based One Time Password": "Contraseña de un solo uso basada en el tiempo",
   "Tips for choosing a good passphrase": "Consejos para elegir una buena frase de contraseña",
   "TLS must be set to 'Yes' or 'No'": "El TLS debe estar configurado como 'Sí' o 'No'",
@@ -1313,8 +1311,6 @@
   "You should keep it offline in a safe place.": "Deberías mantenerlo fuera de línea en un lugar seguro.",
   "You sign in to passbolt just like you normally do.": "Inicie sesión en Passbolt como lo hace normalmente.",
   "You susccessfully signed in with your {{providerName}} account. You can safely save your configuration.": "Ha iniciado sesión correctamente con su cuenta de {{providerName}}. Puede guardar su configuración de forma segura.",
-  "You took too long to recover your account.": "Ha tardado demasiado en recuperar su cuenta.",
-  "You took too long to set up your account.": "Ha tardado demasiado en configurar su cuenta.",
   "You will be able to save it after submitting": "Podrá guardarlo después del envío",
   "You will need this recovery kit later to access your account (for example on a new device).": "Necesitará este kit de recuperación más adelante para acceder a su cuenta (por ejemplo en un dispositivo nuevo).",
   "you@organization.com": "tu@organizacion.com",
@@ -1344,6 +1340,8 @@
   "{{count}} group has been found._other": "{{count}} grupos han sido encontrados.",
   "{{count}} group has been synchronized._one": "{{count}} grupo ha sido sincronizado.",
   "{{count}} group has been synchronized._other": "{{count}} grupos han sido sincronizados.",
+  "{{count}} group member_one": "Un miembro del grupo",
+  "{{count}} group member_other": "{{count}} miembros del grupo",
   "{{count}} group will be synchronized._one": "{{count}} grupo será sincronizado.",
   "{{count}} group will be synchronized._other": "{{count}} grupos serán sincronizados.",
   "{{count}} password has been imported successfully._one": "{{count}} contraseña ha sido importada con éxito.",