Redmine

h1. Changelog 3.1.x

h2. version:3.1.6 (2016-06-05)

* Defect #22808: Malformed SQL query with SQLServer when grouping and sorting by fixed version

* Defect #22924: Persistent XSS in Markdown parsing

* Defect #22925: Persistent XSS in project homepage field

* Defect #22926: Persistent XSS in Textile parsing

* Patch #22759: pt-BR translation for 3.1.stable

* Patch #22760: Korean translation for 3.1-stable

h2. version:3.1.5 (2016-05-05)

* Defect #22305: Highlighting of required and read-only custom fields broken in Workflow editor.

* Defect #22331: bundler error: Ruby 1.9.3 = "mime-types-data requires Ruby version >= 2.0."

* Patch #22721: Check that the file is actually an image before generating the thumbnail

h2. version:3.1.4 (2016-03-13)

* Defect #21588: Simplified Chinese "field_cvs_module" translation has problem

* Defect #21656: Fix Non ASCII attachment filename encoding broken (MOJIBAKE) in Microsoft Edge Explorer

* Defect #22072: Private notes get copied without private flag to Duplicate issues

* Defect #22127: Issues can be assigned to any user

* Defect #21219: Date pickers images for start/due date fields are not shown for issues with subtasks

* Defect #21477: Assign to "Anonymous" doesn't make much sense

* Defect #21488: Don't use past start date as default due date in the date picker

* Defect #21504: IssuePriority.position_name not recalculated every time it should

* Defect #21551: Private note flag disappears in issue update conflict

* Defect #21843: Nokogiri security issue

* Defect #21900: Moving a page with a child raises an error if target wiki contains a page with the same name as the child

* Patch #21650: Simplified Chinese translation of wiki formating for 2.6-stable

* Patch #21881: Russian wiki translation for 2.6-stable

* Patch #21898: Catalan wiki translation for 2.6-stable

* Patch #21456: Simplified Chinese translation of wiki formating for 3.1-stable

* Patch #21686: Russian translation for 3.1-stable

* Patch #21687: German translations for 3.1-stable

* Patch #21689: Turkish translation for 3.1-stable

* Patch #21882: Russian wiki translation for 3.1-stable

* Patch #21899: Catalan wiki translation for 3.1-stable

* Patch #22131: German translations for 3.1-stable

* Patch #22139: Japanese wiki syntax (Markdown) translation for 3.1-stable

h2. version:3.1.3 (2015-12-05)

* Defect #16948: Broken anonymous repository access for public projects with Apache 2.4 (redmine.pm)

* Defect #21328: pdf: Vietnamese Italic is not shown

* Defect #21419: Information leak in Atom feed

* Patch #21312: Fix exception in Redmine.pm when authenticating anonymous users

* Patch #21430: Simplified Chinese translation

h2. version:3.1.2 (2015-11-14)

* Defect #20992: Parent priority "Independent of subtasks" setting doesn't work

* Defect #20360: Project copy does not copy custom field settings

* Defect #20380: Cannot assign users to projects with IE set to compatibility mode

* Defect #20591: PDF export does not determine picture (.png) height correctly

* Defect #20677: Custom fields with multiple values required by worklow can be blank

* Defect #20811: long pre lines are missing from PDF export of wiki pages

* Defect #21136: Issues API may disclose changeset messages that are not visible

* Defect #21150: Time logging form may disclose subjects of issues that are not visible

* Defect #21155: Deleting invalid wiki page version deletes whole page content

* Defect #20282: Error message when editing a child project without add project/subprojects permissions

* Defect #20730: Fix tokenization of phrases with non-ascii chars

* Defect #21071: find_referenced_issue_by_id fails with RangeError for large numbers

* Patch #21031: Polish translation update for 3.0-stable

* Patch #21105: Japanese wiki_syntax_detailed_textile.html translation for 3.0-stable

* Patch #20785: Polish translation update for 3.1-stable

* Patch #20837: Bulgarian translation

* Patch #20892: Spanish translation for r14637

* Patch #20906: Fix mulitple tab navigation highlighting and content hiding

* Patch #21019: Traditional Chinese translation (to r14689)

* Patch #21076: Move inline CSS to application.css for private checkbox

* Patch #21085: Optimize issue edit description link

h2. version:3.1.1 (2015-09-20)

* Feature #11253: Total time spent from subtasks on the issue list

* Feature #20688: Add Total estimated hours column on issue list

* Feature #20738: Upgrade Rails 4.2.4

* Defect #19577: Open redirect vulnerability

* Defect #20761: Fix typo of Japanese translation for notice_gantt_chart_truncated

* Defect #20427: Cannot create a custom query visibility is "to these roles only"

* Defect #20454: Mail handler: unwanted assignment to a group occurs

* Defect #20278: Wrong syntax for resizing inline images will throw a 500 error

* Defect #20401: "Spent time" panel: columns not wrapping

* Defect #20407: Monospace font-family values are differ between application.css and scm.css

* Defect #20456: 3.1-stable/3.1.0: missing commits (omitted from being merged from trunk)

* Defect #20466: Broken email notification layout in Outlook

* Defect #20490: WARNING: Can't mass-assign protected attributes for User

* Defect #20633: Help cursor showing up since r14154

* Patch #20293: Russian translation for 2.6-stable

* Patch #20294: Russian translation for 2.6-stable

* Patch #20408: Turkish translation for 2.6-stable

* Patch #20557: Czech translation for 2.6-stable

* Patch #20735: Markdown: Upgrade redcarpet gem to 3.3 (ruby 1.9 and higher)

* Patch #20745: Portuguese translation for 2.6-stable

* Patch #20512: Project.copy_from deletes enabled_modules on source

* Patch #20737: Czech translation for 3.0-stable

* Patch #20746: Portuguese translation for 3.0-stable

* Patch #20243: Use https links instead of http links in ApplicationHelper#avatar_edit_link and Redmine::Info class methods

* Patch #20410: Turkish translation for 3.1-stable

* Patch #20452: Czech localisation update

* Patch #20731: Change Japanese translation for "spent time"

* Patch #20747: Portuguese translation for 3.1-stable

h2. version:3.1.0 (2015-07-26)

* Defect #4334: "Watch"ing an issue doesn't update watchers list

* Defect #13924: Error when using views/issues/index.api.rsb in a plugin

* Defect #14881: Issue journals should be ordered by created_on, not id

* Defect #15716: Scraped emails include CSS from HTML emails

* Defect #19243: Ambiguous date format options (eg. 03/03/2015) in settings

* Defect #19656: Activities do not correspont to project when adding time from my page.

* Defect #19737: HTML Sanitizer not working for Outlook mails

* Defect #19740: "Truncate emails after one of these lines" setting is not working

* Defect #19995: Can't apply textile modifiers to 1 non-ASCII character

* Defect #20141: Sync #wiki_format_provider plugin API shortcut with changes to Redmine::WikiFormatting.register from r12450 and r14313

* Defect #20159: Disallow users to delete a version referenced by a custom field

* Defect #20206: Members w/o view issues permission are able to list issues on public projects if the non member role has the permission

* Defect #20372: Contents inside pre tags are not rendered as monospace font in Chrome for Mac

* Feature #5418: Add Gravatar and edit link to "My account" page

* Feature #5490: Option for independent subtask priority/start date/due date/done ratio

* Feature #6118: Filter by parent task or subtasks

* Feature #7037: CSV export encoding and excel. UTF-8 and BOM

* Feature #8424: Add private issue option to receiving emails

* Feature #8929: Permission to view only your own time logs

* Feature #11253: Total time spent from subtasks on the issue list

* Feature #12312: Raise 60-character limit for document titles

* Feature #16373: TextFormatting help for Markdown formatting

* Feature #16535: Set a max width to html email content

* Feature #16962: Better handle html-only emails

* Feature #19182: Patch to the Redmine Mail Handler for specifying a custom CA bundle

* Feature #19458: Add the ability to expire passwords after a configurable number of days

* Feature #19707: Ability to limit member management to certain roles

* Feature #19851: Sudo mode: Require password re-entry for sensitive actions (optional)

* Patch #5770: Welcome text misses wiki formatting

* Patch #14402: Plugin migration directory should use plugin directory

* Patch #19296: Include custom fields description in project settings and issue view

* Patch #19339: Put news articles into <article> tags

* Patch #19341: Put roadmap versions in <article> tags

* Patch #19455: Replace manual query in version helper

* Patch #19509: Change Japanese translation for field_login

* Patch #19546: Change default display mode for PDF Export to OneColumn

* Patch #19991: Japanese translation change

* Patch #19993: Change csv separators of Spanish/Panama

* Patch #20130: Bulgarian translation change

* Patch #20174: Add missing member_role to fixtures

* Patch #20180: Make the updateIssueFrom(url) function return the XMLHttpRequest object