Redmine

2026-03-28

13:41 Redmine Revision 24540 (svn): Strictly validate exotic IP formats in webhook URLs. As a side-effect of this, we now reject URLs where we can't resolve the host (#43911, #29664).

Patch by Holger Just (user:hjust). Marius BĂLTEANU

13:40 Redmine Revision 24539 (svn): Strictly ensure that the port in webhook URLs is within the valid range (#43911, #29664).

Patch by Holger Just (user:hjust). Marius BĂLTEANU

13:39 Redmine Revision 24538 (svn): Block 0.0.0.0 and :: in webhook URLs (#43911, #29664).

Patch by Holger Just (user:hjust). Marius BĂLTEANU

11:00 Redmine Revision 24537 (svn): Correctly handle IPv6 IPs in webhook URLs (#43911, #29664).

Patch by Holger Just (user:hjust). Marius BĂLTEANU

10:51 Redmine Revision 24536 (svn): Webhooks should not follow redirects (#43905, #29664).

Patch by Holger Just (user:hjust). Marius BĂLTEANU

2026-03-20

08:00 Redmine Defect #43698 (Closed): ArgumentError occurs on /oauth/authorize when REST API is disabled

Merged to 6.1-stable. Marius BĂLTEANU

08:00 Redmine Revision 24520 (svn): Merge r24514 from trunk to 6.1-stable (#43698).

Marius BĂLTEANU

2026-03-19

15:30 Redmine Defect #43889 (Closed): Webhook is not triggered when attachment is deleted via AJAX UI

Marius BĂLTEANU

08:38 Redmine Defect #43838 (Closed): User mentions using the @login syntax cause performance issues when rendering content on instances with a large number of users.

Marius BĂLTEANU

07:31 Redmine Defect #43838 (Resolved): User mentions using the @login syntax cause performance issues when rendering content on instances with a large number of users.

All three patches committed, please let me know if you observe any issue. Marius BĂLTEANU