v6.3.2

grokability/snipe-itv6.3.2Mar 5, 2024by snipe

AI Summary

Focused on backup improvements, security fixes (CVEs), and UI enhancements like bulk deleting locations and adding email/phone icons to users.

Key Highlights

  • Added `/backups/latest` API endpoint.
  • Added bulk delete locations functionality.
  • Fixed CVE-2024-25117 in php-svg-lib.
  • Added email and phone icons to user table.
  • Set CSP headers to true by default.

New Features

  • `/backups/latest` API endpoint
  • Bulk delete locations
  • Email/Phone icons on users
  • CSP headers enabled by default

Full Release Notes

## ⚠️ IMPORTANT: Future versions of Snipe-IT will require PHP 8.1 or greater

## What's Changed
* Allowlist and db prefix for restore by @uberbrady in https://github.com/snipe/snipe-it/pull/14278
* Better handle large downloads on backup API by @snipe in https://github.com/snipe/snipe-it/pull/14296
* Added `/backups/latest` to API endpoint by @snipe in https://github.com/snipe/snipe-it/pull/14297
* Add missing EXIF PHP library for Alpine Docker image by @uberbrady in https://github.com/snipe/snipe-it/pull/14298
* Check that the model exists before trying to access properties by @snipe in https://github.com/snipe/snipe-it/pull/14299
* Disallow branding uploads in demo mode by @snipe in https://github.com/snipe/snipe-it/pull/14301
* Clean up the file extension on image file uploads by @uberbrady in https://github.com/snipe/snipe-it/pull/14302
* Added ability to bulk delete locations by @snipe in https://github.com/snipe/snipe-it/pull/14304
* Fixed title not appearing in new label engine by @marcusmoore in https://github.com/snipe/snipe-it/pull/14307
* Eager load relations to determine deletability on locations by @snipe in https://github.com/snipe/snipe-it/pull/14308
* Fixed #14183  API /hardware/:id/checkin doesn't return Licenses  by @inietov in https://github.com/snipe/snipe-it/pull/14192
* Only send notification if the item is assigned to a person by @snipe in https://github.com/snipe/snipe-it/pull/14315
* Added email, phone icons by @snipe in https://github.com/snipe/snipe-it/pull/14316
* Made website searchable on users table by @snipe in https://github.com/snipe/snipe-it/pull/14317
* Fixes CVE-2024-25117 php-svg-lib lacks path validation on font through SVG inline styles by @joelpittet in https://github.com/snipe/snipe-it/pull/14323
* Adding in PDF download to Accesories/Asset/License Histories by @akemidx in https://github.com/snipe/snipe-it/pull/14321
* Check for activeFile before trying to get header on import by @snipe in https://github.com/snipe/snipe-it/pull/14319
* Check for valid supplier in license view by @snipe in https://github.com/snipe/snipe-it/pull/14325
* Nicer UI for history importer by @snipe in https://github.com/snipe/snipe-it/pull/14327
* Generate unique department names in factory by @marcusmoore in https://github.com/snipe/snipe-it/pull/14341
* Copy encrypted custom fields by @mauro-miatello in https://github.com/snipe/snipe-it/pull/14335
* Added created_by to groups table by @snipe in https://github.com/snipe/snipe-it/pull/14344
* Added `min_amt` functionality to licenses by @snipe in https://github.com/snipe/snipe-it/pull/14346
* Fixed: Checked in Assets Did Not Show in Custom Report when Selecting a Valid Checked Out Date  by @akemidx in https://github.com/snipe/snipe-it/pull/14283
* Added better label previews with the new label engine by @Godmartinz in https://github.com/snipe/snipe-it/pull/14281
* Added tests around asset check in and added missing actions to the api controller action by @marcusmoore in https://github.com/snipe/snipe-it/pull/14260
* Dynamically show models/assets on requestable page by @snipe in https://github.com/snipe/snipe-it/pull/14347
* Use SVG cleaner on favicons by @snipe in https://github.com/snipe/snipe-it/pull/14354
* Updated language strings by @snipe in https://github.com/snipe/snipe-it/pull/14355
* Set CSP headers to true by default by @snipe in https://github.com/snipe/snipe-it/pull/14356
* Removed unsafe-inline and unsafe-eval by @snipe in https://github.com/snipe/snipe-it/pull/14357
* Fixes inconsistencies with generating labels by @Godmartinz in https://github.com/snipe/snipe-it/pull/14362


**Full Changelog**: https://github.com/snipe/snipe-it/compare/v6.3.1...v6.3.2