v6.4.0

grokability/snipe-itv6.4.0May 6, 2024by snipe

AI Summary

The final release of the v6 line featuring numerous UI tweaks, security patches, and new API endpoints. It addresses a permissions escalation issue and prepares the system for the upcoming v7.0.0.

Key Highlights

  • Added new API endpoints for checkins and audits (due/overdue).
  • Added Brother 18mm label type support.
  • Fixed LDAP location syncing and dark theme UI issues.
  • Upgraded TCPDF to address CVE-2024-22640.
  • Added License Export function.

New Features

  • New API endpoints (`/api/v1/hardware/checkins/due`, etc.)
  • Brother 18mm label type support
  • License Export function
  • Improved RTL support

Full Release Notes

> [!CAUTION]  
>  **The NEXT major release of Snipe-IT (v7.0.0) will require PHP 8.1 or greater**

Happy Monday, friends! This is the final release of the v6 line of Snipe-IT. (I know, I know.)

If you're hosted with us, you'll have these changes in your hot little hands within a day or so. If you're not, please make sure to upgrade your version of Snipe-IT. But more importantly, please make sure you're running PHP 8.1.x+ before you try to upgrade again after this. 

No breaking changes, just some small tweaks, a few added features, and a few bug fixes. We did have to address a potential (though very hard to exploit) permissions escalation issue, which is why we're making this 6.4.0 instead of a point release. 

v7 has been a long time coming, but we're nearly there. 

Thanks as always to our community contributors for their awesome work! <3

## What's Changed
* Fixed z-index of table load by @Godmartinz in https://github.com/snipe/snipe-it/pull/14520
* Fixed ambiguous id clause in custom report by @snipe in https://github.com/snipe/snipe-it/pull/14551
* Redirect on checkin if the asset is already checked in by @snipe in https://github.com/snipe/snipe-it/pull/14552
* Fixed alignment of dropdown menu for user in nav bar by @Godmartinz in https://github.com/snipe/snipe-it/pull/14547
* Hide/Show encrypted values in hardware list by @mauro-miatello in https://github.com/snipe/snipe-it/pull/14529
* Fixed  ldap location syncing incorrect locations for users. by @Godmartinz in https://github.com/snipe/snipe-it/pull/14559
* Added audit dates to label options by @Godmartinz in https://github.com/snipe/snipe-it/pull/14557
* Remove city as required field on location modal by @snipe in https://github.com/snipe/snipe-it/pull/14567
* Reduce Extra Space in Header Dropdown by @akemidx in https://github.com/snipe/snipe-it/pull/14582
* Fixed: Header Dropdown Menus had no hover coloring in dark themes by @akemidx in https://github.com/snipe/snipe-it/pull/14558
* Upgraded Signature-pad.js  && Fixed Resizing Canvas on mobile by @Godmartinz in https://github.com/snipe/snipe-it/pull/14577
* Fixed assigned to field in new label engine by @marcusmoore in https://github.com/snipe/snipe-it/pull/14581
* Fixed department validation to allow updates by @Godmartinz in https://github.com/snipe/snipe-it/pull/13880
* Fixed label fields only showing first option by @marcusmoore in https://github.com/snipe/snipe-it/pull/14594
* First fix for user FMCS scoping by @snipe in https://github.com/snipe/snipe-it/pull/14591
* Added test cases around modifying user groups via api by @marcusmoore in https://github.com/snipe/snipe-it/pull/14613
* Feat: add no-interactive flag for `upgrade.php` by @Q4kK in https://github.com/snipe/snipe-it/pull/14578
* Fixed #14508: Added PDO::MYSQL_ATTR_SSL_VERIFY_SERVER_CERT options to database.php … by @jeffclay in https://github.com/snipe/snipe-it/pull/14511
* Fixed check-all button behaving inconsistently by @snipe in https://github.com/snipe/snipe-it/pull/14622
* Added `ico`, `image/x-icon`, `image/vnd.microsoft.icon` to favicon validation by @snipe in https://github.com/snipe/snipe-it/pull/14628
* Removed escaping on notes for file uploads by @snipe in https://github.com/snipe/snipe-it/pull/14630
* Added "select" option to top of data sources in new label engine by @marcusmoore in https://github.com/snipe/snipe-it/pull/14632
* Fixed dark theme button text coloring by @akemidx in https://github.com/snipe/snipe-it/pull/14616
* Re-enabled updating encrypted custom fields via API [sc-41465] by @uberbrady in https://github.com/snipe/snipe-it/pull/14602
* Left Sidebar Was Not Respecting Theme by @akemidx in https://github.com/snipe/snipe-it/pull/14608
* Removed encrypted fields from label options by @Godmartinz in https://github.com/snipe/snipe-it/pull/14499
* Added a License Export function and button by @Godmartinz in https://github.com/snipe/snipe-it/pull/14587
* Fixed `purchase_cost` not being allowed to be a string when creating asset via api by @marcusmoore in https://github.com/snipe/snipe-it/pull/14651
* Refactored due/overdue for audit, added due/overdue for checkin API endpoint and GUI by @snipe in https://github.com/snipe/snipe-it/pull/14655
* Added Brother 18mm label type by @snipe in https://github.com/snipe/snipe-it/pull/14391
* Improve RTL support by @mustafa-online in https://github.com/snipe/snipe-it/pull/14679
* Upgrade tecnickcom/tcpdf from version 6.7.4 to 6.7.5 to address the security vulnerability CVE-2024-22640 by @franceslui in https://github.com/snipe/snipe-it/pull/14661
* [Snyk] Upgrade alpinejs from 3.13.5 to 3.13.8 #14646 by @snipe in https://github.com/snipe/snipe-it/pull/14686
* Upgrade fontawesome from 6.5.1 to 6.5.2 by @snipe in https://github.com/snipe/snipe-it/pull/14687
* [Snyk] Upgrade tableexport.jquery.plugin from 1.28.0 to 1.30.0 #14656 by @snipe in https://github.com/snipe/snipe-it/pull/14688
* Capitalize `N` instead of `y` since no is default by @KorvinSzanto in https://github.com/snipe/snipe-it/pull/14689

### New API Endpoints:

- Added the `/api/v1/hardware/checkins/due` and  `/api/v1/hardware/checkins/overdue` endpoints
- Added the `/api/v1/hardware/checkins/due-or-overdue` and  `/api/v1/hardware/audits/due-or-overdue` endpoints

### New Dev Documentation:
 
- https://snipe-it.readme.io/docs/architecture
- https://snipe-it.readme.io/docs/accessibility

## New Contributors
* @Q4kK made their first contribution in https://github.com/snipe/snipe-it/pull/14578
* @jeffclay made their first contribution in https://github.com/snipe/snipe-it/pull/14511
* @mustafa-online made their first contribution in https://github.com/snipe/snipe-it/pull/14679
* @franceslui made their first contribution in https://github.com/snipe/snipe-it/pull/14661
* @KorvinSzanto made their first contribution in https://github.com/snipe/snipe-it/pull/14689

**Full Changelog**: https://github.com/snipe/snipe-it/compare/v6.3.4...v6.4.0