v8.1.3

grokability/snipe-itv8.1.3May 7, 2025by snipe

AI Summary

This release includes a security patch for a library vulnerability, fixes Docker Hub build configurations, and adds support for a specific barcode format.

Key Highlights

  • Fixed CVE-2025-46734 in league/commonmark (XSS vulnerability).
  • Fixed Docker Hub repository references (users must pull from `snipe/snipe-it`).
  • Added barcode support for Avery 3490.
  • Improved handling of Docker multiarch builds.

New Features

  • Avery 3490 Barcode Support

Full Release Notes

> [!CAUTION]  
>  **This  version of Snipe-IT REQUIRES PHP 8.2.0 or greater.**

Happy Wednesday! This release fixes a few small bugs, updates a library dependency that had a CVE, and *hopefully* handles some of our docker users. 

We're sorry this has been a hassle for the docker folks. 

Dockerhub makes it surprisingly un-intuitive to keep your Dockerhub namespace when you switch a GH repo namespace. Why would we want to keep our old Dockerhub namespace, you ask? Good question! Turns out you can't move namespaces and keep your stars and pull counts, which we kinda want, since we're the original creators. 

We had to undo some of the much faster build optimizations we had previously made for Docker people - they take almost an *hour* now - ouch. But we'll be revisiting that and speeding it back up in the next week.

To clarify, Docker folks should be pulling from `snipe/snipe-it`, *not* `grokability/snipe-it`. It's counter-intuitive, I know. Dockerhub won't let us move without losing literally a decade of pull and star stats. :( 


## What's Changed
* Livewire component for smoother check for location companies by @snipe in https://github.com/grokability/snipe-it/pull/16860
* Set upload-limit by @chfsx in https://github.com/grokability/snipe-it/pull/16806
* Adds Label fields offset as an option by @Godmartinz in https://github.com/grokability/snipe-it/pull/16790
* Add barcode support for Avery 3490 by @realchrisolin in https://github.com/grokability/snipe-it/pull/16847
* Fixed #15629 - prevent setting `assigned_to` without setting assigned_type by @uberbrady in https://github.com/grokability/snipe-it/pull/15907
* Fix dockerhub repo we're pushing to, and arm build names by @jerm in https://github.com/grokability/snipe-it/pull/16851
* Added missing contributors by @marcusmoore in https://github.com/grokability/snipe-it/pull/16864
* Fixed #16815: Avoids potential error when settings table is empty by @ntaylor-86 in https://github.com/grokability/snipe-it/pull/16865
* More dockerhub repo references by @jerm in https://github.com/grokability/snipe-it/pull/16868
* One more docker repo name fix by @jerm in https://github.com/grokability/snipe-it/pull/16871
* Redirect options on audit by @snipe in https://github.com/grokability/snipe-it/pull/16873
* Fixed breadcrumbs for cloning by @snipe in https://github.com/grokability/snipe-it/pull/16874
* Fixes CVE-2025-46734: league/commonmark contains a XSS vulnerability in Attributes extension  by @joelpittet in https://github.com/grokability/snipe-it/pull/16875
* Move back to multiarch builds with emulation (for now) by @jerm in https://github.com/grokability/snipe-it/pull/16876

## New Contributors
* @chfsx made their first contribution in https://github.com/grokability/snipe-it/pull/16806
* @realchrisolin made their first contribution in https://github.com/grokability/snipe-it/pull/16847

**Full Changelog**: https://github.com/grokability/snipe-it/compare/v8.1.2...v8.1.3