v8.3.6

> [!CAUTION]  
> **For some reason, Github's built-in redirect from `snipe/snipe-it` to `grokability/snipe-it` has stopped working. If you're trying to upgrade or pull and you get a "not found" response or a login prompt from Github, do the following to set your origin to the correct Github URL:**

```sh
git remote remove origin
git remote add origin https://github.com/grokability/snipe-it
git fetch --all git reset --hard origin/master
```

Happy Monday! Snipe-IT v8.3.6 is out! We've made some improvements to the Unaccepted Items report, added file uploads to suppliers, and also added color tags to Locations, Companies, Departments, Suppliers, Categories, and Manufacturers. (Check out the docs [here](https://snipe-it.readme.io/v8.3.6/docs/overview#color-tags).) The new `tag_color` field is also available via the API for the affected object types.

<img width="3484" height="2116" alt="e508c028a290c33e58cd03b87b8d52eeef7d0d2987443b8d2b17c63a24b5821b-frame_generic_light-15" src="https://github.com/user-attachments/assets/d4a0f98e-b90a-4284-bee3-2f872b425105" />

We're also now sending an additional email header (`X-System-Sender: Snipe-IT`) for all notifications. This wouldn't affect anything related to notifications other than it allows clever folks to potentially apply filters on emails going to their inbox that have that header. 

**Additionally, if you have quite a lot of users and were unable to get the groups page to load in between v8.3.5 and v.8.3.6, that issue should be fixed.** (It's a long, boring story related to default settings for `max_input_vars` and `max_multipart_body_parts`.) If you're still having problems, set your `MAX_UNPAGINATED` in your `.env` to something under 5000.

We know this isn't ideal, since being able to add users to from the groups page was a great new feature, but for users with very large user sets, this was a bit of a dealbreaker. Don't worry - we're working on figuring out a way that makes sense from a UX perspective. (For example, "select all users" when the user list is paginated would take a very long time, since you'd have to select them all individually.)

## API changes

- Added `tag_color` to Locations, Companies, Departments, Suppliers, Categories, and Manufacturers
- If you were incorrectly passing the `filter` parameter to the Assets or Users endpoints (for example, `/api/v1/users?filter=email:you@example.org`), it would previously 500. It now returns a validation error, as that endpoint is looking for JSON (for example `/api/v1/users?filter={"email":"you@example.org"}`.)

## What's Changed
* Fixed #15664 - Adds Accessories, Components, Consumables, and Licenses to Unaccepted Assets report by @Godmartinz in https://github.com/grokability/snipe-it/pull/17913
* Actiontype enum redux by @uberbrady in https://github.com/grokability/snipe-it/pull/18141
* Fixed #12451 - Add file upload support to suppliers, changed notes field to text (from varchar) by @snipe in https://github.com/grokability/snipe-it/pull/18177
* Fixes #18138 - Fixed redirect to Previous Page from accessories edit screen by @Godmartinz in https://github.com/grokability/snipe-it/pull/18164
* Improved overdue checkin alert by @snipe in https://github.com/grokability/snipe-it/pull/18190
* Set a limit on number of users for group user loading by @snipe in https://github.com/grokability/snipe-it/pull/18191
* Fixes CVE-2025-64500: Incorrect parsing of PATH_INFO can lead to limited authorization by @joelpittet in https://github.com/grokability/snipe-it/pull/18193
* Fixes FD-51910 requestable asset model available quantity count by @Godmartinz in https://github.com/grokability/snipe-it/pull/18192
* Fixed #18189 - added option to pick the day the week starts on by @snipe in https://github.com/grokability/snipe-it/pull/18195
* Added #18185 added tag color to companies, suppliers, manufacturers, categories and departments by @snipe in https://github.com/grokability/snipe-it/pull/18201
* Fixed potential exception while filtering in users index endpoint by @marcusmoore in https://github.com/grokability/snipe-it/pull/18208
* Renamed L6009 -> L4736 and added correct L6009 by @chruoss in https://github.com/grokability/snipe-it/pull/18122
* Fixed #18202 - copy to clipboard adding spaces in FF by @snipe in https://github.com/grokability/snipe-it/pull/18213
* Fixed #18024 License Seat update/patch method by @Godmartinz in https://github.com/grokability/snipe-it/pull/18216
* Fixed #18114 - include declined item name, added app headers by @snipe in https://github.com/grokability/snipe-it/pull/18223
* Fixes FD-52005 - Adds null safe operators to unacceptable items report by @Godmartinz in https://github.com/grokability/snipe-it/pull/18217
* Fixes RB-19608 adds safe guards, adds Audit notification for google workspace, adds tests by @Godmartinz in https://github.com/grokability/snipe-it/pull/18226
* Added filter form request to validate JSON by @snipe in https://github.com/grokability/snipe-it/pull/18232
* Merging from dev by @snipe in https://github.com/grokability/snipe-it/pull/18233
* Bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/grokability/snipe-it/pull/18236

## New Contributors
* @chruoss made their first contribution in https://github.com/grokability/snipe-it/pull/18122

**Full Changelog**: https://github.com/grokability/snipe-it/compare/v8.3.5...v8.3.6