v8.8.2

> [!CAUTION]  
>  **This  version of Snipe-IT REQUIRES PHP 8.2.0 or greater, 8.4+ recommended.** PHP 8.2 is still in security release support until 31 Dec 2026, but let's not play that game - and some of the new features we're working on will require PHP 8.3+, so... get on that, ferreal!

Happy PHPocalypse for those who celebrate. 

We're sure you've heard about the PHP2SHELL exploit that was patched today. If not, you can [read a little about it here](https://grokstar.dev/security/2026/10/critical-php-security-update-php2shell/), but suffice to say it's BAD. Like, really really bad. 

<details>
<summary>Cringey millennial meme</summary>
<img width="480" height="360" alt="oh-shi" src="https://github.com/user-attachments/assets/5d86bb6f-01ca-44ec-8b66-e6b6501e6811" />
</details>


# Absolutely EVERYONE is encouraged to upgrade their version of PHP ASAFP

Our hosted fleet is fully patched, so those of you nestled in our loving arms are already good to go with nothing for you to do. This release fixes just a few small bugs, but it really a convenience release so that folks on docker can get a real tagged version instead of using `latest`.


## Docker Users

We don’t pin the patch versions in the docker images, so a rebuild will get whatever is latest for the distro.

Ubuntu back-patches their packages and then [gives them a sub version](https://ubuntu.com/blog/php2shell-vulnerability-fixes-available) (the 24.0.13) version, for example:

```shell
apt list --installed | grep php

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

libapache2-mod-php8.3/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php-common/now 2:93ubuntu2 all [installed,local]
php-memcached/now 3.2.0+2.2.0-4ubuntu3 amd64 [installed,local]
php8.3-bcmath/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-cli/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-common/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-curl/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-dev/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-gd/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-igbinary/now 3.2.13-1ubuntu3 amd64 [installed,local]
php8.3-ldap/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-mbstring/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-memcached/now 3.2.0+2.2.0-4ubuntu3 amd64 [installed,local]
php8.3-msgpack/now 1:2.2.0~rc2-3ubuntu1 amd64 [installed,local]
php8.3-mysql/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-opcache/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-readline/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-redis/now 5.3.7+4.3.0-3ubuntu1 amd64 [installed,local]
php8.3-xml/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-zip/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
```

Similarly, Alpine has back-patched [for this security vulnerability](https://wwwtest.alpinelinux.org/).

Check **inside the running container**, replacing `snipe-it` with the container name:

```
docker exec snipe-it php -v
```

To see the full Alpine package versions:
```
docker exec snipe-it sh -c 'apk info -v | grep -E "^php[0-9]+-"'
```

After updating, **recreate the container** so its web-serving PHP processes use the updated binaries.

## What's Changed
* Fixed #19870 and #19869 - small maintenance improvements by @snipe in https://github.com/grokability/snipe-it/pull/19871
* Fixed #19595 - numbers in custom fields exporting inconsistently by @snipe in https://github.com/grokability/snipe-it/pull/19872
* 🎥 Fixed #19778 - allow bulk scanner auditing by 2D bardcode by @snipe in https://github.com/grokability/snipe-it/pull/19874
* Fixed #19626 - respect lastname firstname order more thoroughly by @snipe in https://github.com/grokability/snipe-it/pull/19875
* Fixed potentially missing rows in license seats api endpoint by @marcusmoore in https://github.com/grokability/snipe-it/pull/19883
* Bulk Checkout: Fixes redirect option not persisting by @Godmartinz in https://github.com/grokability/snipe-it/pull/19881
* Fixed #19887 - use alpine 3.24 to get newer php by @markof88 in https://github.com/grokability/snipe-it/pull/19889
* Fixed #18508 Custom Fields: Allow cloning custom fieldsets by @marcusmoore in https://github.com/grokability/snipe-it/pull/19793


**Full Changelog**: https://github.com/grokability/snipe-it/compare/v8.8.1...v8.8.2