1
0
mirror of https://github.com/LaCasemate/fab-manager.git synced 2024-11-28 09:24:24 +01:00
fab-manager/CHANGELOG.md

971 lines
56 KiB
Markdown
Raw Normal View History

2020-03-02 08:59:43 +01:00
# Changelog Fab-manager
2020-07-13 17:27:18 +02:00
- Fix a bug: unable to seed the database
2020-07-01 10:54:57 +02:00
2020-06-30 16:24:00 +02:00
## v4.5.0 2020 June 30
- Search in the projets directly from PostgreSQL
2020-06-15 13:22:11 +02:00
- Ability to configure most of the settings from the admin's UI
- Ability to lock some settings from the environment
- Improved display of the icons alerting about an outdated version
2020-06-03 10:21:13 +02:00
- Improved mime-type checking (back & front)
- Dependency to ElasticSearch is now optional, if you disable the statistics
2020-06-03 10:21:13 +02:00
- Updated CarrierWave to 2.1.0
2020-06-09 16:23:07 +02:00
- Updated redis to v6, with alpine image
- Updated Sidekiq to 6.0.7
- Updated documentation
2020-06-30 16:11:12 +02:00
- Beta preview of the upgrade script
- Fix a bug: managers do not see the name of the user who reserved a slot
2020-06-15 17:46:35 +02:00
- Fix a bug: OpenAPI documentation is not available
- Fix a bug: summary of create training availability shows incorrect alert about slot splitting
- Fix a bug: invalid URL redirection for SSO login
2020-06-16 11:14:17 +02:00
- Fix a security issue: updated websocket-extensions to 0.1.5 to fix [CVE-2020-7663](https://nvd.nist.gov/vuln/detail/CVE-2020-7663)
2020-06-24 09:55:10 +02:00
- Fix a security issue: updated angular.js to 1.8 to fix [CVE-2020-7676](https://nvd.nist.gov/vuln/detail/CVE-2020-7676)
2020-06-29 08:03:59 +02:00
- Fix a security issue: updated rack to 2.2.3 to fix [CVE-2020-8184](https://nvd.nist.gov/vuln/detail/CVE-2020-8184)
- [TODO DEPLOY] add the `POSTGRESQL_LANGUAGE_ANALYZER` environment variable (see [doc/environment.md](doc/environment.md#POSTGRESQL_LANGUAGE_ANALYZER) for configuration details)
- [TODO DEPLOY] `rails fablab:setup:env_to_db`
2020-06-09 16:23:07 +02:00
- [TODO DEPLOY] `\curl -sSL https://raw.githubusercontent.com/sleede/fab-manager/master/scripts/redis-upgrade.sh | bash`
2020-06-29 12:00:01 +02:00
- [TODO DEPLOY] -> (only dev) upgrade redis to v6, you may be able to use the script above, depending on your installation
2020-06-01 09:51:13 +02:00
## v4.4.6 2020 June 01
2020-06-01 09:23:42 +02:00
- Fix a security issue: updated kaminari from 1.2.0 to 1.2.1 to fix [CVE-2020-11082](https://nvd.nist.gov/vuln/detail/CVE-2020-11082)
2020-05-27 10:17:16 +02:00
## v4.4.5 2020 May 27
2020-05-27 09:43:50 +02:00
- Fix a security issue: updated rails to 5.2.4.2 to fix [CVE-2020-8162](https://nvd.nist.gov/vuln/detail/CVE-2020-8162), [CVE-2020-8165](https://nvd.nist.gov/vuln/detail/CVE-2020-8165) and [CVE-2020-8166](https://nvd.nist.gov/vuln/detail/CVE-2020-8166)
2020-05-25 12:28:31 +02:00
## v4.4.4 2020 May 25
2020-05-25 11:48:25 +02:00
- Fix a security issue: updated puma from 3.12.4 to 3.12.6 to fix [CVE-2020-11077](https://nvd.nist.gov/vuln/detail/CVE-2020-11077) and [CVE-2020-11076](https://nvd.nist.gov/vuln/detail/CVE-2020-11076)
2020-05-25 11:37:44 +02:00
2020-05-25 11:23:39 +02:00
## v4.4.3 2020 May 25
- Fix a bug: recurrent availabilities do not keep the custom duration
- [TODO DEPLOY] `rails fablab:fix:availabilities_duration`
2020-05-19 13:51:59 +02:00
## v4.4.2 2020 May 19
2020-05-18 11:23:20 +02:00
- Upgraded to ruby 2.6.5
- Prevent admins from leaving their dedicated group
- Faraday was downgraded from 1.0 to 0.17 for better compatibility with elasticsearch-ruby 5 (#205 #196)
- Added [an option](doc/environment.md#ALLOW_INSECURE_HTTP) to allow usage in production without HTTPS
- Now using node.js instead of therubyracer for building javascript assets
- Removed dependency to has_secure_token to fix warnings about already initialized constant
- Fix a bug: when an admin logs on the subscription page, his view is broken
- Fix a bug: admin's members list shows the same members multiple times
- Fix a bug: when a new account is created through the sign-up modal, the role is not reported in the StatisticProfile (#196)
- Fix a bug: openAPI clients interface has a bugged behavior when creating/editing a client
- Fix a security issue: updated actionpack-page_caching from 1.1.0 to 1.2.2 to fix [CVE-2020-8159](https://nvd.nist.gov/vuln/detail/CVE-2020-8159)
- [TODO DEPLOY] `rails fablab:fix:role_in_statistic_profile`
- [TODO DEPLOY] `rails fablab:es:generate_stats[2019-06-13]` (run after the command above!)
2020-05-19 13:51:59 +02:00
- [TODO DEPLOY] -> (only dev) `rvm use && bundle install`
2020-05-12 20:31:53 +02:00
## v4.4.1 2020 May 12
- Prevent VersionCheckWorker from polluting the sidekiq stack in development
- Fix a bug: the subscription page is not available
- Fix a bug: users promoted to the administrator role are not in the admin group
2020-05-12 15:32:34 +02:00
- Fix a bug: menu separators are not visible
- [TODO DEPLOY] `rails fablab:maintenance:rebuild_stylesheet`
2020-05-12 11:13:47 +02:00
## v4.4.0 2020 May 12
- Manager: a new role between the member and the administrator
- The invoices list displays the operator in case of offline payment
2020-04-21 16:47:35 +02:00
- Interface to manage partners
- Ability to define, per availability, a custom duration for the reservation slots
- Ability to promote a user to a higher role (member > manager > admin)
- Ask for confirmation before booking a slot for a member without the required tag
- Corrected the documentation about BOOK_SLOT_AT_SAME_TIME
- Auto-adjusts text colors based on the selected theme colors
- Check password length during installation
- Fix a bug: accounting periods totals are wrong for periods closed after 2019-08-01
- Fix a bug: unable to change group if the previous was deactivated
- Fix a bug: unable to create events or trainings that are not multiples of SLOT_DURATION
- Fix a bug: unable to delete an unreserved event
- Fix a bug: "Free entry" label for events without reservation
- Fix a bug: updating a setting without any changes triggers an error
- Fix a bug: plan edition does not show the associated group
- Fix a bug: subscription page shows the groups without any active plans
- Fix a bug: cart price inconsistently updated after a subscription
- Fix a bug: background image of the profile is not shown and wrong menu hover color
- Fix a bug: do not show disabled groups and plans during availability creation
- Fix a security issue: updated jquery to fix [CVE-2020-11023](https://nvd.nist.gov/vuln/detail/CVE-2020-11023)
- [TODO DEPLOY] `rails db:migrate`
2020-04-14 16:33:54 +02:00
## v4.3.4 2020 April 14
- Improved version check
- Improved setup script for installations without nginx
- Changed some default values for new installations
- Database is now compatible with Fab-manager v1, to allow upgrades
2020-04-06 15:53:20 +02:00
- Updated documentation
- Changed In-Context pseudo-language to Zulu instead of Acholi
- Allow removing contacts from the about page
- Maintenance task to migrate notifications for Fab-manager v1
- Maintenance task to display the current version
- Now using MailCatcher with docker
- Fix a bug: installation without nginx does not remove the service from the docker-compose file
2020-04-06 16:59:28 +02:00
- Fix a bug: default twitter feed is invalid
- Fix a bug: default nginx configuration does not allows secure cookies
- Fix a bug: in-context translation is loading invalid locale for MessageFormat
- Fix a bug: invalid link to upgrade procedure
2020-04-07 15:19:41 +02:00
- Fix a bug: unable to access health endpoint
- Fix a bug: migration 20160704095606 cannot run due to GDPR refactoring
- Fix a bug: in-context translation is not working
- [TODO DEPLOY] -> (only dev) add mailcatcher to your [docker-compose.yml](docker/development/docker-compose.yml)
2020-04-01 18:05:05 +02:00
## v4.3.3 2020 April 1st
- Docker build will no longer embed development dependencies
- Updated instructions to set up a development environment
2020-03-11 14:45:58 +01:00
- Updated translations
- Removed `MESSAGEFORMAT_LOCALE` as it is now handled by make-plural
2020-03-31 16:12:32 +02:00
- Updated rails framework to v5.2
2020-03-23 15:57:40 +01:00
- Updated angular-translate
- Updated eslint
- Updated compass-rails & compass-core
2020-03-24 11:23:56 +01:00
- Renamed production documentation
2020-03-24 18:17:26 +01:00
- Syntax improvements in scss files
- Fix a bug: crediting a wallet w/ refund invoice prevent statistics generation (#196)
- Fix a bug: no statistics for subscriptions (#196)
- Fix a bug: invalid translation keys in closing accounting period interface
- Fix a bug: since PostgreSQL release 9.6.17, the new installations will fail to start complaining for missing password (#194)
- Fix a bug: missing translations for some error messages
- Fix a bug: invalid footprints in invoices fixtures
- Fix a bug: unable to export accounting data to ACD
- Fix a bug: report error on invalid encoding in members import
- Fix a bug: missing translation for subscriptions statistics > duration
- Fix a security issue: updated mkdirp to fix [CVE-2020-7598](https://nvd.nist.gov/vuln/detail/CVE-2020-7598)
2020-03-23 15:24:30 +01:00
- Fix a security issue: updated acorn to fix [CVE-2020-7598](https://nvd.nist.gov/vuln/detail/CVE-2020-7598)
2020-03-31 16:12:32 +02:00
- Fix a security issue: updated actionview to fix [CVE-2020-5267](https://nvd.nist.gov/vuln/detail/CVE-2020-5267)
- [TODO DEPLOY] `rails fablab:fix:avoirs_wallet_transaction`
- [TODO DEPLOY] `rails fablab:es:generate_stats[289]` only if you had missing statistics since some date ago (here 289 days)
2020-03-11 14:45:58 +01:00
2020-03-11 12:37:55 +01:00
## v4.3.2 2020 March 11
2020-03-09 12:12:42 +01:00
- Secure the session cookie
- Improved contextual help with a modal dialog
2020-03-09 15:36:44 +01:00
- Updated translations
2020-03-09 12:12:42 +01:00
- Refactored translations to help merging Crowdin PR
2020-03-11 12:24:53 +01:00
- Updated translation documentation
- Fix a bug: unable to create new availabilities if SLOT_DURATION is not defined
2020-03-09 12:12:42 +01:00
2020-03-04 17:58:25 +01:00
## v4.3.1 2020 March 04
2020-03-04 17:23:55 +01:00
- Updated user's manual for v4.3 (fr)
- Display user's manual when asking for help, if no tour is available
- Change style and pluralize the text of the slot division alert in new availability assistant
- Fix a bug: in feature tours, next and previous arrows may be broken on some systems
- Fix a bug: in the user's menu, two links to the personal wallet
- Fix a bug: spaces item is not at the correct position in the admin navigation menu
2020-03-04 12:24:01 +01:00
## v4.3.0 2020 March 04
2020-02-11 11:46:40 +01:00
- Ability to configure reservation slot restricted for plan subscribers
2020-02-11 10:48:29 +01:00
- Ability to configure the policy (allow or prevent) for members booking a machine/formation/event slot, if they already have a reservation the same day at the same time
- Ability to create and delete periodic calendar availabilities (recurrence)
2020-01-22 13:27:16 +01:00
- Ability to fully customize the home page
2020-01-06 17:11:38 +01:00
- Automated setup assistant
2019-10-29 09:59:21 +01:00
- An administrator can delete a member
2020-01-07 16:06:13 +01:00
- An event reservation can be cancelled, if reservation cancellation is enabled
2020-02-11 15:46:00 +01:00
- Delete multiple recurring events at one time
- Edit multiple recurring events at one time
2019-12-03 15:50:08 +01:00
- Ability to import iCalendar agendas in the public calendar, through URLs to ICS files (RFC 5545)
- Ability to configure the duration of a reservation slot, using `SLOT_DURATION`. Previously, only 60 minutes slots were allowed
2020-01-07 10:34:12 +01:00
- Ability to force the email validation when a new user registers. This is optionally configured with `USER_CONFIRMATION_NEEDED_TO_SIGN_IN`
2019-12-03 15:50:08 +01:00
- Display the scheduled events in the admin calendar, depending on `EVENTS_IN_CALENDAR` configuration.
- Display indications on required fields in new administrator form
2020-01-21 11:45:49 +01:00
- Administrators can to book machine/space/training slots, until 1 month in the past
2020-01-07 10:46:12 +01:00
- Filter members by non-validated emails or by inactive for 3 years
- Ability to customize the title of the link to the about page
- Feature tours for administrators that provides contextual help
2020-01-14 18:09:42 +01:00
- Automatic version check with security alerts
2020-01-15 10:52:18 +01:00
- Public endpoint to check the system health
- Configuration of phone number in members registration forms: can be required or optional, depending on `PHONE_REQUIRED` configuration
- Improved user experience in defining slots in the calendar management
- Improved notification email to the member when a rolling subscription is taken
- Notify all admins on the creation of a refund invoice
2020-03-02 09:13:00 +01:00
- Helper links between admin sections of the scheduling process
- Calendar management: improved legend display and visual behavior
2020-03-02 09:13:00 +01:00
- Reorganized left menu
- Create machine availabilities: select all/none in a click
2019-12-10 12:16:26 +01:00
- Prevent event reservation in the past [Taiga#127]
2020-01-15 13:01:43 +01:00
- Removed the need of twitter API keys to display the last tweet on the home page
- Various helper links to help newcomers creating their first items
2019-10-23 10:20:07 +02:00
- Handle Ctrl^C in upgrade scripts
- Updated moment-timezone
- Updated angular-ui-bootstrap from v0.14 to v1.2
2020-02-19 16:22:02 +01:00
- Updated caxlsx to 3.0.1 and rails_axlsx to rails_caxlsx
- Updated sidekiq to 5.2.8
2020-01-15 10:52:18 +01:00
- Option to disable developers analytics
- Added the a "cron" tab in Sidekiq web-ui to watch scheduled tasks
2020-01-06 17:11:38 +01:00
- Integration of Crowdin "in-context" translation management system
- Added freeCAD files as default allowed extensions
2019-12-03 16:32:59 +01:00
- Rake task to sync local users with Stripe
2019-12-16 10:39:48 +01:00
- Unified translations syntax to use ICU MessageFormat
2019-12-18 15:57:13 +01:00
- Refactored front-end translations keys with unified paths
- Updated and refactored README and documentations
2020-03-02 08:59:43 +01:00
- Harmonized Fab-manager typography and case
- Updated seeds file
- Fix a bug: unable to remove the picture from a training
2019-12-03 15:50:08 +01:00
- Fix a bug: no alerts on errors during admin creation
2019-12-02 12:35:01 +01:00
- Fix a bug: replaces all Time.now by DateTime.current to prevent time zones issues [Taiga#134]
2019-12-24 15:19:29 +01:00
- Fix a bug: logs are not printed in staging environment
2020-03-02 09:13:00 +01:00
- Fix a bug: theme colors must be selected twice before the changes became effective
- Fix a bug: datepicker does not work in profile completion screen
- Fix a bug: unable to select a group in profile completion screen
- Fix a bug: in some cases, bogus admin notification on profile completed
- Fix a bug: with Firefox browser, the texts in date inputs are shifted to the bottom
2020-03-02 08:53:44 +01:00
- Fix a bug: sometimes when browsing the invoices section, the translations are missing
- Fix a bug: first day of week is ignored in agendas (#169)
- Fix a bug: statistics page is bogus before the creation of the first plan
- Fix a bug: default invoice logo is broken and prevent invoice generation
2020-03-02 08:53:44 +01:00
- Fix a security issue: updated loofah to fix [CVE-2019-15587](https://nvd.nist.gov/vuln/detail/CVE-2019-15587)
- Fix a security issue: updated angular to 1.7.9 to fix [CVE-2019-10768](https://nvd.nist.gov/vuln/detail/CVE-2019-10768)
2020-03-04 12:12:44 +01:00
- Fix a security issue: updated puma to 3.12.4 to fix [GHSA-7xx3-m584-x994](https://github.com/advisories/GHSA-7xx3-m584-x994), [CVE-2020-5247](https://nvd.nist.gov/vuln/detail/CVE-2020-5247) and [CVE-2019-16254](https://nvd.nist.gov/vuln/detail/CVE-2020-5247)
2020-03-02 08:53:44 +01:00
- Fix a security issue: updated nokogiri to 1.10.8 to fix [CVE-2020-7595](https://nvd.nist.gov/vuln/detail/CVE-2020-7595)
- Fix a security issue: updated rack to 1.6.12 to fix [CVE-2019-16782](https://nvd.nist.gov/vuln/detail/CVE-2019-16782)
2019-10-30 15:39:30 +01:00
- [TODO DEPLOY] add the `SLOT_DURATION` environment variable (see [doc/environment.md](doc/environment.md#SLOT_DURATION) for configuration details)
- [TODO DEPLOY] add the `PHONE_REQUIRED` environment variable (see [doc/environment.md](doc/environment.md#PHONE_REQUIRED) for configuration details)
- [TODO DEPLOY] add the `EVENTS_IN_CALENDAR` environment variable (see [doc/environment.md](doc/environment.md#EVENTS_IN_CALENDAR) for configuration details)
2020-01-07 10:34:12 +01:00
- [TODO DEPLOY] add the `USER_CONFIRMATION_NEEDED_TO_SIGN_IN` environment variable (see [doc/environment.md](doc/environment.md#USER_CONFIRMATION_NEEDED_TO_SIGN_IN) for configuration details)
- [TODO DEPLOY] add the `BOOK_SLOT_AT_SAME_TIME` environment variable (see [doc/environment.md](doc/environment.md#BOOK_SLOT_AT_SAME_TIME) for configuration details)
2019-11-25 11:26:35 +01:00
- [TODO DEPLOY] -> (only dev) `bundle install && yarn install`
2020-01-15 11:40:08 +01:00
- [TODO DEPLOY] `rake db:migrate && rake db:seed`
2020-01-27 17:10:29 +01:00
- [TODO DEPLOY] `rake fablab:fix:name_stylesheet`
2019-10-30 16:36:30 +01:00
2019-10-30 15:58:50 +01:00
## v4.2.4 2019 October 30
2019-10-30 15:44:00 +01:00
- Fix a bug: in some cases, the invoices were not generated after deploying v4.2.0+. This can occurs if VAT was changed/enabled during the application life (#156)
2019-10-30 15:45:54 +01:00
- [TODO DEPLOY] `rake fablab:maintenance:regenerate_invoices[2019,10]` only if you had download issues with your last invoices
2019-10-23 10:20:07 +02:00
2019-10-22 14:46:18 +02:00
## v4.2.3 2019 October 22
- Ability to set the default view in project gallery: openLab or local
- Fix a bug: admins can't edit members projects
- [TODO DEPLOY] add the `OPENLAB_DEFAULT` environment variable (see [doc/environment.md](doc/environment.md#OPENLAB_DEFAULT) for configuration details)
2019-10-22 12:51:56 +02:00
## v4.2.2 2019 October 22
- Fix a bug: PostgreSQL upgrade script won't run on some systems
2019-10-21 16:13:56 +02:00
## v4.2.1 2019 October 21
- Updated axlsx gem to caxlsx 3.0
2019-10-21 16:13:56 +02:00
- Updated axlsx_rails to 0.6.0
- Fix a security issue: updated rubyzip to 1.3.0 to fix [CVE-2019-16892](https://nvd.nist.gov/vuln/detail/CVE-2019-16892)
2019-10-21 15:30:39 +02:00
## v4.2.0 2019 October 21
2019-10-09 09:52:58 +02:00
- Upgraded PostgreSQL from 9.4 to 9.6
- Optional reCaptcha checkbox in sign-up form
- Ability to configure and export the accounting data to the ACD accounting software
- Compute the VAT per item in each invoices, instead of globally
2019-09-19 16:26:32 +02:00
- Use Alpine Linux to build the Docker image (#147)
2019-10-02 16:08:25 +02:00
- Updated omniauth & omniauth-oauth2 gems
- Ability to set project's CAO attachement maximum upload size
- Ability to bulk-import members from a CSV file
- Ability to disable invoices generation and interfaces
- Added a known issue to the README (#152)
- Ability to fully rebuild the projets index in ElasticSearch with `rake fablab:es:build_projects_index`
- Ability to configure SMTP connection to use SMTP/TLS
2019-10-21 11:55:58 +02:00
- Updated user's manual for v4.2 (fr)
- Fix a bug: invoices with total = 0, are marked as paid on site even if paid by card
- Fix a bug: after disabling a group, its associated plans are hidden from the interface
- Fix a bug: in case of unexpected server error during stripe payment process, the confirm button is not unlocked
- Fix a bug: create a plan does not set its name
- Fix a bug: unable to dissociate the last machine from a formation
- Fix a bug: in profile_complete form, the user's group is not selected by default
2019-10-21 16:13:56 +02:00
- Fix a bug: missing asterisks on some required fields in profile_complete form
- Fix a bug: public calendar won't show anything if the current date range include a reserved space availability (#151)
- Fix a bug: invoices list is not shown by default in "manage invoices" section
- Fix a bug: unable to run rake `fablab:es:*` tasks due to an issue with gem faraday 0.16.x (was updated to 0.17)
- Fix a bug: unauthorized user can see the edit project form
2019-10-21 16:13:56 +02:00
- Fix a bug: do not display each days in invoices for multiple days event reservation
2019-10-02 16:08:25 +02:00
- Fix a security issue: fixed [CVE-2015-9284](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9284)
- [TODO DEPLOY] -> (only dev) `yarn install` and `bundle install`
2019-10-02 16:10:54 +02:00
- [TODO DEPLOY] -> (only dev) configure `DEFAULT_HOST: 'localhost:5000'` and `DEFAULT_PROTOCOL: http` in [application.yml](config/application.yml.default)
2019-10-22 12:51:56 +02:00
- [TODO DEPLOY] `rake db:migrate`
- [TODO DEPLOY] add `- ${PWD}/imports:/usr/src/app/imports` in the volumes list of your fabmanager service in [docker-compose.yml](docker/docker-compose.yml)
2019-10-22 12:51:56 +02:00
- [TODO DEPLOY] add the `RECAPTCHA_SITE_KEY` and `RECAPTCHA_SECRET_KEY` environment variables (see [doc/environment.md](doc/environment.md#RECAPTCHA_SITE_KEY) for configuration details)
- [TODO DEPLOY] add the `MAX_CAO_SIZE` environment variable (see [doc/environment.md](doc/environment.md#MAX_CAO_SIZE) for configuration details)
- [TODO DEPLOY] add the `MAX_IMPORT_SIZE` environment variable (see [doc/environment.md](doc/environment.md#MAX_IMPORT_SIZE) for configuration details)
- [TODO DEPLOY] add the `FABLAB_WITHOUT_INVOICES` environment variable (see [doc/environment.md](doc/environment.md#FABLAB_WITHOUT_INVOICES) for configuration details)
- [TODO DEPLOY] add the `SMTP_TLS` environment variable (see [doc/environment.md](doc/environment.md#SMTP_TLS) for configuration details)
2020-02-12 18:15:44 +01:00
- [TODO DEPLOY] add the `FABLAB_WITHOUT_WALLET` environment variable (see [doc/environment.md](doc/environment.md#FABLAB_WITHOUT_WALLET) for configuration details)
2019-10-22 12:51:56 +02:00
- [TODO DEPLOY] **IMPORTANT** Please read [postgres_upgrade.md](doc/postgres_upgrade.md) for instructions on upgrading PostgreSQL.
2019-08-01 13:07:05 +02:00
2019-10-21 15:30:39 +02:00
## v4.1.1 2019 September 20
2019-09-20 15:52:16 +02:00
- Fix a bug: api/reservations#index was using user_id instead of statistic_profile_id
- Fix a bug: event_service#date_range method, test on all_day was never truthy
- Fix a bug: sidekiq 5 does not have delay_for method anymore, uses perform_in instead
2019-09-20 15:52:16 +02:00
2019-09-12 12:37:02 +02:00
## v4.1.0 2019 September 12
2019-09-12 11:55:53 +02:00
- Handling the Strong-Customer Authentication (SCA) for online payments
- Ability to disable online payments though an environment variable
- Log changes in Invoices or InvoiceItems records for better handling of accounting certification issues
2019-09-12 12:31:15 +02:00
- Updated virtual development environment (#142)
- Upgrade dev environments from ruby 2.3.6 to 2.3.8 (#143)
2019-09-12 11:55:53 +02:00
- Upgraded the stripe API from 2015-10-16 to 2019-08-14
- Upgraded stripe-js from v2 to v3
- Fix a bug: Users with role 'member' cannot download their invoices
- Fix a bug: Wallet credit inputs does not allow to put zeros at the end of the decimal part of the amount
- Fix a bug: unable to create the first user because role member was missing
- Fix a bug: disabled groups still appears as available in sign-up modal
2019-09-12 12:31:15 +02:00
- Fix a bug: extend a current subscription for a member, does not reset his credits (#145)
- Fix a bug: once a reservation was made, the reminder of the paid price is always 0 if a coupon was used
- Fix a security issue: updated nokogiri to 1.10.4 to fix [CVE-2019-5477](https://nvd.nist.gov/vuln/detail/CVE-2019-5477)
- Fix a security issue: updated eslint-utils to 1.4.2 to fix [GHSA-3gx7-xhv7-5mx3](https://github.com/mysticatea/eslint-utils/security/advisories/GHSA-3gx7-xhv7-5mx3)
- Fix a security issue: updated devise to 4.7.1 to fix [CVE-2019-16109](https://nvd.nist.gov/vuln/detail/CVE-2019-16109)
- [TODO DEPLOY] `rake db:migrate`
- [TODO DEPLOY] add the `FABLAB_WITHOUT_ONLINE_PAYMENT` environment variable (see [doc/environment.md](doc/environment.md) for configuration details)
- [TODO DEPLOY] -> (only dev) `rvm install ruby-2.3.8 && rvm use && bundle install`
2019-08-14 15:34:12 +02:00
## v4.0.4 2019 August 14
2019-09-12 12:37:02 +02:00
2019-09-04 09:39:04 +02:00
- Fix a bug: #140 VAT rate is erroneous in invoices.
Note: this bug was introduced in v4.0.3 and requires (if you are on v4.0.3) to regenerate the invoices since August 1st
2019-08-14 15:34:12 +02:00
- [TODO DEPLOY] `rake fablab:maintenance:regenerate_invoices[2019,8]`
2019-08-01 12:50:14 +02:00
## v4.0.3 2019 August 01
- Fix a bug: no user can be created after the last member was deleted
2019-07-29 12:07:22 +02:00
- Fix a bug: unable to generate a refund (Avoir)
- Fix a bug: a newly generated refund is displayed as broken (unchained record) even if it is correctly chained
2019-08-01 11:31:56 +02:00
- Fix a bug: when regenerating invoices PDF, VAT history is ignored
- Fix a security issue: updated lodash to 4.17.14 to fix [CVE-2019-10744](https://github.com/lodash/lodash/pull/4336)
- Fix a security issue: updated mini_magick to 4.9.4 to fix [CVE-2019-13574](https://nvd.nist.gov/vuln/detail/CVE-2019-13574)
- Fix some security issues: updated bootstrap to 3.4.1 to fix [CVE-2019-8331](https://nvd.nist.gov/vuln/detail/CVE-2019-8331), [CVE-2019-14041](https://nvd.nist.gov/vuln/detail/CVE-2018-14041), and 3 other low severity CVE
- Fix some security issues: updated sidekiq to 5.2.7 to fix XSS and CRSF issues
- Removed dependency to jQuery UI
- Updated angular-xeditable, to remove dependency to jquery 1.11.1
2019-08-01 11:31:56 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install`
2019-07-10 12:26:33 +02:00
## v4.0.2 2019 July 10
- Fix a bug: unable to export members list
- Fix a bug: unable to export reservations or subscriptions to excel
- Fix a bug: projects RSS feed fails to render
- Fix a bug: abuses reports are not notified to admins
- Fix a bug: SubscriptionExpireWorker cannot run due to wrong expiration column in SQL query
- Fix a bug: OpenlabWorker is crashing with message undefined method `profile' for StatisticProfile
- Prevent invalid invoice logo from crashing the InvoiceWorker
2019-06-26 12:58:53 +02:00
- Updated user's manual for v4 (fr)
- Optimized Dockerfile to speed up build time
2019-06-17 15:32:46 +02:00
## v4.0.1 2019 June 17
- Fix a bug: migration 20190523140823 may not run if an admin was deleted
- Fix a bug: cookie consent modal is not shown
- Fix a bug: prevent task migrate_pdf_invoices_folders from raising an error when run with no invoices
- Documentation about dumping the database
2019-06-17 12:34:12 +02:00
## v4.0.0 2019 June 17
- Configurable privacy policy and data protection officer
- Alert users on privacy policy update
2019-05-21 12:25:30 +02:00
- Abuses reports management panel
2019-06-03 14:26:53 +02:00
- Refactored user's profile to keep invoicing data after an user was deleted
2019-06-13 12:56:04 +02:00
- Refactored user's profile to keep statistical data after an user was deleted
- Ability to delete an user (fixes #129 and #120)
2020-02-12 18:15:44 +01:00
- Ask user acceptance before deposing analytics cookies
2019-04-18 11:35:09 +02:00
- Fix a bug: (spanish) some translations are not loaded correctly
- Fix a bug: some users may not appear in the admin's general listing
2019-05-07 15:56:23 +02:00
- Fix a bug: Availabilities export report an erroneous number of reservations for machine availabilities (#131)
- Fix a bug: close period reminder is sent before the first invoice's first anniversary
- Fix a bug: Canceled reservations are not removed from statistics (#133)
2019-04-18 11:35:09 +02:00
- Improved translations syntax according to YML specifications
- Refactored some Ruby code to match style guide
- [TODO DEPLOY] `rake fablab:fix:users_group_ids`
- [TODO DEPLOY] `rake db:migrate`
2019-06-12 14:37:05 +02:00
- [TODO DEPLOY] `rake db:seed`
2019-06-12 16:06:30 +02:00
- [TODO DEPLOY] `rake fablab:setup:migrate_pdf_invoices_folders`
- [TODO DEPLOY] `rake fablab:maintenance:delete_inactive_users` (will prompt for confirmation)
2019-06-13 11:28:55 +02:00
- [TODO DEPLOY] `rake fablab:maintenance:rebuild_stylesheet`
2019-05-27 12:50:19 +02:00
2019-05-27 12:43:26 +02:00
## v3.1.2 2019 May 27
- Fix a bug: when generating an Avoir at a previous date, the resulting checksum may be invalid
- Fix a bug: updating a setting does not chain new values
2019-05-06 16:56:21 +02:00
- Fix a security issue: updated to jquery 3.4.1 to fix [CVE-2019-11358](https://nvd.nist.gov/vuln/detail/CVE-2019-11358)
- [TODO DEPLOY] `rake fablab:setup:chain_invoices_items_records`
- [TODO DEPLOY] `rake fablab:setup:chain_invoices_records`
- [TODO DEPLOY] `rake fablab:setup:chain_history_values_records`
- [TODO DEPLOY] -> (only dev) yarn install
2019-04-08 17:06:43 +02:00
## v3.1.1 2019 April 8
- Fix a bug: when paying a reservation with wallet, the invoice footprint is not correctly updated
2019-04-08 12:40:52 +02:00
## v3.1.0 2019 April 8
2019-04-04 11:38:34 +02:00
- Asynchronously generate accounting archives
2019-04-03 16:56:47 +02:00
- Improved end-user message when closing an accounting period
- Improved date checks before closing an accounting period
2019-04-04 17:28:29 +02:00
- Paginate list of coupons
2019-04-04 18:00:19 +02:00
- Allow filtering coupons list
2020-02-26 10:19:43 +01:00
- Fix a bug: when VAT has changed during Fab-manager's lifecycle, this may not be reflected in archives
- Fix a bug: using a quote in event category's name results in angular $parse:syntax Error
2019-04-01 16:06:13 +02:00
## v3.0.1 2019 April 1st
- Insert archive generation datetime in chained.sha256
- Updated documentation and diagrams
2016-05-02 17:14:21 +02:00
2019-03-28 11:33:11 +01:00
## v3.0.0 2019 March 28
2019-03-26 15:41:45 +01:00
- (France) Compliance with Article 88 of Law No. 2015-1785 and BOI-TVA-DECLA-30-10-30-20160803 : Certification of cash systems
- Ability for an admin to view and close accounting periods
2019-03-28 12:31:08 +01:00
- Secured archives for closed accounting periods
- Securely chained invoices records with visual control of data integrity
- Notify an user if the available disk space reaches a configured threshold
- Invoices generated outside of production environment will be watermarked
- Keep track of currently logged user on each generated invoice
- Fix a bug: unable to add a file attachment to an event
- Fix a security issue: updated to devise 4.6.0 to fix [CVE-2019-5421](https://github.com/plataformatec/devise/issues/4981)
- Fix a security issue: updated Rails to 4.2.11.1 to fix [CVE-2019-5418](https://groups.google.com/forum/#!topic/rubyonrails-security/pFRKI96Sm8Q) and [CVE-2019-5419](https://groups.google.com/forum/#!topic/rubyonrails-security/GN7w9fFAQeI)
2019-03-26 15:41:45 +01:00
- Removed deprecated Capistrano deployment system
- Rebranded product from "La Casemate"
- Refactored some pieces of Ruby code, according to style guide
2019-03-26 17:23:12 +01:00
- Added asterisks on required fields in sign-up form
2019-04-08 12:33:22 +02:00
- [TODO DEPLOY] /!\ Before deploying, you must check (and eventually) correct your VAT history using the rails console. Missing rates can be added later but dates and rates (including date of activation, disabling) MUST be correct. These values are very likely wrong if your installation was made prior to 2.8.0 with VAT enabled. Other cases must be checked too.
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) if applicable, you must first downgrade bundler to v1 `gem uninstall bundler --version=2.0.1 && gem install bundler --version=1.7.3 && bundle install`
- [TODO DEPLOY] if you have changed your VAT rate in the past, add its history into database. You can use a rate of "0" to disable VAT. Eg. `rake fablab:setup:add_vat_rate[20,2017-01-01]`
2019-06-17 12:29:15 +02:00
- [TODO DEPLOY] `rake db:migrate`
2019-03-26 15:41:45 +01:00
- [TODO DEPLOY] `rake fablab:setup:set_environment_to_invoices`
- [TODO DEPLOY] `rake fablab:setup:chain_invoices_items_records`
- [TODO DEPLOY] `rake fablab:setup:chain_invoices_records`
- [TODO DEPLOY] `rake fablab:setup:chain_history_values_records`
- [TODO DEPLOY] add `DISK_SPACE_MB_ALERT` and `SUPERADMIN_EMAIL` environment variables (see [doc/environment.md](doc/environment.md) for configuration details)
2020-02-26 10:19:43 +01:00
- [TODO DEPLOY] add the `accounting` volume to the Fab-manager's image in [docker-compose.yml](docker/docker-compose.yml)
2019-03-18 16:35:03 +01:00
## v2.8.4 2019 March 18
- Limit members search to 50 results to speed up queries
- Refactored rake tasks to use namespaces and descriptions
- Fix a bug: unable to create a new oAuth 2.0 provider
- Fix a bug: application in unavailable if a SSO is active
2019-02-25 10:07:49 +01:00
- Fix a security issue: dependency bootstrap < 4.3.1 has an XSS vulnerability as described in [CVE-2019-8331](https://blog.getbootstrap.com/2019/02/13/bootstrap-4-3-1-and-3-4-1/)
- Fixed missing translations in authentication providers form
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install`
2019-01-29 11:50:54 +01:00
## v2.8.3 2019 January 29
- Added user's manual (fr)
2019-01-22 11:24:00 +01:00
- Fix a bug: unable to run rails console
- Fix a bug: some reservation slots are not shown on the user calendars (#127)
2019-01-22 11:24:00 +01:00
2019-01-22 10:03:35 +01:00
## v2.8.2 2019 January 22
2019-01-17 09:53:28 +01:00
- Removed ability to disable invoicing for an user
2019-01-29 11:50:54 +01:00
- Improved user autocompletion when using multiple words
- Refactored API controllers
2019-01-17 09:53:28 +01:00
- Fixed a missing translation in plan form
- Fix a bug: error handling on password recovery
- Fix a bug: error handling on machine attachment upload
- Fix a bug: first day of week is ignored in statistics custom filter
2019-01-08 17:34:12 +01:00
- Fix a bug: rails DSB locale is invalid
- Fix a bug: unable to delete an admin who has changed a setting
- Fix a bug: unable to create/edit a plan of 12 months or 52 weeks
- Fix a bug: Unable to search in user autocomplete fields
- Fix a bug: Invalid translation in new partner modal
- Refactored frontend invoices translations
- Updated RailRoady 1.4.0 to 1.5.3
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install`
2019-01-02 15:53:51 +01:00
## v2.8.1 2019 January 02
- Fix ES upgrade: when docker-compose file is using ${PWD}, the ES config volume is attached to the wrong container
- Fixed environment documentation references for external locales
2019-01-02 17:14:53 +01:00
- Fixed missing translations (EN & ES) and improved others (ES)
- Fix a bug: unable to fetch projects from OpenProjects (#126)
2019-01-02 16:49:09 +01:00
- Fix a bug: unable to create or edit a plan
2018-12-27 15:02:22 +01:00
## v2.8.0 2018 December 27
2018-12-12 13:49:14 +01:00
- Refactored subscriptions to keep track of the previous ones
- Refactored settings to keep track of the previous values (notably VAT rate)
2018-12-12 13:49:14 +01:00
- Improved automated tests suite
- Added Rubocop gem to the Gemfile (ruby syntax checking)
2018-12-18 10:55:28 +01:00
- Added badges to README
2019-02-25 10:07:49 +01:00
- Fix a security issue: dependency ActiveJob < 4.2.11 has a vulnerability as described in [CVE-2018-16476](https://nvd.nist.gov/vuln/detail/CVE-2018-16476)
2018-12-12 13:49:14 +01:00
- [TODO DEPLOY] `rake db:migrate`
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install`
2018-12-12 13:49:14 +01:00
2019-04-08 17:06:43 +02:00
## v2.7.4 2018 December 04
2018-12-04 09:38:39 +01:00
- Applied Rubocop rules to some ruby files
- Prevent running elastic-upgrade script with wrong awk version
- Fix ElasticSearch upgrade script
- Setup ElasticSearch configuration files for new installations
2018-12-03 16:15:34 +01:00
- Improved ES upgrade documentation
2019-04-08 17:06:43 +02:00
## v2.7.3 2018 December 03
2018-12-03 11:44:26 +01:00
- Updated Uglifier gem to support ES6 syntax
2019-02-13 12:59:28 +01:00
- Fix rake task `fablab:es:build_projects_index` for ElasticSearch > 1.7
2018-11-29 18:19:59 +01:00
- Fix Dockerfile: yarn was not setup correctly
2018-12-03 11:44:26 +01:00
- Fix: unable to build assets
2018-11-29 18:06:54 +01:00
2019-04-08 17:06:43 +02:00
## v2.7.2 2018 November 29
2018-11-29 16:56:16 +01:00
- Allow running the ElasticSearch upgrade script while being root
- Fix an issue with ES upgrade script, preventing reindexing in some cases
- Improved ES upgrade documentation
2019-04-08 17:06:43 +02:00
## v2.7.1 2018 November 27
2018-11-27 17:27:49 +01:00
- Updated angular.js to 1.6
- Fix a security issue: dependency jQuery < 3.0.0 has a vulnerability as described in [CVE-2015-9251](https://nvd.nist.gov/vuln/detail/CVE-2015-9251)
- Fix a security issue: dependency moment < 2.11.2 has a vulnerability as described in [CVE-2016-4055](https://nvd.nist.gov/vuln/detail/CVE-2016-4055)
- Fix a security issue: dependency moment < 2.19.3 has a vulnerability as described in [CVE-2017-18214](https://nvd.nist.gov/vuln/detail/CVE-2017-18214)
- Fix a security issue: dependency RubyZip < 1.1.2 has a vulnerability as described in [CVE-2018-1000544](https://nvd.nist.gov/vuln/detail/CVE-2018-1000544)
- Fix a security issue: dependency ffi < 1.9.24 has a vulnerability as described in [CVE-2018-1000201](https://nvd.nist.gov/vuln/detail/CVE-2018-1000201)
2019-04-08 17:06:43 +02:00
## v2.7.0 2018 November 27
2018-11-27 10:14:46 +01:00
- Nom using standard [package.json](package.json) file to save application version number
2018-11-22 17:09:14 +01:00
- Now using Yarn instead of deprecated Bower as the front-end dependencies manager
2018-11-21 15:48:45 +01:00
- Migrated front-end application from CoffeeScript to ECMAScript 6 (JS)
- Integration of Eslint and Rubocop coding rules
2018-11-26 09:44:40 +01:00
- Fix a bug: on small screens, display of button "change group" overflows
- Fix a bug: creating a transverse plan, create one for the hidden admins group
2018-11-26 16:50:47 +01:00
- Fix a bug: on some classical docker installations, the elastic-upgrade.sh script won't run successfully
- Fix a security issue: dependency rack has a vulnerability as described in [CVE-2018-16471](https://nvd.nist.gov/vuln/detail/CVE-2018-16471)
- Fix a security issue: dependency loofah has a vulnerability as described in [CVE-2018-16468](https://github.com/flavorjones/loofah/issues/154)
- Updated documentation
2018-10-15 16:51:44 +02:00
2018-10-04 12:04:47 +02:00
## v2.6.7 2018 October 4
2018-10-04 12:02:16 +02:00
- Ability to configure SMTP more precisely
- Typo correction in README (#121)
- [TODO DEPLOY] add the following environment variables: `SMTP_AUTHENTICATION, SMTP_ENABLE_STARTTLS_AUTO, SMTP_OPENSSL_VERIFY_MODE`
2018-09-18 16:45:07 +02:00
## v2.6.6 2018 September 18
2018-09-06 11:22:23 +02:00
- Ability to parametrize machines order on the booking page
- Ability to set a neutral gender for the fablab's title (#108)
2019-02-13 12:59:28 +01:00
- Fix a bug: rake task `fablab:fix:categories_slugs` bash interpretation error
2018-09-18 14:38:43 +02:00
- Fix a bug: file inputs filled with long filenames render improperly with an overflow
- Fix a bug: title concordance radio buttons render improperly on smaller screens
2018-09-18 16:45:07 +02:00
- Improved verifications in ElasticSearch upgrade script
2018-09-06 11:22:23 +02:00
- [TODO DEPLOY] `rake fablab:fix:categories_slugs`
- [TODO DEPLOY] `rake db:seed`
2018-09-06 11:22:23 +02:00
2018-07-24 14:44:14 +02:00
## v2.6.5 2018 July 24
2018-06-04 12:03:46 +02:00
- Upgraded ElasticSearch from 1.7 to 5.6
- Ability to display the name of the user who booked a machine slot to other members
2018-03-27 10:17:41 +02:00
- Updated OmniAuth to fix Hashie warnings [omniauth#872](https://github.com/omniauth/omniauth/issues/872)
- Fix a bug: unable to filter statistics from age 0
- Fix a bug: events categories are not reported correctly in statistics
2018-03-27 10:17:41 +02:00
- Fix a security issue: dependency loofah has a vulnerability as described in [CVE-2018-8048](https://github.com/flavorjones/loofah/issues/144)
2018-04-30 07:57:21 +02:00
- Fix a security issue: rails-html-sanitizer < 1.0.3 has a security vulnerability described in [CVE-2018-3741](https://nvd.nist.gov/vuln/detail/CVE-2018-3741)
2018-07-12 14:26:21 +02:00
- Fix a security issue: nokogiri < 1.8.2 has a security vulnerability as described in [CVE-2017-18258](https://nvd.nist.gov/vuln/detail/CVE-2017-18258)
2018-07-12 14:34:20 +02:00
- Fix a security issue: sprockets < 2.12.5 has a security vulnerability as described in [CVE-2018-3760](https://nvd.nist.gov/vuln/detail/CVE-2018-3760)
- Ensure elasticSearch indices are started with green status on new installations
2018-07-24 11:13:05 +02:00
- Refactored User.to_json to remove code duplication
2020-02-12 18:15:44 +01:00
- Fixed syntax and typos in README
- [TODO DEPLOY] **IMPORTANT** Please read [elastic_upgrade.md](doc/elastic_upgrade.md) for instructions on upgrading ElasticSearch.
- [TODO DEPLOY] `rake fablab:fix:categories_slugs`
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install`
- [TODO DEPLOY] `rake db:seed`
2018-03-15 15:07:03 +01:00
## v2.6.4 2018 March 15
- Ability to share trainings on social medias
- Fix a bug: a reminder notification were sent for canceled reservations
- Fix a bug: sharing an event on facebook has HTML tags in the description
2020-02-26 10:19:43 +01:00
- Set Stripe API version, all Fab-managers has to use this version because codebase relies on it
2018-03-27 10:17:41 +02:00
- Fix a security issue: OmniAuth < 1.3.2 has a security vulnerability described in [CVE-2017-18076](https://nvd.nist.gov/vuln/detail/CVE-2017-18076)
- Fix a security issue: rack-protection < 1.5.5 has a security vulnerability described in [CVE-2018-1000119](https://nvd.nist.gov/vuln/detail/CVE-2018-1000119)
2020-02-12 18:15:44 +01:00
- Fix a security issue: http gem < 0.7.3 has a security vulnerability described in [CVE-2015-1828](https://nvd.nist.gov/vuln/detail/CVE-2015-1828), updates twitter gem as a dependency
2018-01-02 10:26:04 +01:00
## v2.6.3 2018 January 2
- Fix a bug: wrong docker-compose url in setup script (#98)
- Typo correction in docker README (#97)
2017-12-21 11:32:13 +01:00
## v2.6.2 2017 December 21
- Support for internet explorer 11
- Fix a bug: events order in public list
2017-12-21 11:49:51 +01:00
- Fix a bug: unable to create a training credit
2017-12-21 11:32:13 +01:00
- Corrected typos in documentation (#96)
2017-12-21 12:00:11 +01:00
- Improved test suite coverage
2017-12-21 11:32:13 +01:00
2017-12-14 16:46:10 +01:00
## v2.6.1 2017 December 14
2017-11-15 10:20:23 +01:00
- Updated Portuguese translations (#91)
- Added Spanish translations (#87)
- Added Central Africa & Cameroon currency symbol (#90)
- Fix nginx configuration to allow initial Let's Encrypt configuration (#92)
- Events: open api and monitor improvement (#79)
- Fix a bug: refund an invoice with a subscription and disabling it a the same time cause the resulting PDF to display the wrong dates
2017-12-14 16:46:10 +01:00
- Fix a bug: unable to successfully run the test suite after wednesday
2017-12-13 15:28:57 +01:00
- Fix a security issue: in development environments, web-console has a vulnerability as described in CVE-2015-3224
2017-11-15 10:20:23 +01:00
- Fixed deploy instructions with docker-compose
2017-12-14 14:33:49 +01:00
- Updated docker installation instructions
2017-11-15 10:20:23 +01:00
2017-11-13 13:16:24 +01:00
## v2.6.0 2017 November 13
2017-09-18 11:02:27 +02:00
- Additional button to delete a slot, allowing to delete slots masked by others
- Removed cross hack in full-calendar
- Confirmation before slot delete
- Confirmation and error handling while deleting an event
2017-10-11 16:10:18 +02:00
- Ability to disable groups, machines, plans, spaces and trainings
- Improved responsiveness of machines and spaces lists
2017-11-02 15:33:56 +01:00
- Allow setting of decimal prices
2017-09-18 11:02:27 +02:00
- Fix a typo: error message while creating a machine slot
2017-09-25 15:48:21 +02:00
- Fix a bug: events pagination is bogus in admin's monitoring when selecting non default filter
- Fix a bug: social sharing failed for projects with an underscore in their name
- Fix a bug: html tags of events description not stripped when sharing on social network
2017-09-26 16:32:55 +02:00
- Fix a bug: event, space, training or machine main image on description page is deformed on small devices
2017-11-13 13:16:24 +01:00
- Fix a bug: profile completion of non-SSO imported users trigger a fuzzy email
2017-10-11 16:10:18 +02:00
- Fix a bug: creation of negative credits
- Fix a bug: unable to display profiles of users whom any reservation is associated with a deleted object
2017-09-18 11:02:27 +02:00
- Updated test data to allow passing test suite
2017-11-13 12:22:33 +01:00
- Upgraded rails minor version
2017-10-11 16:52:46 +02:00
- [TODO DEPLOY] `rake db:migrate`
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install`
2017-09-18 11:02:27 +02:00
2017-09-12 08:43:28 +02:00
## v2.5.14 2017 September 12
- Fix a bug: Error message in fix:recursive_events_over_DST failed and does not report events to check
2017-09-11 16:39:00 +02:00
## v2.5.13 2017 September 11
2017-09-11 16:37:21 +02:00
2020-02-12 18:15:44 +01:00
- Fix a bug: ActiveRecord::RecordNotFound when running rake task fix:recursive_events_over_DST with recursive events which the initial event was deleted
2017-09-11 16:37:21 +02:00
2017-09-11 14:17:26 +02:00
## v2.5.12 2017 September 11
2017-09-11 14:10:52 +02:00
- Fix a bug: Long words overflow from homepage's events blocks
2020-02-12 18:15:44 +01:00
- Fix a bug: ActiveRecord::RecordNotFound when running rake task fix:recursive_events_over_DST with non-recursive events
2017-09-07 15:02:10 +02:00
## v2.5.11 2017 September 7
2017-08-24 12:47:51 +02:00
- Added tooltip concerning images insertion while configuring the about page
- Ability for admins to configure the maximum visibility for availabilities reservation
2017-08-30 14:57:06 +02:00
- Administrators isolation in a special group
- In login modal, displays an alert if Caps lock key is pressed
- Prevent creation of irregular yearly plans (eg. 12 months)
2017-09-07 10:54:42 +02:00
- Ability to lock machine, space or training availability slots, to prevent new reservations on them
- Fix a bug: admins cannot see all availabilities for spaces in reservation calendar when a user is selected
2017-08-24 12:47:51 +02:00
- Fix a bug: missing translation after payment in english and portuguese
- Fix a bug: invalid notification when sending monetary coupon to users
2017-08-30 14:57:06 +02:00
- Fix a bug: unable to delete group "standard"
- Fix a bug: recursive events crossing Daylight Saving Time period changes are shifted by 1 hour
- Fix a bug: unable to see availabilities in the public calendar when browsing as a visitor (non-connected)
- Updated puma for compatibility with openSSL > 1.0
2017-08-24 16:08:42 +02:00
- Documented installation on ArchLinux
2017-09-11 12:29:22 +02:00
- [TODO DEPLOY] `rake db:migrate`
2017-08-30 14:57:06 +02:00
- [TODO DEPLOY] `rake db:seed` then `rake fablab:fix:migrate_admins_group`
2017-09-07 15:02:10 +02:00
- [TODO DEPLOY] `rake fablab:fix:recursive_events_over_DST`
2017-08-24 12:47:51 +02:00
2017-08-16 12:07:08 +02:00
## v2.5.10 2017 August 16
- Updated axlsx gem for excel files generation, possible fix for #489
- Fix a bug: on some linux hosts, a filename too long error is triggered when accessing the following API: trainings, groups, events, prices
- update docker/README.md
2017-07-13 10:11:19 +02:00
## v2.5.9 2017 July 13
2017-07-12 15:56:12 +02:00
- Fixed invalid syntax for configuration file application.yml.default
2017-07-13 10:11:19 +02:00
- db:seed improves test if there is already an admin, not failing anymore if role 'admin' doesn't exist
2017-07-12 15:56:12 +02:00
2017-07-12 11:47:24 +02:00
## v2.5.8 2017 July 12
- Fix a bug: when upgrading from version < 2.5.0, `db:seed` will throw an error if ADMIN_EMAIL does not match any admin in database
- Fix a bug: hide spaces in public calendar when module is disabled
- Fix a bug: confirmation message not shown after admin creation
- Fix a bug: invoices generation failed for subscription days offered
- add task `rake fablab:get_incoherent_invoice` allow find the invoices incoherent
2017-06-08 20:19:32 +02:00
## v2.5.7 2017 June 8
2017-06-07 16:39:24 +02:00
- Portuguese and Brazilian support
2017-06-08 20:19:32 +02:00
- Fix a bug: reservation amount total isnt equal stripe invoice amount that be paid by customer
2017-06-07 16:39:24 +02:00
2017-05-18 10:37:41 +02:00
## v2.5.6 2017 May 18
- Ability for admins to create users as organizations
- Invoices object will contain the organization name if any (#64)
- RSS feeds will return more data about events and projects, especially images
2017-05-18 10:37:41 +02:00
- Improved Docker documentation (#65)
2017-05-15 16:46:58 +02:00
## v2.5.5 2017 May 15
2017-05-09 09:30:16 +02:00
- Fix a bug: New groups does not have their spaces prices initialized
- Fix a bug: Unable to delete a group when its space prices are set
- [TODO DEPLOY] `rake fablab:fix:new_group_space_prices` only if module 'Spaces' is/was enabled
2017-05-09 09:30:16 +02:00
2017-05-04 12:59:04 +02:00
## v2.5.4 2017 May 4
- Fix a bug: Unable to define application locale other than `fr` or `en`.
- [TODO DEPLOY] add `APP_LOCALE` environment variable (see README.md for configuration details)
2017-04-27 14:23:06 +02:00
## v2.5.3 2017 April 27
2017-04-13 14:27:11 +02:00
- Project view: added responsive support on external images
- Include rails localization support for 115 new locations
## v2.5.2 2017 April 12
2017-04-13 14:27:11 +02:00
2017-04-03 17:08:47 +02:00
- Extracts first admin created email and password into environment variables
2017-04-12 20:31:52 +02:00
- [OPTIONAL: Only for a new installation] add `ADMIN_EMAIL` and `ADMIN_PASSWORD` environment variable in `application.yml` or `env` file (with docker)
2017-04-03 17:08:47 +02:00
2017-03-28 20:26:32 +02:00
## v2.5.1 2017 March 28
2017-03-28 20:26:32 +02:00
- hide spaces in admin's credit management if spaces are disabled
- Fix a bug: Can not display training tracking (this bug was introduced in version 2.5.0)
2017-03-28 20:26:32 +02:00
- [TODO DEPLOY] `rake assets:precompile`
2017-03-28 13:44:02 +02:00
## v2.5.0 2017 March 28
- Ability to remove an unused custom price for an event (#61)
2017-03-02 16:52:20 +01:00
- Prevent polling notifications when the application is in background
- Ability to export the availabilities and their reservation rate from the admin calendar
2017-03-01 15:52:42 +01:00
- Ability to create, manage and reserve spaces
2017-02-22 17:55:31 +01:00
- Improved admin's interface to create availabilities
2017-03-01 15:52:42 +01:00
- Complete rewrote of the reservation cart functionality with improved stability, performance and sustainability
2017-03-02 10:29:17 +01:00
- Replaced letter_opener by MailCatcher to preview e-mails in development environments
2017-03-21 15:55:41 +01:00
- Ability to create plans with durations based on weeks
2017-03-28 13:44:02 +02:00
- Ease installations with docker-compose, in any directory (#63)
2017-02-22 17:55:31 +01:00
- Fix a bug: trainings reservations are not shown in the admin's calendar
- Fix a bug: unable to delete an administrator from the system
- Fix a bug: unable to delete an event with a linked custom price (#61)
- Fix a bug: navigation in client calendar is bogus when browsing months (#59)
- Fix a bug: subscription name is not shown in invoices
2017-03-28 13:44:02 +02:00
- Fix a bug: new plans statistics are not shown
- [TODO DEPLOY] `rake db:migrate`, then `rake db:seed`
- [TODO DEPLOY] add the `FABLAB_WITHOUT_SPACES` environment variable
2019-02-13 12:59:28 +01:00
- [TODO DEPLOY] `rake fablab:es:add_spaces`
- [TODO DEPLOY] `rake fablab:fix:new_plans_statistics` if you have created plans from v2.4.10
## v2.4.11 2017 March 15
2017-03-21 15:48:13 +01:00
- Fix a bug: editing and saving a plan, result in removing the rolling attribute
- [TODO DEPLOY] `rake fablab:fix:rolling_plans`
2017-01-09 10:57:46 +01:00
## v2.4.10 2017 January 9
- Optimized notifications system
- Fix a bug: when many users with too many unread notifications are connected at the same time, the system kill the application due to memory overflow
- Fix a bug: ReservationReminderWorker crash with undefined method find_by
- Fix a bug: navigation to about page duplicates admin's links in left menu
2017-01-09 10:54:30 +01:00
- Fix a bug: changing the price of a plan lost its past statistics
2017-01-09 15:13:28 +01:00
- [TODO DEPLOY] `rake db:migrate`
2019-02-13 12:59:28 +01:00
- [TODO DEPLOY] `rake fablab:fix:set_plans_slugs`
2017-01-04 15:30:21 +01:00
## v2.4.9 2017 January 4
- Mask new notifications alerts when more than 3
- Added an asterisk on group select in admin's member form
- Statistics custom aggregations can handle custom filtering
- Statistics about hours available for machine reservations and tickets available for training reservations, now handle custom filtering on date and type
- Fix a bug: display more than 15 unread notifications (number on the bell icon & full list)
2017-01-02 11:08:40 +01:00
- Fix a bug: in invoice configuration panel, VAT amount and total excl. taxes are inverted
- Fix a bug: unable to compute user's age when they were born on february 29th and current year is not a leap year
- Fix a bug: wrong statistics about hours available for machines reservation. Fix requires user action (1)
2017-01-04 15:30:21 +01:00
- Fix a bug: when regenerating statistics, previous values are not fully removed (only 10 firsts), resulting in wrong statistics generation (2)
- Fix a bug: when deleting an availability just after its creation, the indexer workers crash and retries for a month
2017-01-03 11:27:58 +01:00
- [TODO DEPLOY] remove possible value `application/` in `ALLOWED_MIME_TYPES` list, in environment variable
2019-02-13 12:59:28 +01:00
- [TODO DEPLOY] `rails runner StatisticCustomAggregation.destroy_all`, then `rake db:seed`, then `rake fablab:es:build_availabilities_index` (1)
- [TODO DEPLOY] `rake fablab:es:generate_stats[1095]` if you already has regenerated the statistics in the past, then they are very likely corrupted. Run this task to fix (2)
2016-12-15 17:12:07 +01:00
## v2.4.8 2016 December 15
2016-12-15 14:19:55 +01:00
- Added asterisks on mandatory fields in member's form
- Fixed wording on SSO screens
- Ability to send again the auth-system migration token by email
- Fix a bug: notification email about refund invoice tells about subscription while concerning wallet credit
2016-12-15 14:19:55 +01:00
2016-12-14 10:41:17 +01:00
## v2.4.7 2016 December 14
2016-12-12 11:22:37 +01:00
- Improved automated testing
- Added an information notice about the processing time of deleting an administrator
- Ability to change the expiration date of a coupon after its creation
2016-12-14 10:41:17 +01:00
- Ability to generate a refund invoice when crediting user's wallet
2016-12-12 11:22:37 +01:00
- Fix a bug: unable to run rake db:migrate on first install
- Fix a bug: unable to create or edit a coupon of type 'percentage'
2016-12-12 11:22:37 +01:00
2016-12-14 10:41:17 +01:00
## v2.4.6 2016 November 30
2016-11-30 17:28:51 +01:00
- Change display of message about coupon application status
2016-12-12 11:22:37 +01:00
- Fix a bug: compute price API return error 500 if reservable_id is not provided
2016-11-30 17:28:51 +01:00
2016-11-29 17:06:56 +01:00
## v2.4.5 2016 November 29
2016-11-28 10:11:52 +01:00
- Ability to create coupons with cash amounts (previously only percentages were allowed)
2016-11-29 12:03:38 +01:00
- Improved error messages when something wrong append when paying a machine reservation by stripe
- Ability to display optional information message on event reservation page
2016-11-24 09:50:56 +01:00
- Fix a bug: misconfigured Twitter's ENV variables results in HTTP error 500
2016-11-29 11:54:56 +01:00
- Fix a bug: wallet is not debited when paying locally with a user who have invoices disabled
- Fix a bug: wrong error message about rounding inconsistency is logged on invoice generation
- Fix a bug: reservation calendar of a specific training shows availabilities for all trainings
2016-11-29 17:56:41 +01:00
- [TODO DEPLOY] `rake db:migrate`
2016-11-23 15:10:07 +01:00
2016-11-24 16:48:05 +01:00
## v2.4.4 2016 November 24
2016-11-23 15:10:07 +01:00
- Fix a bug: unable to rollback migration 20160906145713
- Fix a bug: Title's translation for plan's forms is not loaded in French
- Fix a bug: invoice of reservation show payment by debit card when user pay with wallet
2016-11-21 14:16:55 +01:00
## v2.4.3 2016 November 21
2016-11-09 13:14:53 +01:00
- Export user's invoicing status in members' excel export
2016-12-12 11:22:37 +01:00
- Fix a bug: Next events descriptions, shown on the home page, display raw html
- Fix a bug: number of reserved seats for an event is always of 1 in the excel export of reservations
2016-11-09 14:36:28 +01:00
- Fix a bug: conflict between similar translations around "reservations"
2016-11-09 13:14:53 +01:00
- Fix a bug: later occurrences of recurrent events does not have the initially configured theme and age range
2016-11-21 12:00:03 +01:00
- Fix a bug: some graphs do not display: events, users, trainings and machine hours
- [TODO DEPLOY] delete the `exports/users/reservations` folder to prevent the usage of old invalid exports
2016-11-09 13:14:53 +01:00
2016-11-08 16:24:34 +01:00
## v2.4.2 2016 November 8
2016-10-24 09:33:46 +02:00
2016-11-08 16:24:34 +01:00
- Image max size is configurable, default size is 2 megabytes
- Allow add more pictures for project step
2016-10-26 16:33:21 +02:00
- Ability to use HTML in event's descriptions using a WYSIWYG editor
- Fix a bug: statistics graphs were not showing
2016-11-08 16:24:34 +01:00
- Fix a bug: On invoices, only starting date is shown for multi-days events
- Fix a bug: In the sign-up modal, the translation for 'i_accept_to_receive_information_from_the_fablab' was not loaded
- [TODO DEPLOY] add `MAX_IMAGE_SIZE` environment variable in `application.yml` and docker env
2016-10-24 09:33:46 +02:00
2016-10-11 16:11:20 +02:00
## v2.4.1 2016 October 11
2016-12-12 11:22:37 +01:00
- Fix a bug: unable to share a project/event without image on social networks
2016-10-05 11:12:14 +02:00
- Fix a bug: after creating an element in the admin calendar, browsing through the calendar and coming back cause the element to appear duplicated
- Fix a bug: after deleting an element in the admin calendar, the confirmation message is wrong and an error is logged in the console
- Fix a bug: erroneous syntax in docker env example file
2016-10-04 16:39:10 +02:00
## v2.4.0 2016 October 4
2016-12-12 11:22:37 +01:00
2016-09-29 12:07:18 +02:00
- RSS feeds to follow new projects and events published
- Use slugs in projects URL opened from notifications
2016-09-27 15:34:30 +02:00
- Ask for confirmation on machine deletion from the public view
- Ability to delete a training from the public view for an admin
2016-12-12 11:22:37 +01:00
- Project images will show in full-size on a click
- Add a checkbox "I accept to receive informations from the FabLab" on Sign-up dialog and user's profile
- Share project with Facebook/Twitter
2020-02-26 10:19:43 +01:00
- Display Fab-manager's version in "Powered by" label, when logged as admin
2016-09-06 17:22:49 +02:00
- Load translation locales from subdirectories
2016-07-21 16:29:39 +02:00
- Add wallet to user, client can pay total/partial reservation or subscription by wallet
2016-07-18 18:16:54 +02:00
- Public calendar for show all trainings/machines/events
2016-07-13 16:02:29 +02:00
- Display 'draft' badge on drafts in project galleries
- Add a 'new project' button in dashboard/my projects
2016-07-13 16:05:13 +02:00
- Open Projects: show the platform of origin even for local projects
- Ability to use HTML in machine specs and description
2016-07-13 16:11:31 +02:00
- Ability to manage project steps order
2016-07-13 18:29:34 +02:00
- Trainings are associated with a picture and an HTML textual description
- Public gallery of trainings with ability to view details or to book a training on its own calendar
- Ability to switch back to all trainings booking view
2016-12-12 11:22:37 +01:00
- Rename "Courses and Workshops" to "Events"
2016-06-30 14:20:17 +02:00
- Admin: Events can be associated with a theme and an age range
- Admin: Event categories, themes and age ranges can be customized
- Filter events by category, theme and age range in public view
2016-08-31 15:50:05 +02:00
- Ability to customise price's categories for the events
- Events can be associated with many custom price's categories, instead of only one "reduced price"
2016-09-06 17:22:49 +02:00
- Statistics views can trigger and display custom aggregations from ElasticSearch
2016-12-12 11:22:37 +01:00
- Machine hours/Trainings statistics: display number of tickets/hours available for booking
2016-06-30 14:20:17 +02:00
- Statistics will include informations abouts events category, theme and age range
2016-07-27 12:05:58 +02:00
- Ability to export the current statistics table to an Excel file
- Ability to export every statistics on a given dates range to an Excel file
2016-08-02 16:50:03 +02:00
- More fields in members exports
- Unified members, subscriptions and reservations exports with the new statistics exports
- Excel exports are now asynchronously generated and cached on the server for future identical requests
- Users have the ability to create an organizational profile when creating an account
- Organization informations will be used in invoices generation, if present
- Admins can create and enable/disable coupons. They can also notify an user about details of a coupon
- Users and admins can apply coupons's discounts to their shopping cart
2016-08-23 10:49:02 +02:00
- Send an email reminder and system notification some hours before a reservation happens
- Admins can toggle reminders on/off and customize the delay
2016-09-07 15:58:41 +02:00
- More file types allowed as project CAD attachements
- Project CAD attachements are now checked by MIME type in addition of extension check
- Project CAD attachement allowed are now configured in environment variables
2016-12-12 11:22:37 +01:00
- Project CAD attachement extensions allowed are shown next to input field
2016-09-13 13:05:36 +02:00
- Display strategy's name in SSO providers list
2016-09-15 17:45:59 +02:00
- SSO: documentation improved with an usage example
- SSO: mapped fields display their data type. Integers, booleans and dates allow some transformations.
2016-07-13 18:41:08 +02:00
- Fix a bug: project drafts are shown on public profiles
- Fix a bug: event category disappear when editing the event
2016-12-12 11:22:37 +01:00
- Fix a bug: machine name is not shown in plan edition
2016-09-07 16:07:07 +02:00
- Fix a bug: machine slots with tags are not displayed correctly on reservation calendar
2016-09-13 13:05:36 +02:00
- Fix a bug: avatar, address and organization details mapping from SSO were broken
2016-12-12 11:22:37 +01:00
- Fix a bug: in SSO configuration some valid endpoints were recognized as erroneous
- Fix a bug: clicking on the text in stripe's payment modal, does not validate the checkbox
- Fix a bug: move event reservation is not limited by admin settings (prior-delay & disable)
- Fix a bug: UI issues on small devices (dashboard + admin views)
2016-09-27 10:45:53 +02:00
- Fix a bug: embedded video not working in training/machine description
- Fix a bug: reordering project's steps trigger the unsaved-warning dialog
2016-09-28 11:37:36 +02:00
- Fix a bug: unable to compile assets in Docker with CoffeeScript error
2016-09-29 10:04:37 +02:00
- Fix a bug: do not force HTTPS for URLs in production environments
2019-02-13 12:59:28 +01:00
- [TODO DEPLOY] `rake fablab:es:build_availabilities_index`
- [TODO DEPLOY] `rake fablab:es:add_event_filters`
2016-07-13 16:15:50 +02:00
- [TODO DEPLOY] `rake db:migrate`
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install`
- [TODO DEPLOY] add `EXCEL_DATE_FORMAT`, `ALLOWED_EXTENSIONS` and `ALLOWED_MIME_TYPES` environment variable in `application.yml`
2016-08-23 10:49:02 +02:00
- [OPTIONAL] `rake fablab:fix:assign_category_to_uncategorized_events` (will put every non-categorized events into a new category called "No Category", to ease re-categorization)
2016-07-13 16:02:29 +02:00
## v2.3.1 2016 September 26
- Fix a bug: group cache filename too long
2016-06-28 10:23:39 +02:00
## v2.3.0 2016 June 28
2016-06-27 12:42:57 +02:00
2016-06-28 10:23:39 +02:00
- Public API with access management and online documentation
2016-06-27 16:42:27 +02:00
- Add json cache for machines, events, trainings
- Optimise sql query, avoid to N+1
2016-06-28 10:23:39 +02:00
- Projects URL are always composed with slug instead of ID
- Confirmation on project deletion
- Fix a bug: unable to deploy 2.2.0+ when PostgreSQL 'unaccent' extension was already active
- Fix a bug: some reservations was referencing reservables not present in database (#patch)
2016-06-27 16:42:27 +02:00
- [TODO DEPLOY] `bundle exec rake fablab:fix:reservations_not_existing_reservable` to apply #patch
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install` then (all) `rake db:migrate`
2016-06-27 12:41:54 +02:00
2016-06-23 11:49:48 +02:00
## v2.2.2 2016 June 23
2016-12-12 11:22:37 +01:00
- Fix some bugs: users with uncompleted account (sso imported) won't appear in statistics, in listings and in searches. Moreover, they won't block statistics generation
2016-06-23 11:49:48 +02:00
- Fix a bug: unable to display next results in statistics tables
2016-06-28 11:42:20 +02:00
- Admin: Category is mandatory when creating an event
2016-06-23 11:49:48 +02:00
2016-06-22 09:19:40 +02:00
## v2.2.1 2016 June 22
2016-06-21 15:24:25 +02:00
- Fix a bug: field User.merged_at should not be allowed to be mapped in SSO
- Fix a bug: integration test "user reservation without plan"
- Fix a bug: can't click for some seconds in Chrome 51
- Admin: statistics tables were paginated and optimized to improve load times.
2016-06-16 17:22:44 +02:00
## v2.2.0 2016 June 16
- Built-in support for extensions plug-ins
- User profile form: social networks links, personal website link, job and change profile visibility (public / private)
- User public profile: UI re-design with possible admin's customization
- Admin: Invoices list and users list are now loaded per 10 items to improve pages load time
- Admin: select member (eg. to buy a subscription for a member) is now loading the user's list dynamically when you type
2016-12-12 11:22:37 +01:00
- Project collaborators selection is now using a list dynamically loaded as you type
2016-06-15 12:05:04 +02:00
- Admin: select a training before monitoring its reservations -> improves page load time
- API: GET /api/trainings do not load nor send the associated availabilities until they are requested
- List of members is now loaded 10 members by 10, to improve page load time
2016-05-18 17:30:33 +02:00
- [TODO DEPLOY] Regenerate the theme stylesheet (easy way: Customization/General/Main colour -> "Save")
2019-05-06 16:56:21 +02:00
- [TODO DEPLOY] -> (only dev) `bundle install` then (all) `rake db:migrate`
2016-05-18 17:30:33 +02:00
2016-05-24 14:56:58 +02:00
## v2.1.2 2016 May 24
- Fix a bug: Google Analytics was not loaded and did not report any stats
2016-05-03 16:33:06 +02:00
## v2.1.1 2016 May 3
- Fix a bug concerning openlab projects initialization in production env
- Fix a bug: user is not redirected after changing is duplicated e-mail on the SSO provider
## v2.1.0 2016 May 2
2019-03-26 14:04:45 +01:00
- Add search feature on openlab projects : [Openlab-projects](https://github.com/sleede/openlab-projects)
2016-05-02 17:14:21 +02:00
- Add integration tests for main features
2016-05-03 16:33:06 +02:00
- Credits logic has been extracted into a microservice
- Improved UI list of projects
2016-05-02 17:14:21 +02:00
- Refactor interface for SSO profile completion
- Change interface for SSO/email already used
2016-05-03 16:33:06 +02:00
- Fix a bug: custom asset favicon-file favicon file is not set
- Fix a security issue: stripe card token is now checked on server side on new/renew subscription
- Translated notification e-mails into english language
2016-06-27 12:41:54 +02:00
- Subscription extension logic has been extracted into a microservice