This release was used at the Chaos Communication Congress 2024.
For installation instructions please read the README.

List of changes

Full Changelog: v3.5.0...v3.6.0

Functionality

• Added 38C3 Theme
• Refactored permissions to better match the new scheme
• Added configurable link to T-Shirt information page
• Show needed angels source in shift
• Allow supporters to promote other supporters and to freeload angels
• Added hint why sign out is not possible n hours before start
• Show pronouns on more pages
• Allow disabling of force active and driving licenses
• Show more confirmation dialogues on non-reversible actions
• Added icon to night shifts and show hint on shifts page
• Better freeloading explanations
• Show number of mails to be sent on new news
• Added e-mail address to questions page
• Show active password resets on user page
• Updated user settings page
• Allow ifsg confirmation & edit by admins, show it only when needed
• Allow driving license confirmation & edit by admins, show it only when needed
• Implemented page for seeing API endpoints and resetting the key
• Show current time in shifts view
• Added more icons to buttons
• Show shift colours for shicos/bureaucrats etc.
• Update wording to differentiate between "Goodies" and special case T-Shirts
• Added new event configuration page
• Show more dates with day of event
• Simplified email preferences on registration
• Show locations list to all users
• Save freeloading user
• Added Tags to FAQ
• Rearranged shift edit page to match create
• Added +1 voucher button to users list
• Implemented signup advance hours for shift type
• Show configured header_items before admin menu
• Added contact_options config shown on questions page
• Implemented external_registration_url option to allow registration via external oauth provider
• Renamed some config options

Fixes

• Differentiate questions answer page from asking
• Fixed multiple typos and updated translations
• Updated field lengths in database & fixed validation / form required values
• Fix work log edit
• Renamed Goody to Goodie
• When deleting a user, move shifts, news, answers, worklogs etc. to deleting one
• Fix sorting on some pages
• Render E-Mails as text to fix escaping issues
• Updated logging messages to fix wording

"Under the hood"

• Updated packages
• Added support for PHP 8.3 and updated it to work with 8.4 (might show some warnings in dev mode)
• Fix db export for build package
• Renamed some config keys [breaking change]
• Allow for file based secrets for config
• Updated API to new format [breaking change]
• Update CI
• Fixed multiple tests
• Schedule import clean-up and extension
• Use target="_blank"
• Sync night shift function with sql query
• Pin footer to page bottom
• Clean-up shift deletion flow for notifications
• Added more metrics
• Allow to start phpmyadmin in dev setup
• Added help texts and --prune to migration command
• Implement registration via external sso provider
• Upgraded validation logic
• Added more files & directories to .gitignore to support different workflows
• Optimize queries by using more prefetching
• Improved performance for shifts with many users
• Ignore notices and similar messages on prod deployments
• Clean-up & refactoring

and a lot more bugfixes and improvements.

This is the version that ran the Chaos Communication Congress 2023.
For installation instructions please read the README.

List of changes

Full Changelog: v3.4.1...v3.5.0

Functionality

• Added 37C3 Theme
• Added event day to mails and date drop downs
• Implemented v0 Beta API with angeltypes, shifts, news, locations, users and info endpoints
• Renamed rooms to locations
• Implemented locations selection for schedules
• Implemented schedule deletion
• Add reset to previous input on shift creation
• Added random shift button in shift view
• Added option to load angels by shift type for schedules
• Add option to hide angeltypes from shift view
• Moved driving license settings to user settings
• Implemented confirmation pop-ups before deletion
• Highlight current time and freeloaded shifts on user shifts overview
• Added user info
• Removed shirt edit permission from Shift Coordinator
• Changing the nickname requires Bureaucrat permission
• Disable edit t-shirt setting after user got shirt
• Allow the log to be filtered by user, only show the whole log to Bureaucrat
• Recreated shifts creation history page and shift type admin backend
• Sending notifications on news creation / updates is now selectable
• Replaced important with highlighted flag on news
• Updated pages to have consistent back/create links
• Updated frontend to contain consistent buttons
• Updated icons to be use a consistent set
• shifts json export: Added more fields
• Implemented new sign up page
• Make items from config arrays removable

Fixes

• Catch more errors while sending emails
• Fix t-shirt naming fields
• Fix some migrations
• Fixed wording to make messages clearer
• Show better error message when route target is not callable
• Set cookie secure attribute only if request was made over https
• Improved validation to show more messages
• Fix many error messages

"Under the hood"

• Updated packages
• Removed and disallowed inline JS
• Updated CI to check translations & fixed preview deletion
• Generate longer API keys when too short
• Clean-up initial installation to create everything from migrations
• Clean-up API key handling
• Translations clean-up
• Clean-up migrations
• Simplify cli error log output
• Speed-up and fixed tests
• Ensure all error pages have translation keys
• Added permission checks for additional header & footer items
• Improve page speed by preloading data
• Clean-up code to remove unused methods
• Added more metrics

and a lot more small bugfixes and improvements.

This release is based on the CCCamp23 release v3.4.0 and includes three security fixes.
For installation instructions, please read the README.

List of changes

Full Changelog: v3.4.0...v3.4.1

Functionality

• Added session list to user settings

Fixes

• Fixed error messages in Schedule import (CVE-2023-45152, severity low)
• Expire all other sessions on password reset and when setting a new password (CVE-2023-45659, severity low)
• Escape text output to prevent XSS (CVE-2023-50924, severity high)

"Under the hood"

• Updated build dependencies

This is the version that ran the Chaos Communication Camp 2023.
For installation instructions please read the README.
One of the most important Changes is here the minimum required PHP version of 8.1.

List of changes (not complete):

Functionality:

• Added CCCamp23 theme
• Show event day in footer and on dashboard
• Added E-Mail notifications when being added/confirmed for an angeltype and on new messages
• Allow SSO registration without setting a password
• Implemented bulk deletion of shifts
• Added voucher-angel rights and allow food voucher functionality to be deactivated
• Added IFSG licence to angeltypes
• Dropped HTML support on news
• Added more options to be configurable from user settings page
• Make more config options configurable via env variables
• Added more config options like showing the mobile number, only first and last name instead of nick, if goodies are T-Shirts, "other" or not existent etc.

Fixes:

• Fixed shifts creation flow
• Added transaction around user creation on registration to prevent half-created users
• Many edge cases

"Under the hood":

• Requires at least PHP 8.1
• Updated contribution and development guidelines
• All tables are now created from migrations and have corresponding models
• More refactoring and page rewrites, especially the messages page and angeltypes overview
• Reimplemented ical, rss, atom and json exports
• Implement custom translation overwrites
• Updated dependencies
• Removed / replaced deprecated components / libraries (Ie countdown, charts, datetime picker, jquery etc)
• Themes clean-up and refactoring
• Replaced mailer component
• Updated and extended CI checks and build pipeline
• Use asset name hashing for build JS, CSS and images
• Use browser DateTime selects
• Implemented linters to enforce code style
• Refactored code to use more explicit types and general clean-up
• Unified docker containers
• Updated dev environment setup
• Strip spaces from request data
• Moved more functionality to event handlers
• Migrations clean-up to directly use database tables instead of models

and a lot of other small bugfixes and improvements.

Full Changelog: v3.3.0...v3.4.0

This is the version that ran the rC3-nowhere 2021.
For installation instructions please read the README.
The migration to Bootstrap 5.1 is the most important change in this version.

Changes (not complete):

• PHP 8.0 / 8.1 compatibility
• Refactored and updated themes to use Bootstrap 5.1
• Updated dependencies
• Improve CI (audit, linting, use kaniko instead of docker etc.)
• Introduced event handlers for email notifications and decoupling
• Set configurable admin password on first migration
• Use mailto: links on more pages
• Fix OAuth numeric IDs handling
• OAuth logins can now be hidden from the user
• Synchronize OAuth team membership (groups to angeltypes)
• Added news comment deletion
• Added read more functionality to news
• Added new shirt edit view
• Extended GDPR hints to contain privacy email for voucher handling
• Added rc3 2021 nowhere theme

and a lot of small bugfixes and improvements.

This is the version that ran the rC3. For installation instructions please read the README. OAuth registration/login is the most important new feature added in this version.

Changes (not complete):

• #671: Timestamp for questions
• #713: Fix mobile navi
• #728: News rewrite
• #731: germandates
• #733: Emoji support and some bugfixes
• #735: More metrics, new design page, fixed timezone setting, refactoring
• #736: Clarified license definition as GPL 2.0 or later is supported
• #737: Logger: Added handling for exceptions and log exceptions if they occur
• #738: Added composer.json and package.json validation and auditing
• #741: Rebuild Logs admin view
• #743: K8s deployment
• #747: Editorconfig improvements and linting
• #752: Add option for minutes after shift start where signup is allowed
• #753: Metrics and CI improvements
• #755: Rooms Model
• #756: Worklog model
• #760: Add more config options via ENV & Docker
• #763: Docker Compose: Use internal networks between containers
• #764: Rename "restricted angeltype" to "Requires introduction" in the frontend
• #765: Enable select2 on all dropdowns
• #767: News preview and markdown
• #771: Add pronouns to angeltype members
• #772: Login: Added OAuth support
• #774: Schedule import: Add overview
• #775: Dashboard filter
• #776: Password settings refactored
• #780: translation: less misleading admin_arrive translation
• #781: NewsController: redirect after edit to /news instead of /news/[id]
• #782: Questions, FAQ and settings fixes
• #787: Shift sign up: Allow Supporters to signup users to occupied shifts
• #788: News: Add is_pinned

and a lot of small bugfixes and improvements.

This is the version that ran the 36c3 with over 4.000 angels. For installation instructions please read the README.

Changes (not complete):

• #713: Fix navigation on small screens
• #657: credits: Make them translatable and use markdown
• #656 Frontend: Show language selects on every page
• #642: Metrics: Add database access time
• #630: Monday as first weekday
• #627: Users overview: Order by planned arrival/departure dates
• #624: Added version to credits and metrics page
• #607 Escape the log entries (no more html)
• #602: Impoved email error logging and don't send mail to the current user
• #593: Optional pronoun statement
• #591: Show an error when mail notification failed
• #587: Include talk language into frab-imported shift titles
• #566: Better voucher count calculation
• #553: Change frab import to xml
• #550: Remember shift filter collapse state
• #546: Expand shift panel on mouse over
• #538: Multi frab import
• #402: Advertise iCal subscription options
• #373: Add a config option for maximum signup in advance
• #287: Handle IDN mail addresses
• #178: Show not only next but also last shift in free angels view
• 36c3 Theme

This is the version that ran the 35c3 with over 4.000 angels. For installation instructions please read the README.

Changes (not complete):

• #537: Creating multiple shifts can be split by minutes now
• #535: DECT numbers may be up to 40 characters long
• #528: Added prometheus exporter /metrics
• #534: Credit page can now be configured
• #545: Allow special characters in questions and answers
• #551: Shift calendar displays room columns always in alphabetical order
• #514: Resolved time picker chaos
• #508: Degendered shirt sizes
• #500: Added CRSF protection
• New Architecture, including router, stackable middlewares, user redesign, template engine, db migrations
• #487: Engelsystem name is configurable
• #484: Footer is configurable
• #457: Mailing is configurable (send via SMTP e.g.)
• Added frontend build with yarn
• Added docker and gitlab based CI
• 35c3 Theme

This is the version that ran the 34C3.