Kanboard 1.2.46
23 June 2025
Kanboard version 1.2.46 is now available (security release).
Upgrading to Kanboard 1.2.46
Kanboard 1.2.46 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Kanboard updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Kanboard install to test the 1.2.46 upgrade prior to applying it live. Get started managing your Kanboard installations with Installatron
What's New in Kanboard 1.2.46
1.2.46
Security
- fix(security): prevent potential Host header injection via SERVER_NAME
Bug Fixes and Changes
- refactor: update return type in filter apply methods
- You must specify the Kanboard application URL explicitly to generate correct URLs from email notifications. The default is http://localhost/.
- fix: make various PHP 8.x compatibility changes
- fix: avoid Implicitly nullable parameter declarations errors in PHP 8.4
- feat: validate plugin archive URL before downloading
- feat: use PHP 8.4 in the official Docker image
- feat: show CAPTCHA on login form regardless of user existence
- feat: add new option to enable notifications by default for new users
- feat: add healthcheck endpoint healthcheck.php, and new Docker Compose files for MariaDB, Postgres, and SQLite
- feat: add TRUSTED_PROXY_HEADERS config option
- If you use a reverse proxy, you can now specify which headers to trust for the client IP address. Nothing is trusted by default.
- docs: add CONTRIBUTING.md file
- ci(docker): avoid using set-output deprecated command
- chore!: PHP 8.1 is now the minimum version supported !! PHP 7.4 is no longer supported !!
- chore: update docker-compose.yml sample file to the latest specs
- chore: remove obsolete Vagrantfile
- build(deps): bump Alpine Docker image from 3.21 to 3.22
1.2.45
Bug Fixes and Changes
- refactor: reuse existing helpers in tasks import form
- fix(filter): handle null input in the Lexer class
- fix(docker): legacy key/value format with whitespace separator should not be used
- fix(api): allow and validate creator ID assignment in task creation
- feat(routes): add view routes for project and task file browsing
- feat(locale): update all language files using machine translation
- feat(api): add priority fields to createProject and updateProject procedures
- feat: allow attaching screenshots and files when creating a task
- feat: add task title to overdue notification title
- ci: replace GitHub Issue Markdown templates with YAML forms
- ci: remove broken SQL Server unit tests pipeline
- ci: improve pull request template
- ci: add commit linter to validate conventional commit messages in pull requests
