passbolt-browser-extension 5.4.0 → 5.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -1
- package/README.md +2 -2
- package/RELEASE_NOTES.md +8 -60
- package/package.json +2 -2
- package/src/chrome/manifest.json +1 -1
- package/src/chrome-mv3/manifest.json +1 -1
- package/src/firefox/manifest.json +1 -1
- package/src/safari/manifest.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -4,6 +4,10 @@ This project adheres to [Semantic Versioning](http://semver.org/).
|
|
|
4
4
|
|
|
5
5
|
## [Unreleased]
|
|
6
6
|
|
|
7
|
+
## [5.4.1] - 2025-08-14
|
|
8
|
+
- PB-44638 Password expiry should not be removed when password is not updated
|
|
9
|
+
- PB-44668 The create menu import operation should be actionable when encrypted metadata plugin is not available
|
|
10
|
+
|
|
7
11
|
## [5.4.0] - 2025-08-13
|
|
8
12
|
### Added
|
|
9
13
|
- PB-44201: E2EE The organisation settings offer now a simplified way to activate metadata encryption and the new resource types
|
|
@@ -2356,7 +2360,8 @@ self registration settings option in the left-side bar
|
|
|
2356
2360
|
- AP: User with plugin installed
|
|
2357
2361
|
- LU: Logged in user
|
|
2358
2362
|
|
|
2359
|
-
[Unreleased]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.4.
|
|
2363
|
+
[Unreleased]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.4.1...HEAD
|
|
2364
|
+
[5.4.0]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.4.0...v5.4.1
|
|
2360
2365
|
[5.4.0]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.3.3...v5.4.0
|
|
2361
2366
|
[5.3.2]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.3.0...v5.3.2
|
|
2362
2367
|
[5.3.0]: https://github.com/passbolt/passbolt_browser_extension/compare/v5.2.0...v5.3.0
|
package/README.md
CHANGED
|
@@ -5,14 +5,14 @@
|
|
|
5
5
|
/_/ \__,_/____/____/_.___/\____/_/\__/
|
|
6
6
|
|
|
7
7
|
Open source password manager for teams
|
|
8
|
-
(c)
|
|
8
|
+
(c) 2025 Passbolt SA
|
|
9
9
|
https://www.passbolt.com
|
|
10
10
|
|
|
11
11
|
## License
|
|
12
12
|
|
|
13
13
|
Passbolt - Open source password manager for teams
|
|
14
14
|
|
|
15
|
-
(c)
|
|
15
|
+
(c) 2025 Passbolt SA
|
|
16
16
|
|
|
17
17
|
This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General
|
|
18
18
|
Public License (AGPL) as published by the Free Software Foundation version 3.
|
package/RELEASE_NOTES.md
CHANGED
|
@@ -1,67 +1,15 @@
|
|
|
1
|
-
Release song: https://www.youtube.com/watch?v=
|
|
1
|
+
Release song: https://www.youtube.com/watch?v=6tpGC4lgpMg
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
This hot-fix addresses several issues introduced in recent v5.x releases.
|
|
4
4
|
|
|
5
|
-
|
|
5
|
+
Since v5.3, organizations running Passbolt on servers with a locale different from en-UK could encounter issues to update or later to use the application, which have now been resolved.
|
|
6
6
|
|
|
7
|
-
|
|
7
|
+
It also fixes a problem where organizations that had manually disabled encrypted metadata using the kill switch available to system administrators were unable to initiate imports credentials from the web application. This was a side effect of recent work preparing for the upcoming zero-knowledge capability, which will further strengthen the encrypted metadata feature introduced earlier.
|
|
8
8
|
|
|
9
|
-
|
|
9
|
+
Finally, since v5.0, resources whose secrets had been modified, irrespective of whether the secret was a password, a TOTP, or a secure note, have had their expiration dates automatically rotated, which was not the expected behaviour. The expected behaviour is now restored: the expiration date is rotated only when the password is edited.
|
|
10
10
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Performance has been tuned for large organisations that manage substantial numbers of users or resources. Among other improvements: Users' workspace now opens more quickly, and deleting multiple resources generates fewer I/O operations.
|
|
14
|
-
|
|
15
|
-
Czech joins the list of supported languages, allowing native speakers to use Passbolt entirely in their own words, vítejte!
|
|
16
|
-
|
|
17
|
-
Many thanks to everyone who reported issues and tested encrypted metadata over the past months. Your feedback made this release possible and brings these new features to all users today.
|
|
18
|
-
|
|
19
|
-
### Added
|
|
20
|
-
- PB-44201: E2EE The organisation settings offer now a simplified way to activate metadata encryption and the new resource types
|
|
21
|
-
- PB-42205: E2EE encrypted metadata and new resource types are activated by default after the first administrator setup
|
|
22
|
-
- PB-43255: Add support for multiple uri import export on kdbx files
|
|
23
|
-
- PB-43110: ZK - WP4.2 As a signed-in user I should not be allowed to upgrade resources with missing key situation
|
|
24
|
-
- PB-43712: Translate the application in Czech
|
|
25
|
-
- PB-43939: ZK - WP3.2 Add an app event to get or find the metadata keys settings
|
|
26
|
-
- PB-43980: Add support for custom field import export on kdbx files
|
|
27
|
-
- PB-44080: ZK - WP4.1 Create a dialog explaining the missing key situation
|
|
28
|
-
- PB-44081: ZK - WP4.3 As a signed-in user I should not be allowed to create resources with missing key situation in the resource workspace
|
|
29
|
-
- PB-44090: ZK - WP4.4 As a signed-in user I should not be allowed to edit resources with missing key situation
|
|
30
|
-
- PB-44091: ZK - WP4.5 As a signed-in user I should not be allowed to share resources with missing key situation
|
|
31
|
-
- PB-44094: ZK - WP4.6 As a signed-in user I should not be allowed to import resources with missing key situation
|
|
32
|
-
- PB-44095: ZK - WP4.7 As a signed-in user I should not be allowed to move resources with missing key situation
|
|
33
|
-
- PB-44096: ZK - WP4.8 As a signed-in user I should not be allowed to move folders with missing key situation
|
|
34
|
-
- PB-44097: ZK - WP4.9 Display a page explaining the missing key situation on the quick app
|
|
35
|
-
- PB-44098: ZK - WP4.10 As a signed-in user I should not be allowed to create resources with missing key situation in the quick app
|
|
36
|
-
- PB-44099: ZK - WP4.11 As a signed-in user I should not be allowed to generate password on the inform menu
|
|
37
|
-
- PB-44206: ZK - WP4.14 As administrators I cannot trigger the encrypted metadata migration if I have missing metadata keys
|
|
38
|
-
- PB-44211: ZK - WP3.5 Add MetadataKeysSettingsLocalStorageContextProvider to the App and the quick-app and the inform menu
|
|
39
|
-
- PB-44212: CU - WP5.2 Update ExternalResourceEntity buildDtoFromResourceEntityDto to support custom fields
|
|
40
|
-
- PB-44286: ZK - WP3.6 Add a quick app and inform menu event to get the metadata keys settings
|
|
41
|
-
- PB-44295: ZK - WP4.15 As a signed-in user with missing keys I should not be able to create resource if metadata shared key is enforced on the inform menu
|
|
42
|
-
- PB-44296: ZK - WP4.16 As a signed-in user I should not be allowed to move shared folders into personal folders with missing key situation
|
|
43
|
-
- PB-44327: Display sub-folders in breadcrumbs
|
|
44
|
-
- PB-44374: Extend notes v5 max length to 50_000
|
|
11
|
+
We thank the community for promptly reporting these issues.
|
|
45
12
|
|
|
46
13
|
### Fixed
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
- PB-43657: Resources loading became noticeably slower after migrating to encrypted
|
|
50
|
-
- PB-43667: Cancelling the user passphrase request should not trigger an error when sharing missing metadata key
|
|
51
|
-
- PB-43676: Cancelling the user passphrase should not freeze the create resource dialog
|
|
52
|
-
- PB-43719: After importing resources from Bitwarden the URIs are not separated correctly
|
|
53
|
-
- PB-43784: Display the progression of the encryption of metadata in the import dialog
|
|
54
|
-
- PB-43906: User should be notified of any errors while loading comments
|
|
55
|
-
- PB-44079: Update/Create a method in resourceLocalStorage.js to bulk delete resources
|
|
56
|
-
- PB-44161: As a user I should not see the resource description and note warning message if only one of them is concerned
|
|
57
|
-
- PB-44273: Activities are not loaded when new resource is clicked after load more activities of a previous resource
|
|
58
|
-
|
|
59
|
-
### Maintenance
|
|
60
|
-
- PB-43585: Azure SSO login_hint settings can now be configured
|
|
61
|
-
- PB-43908: Move logic of commentModel file to a service and update assertions in controllers
|
|
62
|
-
- PB-44076: Create a Controller to handle Resource Delete
|
|
63
|
-
- PB-44077: Create a dedicated Service to handle resource deletion
|
|
64
|
-
- PB-44396: the endpoint complete/recover.json is now used instead of the legacy endpoint
|
|
65
|
-
|
|
66
|
-
### Security
|
|
67
|
-
- PB-43730: Upgrade vulnerable library brace-expansion
|
|
14
|
+
PB-44638 Password expiry should not be removed when password is not updated
|
|
15
|
+
PB-44668 The create menu import operation should be actionable when encrypted metadata plugin is not available
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "passbolt-browser-extension",
|
|
3
|
-
"version": "5.4.
|
|
3
|
+
"version": "5.4.1",
|
|
4
4
|
"license": "AGPL-3.0",
|
|
5
5
|
"copyright": "Copyright 2025 Passbolt SA",
|
|
6
6
|
"description": "Passbolt web extension for the open source password manager for teams",
|
|
@@ -22,7 +22,7 @@
|
|
|
22
22
|
"locutus": "~2.0.9",
|
|
23
23
|
"openpgp": "^6.1.1",
|
|
24
24
|
"papaparse": "^5.5.2",
|
|
25
|
-
"passbolt-styleguide": "^5.4.
|
|
25
|
+
"passbolt-styleguide": "^5.4.4",
|
|
26
26
|
"react": "17.0.2",
|
|
27
27
|
"react-dom": "17.0.2",
|
|
28
28
|
"secrets-passbolt": "github:passbolt/secrets.js#v2.0.1",
|
package/src/chrome/manifest.json
CHANGED