firefly-iii

🥳 It's release 200! 🎉

Added

• /health will return 200 OK if Firefly III is up and running, thanks @ajgon!
• Issue 5133 First version of the LDAP filter is up.
• Option to log via Papertrail

Deprecated

• PHP 7.4 will probably not work on any page.

Fixed

• Issue 5133 LDAP filter (partial fix)
• Issue 5134 Use of clone function from search menu.
• Issue 5143 v2 layout: account notes
• Issue 5144 Removal of rule triggers / actions broken
• Issue 5145 Crash due to null pointer
• The markdown parser was broken.

Security

• Fix open direct
• Fix unrestricted upload

5.6.1 - 2021-09-25

Fixed

• Issue 4997 Deleted transactions would get reimported.
• Issue 5100 Broken UI in v2.0 due to translation issues.
• Issue 5101 Text duplication
• Issue 5104 Date range fixes
• Issue 5109 Fixed LDAP configuration issues.
• Issue 5110 Service worker JS would interfere with back button.

Security

• Fixed several low-key CSRF vulnerabilities.
• Fixed an issue where you could spam the password reset form.

API

• Deprecated the "currencies with code"-endpoint (see the API documentation).
• Add missing "order" field to budget.
• Add missing "rule_group_title" to rules.
• Attachment endpoint returns "upload_url" and "download_url" instead of "*_uri".

• ⚠️ This release features new LDAP libraries. Your mileage may vary. Make sure you back up everything. Firefly III may accidentally create a new account for you instead of reusing the old one. There is no option for LDAP filters yet.
• ⚠️ This release requires PHP 8.0

Fixed

• Issue 4997 Deleted transactions would get reimported.
• Issue 5100 Broken UI in v2.0 due to translation issues.
• Issue 5101 Text duplication
• Issue 5104 Date range fixes
• Issue 5109 Fixed LDAP configuration issues.
• Issue 5110 Service worker JS would interfere with back button.

Security

• Fixed several low-key CSRF vulnerabilities.

API

• Deprecated the "currencies with code"-endpoint (see the API documentation).
• Add missing "order" field to budget.
• Add missing "rule_group_title" to rules.
• Attachment endpoint returns "upload_url" and "download_url" instead of "*_uri".

⚠️ This release features new LDAP libraries. Your mileage may vary. Make sure you back up everything. Firefly III may accidentally create a new account for you instead of reusing the old one. There is no option for LDAP filters yet.

⚠️ This release requires PHP 8.0

Please refer to the documentation and support channels if you run into problems:

• Gitter.im
• Twitter
• GitHub Issues
• GitHub Discussions

Added

• A few new pages for the new v2 layout. Thanks @alex6480!
• Added a new currency, thanks @kasperkls02!
• You can now manage loans and debts a little better, see also the documentation for help.
• Some screenshots are now in the GitHub repository for better management, thanks @Flightkick!
• @LBreda has added a service worker and updated icons, thanks!

Changed

• @hoshsadiq has added all PHP requirements to the composer file, thanks!
• A better cache routine for layout v2 pages.
• All LDAP libraries have been upgraded.
• New issue templates and help text for easier GitHub support.
• First preparations for multi-administration and group membership options.
• The search will return nothing if you submit invalid values, instead of everything.

Removed

• All telemetry options have been removed.

Fixed

• Issue 4894 Bad number comparison
• Issue 4987 Budgeted amount includes inactive budgets
• Issue 4988 Can't select liability account from imported transactions
• #5042 HTTP 500 when creating Personal Access Token or OAuth Client
• Various Sonarqube issues, thanks @hazma-fadil!
• Correct menu display, thanks @vonsogt!
• The IBAN validator will filter special characters.
• In some cases, piggy banks would report being full or empty while this was not actually the case.
• Various other bugs and minor issues.

Security

• Feature to be able to rebuild Docker images and show security warnings in new builds.
• CVE-2021-3663 A missing rate limiter makes brute-forcing the login easy.
• It also fixes CVE-2021-3728, CVE-2021-3729 and CVE-2021-3730, all variations of the same security vulnerability: some actions in Firefly III were vulnerable to CSRF.

API

• You can disable webhooks with an extra field in API submissions.
• There is a static cron token (see .env.example) which is useful for Docker.
• A better endpoint to move transactions around, see api-docs.firefly-iii.org.

Prerelease of 5.6.0. Handle with care.

Security

• This version of Firefly III fixes CVE-2021-3663

First alpha of the new release. For a full overview of the changes, please see the changelog.

⚠️ On July 1st 2021 the Docker tag will change to fireflyiii/core. You can already start using the new tag.

Security

• This version of Firefly III fixes a security vulnerability in the export routine. You are advised to upgrade as soon as possible. All credits to the excellent @oomb.

⚠️ On July 1st 2021 the Docker tag will change to fireflyiii/core. You can already start using the new tag.

Fixed

• Issue 4707 issue 4732 Rule tests were broken, and matching transactions were not visible.
• Issue 4729 Top boxes were no longer visible.
• Issue 4730 Second split transaction had today's date
• Issue 4734 Potential fixes for PostgreSQL and PHP 7.4.18.
• Issue 4739 Was not possible to change liability type.

Changed

• Issue 4708 When searching for the external ID, Firefly III will now only return the exact match.

Fixed

• Issue 4545 Rare but annoying issue with PostgreSQL increments will be repaired during image boot time. Thanks @jaylenw!
• Issue 4710 Some rule actions could not handle liabilities.
• Issue 4715 Fixed some titles.
• Issue 4720 Could not remove a split in the new layout.

This update fixes some of the more annoying issues in the new experimental v2 layout (see also GitHub), but some minor other issues as well.

Fixed

• Dashboard preferences would some times retain old or bad data.

API

• Issue 4697 Submitting an existing account with an account number only would store it as a new account.
• Issue 4706 Account interest was a float and not a string.
• Store Budget API call would not properly handle auto budgets.

This update fixes some of the more annoying issues in the new experimental v2 layout (see also GitHub), but some minor other issues as well.

Fixed

• Issue 4656 issue 4660 Various fixes in the v2 layout.
• Issue 4663 It was possible to assign a budget to a transfer.
• Issue 4664 Null pointer in bulk editor
• Issue 4668 Inactive rule groups would not be listed.

Firefly III features a new experimental layout that I'm currently building. You can enable it by setting environment variable FIREFLY_III_LAYOUT=v2. Check out GitHub for the announcement and status updates.

Added

• Issue 4627 The search and rule engine can search for any transaction with any bill or with no bill at all. Thanks, @devfaz!

Fixed

• Issue 4625 Old MySQL servers would choke on the migrations.
• Issue 4625 Some arrays are null when Firefly III starts for the first time.
• Issue 4628 Every transaction appeared to have attachments.
• Issue 4635 Export command ignores your dates. Thanks for the suggested fix, @urquilla!
• Issue 4646 Empty select list

Firefly III features a new experimental layout that I'm currently building. You can enable it by setting environment variable FIREFLY_III_LAYOUT=v2. Check out GitHub for the announcement and status updates. This release features an update API version. Check out the difference.

Fixed

• Issue 4593 Could not change or update recurring repetition data.
• Issue 4596 The error handler mailer mails about too many things.
• Issue 4603 Call to bad RSA method.
• Issue 4607 Bad code in set source / set destination rule actions meant that it would not fire in some cases.

Security

• Issue 4616 Firefly III has some extra security-related headers.

API

• Issue 4600 Sometimes empty amounts would not be properly picked up by the API.
• New endpoint to bulk update transactions.
• The chart API endpoint includes the time in the labels.

Changed

• Upgraded the render engine for the frontend.

Fixed

• Issue 4547 Call to bad function breaks several report.
• Issue 4545 Migration error in some cases, fixed with an if-statement.
• Issue 4557 LDAP configuration error in Docker image.
• Issue 4560 The account number would be stored in the BIC field, if the BIC field was set.
• Issue 4562 Hidden budgets were visible in v2.
• Issue 4567 Missing translation marked as intentionally missing.
• Issue 4570 It was impossible to set or change auto budgets.
• Issue 4571 New layout could be one day behind in some cases.
• Issue 4572 Link to reconcile page was broken.
• Issue 4574 500-error when trying to update bills.
• Issue 4575 Add new date-ranges to the v2 index page.
• Issue 4578 Fixed some time selection issues in v2.
• Issue 4582 Inactive budgets would still get automated budget limits.

API

This release features an update API version. Check out the difference.

• All endpoints that used to deliver dates (2021-04-27) will now deliver date time strings (2021-04-27T16:43:12+02:00).
• Issue 4566 Some API end points did not deliver the promised data.

Changed

• Upgraded the render engine for the frontend.

Fixed

• Issue 4547 Call to bad function breaks several report.
• Issue 4545 Migration error in some cases, fixed with an if-statement.
• Issue 4557 LDAP configuration error in Docker image.
• Issue 4560 The account number would be stored in the BIC field, if the BIC field was set.
• Issue 4562 Hidden budgets were visible in v2.
• Issue 4567 Missing translation marked as intentionally missing.
• Issue 4570 It was impossible to set or change auto budgets.
• Issue 4571 New layout could be one day behind in some cases.
• Issue 4572 Link to reconcile page was broken.
• Issue 4574 500-error when trying to update bills.
• Issue 4575 Add new date-ranges to the v2 index page.
• Issue 4578 Fixed some time selection issues in v2.
• Issue 4582 Inactive budgets would still get automated budget limits.

API

This release features an update API version. Check out the difference.

• All endpoints that used to deliver dates (2021-04-27) will now deliver date time strings (2021-04-27T16:43:12+02:00).
• Issue 4566 Some API end points did not deliver the promised data.

Added

• Issue 3717 The CSV export will also export all optional metadata.
• Issue 4007 The message returned when updating transactions using a rull will return the number of changed transactions.
• Issue 4334 Support for Portuguese! 🇵🇹
• Issue 4338 The recurring transactions calendar was off by one day, this is now fixed.
• Issue 4339 A bad redirect would send you to a 404.
• Issue 4340 Any date related rule actions and triggers will pick up the correct date from the transaction.
• Issue 4406 SQL errors when submitting large amounts to the budget overview are now fixed.
• Issue 4412 The cron job could show you a null pointer.
• Issue 4488 The Japanese Yen has been corrected to zero decimals.
• Issue 4503 When bills skip a moment the amounts in the overview would be off.
• Firefly III now supports webhooks.
• The search now also supports searching for transactions using id:123.

Changed

• OAuth settings are visible for LDAP users.
• If you set FIREFLY_III_LAYOUT=v2, Firefly III will show you the new layout on pages where it's available.
• A new favicon based on the future logo of Firefly III.
• ⚠️ The URL to call the cron job from the web has changed to api/v1/cron/[token here].

Deprecated

• The current layout will no longer receive fixes and changes.

Fixed

• Issue 4045 The error message for "amount missing" now has a look up value
• Issue 4055 The budget report crashed when opening.
• Issue 4060 The remote user guard would show a 500 error about type conversion.
• Issue 4070 Tagging recurring transactions would not work.
• Issue 4071 Selecting piggy banks in rules was broken.
• Issue 4074 Audit logging would break some Apache servers
• Issue 4098 Search reports "Firefly III found 50 transactions in x seconds" even when it only finds one.
• Issue 4108 Fix category update in bulk update.
• Issue 4112 Broken redirect after delete.
• Issue 4158 strtolower breaks some translations.
• Issue 4162 Stop processing does not stop other rules in rule group
• Issue 4169 Sorting by date on category Report sorts alphabetically instead.
• Issue 4175 Bad math in long periods.
• Issue 4186 Could not add translation link.
• Issue 4200 A rare null pointer exception when running rules.
• Issue 4207 Fix the "spent per day" box.
• Issue 4231 Inconsistent hiding of columns.
• Issue 4235 The info popup in the standard financial report does not apply report's account filter.
• Issue 4241 A broken chart works again.
• Issue 4520 RSA token generation is now PHP7/8 compatible.
• Issue 4529 Convert transaction routine was broken.
• PHP configurations that have "MB" as size indicator would be parsed badly.

API

⚠️ Lots of API changes, make sure you read the documentation. ⚠️

• Issue 4050 Updated Transaction Search API to set limit from user preferences
• Issue 4113 Piggy Bank API Deletes Some Piggy Metadata
• Issue 4122 Remove reconciliation accounts from autocomplete
• Issue 4195 User endpoint was broken.
• Issue 4199 Unable to update tags using API.
• Issue 4394 Storing budgets works again.
• Issue 4426 Storing accounts would lead to bad capitalization in liability type.
• Issue 4435 Storing piggy banks with object group information would fail.
• Users can submit almost any field without other fields changing as well.

Added

• Issue 3717 The CSV export will also export all optional metadata.
• Issue 4007 The message returned when updating transactions using a rull will return the number of changed transactions.
• Issue 4334 Support for Portuguese! 🇵🇹
• Issue 4338 The recurring transactions calendar was off by one day, this is now fixed.
• Issue 4339 A bad redirect would send you to a 404.
• Issue 4340 Any date related rule actions and triggers will pick up the correct date from the transaction.
• Issue 4406 SQL errors when submitting large amounts to the budget overview are now fixed.
• Issue 4412 The cron job could show you a null pointer.
• Issue 4488 The Japanese Yen has been corrected to zero decimals.
• Issue 4503 When bills skip a moment the amounts in the overview would be off.
• Firefly III now supports webhooks.
• The search now also supports searching for transactions using id:123.

Changed

• OAuth settings are visible for LDAP users.
• If you set FIREFLY_III_LAYOUT=v2, Firefly III will show you the new layout on pages where it's available.
• A new favicon based on the future logo of Firefly III.
• ⚠️ The URL to call the cron job from the web has changed to api/v1/cron/[token here].

Deprecated

• The current layout will no longer receive fixes and changes.

Fixed

• Issue 4045 The error message for "amount missing" now has a look up value
• Issue 4055 The budget report crashed when opening.
• Issue 4060 The remote user guard would show a 500 error about type conversion.
• Issue 4070 Tagging recurring transactions would not work.
• Issue 4071 Selecting piggy banks in rules was broken.
• Issue 4074 Audit logging would break some Apache servers
• Issue 4098 Search reports "Firefly III found 50 transactions in x seconds" even when it only finds one.
• Issue 4108 Fix category update in bulk update.
• Issue 4112 Broken redirect after delete.
• Issue 4158 strtolower breaks some translations.
• Issue 4162 Stop processing does not stop other rules in rule group
• Issue 4169 Sorting by date on category Report sorts alphabetically instead.
• Issue 4175 Bad math in long periods.
• Issue 4186 Could not add translation link.
• Issue 4200 A rare null pointer exception when running rules.
• Issue 4207 Fix the "spent per day" box.
• Issue 4231 Inconsistent hiding of columns.
• Issue 4235 The info popup in the standard financial report does not apply report's account filter.
• Issue 4241 A broken chart works again.
• Issue 4520 RSA token generation is now PHP7/8 compatible.
• Issue 4529 Convert transaction routine was broken.
• PHP configurations that have "MB" as size indicator would be parsed badly.

API

⚠️ Lots of API changes, make sure you read the documentation. ⚠️

• Issue 4050 Updated Transaction Search API to set limit from user preferences
• Issue 4113 Piggy Bank API Deletes Some Piggy Metadata
• Issue 4122 Remove reconciliation accounts from autocomplete
• Issue 4195 User endpoint was broken.
• Issue 4199 Unable to update tags using API.
• Issue 4394 Storing budgets works again.
• Issue 4426 Storing accounts would lead to bad capitalization in liability type.
• Issue 4435 Storing piggy banks with object group information would fail.
• Users can submit almost any field without other fields changing as well.

5.5.0-beta.3

Changelog