docs/release-notes/14/14-1-0/README.md
Release date: 2024-05-22
We released OpenProject 14.1.0. The release contains several bug fixes and we recommend updating to the newest version. In these Release Notes, we will give an overview of important feature changes. At the end, you will find a complete list of all changes and bug fixes.
OpenProject Cost Report functionality uses improper sanitization of user input. This can lead to Stored XSS via the header values of the report table. This attack requires the permissions "Edit work packages" as well as "Add attachments".
For more information, please see our security advisory.
We unfortunately can no longer provide the OpenProject app for the Univention app center due to incompatibility of their PostgreSQL version in app center 5.0. They have announced that a newer PostgreSQL version will be available in a newer version of the app center. This means that we are unable to provide new versions of OpenProject in the Univention app center. The last version available in the app center is OpenProject 13.4.1.
As OpenProject currently does not provide its own multi-container setup, the app is no longer upgradable. We recommend you switch to a docker- or packaged-based installation instead. Please use the integrated backup functionality to extract a backup from your installation. See the restoration guide on how to restore this backup to a new installation.
In the future, we are collaborating with Univention to provide a connector app for OpenProject, allowing you to integrate their IDM solution into an existing deployed OpenProject application.
In the all-in-one Dockerfile, up until now, both port 80 and 5432 (PostgreSQL database) were exposed by default. As we are also not exposing other services such as memcached, we removed the PostgreSQL port for consistency.
If you need to work on the database directly, you can still use the docker exec -it <container id> pg_dump command to e.g., access pg_dump.
It is now possible to export a Gantt view as PDF in the OpenProject Enterprise edition. This allows users to easily print Gantt charts in a nice design. Choose between different paper formats, set the column width, and specify whether the PDF file should display your work packages on a daily, monthly or quarterly basis.
Please note that we plan to further improve the PDF export of Gantt view in future releases.
This feature was requested by many in the Community and will be a great benefit, especially for organizations with many projects: OpenProject 14.1 allows you to add projects to favorites so that they can be found more quickly. We recently gave an overview in our blog of how exactly you can add projects to favorites or remove them from favorites – and where you can display them.
See our documentation to learn more about how to mark a project as favorite.
The Meetings module is currently being continuously improved. With OpenProject 14.1.:
Apart from these features that apply the Meetings module directly, the following changes concerning OpenProject meetings have been made:
Please note: On the project overview page and on the My page, the "+" button on the top right has been removed. However, new widgets can be added by project admins as usual if you hover at the border of an existing widget and click on the “+” there.
Read more about dynamic meetings in OpenProject.
Admins now are able to hide the attachment section in the Files tab. This setting can be changed both at an instance and project levels and is particularly useful for projects where users should only upload files via external storage, e.g. Nextcloud.
To make this possible Attachment and Files Storages settings were moved together under Files section, both in the instance administration and under project settings.
In connection with the feature above, activating file storages integrations was simplified. It is no longer required to active Files storages module under project settings. Instead, available file storages are visible under Project settings > Files > External file storages, as long as the user has Manage file storages in project permission.
Users can now create custom field of the type Link (URL). Remember to activate it for your project(s) and specific work package type for it to be displayed. The custom field type Link shows an error message if you type in an invalid URL.
Read more about custom fields.
Custom project lists can now not only be changed in order, but also saved as such. Additionally, you can change your own saved lists and save them again so that you do not have to start from scratch.
Read more on project lists.
With OpenProject 14.0, we released the feature to create a custom set of project attributes grouped in sections on the project overview page. With 14.1, you will additionally have a button to Manage project attributes on the project overview page.
If you use the OneDrive/SharePoint integration, you will now be shown a "no permission" message if you try to access a file for which you lack permission.
<!--more-->Apart from the features mentioned above, there have been a lot of other changes, smaller features and, of course, bug fixes for OpenProject 14.1:
<!-- Warning: Anything within the below lines will be automatically removed by the release script --> <!-- BEGIN AUTOMATED SECTION -->A very special thank you goes to our sponsors for features and improvements of this release:
Also a big thanks to our Community members for reporting bugs and helping us identify and provide fixes. Special thanks for reporting and finding bugs go to Marc Burk, Silas Kropf, and Hanley Loller.
Also thanks for finding and responsibly disclosing the CVE-2024-135224 vulnerability go to Sean Marpo. Thank you for reaching out to us and helping in identifying this issue.
Last but not least, we are very grateful for our very engaged translation contributors on Crowdin, who translated quite a few OpenProject strings! This release we would like to highlight user Syvert who has done an outstanding number of translations for the Norwegian language in recent weeks.
Would you like to help out with translations yourself? Then take a look at our translation guide and find out exactly how you can contribute. It is very much appreciated!