Release OpenProject 13.0.8

Gemfile.lock

@@ -44,8 +44,8 @@ GIT
 
 GIT
   remote: https://github.com/opf/omniauth-openid_connect-providers.git
-  revision: 7559f44e70203f94572a90e1b4d1d1f8279cd40f
-  ref: 7559f44e70203f94572a90e1b4d1d1f8279cd40f
+  revision: c7e2498a8b093cfc5693d4960cae2e903a5e10cd
+  ref: c7e2498a8b093cfc5693d4960cae2e903a5e10cd
   specs:
     omniauth-openid_connect-providers (0.2.0)
       omniauth-openid-connect (>= 0.2.1)

Gemfile.modules

@@ -10,7 +10,7 @@ end
 
 gem 'omniauth-openid_connect-providers',
     git: 'https://github.com/opf/omniauth-openid_connect-providers.git',
-    ref: '7559f44e70203f94572a90e1b4d1d1f8279cd40f'
+    ref: 'c7e2498a8b093cfc5693d4960cae2e903a5e10cd'
 
 gem 'omniauth-openid-connect',
     git: 'https://github.com/opf/omniauth-openid-connect.git',

README.md

@@ -49,7 +49,7 @@ will keep our community secure. If you happen to come across a security issue we
 you to disclose it to us privately to allow our users and community enough time to
 upgrade. Security issues will always take precedence over anything else in the pipeline.
 
-For more information on how to disclose a security vulnerability, [please see this page](docs/development/security/README.md).
+For more information on how to disclose a security vulnerability, [please see this page](docs/security-and-privacy/statement-on-security/README.md).
 
 ## License
 

SECURITY.md

@@ -1 +1 @@
-Please find our statement on security in this document: https://www.openproject.org/docs/development/security/
+Please find our statement on security in this document: https://www.openproject.org/docs/security-and-privacy/statement-on-security/

app/models/user.rb

@@ -29,6 +29,7 @@
 require 'digest/sha1'
 
 class User < Principal
+  VALID_NAME_REGEX = /\A[\d\p{Alpha}\p{Mark}\p{Space}\p{Emoji}'’´\-_.,@()+&*–]+\z/
   CURRENT_USER_LOGIN_ALIAS = 'me'.freeze
   USER_FORMATS_STRUCTURE = {
     firstname_lastname: %i[firstname lastname],
@@ -122,7 +123,10 @@ def self.blocked_condition(blocked)
   # Login must contain letters, numbers, underscores only
   validates :login, format: { with: /\A[a-z0-9_\-@.+ ]*\z/i }
   validates :login, length: { maximum: 256 }
+
   validates :firstname, :lastname, length: { maximum: 256 }
+  validates :firstname, :lastname, format: { with: VALID_NAME_REGEX, allow_blank: true }
+
   validates :mail, email: true, unless: Proc.new { |user| user.mail.blank? }
   validates :mail, length: { maximum: 256, allow_nil: true }
 

config/locales/crowdin/bg.yml

@@ -1862,7 +1862,7 @@ bg:
   label_nothing_display: "Нищо за показване"
   label_nobody: "nobody"
   label_not_found: 'not found'
-  label_none: "none"
+  label_none: "никой"
   label_none_parentheses: "(none)"
   label_not_contains: "doesn't contain"
   label_not_equals: "is not"

config/locales/crowdin/ca.yml

@@ -130,7 +130,7 @@ ca:
         Afegeix un filtre RFC4515 opcional per aplicar els resultats retornats per usuaris filtrats en el LDAP.
         Això, pot ser utilitzat per a restringir el set d'usuaris que OpenProject troba per autentificar i agrupar la sincronització.
       filter_string_concat: |
-        OpanProject sempre filtre segons l'atribut d'inici de sessió subministrat per l'usuari per tal d'identificar el registre. Si has subministrat un filtre aquí, serà encadenat amb un "I". Per defecte, un filtre catch-all (objectClass=*) serà utilitzat.
+        OpenProject sempre filtre segons l'atribut d'inici de sessió subministrat per l'usuari per tal d'identificar el registre. Si heu proporcionat un filtre aquí, serà encadenat amb un "I". Per defecte, un filtre catch-all (objectClass=*) serà utilitzat.
       onthefly_register: |
         Si actives aquesta casella, OpenProject automàticament crearà nous usuaris a partir de les seves entrades LDAP durant la seva primera autentificació a OpenProject.
         Deixa-la desactivada si sols voleu permetre a comptes existents a OpenProject que s'autentifiquin via LDAP!
@@ -176,7 +176,7 @@ ca:
     label_no_color: "Sense color"
     label_properties: "Propietats"
     label_really_delete_color: >
-      Estàs segur que vols eliminar el següent color? Els tipus amb aquest color no s'eliminaràn.
+      Esteu segur que voleu suprimir el següent tipus de projecte? Els projectes amb aquest tipus no se suprimiran.
   custom_actions:
     actions:
       name: "Accions"
@@ -1806,7 +1806,7 @@ ca:
   label_max_size: "Mida màxima"
   label_me: "jo mateix"
   label_member_new: "Nou membre"
-  label_member_all_admin: "(Tots els roles a causa de l'estat d'administrador)"
+  label_member_all_admin: "(Tots els rols a causa de l'estat d'administrador)"
   label_member_plural: "Membres"
   lable_membership_added: 'Membre afegit'
   lable_membership_updated: 'Membre actualitzat'

config/locales/crowdin/cs.yml

@@ -455,7 +455,7 @@ cs:
         account: "Účet"
         attr_firstname: "Jméno (atribut)"
         attr_lastname: "Příjmení (atribut)"
-        attr_login: "Uživatelské jméno (atribut)"
+        attr_login: "Atribut uživatelského jména"
         attr_mail: "Email (atribut)"
         base_dn: "Base DN"
         host: "Host"
@@ -981,7 +981,7 @@ cs:
       created_by_on_time_entry: "time logged by %{user} on %{datetime}"
       created_on: "vytvořeno dne %{datetime}"
       created_on_time_entry: "time logged on %{datetime}"
-      updated_by_on: "Aktualizováno uživatelem {{user}} dne {{date}}"
+      updated_by_on: "Aktualizováno uživatelem %{user} dne %{datetime}"
       updated_by_on_time_entry: "logged time updated by %{user} on %{datetime}"
       updated_on: "aktualizováno dne %{datetime}"
       updated_on_time_entry: "logged time updated on %{datetime}"
@@ -1426,7 +1426,7 @@ cs:
     work_package_edit: 'Pracovní balíček upraven'
     work_package_note: 'Poznámka k pracovnímu balíčku přidána'
     title:
-      project: "Projekt {name}"
+      project: "Projekt %{name}"
       subproject: "Podprojekt: %{name}"
   export:
     your_work_packages_export: "Export pracovních balíčků"
@@ -1638,7 +1638,7 @@ cs:
   label_available_project_versions: "Dostupné verze"
   label_available_project_work_package_categories: "Dostupné kategorie pracovních balíčků"
   label_available_project_work_package_types: "Dostupné kategorie pracovních balíčků"
-  label_available_projects: "Available projects"
+  label_available_projects: "Dostupné projekty"
   label_api_documentation: "API dokumentace"
   label_backup: "Záloha"
   label_between: "mezi"
@@ -1936,7 +1936,7 @@ cs:
   label_permissions_report: "Přehled oprávnění"
   label_personalize_page: "Přizpůsobit tuto stránku"
   label_placeholder_user: "Placeholder uživatel"
-  label_placeholder_user_new: "Nový placeholder uživatel"
+  label_placeholder_user_new: ""
   label_placeholder_user_plural: "Placeholder uživatelé"
   label_planning: "Plánování"
   label_please_login: "Přihlaste se prosím"

config/locales/crowdin/de.yml

@@ -927,7 +927,7 @@ de:
       custom_field: "Benutzerdefiniertes Feld"
       'doorkeeper/application': "OAuth-Anwendung"
       forum: "Forum"
-      global_role: "Global role"
+      global_role: "Globale Rolle"
       group: "Gruppe"
       member: "Mitglied"
       news: "Neuigkeiten"
@@ -1585,13 +1585,13 @@ de:
   label_ldap_auth_source: "LDAP-Verbindung"
   label_ldap_auth_source_plural: "LDAP-Verbindungen"
   label_authentication: "Authentifizierung"
-  label_available_global_roles: "Available global roles"
+  label_available_global_roles: "Verfügbare globale Rollen"
   label_available_project_forums: "Verfügbare Foren"
   label_available_project_repositories: "Verfügbare Projektarchive"
   label_available_project_versions: "Verfügbare Versionen"
   label_available_project_work_package_categories: "Verfügbare Arbeitspaket-Kategorien"
   label_available_project_work_package_types: "Verfügbare Arbeitspaket-Typen"
-  label_available_projects: "Available projects"
+  label_available_projects: "Verfügbare Projekte"
   label_api_documentation: "API-Dokumentation"
   label_backup: "Backup"
   label_between: "zwischen"

config/locales/crowdin/fr.yml

@@ -517,7 +517,7 @@ fr:
           true: "public"
           false: "privé"
         queries: "Requêtes"
-        status_code: 'État du projet'
+        status_code: 'Statut du projet'
         status_explanation: 'Description du statut du projet'
         status_codes:
           not_started: 'Non démarré'
@@ -1008,7 +1008,7 @@ fr:
     created_at: "Créé le"
     custom_options: "Valeurs possibles"
     custom_values: "Champs personnalisés"
-    date: "date"
+    date: "Date"
     default_columns: "Colonnes par défaut"
     description: "Description"
     derived_due_date: "Date de fin dérivée"
@@ -1665,7 +1665,7 @@ fr:
   label_custom_field_default_type: "Type défaut"
   label_custom_style: "Apparence"
   label_database_version: "Version de PostgreSQL"
-  label_date: "date"
+  label_date: "Date"
   label_date_and_time: "Date et heure"
   label_date_format: "Format de date"
   label_date_from: "De"
@@ -2338,7 +2338,7 @@ fr:
   permission_add_work_package_notes: "Ajouter des notes"
   permission_add_work_packages: "Ajouter des lots de travaux"
   permission_add_messages: "Poster des messages"
-  permission_add_project: "Create projects"
+  permission_add_project: "Créer des projets"
   permission_archive_project: "Archiver le projet"
   permission_create_user: "Créer des utilisateurs"
   permission_manage_user: "Modifier les utilisateurs"
@@ -2351,7 +2351,7 @@ fr:
   permission_comment_news: "Commenter les actualités"
   permission_commit_access: "Accès au dépôt en lecture/écriture (« commit »)"
   permission_copy_projects: "Copier des projets"
-  permission_create_backup: "Create backups"
+  permission_create_backup: "Créer des sauvegardes"
   permission_delete_work_package_watchers: "Supprimer des observateurs"
   permission_delete_work_packages: "Supprimer des lots de travaux"
   permission_delete_messages: "Supprimer des messages"
@@ -2608,7 +2608,7 @@ fr:
   setting_consent_decline_mail: "Adresse mail de contact de l'accord"
   setting_cross_project_work_package_relations: "Autoriser les relations entre lots de travaux de projets différents"
   setting_first_week_of_year: "La première semaine de l'année contient"
-  setting_date_format: "date"
+  setting_date_format: "Date"
   setting_default_language: "Langage par défaut"
   setting_default_projects_modules: "Modules activés par défaut pour les nouveaux projets"
   setting_default_projects_public: "Les nouveaux projets sont publics par défaut"

config/locales/crowdin/js-ar.yml

@@ -1160,9 +1160,11 @@ ar:
       hour:
         one: "1 h"
         other: "%{count} h"
+        zero: "0 h"
       day:
         one: "%{count} يوم"
         other: "%{count} يوم"
+        zero: "0 days"
     zen_mode:
       button_activate: 'Activate zen mode'
       button_deactivate: 'Deactivate zen mode'

config/locales/crowdin/js-cs.yml

@@ -348,7 +348,7 @@ cs:
               new_features_html: >
                 The release contains various new features and improvements: <br> <ul class="%{list_styling_class}"> <li>Baseline comparison for easy tracking of changes.</li> <li>PDF export for reports on work plans.</li> <li>Subscribe to project calendars via URL (iCalendar).</li> <li>Project folders with document templates for the Nextcloud integration.</li> <li>Localized seeding of all seed data.</li> <li>Global modules are listed on new index pages.</li> </ul>
     ical_sharing_modal:
-      title: "Subscribe to calendar"
+      title: "Přihlásit kalendář k odběru"
       inital_setup_error_message: "Při načítání dat došlo k chybě."
       description: "You can use the URL (iCalendar) to subscribe to this calendar in an external client and view up-to-date work package information from there."
       warning: "Please don't share this URL with other users. Anyone with this link will be able to view work package details without an account or password."
@@ -416,7 +416,7 @@ cs:
     label_filename: "Soubor"
     label_filesize: "Velikost"
     label_general: "Obecné"
-    label_global_roles: "Global roles"
+    label_global_roles: "Globální role"
     label_greater_or_equal: ">="
     label_group: 'Skupina'
     label_group_by: "Seskupit podle"
@@ -530,7 +530,7 @@ cs:
     label_add_attachments: "Připojit soubory"
     label_formattable_attachment_hint: "Připojit a propojit soubory smazáním tohoto pole nebo vložením ze schránky."
     label_remove_file: "Odstranit %{fileName}"
-    label_remove_watcher: "Odstranit pozorovatele %{name}"
+    label_remove_watcher: "Odstranit sledujícího %{name}"
     label_remove_all_files: Odstranit všechny soubory
     label_add_description: "Přidat popis pro %{file}"
     label_upload_notification: "Nahrávám soubory..."
@@ -590,7 +590,7 @@ cs:
       no_unread: "Žádná nepřečtená oznámení"
       reasons:
         mentioned: 'zmíněn'
-        watched: 'pozorovatel'
+        watched: 'sledovatel'
         assigned: 'Řešitel'
         responsible: 'Odpovědný'
         created: 'Vytvořeno'
@@ -606,7 +606,7 @@ cs:
         property_today: 'je dnes'
         property_is: 'is in %{difference_in_days}'
         property_was: 'was %{difference_in_days} ago'
-        property_is_deleted: 'byl smazán'
+        property_is_deleted: 'is deleted'
         upsale:
           title: 'Upozornění na datum'
           description: 'With date alerts, you will be notified of upcoming start or finish dates so that you never miss or forget an important deadline.'
@@ -675,7 +675,7 @@ cs:
           work_package_scheduled: 'Všechny změny data'
         global:
           immediately:
-            title: 'Účast'
+            title: 'Participace'
             description: 'Upozornění pro všechny aktivity v pracovních balíčcích, do kterých jste zapojeni (Řešitel, odpovědný nebo sledující).'
           delayed:
             title: 'Neúčast'
@@ -782,7 +782,7 @@ cs:
     watchers:
       label_loading: načítám sledující...
       label_error_loading: Při načítání pozorovatelů došlo k chybě
-      label_search_watchers: Hledat pozorovatele
+      label_search_watchers: Hledat sledující
       label_add: Přidat sledující
       label_discard: Zrušit výběr
       typeahead_placeholder: Hledání možných přihlížejících

config/locales/crowdin/js-fr.yml

@@ -677,7 +677,7 @@ fr:
             description: 'Notifications pour toute activité sur les lots de travaux vous concernant (assigné, responsable ou observateur).'
           delayed:
             title: 'Non participants'
-            description: 'Notifications additionnelles lors d''activité sur tous les projects.'
+            description: 'Notifications additionnelles lors d''activités sur tous les projets.'
           date_alerts:
             title: 'Alarmes'
             description: 'Notifications automatiques lorsque des dates importantes approchent pour les lots de travaux ouverts vous concernant (assigné, responsable ou observateur).'

config/locales/crowdin/js-sr.yml

@@ -95,7 +95,7 @@ sr:
     button_save: "Save"
     button_settings: "Settings"
     button_uncheck_all: "Uncheck all"
-    button_update: "Ažuriranje"
+    button_update: "Ažuriraj"
     button_export-pdf: "Download PDF"
     button_export-atom: "Download Atom"
     button_create: "Create"

config/locales/crowdin/js-zh-CN.yml

@@ -107,7 +107,7 @@ zh-CN:
       remove_from_list: '从列表中移除卡'
     caption_rate_history: "费率历史记录"
     clipboard:
-      browser_error: "您的浏览器不支持复制到剪贴板。请手动复制：%{content}。"
+      browser_error: "您的浏览器不支持复制到剪贴板，请手动复制：%{content}"
       copied_successful: "成功复制到剪贴板！"
     chart:
       type: '图表类型'

config/locales/crowdin/ka.yml

@@ -463,7 +463,7 @@ ka:
       changeset:
         repository: "Repository"
       color:
-        hexcode: "Hex code"
+        hexcode: "თექვსმეტობითი კოდი"
       comment:
         commented: "კომენტარით" #an object that this comment belongs to
       custom_action:
@@ -834,7 +834,7 @@ ka:
           attributes:
             user_id:
               not_allowed_to_view: "is not allowed to view this resource."
-              locked: "is locked."
+              locked: "დაბლოკილია."
         wiki_page:
           error_conflict: "The wiki page has been updated by someone else while you were editing it."
           attributes:
@@ -971,7 +971,7 @@ ka:
       updated_by_on_time_entry: "logged time updated by %{user} on %{datetime}"
       updated_on: "updated on %{datetime}"
       updated_on_time_entry: "logged time updated on %{datetime}"
-      parent_without_of: "Subproject"
+      parent_without_of: "ქვეპროექტი"
       parent_no_longer: "No longer subproject of"
       time_entry:
         hour:
@@ -2341,7 +2341,7 @@ ka:
   permission_add_project: "Create projects"
   permission_archive_project: "Archive project"
   permission_create_user: "Create users"
-  permission_manage_user: "Edit users"
+  permission_manage_user: "მომხმარებლების ჩასწორება"
   permission_manage_placeholder_user: "Create, edit, and delete placeholder users"
   permission_add_subprojects: "Create subprojects"
   permission_add_work_package_watchers: "Add watchers"
@@ -2360,7 +2360,7 @@ ka:
   permission_delete_timelines: "Delete timelines"
   permission_delete_wiki_pages: "Delete wiki pages"
   permission_delete_wiki_pages_attachments: "Delete attachments"
-  permission_edit_work_package_notes: "Edit notes"
+  permission_edit_work_package_notes: "შენიშვნების ჩასწორება"
   permission_edit_work_packages: "Edit work packages"
   permission_edit_messages: "Edit messages"
   permission_edit_own_work_package_notes: "Edit own notes"
@@ -2392,7 +2392,7 @@ ka:
   permission_move_work_packages: "Move work packages"
   permission_protect_wiki_pages: "Protect wiki pages"
   permission_rename_wiki_pages: "Rename wiki pages"
-  permission_save_queries: "Save views"
+  permission_save_queries: "ხედების შენახვა"
   permission_select_custom_fields: "Select custom fields"
   permission_select_project_modules: "Select project modules"
   permission_manage_types: "Select types"
@@ -2436,7 +2436,7 @@ ka:
   project_module_forums: "ფორუმები"
   project_module_work_package_tracking: "Work packages"
   project_module_news: "სიახლეები"
-  project_module_repository: "Repository"
+  project_module_repository: "რეპოზიტორია"
   project_module_wiki: "ვიკი"
   query:
     attribute_and_direction: "%{attribute} (%{direction})"