This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
ReleasePort's take
Moderate signalThe release v4.6.0 introduces several UI enhancements and new administrative features while adding a security improvement that blocks overly simple passwords.
Why it matters: Blocks overly simple passwords (severity 80) reduces credential‑guessing risk; developers, SREs, and security engineers should evaluate the impact on authentication flows.
Summary
AI summaryDrag & Drop reservations and restricted‑resource access control by group were added.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Blocks overly simple passwords using a defined list. Blocks overly simple passwords using a defined list. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds Drag & Drop for reservations. Adds Drag & Drop for reservations. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds group-based restricted resource access management. Adds group-based restricted resource access management. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds styling for reservation cells with complete participant lists. Adds styling for reservation cells with complete participant lists. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds configurable maximum reservations shown in monthly view. Adds configurable maximum reservations shown in monthly view. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds email display in reservation history. Adds email display in reservation history. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds group-based user deletion. Adds group-based user deletion. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds batch moderation capability. Adds batch moderation capability. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds server SQL time display in admin for debugging. Adds server SQL time display in admin for debugging. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Adds option to force password change if criteria are not met. Adds option to force password change if criteria are not met. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Low |
Allows WebP image format. Allows WebP image format. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Handles HTML tags in welcome message. Handles HTML tags in welcome message. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Ensures mail function UTF-8 compatibility with PHP 8.2. Ensures mail function UTF-8 compatibility with PHP 8.2. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Supports UTF‑8 characters in user CSV import. Supports UTF‑8 characters in user CSV import. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Ensures sessions close properly. Ensures sessions close properly. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes LDAP configuration issues. Fixes LDAP configuration issues. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Sets session start time based on server clock. Sets session start time based on server clock. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Corrects SQL queries. Corrects SQL queries. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Improves LDAP filter handling. Improves LDAP filter handling. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Returns to previous view after reservation. Returns to previous view after reservation. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Handles special characters when editing a reservation. Handles special characters when editing a reservation. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Allows managers to add participants to a reservation. Allows managers to add participants to a reservation. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Enables language change via flags. Enables language change via flags. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Displays the "Year All" view correctly. Displays the "Year All" view correctly. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Hides left menu by default. Hides left menu by default. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Shows site name in search and statistics pages. Shows site name in search and statistics pages. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Grants managers access to resource detail page. Grants managers access to resource detail page. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Adds "Do not notify beneficiary" checkbox. Adds "Do not notify beneficiary" checkbox. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Includes reservation log counter. Includes reservation log counter. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Fixes display of hour field in reservation form on Edge browser. Fixes display of hour field in reservation form on Edge browser. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
Full changelog
[Ajout] Drag & Drop des réservations - @JeromeDevome
[Ajout]Gestion des accès aux ressources restreintes par groupe - @JeromeDevome
[Ajout] Ajout du style des cellules associées à des réservations dont la liste des participants est complète - af1c971dc - @ynaessens
[Ajout] Définition du nombre maximal de réservations affichées dans la vue mensuelle via un paramètre configurable - 1a7e8cf41 & 36763442b - @JeromeDevome
[Ajout] Affichage des e-mails dans l’historique des réservations - 9e3ca3931 - @JeromeDevome
[Ajout] Suppression des utilisateurs par groupe - a9d472943 - @JeromeDevome
[Ajout] Modération par lot - 37fba38 - @JeromeDevome
[Ajout] Affichage de l’heure du serveur SQL dans l’administration pour le debug - f7c7865b3 - @JeromeDevome
[Ajout] Interdiction des mots de passe trop simples (selon une liste définie) - 89cc3b4c8 - @JeromeDevome
[Ajout] Option obligeant l’utilisateur à changer son mot de passe s’il ne répond pas aux critères définis - 89cc3b4c8 - @JeromeDevome
[Ajout] Autoriser format d'image WebP - 163bafcd2 -@JeromeDevome
[Correction] Prise en compte des balises HTML dans le message d’accueil - 739c15363 - @JeromeDevome
[Correction] Retour à la vue précédente après une réservation - acc2636f3 - @JeromeDevome
[Correction] Gestion des caractères spéciaux lors de l’édition d’une réservation - e32aacee3 - @JeromeDevome
[Correction] Ajout d’un participant par un gestionnaire - ec3bbe686 - @JeromeDevome
[Correction] Changement de langue via les drapeaux - b773092c8 - @JeromeDevome
[Correction] Affichage de la vue "Année All" - 396a4f4ce - @JeromeDevome
[Correction] Compatibilité UTF-8 de la fonction mail avec PHP 8.2 - d17288619 - @JeromeDevome
[Correction] Import CSV des utilisateurs avec caractères UTF-8 - c1f0d0c6c - @JeromeDevome
[Correction] Masquage du menu gauche par défaut - 11a2bac61 - @JeromeDevome
[Correction] Fermeture correcte des sessions - 67b9b3f11 - @JeromeDevome
[Correction] Affichage du nom du site dans la recherche et les statistiques - eb11092e6 - @JeromeDevome
[Correction] Configuration LDAP - bdffa931f - @JeromeDevome
[Correction] Accès à la fiche ressource pour le gestionnaire - 89774fd9d - @JeromeDevome
[Correction] Case "Ne pas notifier le bénéficiaire" - 4155da3eb - @JeromeDevome
[Correction] Compteur dans les logs de réservation - bdbbe7b5b - @JeromeDevome
[Correction] Heure de début de session basée sur l’heure du serveur - 55063df0f - @JeromeDevome
[Correction] Requêtes SQL - 9b9289843 & 26e167f2f - @JeromeDevome
[Correction] Affichage du champ heure dans le formulaire de réservation sous Edge - d48bb0476 - @JeromeDevome
[Correction] Filtre LDAP - dfcc3e9ff - @JeromeDevome
[Correction] Calcul des droits d'accès pour un administrateur de domaine - 6515a4eb8 & a4c0a94f6 - @ynaessens
[Correction] Gestion des performance (calcul +) sur Mois2_all - 09686e493 - @JeromeDevome
[Correction] Demande de compte - Identifiant par défaut email - 72dd3db55 - @JeromeDevome
[Correction] Ajout contrôle des droits de gestion pour les fichiers résa - d59e2ce1c - @JeromeDevome
[Correction] Sécurité SQL - 6489a81bc - @JeromeDevome
[Correction] Retour sur la bonne vue après supression d'un document dans la réservation - 429733f31 @JeromeDevome
[Modification] Mise à jour des fichiers de langue - @ynaessens & @JeromeDevome
[Modification] Refonte de l’envoi des e-mails - b47bedfbd - @JeromeDevome
[Modification] Réorganisation des fonctions d’envoi des e-mails dans l’administration - d5ea2771e - @JeromeDevome
[Modification] Ne pas afficher la popup d’informations si elle est vide - 46f759acc - @JeromeDevome
[Modification] Suppression des popups JS dans l’administration - b792661af & e315ceb2a & 7b1a208d1 - @JeromeDevome
[Modification] Amélioration des logs e-mail (erreurs SMTP, templates…) - 9e3ca3931 - @JeromeDevome
[Modification] Réorganisation des fonctions de sécurité - @JeromeDevome
[Modification] Gestion des jours fériés et des vacances par année - 3065c739e - @JeromeDevome
[Modification] Mise à jour des vacances scolaires 2026-2027 - 0be37c8c1 & 7fef7e0 - @JeromeDevome & @ynaessens
[Modification] Mise à jour des librairies PHP (Symfony, Twig, phpCAS, TCPDF, PHPMailer) - @JeromeDevome
[Modification] Mise à jour des librairies JS (pdfmake, DataTables, Ace Editor, select2) - @JeromeDevome
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]