This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
ReleasePort's take
Moderate signalThe release mandates PHP 8.2.0 or newer and recommends upgrading to PHP 8.4+.
Why it matters: Enforces a minimum runtime version of PHP 8.2.0; consider adopting the recommended PHP 8.4+ for future compatibility.
Summary
AI summaryUpdates https://discord.gg/yZFtShAcKk, https://github.com/grokability/snipe-it/discussions, and Logging across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Includes unspecified security improvements encouraging upgrade. Includes unspecified security improvements encouraging upgrade. Source: granite4.1:30b@2026-06-13-audit Confidence: low |
— |
| Feature | Medium |
Adds markdown textarea custom fields for richer input options. Adds markdown textarea custom fields for richer input options. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Medium |
Introduces "Floater" company setting to control null‑company checkout behavior. Introduces "Floater" company setting to control null‑company checkout behavior. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Feature | Medium |
Adds QR codes for non‑asset entities (locations, etc.) in side info panel. Adds QR codes for non‑asset entities (locations, etc.) in side info panel. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Dependency | Critical |
Requires PHP 8.2.0 or greater; recommends PHP 8.4+. Requires PHP 8.2.0 or greater; recommends PHP 8.4+. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Performance | Medium |
Optimizes queries for custom asset report and models API endpoint, improving speed. Optimizes queries for custom asset report and models API endpoint, improving speed. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Fixes FD-55359 by adding CSS color validation. Fixes FD-55359 by adding CSS color validation. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Resolves FD-55710 by flattening EXIST queries for performance. Resolves FD-55710 by flattening EXIST queries for performance. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Adds optional clear asset name to quick scan check‑in/audit workflow. Adds optional clear asset name to quick scan check‑in/audit workflow. Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Corrects rendering issue on the general settings page (FD-55757). Corrects rendering issue on the general settings page (FD-55757). Source: llm_adapter@2026-06-13 Confidence: high |
— |
| Bugfix | Medium |
Addresses SCIM issues with Azure/Entra, including manager handling, email addresses, work addresses, and groups. Addresses SCIM issues with Azure/Entra, including manager handling, email addresses, work addresses, and groups. Source: llm_adapter@2026-06-13 Confidence: low |
— |
Full changelog
[!CAUTION]
This version of Snipe-IT REQUIRES PHP 8.2.0 or greater, 8.4+ recommended. PHP 8.2 is still in security release support until 31 Dec 2026, but let's not play that game
Happy Caturday, nerds!
This release largely addresses some SCIM issues stemming from the newly mappable fields from the last release (largely affecting Azure/Entra and Okta, since they both behave very differently), and a handful of security issues and general bugs, but we also added new markdown textarea custom fields.
We've also optimized a bunch of queries to speed custom asset report and the models API endpoint.
BUT ALSO - there's one new feature that we're excited about that may or may not matter to your workflow:
Feature: "Floater" company setting
We've always had two use cases for FMCS: folks who wanted null to be a sort of floater company where anything can be assigned to users without a company, and people who wanted null company to act as a pseudo company, where it was restricted to only fellow-null-company-ed things.
We now have a setting in Admin Settings > General > Treat items and users without company associations as floaters.
When disabled, items can only be checked out to targets without a company association if the item also has no company - null is treated as its own pseudo-company. When enabled, items from any company can be checked out to targets with no company assignment.
New QR Codes for Non-Assets
We also now include QR codes for things-other-than-assets (locations, etc). Those will generally show up in your side info-panel. They are not customizable at this point, they just serve as a simple way to, for example, scan the QR code on your phone from your laptop to continue your work on a mobile device. I'm sure we'll get tons of feedback on how people want those to work moving forward and we'll adjust accordingly.
SCIM Fixes
A lot of these fixes address Azure/Entra specifically, but we've improved support for managers, email addresses, user work addresses and groups.
Documentation
We're (still, always) working as quickly as we can to update the docs with new endpoints, new screenshots, all the new features, etc. We appreciate your patience. We're pretty proud of the work that's gone into our docs, but that also means every release means a bunch of places that need updates. We're working on it as fast as we can, but if there's something that isn't documented or you have a question about in the meantime, our GH Discussions or Discord are a great place to start.
Security
There are (as always) security improvements, so folks are encouraged to upgrade, even if none of the stuff we're excited about is stuff you're excited about.
What's Changed
- Fixed FD-55359 - adds CSS color validation by @snipe in https://github.com/grokability/snipe-it/pull/19097
- Fixed "not deployable" translation usage by @Godmartinz in https://github.com/grokability/snipe-it/pull/19102
- Fixed FD-55710 - flatten EXIST queries by @snipe in https://github.com/grokability/snipe-it/pull/19108
- Adds #19083 display name as an option for label field options by @Godmartinz in https://github.com/grokability/snipe-it/pull/19104
- 🎥 Fixed #19086 - added markdown textarea custom fields by @snipe in https://github.com/grokability/snipe-it/pull/19117
- Check in and delete by company via command line by @snipe in https://github.com/grokability/snipe-it/pull/19118
- Bump note length validation for supplier model by @marcusmoore in https://github.com/grokability/snipe-it/pull/19127
- Fixed #19128: Rendering on general settings page by @marcusmoore in https://github.com/grokability/snipe-it/pull/19132
- 🎥 Fixed #19133 - added optional clear asset name to quick scan checkin/audit by @snipe in https://github.com/grokability/snipe-it/pull/19135
- Accessories component blades by @snipe in https://github.com/grokability/snipe-it/pull/19140
- Updated consumables to use blade components by @snipe in https://github.com/grokability/snipe-it/pull/19141
- Components component blade by @snipe in https://github.com/grokability/snipe-it/pull/19142
- [FD-55583] Fixed google webhook check in notification by @Godmartinz in https://github.com/grokability/snipe-it/pull/19103
- Fix to SCIM companies, and some PHP errors around inheritance by @snipe in https://github.com/grokability/snipe-it/pull/19144
- Logging: Fixed FD-55757 - Added changed log meta to accessories and licenses by @snipe in https://github.com/grokability/snipe-it/pull/19160
- QR Codes: Added QR codes for non-assets by @snipe in https://github.com/grokability/snipe-it/pull/19158
- Labels: FD[55918] Fixes location not displaying on labels when assigned to. by @Godmartinz in https://github.com/grokability/snipe-it/pull/19161
- Auditing: Added try catch around sending notification by @marcusmoore in https://github.com/grokability/snipe-it/pull/19162
- Custom Asset Report: Fixed [RB-21669] - use subquery for action_date by @uberbrady in https://github.com/grokability/snipe-it/pull/19182
- SCIM: Fix address handling and work around Entra email changes by @uberbrady in https://github.com/grokability/snipe-it/pull/19183
- Fixed #19095 and #19096 - SCIM updates in Azure/Entra by @snipe in https://github.com/grokability/snipe-it/pull/19115
- Reporting: improve validation for item and target types by @marcusmoore in https://github.com/grokability/snipe-it/pull/19175
- Importer: allow rendering simple error messages by @marcusmoore in https://github.com/grokability/snipe-it/pull/19170
- FMCS/Console: Fixed #19166 scope check updates for multiple companies, adds floater by @snipe in https://github.com/grokability/snipe-it/pull/19167
Full Changelog: https://github.com/grokability/snipe-it/compare/v8.6.1...v8.6.2
Breaking Changes
- Minimum PHP version raised to 8.2.0 (8.4+ recommended); older versions no longer supported.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]